qfai 0.2.6 → 0.2.9

package/dist/cli/index.mjs

@@ -137,8 +137,8 @@ function report(copied, skipped, dryRun, label) {
 }
 
 // src/cli/commands/report.ts
-import { mkdir as mkdir2, readFile as readFile8, writeFile } from "fs/promises";
-import path9 from "path";
+import { mkdir as mkdir2, readFile as readFile10, writeFile } from "fs/promises";
+import path10 from "path";
 
 // src/core/config.ts
 import { readFile } from "fs/promises";
@@ -149,7 +149,6 @@ var defaultConfig = {
     specDir: ".qfai/spec",
     decisionsDir: ".qfai/spec/decisions",
     scenariosDir: ".qfai/spec/scenarios",
-    rulesDir: ".qfai/rules",
     contractsDir: ".qfai/contracts",
     uiContractsDir: ".qfai/contracts/ui",
     apiContractsDir: ".qfai/contracts/api",
@@ -173,7 +172,8 @@ var defaultConfig = {
     traceability: {
       brMustHaveSc: true,
       scMustTouchContracts: true,
-      allowOrphanContracts: false
+      allowOrphanContracts: false,
+      unknownContractIdSeverity: "error"
     }
   },
   output: {
@@ -248,13 +248,6 @@ function normalizePaths(raw, configPath, issues) {
       configPath,
       issues
     ),
-    rulesDir: readString(
-      raw.rulesDir,
-      base.rulesDir,
-      "paths.rulesDir",
-      configPath,
-      issues
-    ),
     contractsDir: readString(
       raw.contractsDir,
       base.contractsDir,
@@ -379,6 +372,13 @@ function normalizeValidation(raw, configPath, issues) {
         "validation.traceability.allowOrphanContracts",
         configPath,
         issues
+      ),
+      unknownContractIdSeverity: readTraceabilitySeverity(
+        traceabilityRaw?.unknownContractIdSeverity,
+        base.traceability.unknownContractIdSeverity,
+        "validation.traceability.unknownContractIdSeverity",
+        configPath,
+        issues
       )
     }
   };
@@ -458,6 +458,20 @@ function readFailOn(value, fallback, label, configPath, issues) {
   }
   return fallback;
 }
+function readTraceabilitySeverity(value, fallback, label, configPath, issues) {
+  if (value === "warning" || value === "error") {
+    return value;
+  }
+  if (value !== void 0) {
+    issues.push(
+      configIssue(
+        configPath,
+        `${label} \u306F warning|error \u306E\u3044\u305A\u308C\u304B\u3067\u3042\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059\u3002`
+      )
+    );
+  }
+  return fallback;
+}
 function readOutputFormat(value, fallback, label, configPath, issues) {
   if (value === "text" || value === "json" || value === "github") {
     return value;
@@ -498,7 +512,7 @@ function isRecord(value) {
 }
 
 // src/core/report.ts
-import { readFile as readFile7 } from "fs/promises";
+import { readFile as readFile9 } from "fs/promises";
 
 // src/core/discovery.ts
 import path6 from "path";
@@ -587,13 +601,15 @@ function isSpecFile(filePath) {
 }
 
 // src/core/ids.ts
-var ID_PATTERNS = {
-  SPEC: /\bSPEC-[A-Z0-9-]+\b/g,
-  BR: /\bBR-[A-Z0-9-]+\b/g,
-  SC: /\bSC-[A-Z0-9-]+\b/g,
-  UI: /\bUI-[A-Z0-9-]+\b/g,
-  API: /\bAPI-[A-Z0-9-]+\b/g,
-  DATA: /\bDATA-[A-Z0-9-]+\b/g
+var ID_PREFIXES = ["SPEC", "BR", "SC", "UI", "API", "DATA"];
+var STRICT_ID_PATTERNS = {
+  SPEC: /\bSPEC-\d{4}\b/g,
+  BR: /\bBR-\d{4}\b/g,
+  SC: /\bSC-\d{4}\b/g,
+  UI: /\bUI-\d{4}\b/g,
+  API: /\bAPI-\d{4}\b/g,
+  DATA: /\bDATA-\d{4}\b/g,
+  ADR: /\bADR-\d{4}\b/g
 };
 var LOOSE_ID_PATTERNS = {
   SPEC: /\bSPEC-[A-Za-z0-9_-]+\b/gi,
@@ -601,16 +617,17 @@ var LOOSE_ID_PATTERNS = {
   SC: /\bSC-[A-Za-z0-9_-]+\b/gi,
   UI: /\bUI-[A-Za-z0-9_-]+\b/gi,
   API: /\bAPI-[A-Za-z0-9_-]+\b/gi,
-  DATA: /\bDATA-[A-Za-z0-9_-]+\b/gi
+  DATA: /\bDATA-[A-Za-z0-9_-]+\b/gi,
+  ADR: /\bADR-[A-Za-z0-9_-]+\b/gi
 };
 function extractIds(text, prefix) {
-  const pattern = ID_PATTERNS[prefix];
+  const pattern = STRICT_ID_PATTERNS[prefix];
   const matches = text.match(pattern);
   return unique(matches ?? []);
 }
 function extractAllIds(text) {
   const all = [];
-  Object.keys(ID_PATTERNS).forEach((prefix) => {
+  ID_PREFIXES.forEach((prefix) => {
     all.push(...extractIds(text, prefix));
   });
   return unique(all);
@@ -631,7 +648,7 @@ function unique(values) {
   return Array.from(new Set(values));
 }
 function isValidId(value, prefix) {
-  const pattern = ID_PATTERNS[prefix];
+  const pattern = STRICT_ID_PATTERNS[prefix];
   const strict = new RegExp(pattern.source);
   return strict.test(value);
 }
@@ -644,8 +661,8 @@ import { readFile as readFile2 } from "fs/promises";
 import path7 from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 async function resolveToolVersion() {
-  if ("0.2.6".length > 0) {
-    return "0.2.6";
+  if ("0.2.9".length > 0) {
+    return "0.2.9";
   }
   try {
     const packagePath = resolvePackageJsonPath();
@@ -665,8 +682,50 @@ function resolvePackageJsonPath() {
 
 // src/core/validators/contracts.ts
 import { readFile as readFile3 } from "fs/promises";
+
+// src/core/contracts.ts
 import path8 from "path";
 import { parse as parseYaml2 } from "yaml";
+function parseStructuredContract(file, text) {
+  const ext = path8.extname(file).toLowerCase();
+  if (ext === ".json") {
+    return JSON.parse(text);
+  }
+  return parseYaml2(text);
+}
+function extractUiContractIds(doc) {
+  const id = typeof doc.id === "string" ? doc.id : "";
+  return extractIds(id, "UI");
+}
+function extractApiContractIds(doc) {
+  const operationIds = /* @__PURE__ */ new Set();
+  collectOperationIds(doc, operationIds);
+  const ids = /* @__PURE__ */ new Set();
+  for (const operationId of operationIds) {
+    extractIds(operationId, "API").forEach((id) => ids.add(id));
+  }
+  return Array.from(ids);
+}
+function collectOperationIds(value, out) {
+  if (!value || typeof value !== "object") {
+    return;
+  }
+  if (Array.isArray(value)) {
+    for (const item of value) {
+      collectOperationIds(item, out);
+    }
+    return;
+  }
+  for (const [key, entry] of Object.entries(value)) {
+    if (key === "operationId" && typeof entry === "string") {
+      out.add(entry);
+      continue;
+    }
+    collectOperationIds(entry, out);
+  }
+}
+
+// src/core/validators/contracts.ts
 var SQL_DANGEROUS_PATTERNS = [
   { pattern: /\bDROP\s+TABLE\b/i, label: "DROP TABLE" },
   { pattern: /\bDROP\s+DATABASE\b/i, label: "DROP DATABASE" },
@@ -715,12 +774,13 @@ async function validateUiContracts(uiRoot) {
       "SC",
       "UI",
       "API",
-      "DATA"
+      "DATA",
+      "ADR"
     ]);
     if (invalidIds.length > 0) {
       issues.push(
         issue(
-          "QFAI_ID_INVALID_FORMAT",
+          "QFAI-ID-002",
           `ID \u30D5\u30A9\u30FC\u30DE\u30C3\u30C8\u304C\u4E0D\u6B63\u3067\u3059: ${invalidIds.join(", ")}`,
           "error",
           file,
@@ -729,30 +789,32 @@ async function validateUiContracts(uiRoot) {
         )
       );
     }
+    let doc;
     try {
-      const doc = parseYaml2(text);
-      const id = typeof doc.id === "string" ? doc.id : "";
-      if (!id.startsWith("UI-")) {
-        issues.push(
-          issue(
-            "QFAI-UI-001",
-            "UI \u5951\u7D04\u306E id \u306F UI- \u3067\u59CB\u307E\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059\u3002",
-            "error",
-            file,
-            "contracts.ui.id"
-          )
-        );
-      }
+      doc = parseStructuredContract(file, text);
     } catch (error2) {
       issues.push(
         issue(
-          "QFAI-UI-002",
-          `UI YAML \u306E\u89E3\u6790\u306B\u5931\u6557\u3057\u307E\u3057\u305F: ${formatError2(error2)}`,
+          "QFAI-CONTRACT-001",
+          `UI \u5951\u7D04\u30D5\u30A1\u30A4\u30EB\u306E\u89E3\u6790\u306B\u5931\u6557\u3057\u307E\u3057\u305F: ${file} (${formatError2(error2)})`,
           "error",
           file,
           "contracts.ui.parse"
         )
       );
+      continue;
+    }
+    const uiIds = extractUiContractIds(doc);
+    if (uiIds.length === 0) {
+      issues.push(
+        issue(
+          "QFAI-CONTRACT-002",
+          `UI \u5951\u7D04\u306B ID(UI-xxxx) \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093: ${file}`,
+          "error",
+          file,
+          "contracts.ui.id"
+        )
+      );
     }
   }
   return issues;
@@ -779,12 +841,13 @@ async function validateApiContracts(apiRoot) {
       "SC",
       "UI",
       "API",
-      "DATA"
+      "DATA",
+      "ADR"
     ]);
     if (invalidIds.length > 0) {
       issues.push(
         issue(
-          "QFAI_ID_INVALID_FORMAT",
+          "QFAI-ID-002",
           `ID \u30D5\u30A9\u30FC\u30DE\u30C3\u30C8\u304C\u4E0D\u6B63\u3067\u3059: ${invalidIds.join(", ")}`,
           "error",
           file,
@@ -793,29 +856,43 @@ async function validateApiContracts(apiRoot) {
         )
       );
     }
+    let doc;
     try {
-      const doc = parseStructured(file, text);
-      if (!doc || !hasOpenApi(doc)) {
-        issues.push(
-          issue(
-            "QFAI-API-001",
-            "OpenAPI \u5B9A\u7FA9\u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002",
-            "error",
-            file,
-            "contracts.api.openapi"
-          )
-        );
-      }
+      doc = parseStructuredContract(file, text);
     } catch (error2) {
       issues.push(
         issue(
-          "QFAI-API-002",
-          `API \u5B9A\u7FA9\u306E\u89E3\u6790\u306B\u5931\u6557\u3057\u307E\u3057\u305F: ${formatError2(error2)}`,
+          "QFAI-CONTRACT-001",
+          `API \u5951\u7D04\u30D5\u30A1\u30A4\u30EB\u306E\u89E3\u6790\u306B\u5931\u6557\u3057\u307E\u3057\u305F: ${file} (${formatError2(error2)})`,
           "error",
           file,
           "contracts.api.parse"
         )
       );
+      continue;
+    }
+    if (!hasOpenApi(doc)) {
+      issues.push(
+        issue(
+          "QFAI-API-001",
+          "OpenAPI \u5B9A\u7FA9\u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002",
+          "error",
+          file,
+          "contracts.api.openapi"
+        )
+      );
+    }
+    const apiIds = extractApiContractIds(doc);
+    if (apiIds.length === 0) {
+      issues.push(
+        issue(
+          "QFAI-CONTRACT-002",
+          `API \u5951\u7D04\u306B ID(API-xxxx) \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093: ${file}`,
+          "error",
+          file,
+          "contracts.api.id"
+        )
+      );
     }
   }
   return issues;
@@ -842,12 +919,13 @@ async function validateDataContracts(dataRoot) {
       "SC",
       "UI",
       "API",
-      "DATA"
+      "DATA",
+      "ADR"
     ]);
     if (invalidIds.length > 0) {
       issues.push(
         issue(
-          "QFAI_ID_INVALID_FORMAT",
+          "QFAI-ID-002",
           `ID \u30D5\u30A9\u30FC\u30DE\u30C3\u30C8\u304C\u4E0D\u6B63\u3067\u3059: ${invalidIds.join(", ")}`,
           "error",
           file,
@@ -877,13 +955,6 @@ function lintSql(text, file) {
   }
   return issues;
 }
-function parseStructured(file, text) {
-  const ext = path8.extname(file).toLowerCase();
-  if (ext === ".json") {
-    return JSON.parse(text);
-  }
-  return parseYaml2(text);
-}
 function hasOpenApi(doc) {
   return typeof doc.openapi === "string" && doc.openapi.length > 0;
 }
@@ -894,25 +965,165 @@ function formatError2(error2) {
   return String(error2);
 }
 function issue(code, message, severity, file, rule, refs) {
-  const issue5 = {
+  const issue6 = {
     code,
     severity,
     message
   };
   if (file) {
-    issue5.file = file;
+    issue6.file = file;
   }
   if (rule) {
-    issue5.rule = rule;
+    issue6.rule = rule;
   }
   if (refs && refs.length > 0) {
-    issue5.refs = refs;
+    issue6.refs = refs;
   }
-  return issue5;
+  return issue6;
 }
 
-// src/core/validators/scenario.ts
+// src/core/validators/ids.ts
+import { readFile as readFile5 } from "fs/promises";
+import path9 from "path";
+
+// src/core/contractIndex.ts
 import { readFile as readFile4 } from "fs/promises";
+async function buildContractIndex(root, config) {
+  const uiRoot = resolvePath(root, config, "uiContractsDir");
+  const apiRoot = resolvePath(root, config, "apiContractsDir");
+  const dataRoot = resolvePath(root, config, "dataContractsDir");
+  const [uiFiles, apiFiles, dataFiles] = await Promise.all([
+    collectUiContractFiles(uiRoot),
+    collectApiContractFiles(apiRoot),
+    collectDataContractFiles(dataRoot)
+  ]);
+  const index = {
+    ids: /* @__PURE__ */ new Set(),
+    idToFiles: /* @__PURE__ */ new Map(),
+    files: { ui: uiFiles, api: apiFiles, data: dataFiles },
+    structuredParseFailedFiles: /* @__PURE__ */ new Set()
+  };
+  await indexUiContracts(uiFiles, index);
+  await indexApiContracts(apiFiles, index);
+  await indexDataContracts(dataFiles, index);
+  return index;
+}
+async function indexUiContracts(files, index) {
+  for (const file of files) {
+    const text = await readFile4(file, "utf-8");
+    try {
+      const doc = parseStructuredContract(file, text);
+      extractUiContractIds(doc).forEach((id) => record(index, id, file));
+    } catch {
+      index.structuredParseFailedFiles.add(file);
+      extractIds(text, "UI").forEach((id) => record(index, id, file));
+    }
+  }
+}
+async function indexApiContracts(files, index) {
+  for (const file of files) {
+    const text = await readFile4(file, "utf-8");
+    try {
+      const doc = parseStructuredContract(file, text);
+      extractApiContractIds(doc).forEach((id) => record(index, id, file));
+    } catch {
+      index.structuredParseFailedFiles.add(file);
+      extractIds(text, "API").forEach((id) => record(index, id, file));
+    }
+  }
+}
+async function indexDataContracts(files, index) {
+  for (const file of files) {
+    const text = await readFile4(file, "utf-8");
+    extractIds(text, "DATA").forEach((id) => record(index, id, file));
+  }
+}
+function record(index, id, file) {
+  index.ids.add(id);
+  const current = index.idToFiles.get(id) ?? /* @__PURE__ */ new Set();
+  current.add(file);
+  index.idToFiles.set(id, current);
+}
+
+// src/core/validators/ids.ts
+async function validateDefinedIds(root, config) {
+  const issues = [];
+  const specRoot = resolvePath(root, config, "specDir");
+  const scenarioRoot = resolvePath(root, config, "scenariosDir");
+  const specFiles = await collectSpecFiles(specRoot);
+  const scenarioFiles = await collectFiles(scenarioRoot, {
+    extensions: [".feature"]
+  });
+  const defined = /* @__PURE__ */ new Map();
+  await collectSpecDefinitionIds(specFiles, defined);
+  await collectScenarioDefinitionIds(scenarioFiles, defined);
+  const contractIndex = await buildContractIndex(root, config);
+  for (const [id, files] of contractIndex.idToFiles.entries()) {
+    for (const file of files) {
+      recordId(defined, id, file);
+    }
+  }
+  for (const [id, files] of defined.entries()) {
+    if (files.size <= 1) {
+      continue;
+    }
+    const sorted = Array.from(files).sort();
+    issues.push(
+      issue2(
+        "QFAI-ID-001",
+        `ID \u304C\u91CD\u8907\u3057\u3066\u3044\u307E\u3059: ${id} (${formatFileList(sorted, root)})`,
+        "error",
+        sorted[0],
+        "id.duplicate"
+      )
+    );
+  }
+  return issues;
+}
+async function collectSpecDefinitionIds(files, out) {
+  for (const file of files) {
+    const text = await readFile5(file, "utf-8");
+    extractIds(text, "SPEC").forEach((id) => recordId(out, id, file));
+    extractIds(text, "BR").forEach((id) => recordId(out, id, file));
+  }
+}
+async function collectScenarioDefinitionIds(files, out) {
+  for (const file of files) {
+    const text = await readFile5(file, "utf-8");
+    extractIds(text, "SC").forEach((id) => recordId(out, id, file));
+  }
+}
+function recordId(out, id, file) {
+  const current = out.get(id) ?? /* @__PURE__ */ new Set();
+  current.add(file);
+  out.set(id, current);
+}
+function formatFileList(files, root) {
+  return files.map((file) => {
+    const relative = path9.relative(root, file);
+    return relative.length > 0 ? relative : file;
+  }).join(", ");
+}
+function issue2(code, message, severity, file, rule, refs) {
+  const issue6 = {
+    code,
+    severity,
+    message
+  };
+  if (file) {
+    issue6.file = file;
+  }
+  if (rule) {
+    issue6.rule = rule;
+  }
+  if (refs && refs.length > 0) {
+    issue6.refs = refs;
+  }
+  return issue6;
+}
+
+// src/core/validators/scenario.ts
+import { readFile as readFile6 } from "fs/promises";
 var GIVEN_PATTERN = /\bGiven\b/;
 var WHEN_PATTERN = /\bWhen\b/;
 var THEN_PATTERN = /\bThen\b/;
@@ -923,7 +1134,7 @@ async function validateScenarios(root, config) {
   });
   if (files.length === 0) {
     return [
-      issue2(
+      issue3(
         "QFAI-SC-000",
         "Scenario \u30D5\u30A1\u30A4\u30EB\u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002",
         "info",
@@ -934,7 +1145,7 @@ async function validateScenarios(root, config) {
   }
   const issues = [];
   for (const file of files) {
-    const text = await readFile4(file, "utf-8");
+    const text = await readFile6(file, "utf-8");
     issues.push(...validateScenarioContent(text, file));
   }
   return issues;
@@ -947,12 +1158,13 @@ function validateScenarioContent(text, file) {
     "SC",
     "UI",
     "API",
-    "DATA"
+    "DATA",
+    "ADR"
   ]);
   if (invalidIds.length > 0) {
     issues.push(
-      issue2(
-        "QFAI_ID_INVALID_FORMAT",
+      issue3(
+        "QFAI-ID-002",
         `ID \u30D5\u30A9\u30FC\u30DE\u30C3\u30C8\u304C\u4E0D\u6B63\u3067\u3059: ${invalidIds.join(", ")}`,
         "error",
         file,
@@ -964,7 +1176,7 @@ function validateScenarioContent(text, file) {
   const scIds = extractIds(text, "SC");
   if (scIds.length === 0) {
     issues.push(
-      issue2(
+      issue3(
         "QFAI-SC-001",
         "SC ID \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002",
         "error",
@@ -976,7 +1188,7 @@ function validateScenarioContent(text, file) {
   const specIds = extractIds(text, "SPEC");
   if (specIds.length === 0) {
     issues.push(
-      issue2(
+      issue3(
         "QFAI-SC-002",
         "SC \u306F SPEC \u3092\u53C2\u7167\u3059\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059\u3002",
         "error",
@@ -988,7 +1200,7 @@ function validateScenarioContent(text, file) {
   const brIds = extractIds(text, "BR");
   if (brIds.length === 0) {
     issues.push(
-      issue2(
+      issue3(
         "QFAI-SC-003",
         "SC \u306F BR \u3092\u53C2\u7167\u3059\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059\u3002",
         "error",
@@ -1009,7 +1221,7 @@ function validateScenarioContent(text, file) {
   }
   if (missingSteps.length > 0) {
     issues.push(
-      issue2(
+      issue3(
         "QFAI-SC-005",
         `Given/When/Then \u304C\u4E0D\u8DB3\u3057\u3066\u3044\u307E\u3059: ${missingSteps.join(", ")}`,
         "warning",
@@ -1020,33 +1232,33 @@ function validateScenarioContent(text, file) {
   }
   return issues;
 }
-function issue2(code, message, severity, file, rule, refs) {
-  const issue5 = {
+function issue3(code, message, severity, file, rule, refs) {
+  const issue6 = {
     code,
     severity,
     message
   };
   if (file) {
-    issue5.file = file;
+    issue6.file = file;
   }
   if (rule) {
-    issue5.rule = rule;
+    issue6.rule = rule;
   }
   if (refs && refs.length > 0) {
-    issue5.refs = refs;
+    issue6.refs = refs;
   }
-  return issue5;
+  return issue6;
 }
 
 // src/core/validators/spec.ts
-import { readFile as readFile5 } from "fs/promises";
+import { readFile as readFile7 } from "fs/promises";
 async function validateSpecs(root, config) {
   const specsRoot = resolvePath(root, config, "specDir");
   const files = await collectSpecFiles(specsRoot);
   if (files.length === 0) {
     const expected = "spec-0001-<slug>.md";
     return [
-      issue3(
+      issue4(
         "QFAI-SPEC-000",
         `Spec \u30D5\u30A1\u30A4\u30EB\u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002\u914D\u7F6E\u5834\u6240: ${config.paths.specDir} / \u671F\u5F85\u30D1\u30BF\u30FC\u30F3: ${expected}`,
         "info",
@@ -1057,7 +1269,7 @@ async function validateSpecs(root, config) {
   }
   const issues = [];
   for (const file of files) {
-    const text = await readFile5(file, "utf-8");
+    const text = await readFile7(file, "utf-8");
     issues.push(
       ...validateSpecContent(
         text,
@@ -1076,12 +1288,13 @@ function validateSpecContent(text, file, requiredSections) {
     "SC",
     "UI",
     "API",
-    "DATA"
+    "DATA",
+    "ADR"
   ]);
   if (invalidIds.length > 0) {
     issues.push(
-      issue3(
-        "QFAI_ID_INVALID_FORMAT",
+      issue4(
+        "QFAI-ID-002",
         `ID \u30D5\u30A9\u30FC\u30DE\u30C3\u30C8\u304C\u4E0D\u6B63\u3067\u3059: ${invalidIds.join(", ")}`,
         "error",
         file,
@@ -1093,7 +1306,7 @@ function validateSpecContent(text, file, requiredSections) {
   const specIds = extractIds(text, "SPEC");
   if (specIds.length === 0) {
     issues.push(
-      issue3(
+      issue4(
         "QFAI-SPEC-001",
         "SPEC ID \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002",
         "error",
@@ -1105,7 +1318,7 @@ function validateSpecContent(text, file, requiredSections) {
   const brIds = extractIds(text, "BR");
   if (brIds.length === 0) {
     issues.push(
-      issue3(
+      issue4(
         "QFAI-SPEC-002",
         "BR ID \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002",
         "error",
@@ -1117,7 +1330,7 @@ function validateSpecContent(text, file, requiredSections) {
   const scIds = extractIds(text, "SC");
   if (scIds.length > 0) {
     issues.push(
-      issue3(
+      issue4(
         "QFAI-SPEC-003",
         "Spec \u306F SC \u3092\u53C2\u7167\u3057\u306A\u3044\u30EB\u30FC\u30EB\u3067\u3059\u3002",
         "warning",
@@ -1130,7 +1343,7 @@ function validateSpecContent(text, file, requiredSections) {
   for (const section of requiredSections) {
     if (!text.includes(section)) {
       issues.push(
-        issue3(
+        issue4(
           "QFAI-SPEC-004",
           `\u5FC5\u9808\u30BB\u30AF\u30B7\u30E7\u30F3\u304C\u4E0D\u8DB3\u3057\u3066\u3044\u307E\u3059: ${section}`,
           "error",
@@ -1142,26 +1355,26 @@ function validateSpecContent(text, file, requiredSections) {
   }
   return issues;
 }
-function issue3(code, message, severity, file, rule, refs) {
-  const issue5 = {
+function issue4(code, message, severity, file, rule, refs) {
+  const issue6 = {
     code,
     severity,
     message
   };
   if (file) {
-    issue5.file = file;
+    issue6.file = file;
   }
   if (rule) {
-    issue5.rule = rule;
+    issue6.rule = rule;
   }
   if (refs && refs.length > 0) {
-    issue5.refs = refs;
+    issue6.refs = refs;
   }
-  return issue5;
+  return issue6;
 }
 
 // src/core/validators/traceability.ts
-import { readFile as readFile6 } from "fs/promises";
+import { readFile as readFile8 } from "fs/promises";
 async function validateTraceability(root, config) {
   const issues = [];
   const specsRoot = resolvePath(root, config, "specDir");
@@ -1177,36 +1390,141 @@ async function validateTraceability(root, config) {
     extensions: [".feature"]
   });
   const upstreamIds = /* @__PURE__ */ new Set();
+  const specIds = /* @__PURE__ */ new Set();
   const brIdsInSpecs = /* @__PURE__ */ new Set();
   const brIdsInScenarios = /* @__PURE__ */ new Set();
   const scIdsInScenarios = /* @__PURE__ */ new Set();
   const scenarioContractIds = /* @__PURE__ */ new Set();
   const scWithContracts = /* @__PURE__ */ new Set();
-  for (const file of [...specFiles, ...decisionFiles]) {
-    const text = await readFile6(file, "utf-8");
+  const specToBrIds = /* @__PURE__ */ new Map();
+  const contractIndex = await buildContractIndex(root, config);
+  const contractIds = contractIndex.ids;
+  for (const file of specFiles) {
+    const text = await readFile8(file, "utf-8");
+    extractAllIds(text).forEach((id) => upstreamIds.add(id));
+    const specIdsInFile = extractIds(text, "SPEC");
+    specIdsInFile.forEach((id) => specIds.add(id));
+    const brIds = extractIds(text, "BR");
+    brIds.forEach((id) => brIdsInSpecs.add(id));
+    const referencedContractIds = /* @__PURE__ */ new Set([
+      ...extractIds(text, "UI"),
+      ...extractIds(text, "API"),
+      ...extractIds(text, "DATA")
+    ]);
+    const unknownContractIds = Array.from(referencedContractIds).filter(
+      (id) => !contractIds.has(id)
+    );
+    if (unknownContractIds.length > 0) {
+      issues.push(
+        issue5(
+          "QFAI-TRACE-009",
+          `Spec \u304C\u5B58\u5728\u3057\u306A\u3044\u5951\u7D04 ID \u3092\u53C2\u7167\u3057\u3066\u3044\u307E\u3059: ${unknownContractIds.join(
+            ", "
+          )}`,
+          "error",
+          file,
+          "traceability.specContractExists",
+          unknownContractIds
+        )
+      );
+    }
+    for (const specId of specIdsInFile) {
+      const current = specToBrIds.get(specId) ?? /* @__PURE__ */ new Set();
+      brIds.forEach((id) => current.add(id));
+      specToBrIds.set(specId, current);
+    }
+  }
+  for (const file of decisionFiles) {
+    const text = await readFile8(file, "utf-8");
     extractAllIds(text).forEach((id) => upstreamIds.add(id));
-    extractIds(text, "BR").forEach((id) => brIdsInSpecs.add(id));
   }
   for (const file of scenarioFiles) {
-    const text = await readFile6(file, "utf-8");
+    const text = await readFile8(file, "utf-8");
     extractAllIds(text).forEach((id) => upstreamIds.add(id));
+    const specIdsInScenario = extractIds(text, "SPEC");
     const brIds = extractIds(text, "BR");
-    brIds.forEach((id) => brIdsInScenarios.add(id));
     const scIds = extractIds(text, "SC");
-    scIds.forEach((id) => scIdsInScenarios.add(id));
-    const contractIds = [
+    const scenarioIds = [
       ...extractIds(text, "UI"),
       ...extractIds(text, "API"),
       ...extractIds(text, "DATA")
     ];
-    contractIds.forEach((id) => scenarioContractIds.add(id));
-    if (contractIds.length > 0) {
+    brIds.forEach((id) => brIdsInScenarios.add(id));
+    scIds.forEach((id) => scIdsInScenarios.add(id));
+    scenarioIds.forEach((id) => scenarioContractIds.add(id));
+    if (scenarioIds.length > 0) {
       scIds.forEach((id) => scWithContracts.add(id));
     }
+    const unknownSpecIds = specIdsInScenario.filter((id) => !specIds.has(id));
+    if (unknownSpecIds.length > 0) {
+      issues.push(
+        issue5(
+          "QFAI-TRACE-005",
+          `Scenario \u304C\u5B58\u5728\u3057\u306A\u3044 SPEC \u3092\u53C2\u7167\u3057\u3066\u3044\u307E\u3059: ${unknownSpecIds.join(", ")}`,
+          "error",
+          file,
+          "traceability.scenarioSpecExists",
+          unknownSpecIds
+        )
+      );
+    }
+    const unknownBrIds = brIds.filter((id) => !brIdsInSpecs.has(id));
+    if (unknownBrIds.length > 0) {
+      issues.push(
+        issue5(
+          "QFAI-TRACE-006",
+          `Scenario \u304C\u5B58\u5728\u3057\u306A\u3044 BR \u3092\u53C2\u7167\u3057\u3066\u3044\u307E\u3059: ${unknownBrIds.join(", ")}`,
+          "error",
+          file,
+          "traceability.scenarioBrExists",
+          unknownBrIds
+        )
+      );
+    }
+    const unknownContractIds = scenarioIds.filter((id) => !contractIds.has(id));
+    if (unknownContractIds.length > 0) {
+      issues.push(
+        issue5(
+          "QFAI-TRACE-008",
+          `Scenario \u304C\u5B58\u5728\u3057\u306A\u3044\u5951\u7D04 ID \u3092\u53C2\u7167\u3057\u3066\u3044\u307E\u3059: ${unknownContractIds.join(
+            ", "
+          )}`,
+          config.validation.traceability.unknownContractIdSeverity,
+          file,
+          "traceability.scenarioContractExists",
+          unknownContractIds
+        )
+      );
+    }
+    if (specIdsInScenario.length > 0) {
+      const allowedBrIds = /* @__PURE__ */ new Set();
+      for (const specId of specIdsInScenario) {
+        const brIdsForSpec = specToBrIds.get(specId);
+        if (!brIdsForSpec) {
+          continue;
+        }
+        brIdsForSpec.forEach((id) => allowedBrIds.add(id));
+      }
+      const invalidBrIds = brIds.filter((id) => !allowedBrIds.has(id));
+      if (invalidBrIds.length > 0) {
+        issues.push(
+          issue5(
+            "QFAI-TRACE-007",
+            `Scenario \u306E BR \u304C\u53C2\u7167 SPEC \u306B\u5C5E\u3057\u3066\u3044\u307E\u305B\u3093: ${invalidBrIds.join(
+              ", "
+            )} (SPEC: ${specIdsInScenario.join(", ")})`,
+            "error",
+            file,
+            "traceability.scenarioBrUnderSpec",
+            invalidBrIds
+          )
+        );
+      }
+    }
   }
   if (upstreamIds.size === 0) {
     return [
-      issue4(
+      issue5(
         "QFAI-TRACE-000",
         "\u4E0A\u6D41 ID \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002",
         "info",
@@ -1221,7 +1539,7 @@ async function validateTraceability(root, config) {
     );
     if (orphanBrIds.length > 0) {
       issues.push(
-        issue4(
+        issue5(
           "QFAI_TRACE_BR_ORPHAN",
           `BR \u304C SC \u306B\u7D10\u3065\u3044\u3066\u3044\u307E\u305B\u3093: ${orphanBrIds.join(", ")}`,
           "error",
@@ -1238,7 +1556,7 @@ async function validateTraceability(root, config) {
     );
     if (scWithoutContracts.length > 0) {
       issues.push(
-        issue4(
+        issue5(
           "QFAI_TRACE_SC_NO_CONTRACT",
           `SC \u304C\u5951\u7D04(UI/API/DATA)\u306B\u63A5\u7D9A\u3057\u3066\u3044\u307E\u305B\u3093: ${scWithoutContracts.join(
             ", "
@@ -1252,14 +1570,13 @@ async function validateTraceability(root, config) {
     }
   }
   if (!config.validation.traceability.allowOrphanContracts) {
-    const contractIds = await collectContractIds(root, config);
     if (contractIds.size > 0) {
       const orphanContracts = Array.from(contractIds).filter(
         (id) => !scenarioContractIds.has(id)
       );
       if (orphanContracts.length > 0) {
         issues.push(
-          issue4(
+          issue5(
             "QFAI_CONTRACT_ORPHAN",
             `\u5951\u7D04\u304C SC \u304B\u3089\u53C2\u7167\u3055\u308C\u3066\u3044\u307E\u305B\u3093: ${orphanContracts.join(", ")}`,
             "error",
@@ -1276,27 +1593,6 @@ async function validateTraceability(root, config) {
   );
   return issues;
 }
-async function collectContractIds(root, config) {
-  const contractIds = /* @__PURE__ */ new Set();
-  const uiRoot = resolvePath(root, config, "uiContractsDir");
-  const apiRoot = resolvePath(root, config, "apiContractsDir");
-  const dataRoot = resolvePath(root, config, "dataContractsDir");
-  const uiFiles = await collectUiContractFiles(uiRoot);
-  const apiFiles = await collectApiContractFiles(apiRoot);
-  const dataFiles = await collectDataContractFiles(dataRoot);
-  await collectIdsFromFiles(uiFiles, ["UI"], contractIds);
-  await collectIdsFromFiles(apiFiles, ["API"], contractIds);
-  await collectIdsFromFiles(dataFiles, ["DATA"], contractIds);
-  return contractIds;
-}
-async function collectIdsFromFiles(files, prefixes, out) {
-  for (const file of files) {
-    const text = await readFile6(file, "utf-8");
-    for (const prefix of prefixes) {
-      extractIds(text, prefix).forEach((id) => out.add(id));
-    }
-  }
-}
 async function validateCodeReferences(upstreamIds, srcRoot, testsRoot) {
   const issues = [];
   const codeFiles = await collectFiles(srcRoot, {
@@ -1308,7 +1604,7 @@ async function validateCodeReferences(upstreamIds, srcRoot, testsRoot) {
   const targetFiles = [...codeFiles, ...testFiles];
   if (targetFiles.length === 0) {
     issues.push(
-      issue4(
+      issue5(
         "QFAI-TRACE-001",
         "\u53C2\u7167\u5BFE\u8C61\u306E\u30B3\u30FC\u30C9/\u30C6\u30B9\u30C8\u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002",
         "info",
@@ -1321,7 +1617,7 @@ async function validateCodeReferences(upstreamIds, srcRoot, testsRoot) {
   const pattern = buildIdPattern(Array.from(upstreamIds));
   let found = false;
   for (const file of targetFiles) {
-    const text = await readFile6(file, "utf-8");
+    const text = await readFile8(file, "utf-8");
     if (pattern.test(text)) {
       found = true;
       break;
@@ -1329,7 +1625,7 @@ async function validateCodeReferences(upstreamIds, srcRoot, testsRoot) {
   }
   if (!found) {
     issues.push(
-      issue4(
+      issue5(
         "QFAI-TRACE-002",
         "\u4E0A\u6D41 ID \u304C\u30B3\u30FC\u30C9/\u30C6\u30B9\u30C8\u306B\u53C2\u7167\u3055\u308C\u3066\u3044\u307E\u305B\u3093\u3002",
         "warning",
@@ -1344,22 +1640,22 @@ function buildIdPattern(ids) {
   const escaped = ids.map((id) => id.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"));
   return new RegExp(`\\b(${escaped.join("|")})\\b`);
 }
-function issue4(code, message, severity, file, rule, refs) {
-  const issue5 = {
+function issue5(code, message, severity, file, rule, refs) {
+  const issue6 = {
     code,
     severity,
     message
   };
   if (file) {
-    issue5.file = file;
+    issue6.file = file;
   }
   if (rule) {
-    issue5.rule = rule;
+    issue6.rule = rule;
   }
   if (refs && refs.length > 0) {
-    issue5.refs = refs;
+    issue6.refs = refs;
   }
-  return issue5;
+  return issue6;
 }
 
 // src/core/validate.ts
@@ -1371,6 +1667,7 @@ async function validateProject(root, configResult) {
     ...await validateSpecs(root, config),
     ...await validateScenarios(root, config),
     ...await validateContracts(root, config),
+    ...await validateDefinedIds(root, config),
     ...await validateTraceability(root, config)
   ];
   const toolVersion = await resolveToolVersion();
@@ -1383,8 +1680,8 @@ async function validateProject(root, configResult) {
 }
 function countIssues(issues) {
   return issues.reduce(
-    (acc, issue5) => {
-      acc[issue5.severity] += 1;
+    (acc, issue6) => {
+      acc[issue6.severity] += 1;
       return acc;
     },
     { info: 0, warning: 0, error: 0 }
@@ -1392,7 +1689,7 @@ function countIssues(issues) {
 }
 
 // src/core/report.ts
-var ID_PREFIXES = ["SPEC", "BR", "SC", "UI", "API", "DATA"];
+var ID_PREFIXES2 = ["SPEC", "BR", "SC", "UI", "API", "DATA"];
 async function createReportData(root, validation, configResult) {
   const resolved = configResult ?? await loadConfig(root);
   const config = resolved.config;
@@ -1400,7 +1697,6 @@ async function createReportData(root, validation, configResult) {
   const specRoot = resolvePath(root, config, "specDir");
   const decisionsRoot = resolvePath(root, config, "decisionsDir");
   const scenariosRoot = resolvePath(root, config, "scenariosDir");
-  const rulesRoot = resolvePath(root, config, "rulesDir");
   const apiRoot = resolvePath(root, config, "apiContractsDir");
   const uiRoot = resolvePath(root, config, "uiContractsDir");
   const dbRoot = resolvePath(root, config, "dataContractsDir");
@@ -1413,7 +1709,6 @@ async function createReportData(root, validation, configResult) {
   const decisionFiles = await collectFiles(decisionsRoot, {
     extensions: [".md"]
   });
-  const ruleFiles = await collectFiles(rulesRoot, { extensions: [".md"] });
   const {
     api: apiFiles,
     ui: uiFiles,
@@ -1423,7 +1718,6 @@ async function createReportData(root, validation, configResult) {
     ...specFiles,
     ...scenarioFiles,
     ...decisionFiles,
-    ...ruleFiles,
     ...apiFiles,
     ...uiFiles,
     ...dbFiles
@@ -1449,7 +1743,6 @@ async function createReportData(root, validation, configResult) {
       specs: specFiles.length,
       scenarios: scenarioFiles.length,
       decisions: decisionFiles.length,
-      rules: ruleFiles.length,
       contracts: {
         api: apiFiles.length,
         ui: uiFiles.length,
@@ -1484,7 +1777,6 @@ function formatReportMarkdown(data) {
   lines.push(`- specs: ${data.summary.specs}`);
   lines.push(`- scenarios: ${data.summary.scenarios}`);
   lines.push(`- decisions: ${data.summary.decisions}`);
-  lines.push(`- rules: ${data.summary.rules}`);
   lines.push(
     `- contracts: api ${data.summary.contracts.api} / ui ${data.summary.contracts.ui} / db ${data.summary.contracts.db}`
   );
@@ -1520,7 +1812,7 @@ function formatReportMarkdown(data) {
   lines.push("");
   lines.push("## \u30C8\u30EC\u30FC\u30B5\u30D3\u30EA\u30C6\u30A3\uFF08\u691C\u8A3C\uFF09");
   const traceIssues = data.issues.filter(
-    (item) => item.rule?.startsWith("traceability.") || item.code.startsWith("QFAI_TRACE") || item.code === "QFAI_CONTRACT_ORPHAN"
+    (item) => item.rule?.startsWith("traceability.") || item.code.startsWith("QFAI_TRACE") || item.code.startsWith("QFAI-TRACE-") || item.code === "QFAI_CONTRACT_ORPHAN"
   );
   if (traceIssues.length === 0) {
     lines.push("- (none)");
@@ -1560,8 +1852,8 @@ async function collectIds(files) {
     DATA: /* @__PURE__ */ new Set()
   };
   for (const file of files) {
-    const text = await readFile7(file, "utf-8");
-    for (const prefix of ID_PREFIXES) {
+    const text = await readFile9(file, "utf-8");
+    for (const prefix of ID_PREFIXES2) {
       const ids = extractIds(text, prefix);
       ids.forEach((id) => result[prefix].add(id));
     }
@@ -1578,7 +1870,7 @@ async function collectIds(files) {
 async function collectUpstreamIds(files) {
   const ids = /* @__PURE__ */ new Set();
   for (const file of files) {
-    const text = await readFile7(file, "utf-8");
+    const text = await readFile9(file, "utf-8");
     extractAllIds(text).forEach((id) => ids.add(id));
   }
   return ids;
@@ -1599,7 +1891,7 @@ async function evaluateTraceability(upstreamIds, srcRoot, testsRoot) {
   }
   const pattern = buildIdPattern2(Array.from(upstreamIds));
   for (const file of targetFiles) {
-    const text = await readFile7(file, "utf-8");
+    const text = await readFile9(file, "utf-8");
     if (pattern.test(text)) {
       return true;
     }
@@ -1621,20 +1913,20 @@ function toSortedArray(values) {
 }
 function buildHotspots(issues) {
   const map = /* @__PURE__ */ new Map();
-  for (const issue5 of issues) {
-    if (!issue5.file) {
+  for (const issue6 of issues) {
+    if (!issue6.file) {
       continue;
     }
-    const current = map.get(issue5.file) ?? {
-      file: issue5.file,
+    const current = map.get(issue6.file) ?? {
+      file: issue6.file,
       total: 0,
       error: 0,
       warning: 0,
       info: 0
     };
     current.total += 1;
-    current[issue5.severity] += 1;
-    map.set(issue5.file, current);
+    current[issue6.severity] += 1;
+    map.set(issue6.file, current);
   }
   return Array.from(map.values()).sort(
     (a, b) => b.total !== a.total ? b.total - a.total : a.file.localeCompare(b.file)
@@ -1643,10 +1935,10 @@ function buildHotspots(issues) {
 
 // src/cli/commands/report.ts
 async function runReport(options) {
-  const root = path9.resolve(options.root);
+  const root = path10.resolve(options.root);
   const configResult = await loadConfig(root);
   const input = options.jsonPath ?? configResult.config.output.jsonPath;
-  const inputPath = path9.isAbsolute(input) ? input : path9.resolve(root, input);
+  const inputPath = path10.isAbsolute(input) ? input : path10.resolve(root, input);
   let validation;
   try {
     validation = await readValidationResult(inputPath);
@@ -1671,8 +1963,8 @@ async function runReport(options) {
   const output = options.format === "json" ? formatReportJson(data) : formatReportMarkdown(data);
   const defaultOut = options.format === "json" ? ".qfai/out/report.json" : ".qfai/out/report.md";
   const out = options.outPath ?? defaultOut;
-  const outPath = path9.isAbsolute(out) ? out : path9.resolve(root, out);
-  await mkdir2(path9.dirname(outPath), { recursive: true });
+  const outPath = path10.isAbsolute(out) ? out : path10.resolve(root, out);
+  await mkdir2(path10.dirname(outPath), { recursive: true });
   await writeFile(outPath, `${output}
 `, "utf-8");
   info(
@@ -1681,7 +1973,7 @@ async function runReport(options) {
   info(`wrote report: ${outPath}`);
 }
 async function readValidationResult(inputPath) {
-  const raw = await readFile8(inputPath, "utf-8");
+  const raw = await readFile10(inputPath, "utf-8");
   const parsed = JSON.parse(raw);
   if (!isValidationResult(parsed)) {
     throw new Error(`validate.json \u306E\u5F62\u5F0F\u304C\u4E0D\u6B63\u3067\u3059: ${inputPath}`);
@@ -1697,17 +1989,17 @@ function isValidationResult(value) {
   if (!value || typeof value !== "object") {
     return false;
   }
-  const record = value;
-  if (typeof record.schemaVersion !== "string") {
+  const record2 = value;
+  if (typeof record2.schemaVersion !== "string") {
     return false;
   }
-  if (typeof record.toolVersion !== "string") {
+  if (typeof record2.toolVersion !== "string") {
     return false;
   }
-  if (!Array.isArray(record.issues)) {
+  if (!Array.isArray(record2.issues)) {
     return false;
   }
-  const counts = record.counts;
+  const counts = record2.counts;
   if (!counts) {
     return false;
   }
@@ -1717,13 +2009,13 @@ function isMissingFileError(error2) {
   if (!error2 || typeof error2 !== "object") {
     return false;
   }
-  const record = error2;
-  return record.code === "ENOENT";
+  const record2 = error2;
+  return record2.code === "ENOENT";
 }
 
 // src/cli/commands/validate.ts
 import { mkdir as mkdir3, writeFile as writeFile2 } from "fs/promises";
-import path10 from "path";
+import path11 from "path";
 
 // src/cli/lib/failOn.ts
 function shouldFail(result, failOn) {
@@ -1738,7 +2030,7 @@ function shouldFail(result, failOn) {
 
 // src/cli/commands/validate.ts
 async function runValidate(options) {
-  const root = path10.resolve(options.root);
+  const root = path11.resolve(options.root);
   const configResult = await loadConfig(root);
   const result = await validateProject(root, configResult);
   const format = options.format ?? configResult.config.output.format;
@@ -1782,20 +2074,20 @@ function emitText(result) {
 `
   );
 }
-function emitGitHub(issue5) {
-  const level = issue5.severity === "error" ? "error" : issue5.severity === "warning" ? "warning" : "notice";
-  const file = issue5.file ? `file=${issue5.file}` : "";
-  const line = issue5.loc?.line ? `,line=${issue5.loc.line}` : "";
-  const column = issue5.loc?.column ? `,col=${issue5.loc.column}` : "";
+function emitGitHub(issue6) {
+  const level = issue6.severity === "error" ? "error" : issue6.severity === "warning" ? "warning" : "notice";
+  const file = issue6.file ? `file=${issue6.file}` : "";
+  const line = issue6.loc?.line ? `,line=${issue6.loc.line}` : "";
+  const column = issue6.loc?.column ? `,col=${issue6.loc.column}` : "";
   const location = file ? ` ${file}${line}${column}` : "";
   process.stdout.write(
-    `::${level}${location}::${issue5.code}: ${issue5.message}
+    `::${level}${location}::${issue6.code}: ${issue6.message}
 `
   );
 }
 async function emitJson(result, root, jsonPath) {
-  const abs = path10.isAbsolute(jsonPath) ? jsonPath : path10.resolve(root, jsonPath);
-  await mkdir3(path10.dirname(abs), { recursive: true });
+  const abs = path11.isAbsolute(jsonPath) ? jsonPath : path11.resolve(root, jsonPath);
+  await mkdir3(path11.dirname(abs), { recursive: true });
   await writeFile2(abs, `${JSON.stringify(result, null, 2)}
 `, "utf-8");
 }