qfai 0.4.0 → 0.4.4

package/dist/cli/index.cjs

@@ -178,7 +178,7 @@ function report(copied, skipped, dryRun, label) {
 
 // src/cli/commands/report.ts
 var import_promises16 = require("fs/promises");
-var import_node_path14 = __toESM(require("path"), 1);
+var import_node_path15 = __toESM(require("path"), 1);
 
 // src/core/config.ts
 var import_promises2 = require("fs/promises");
@@ -209,8 +209,9 @@ var defaultConfig = {
     },
     traceability: {
       brMustHaveSc: true,
-      scMustTouchContracts: true,
       scMustHaveTest: true,
+      testFileGlobs: [],
+      testFileExcludeGlobs: [],
       scNoTestSeverity: "error",
       allowOrphanContracts: false,
       unknownContractIdSeverity: "error"
@@ -384,13 +385,6 @@ function normalizeValidation(raw, configPath, issues) {
         configPath,
         issues
       ),
-      scMustTouchContracts: readBoolean(
-        traceabilityRaw?.scMustTouchContracts,
-        base.traceability.scMustTouchContracts,
-        "validation.traceability.scMustTouchContracts",
-        configPath,
-        issues
-      ),
       scMustHaveTest: readBoolean(
         traceabilityRaw?.scMustHaveTest,
         base.traceability.scMustHaveTest,
@@ -398,6 +392,20 @@ function normalizeValidation(raw, configPath, issues) {
         configPath,
         issues
       ),
+      testFileGlobs: readStringArray(
+        traceabilityRaw?.testFileGlobs,
+        base.traceability.testFileGlobs,
+        "validation.traceability.testFileGlobs",
+        configPath,
+        issues
+      ),
+      testFileExcludeGlobs: readStringArray(
+        traceabilityRaw?.testFileExcludeGlobs,
+        base.traceability.testFileExcludeGlobs,
+        "validation.traceability.testFileExcludeGlobs",
+        configPath,
+        issues
+      ),
       scNoTestSeverity: readTraceabilitySeverity(
         traceabilityRaw?.scNoTestSeverity,
         base.traceability.scNoTestSeverity,
@@ -531,7 +539,11 @@ function isRecord(value) {
 
 // src/core/report.ts
 var import_promises15 = require("fs/promises");
-var import_node_path13 = __toESM(require("path"), 1);
+var import_node_path14 = __toESM(require("path"), 1);
+
+// src/core/contractIndex.ts
+var import_promises6 = require("fs/promises");
+var import_node_path7 = __toESM(require("path"), 1);
 
 // src/core/discovery.ts
 var import_promises5 = require("fs/promises");
@@ -539,6 +551,7 @@ var import_promises5 = require("fs/promises");
 // src/core/fs.ts
 var import_promises3 = require("fs/promises");
 var import_node_path5 = __toESM(require("path"), 1);
+var import_fast_glob = __toESM(require("fast-glob"), 1);
 var DEFAULT_IGNORE_DIRS = /* @__PURE__ */ new Set([
   "node_modules",
   ".git",
@@ -560,6 +573,18 @@ async function collectFiles(root, options = {}) {
   await walk(root, root, ignoreDirs, extensions, entries);
   return entries;
 }
+async function collectFilesByGlobs(root, options) {
+  if (options.globs.length === 0) {
+    return [];
+  }
+  return (0, import_fast_glob.default)(options.globs, {
+    cwd: root,
+    ignore: options.ignore ?? [],
+    onlyFiles: true,
+    absolute: true,
+    unique: true
+  });
+}
 async function walk(base, current, ignoreDirs, extensions, out) {
   const items = await (0, import_promises3.readdir)(current, { withFileTypes: true });
   for (const item of items) {
@@ -671,15 +696,66 @@ async function exists3(target) {
   }
 }
 
+// src/core/contractsDecl.ts
+var CONTRACT_DECLARATION_RE = /^\s*(?:#|\/\/|--|\/\*+|\*+)?\s*QFAI-CONTRACT-ID:\s*((?:API|UI|DB)-\d{4})\s*(?:\*\/)?\s*$/gm;
+var CONTRACT_DECLARATION_LINE_RE = /^\s*(?:#|\/\/|--|\/\*+|\*+)?\s*QFAI-CONTRACT-ID:\s*(?:API|UI|DB)-\d{4}\s*(?:\*\/)?\s*$/;
+function extractDeclaredContractIds(text) {
+  const ids = [];
+  for (const match of text.matchAll(CONTRACT_DECLARATION_RE)) {
+    const id = match[1];
+    if (id) {
+      ids.push(id);
+    }
+  }
+  return ids;
+}
+function stripContractDeclarationLines(text) {
+  return text.split(/\r?\n/).filter((line) => !CONTRACT_DECLARATION_LINE_RE.test(line)).join("\n");
+}
+
+// src/core/contractIndex.ts
+async function buildContractIndex(root, config) {
+  const contractsRoot = resolvePath(root, config, "contractsDir");
+  const uiRoot = import_node_path7.default.join(contractsRoot, "ui");
+  const apiRoot = import_node_path7.default.join(contractsRoot, "api");
+  const dbRoot = import_node_path7.default.join(contractsRoot, "db");
+  const [uiFiles, apiFiles, dbFiles] = await Promise.all([
+    collectUiContractFiles(uiRoot),
+    collectApiContractFiles(apiRoot),
+    collectDataContractFiles(dbRoot)
+  ]);
+  const index = {
+    ids: /* @__PURE__ */ new Set(),
+    idToFiles: /* @__PURE__ */ new Map(),
+    files: { ui: uiFiles, api: apiFiles, db: dbFiles }
+  };
+  await indexContractFiles(uiFiles, index);
+  await indexContractFiles(apiFiles, index);
+  await indexContractFiles(dbFiles, index);
+  return index;
+}
+async function indexContractFiles(files, index) {
+  for (const file of files) {
+    const text = await (0, import_promises6.readFile)(file, "utf-8");
+    extractDeclaredContractIds(text).forEach((id) => record(index, id, file));
+  }
+}
+function record(index, id, file) {
+  index.ids.add(id);
+  const current = index.idToFiles.get(id) ?? /* @__PURE__ */ new Set();
+  current.add(file);
+  index.idToFiles.set(id, current);
+}
+
 // src/core/ids.ts
-var ID_PREFIXES = ["SPEC", "BR", "SC", "UI", "API", "DATA"];
+var ID_PREFIXES = ["SPEC", "BR", "SC", "UI", "API", "DB"];
 var STRICT_ID_PATTERNS = {
   SPEC: /\bSPEC-\d{4}\b/g,
   BR: /\bBR-\d{4}\b/g,
   SC: /\bSC-\d{4}\b/g,
   UI: /\bUI-\d{4}\b/g,
   API: /\bAPI-\d{4}\b/g,
-  DATA: /\bDATA-\d{4}\b/g,
+  DB: /\bDB-\d{4}\b/g,
   ADR: /\bADR-\d{4}\b/g
 };
 var LOOSE_ID_PATTERNS = {
@@ -688,7 +764,7 @@ var LOOSE_ID_PATTERNS = {
   SC: /\bSC-[A-Za-z0-9_-]+\b/gi,
   UI: /\bUI-[A-Za-z0-9_-]+\b/gi,
   API: /\bAPI-[A-Za-z0-9_-]+\b/gi,
-  DATA: /\bDATA-[A-Za-z0-9_-]+\b/gi,
+  DB: /\bDB-[A-Za-z0-9_-]+\b/gi,
   ADR: /\bADR-[A-Za-z0-9_-]+\b/gi
 };
 function extractIds(text, prefix) {
@@ -724,8 +800,170 @@ function isValidId(value, prefix) {
   return strict.test(value);
 }
 
+// src/core/parse/markdown.ts
+var HEADING_RE = /^(#{1,6})\s+(.+?)\s*$/;
+function parseHeadings(md) {
+  const lines = md.split(/\r?\n/);
+  const headings = [];
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i] ?? "";
+    const match = line.match(HEADING_RE);
+    if (!match) continue;
+    const levelToken = match[1];
+    const title = match[2];
+    if (!levelToken || !title) continue;
+    headings.push({
+      level: levelToken.length,
+      title: title.trim(),
+      line: i + 1
+    });
+  }
+  return headings;
+}
+function extractH2Sections(md) {
+  const lines = md.split(/\r?\n/);
+  const headings = parseHeadings(md).filter((heading) => heading.level === 2);
+  const sections = /* @__PURE__ */ new Map();
+  for (let i = 0; i < headings.length; i++) {
+    const current = headings[i];
+    if (!current) continue;
+    const next = headings[i + 1];
+    const startLine = current.line + 1;
+    const endLine = (next?.line ?? lines.length + 1) - 1;
+    const body = startLine <= endLine ? lines.slice(startLine - 1, endLine).join("\n") : "";
+    sections.set(current.title.trim(), {
+      title: current.title.trim(),
+      startLine,
+      endLine,
+      body
+    });
+  }
+  return sections;
+}
+
+// src/core/parse/spec.ts
+var SPEC_ID_RE = /\bSPEC-\d{4}\b/;
+var BR_LINE_RE = /^\s*(?:[-*]\s*)?\[(BR-\d{4})\]\[(P[0-3])\]\s*(.+)$/;
+var BR_LINE_ANY_PRIORITY_RE = /^\s*(?:[-*]\s*)?\[(BR-\d{4})\]\[(P[^\]]+)\]\s*(.+)$/;
+var BR_LINE_NO_PRIORITY_RE = /^\s*(?:[-*]\s*)?\[(BR-\d{4})\](?!\s*\[P)\s*(.*\S.*)$/;
+var CONTRACT_REF_LINE_RE = /^[ \t]*QFAI-CONTRACT-REF:[ \t]*([^\r\n]*)[ \t]*$/gm;
+var CONTRACT_REF_ID_RE = /^(?:API|UI|DB)-\d{4}$/;
+var BR_SECTION_TITLE = "\u696D\u52D9\u30EB\u30FC\u30EB";
+var VALID_PRIORITIES = /* @__PURE__ */ new Set(["P0", "P1", "P2", "P3"]);
+function parseSpec(md, file) {
+  const headings = parseHeadings(md);
+  const h1 = headings.find((heading) => heading.level === 1);
+  const specId = h1?.title.match(SPEC_ID_RE)?.[0];
+  const sections = extractH2Sections(md);
+  const sectionNames = new Set(Array.from(sections.keys()));
+  const brSection = sections.get(BR_SECTION_TITLE);
+  const brLines = brSection ? brSection.body.split(/\r?\n/) : [];
+  const startLine = brSection?.startLine ?? 1;
+  const brs = [];
+  const brsWithoutPriority = [];
+  const brsWithInvalidPriority = [];
+  for (let i = 0; i < brLines.length; i++) {
+    const lineText = brLines[i] ?? "";
+    const lineNumber = startLine + i;
+    const validMatch = lineText.match(BR_LINE_RE);
+    if (validMatch) {
+      const id = validMatch[1];
+      const priority = validMatch[2];
+      const text = validMatch[3];
+      if (!id || !priority || !text) continue;
+      brs.push({
+        id,
+        priority,
+        text: text.trim(),
+        line: lineNumber
+      });
+      continue;
+    }
+    const anyPriorityMatch = lineText.match(BR_LINE_ANY_PRIORITY_RE);
+    if (anyPriorityMatch) {
+      const id = anyPriorityMatch[1];
+      const priority = anyPriorityMatch[2];
+      const text = anyPriorityMatch[3];
+      if (!id || !priority || !text) continue;
+      if (!VALID_PRIORITIES.has(priority)) {
+        brsWithInvalidPriority.push({
+          id,
+          priority,
+          text: text.trim(),
+          line: lineNumber
+        });
+      }
+      continue;
+    }
+    const noPriorityMatch = lineText.match(BR_LINE_NO_PRIORITY_RE);
+    if (noPriorityMatch) {
+      const id = noPriorityMatch[1];
+      const text = noPriorityMatch[2];
+      if (!id || !text) continue;
+      brsWithoutPriority.push({
+        id,
+        text: text.trim(),
+        line: lineNumber
+      });
+    }
+  }
+  const parsed = {
+    file,
+    sections: sectionNames,
+    brs,
+    brsWithoutPriority,
+    brsWithInvalidPriority,
+    contractRefs: parseContractRefs(md)
+  };
+  if (specId) {
+    parsed.specId = specId;
+  }
+  return parsed;
+}
+function parseContractRefs(md) {
+  const lines = [];
+  for (const match of md.matchAll(CONTRACT_REF_LINE_RE)) {
+    lines.push((match[1] ?? "").trim());
+  }
+  const ids = [];
+  const invalidTokens = [];
+  let hasNone = false;
+  for (const line of lines) {
+    if (line.length === 0) {
+      invalidTokens.push("(empty)");
+      continue;
+    }
+    const tokens = line.split(",").map((token) => token.trim());
+    for (const token of tokens) {
+      if (token.length === 0) {
+        invalidTokens.push("(empty)");
+        continue;
+      }
+      if (token === "none") {
+        hasNone = true;
+        continue;
+      }
+      if (CONTRACT_REF_ID_RE.test(token)) {
+        ids.push(token);
+        continue;
+      }
+      invalidTokens.push(token);
+    }
+  }
+  return {
+    lines,
+    ids: unique2(ids),
+    invalidTokens: unique2(invalidTokens),
+    hasNone
+  };
+}
+function unique2(values) {
+  return Array.from(new Set(values));
+}
+
 // src/core/traceability.ts
-var import_promises6 = require("fs/promises");
+var import_promises7 = require("fs/promises");
+var import_node_path8 = __toESM(require("path"), 1);
 
 // src/core/gherkin/parse.ts
 var import_gherkin = require("@cucumber/gherkin");
@@ -758,7 +996,7 @@ var SC_TAG_RE = /^SC-\d{4}$/;
 var BR_TAG_RE = /^BR-\d{4}$/;
 var UI_TAG_RE = /^UI-\d{4}$/;
 var API_TAG_RE = /^API-\d{4}$/;
-var DATA_TAG_RE = /^DATA-\d{4}$/;
+var DB_TAG_RE = /^DB-\d{4}$/;
 function parseScenarioDocument(text, uri) {
   const { gherkinDocument, errors } = parseGherkin(text, uri);
   if (!gherkinDocument) {
@@ -787,10 +1025,10 @@ function buildScenarioAtoms(document) {
   return document.scenarios.map((scenario) => {
     const specIds = scenario.tags.filter((tag) => SPEC_TAG_RE.test(tag));
     const scIds = scenario.tags.filter((tag) => SC_TAG_RE.test(tag));
-    const brIds = unique2(scenario.tags.filter((tag) => BR_TAG_RE.test(tag)));
+    const brIds = unique3(scenario.tags.filter((tag) => BR_TAG_RE.test(tag)));
     const contractIds = /* @__PURE__ */ new Set();
     scenario.tags.forEach((tag) => {
-      if (UI_TAG_RE.test(tag) || API_TAG_RE.test(tag) || DATA_TAG_RE.test(tag)) {
+      if (UI_TAG_RE.test(tag) || API_TAG_RE.test(tag) || DB_TAG_RE.test(tag)) {
         contractIds.add(tag);
       }
     });
@@ -798,7 +1036,7 @@ function buildScenarioAtoms(document) {
       for (const text of collectStepTexts(step)) {
         extractIds(text, "UI").forEach((id) => contractIds.add(id));
         extractIds(text, "API").forEach((id) => contractIds.add(id));
-        extractIds(text, "DATA").forEach((id) => contractIds.add(id));
+        extractIds(text, "DB").forEach((id) => contractIds.add(id));
       }
     }
     const atom = {
@@ -877,16 +1115,37 @@ function collectStepTexts(step) {
   }
   return texts;
 }
-function unique2(values) {
+function unique3(values) {
   return Array.from(new Set(values));
 }
 
 // src/core/traceability.ts
 var SC_TAG_RE2 = /^SC-\d{4}$/;
+var SC_TEST_ANNOTATION_RE = /\bQFAI:SC-(\d{4})\b/g;
+var DEFAULT_TEST_FILE_EXCLUDE_GLOBS = [
+  "**/node_modules/**",
+  "**/.git/**",
+  "**/.qfai/**",
+  "**/dist/**",
+  "**/build/**",
+  "**/coverage/**",
+  "**/.next/**",
+  "**/out/**"
+];
+function extractAnnotatedScIds(text) {
+  const ids = /* @__PURE__ */ new Set();
+  for (const match of text.matchAll(SC_TEST_ANNOTATION_RE)) {
+    const suffix = match[1];
+    if (suffix) {
+      ids.add(`SC-${suffix}`);
+    }
+  }
+  return Array.from(ids);
+}
 async function collectScIdsFromScenarioFiles(scenarioFiles) {
   const scIds = /* @__PURE__ */ new Set();
   for (const file of scenarioFiles) {
-    const text = await (0, import_promises6.readFile)(file, "utf-8");
+    const text = await (0, import_promises7.readFile)(file, "utf-8");
     const { document, errors } = parseScenarioDocument(text, file);
     if (!document || errors.length > 0) {
       continue;
@@ -901,14 +1160,67 @@ async function collectScIdsFromScenarioFiles(scenarioFiles) {
   }
   return scIds;
 }
-async function collectScTestReferences(testsRoot) {
+async function collectScIdSourcesFromScenarioFiles(scenarioFiles) {
+  const sources = /* @__PURE__ */ new Map();
+  for (const file of scenarioFiles) {
+    const text = await (0, import_promises7.readFile)(file, "utf-8");
+    const { document, errors } = parseScenarioDocument(text, file);
+    if (!document || errors.length > 0) {
+      continue;
+    }
+    for (const scenario of document.scenarios) {
+      for (const tag of scenario.tags) {
+        if (!SC_TAG_RE2.test(tag)) {
+          continue;
+        }
+        const current = sources.get(tag) ?? /* @__PURE__ */ new Set();
+        current.add(file);
+        sources.set(tag, current);
+      }
+    }
+  }
+  return sources;
+}
+async function collectScTestReferences(root, globs, excludeGlobs) {
   const refs = /* @__PURE__ */ new Map();
-  const testFiles = await collectFiles(testsRoot, {
-    extensions: [".ts", ".tsx", ".js", ".jsx"]
-  });
-  for (const file of testFiles) {
-    const text = await (0, import_promises6.readFile)(file, "utf-8");
-    const scIds = extractIds(text, "SC");
+  const normalizedGlobs = normalizeGlobs(globs);
+  const normalizedExcludeGlobs = normalizeGlobs(excludeGlobs);
+  const mergedExcludeGlobs = Array.from(
+    /* @__PURE__ */ new Set([...DEFAULT_TEST_FILE_EXCLUDE_GLOBS, ...normalizedExcludeGlobs])
+  );
+  if (normalizedGlobs.length === 0) {
+    return {
+      refs,
+      scan: {
+        globs: normalizedGlobs,
+        excludeGlobs: mergedExcludeGlobs,
+        matchedFileCount: 0
+      }
+    };
+  }
+  let files = [];
+  try {
+    files = await collectFilesByGlobs(root, {
+      globs: normalizedGlobs,
+      ignore: mergedExcludeGlobs
+    });
+  } catch (error2) {
+    return {
+      refs,
+      scan: {
+        globs: normalizedGlobs,
+        excludeGlobs: mergedExcludeGlobs,
+        matchedFileCount: 0
+      },
+      error: formatError3(error2)
+    };
+  }
+  const normalizedFiles = Array.from(
+    new Set(files.map((file) => import_node_path8.default.normalize(file)))
+  );
+  for (const file of normalizedFiles) {
+    const text = await (0, import_promises7.readFile)(file, "utf-8");
+    const scIds = extractAnnotatedScIds(text);
     if (scIds.length === 0) {
       continue;
     }
@@ -918,7 +1230,14 @@ async function collectScTestReferences(testsRoot) {
       refs.set(scId, current);
     }
   }
-  return refs;
+  return {
+    refs,
+    scan: {
+      globs: normalizedGlobs,
+      excludeGlobs: mergedExcludeGlobs,
+      matchedFileCount: normalizedFiles.length
+    }
+  };
 }
 function buildScCoverage(scIds, refs) {
   const sortedScIds = toSortedArray(scIds);
@@ -946,18 +1265,27 @@ function buildScCoverage(scIds, refs) {
 function toSortedArray(values) {
   return Array.from(new Set(values)).sort((a, b) => a.localeCompare(b));
 }
+function normalizeGlobs(globs) {
+  return globs.map((glob) => glob.trim()).filter((glob) => glob.length > 0);
+}
+function formatError3(error2) {
+  if (error2 instanceof Error) {
+    return error2.message;
+  }
+  return String(error2);
+}
 
 // src/core/version.ts
-var import_promises7 = require("fs/promises");
-var import_node_path7 = __toESM(require("path"), 1);
+var import_promises8 = require("fs/promises");
+var import_node_path9 = __toESM(require("path"), 1);
 var import_node_url2 = require("url");
 async function resolveToolVersion() {
-  if ("0.4.0".length > 0) {
-    return "0.4.0";
+  if ("0.4.4".length > 0) {
+    return "0.4.4";
   }
   try {
     const packagePath = resolvePackageJsonPath();
-    const raw = await (0, import_promises7.readFile)(packagePath, "utf-8");
+    const raw = await (0, import_promises8.readFile)(packagePath, "utf-8");
     const parsed = JSON.parse(raw);
     const version = typeof parsed.version === "string" ? parsed.version : "";
     return version.length > 0 ? version : "unknown";
@@ -968,71 +1296,42 @@ async function resolveToolVersion() {
 function resolvePackageJsonPath() {
   const base = __filename;
   const basePath = base.startsWith("file:") ? (0, import_node_url2.fileURLToPath)(base) : base;
-  return import_node_path7.default.resolve(import_node_path7.default.dirname(basePath), "../../package.json");
+  return import_node_path9.default.resolve(import_node_path9.default.dirname(basePath), "../../package.json");
 }
 
 // src/core/validators/contracts.ts
-var import_promises8 = require("fs/promises");
-var import_node_path9 = __toESM(require("path"), 1);
+var import_promises9 = require("fs/promises");
+var import_node_path11 = __toESM(require("path"), 1);
 
 // src/core/contracts.ts
-var import_node_path8 = __toESM(require("path"), 1);
+var import_node_path10 = __toESM(require("path"), 1);
 var import_yaml2 = require("yaml");
 function parseStructuredContract(file, text) {
-  const ext = import_node_path8.default.extname(file).toLowerCase();
+  const ext = import_node_path10.default.extname(file).toLowerCase();
   if (ext === ".json") {
     return JSON.parse(text);
   }
   return (0, import_yaml2.parse)(text);
 }
-function extractUiContractIds(doc) {
-  const id = typeof doc.id === "string" ? doc.id : "";
-  return extractIds(id, "UI");
-}
-function extractApiContractIds(doc) {
-  const operationIds = /* @__PURE__ */ new Set();
-  collectOperationIds(doc, operationIds);
-  const ids = /* @__PURE__ */ new Set();
-  for (const operationId of operationIds) {
-    extractIds(operationId, "API").forEach((id) => ids.add(id));
-  }
-  return Array.from(ids);
-}
-function collectOperationIds(value, out) {
-  if (!value || typeof value !== "object") {
-    return;
-  }
-  if (Array.isArray(value)) {
-    for (const item of value) {
-      collectOperationIds(item, out);
-    }
-    return;
-  }
-  for (const [key, entry] of Object.entries(value)) {
-    if (key === "operationId" && typeof entry === "string") {
-      out.add(entry);
-      continue;
-    }
-    collectOperationIds(entry, out);
-  }
-}
-
-// src/core/validators/contracts.ts
-var SQL_DANGEROUS_PATTERNS = [
-  { pattern: /\bDROP\s+TABLE\b/i, label: "DROP TABLE" },
-  { pattern: /\bDROP\s+DATABASE\b/i, label: "DROP DATABASE" },
-  { pattern: /\bTRUNCATE\b/i, label: "TRUNCATE" },
-  {
-    pattern: /\bALTER\s+TABLE\b[\s\S]*\bDROP\b/i,
-    label: "ALTER TABLE ... DROP"
+
+// src/core/validators/contracts.ts
+var SQL_DANGEROUS_PATTERNS = [
+  { pattern: /\bDROP\s+TABLE\b/i, label: "DROP TABLE" },
+  { pattern: /\bDROP\s+DATABASE\b/i, label: "DROP DATABASE" },
+  { pattern: /\bTRUNCATE\b/i, label: "TRUNCATE" },
+  {
+    pattern: /\bALTER\s+TABLE\b[\s\S]*\bDROP\b/i,
+    label: "ALTER TABLE ... DROP"
   }
 ];
 async function validateContracts(root, config) {
   const issues = [];
   const contractsRoot = resolvePath(root, config, "contractsDir");
-  issues.push(...await validateUiContracts(import_node_path9.default.join(contractsRoot, "ui")));
-  issues.push(...await validateApiContracts(import_node_path9.default.join(contractsRoot, "api")));
-  issues.push(...await validateDataContracts(import_node_path9.default.join(contractsRoot, "db")));
+  issues.push(...await validateUiContracts(import_node_path11.default.join(contractsRoot, "ui")));
+  issues.push(...await validateApiContracts(import_node_path11.default.join(contractsRoot, "api")));
+  issues.push(...await validateDataContracts(import_node_path11.default.join(contractsRoot, "db")));
+  const contractIndex = await buildContractIndex(root, config);
+  issues.push(...validateDuplicateContractIds(contractIndex));
   return issues;
 }
 async function validateUiContracts(uiRoot) {
@@ -1050,14 +1349,14 @@ async function validateUiContracts(uiRoot) {
   }
   const issues = [];
   for (const file of files) {
-    const text = await (0, import_promises8.readFile)(file, "utf-8");
+    const text = await (0, import_promises9.readFile)(file, "utf-8");
     const invalidIds = extractInvalidIds(text, [
       "SPEC",
       "BR",
       "SC",
       "UI",
       "API",
-      "DATA",
+      "DB",
       "ADR"
     ]);
     if (invalidIds.length > 0) {
@@ -1072,32 +1371,20 @@ async function validateUiContracts(uiRoot) {
         )
       );
     }
-    let doc;
+    const declaredIds = extractDeclaredContractIds(text);
+    issues.push(...validateDeclaredContractIds(declaredIds, file, "UI"));
     try {
-      doc = parseStructuredContract(file, text);
+      parseStructuredContract(file, stripContractDeclarationLines(text));
     } catch (error2) {
       issues.push(
         issue(
           "QFAI-CONTRACT-001",
-          `UI \u5951\u7D04\u30D5\u30A1\u30A4\u30EB\u306E\u89E3\u6790\u306B\u5931\u6557\u3057\u307E\u3057\u305F: ${file} (${formatError3(error2)})`,
+          `UI \u5951\u7D04\u30D5\u30A1\u30A4\u30EB\u306E\u89E3\u6790\u306B\u5931\u6557\u3057\u307E\u3057\u305F: ${file} (${formatError4(error2)})`,
           "error",
           file,
           "contracts.ui.parse"
         )
       );
-      continue;
-    }
-    const uiIds = extractUiContractIds(doc);
-    if (uiIds.length === 0) {
-      issues.push(
-        issue(
-          "QFAI-CONTRACT-002",
-          `UI \u5951\u7D04\u306B ID(UI-xxxx) \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093: ${file}`,
-          "error",
-          file,
-          "contracts.ui.id"
-        )
-      );
     }
   }
   return issues;
@@ -1117,14 +1404,14 @@ async function validateApiContracts(apiRoot) {
   }
   const issues = [];
   for (const file of files) {
-    const text = await (0, import_promises8.readFile)(file, "utf-8");
+    const text = await (0, import_promises9.readFile)(file, "utf-8");
     const invalidIds = extractInvalidIds(text, [
       "SPEC",
       "BR",
       "SC",
       "UI",
       "API",
-      "DATA",
+      "DB",
       "ADR"
     ]);
     if (invalidIds.length > 0) {
@@ -1139,14 +1426,16 @@ async function validateApiContracts(apiRoot) {
         )
       );
     }
+    const declaredIds = extractDeclaredContractIds(text);
+    issues.push(...validateDeclaredContractIds(declaredIds, file, "API"));
     let doc;
     try {
-      doc = parseStructuredContract(file, text);
+      doc = parseStructuredContract(file, stripContractDeclarationLines(text));
     } catch (error2) {
       issues.push(
         issue(
           "QFAI-CONTRACT-001",
-          `API \u5951\u7D04\u30D5\u30A1\u30A4\u30EB\u306E\u89E3\u6790\u306B\u5931\u6557\u3057\u307E\u3057\u305F: ${file} (${formatError3(error2)})`,
+          `API \u5951\u7D04\u30D5\u30A1\u30A4\u30EB\u306E\u89E3\u6790\u306B\u5931\u6557\u3057\u307E\u3057\u305F: ${file} (${formatError4(error2)})`,
           "error",
           file,
           "contracts.api.parse"
@@ -1165,18 +1454,6 @@ async function validateApiContracts(apiRoot) {
         )
       );
     }
-    const apiIds = extractApiContractIds(doc);
-    if (apiIds.length === 0) {
-      issues.push(
-        issue(
-          "QFAI-CONTRACT-002",
-          `API \u5951\u7D04\u306B ID(API-xxxx) \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093: ${file}`,
-          "error",
-          file,
-          "contracts.api.id"
-        )
-      );
-    }
   }
   return issues;
 }
@@ -1185,24 +1462,24 @@ async function validateDataContracts(dataRoot) {
   if (files.length === 0) {
     return [
       issue(
-        "QFAI-DATA-000",
-        "DATA \u5951\u7D04\u30D5\u30A1\u30A4\u30EB\u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002",
+        "QFAI-DB-000",
+        "DB \u5951\u7D04\u30D5\u30A1\u30A4\u30EB\u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002",
         "info",
         dataRoot,
-        "contracts.data.files"
+        "contracts.db.files"
       )
     ];
   }
   const issues = [];
   for (const file of files) {
-    const text = await (0, import_promises8.readFile)(file, "utf-8");
+    const text = await (0, import_promises9.readFile)(file, "utf-8");
     const invalidIds = extractInvalidIds(text, [
       "SPEC",
       "BR",
       "SC",
       "UI",
       "API",
-      "DATA",
+      "DB",
       "ADR"
     ]);
     if (invalidIds.length > 0) {
@@ -1217,6 +1494,8 @@ async function validateDataContracts(dataRoot) {
         )
       );
     }
+    const declaredIds = extractDeclaredContractIds(text);
+    issues.push(...validateDeclaredContractIds(declaredIds, file, "DB"));
     issues.push(...lintSql(text, file));
   }
   return issues;
@@ -1227,21 +1506,87 @@ function lintSql(text, file) {
     if (pattern.test(text)) {
       issues.push(
         issue(
-          "QFAI-DATA-001",
+          "QFAI-DB-001",
           `\u5371\u967A\u306A SQL \u64CD\u4F5C\u304C\u542B\u307E\u308C\u3066\u3044\u307E\u3059: ${label}`,
           "warning",
           file,
-          "contracts.data.sql"
+          "contracts.db.sql"
         )
       );
     }
   }
   return issues;
 }
+function validateDeclaredContractIds(ids, file, kind) {
+  const issues = [];
+  if (ids.length === 0) {
+    issues.push(
+      issue(
+        "QFAI-CONTRACT-010",
+        `\u5951\u7D04\u30D5\u30A1\u30A4\u30EB\u306B QFAI-CONTRACT-ID \u304C\u3042\u308A\u307E\u305B\u3093: ${file}`,
+        "error",
+        file,
+        "contracts.declaration"
+      )
+    );
+    return issues;
+  }
+  if (ids.length > 1) {
+    issues.push(
+      issue(
+        "QFAI-CONTRACT-011",
+        `\u5951\u7D04\u30D5\u30A1\u30A4\u30EB\u306B\u8907\u6570\u306E QFAI-CONTRACT-ID \u304C\u5BA3\u8A00\u3055\u308C\u3066\u3044\u307E\u3059: ${ids.join(
+          ", "
+        )}`,
+        "error",
+        file,
+        "contracts.declaration",
+        ids
+      )
+    );
+    return issues;
+  }
+  const [id] = ids;
+  if (id && !id.startsWith(`${kind}-`)) {
+    issues.push(
+      issue(
+        "QFAI-CONTRACT-013",
+        `\u5951\u7D04\u30D5\u30A1\u30A4\u30EB\u306E QFAI-CONTRACT-ID \u304C ${kind}- \u3067\u306F\u3042\u308A\u307E\u305B\u3093: ${id}`,
+        "error",
+        file,
+        "contracts.declarationPrefix",
+        [id]
+      )
+    );
+  }
+  return issues;
+}
+function validateDuplicateContractIds(contractIndex) {
+  const issues = [];
+  for (const [id, files] of contractIndex.idToFiles.entries()) {
+    if (files.size <= 1) {
+      continue;
+    }
+    const sortedFiles = Array.from(files).sort((a, b) => a.localeCompare(b));
+    issues.push(
+      issue(
+        "QFAI-CONTRACT-012",
+        `\u5951\u7D04 ID \u304C\u8907\u6570\u30D5\u30A1\u30A4\u30EB\u3067\u5BA3\u8A00\u3055\u308C\u3066\u3044\u307E\u3059: ${id} (${sortedFiles.join(
+          ", "
+        )})`,
+        "error",
+        sortedFiles[0],
+        "contracts.idDuplicate",
+        [id]
+      )
+    );
+  }
+  return issues;
+}
 function hasOpenApi(doc) {
   return typeof doc.openapi === "string" && doc.openapi.length > 0;
 }
-function formatError3(error2) {
+function formatError4(error2) {
   if (error2 instanceof Error) {
     return error2.message;
   }
@@ -1266,8 +1611,8 @@ function issue(code, message, severity, file, rule, refs) {
 }
 
 // src/core/validators/delta.ts
-var import_promises9 = require("fs/promises");
-var import_node_path10 = __toESM(require("path"), 1);
+var import_promises10 = require("fs/promises");
+var import_node_path12 = __toESM(require("path"), 1);
 var SECTION_RE = /^##\s+変更区分/m;
 var COMPAT_LINE_RE = /^\s*-\s*\[[ xX]\]\s*Compatibility\b/m;
 var CHANGE_LINE_RE = /^\s*-\s*\[[ xX]\]\s*Change\/Improvement\b/m;
@@ -1277,268 +1622,87 @@ async function validateDeltas(root, config) {
   const specsRoot = resolvePath(root, config, "specsDir");
   const packs = await collectSpecPackDirs(specsRoot);
   if (packs.length === 0) {
-    return [];
-  }
-  const issues = [];
-  for (const pack of packs) {
-    const deltaPath = import_node_path10.default.join(pack, "delta.md");
-    let text;
-    try {
-      text = await (0, import_promises9.readFile)(deltaPath, "utf-8");
-    } catch (error2) {
-      if (isMissingFileError2(error2)) {
-        issues.push(
-          issue2(
-            "QFAI-DELTA-001",
-            "delta.md \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002",
-            "error",
-            deltaPath,
-            "delta.exists"
-          )
-        );
-        continue;
-      }
-      throw error2;
-    }
-    const hasSection = SECTION_RE.test(text);
-    const hasCompatibility = COMPAT_LINE_RE.test(text);
-    const hasChange = CHANGE_LINE_RE.test(text);
-    if (!hasSection || !hasCompatibility || !hasChange) {
-      issues.push(
-        issue2(
-          "QFAI-DELTA-002",
-          "delta.md \u306E\u5909\u66F4\u533A\u5206\u304C\u4E0D\u8DB3\u3057\u3066\u3044\u307E\u3059\u3002",
-          "error",
-          deltaPath,
-          "delta.section"
-        )
-      );
-      continue;
-    }
-    const compatibilityChecked = COMPAT_CHECKED_RE.test(text);
-    const changeChecked = CHANGE_CHECKED_RE.test(text);
-    if (compatibilityChecked === changeChecked) {
-      issues.push(
-        issue2(
-          "QFAI-DELTA-003",
-          "delta.md \u306E\u5909\u66F4\u533A\u5206\u306F\u3069\u3061\u3089\u304B1\u3064\u3060\u3051\u9078\u629E\u3057\u3066\u304F\u3060\u3055\u3044\uFF08\u4E21\u65B9ON/\u4E21\u65B9OFF\u306F\u7121\u52B9\u3067\u3059\uFF09\u3002",
-          "error",
-          deltaPath,
-          "delta.classification"
-        )
-      );
-    }
-  }
-  return issues;
-}
-function isMissingFileError2(error2) {
-  if (!error2 || typeof error2 !== "object") {
-    return false;
-  }
-  return error2.code === "ENOENT";
-}
-function issue2(code, message, severity, file, rule, refs) {
-  const issue7 = {
-    code,
-    severity,
-    message
-  };
-  if (file) {
-    issue7.file = file;
-  }
-  if (rule) {
-    issue7.rule = rule;
-  }
-  if (refs && refs.length > 0) {
-    issue7.refs = refs;
-  }
-  return issue7;
-}
-
-// src/core/validators/ids.ts
-var import_promises11 = require("fs/promises");
-var import_node_path12 = __toESM(require("path"), 1);
-
-// src/core/contractIndex.ts
-var import_promises10 = require("fs/promises");
-var import_node_path11 = __toESM(require("path"), 1);
-async function buildContractIndex(root, config) {
-  const contractsRoot = resolvePath(root, config, "contractsDir");
-  const uiRoot = import_node_path11.default.join(contractsRoot, "ui");
-  const apiRoot = import_node_path11.default.join(contractsRoot, "api");
-  const dataRoot = import_node_path11.default.join(contractsRoot, "db");
-  const [uiFiles, apiFiles, dataFiles] = await Promise.all([
-    collectUiContractFiles(uiRoot),
-    collectApiContractFiles(apiRoot),
-    collectDataContractFiles(dataRoot)
-  ]);
-  const index = {
-    ids: /* @__PURE__ */ new Set(),
-    idToFiles: /* @__PURE__ */ new Map(),
-    files: { ui: uiFiles, api: apiFiles, data: dataFiles },
-    structuredParseFailedFiles: /* @__PURE__ */ new Set()
-  };
-  await indexUiContracts(uiFiles, index);
-  await indexApiContracts(apiFiles, index);
-  await indexDataContracts(dataFiles, index);
-  return index;
-}
-async function indexUiContracts(files, index) {
-  for (const file of files) {
-    const text = await (0, import_promises10.readFile)(file, "utf-8");
-    try {
-      const doc = parseStructuredContract(file, text);
-      extractUiContractIds(doc).forEach((id) => record(index, id, file));
-    } catch {
-      index.structuredParseFailedFiles.add(file);
-      extractIds(text, "UI").forEach((id) => record(index, id, file));
-    }
-  }
-}
-async function indexApiContracts(files, index) {
-  for (const file of files) {
-    const text = await (0, import_promises10.readFile)(file, "utf-8");
-    try {
-      const doc = parseStructuredContract(file, text);
-      extractApiContractIds(doc).forEach((id) => record(index, id, file));
-    } catch {
-      index.structuredParseFailedFiles.add(file);
-      extractIds(text, "API").forEach((id) => record(index, id, file));
-    }
-  }
-}
-async function indexDataContracts(files, index) {
-  for (const file of files) {
-    const text = await (0, import_promises10.readFile)(file, "utf-8");
-    extractIds(text, "DATA").forEach((id) => record(index, id, file));
-  }
-}
-function record(index, id, file) {
-  index.ids.add(id);
-  const current = index.idToFiles.get(id) ?? /* @__PURE__ */ new Set();
-  current.add(file);
-  index.idToFiles.set(id, current);
-}
-
-// src/core/parse/markdown.ts
-var HEADING_RE = /^(#{1,6})\s+(.+?)\s*$/;
-function parseHeadings(md) {
-  const lines = md.split(/\r?\n/);
-  const headings = [];
-  for (let i = 0; i < lines.length; i++) {
-    const line = lines[i] ?? "";
-    const match = line.match(HEADING_RE);
-    if (!match) continue;
-    const levelToken = match[1];
-    const title = match[2];
-    if (!levelToken || !title) continue;
-    headings.push({
-      level: levelToken.length,
-      title: title.trim(),
-      line: i + 1
-    });
-  }
-  return headings;
-}
-function extractH2Sections(md) {
-  const lines = md.split(/\r?\n/);
-  const headings = parseHeadings(md).filter((heading) => heading.level === 2);
-  const sections = /* @__PURE__ */ new Map();
-  for (let i = 0; i < headings.length; i++) {
-    const current = headings[i];
-    if (!current) continue;
-    const next = headings[i + 1];
-    const startLine = current.line + 1;
-    const endLine = (next?.line ?? lines.length + 1) - 1;
-    const body = startLine <= endLine ? lines.slice(startLine - 1, endLine).join("\n") : "";
-    sections.set(current.title.trim(), {
-      title: current.title.trim(),
-      startLine,
-      endLine,
-      body
-    });
-  }
-  return sections;
-}
-
-// src/core/parse/spec.ts
-var SPEC_ID_RE = /\bSPEC-\d{4}\b/;
-var BR_LINE_RE = /^\s*(?:[-*]\s*)?\[(BR-\d{4})\]\[(P[0-3])\]\s*(.+)$/;
-var BR_LINE_ANY_PRIORITY_RE = /^\s*(?:[-*]\s*)?\[(BR-\d{4})\]\[(P[^\]]+)\]\s*(.+)$/;
-var BR_LINE_NO_PRIORITY_RE = /^\s*(?:[-*]\s*)?\[(BR-\d{4})\](?!\s*\[P)\s*(.*\S.*)$/;
-var BR_SECTION_TITLE = "\u696D\u52D9\u30EB\u30FC\u30EB";
-var VALID_PRIORITIES = /* @__PURE__ */ new Set(["P0", "P1", "P2", "P3"]);
-function parseSpec(md, file) {
-  const headings = parseHeadings(md);
-  const h1 = headings.find((heading) => heading.level === 1);
-  const specId = h1?.title.match(SPEC_ID_RE)?.[0];
-  const sections = extractH2Sections(md);
-  const sectionNames = new Set(Array.from(sections.keys()));
-  const brSection = sections.get(BR_SECTION_TITLE);
-  const brLines = brSection ? brSection.body.split(/\r?\n/) : [];
-  const startLine = brSection?.startLine ?? 1;
-  const brs = [];
-  const brsWithoutPriority = [];
-  const brsWithInvalidPriority = [];
-  for (let i = 0; i < brLines.length; i++) {
-    const lineText = brLines[i] ?? "";
-    const lineNumber = startLine + i;
-    const validMatch = lineText.match(BR_LINE_RE);
-    if (validMatch) {
-      const id = validMatch[1];
-      const priority = validMatch[2];
-      const text = validMatch[3];
-      if (!id || !priority || !text) continue;
-      brs.push({
-        id,
-        priority,
-        text: text.trim(),
-        line: lineNumber
-      });
-      continue;
-    }
-    const anyPriorityMatch = lineText.match(BR_LINE_ANY_PRIORITY_RE);
-    if (anyPriorityMatch) {
-      const id = anyPriorityMatch[1];
-      const priority = anyPriorityMatch[2];
-      const text = anyPriorityMatch[3];
-      if (!id || !priority || !text) continue;
-      if (!VALID_PRIORITIES.has(priority)) {
-        brsWithInvalidPriority.push({
-          id,
-          priority,
-          text: text.trim(),
-          line: lineNumber
-        });
+    return [];
+  }
+  const issues = [];
+  for (const pack of packs) {
+    const deltaPath = import_node_path12.default.join(pack, "delta.md");
+    let text;
+    try {
+      text = await (0, import_promises10.readFile)(deltaPath, "utf-8");
+    } catch (error2) {
+      if (isMissingFileError2(error2)) {
+        issues.push(
+          issue2(
+            "QFAI-DELTA-001",
+            "delta.md \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002",
+            "error",
+            deltaPath,
+            "delta.exists"
+          )
+        );
+        continue;
       }
+      throw error2;
+    }
+    const hasSection = SECTION_RE.test(text);
+    const hasCompatibility = COMPAT_LINE_RE.test(text);
+    const hasChange = CHANGE_LINE_RE.test(text);
+    if (!hasSection || !hasCompatibility || !hasChange) {
+      issues.push(
+        issue2(
+          "QFAI-DELTA-002",
+          "delta.md \u306E\u5909\u66F4\u533A\u5206\u304C\u4E0D\u8DB3\u3057\u3066\u3044\u307E\u3059\u3002",
+          "error",
+          deltaPath,
+          "delta.section"
+        )
+      );
       continue;
     }
-    const noPriorityMatch = lineText.match(BR_LINE_NO_PRIORITY_RE);
-    if (noPriorityMatch) {
-      const id = noPriorityMatch[1];
-      const text = noPriorityMatch[2];
-      if (!id || !text) continue;
-      brsWithoutPriority.push({
-        id,
-        text: text.trim(),
-        line: lineNumber
-      });
+    const compatibilityChecked = COMPAT_CHECKED_RE.test(text);
+    const changeChecked = CHANGE_CHECKED_RE.test(text);
+    if (compatibilityChecked === changeChecked) {
+      issues.push(
+        issue2(
+          "QFAI-DELTA-003",
+          "delta.md \u306E\u5909\u66F4\u533A\u5206\u306F\u3069\u3061\u3089\u304B1\u3064\u3060\u3051\u9078\u629E\u3057\u3066\u304F\u3060\u3055\u3044\uFF08\u4E21\u65B9ON/\u4E21\u65B9OFF\u306F\u7121\u52B9\u3067\u3059\uFF09\u3002",
+          "error",
+          deltaPath,
+          "delta.classification"
+        )
+      );
     }
   }
-  const parsed = {
-    file,
-    sections: sectionNames,
-    brs,
-    brsWithoutPriority,
-    brsWithInvalidPriority
+  return issues;
+}
+function isMissingFileError2(error2) {
+  if (!error2 || typeof error2 !== "object") {
+    return false;
+  }
+  return error2.code === "ENOENT";
+}
+function issue2(code, message, severity, file, rule, refs) {
+  const issue7 = {
+    code,
+    severity,
+    message
   };
-  if (specId) {
-    parsed.specId = specId;
+  if (file) {
+    issue7.file = file;
   }
-  return parsed;
+  if (rule) {
+    issue7.rule = rule;
+  }
+  if (refs && refs.length > 0) {
+    issue7.refs = refs;
+  }
+  return issue7;
 }
 
 // src/core/validators/ids.ts
+var import_promises11 = require("fs/promises");
+var import_node_path13 = __toESM(require("path"), 1);
 var SC_TAG_RE3 = /^SC-\d{4}$/;
 async function validateDefinedIds(root, config) {
   const issues = [];
@@ -1604,7 +1768,7 @@ function recordId(out, id, file) {
 }
 function formatFileList(files, root) {
   return files.map((file) => {
-    const relative = import_node_path12.default.relative(root, file);
+    const relative = import_node_path13.default.relative(root, file);
     return relative.length > 0 ? relative : file;
   }).join(", ");
 }
@@ -1633,7 +1797,6 @@ var WHEN_PATTERN = /\bWhen\b/;
 var THEN_PATTERN = /\bThen\b/;
 var SC_TAG_RE4 = /^SC-\d{4}$/;
 var SPEC_TAG_RE2 = /^SPEC-\d{4}$/;
-var BR_TAG_RE2 = /^BR-\d{4}$/;
 async function validateScenarios(root, config) {
   const specsRoot = resolvePath(root, config, "specsDir");
   const entries = await collectSpecEntries(specsRoot);
@@ -1682,7 +1845,7 @@ function validateScenarioContent(text, file) {
     "SC",
     "UI",
     "API",
-    "DATA",
+    "DB",
     "ADR"
   ]);
   if (invalidIds.length > 0) {
@@ -1713,17 +1876,7 @@ function validateScenarioContent(text, file) {
   const featureSpecTags = document.featureTags.filter(
     (tag) => SPEC_TAG_RE2.test(tag)
   );
-  if (featureSpecTags.length === 0) {
-    issues.push(
-      issue4(
-        "QFAI-SC-009",
-        "Feature \u30BF\u30B0\u306B SPEC \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093\u3002",
-        "error",
-        file,
-        "scenario.featureSpec"
-      )
-    );
-  } else if (featureSpecTags.length > 1) {
+  if (featureSpecTags.length > 1) {
     issues.push(
       issue4(
         "QFAI-SC-009",
@@ -1751,17 +1904,6 @@ function validateScenarioContent(text, file) {
       )
     );
   }
-  if (document.scenarios.length > 1) {
-    issues.push(
-      issue4(
-        "QFAI-SC-011",
-        `Scenario \u306F1\u3064\u306E\u307F\u8A31\u53EF\u3055\u308C\u3066\u3044\u307E\u3059\uFF08\u691C\u51FA: ${document.scenarios.length}\u4EF6\uFF09`,
-        "error",
-        file,
-        "scenario.single"
-      )
-    );
-  }
   for (const scenario of document.scenarios) {
     if (scenario.tags.length === 0) {
       issues.push(
@@ -1782,12 +1924,6 @@ function validateScenarioContent(text, file) {
     } else if (scTags.length > 1) {
       missingTags.push(`SC(${scTags.length}\u4EF6/1\u4EF6\u5FC5\u9808)`);
     }
-    if (!scenario.tags.some((tag) => SPEC_TAG_RE2.test(tag))) {
-      missingTags.push("SPEC");
-    }
-    if (!scenario.tags.some((tag) => BR_TAG_RE2.test(tag))) {
-      missingTags.push("BR");
-    }
     if (missingTags.length > 0) {
       issues.push(
         issue4(
@@ -1907,7 +2043,7 @@ function validateSpecContent(text, file, requiredSections) {
     "SC",
     "UI",
     "API",
-    "DATA",
+    "DB",
     "ADR"
   ]);
   if (invalidIds.length > 0) {
@@ -2022,9 +2158,8 @@ function isMissingFileError4(error2) {
 
 // src/core/validators/traceability.ts
 var import_promises14 = require("fs/promises");
-var SC_TAG_RE5 = /^SC-\d{4}$/;
 var SPEC_TAG_RE3 = /^SPEC-\d{4}$/;
-var BR_TAG_RE3 = /^BR-\d{4}$/;
+var BR_TAG_RE2 = /^BR-\d{4}$/;
 async function validateTraceability(root, config) {
   const issues = [];
   const specsRoot = resolvePath(root, config, "specsDir");
@@ -2037,8 +2172,7 @@ async function validateTraceability(root, config) {
   const brIdsInSpecs = /* @__PURE__ */ new Set();
   const brIdsInScenarios = /* @__PURE__ */ new Set();
   const scIdsInScenarios = /* @__PURE__ */ new Set();
-  const scenarioContractIds = /* @__PURE__ */ new Set();
-  const scWithContracts = /* @__PURE__ */ new Set();
+  const specContractIds = /* @__PURE__ */ new Set();
   const specToBrIds = /* @__PURE__ */ new Map();
   const contractIndex = await buildContractIndex(root, config);
   const contractIds = contractIndex.ids;
@@ -2051,19 +2185,60 @@ async function validateTraceability(root, config) {
     }
     const brIds = parsed.brs.map((br) => br.id);
     brIds.forEach((id) => brIdsInSpecs.add(id));
-    const referencedContractIds = /* @__PURE__ */ new Set([
-      ...extractIds(text, "UI"),
-      ...extractIds(text, "API"),
-      ...extractIds(text, "DATA")
-    ]);
-    const unknownContractIds = Array.from(referencedContractIds).filter(
+    if (parsed.specId) {
+      const current = specToBrIds.get(parsed.specId) ?? /* @__PURE__ */ new Set();
+      brIds.forEach((id) => current.add(id));
+      specToBrIds.set(parsed.specId, current);
+    }
+    const contractRefs = parsed.contractRefs;
+    if (contractRefs.lines.length === 0) {
+      issues.push(
+        issue6(
+          "QFAI-TRACE-020",
+          "Spec \u306B QFAI-CONTRACT-REF \u304C\u3042\u308A\u307E\u305B\u3093\u3002",
+          "error",
+          file,
+          "traceability.specContractRefRequired"
+        )
+      );
+    } else {
+      if (contractRefs.hasNone && contractRefs.ids.length > 0) {
+        issues.push(
+          issue6(
+            "QFAI-TRACE-021",
+            "Spec \u306E QFAI-CONTRACT-REF \u306B none \u3068\u5951\u7D04 ID \u304C\u6DF7\u5728\u3057\u3066\u3044\u307E\u3059\u3002",
+            "error",
+            file,
+            "traceability.specContractRefFormat"
+          )
+        );
+      }
+      if (contractRefs.invalidTokens.length > 0) {
+        issues.push(
+          issue6(
+            "QFAI-TRACE-021",
+            `Spec \u306E\u5951\u7D04 ID \u304C\u4E0D\u6B63\u3067\u3059: ${contractRefs.invalidTokens.join(
+              ", "
+            )}`,
+            "error",
+            file,
+            "traceability.specContractRefFormat",
+            contractRefs.invalidTokens
+          )
+        );
+      }
+    }
+    contractRefs.ids.forEach((id) => {
+      specContractIds.add(id);
+    });
+    const unknownContractIds = contractRefs.ids.filter(
       (id) => !contractIds.has(id)
     );
     if (unknownContractIds.length > 0) {
       issues.push(
         issue6(
-          "QFAI-TRACE-009",
-          `Spec \u304C\u5B58\u5728\u3057\u306A\u3044\u5951\u7D04 ID \u3092\u53C2\u7167\u3057\u3066\u3044\u307E\u3059: ${unknownContractIds.join(
+          "QFAI-TRACE-021",
+          `Spec \u304C\u672A\u77E5\u306E\u5951\u7D04 ID \u3092\u53C2\u7167\u3057\u3066\u3044\u307E\u3059: ${unknownContractIds.join(
             ", "
           )}`,
           "error",
@@ -2073,11 +2248,6 @@ async function validateTraceability(root, config) {
         )
       );
     }
-    if (parsed.specId) {
-      const current = specToBrIds.get(parsed.specId) ?? /* @__PURE__ */ new Set();
-      brIds.forEach((id) => current.add(id));
-      specToBrIds.set(parsed.specId, current);
-    }
   }
   for (const file of scenarioFiles) {
     const text = await (0, import_promises14.readFile)(file, "utf-8");
@@ -2087,20 +2257,42 @@ async function validateTraceability(root, config) {
       continue;
     }
     const atoms = buildScenarioAtoms(document);
+    const scIdsInFile = /* @__PURE__ */ new Set();
     for (const [index, scenario] of document.scenarios.entries()) {
       const atom = atoms[index];
       if (!atom) {
         continue;
       }
       const specTags = scenario.tags.filter((tag) => SPEC_TAG_RE3.test(tag));
-      const brTags = scenario.tags.filter((tag) => BR_TAG_RE3.test(tag));
-      const scTags = scenario.tags.filter((tag) => SC_TAG_RE5.test(tag));
-      brTags.forEach((id) => brIdsInScenarios.add(id));
-      scTags.forEach((id) => scIdsInScenarios.add(id));
-      atom.contractIds.forEach((id) => scenarioContractIds.add(id));
-      if (atom.contractIds.length > 0) {
-        scTags.forEach((id) => scWithContracts.add(id));
+      const brTags = scenario.tags.filter((tag) => BR_TAG_RE2.test(tag));
+      const scTags = scenario.tags.filter((tag) => SC_TAG_RE2.test(tag));
+      if (specTags.length === 0) {
+        issues.push(
+          issue6(
+            "QFAI-TRACE-014",
+            `Scenario \u304C SPEC \u30BF\u30B0\u3092\u6301\u3063\u3066\u3044\u307E\u305B\u3093: ${scenario.name}`,
+            "error",
+            file,
+            "traceability.scenarioSpecRequired"
+          )
+        );
+      }
+      if (brTags.length === 0) {
+        issues.push(
+          issue6(
+            "QFAI-TRACE-015",
+            `Scenario \u304C BR \u30BF\u30B0\u3092\u6301\u3063\u3066\u3044\u307E\u305B\u3093: ${scenario.name}`,
+            "error",
+            file,
+            "traceability.scenarioBrRequired"
+          )
+        );
       }
+      brTags.forEach((id) => brIdsInScenarios.add(id));
+      scTags.forEach((id) => {
+        scIdsInScenarios.add(id);
+        scIdsInFile.add(id);
+      });
       const unknownSpecIds = specTags.filter((id) => !specIds.has(id));
       if (unknownSpecIds.length > 0) {
         issues.push(
@@ -2174,6 +2366,22 @@ async function validateTraceability(root, config) {
         }
       }
     }
+    if (scIdsInFile.size !== 1) {
+      const invalidScIds = Array.from(scIdsInFile).sort(
+        (a, b) => a.localeCompare(b)
+      );
+      const detail = invalidScIds.length === 0 ? "SC \u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093" : `\u8907\u6570\u306E SC \u304C\u5B58\u5728\u3057\u307E\u3059: ${invalidScIds.join(", ")}`;
+      issues.push(
+        issue6(
+          "QFAI-TRACE-012",
+          `Spec entry \u304C Spec:SC=1:1 \u3092\u6E80\u305F\u3057\u3066\u3044\u307E\u305B\u3093: ${detail}`,
+          "error",
+          file,
+          "traceability.specScOneToOne",
+          invalidScIds
+        )
+      );
+    }
   }
   if (upstreamIds.size === 0) {
     return [
@@ -2203,40 +2411,62 @@ async function validateTraceability(root, config) {
       );
     }
   }
-  if (config.validation.traceability.scMustTouchContracts && scIdsInScenarios.size > 0) {
-    const scWithoutContracts = Array.from(scIdsInScenarios).filter(
-      (id) => !scWithContracts.has(id)
+  const scRefsResult = await collectScTestReferences(
+    root,
+    config.validation.traceability.testFileGlobs,
+    config.validation.traceability.testFileExcludeGlobs
+  );
+  const scTestRefs = scRefsResult.refs;
+  const testFileScan = scRefsResult.scan;
+  const hasScenarios = scIdsInScenarios.size > 0;
+  const hasGlobConfig = testFileScan.globs.length > 0;
+  const hasMatchedTests = testFileScan.matchedFileCount > 0;
+  if (hasScenarios && (!hasGlobConfig || !hasMatchedTests || scRefsResult.error)) {
+    const detail = scRefsResult.error ? `\uFF08\u8A73\u7D30: ${scRefsResult.error}\uFF09` : "";
+    issues.push(
+      issue6(
+        "QFAI-TRACE-013",
+        `\u30C6\u30B9\u30C8\u63A2\u7D22 glob \u304C\u672A\u8A2D\u5B9A/\u4E0D\u6B63/\u4E00\u81F4\u30D5\u30A1\u30A4\u30EB0\u306E\u305F\u3081 SC\u2192Test \u3092\u5224\u5B9A\u3067\u304D\u307E\u305B\u3093\u3002${detail}`,
+        "error",
+        testsRoot,
+        "traceability.testFileGlobs"
+      )
+    );
+  } else {
+    if (config.validation.traceability.scMustHaveTest && scIdsInScenarios.size) {
+      const scWithoutTests = Array.from(scIdsInScenarios).filter((id) => {
+        const refs = scTestRefs.get(id);
+        return !refs || refs.size === 0;
+      });
+      if (scWithoutTests.length > 0) {
+        issues.push(
+          issue6(
+            "QFAI-TRACE-010",
+            `SC \u304C\u30C6\u30B9\u30C8\u3067\u53C2\u7167\u3055\u308C\u3066\u3044\u307E\u305B\u3093: ${scWithoutTests.join(
+              ", "
+            )}\u3002testFileGlobs \u306B\u4E00\u81F4\u3059\u308B\u30C6\u30B9\u30C8\u30D5\u30A1\u30A4\u30EB\u3078 QFAI:SC-xxxx \u3092\u8A18\u8F09\u3057\u3066\u304F\u3060\u3055\u3044\u3002`,
+            config.validation.traceability.scNoTestSeverity,
+            testsRoot,
+            "traceability.scMustHaveTest",
+            scWithoutTests
+          )
+        );
+      }
+    }
+    const unknownScIds = Array.from(scTestRefs.keys()).filter(
+      (id) => !scIdsInScenarios.has(id)
     );
-    if (scWithoutContracts.length > 0) {
+    if (unknownScIds.length > 0) {
       issues.push(
         issue6(
-          "QFAI_TRACE_SC_NO_CONTRACT",
-          `SC \u304C\u5951\u7D04(UI/API/DATA)\u306B\u63A5\u7D9A\u3057\u3066\u3044\u307E\u305B\u3093: ${scWithoutContracts.join(
+          "QFAI-TRACE-011",
+          `\u30C6\u30B9\u30C8\u304C\u672A\u77E5\u306E SC \u3092\u30A2\u30CE\u30C6\u30FC\u30B7\u30E7\u30F3\u53C2\u7167\u3057\u3066\u3044\u307E\u3059: ${unknownScIds.join(
             ", "
           )}`,
           "error",
-          specsRoot,
-          "traceability.scMustTouchContracts",
-          scWithoutContracts
-        )
-      );
-    }
-  }
-  if (config.validation.traceability.scMustHaveTest && scIdsInScenarios.size) {
-    const scTestRefs = await collectScTestReferences(testsRoot);
-    const scWithoutTests = Array.from(scIdsInScenarios).filter((id) => {
-      const refs = scTestRefs.get(id);
-      return !refs || refs.size === 0;
-    });
-    if (scWithoutTests.length > 0) {
-      issues.push(
-        issue6(
-          "QFAI-TRACE-010",
-          `SC \u304C tests \u306B\u53C2\u7167\u3055\u308C\u3066\u3044\u307E\u305B\u3093: ${scWithoutTests.join(", ")}\u3002tests/ \u914D\u4E0B\u306E\u30C6\u30B9\u30C8\u30D5\u30A1\u30A4\u30EB\uFF08.ts/.tsx/.js/.jsx\uFF09\u306B SC ID \u3092\u30B3\u30E1\u30F3\u30C8\u307E\u305F\u306F\u30B3\u30FC\u30C9\u3067\u8FFD\u52A0\u3057\u3066\u304F\u3060\u3055\u3044\u3002`,
-          config.validation.traceability.scNoTestSeverity,
           testsRoot,
-          "traceability.scMustHaveTest",
-          scWithoutTests
+          "traceability.scUnknownInTests",
+          unknownScIds
         )
       );
     }
@@ -2244,16 +2474,16 @@ async function validateTraceability(root, config) {
   if (!config.validation.traceability.allowOrphanContracts) {
     if (contractIds.size > 0) {
       const orphanContracts = Array.from(contractIds).filter(
-        (id) => !scenarioContractIds.has(id)
+        (id) => !specContractIds.has(id)
       );
       if (orphanContracts.length > 0) {
         issues.push(
           issue6(
-            "QFAI_CONTRACT_ORPHAN",
-            `\u5951\u7D04\u304C SC \u304B\u3089\u53C2\u7167\u3055\u308C\u3066\u3044\u307E\u305B\u3093: ${orphanContracts.join(", ")}`,
+            "QFAI-TRACE-022",
+            `\u5951\u7D04\u304C Spec \u304B\u3089\u53C2\u7167\u3055\u308C\u3066\u3044\u307E\u305B\u3093: ${orphanContracts.join(", ")}`,
             "error",
             specsRoot,
-            "traceability.allowOrphanContracts",
+            "traceability.contractCoverage",
             orphanContracts
           )
         );
@@ -2299,8 +2529,8 @@ async function validateCodeReferences(upstreamIds, srcRoot, testsRoot) {
     issues.push(
       issue6(
         "QFAI-TRACE-002",
-        "\u4E0A\u6D41 ID \u304C\u30B3\u30FC\u30C9/\u30C6\u30B9\u30C8\u306B\u53C2\u7167\u3055\u308C\u3066\u3044\u307E\u305B\u3093\u3002",
-        "warning",
+        "\u4E0A\u6D41 ID \u304C\u30B3\u30FC\u30C9/\u30C6\u30B9\u30C8\u306B\u53C2\u7167\u3055\u308C\u3066\u3044\u307E\u305B\u3093\uFF08\u53C2\u8003\u60C5\u5831\uFF09\u3002",
+        "info",
         srcRoot,
         "traceability.codeReferences"
       )
@@ -2343,11 +2573,24 @@ async function validateProject(root, configResult) {
     ...await validateDefinedIds(root, config),
     ...await validateTraceability(root, config)
   ];
+  const specsRoot = resolvePath(root, config, "specsDir");
+  const scenarioFiles = await collectScenarioFiles(specsRoot);
+  const scIds = await collectScIdsFromScenarioFiles(scenarioFiles);
+  const { refs: scTestRefs, scan: testFiles } = await collectScTestReferences(
+    root,
+    config.validation.traceability.testFileGlobs,
+    config.validation.traceability.testFileExcludeGlobs
+  );
+  const scCoverage = buildScCoverage(scIds, scTestRefs);
   const toolVersion = await resolveToolVersion();
   return {
     toolVersion,
     issues,
-    counts: countIssues(issues)
+    counts: countIssues(issues),
+    traceability: {
+      sc: scCoverage,
+      testFiles
+    }
   };
 }
 function countIssues(issues) {
@@ -2361,16 +2604,16 @@ function countIssues(issues) {
 }
 
 // src/core/report.ts
-var ID_PREFIXES2 = ["SPEC", "BR", "SC", "UI", "API", "DATA"];
+var ID_PREFIXES2 = ["SPEC", "BR", "SC", "UI", "API", "DB"];
 async function createReportData(root, validation, configResult) {
   const resolved = configResult ?? await loadConfig(root);
   const config = resolved.config;
   const configPath = resolved.configPath;
   const specsRoot = resolvePath(root, config, "specsDir");
   const contractsRoot = resolvePath(root, config, "contractsDir");
-  const apiRoot = import_node_path13.default.join(contractsRoot, "api");
-  const uiRoot = import_node_path13.default.join(contractsRoot, "ui");
-  const dbRoot = import_node_path13.default.join(contractsRoot, "db");
+  const apiRoot = import_node_path14.default.join(contractsRoot, "api");
+  const uiRoot = import_node_path14.default.join(contractsRoot, "ui");
+  const dbRoot = import_node_path14.default.join(contractsRoot, "db");
   const srcRoot = resolvePath(root, config, "srcDir");
   const testsRoot = resolvePath(root, config, "testsDir");
   const specFiles = await collectSpecFiles(specsRoot);
@@ -2380,6 +2623,23 @@ async function createReportData(root, validation, configResult) {
     ui: uiFiles,
     db: dbFiles
   } = await collectContractFiles(uiRoot, apiRoot, dbRoot);
+  const contractIndex = await buildContractIndex(root, config);
+  const specContractRefs = await collectSpecContractRefs(specFiles);
+  const contractIdList = Array.from(contractIndex.ids);
+  const referencedContracts = /* @__PURE__ */ new Set();
+  for (const ids of specContractRefs.specToContractIds.values()) {
+    ids.forEach((id) => referencedContracts.add(id));
+  }
+  const referencedContractCount = contractIdList.filter(
+    (id) => referencedContracts.has(id)
+  ).length;
+  const orphanContractCount = contractIdList.filter(
+    (id) => !referencedContracts.has(id)
+  ).length;
+  const contractIdToSpecsRecord = mapToSortedRecord(specContractRefs.idToSpecs);
+  const specToContractIdsRecord = mapToSortedRecord(
+    specContractRefs.specToContractIds
+  );
   const idsByPrefix = await collectIds([
     ...specFiles,
     ...scenarioFiles,
@@ -2397,8 +2657,15 @@ async function createReportData(root, validation, configResult) {
     testsRoot
   );
   const scIds = await collectScIdsFromScenarioFiles(scenarioFiles);
-  const scTestRefs = await collectScTestReferences(testsRoot);
-  const scCoverage = buildScCoverage(scIds, scTestRefs);
+  const scRefsResult = await collectScTestReferences(
+    root,
+    config.validation.traceability.testFileGlobs,
+    config.validation.traceability.testFileExcludeGlobs
+  );
+  const scCoverage = validation?.traceability?.sc ?? buildScCoverage(scIds, scRefsResult.refs);
+  const testFiles = validation?.traceability?.testFiles ?? scRefsResult.scan;
+  const scSources = await collectScIdSourcesFromScenarioFiles(scenarioFiles);
+  const scSourceRecord = mapToSortedRecord(scSources);
   const resolvedValidation = validation ?? await validateProject(root, resolved);
   const version = await resolveToolVersion();
   return {
@@ -2423,12 +2690,24 @@ async function createReportData(root, validation, configResult) {
       sc: idsByPrefix.SC,
       ui: idsByPrefix.UI,
       api: idsByPrefix.API,
-      data: idsByPrefix.DATA
+      db: idsByPrefix.DB
     },
     traceability: {
       upstreamIdsFound: upstreamIds.size,
       referencedInCodeOrTests: traceability,
-      sc: scCoverage
+      sc: scCoverage,
+      scSources: scSourceRecord,
+      testFiles,
+      contracts: {
+        total: contractIdList.length,
+        referenced: referencedContractCount,
+        orphan: orphanContractCount,
+        idToSpecs: contractIdToSpecsRecord
+      },
+      specs: {
+        contractRefMissing: specContractRefs.missingRefSpecs.size,
+        specToContractIds: specToContractIdsRecord
+      }
     },
     issues: resolvedValidation.issues
   };
@@ -2457,7 +2736,7 @@ function formatReportMarkdown(data) {
   lines.push(formatIdLine("SC", data.ids.sc));
   lines.push(formatIdLine("UI", data.ids.ui));
   lines.push(formatIdLine("API", data.ids.api));
-  lines.push(formatIdLine("DATA", data.ids.data));
+  lines.push(formatIdLine("DB", data.ids.db));
   lines.push("");
   lines.push("## \u30C8\u30EC\u30FC\u30B5\u30D3\u30EA\u30C6\u30A3");
   lines.push(`- \u4E0A\u6D41ID\u691C\u51FA\u6570: ${data.traceability.upstreamIdsFound}`);
@@ -2465,14 +2744,77 @@ function formatReportMarkdown(data) {
     `- \u30B3\u30FC\u30C9/\u30C6\u30B9\u30C8\u53C2\u7167: ${data.traceability.referencedInCodeOrTests ? "\u3042\u308A" : "\u306A\u3057"}`
   );
   lines.push("");
+  lines.push("## \u5951\u7D04\u30AB\u30D0\u30EC\u30C3\u30B8");
+  lines.push(`- total: ${data.traceability.contracts.total}`);
+  lines.push(`- referenced: ${data.traceability.contracts.referenced}`);
+  lines.push(`- orphan: ${data.traceability.contracts.orphan}`);
+  lines.push(
+    `- specContractRefMissing: ${data.traceability.specs.contractRefMissing}`
+  );
+  lines.push("");
+  lines.push("## \u5951\u7D04\u2192Spec");
+  const contractToSpecs = data.traceability.contracts.idToSpecs;
+  const contractIds = Object.keys(contractToSpecs).sort(
+    (a, b) => a.localeCompare(b)
+  );
+  if (contractIds.length === 0) {
+    lines.push("- (none)");
+  } else {
+    for (const contractId of contractIds) {
+      const specs = contractToSpecs[contractId] ?? [];
+      if (specs.length === 0) {
+        lines.push(`- ${contractId}: (none)`);
+      } else {
+        lines.push(`- ${contractId}: ${specs.join(", ")}`);
+      }
+    }
+  }
+  lines.push("");
+  lines.push("## Spec\u2192\u5951\u7D04");
+  const specToContracts = data.traceability.specs.specToContractIds;
+  const specIds = Object.keys(specToContracts).sort(
+    (a, b) => a.localeCompare(b)
+  );
+  if (specIds.length === 0) {
+    lines.push("- (none)");
+  } else {
+    for (const specId of specIds) {
+      const contractIds2 = specToContracts[specId] ?? [];
+      if (contractIds2.length === 0) {
+        lines.push(`- ${specId}: (none)`);
+      } else {
+        lines.push(`- ${specId}: ${contractIds2.join(", ")}`);
+      }
+    }
+  }
+  lines.push("");
   lines.push("## SC\u30AB\u30D0\u30EC\u30C3\u30B8");
   lines.push(`- total: ${data.traceability.sc.total}`);
   lines.push(`- covered: ${data.traceability.sc.covered}`);
   lines.push(`- missing: ${data.traceability.sc.missing}`);
+  lines.push(
+    `- testFileGlobs: ${formatList(data.traceability.testFiles.globs)}`
+  );
+  lines.push(
+    `- testFileExcludeGlobs: ${formatList(
+      data.traceability.testFiles.excludeGlobs
+    )}`
+  );
+  lines.push(
+    `- testFileCount: ${data.traceability.testFiles.matchedFileCount}`
+  );
   if (data.traceability.sc.missingIds.length === 0) {
     lines.push("- missingIds: (none)");
   } else {
-    lines.push(`- missingIds: ${data.traceability.sc.missingIds.join(", ")}`);
+    const sources = data.traceability.scSources;
+    const missingWithSources = data.traceability.sc.missingIds.map((id) => {
+      const files = sources[id] ?? [];
+      if (files.length === 0) {
+        return id;
+      }
+      return `${id} (${files.join(", ")})`;
+    });
+    lines.push(`- missingIds: ${missingWithSources.join(", ")}`);
   }
   lines.push("");
   lines.push("## SC\u2192\u53C2\u7167\u30C6\u30B9\u30C8");
@@ -2491,6 +2833,20 @@ function formatReportMarkdown(data) {
     }
   }
   lines.push("");
+  lines.push("## Spec:SC=1:1 \u9055\u53CD");
+  const specScIssues = data.issues.filter(
+    (item) => item.code === "QFAI-TRACE-012"
+  );
+  if (specScIssues.length === 0) {
+    lines.push("- (none)");
+  } else {
+    for (const item of specScIssues) {
+      const location = item.file ?? "(unknown)";
+      const refs = item.refs && item.refs.length > 0 ? item.refs.join(", ") : item.message;
+      lines.push(`- ${location}: ${refs}`);
+    }
+  }
+  lines.push("");
   lines.push("## Hotspots");
   const hotspots = buildHotspots(data.issues);
   if (hotspots.length === 0) {
@@ -2505,7 +2861,7 @@ function formatReportMarkdown(data) {
   lines.push("");
   lines.push("## \u30C8\u30EC\u30FC\u30B5\u30D3\u30EA\u30C6\u30A3\uFF08\u691C\u8A3C\uFF09");
   const traceIssues = data.issues.filter(
-    (item) => item.rule?.startsWith("traceability.") || item.code.startsWith("QFAI_TRACE") || item.code.startsWith("QFAI-TRACE-") || item.code === "QFAI_CONTRACT_ORPHAN"
+    (item) => item.rule?.startsWith("traceability.") || item.code.startsWith("QFAI_TRACE") || item.code.startsWith("QFAI-TRACE-")
   );
   if (traceIssues.length === 0) {
     lines.push("- (none)");
@@ -2535,6 +2891,33 @@ function formatReportMarkdown(data) {
 function formatReportJson(data) {
   return JSON.stringify(data, null, 2);
 }
+async function collectSpecContractRefs(specFiles) {
+  const specToContractIds = /* @__PURE__ */ new Map();
+  const idToSpecs = /* @__PURE__ */ new Map();
+  const missingRefSpecs = /* @__PURE__ */ new Set();
+  for (const file of specFiles) {
+    const text = await (0, import_promises15.readFile)(file, "utf-8");
+    const parsed = parseSpec(text, file);
+    const specKey = parsed.specId ?? file;
+    const refs = parsed.contractRefs;
+    if (refs.lines.length === 0) {
+      missingRefSpecs.add(specKey);
+    }
+    const currentContracts = specToContractIds.get(specKey) ?? /* @__PURE__ */ new Set();
+    for (const id of refs.ids) {
+      currentContracts.add(id);
+      const specs = idToSpecs.get(id) ?? /* @__PURE__ */ new Set();
+      specs.add(specKey);
+      idToSpecs.set(id, specs);
+    }
+    specToContractIds.set(specKey, currentContracts);
+  }
+  return {
+    specToContractIds,
+    idToSpecs,
+    missingRefSpecs
+  };
+}
 async function collectIds(files) {
   const result = {
     SPEC: /* @__PURE__ */ new Set(),
@@ -2542,7 +2925,7 @@ async function collectIds(files) {
     SC: /* @__PURE__ */ new Set(),
     UI: /* @__PURE__ */ new Set(),
     API: /* @__PURE__ */ new Set(),
-    DATA: /* @__PURE__ */ new Set()
+    DB: /* @__PURE__ */ new Set()
   };
   for (const file of files) {
     const text = await (0, import_promises15.readFile)(file, "utf-8");
@@ -2557,7 +2940,7 @@ async function collectIds(files) {
     SC: toSortedArray2(result.SC),
     UI: toSortedArray2(result.UI),
     API: toSortedArray2(result.API),
-    DATA: toSortedArray2(result.DATA)
+    DB: toSortedArray2(result.DB)
   };
 }
 async function collectUpstreamIds(files) {
@@ -2601,9 +2984,22 @@ function formatIdLine(label, values) {
   }
   return `- ${label}: ${values.join(", ")}`;
 }
+function formatList(values) {
+  if (values.length === 0) {
+    return "(none)";
+  }
+  return values.join(", ");
+}
 function toSortedArray2(values) {
   return Array.from(values).sort((a, b) => a.localeCompare(b));
 }
+function mapToSortedRecord(values) {
+  const record2 = {};
+  for (const [key, files] of values.entries()) {
+    record2[key] = Array.from(files).sort((a, b) => a.localeCompare(b));
+  }
+  return record2;
+}
 function buildHotspots(issues) {
   const map = /* @__PURE__ */ new Map();
   for (const issue7 of issues) {
@@ -2628,10 +3024,10 @@ function buildHotspots(issues) {
 
 // src/cli/commands/report.ts
 async function runReport(options) {
-  const root = import_node_path14.default.resolve(options.root);
+  const root = import_node_path15.default.resolve(options.root);
   const configResult = await loadConfig(root);
   const input = configResult.config.output.validateJsonPath;
-  const inputPath = import_node_path14.default.isAbsolute(input) ? input : import_node_path14.default.resolve(root, input);
+  const inputPath = import_node_path15.default.isAbsolute(input) ? input : import_node_path15.default.resolve(root, input);
   let validation;
   try {
     validation = await readValidationResult(inputPath);
@@ -2656,10 +3052,10 @@ async function runReport(options) {
   const data = await createReportData(root, validation, configResult);
   const output = options.format === "json" ? formatReportJson(data) : formatReportMarkdown(data);
   const outRoot = resolvePath(root, configResult.config, "outDir");
-  const defaultOut = options.format === "json" ? import_node_path14.default.join(outRoot, "report.json") : import_node_path14.default.join(outRoot, "report.md");
+  const defaultOut = options.format === "json" ? import_node_path15.default.join(outRoot, "report.json") : import_node_path15.default.join(outRoot, "report.md");
   const out = options.outPath ?? defaultOut;
-  const outPath = import_node_path14.default.isAbsolute(out) ? out : import_node_path14.default.resolve(root, out);
-  await (0, import_promises16.mkdir)(import_node_path14.default.dirname(outPath), { recursive: true });
+  const outPath = import_node_path15.default.isAbsolute(out) ? out : import_node_path15.default.resolve(root, out);
+  await (0, import_promises16.mkdir)(import_node_path15.default.dirname(outPath), { recursive: true });
   await (0, import_promises16.writeFile)(outPath, `${output}
 `, "utf-8");
   info(
@@ -2702,7 +3098,7 @@ function isMissingFileError5(error2) {
 
 // src/cli/commands/validate.ts
 var import_promises17 = require("fs/promises");
-var import_node_path15 = __toESM(require("path"), 1);
+var import_node_path16 = __toESM(require("path"), 1);
 
 // src/cli/lib/failOn.ts
 function shouldFail(result, failOn) {
@@ -2717,7 +3113,7 @@ function shouldFail(result, failOn) {
 
 // src/cli/commands/validate.ts
 async function runValidate(options) {
-  const root = import_node_path15.default.resolve(options.root);
+  const root = import_node_path16.default.resolve(options.root);
   const configResult = await loadConfig(root);
   const result = await validateProject(root, configResult);
   const format = options.format ?? "text";
@@ -2766,8 +3162,8 @@ function emitGitHub(issue7) {
   );
 }
 async function emitJson(result, root, jsonPath) {
-  const abs = import_node_path15.default.isAbsolute(jsonPath) ? jsonPath : import_node_path15.default.resolve(root, jsonPath);
-  await (0, import_promises17.mkdir)(import_node_path15.default.dirname(abs), { recursive: true });
+  const abs = import_node_path16.default.isAbsolute(jsonPath) ? jsonPath : import_node_path16.default.resolve(root, jsonPath);
+  await (0, import_promises17.mkdir)(import_node_path16.default.dirname(abs), { recursive: true });
   await (0, import_promises17.writeFile)(abs, `${JSON.stringify(result, null, 2)}
 `, "utf-8");
 }