qfai 1.0.7 → 1.1.0

package/dist/cli/index.cjs

@@ -24,12 +24,12 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 
 // src/cli/commands/doctor.ts
-var import_promises9 = require("fs/promises");
-var import_node_path11 = __toESM(require("path"), 1);
+var import_promises10 = require("fs/promises");
+var import_node_path12 = __toESM(require("path"), 1);
 
 // src/core/doctor.ts
-var import_promises8 = require("fs/promises");
-var import_node_path10 = __toESM(require("path"), 1);
+var import_promises9 = require("fs/promises");
+var import_node_path11 = __toESM(require("path"), 1);
 
 // src/core/config.ts
 var import_promises = require("fs/promises");
@@ -47,15 +47,7 @@ var defaultConfig = {
   validation: {
     failOn: "error",
     require: {
-      specSections: [
-        "\u80CC\u666F",
-        "\u30B9\u30B3\u30FC\u30D7",
-        "\u975E\u30B4\u30FC\u30EB",
-        "\u7528\u8A9E",
-        "\u524D\u63D0",
-        "\u6C7A\u5B9A\u4E8B\u9805",
-        "\u696D\u52D9\u30EB\u30FC\u30EB"
-      ]
+      specSections: []
     },
     traceability: {
       brMustHaveSc: true,
@@ -1075,8 +1067,8 @@ var import_promises7 = require("fs/promises");
 var import_node_path9 = __toESM(require("path"), 1);
 var import_node_url2 = require("url");
 async function resolveToolVersion() {
-  if ("1.0.7".length > 0) {
-    return "1.0.7";
+  if ("1.1.0".length > 0) {
+    return "1.1.0";
   }
   try {
     const packagePath = resolvePackageJsonPath();
@@ -1094,10 +1086,464 @@ function resolvePackageJsonPath() {
   return import_node_path9.default.resolve(import_node_path9.default.dirname(basePath), "../../package.json");
 }
 
+// src/core/decisionGuardrails.ts
+var import_promises8 = require("fs/promises");
+var import_node_path10 = __toESM(require("path"), 1);
+
+// src/core/parse/markdown.ts
+var HEADING_RE = /^(#{1,6})\s+(.+?)\s*$/;
+function parseHeadings(md) {
+  const lines = md.split(/\r?\n/);
+  const headings = [];
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i] ?? "";
+    const match = line.match(HEADING_RE);
+    if (!match) continue;
+    const levelToken = match[1];
+    const title = match[2];
+    if (!levelToken || !title) continue;
+    headings.push({
+      level: levelToken.length,
+      title: title.trim(),
+      line: i + 1
+    });
+  }
+  return headings;
+}
+function extractH2Sections(md) {
+  const lines = md.split(/\r?\n/);
+  const headings = parseHeadings(md).filter((heading) => heading.level === 2);
+  const sections = /* @__PURE__ */ new Map();
+  for (let i = 0; i < headings.length; i++) {
+    const current = headings[i];
+    if (!current) continue;
+    const next = headings[i + 1];
+    const startLine = current.line + 1;
+    const endLine = (next?.line ?? lines.length + 1) - 1;
+    const body = startLine <= endLine ? lines.slice(startLine - 1, endLine).join("\n") : "";
+    sections.set(current.title.trim(), {
+      title: current.title.trim(),
+      startLine,
+      endLine,
+      body
+    });
+  }
+  return sections;
+}
+
+// src/core/decisionGuardrails.ts
+var DEFAULT_DECISION_GUARDRAILS_GLOBS = [".qfai/specs/**/delta.md"];
+var DEFAULT_GUARDRAILS_IGNORE_GLOBS = [
+  "**/node_modules/**",
+  "**/.git/**",
+  "**/dist/**",
+  "**/build/**",
+  "**/.pnpm/**",
+  "**/tmp/**",
+  "**/.mcp-tools/**"
+];
+var SECTION_TITLE = "decision guardrails";
+var ENTRY_START_RE = /^\s*[-*]\s+ID:\s*(.+?)\s*$/i;
+var FIELD_RE = /^\s{2,}([A-Za-z][A-Za-z0-9 _-]*):\s*(.*)$/;
+var CONTINUATION_RE = /^\s{4,}(.+)$/;
+var ID_FORMAT_RE = /^DG-\d{4}$/;
+var TYPE_ORDER = {
+  "non-goal": 0,
+  "not-now": 1,
+  "trade-off": 2
+};
+async function loadDecisionGuardrails(root, options = {}) {
+  const errors = [];
+  const files = await scanDecisionGuardrailFiles(
+    root,
+    options.paths,
+    errors,
+    options.specsRoot
+  );
+  const entries = [];
+  for (const filePath of files) {
+    try {
+      const content = await (0, import_promises8.readFile)(filePath, "utf-8");
+      const parsed = extractDecisionGuardrailsFromMarkdown(content, filePath);
+      entries.push(...parsed);
+    } catch (error2) {
+      errors.push({ path: filePath, message: String(error2) });
+    }
+  }
+  return { entries, errors, files };
+}
+function extractDecisionGuardrailsFromMarkdown(markdown, filePath) {
+  const sections = extractH2Sections(markdown);
+  const section = findDecisionGuardrailsSection(sections);
+  if (!section) {
+    return [];
+  }
+  const lines = section.body.split(/\r?\n/);
+  const entries = [];
+  let current = null;
+  const flush = () => {
+    if (!current) {
+      return;
+    }
+    const entry = {
+      keywords: current.keywords,
+      source: { file: filePath, line: current.startLine },
+      ...current.fields.id ? { id: current.fields.id } : {},
+      ...current.fields.type ? { type: current.fields.type } : {},
+      ...current.fields.guardrail ? { guardrail: current.fields.guardrail } : {},
+      ...current.fields.rationale ? { rationale: current.fields.rationale } : {},
+      ...current.fields.reconsider ? { reconsider: current.fields.reconsider } : {},
+      ...current.fields.related ? { related: current.fields.related } : {},
+      ...current.fields.title ? { title: current.fields.title } : {}
+    };
+    entries.push(entry);
+    current = null;
+  };
+  for (let i = 0; i < lines.length; i += 1) {
+    const rawLine = lines[i] ?? "";
+    const lineNumber = section.startLine + i;
+    const entryMatch = rawLine.match(ENTRY_START_RE);
+    if (entryMatch) {
+      flush();
+      const id = entryMatch[1]?.trim() ?? "";
+      current = {
+        startLine: lineNumber,
+        fields: { id },
+        keywords: []
+      };
+      continue;
+    }
+    if (!current) {
+      continue;
+    }
+    const fieldMatch = rawLine.match(FIELD_RE);
+    if (fieldMatch) {
+      const rawKey = fieldMatch[1] ?? "";
+      const value = fieldMatch[2] ?? "";
+      const key = normalizeFieldKey(rawKey);
+      if (key) {
+        if (key === "keywords") {
+          current.keywords.push(
+            ...value.split(",").map((item) => item.trim()).filter((item) => item.length > 0)
+          );
+        } else {
+          const trimmed = value.trim();
+          if (trimmed.length > 0) {
+            const existing = current.fields[key];
+            current.fields[key] = existing ? `${existing}
+${trimmed}` : trimmed;
+          }
+        }
+        current.lastKey = key;
+      } else {
+        delete current.lastKey;
+      }
+      continue;
+    }
+    const continuationMatch = rawLine.match(CONTINUATION_RE);
+    if (continuationMatch && current.lastKey) {
+      const value = continuationMatch[1]?.trim() ?? "";
+      if (value.length > 0) {
+        const existing = current.fields[current.lastKey];
+        current.fields[current.lastKey] = existing ? `${existing}
+${value}` : value;
+      }
+    }
+  }
+  flush();
+  return entries;
+}
+function normalizeDecisionGuardrails(entries) {
+  const items = [];
+  for (const entry of entries) {
+    const id = entry.id?.trim();
+    const type = normalizeGuardrailType(entry.type);
+    const guardrail = entry.guardrail?.trim();
+    if (!id || !type || !guardrail) {
+      continue;
+    }
+    const item = {
+      id,
+      type,
+      guardrail,
+      keywords: entry.keywords?.filter((word) => word.length > 0) ?? [],
+      source: entry.source
+    };
+    const rationale = entry.rationale?.trim();
+    if (rationale) {
+      item.rationale = rationale;
+    }
+    const reconsider = entry.reconsider?.trim();
+    if (reconsider) {
+      item.reconsider = reconsider;
+    }
+    const related = entry.related?.trim();
+    if (related) {
+      item.related = related;
+    }
+    const title = entry.title?.trim();
+    if (title) {
+      item.title = title;
+    }
+    items.push(item);
+  }
+  return items;
+}
+function sortDecisionGuardrails(items) {
+  return [...items].sort((a, b) => {
+    const typeOrder = (TYPE_ORDER[a.type] ?? 999) - (TYPE_ORDER[b.type] ?? 999);
+    if (typeOrder !== 0) {
+      return typeOrder;
+    }
+    return a.id.localeCompare(b.id);
+  });
+}
+function filterDecisionGuardrailsByKeyword(items, keyword) {
+  const needle = keyword?.trim().toLowerCase();
+  if (!needle) {
+    return items;
+  }
+  return items.filter((item) => {
+    const haystack = [
+      item.title,
+      item.guardrail,
+      item.rationale,
+      item.related,
+      item.keywords.join(" ")
+    ].filter((value) => Boolean(value)).map((value) => value.toLowerCase());
+    return haystack.some((value) => value.includes(needle));
+  });
+}
+function formatGuardrailsForLlm(items, max) {
+  const limit = Math.max(0, Math.floor(max));
+  const lines = ["# Decision Guardrails (extract)", ""];
+  const slice = limit > 0 ? items.slice(0, limit) : [];
+  if (slice.length === 0) {
+    lines.push("- (none)");
+    return lines.join("\n");
+  }
+  for (const item of slice) {
+    lines.push(`- [${item.id}][${item.type}] ${item.guardrail}`);
+    if (item.rationale) {
+      lines.push(`  Rationale: ${item.rationale}`);
+    }
+    if (item.reconsider) {
+      lines.push(`  Reconsider: ${item.reconsider}`);
+    }
+    if (item.related) {
+      lines.push(`  Related: ${item.related}`);
+    }
+  }
+  return lines.join("\n");
+}
+function checkDecisionGuardrails(entries) {
+  const errors = [];
+  const warnings = [];
+  const idMap = /* @__PURE__ */ new Map();
+  for (const entry of entries) {
+    const file = entry.source.file;
+    const line = entry.source.line;
+    const id = entry.id?.trim();
+    const typeRaw = entry.type?.trim();
+    const guardrail = entry.guardrail?.trim();
+    const rationale = entry.rationale?.trim();
+    const reconsider = entry.reconsider?.trim();
+    if (!id) {
+      errors.push({
+        severity: "error",
+        code: "QFAI-GR-001",
+        message: "ID is missing",
+        file,
+        line
+      });
+    } else {
+      const list = idMap.get(id) ?? [];
+      list.push(entry);
+      idMap.set(id, list);
+      if (!ID_FORMAT_RE.test(id)) {
+        warnings.push({
+          severity: "warning",
+          code: "QFAI-GR-002",
+          message: `ID format is not standard: ${id}`,
+          file,
+          line,
+          id
+        });
+      }
+    }
+    if (!typeRaw) {
+      errors.push({
+        severity: "error",
+        code: "QFAI-GR-003",
+        message: "Type is missing",
+        file,
+        line,
+        ...id ? { id } : {}
+      });
+    } else if (!normalizeGuardrailType(typeRaw)) {
+      errors.push({
+        severity: "error",
+        code: "QFAI-GR-004",
+        message: `Type is invalid: ${typeRaw}`,
+        file,
+        line,
+        ...id ? { id } : {}
+      });
+    }
+    if (!guardrail) {
+      errors.push({
+        severity: "error",
+        code: "QFAI-GR-005",
+        message: "Guardrail is missing",
+        file,
+        line,
+        ...id ? { id } : {}
+      });
+    }
+    if (!rationale) {
+      warnings.push({
+        severity: "warning",
+        code: "QFAI-GR-006",
+        message: "Rationale is missing",
+        file,
+        line,
+        ...id ? { id } : {}
+      });
+    }
+    if (!reconsider) {
+      warnings.push({
+        severity: "warning",
+        code: "QFAI-GR-007",
+        message: "Reconsider is missing",
+        file,
+        line,
+        ...id ? { id } : {}
+      });
+    }
+  }
+  for (const [id, list] of idMap.entries()) {
+    if (list.length > 1) {
+      const locations = list.map((entry) => `${entry.source.file}:${entry.source.line}`).join(", ");
+      const first = list[0];
+      const file = first?.source.file ?? "";
+      const line = first?.source.line;
+      errors.push({
+        severity: "error",
+        code: "QFAI-GR-008",
+        message: `ID is duplicated: ${id} (${locations})`,
+        file,
+        ...line !== void 0 ? { line } : {},
+        id
+      });
+    }
+  }
+  return { errors, warnings };
+}
+function normalizeGuardrailType(raw) {
+  if (!raw) {
+    return null;
+  }
+  const normalized = raw.trim().toLowerCase().replace(/[_\s]+/g, "-");
+  if (normalized === "non-goal") {
+    return "non-goal";
+  }
+  if (normalized === "not-now") {
+    return "not-now";
+  }
+  if (normalized === "trade-off") {
+    return "trade-off";
+  }
+  return null;
+}
+function normalizeFieldKey(raw) {
+  const normalized = raw.trim().toLowerCase().replace(/[_\s-]+/g, "");
+  switch (normalized) {
+    case "id":
+      return "id";
+    case "type":
+      return "type";
+    case "guardrail":
+      return "guardrail";
+    case "rationale":
+    case "reason":
+      return "rationale";
+    case "reconsider":
+      return "reconsider";
+    case "related":
+      return "related";
+    case "keywords":
+    case "keyword":
+      return "keywords";
+    case "title":
+    case "heading":
+      return "title";
+    default:
+      return null;
+  }
+}
+async function scanDecisionGuardrailFiles(root, rawPaths, errors, specsRoot) {
+  if (!rawPaths || rawPaths.length === 0) {
+    const scanRoot = specsRoot ? import_node_path10.default.isAbsolute(specsRoot) ? specsRoot : import_node_path10.default.resolve(root, specsRoot) : root;
+    const globs = specsRoot ? ["**/delta.md"] : DEFAULT_DECISION_GUARDRAILS_GLOBS;
+    try {
+      const result = await collectFilesByGlobs(scanRoot, {
+        globs,
+        ignore: DEFAULT_GUARDRAILS_IGNORE_GLOBS
+      });
+      return result.files.sort((a, b) => a.localeCompare(b));
+    } catch (error2) {
+      errors.push({ path: scanRoot, message: String(error2) });
+      return [];
+    }
+  }
+  const files = /* @__PURE__ */ new Set();
+  for (const rawPath of rawPaths) {
+    const resolved = import_node_path10.default.isAbsolute(rawPath) ? rawPath : import_node_path10.default.resolve(root, rawPath);
+    const stats = await safeStat(resolved);
+    if (!stats) {
+      errors.push({ path: resolved, message: "Path does not exist" });
+      continue;
+    }
+    if (stats.isFile()) {
+      files.add(resolved);
+      continue;
+    }
+    if (stats.isDirectory()) {
+      try {
+        const result = await collectFilesByGlobs(resolved, {
+          globs: ["**/delta.md"],
+          ignore: DEFAULT_GUARDRAILS_IGNORE_GLOBS
+        });
+        result.files.forEach((file) => files.add(file));
+      } catch (error2) {
+        errors.push({ path: resolved, message: String(error2) });
+      }
+      continue;
+    }
+    errors.push({ path: resolved, message: "Unsupported path type" });
+  }
+  return Array.from(files).sort((a, b) => a.localeCompare(b));
+}
+async function safeStat(target) {
+  try {
+    return await (0, import_promises8.stat)(target);
+  } catch {
+    return null;
+  }
+}
+function findDecisionGuardrailsSection(sections) {
+  for (const [title, section] of sections.entries()) {
+    if (title.trim().toLowerCase() === SECTION_TITLE) {
+      return section;
+    }
+  }
+  return null;
+}
+
 // src/core/doctor.ts
 async function exists4(target) {
   try {
-    await (0, import_promises8.access)(target);
+    await (0, import_promises9.access)(target);
     return true;
   } catch {
     return false;
@@ -1117,7 +1563,7 @@ function normalizeGlobs2(values) {
   return values.map((glob) => glob.trim()).filter((glob) => glob.length > 0);
 }
 async function createDoctorData(options) {
-  const startDir = import_node_path10.default.resolve(options.startDir);
+  const startDir = import_node_path11.default.resolve(options.startDir);
   const checks = [];
   const configPath = getConfigPath(startDir);
   const search = options.rootExplicit ? {
@@ -1179,9 +1625,9 @@ async function createDoctorData(options) {
       details: { path: toRelativePath(root, resolved) }
     });
     if (key === "promptsDir") {
-      const promptsLocalDir = import_node_path10.default.join(
-        import_node_path10.default.dirname(resolved),
-        `${import_node_path10.default.basename(resolved)}.local`
+      const promptsLocalDir = import_node_path11.default.join(
+        import_node_path11.default.dirname(resolved),
+        `${import_node_path11.default.basename(resolved)}.local`
       );
       const found = await exists4(promptsLocalDir);
       addCheck(checks, {
@@ -1254,7 +1700,36 @@ async function createDoctorData(options) {
     message: missingFiles === 0 ? `All spec packs have required files (count=${entries.length})` : `Missing required files in spec packs (missingFiles=${missingFiles})`,
     details: { specPacks: entries.length, missingFiles }
   });
-  const validateJsonAbs = import_node_path10.default.isAbsolute(config.output.validateJsonPath) ? config.output.validateJsonPath : import_node_path10.default.resolve(root, config.output.validateJsonPath);
+  const guardrailsLoad = await loadDecisionGuardrails(root, {
+    specsRoot
+  });
+  const guardrailsItems = normalizeDecisionGuardrails(guardrailsLoad.entries);
+  let guardrailsSeverity;
+  let guardrailsMessage;
+  if (guardrailsLoad.errors.length > 0) {
+    guardrailsSeverity = "warning";
+    guardrailsMessage = `Decision Guardrails scan failed (errors=${guardrailsLoad.errors.length})`;
+  } else if (guardrailsItems.length === 0) {
+    guardrailsSeverity = "info";
+    guardrailsMessage = "Decision Guardrails not found (optional)";
+  } else {
+    guardrailsSeverity = "ok";
+    guardrailsMessage = `Decision Guardrails detected (count=${guardrailsItems.length})`;
+  }
+  addCheck(checks, {
+    id: "guardrails.present",
+    severity: guardrailsSeverity,
+    title: "Decision Guardrails",
+    message: guardrailsMessage,
+    details: {
+      count: guardrailsItems.length,
+      errors: guardrailsLoad.errors.map((item) => ({
+        path: toRelativePath(root, item.path),
+        message: item.message
+      }))
+    }
+  });
+  const validateJsonAbs = import_node_path11.default.isAbsolute(config.output.validateJsonPath) ? config.output.validateJsonPath : import_node_path11.default.resolve(root, config.output.validateJsonPath);
   const validateJsonExists = await exists4(validateJsonAbs);
   addCheck(checks, {
     id: "output.validateJson",
@@ -1264,8 +1739,8 @@ async function createDoctorData(options) {
     details: { path: toRelativePath(root, validateJsonAbs) }
   });
   const outDirAbs = resolvePath(root, config, "outDir");
-  const rel = import_node_path10.default.relative(outDirAbs, validateJsonAbs);
-  const inside = rel !== "" && !rel.startsWith("..") && !import_node_path10.default.isAbsolute(rel);
+  const rel = import_node_path11.default.relative(outDirAbs, validateJsonAbs);
+  const inside = rel !== "" && !rel.startsWith("..") && !import_node_path11.default.isAbsolute(rel);
   addCheck(checks, {
     id: "output.pathAlignment",
     severity: inside ? "ok" : "warning",
@@ -1388,12 +1863,12 @@ async function detectOutDirCollisions(root) {
   });
   const configPaths = configScan.files;
   const configRoots = Array.from(
-    new Set(configPaths.map((configPath) => import_node_path10.default.dirname(configPath)))
+    new Set(configPaths.map((configPath) => import_node_path11.default.dirname(configPath)))
   ).sort((a, b) => a.localeCompare(b));
   const outDirToRoots = /* @__PURE__ */ new Map();
   for (const configRoot of configRoots) {
     const { config } = await loadConfig(configRoot);
-    const outDir = import_node_path10.default.normalize(resolvePath(configRoot, config, "outDir"));
+    const outDir = import_node_path11.default.normalize(resolvePath(configRoot, config, "outDir"));
     const roots = outDirToRoots.get(outDir) ?? /* @__PURE__ */ new Set();
     roots.add(configRoot);
     outDirToRoots.set(outDir, roots);
@@ -1419,20 +1894,20 @@ async function detectOutDirCollisions(root) {
   };
 }
 async function findMonorepoRoot(startDir) {
-  let current = import_node_path10.default.resolve(startDir);
+  let current = import_node_path11.default.resolve(startDir);
   while (true) {
-    const gitPath = import_node_path10.default.join(current, ".git");
-    const workspacePath = import_node_path10.default.join(current, "pnpm-workspace.yaml");
+    const gitPath = import_node_path11.default.join(current, ".git");
+    const workspacePath = import_node_path11.default.join(current, "pnpm-workspace.yaml");
     if (await exists4(gitPath) || await exists4(workspacePath)) {
       return current;
     }
-    const parent = import_node_path10.default.dirname(current);
+    const parent = import_node_path11.default.dirname(current);
     if (parent === current) {
       break;
     }
     current = parent;
   }
-  return import_node_path10.default.resolve(startDir);
+  return import_node_path11.default.resolve(startDir);
 }
 
 // src/cli/lib/logger.ts
@@ -1474,9 +1949,9 @@ async function runDoctor(options) {
   const output = options.format === "json" ? formatDoctorJson(data) : formatDoctorText(data);
   const exitCode = shouldFailDoctor(data.summary, options.failOn) ? 1 : 0;
   if (options.outPath) {
-    const outAbs = import_node_path11.default.isAbsolute(options.outPath) ? options.outPath : import_node_path11.default.resolve(process.cwd(), options.outPath);
-    await (0, import_promises9.mkdir)(import_node_path11.default.dirname(outAbs), { recursive: true });
-    await (0, import_promises9.writeFile)(outAbs, `${output}
+    const outAbs = import_node_path12.default.isAbsolute(options.outPath) ? options.outPath : import_node_path12.default.resolve(process.cwd(), options.outPath);
+    await (0, import_promises10.mkdir)(import_node_path12.default.dirname(outAbs), { recursive: true });
+    await (0, import_promises10.writeFile)(outAbs, `${output}
 `, "utf-8");
     info(`doctor: wrote ${outAbs}`);
     return exitCode;
@@ -1494,12 +1969,77 @@ function shouldFailDoctor(summary, failOn) {
   return summary.warning + summary.error > 0;
 }
 
-// src/cli/commands/init.ts
+// src/cli/commands/guardrails.ts
 var import_node_path13 = __toESM(require("path"), 1);
+var DEFAULT_EXTRACT_MAX = 20;
+async function runGuardrails(options) {
+  if (!options.action) {
+    error("guardrails: action is required (list|extract|check)");
+    return 2;
+  }
+  const root = import_node_path13.default.resolve(options.root);
+  const { entries, errors } = await loadDecisionGuardrails(root, {
+    paths: options.paths
+  });
+  if (errors.length > 0) {
+    errors.forEach((item) => {
+      error(`guardrails: ${item.path}: ${item.message}`);
+    });
+    return 2;
+  }
+  if (options.action === "check") {
+    return runGuardrailsCheck(entries, root);
+  }
+  const items = sortDecisionGuardrails(normalizeDecisionGuardrails(entries));
+  const filtered = filterDecisionGuardrailsByKeyword(items, options.keyword);
+  if (options.action === "extract") {
+    const max = options.max !== void 0 ? options.max : DEFAULT_EXTRACT_MAX;
+    if (!Number.isFinite(max) || max < 0) {
+      error("guardrails: --max must be a non-negative number");
+      return 2;
+    }
+    info(formatGuardrailsForLlm(filtered, max));
+    return 0;
+  }
+  info(formatGuardrailsList(filtered, root));
+  return 0;
+}
+function formatGuardrailsList(items, root) {
+  const lines = ["# Decision Guardrails (list)", ""];
+  if (items.length === 0) {
+    lines.push("- (none)");
+    return lines.join("\n");
+  }
+  for (const item of items) {
+    const relPath = toRelativePath(root, item.source.file);
+    const location = `${relPath}:${item.source.line}`;
+    lines.push(`- [${item.id}][${item.type}] ${item.guardrail} (${location})`);
+  }
+  return lines.join("\n");
+}
+function runGuardrailsCheck(entries, root) {
+  const result = checkDecisionGuardrails(entries);
+  const lines = [
+    `guardrails check: error=${result.errors.length} warning=${result.warnings.length}`
+  ];
+  const formatIssue = (issue7) => {
+    const relPath = toRelativePath(root, issue7.file);
+    const line = issue7.line ? `:${issue7.line}` : "";
+    const id = issue7.id ? ` id=${issue7.id}` : "";
+    return `[${issue7.severity}] ${issue7.code} ${issue7.message} (${relPath}${line})${id}`;
+  };
+  result.errors.forEach((issue7) => lines.push(formatIssue(issue7)));
+  result.warnings.forEach((issue7) => lines.push(formatIssue(issue7)));
+  info(lines.join("\n"));
+  return result.errors.length > 0 ? 1 : 0;
+}
+
+// src/cli/commands/init.ts
+var import_node_path15 = __toESM(require("path"), 1);
 
 // src/cli/lib/fs.ts
-var import_promises10 = require("fs/promises");
-var import_node_path12 = __toESM(require("path"), 1);
+var import_promises11 = require("fs/promises");
+var import_node_path14 = __toESM(require("path"), 1);
 async function copyTemplateTree(sourceRoot, destRoot, options) {
   const files = await collectTemplateFiles(sourceRoot);
   return copyFiles(files, sourceRoot, destRoot, options);
@@ -1507,7 +2047,7 @@ async function copyTemplateTree(sourceRoot, destRoot, options) {
 async function copyTemplatePaths(sourceRoot, destRoot, relativePaths, options) {
   const allFiles = [];
   for (const relPath of relativePaths) {
-    const fullPath = import_node_path12.default.join(sourceRoot, relPath);
+    const fullPath = import_node_path14.default.join(sourceRoot, relPath);
     const files = await collectTemplateFiles(fullPath);
     allFiles.push(...files);
   }
@@ -1517,13 +2057,13 @@ async function copyFiles(files, sourceRoot, destRoot, options) {
   const copied = [];
   const skipped = [];
   const conflicts = [];
-  const protectPrefixes = (options.protect ?? []).map((p) => p.replace(/^[\\/]+/, "").replace(/[\\/]+$/, "")).filter((p) => p.length > 0).map((p) => p + import_node_path12.default.sep);
-  const excludePrefixes = (options.exclude ?? []).map((p) => p.replace(/^[\\/]+/, "").replace(/[\\/]+$/, "")).filter((p) => p.length > 0).map((p) => p + import_node_path12.default.sep);
+  const protectPrefixes = (options.protect ?? []).map((p) => p.replace(/^[\\/]+/, "").replace(/[\\/]+$/, "")).filter((p) => p.length > 0).map((p) => p + import_node_path14.default.sep);
+  const excludePrefixes = (options.exclude ?? []).map((p) => p.replace(/^[\\/]+/, "").replace(/[\\/]+$/, "")).filter((p) => p.length > 0).map((p) => p + import_node_path14.default.sep);
   const isProtectedRelative = (relative) => {
     if (protectPrefixes.length === 0) {
       return false;
     }
-    const normalized = relative.replace(/[\\/]+/g, import_node_path12.default.sep);
+    const normalized = relative.replace(/[\\/]+/g, import_node_path14.default.sep);
     return protectPrefixes.some(
       (prefix) => normalized === prefix.slice(0, -1) || normalized.startsWith(prefix)
     );
@@ -1532,7 +2072,7 @@ async function copyFiles(files, sourceRoot, destRoot, options) {
     if (excludePrefixes.length === 0) {
       return false;
     }
-    const normalized = relative.replace(/[\\/]+/g, import_node_path12.default.sep);
+    const normalized = relative.replace(/[\\/]+/g, import_node_path14.default.sep);
     return excludePrefixes.some(
       (prefix) => normalized === prefix.slice(0, -1) || normalized.startsWith(prefix)
     );
@@ -1540,14 +2080,14 @@ async function copyFiles(files, sourceRoot, destRoot, options) {
   const conflictPolicy = options.conflictPolicy ?? "error";
   if (!options.force && conflictPolicy === "error") {
     for (const file of files) {
-      const relative = import_node_path12.default.relative(sourceRoot, file);
+      const relative = import_node_path14.default.relative(sourceRoot, file);
       if (isExcludedRelative(relative)) {
         continue;
       }
       if (isProtectedRelative(relative)) {
         continue;
       }
-      const dest = import_node_path12.default.join(destRoot, relative);
+      const dest = import_node_path14.default.join(destRoot, relative);
       if (!await shouldWrite(dest, options.force)) {
         conflicts.push(dest);
       }
@@ -1557,19 +2097,19 @@ async function copyFiles(files, sourceRoot, destRoot, options) {
     }
   }
   for (const file of files) {
-    const relative = import_node_path12.default.relative(sourceRoot, file);
+    const relative = import_node_path14.default.relative(sourceRoot, file);
     if (isExcludedRelative(relative)) {
       continue;
     }
-    const dest = import_node_path12.default.join(destRoot, relative);
+    const dest = import_node_path14.default.join(destRoot, relative);
     const forceForThisFile = isProtectedRelative(relative) ? false : options.force;
     if (!await shouldWrite(dest, forceForThisFile)) {
       skipped.push(dest);
       continue;
     }
     if (!options.dryRun) {
-      await (0, import_promises10.mkdir)(import_node_path12.default.dirname(dest), { recursive: true });
-      await (0, import_promises10.copyFile)(file, dest);
+      await (0, import_promises11.mkdir)(import_node_path14.default.dirname(dest), { recursive: true });
+      await (0, import_promises11.copyFile)(file, dest);
     }
     copied.push(dest);
   }
@@ -1590,9 +2130,9 @@ async function collectTemplateFiles(root) {
   if (!await exists5(root)) {
     return entries;
   }
-  const items = await (0, import_promises10.readdir)(root, { withFileTypes: true });
+  const items = await (0, import_promises11.readdir)(root, { withFileTypes: true });
   for (const item of items) {
-    const fullPath = import_node_path12.default.join(root, item.name);
+    const fullPath = import_node_path14.default.join(root, item.name);
     if (item.isDirectory()) {
       const nested = await collectTemplateFiles(fullPath);
       entries.push(...nested);
@@ -1612,7 +2152,7 @@ async function shouldWrite(target, force) {
 }
 async function exists5(target) {
   try {
-    await (0, import_promises10.access)(target);
+    await (0, import_promises11.access)(target);
     return true;
   } catch {
     return false;
@@ -1622,10 +2162,10 @@ async function exists5(target) {
 // src/cli/commands/init.ts
 async function runInit(options) {
   const assetsRoot = getInitAssetsDir();
-  const rootAssets = import_node_path13.default.join(assetsRoot, "root");
-  const qfaiAssets = import_node_path13.default.join(assetsRoot, ".qfai");
-  const destRoot = import_node_path13.default.resolve(options.dir);
-  const destQfai = import_node_path13.default.join(destRoot, ".qfai");
+  const rootAssets = import_node_path15.default.join(assetsRoot, "root");
+  const qfaiAssets = import_node_path15.default.join(assetsRoot, ".qfai");
+  const destRoot = import_node_path15.default.resolve(options.dir);
+  const destQfai = import_node_path15.default.join(destRoot, ".qfai");
   if (options.force) {
     info(
       "NOTE: --force \u306F .qfai/assistant/prompts/** \u306E\u307F\u4E0A\u66F8\u304D\u3057\u307E\u3059\uFF08prompts.local \u306F\u4FDD\u8B77\u3055\u308C\u3001specs/contracts \u7B49\u306F\u4E0A\u66F8\u304D\u3057\u307E\u305B\u3093\uFF09\u3002"
@@ -1671,15 +2211,15 @@ function report(copied, skipped, dryRun, label, baseDir) {
     info(`  skipped: ${skipped.length}`);
     info("  skipped paths:");
     for (const skippedPath of skipped) {
-      const relative = import_node_path13.default.relative(baseDir, skippedPath);
+      const relative = import_node_path15.default.relative(baseDir, skippedPath);
       info(`    - ${relative}`);
     }
   }
 }
 
 // src/cli/commands/report.ts
-var import_promises19 = require("fs/promises");
-var import_node_path21 = __toESM(require("path"), 1);
+var import_promises20 = require("fs/promises");
+var import_node_path23 = __toESM(require("path"), 1);
 
 // src/core/normalize.ts
 function normalizeIssuePaths(root, issues) {
@@ -1719,12 +2259,12 @@ function normalizeValidationResult(root, result) {
 }
 
 // src/core/report.ts
-var import_promises18 = require("fs/promises");
-var import_node_path20 = __toESM(require("path"), 1);
+var import_promises19 = require("fs/promises");
+var import_node_path22 = __toESM(require("path"), 1);
 
 // src/core/contractIndex.ts
-var import_promises11 = require("fs/promises");
-var import_node_path14 = __toESM(require("path"), 1);
+var import_promises12 = require("fs/promises");
+var import_node_path16 = __toESM(require("path"), 1);
 
 // src/core/contractsDecl.ts
 var CONTRACT_DECLARATION_RE = /^\s*(?:#|\/\/|--|\/\*+|\*+)?\s*QFAI-CONTRACT-ID:\s*((?:API|UI|DB)-\d{4}|THEMA-\d{3})\s*(?:\*\/)?\s*$/gm;
@@ -1746,9 +2286,9 @@ function stripContractDeclarationLines(text) {
 // src/core/contractIndex.ts
 async function buildContractIndex(root, config) {
   const contractsRoot = resolvePath(root, config, "contractsDir");
-  const uiRoot = import_node_path14.default.join(contractsRoot, "ui");
-  const apiRoot = import_node_path14.default.join(contractsRoot, "api");
-  const dbRoot = import_node_path14.default.join(contractsRoot, "db");
+  const uiRoot = import_node_path16.default.join(contractsRoot, "ui");
+  const apiRoot = import_node_path16.default.join(contractsRoot, "api");
+  const dbRoot = import_node_path16.default.join(contractsRoot, "db");
   const [uiFiles, themaFiles, apiFiles, dbFiles] = await Promise.all([
     collectUiContractFiles(uiRoot),
     collectThemaContractFiles(uiRoot),
@@ -1768,7 +2308,7 @@ async function buildContractIndex(root, config) {
 }
 async function indexContractFiles(files, index) {
   for (const file of files) {
-    const text = await (0, import_promises11.readFile)(file, "utf-8");
+    const text = await (0, import_promises12.readFile)(file, "utf-8");
     extractDeclaredContractIds(text).forEach((id) => record(index, id, file));
   }
 }
@@ -1893,53 +2433,11 @@ function unique3(values) {
   return Array.from(new Set(values));
 }
 
-// src/core/parse/markdown.ts
-var HEADING_RE = /^(#{1,6})\s+(.+?)\s*$/;
-function parseHeadings(md) {
-  const lines = md.split(/\r?\n/);
-  const headings = [];
-  for (let i = 0; i < lines.length; i++) {
-    const line = lines[i] ?? "";
-    const match = line.match(HEADING_RE);
-    if (!match) continue;
-    const levelToken = match[1];
-    const title = match[2];
-    if (!levelToken || !title) continue;
-    headings.push({
-      level: levelToken.length,
-      title: title.trim(),
-      line: i + 1
-    });
-  }
-  return headings;
-}
-function extractH2Sections(md) {
-  const lines = md.split(/\r?\n/);
-  const headings = parseHeadings(md).filter((heading) => heading.level === 2);
-  const sections = /* @__PURE__ */ new Map();
-  for (let i = 0; i < headings.length; i++) {
-    const current = headings[i];
-    if (!current) continue;
-    const next = headings[i + 1];
-    const startLine = current.line + 1;
-    const endLine = (next?.line ?? lines.length + 1) - 1;
-    const body = startLine <= endLine ? lines.slice(startLine - 1, endLine).join("\n") : "";
-    sections.set(current.title.trim(), {
-      title: current.title.trim(),
-      startLine,
-      endLine,
-      body
-    });
-  }
-  return sections;
-}
-
 // src/core/parse/spec.ts
 var SPEC_ID_RE = /\bSPEC-\d{4}\b/;
 var BR_LINE_RE = /^\s*(?:[-*]\s*)?\[(BR-\d{4})\]\[(P[0-3])\]\s*(.+)$/;
 var BR_LINE_ANY_PRIORITY_RE = /^\s*(?:[-*]\s*)?\[(BR-\d{4})\]\[(P[^\]]+)\]\s*(.+)$/;
 var BR_LINE_NO_PRIORITY_RE = /^\s*(?:[-*]\s*)?\[(BR-\d{4})\](?!\s*\[P)\s*(.*\S.*)$/;
-var BR_SECTION_TITLE = "\u696D\u52D9\u30EB\u30FC\u30EB";
 var VALID_PRIORITIES = /* @__PURE__ */ new Set(["P0", "P1", "P2", "P3"]);
 function parseSpec(md, file) {
   const headings = parseHeadings(md);
@@ -1947,15 +2445,13 @@ function parseSpec(md, file) {
   const specId = h1?.title.match(SPEC_ID_RE)?.[0];
   const sections = extractH2Sections(md);
   const sectionNames = new Set(Array.from(sections.keys()));
-  const brSection = sections.get(BR_SECTION_TITLE);
-  const brLines = brSection ? brSection.body.split(/\r?\n/) : [];
-  const startLine = brSection?.startLine ?? 1;
+  const lines = md.split(/\r?\n/);
   const brs = [];
   const brsWithoutPriority = [];
   const brsWithInvalidPriority = [];
-  for (let i = 0; i < brLines.length; i++) {
-    const lineText = brLines[i] ?? "";
-    const lineNumber = startLine + i;
+  for (let i = 0; i < lines.length; i++) {
+    const lineText = lines[i] ?? "";
+    const lineNumber = i + 1;
     const validMatch = lineText.match(BR_LINE_RE);
     if (validMatch) {
       const id = validMatch[1];
@@ -2013,14 +2509,14 @@ function parseSpec(md, file) {
 }
 
 // src/core/validators/contracts.ts
-var import_promises12 = require("fs/promises");
-var import_node_path16 = __toESM(require("path"), 1);
+var import_promises13 = require("fs/promises");
+var import_node_path18 = __toESM(require("path"), 1);
 
 // src/core/contracts.ts
-var import_node_path15 = __toESM(require("path"), 1);
+var import_node_path17 = __toESM(require("path"), 1);
 var import_yaml2 = require("yaml");
 function parseStructuredContract(file, text) {
-  const ext = import_node_path15.default.extname(file).toLowerCase();
+  const ext = import_node_path17.default.extname(file).toLowerCase();
   if (ext === ".json") {
     return JSON.parse(text);
   }
@@ -2042,14 +2538,14 @@ async function validateContracts(root, config) {
   const issues = [];
   const contractIndex = await buildContractIndex(root, config);
   const contractsRoot = resolvePath(root, config, "contractsDir");
-  const uiRoot = import_node_path16.default.join(contractsRoot, "ui");
+  const uiRoot = import_node_path18.default.join(contractsRoot, "ui");
   const themaIds = new Set(
     Array.from(contractIndex.ids).filter((id) => id.startsWith("THEMA-"))
   );
   issues.push(...await validateUiContracts(uiRoot, themaIds));
   issues.push(...await validateThemaContracts(uiRoot));
-  issues.push(...await validateApiContracts(import_node_path16.default.join(contractsRoot, "api")));
-  issues.push(...await validateDbContracts(import_node_path16.default.join(contractsRoot, "db")));
+  issues.push(...await validateApiContracts(import_node_path18.default.join(contractsRoot, "api")));
+  issues.push(...await validateDbContracts(import_node_path18.default.join(contractsRoot, "db")));
   issues.push(...validateDuplicateContractIds(contractIndex));
   return issues;
 }
@@ -2068,7 +2564,7 @@ async function validateUiContracts(uiRoot, themaIds) {
   }
   const issues = [];
   for (const file of files) {
-    const text = await (0, import_promises12.readFile)(file, "utf-8");
+    const text = await (0, import_promises13.readFile)(file, "utf-8");
     const declaredIds = extractDeclaredContractIds(text);
     issues.push(...validateDeclaredContractIds(declaredIds, file, "UI"));
     let doc = null;
@@ -2122,7 +2618,7 @@ async function validateThemaContracts(uiRoot) {
   }
   const issues = [];
   for (const file of files) {
-    const text = await (0, import_promises12.readFile)(file, "utf-8");
+    const text = await (0, import_promises13.readFile)(file, "utf-8");
     const invalidIds = extractInvalidIds(text, [
       "SPEC",
       "BR",
@@ -2256,7 +2752,7 @@ async function validateApiContracts(apiRoot) {
   }
   const issues = [];
   for (const file of files) {
-    const text = await (0, import_promises12.readFile)(file, "utf-8");
+    const text = await (0, import_promises13.readFile)(file, "utf-8");
     const invalidIds = extractInvalidIds(text, [
       "SPEC",
       "BR",
@@ -2325,7 +2821,7 @@ async function validateDbContracts(dbRoot) {
   }
   const issues = [];
   for (const file of files) {
-    const text = await (0, import_promises12.readFile)(file, "utf-8");
+    const text = await (0, import_promises13.readFile)(file, "utf-8");
     const invalidIds = extractInvalidIds(text, [
       "SPEC",
       "BR",
@@ -2522,9 +3018,9 @@ async function validateUiAssets(assets, file, uiRoot) {
     );
     return issues;
   }
-  const packDir = import_node_path16.default.resolve(uiRoot, packValue);
-  const packRelative = import_node_path16.default.relative(uiRoot, packDir);
-  if (packRelative.startsWith("..") || import_node_path16.default.isAbsolute(packRelative)) {
+  const packDir = import_node_path18.default.resolve(uiRoot, packValue);
+  const packRelative = import_node_path18.default.relative(uiRoot, packDir);
+  if (packRelative.startsWith("..") || import_node_path18.default.isAbsolute(packRelative)) {
     issues.push(
       issue(
         "QFAI-ASSET-001",
@@ -2550,7 +3046,7 @@ async function validateUiAssets(assets, file, uiRoot) {
     );
     return issues;
   }
-  const assetsYamlPath = import_node_path16.default.join(packDir, "assets.yaml");
+  const assetsYamlPath = import_node_path18.default.join(packDir, "assets.yaml");
   if (!await exists6(assetsYamlPath)) {
     issues.push(
       issue(
@@ -2565,7 +3061,7 @@ async function validateUiAssets(assets, file, uiRoot) {
   }
   let manifest;
   try {
-    const manifestText = await (0, import_promises12.readFile)(assetsYamlPath, "utf-8");
+    const manifestText = await (0, import_promises13.readFile)(assetsYamlPath, "utf-8");
     manifest = parseStructuredContract(assetsYamlPath, manifestText);
   } catch (error2) {
     issues.push(
@@ -2638,9 +3134,9 @@ async function validateUiAssets(assets, file, uiRoot) {
       );
       continue;
     }
-    const assetPath = import_node_path16.default.resolve(packDir, entry.path);
-    const assetRelative = import_node_path16.default.relative(packDir, assetPath);
-    if (assetRelative.startsWith("..") || import_node_path16.default.isAbsolute(assetRelative)) {
+    const assetPath = import_node_path18.default.resolve(packDir, entry.path);
+    const assetRelative = import_node_path18.default.relative(packDir, assetPath);
+    if (assetRelative.startsWith("..") || import_node_path18.default.isAbsolute(assetRelative)) {
       issues.push(
         issue(
           "QFAI-ASSET-004",
@@ -2681,7 +3177,7 @@ function shouldIgnoreInvalidId(value, doc) {
     return false;
   }
   const normalized = packValue.replace(/\\/g, "/");
-  const basename = import_node_path16.default.posix.basename(normalized);
+  const basename = import_node_path18.default.posix.basename(normalized);
   if (!basename) {
     return false;
   }
@@ -2691,7 +3187,7 @@ function isSafeRelativePath(value) {
   if (!value) {
     return false;
   }
-  if (import_node_path16.default.isAbsolute(value)) {
+  if (import_node_path18.default.isAbsolute(value)) {
     return false;
   }
   const normalized = value.replace(/\\/g, "/");
@@ -2706,7 +3202,7 @@ function isSafeRelativePath(value) {
 }
 async function exists6(target) {
   try {
-    await (0, import_promises12.access)(target);
+    await (0, import_promises13.access)(target);
     return true;
   } catch {
     return false;
@@ -2741,8 +3237,8 @@ function issue(code, message, severity, file, rule, refs, category = "compatibil
 }
 
 // src/core/validators/delta.ts
-var import_promises13 = require("fs/promises");
-var import_node_path17 = __toESM(require("path"), 1);
+var import_promises14 = require("fs/promises");
+var import_node_path19 = __toESM(require("path"), 1);
 async function validateDeltas(root, config) {
   const specsRoot = resolvePath(root, config, "specsDir");
   const packs = await collectSpecPackDirs(specsRoot);
@@ -2751,9 +3247,9 @@ async function validateDeltas(root, config) {
   }
   const issues = [];
   for (const pack of packs) {
-    const deltaPath = import_node_path17.default.join(pack, "delta.md");
+    const deltaPath = import_node_path19.default.join(pack, "delta.md");
     try {
-      await (0, import_promises13.readFile)(deltaPath, "utf-8");
+      await (0, import_promises14.readFile)(deltaPath, "utf-8");
     } catch (error2) {
       if (isMissingFileError2(error2)) {
         issues.push(
@@ -2804,8 +3300,8 @@ function issue2(code, message, severity, file, rule, refs, category = "change",
 }
 
 // src/core/validators/ids.ts
-var import_promises14 = require("fs/promises");
-var import_node_path18 = __toESM(require("path"), 1);
+var import_promises15 = require("fs/promises");
+var import_node_path20 = __toESM(require("path"), 1);
 var SC_TAG_RE3 = /^SC-\d{4}$/;
 async function validateDefinedIds(root, config) {
   const issues = [];
@@ -2840,7 +3336,7 @@ async function validateDefinedIds(root, config) {
 }
 async function collectSpecDefinitionIds(files, out) {
   for (const file of files) {
-    const text = await (0, import_promises14.readFile)(file, "utf-8");
+    const text = await (0, import_promises15.readFile)(file, "utf-8");
     const parsed = parseSpec(text, file);
     if (parsed.specId) {
       recordId(out, parsed.specId, file);
@@ -2850,7 +3346,7 @@ async function collectSpecDefinitionIds(files, out) {
 }
 async function collectScenarioDefinitionIds(files, out) {
   for (const file of files) {
-    const text = await (0, import_promises14.readFile)(file, "utf-8");
+    const text = await (0, import_promises15.readFile)(file, "utf-8");
     const { document, errors } = parseScenarioDocument(text, file);
     if (!document || errors.length > 0) {
       continue;
@@ -2871,7 +3367,7 @@ function recordId(out, id, file) {
 }
 function formatFileList(files, root) {
   return files.map((file) => {
-    const relative = import_node_path18.default.relative(root, file);
+    const relative = import_node_path20.default.relative(root, file);
     return relative.length > 0 ? relative : file;
   }).join(", ");
 }
@@ -2929,8 +3425,8 @@ async function validatePromptsIntegrity(root, config) {
 }
 
 // src/core/validators/scenario.ts
-var import_promises15 = require("fs/promises");
-var import_node_path19 = __toESM(require("path"), 1);
+var import_promises16 = require("fs/promises");
+var import_node_path21 = __toESM(require("path"), 1);
 var GIVEN_PATTERN = /\bGiven\b/;
 var WHEN_PATTERN = /\bWhen\b/;
 var THEN_PATTERN = /\bThen\b/;
@@ -2953,7 +3449,7 @@ async function validateScenarios(root, config) {
   }
   const issues = [];
   for (const entry of entries) {
-    const legacyScenarioPath = import_node_path19.default.join(entry.dir, "scenario.md");
+    const legacyScenarioPath = import_node_path21.default.join(entry.dir, "scenario.md");
     if (await fileExists(legacyScenarioPath)) {
       issues.push(
         issue4(
@@ -2967,7 +3463,7 @@ async function validateScenarios(root, config) {
     }
     let text;
     try {
-      text = await (0, import_promises15.readFile)(entry.scenarioPath, "utf-8");
+      text = await (0, import_promises16.readFile)(entry.scenarioPath, "utf-8");
     } catch (error2) {
       if (isMissingFileError3(error2)) {
         issues.push(
@@ -3142,7 +3638,7 @@ function isMissingFileError3(error2) {
 }
 async function fileExists(target) {
   try {
-    await (0, import_promises15.access)(target);
+    await (0, import_promises16.access)(target);
     return true;
   } catch {
     return false;
@@ -3150,7 +3646,7 @@ async function fileExists(target) {
 }
 
 // src/core/validators/spec.ts
-var import_promises16 = require("fs/promises");
+var import_promises17 = require("fs/promises");
 async function validateSpecs(root, config) {
   const specsRoot = resolvePath(root, config, "specsDir");
   const entries = await collectSpecEntries(specsRoot);
@@ -3171,7 +3667,7 @@ async function validateSpecs(root, config) {
   for (const entry of entries) {
     let text;
     try {
-      text = await (0, import_promises16.readFile)(entry.specPath, "utf-8");
+      text = await (0, import_promises17.readFile)(entry.specPath, "utf-8");
     } catch (error2) {
       if (isMissingFileError4(error2)) {
         issues.push(
@@ -3325,7 +3821,7 @@ function isMissingFileError4(error2) {
 }
 
 // src/core/validators/traceability.ts
-var import_promises17 = require("fs/promises");
+var import_promises18 = require("fs/promises");
 var SPEC_TAG_RE3 = /^SPEC-\d{4}$/;
 var BR_TAG_RE2 = /^BR-\d{4}$/;
 async function validateTraceability(root, config) {
@@ -3345,7 +3841,7 @@ async function validateTraceability(root, config) {
   const contractIndex = await buildContractIndex(root, config);
   const contractIds = contractIndex.ids;
   for (const file of specFiles) {
-    const text = await (0, import_promises17.readFile)(file, "utf-8");
+    const text = await (0, import_promises18.readFile)(file, "utf-8");
     extractAllIds(text).forEach((id) => upstreamIds.add(id));
     const parsed = parseSpec(text, file);
     if (parsed.specId) {
@@ -3418,7 +3914,7 @@ async function validateTraceability(root, config) {
     }
   }
   for (const file of scenarioFiles) {
-    const text = await (0, import_promises17.readFile)(file, "utf-8");
+    const text = await (0, import_promises18.readFile)(file, "utf-8");
     extractAllIds(text).forEach((id) => upstreamIds.add(id));
     const scenarioContractRefs = parseContractRefs(text, {
       allowCommentPrefix: true
@@ -3740,7 +4236,7 @@ async function validateCodeReferences(upstreamIds, srcRoot, testsRoot) {
   const pattern = buildIdPattern(Array.from(upstreamIds));
   let found = false;
   for (const file of targetFiles) {
-    const text = await (0, import_promises17.readFile)(file, "utf-8");
+    const text = await (0, import_promises18.readFile)(file, "utf-8");
     if (pattern.test(text)) {
       found = true;
       break;
@@ -3839,16 +4335,17 @@ var ID_PREFIXES2 = [
   "DB",
   "THEMA"
 ];
+var REPORT_GUARDRAILS_MAX = 20;
 async function createReportData(root, validation, configResult) {
-  const resolvedRoot = import_node_path20.default.resolve(root);
+  const resolvedRoot = import_node_path22.default.resolve(root);
   const resolved = configResult ?? await loadConfig(resolvedRoot);
   const config = resolved.config;
   const configPath = resolved.configPath;
   const specsRoot = resolvePath(resolvedRoot, config, "specsDir");
   const contractsRoot = resolvePath(resolvedRoot, config, "contractsDir");
-  const apiRoot = import_node_path20.default.join(contractsRoot, "api");
-  const uiRoot = import_node_path20.default.join(contractsRoot, "ui");
-  const dbRoot = import_node_path20.default.join(contractsRoot, "db");
+  const apiRoot = import_node_path22.default.join(contractsRoot, "api");
+  const uiRoot = import_node_path22.default.join(contractsRoot, "ui");
+  const dbRoot = import_node_path22.default.join(contractsRoot, "db");
   const srcRoot = resolvePath(resolvedRoot, config, "srcDir");
   const testsRoot = resolvePath(resolvedRoot, config, "testsDir");
   const specFiles = await collectSpecFiles(specsRoot);
@@ -3907,6 +4404,27 @@ async function createReportData(root, validation, configResult) {
   const scSourceRecord = mapToSortedRecord(
     normalizeScSources(resolvedRoot, scSources)
   );
+  const guardrailsLoad = await loadDecisionGuardrails(resolvedRoot, {
+    specsRoot
+  });
+  const guardrailsAll = sortDecisionGuardrails(
+    normalizeDecisionGuardrails(guardrailsLoad.entries)
+  );
+  const guardrailsDisplay = guardrailsAll.slice(0, REPORT_GUARDRAILS_MAX);
+  const guardrailsByType = { nonGoal: 0, notNow: 0, tradeOff: 0 };
+  for (const item of guardrailsAll) {
+    if (item.type === "non-goal") {
+      guardrailsByType.nonGoal += 1;
+    } else if (item.type === "not-now") {
+      guardrailsByType.notNow += 1;
+    } else if (item.type === "trade-off") {
+      guardrailsByType.tradeOff += 1;
+    }
+  }
+  const guardrailsErrors = guardrailsLoad.errors.map((item) => ({
+    path: toRelativePath(resolvedRoot, item.path),
+    message: item.message
+  }));
   const version = await resolveToolVersion();
   const displayRoot = toRelativePath(resolvedRoot, resolvedRoot);
   const displayConfigPath = toRelativePath(resolvedRoot, configPath);
@@ -3954,6 +4472,34 @@ async function createReportData(root, validation, configResult) {
         specToContracts: specToContractsRecord
       }
     },
+    guardrails: {
+      total: guardrailsAll.length,
+      max: REPORT_GUARDRAILS_MAX,
+      truncated: guardrailsAll.length > guardrailsDisplay.length,
+      byType: guardrailsByType,
+      items: guardrailsDisplay.map((item) => {
+        const entry = {
+          id: item.id,
+          type: item.type,
+          guardrail: item.guardrail,
+          source: {
+            file: toRelativePath(resolvedRoot, item.source.file),
+            line: item.source.line
+          }
+        };
+        if (item.rationale) {
+          entry.rationale = item.rationale;
+        }
+        if (item.reconsider) {
+          entry.reconsider = item.reconsider;
+        }
+        if (item.related) {
+          entry.related = item.related;
+        }
+        return entry;
+      }),
+      scanErrors: guardrailsErrors
+    },
     issues: normalizedValidation.issues
   };
 }
@@ -4049,6 +4595,7 @@ function formatReportMarkdown(data, options = {}) {
   lines.push("");
   lines.push("- [Compatibility Issues](#compatibility-issues)");
   lines.push("- [Change Issues](#change-issues)");
+  lines.push("- [Decision Guardrails](#decision-guardrails)");
   lines.push("- [IDs](#ids)");
   lines.push("- [Traceability](#traceability)");
   lines.push("");
@@ -4140,6 +4687,49 @@ function formatReportMarkdown(data, options = {}) {
   lines.push("### Issues");
   lines.push("");
   lines.push(...formatIssueCards(issuesByCategory.change));
+  lines.push("## Decision Guardrails");
+  lines.push("");
+  lines.push(`- total: ${data.guardrails.total}`);
+  lines.push(
+    `- types: non-goal ${data.guardrails.byType.nonGoal} / not-now ${data.guardrails.byType.notNow} / trade-off ${data.guardrails.byType.tradeOff}`
+  );
+  if (data.guardrails.truncated) {
+    lines.push(`- truncated: true (max=${data.guardrails.max})`);
+  }
+  if (data.guardrails.scanErrors.length > 0) {
+    lines.push(`- scanErrors: ${data.guardrails.scanErrors.length}`);
+  }
+  lines.push("");
+  if (data.guardrails.items.length === 0) {
+    lines.push("- (none)");
+  } else {
+    for (const item of data.guardrails.items) {
+      lines.push(`- [${item.id}][${item.type}] ${item.guardrail}`);
+      lines.push(
+        `  - source: ${formatPathWithLine(item.source.file, { line: item.source.line }, baseUrl)}`
+      );
+      if (item.rationale) {
+        lines.push(`  - Rationale: ${item.rationale}`);
+      }
+      if (item.reconsider) {
+        lines.push(`  - Reconsider: ${item.reconsider}`);
+      }
+      if (item.related) {
+        lines.push(`  - Related: ${item.related}`);
+      }
+    }
+  }
+  if (data.guardrails.scanErrors.length > 0) {
+    lines.push("");
+    lines.push("### Scan errors");
+    lines.push("");
+    for (const errorItem of data.guardrails.scanErrors) {
+      lines.push(
+        `- ${formatPathLink(errorItem.path, baseUrl)}: ${errorItem.message}`
+      );
+    }
+  }
+  lines.push("");
   lines.push("## IDs");
   lines.push("");
   lines.push(formatIdLine("SPEC", data.ids.spec));
@@ -4330,7 +4920,7 @@ async function collectSpecContractRefs(specFiles, contractIdList) {
     idToSpecs.set(contractId, /* @__PURE__ */ new Set());
   }
   for (const file of specFiles) {
-    const text = await (0, import_promises18.readFile)(file, "utf-8");
+    const text = await (0, import_promises19.readFile)(file, "utf-8");
     const parsed = parseSpec(text, file);
     const specKey = parsed.specId;
     if (!specKey) {
@@ -4372,7 +4962,7 @@ async function collectIds(files) {
     THEMA: /* @__PURE__ */ new Set()
   };
   for (const file of files) {
-    const text = await (0, import_promises18.readFile)(file, "utf-8");
+    const text = await (0, import_promises19.readFile)(file, "utf-8");
     for (const prefix of ID_PREFIXES2) {
       const ids = extractIds(text, prefix);
       ids.forEach((id) => result[prefix].add(id));
@@ -4391,7 +4981,7 @@ async function collectIds(files) {
 async function collectUpstreamIds(files) {
   const ids = /* @__PURE__ */ new Set();
   for (const file of files) {
-    const text = await (0, import_promises18.readFile)(file, "utf-8");
+    const text = await (0, import_promises19.readFile)(file, "utf-8");
     extractAllIds(text).forEach((id) => ids.add(id));
   }
   return ids;
@@ -4412,7 +5002,7 @@ async function evaluateTraceability(upstreamIds, srcRoot, testsRoot) {
   }
   const pattern = buildIdPattern2(Array.from(upstreamIds));
   for (const file of targetFiles) {
-    const text = await (0, import_promises18.readFile)(file, "utf-8");
+    const text = await (0, import_promises19.readFile)(file, "utf-8");
     if (pattern.test(text)) {
       return true;
     }
@@ -4549,7 +5139,7 @@ function warnIfTruncated(scan, context) {
 
 // src/cli/commands/report.ts
 async function runReport(options) {
-  const root = import_node_path21.default.resolve(options.root);
+  const root = import_node_path23.default.resolve(options.root);
   const configResult = await loadConfig(root);
   let validation;
   if (options.runValidate) {
@@ -4566,7 +5156,7 @@ async function runReport(options) {
     validation = normalized;
   } else {
     const input = options.inputPath ?? configResult.config.output.validateJsonPath;
-    const inputPath = import_node_path21.default.isAbsolute(input) ? input : import_node_path21.default.resolve(root, input);
+    const inputPath = import_node_path23.default.isAbsolute(input) ? input : import_node_path23.default.resolve(root, input);
     try {
       validation = await readValidationResult(inputPath);
     } catch (err) {
@@ -4593,11 +5183,11 @@ async function runReport(options) {
   warnIfTruncated(data.traceability.testFiles, "report");
   const output = options.format === "json" ? formatReportJson(data) : options.baseUrl ? formatReportMarkdown(data, { baseUrl: options.baseUrl }) : formatReportMarkdown(data);
   const outRoot = resolvePath(root, configResult.config, "outDir");
-  const defaultOut = options.format === "json" ? import_node_path21.default.join(outRoot, "report.json") : import_node_path21.default.join(outRoot, "report.md");
+  const defaultOut = options.format === "json" ? import_node_path23.default.join(outRoot, "report.json") : import_node_path23.default.join(outRoot, "report.md");
   const out = options.outPath ?? defaultOut;
-  const outPath = import_node_path21.default.isAbsolute(out) ? out : import_node_path21.default.resolve(root, out);
-  await (0, import_promises19.mkdir)(import_node_path21.default.dirname(outPath), { recursive: true });
-  await (0, import_promises19.writeFile)(outPath, `${output}
+  const outPath = import_node_path23.default.isAbsolute(out) ? out : import_node_path23.default.resolve(root, out);
+  await (0, import_promises20.mkdir)(import_node_path23.default.dirname(outPath), { recursive: true });
+  await (0, import_promises20.writeFile)(outPath, `${output}
 `, "utf-8");
   info(
     `report: info=${validation.counts.info} warning=${validation.counts.warning} error=${validation.counts.error}`
@@ -4605,7 +5195,7 @@ async function runReport(options) {
   info(`wrote report: ${outPath}`);
 }
 async function readValidationResult(inputPath) {
-  const raw = await (0, import_promises19.readFile)(inputPath, "utf-8");
+  const raw = await (0, import_promises20.readFile)(inputPath, "utf-8");
   const parsed = JSON.parse(raw);
   if (!isValidationResult(parsed)) {
     throw new Error(`validate.json \u306E\u5F62\u5F0F\u304C\u4E0D\u6B63\u3067\u3059: ${inputPath}`);
@@ -4661,15 +5251,15 @@ function isMissingFileError5(error2) {
   return record2.code === "ENOENT";
 }
 async function writeValidationResult(root, outputPath, result) {
-  const abs = import_node_path21.default.isAbsolute(outputPath) ? outputPath : import_node_path21.default.resolve(root, outputPath);
-  await (0, import_promises19.mkdir)(import_node_path21.default.dirname(abs), { recursive: true });
-  await (0, import_promises19.writeFile)(abs, `${JSON.stringify(result, null, 2)}
+  const abs = import_node_path23.default.isAbsolute(outputPath) ? outputPath : import_node_path23.default.resolve(root, outputPath);
+  await (0, import_promises20.mkdir)(import_node_path23.default.dirname(abs), { recursive: true });
+  await (0, import_promises20.writeFile)(abs, `${JSON.stringify(result, null, 2)}
 `, "utf-8");
 }
 
 // src/cli/commands/validate.ts
-var import_promises20 = require("fs/promises");
-var import_node_path22 = __toESM(require("path"), 1);
+var import_promises21 = require("fs/promises");
+var import_node_path24 = __toESM(require("path"), 1);
 
 // src/cli/lib/failOn.ts
 function shouldFail(result, failOn) {
@@ -4684,7 +5274,7 @@ function shouldFail(result, failOn) {
 
 // src/cli/commands/validate.ts
 async function runValidate(options) {
-  const root = import_node_path22.default.resolve(options.root);
+  const root = import_node_path24.default.resolve(options.root);
   const configResult = await loadConfig(root);
   const result = await validateProject(root, configResult);
   const normalized = normalizeValidationResult(root, result);
@@ -4809,12 +5399,12 @@ function issueKey(issue7) {
 }
 async function emitJson(result, root, jsonPath) {
   const abs = resolveJsonPath(root, jsonPath);
-  await (0, import_promises20.mkdir)(import_node_path22.default.dirname(abs), { recursive: true });
-  await (0, import_promises20.writeFile)(abs, `${JSON.stringify(result, null, 2)}
+  await (0, import_promises21.mkdir)(import_node_path24.default.dirname(abs), { recursive: true });
+  await (0, import_promises21.writeFile)(abs, `${JSON.stringify(result, null, 2)}
 `, "utf-8");
 }
 function resolveJsonPath(root, jsonPath) {
-  return import_node_path22.default.isAbsolute(jsonPath) ? jsonPath : import_node_path22.default.resolve(root, jsonPath);
+  return import_node_path24.default.isAbsolute(jsonPath) ? jsonPath : import_node_path24.default.resolve(root, jsonPath);
 }
 var GITHUB_ANNOTATION_LIMIT = 100;
 
@@ -4832,7 +5422,9 @@ function parseArgs(argv, cwd) {
     doctorFormat: "text",
     validateFormat: "text",
     strict: false,
-    help: false
+    guardrailsPaths: [],
+    help: false,
+    invalidExitCode: 1
   };
   const args = [...argv];
   let command = args.shift() ?? null;
@@ -4841,6 +5433,25 @@ function parseArgs(argv, cwd) {
     options.help = true;
     command = null;
   }
+  const markInvalid = () => {
+    invalid = true;
+    options.help = true;
+    if (command === "guardrails") {
+      options.invalidExitCode = 2;
+    }
+  };
+  if (command === "guardrails") {
+    const candidate = args[0];
+    if (candidate && !candidate.startsWith("--")) {
+      const action = normalizeGuardrailsAction(candidate);
+      if (action) {
+        options.guardrailsAction = action;
+      } else {
+        markInvalid();
+      }
+      args.shift();
+    }
+  }
   for (let i = 0; i < args.length; i += 1) {
     const arg = args[i];
     switch (arg) {
@@ -4848,8 +5459,7 @@ function parseArgs(argv, cwd) {
         {
           const next = readOptionValue(args, i);
           if (next === null) {
-            invalid = true;
-            options.help = true;
+            markInvalid();
             break;
           }
           options.root = next;
@@ -4861,8 +5471,7 @@ function parseArgs(argv, cwd) {
         {
           const next = readOptionValue(args, i);
           if (next === null) {
-            invalid = true;
-            options.help = true;
+            markInvalid();
             break;
           }
           options.dir = next;
@@ -4881,8 +5490,7 @@ function parseArgs(argv, cwd) {
       case "--format": {
         const next = readOptionValue(args, i);
         if (next === null) {
-          invalid = true;
-          options.help = true;
+          markInvalid();
           break;
         }
         applyFormatOption(command, next, options);
@@ -4895,8 +5503,7 @@ function parseArgs(argv, cwd) {
       case "--fail-on": {
         const next = readOptionValue(args, i);
         if (next === null) {
-          invalid = true;
-          options.help = true;
+          markInvalid();
           break;
         }
         if (next === "never" || next === "warning" || next === "error") {
@@ -4908,8 +5515,7 @@ function parseArgs(argv, cwd) {
       case "--out": {
         const next = readOptionValue(args, i);
         if (next === null) {
-          invalid = true;
-          options.help = true;
+          markInvalid();
           break;
         }
         if (command === "doctor") {
@@ -4923,8 +5529,7 @@ function parseArgs(argv, cwd) {
       case "--in": {
         const next = readOptionValue(args, i);
         if (next === null) {
-          invalid = true;
-          options.help = true;
+          markInvalid();
           break;
         }
         options.reportIn = next;
@@ -4937,14 +5542,57 @@ function parseArgs(argv, cwd) {
       case "--base-url": {
         const next = readOptionValue(args, i);
         if (next === null) {
-          invalid = true;
-          options.help = true;
+          markInvalid();
           break;
         }
         options.reportBaseUrl = next;
         i += 1;
         break;
       }
+      case "--path": {
+        if (command !== "guardrails") {
+          break;
+        }
+        const next = readOptionValue(args, i);
+        if (next === null) {
+          markInvalid();
+          break;
+        }
+        options.guardrailsPaths.push(next);
+        i += 1;
+        break;
+      }
+      case "--max": {
+        if (command !== "guardrails") {
+          break;
+        }
+        const next = readOptionValue(args, i);
+        if (next === null) {
+          markInvalid();
+          break;
+        }
+        const parsed = Number.parseInt(next, 10);
+        if (Number.isNaN(parsed)) {
+          markInvalid();
+          break;
+        }
+        options.guardrailsMax = parsed;
+        i += 1;
+        break;
+      }
+      case "--keyword": {
+        if (command !== "guardrails") {
+          break;
+        }
+        const next = readOptionValue(args, i);
+        if (next === null) {
+          markInvalid();
+          break;
+        }
+        options.guardrailsKeyword = next;
+        i += 1;
+        break;
+      }
       case "--help":
       case "-h":
         options.help = true;
@@ -4953,6 +5601,9 @@ function parseArgs(argv, cwd) {
         break;
     }
   }
+  if (command === "guardrails" && !options.help && !options.guardrailsAction) {
+    markInvalid();
+  }
   return { command, invalid, options };
 }
 function readOptionValue(args, index) {
@@ -4991,6 +5642,16 @@ function applyFormatOption(command, value, options) {
     options.validateFormat = value;
   }
 }
+function normalizeGuardrailsAction(value) {
+  switch (value) {
+    case "list":
+    case "extract":
+    case "check":
+      return value;
+    default:
+      return null;
+  }
+}
 
 // src/cli/main.ts
 async function run(argv, cwd) {
@@ -4998,7 +5659,7 @@ async function run(argv, cwd) {
   if (!command || options.help) {
     info(usage());
     if (invalid) {
-      process.exitCode = 1;
+      process.exitCode = options.invalidExitCode;
     }
     return;
   }
@@ -5047,6 +5708,19 @@ async function run(argv, cwd) {
         process.exitCode = exitCode;
       }
       return;
+    case "guardrails":
+      {
+        const resolvedRoot = await resolveRoot(options);
+        const exitCode = await runGuardrails({
+          root: resolvedRoot,
+          ...options.guardrailsAction ? { action: options.guardrailsAction } : {},
+          paths: options.guardrailsPaths,
+          ...options.guardrailsMax !== void 0 ? { max: options.guardrailsMax } : {},
+          ...options.guardrailsKeyword !== void 0 ? { keyword: options.guardrailsKeyword } : {}
+        });
+        process.exitCode = exitCode;
+      }
+      return;
     default:
       error(`Unknown command: ${command}`);
       info(usage());
@@ -5061,6 +5735,7 @@ Commands:
   validate   \u4ED5\u69D8/\u5951\u7D04/\u53C2\u7167\u306E\u691C\u67FB
   report     \u691C\u8A3C\u7D50\u679C\u3068\u96C6\u8A08\u3092\u51FA\u529B
   doctor     \u8A2D\u5B9A/\u30D1\u30B9/\u51FA\u529B\u524D\u63D0\u306E\u8A3A\u65AD
+  guardrails Decision Guardrails \u306E\u62BD\u51FA/\u691C\u67FB\uFF08list|extract|check\uFF09
 
 Options:
   --root <path>   \u5BFE\u8C61\u30C7\u30A3\u30EC\u30AF\u30C8\u30EA
@@ -5078,6 +5753,9 @@ Options:
   --in <path>                   report: validate.json \u306E\u5165\u529B\u5148\uFF08config\u3088\u308A\u512A\u5148\uFF09
   --run-validate                report: validate \u3092\u5B9F\u884C\u3057\u3066\u304B\u3089 report \u3092\u751F\u6210
   --base-url <url>              report: \u30D1\u30B9\u3092\u30EA\u30F3\u30AF\u5316\u3059\u308B\u57FA\u6E96URL
+  --path <path>                 guardrails: \u5BFE\u8C61\u30D5\u30A1\u30A4\u30EB/\u30C7\u30A3\u30EC\u30AF\u30C8\u30EA\uFF08\u8907\u6570\u6307\u5B9A\u53EF\uFF09
+  --max <number>                guardrails extract: \u6700\u5927\u4EF6\u6570
+  --keyword <text>              guardrails list/extract: \u30AD\u30FC\u30EF\u30FC\u30C9\u30D5\u30A3\u30EB\u30BF
   -h, --help      \u30D8\u30EB\u30D7\u8868\u793A
 `;
 }