qfai 1.7.1 → 1.7.2

package/dist/cli/index.cjs

@@ -506,6 +506,69 @@ function normalizeUiux(raw, configPath, issues) {
       result.renderEvidence = renderEvidence;
     }
   }
+  if (raw.audit !== void 0) {
+    const audit = normalizeUiuxAudit(raw.audit, configPath, issues);
+    if (audit) {
+      result.audit = audit;
+    }
+  }
+  return Object.keys(result).length > 0 ? result : void 0;
+}
+function normalizeUiuxAudit(raw, configPath, issues) {
+  if (!isRecord(raw)) {
+    issues.push(configIssue(configPath, "uiux.audit \u306F\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u3067\u3042\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059\u3002"));
+    return void 0;
+  }
+  const result = {};
+  if (raw.enabled !== void 0) {
+    if (typeof raw.enabled === "boolean") {
+      result.enabled = raw.enabled;
+    } else {
+      issues.push(configIssue(configPath, "uiux.audit.enabled \u306F\u30D6\u30FC\u30EB\u5024\u3067\u3042\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059\u3002"));
+    }
+  }
+  if (raw.slopDetection !== void 0) {
+    if (typeof raw.slopDetection === "boolean") {
+      result.slopDetection = raw.slopDetection;
+    } else {
+      issues.push(
+        configIssue(configPath, "uiux.audit.slopDetection \u306F\u30D6\u30FC\u30EB\u5024\u3067\u3042\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059\u3002")
+      );
+    }
+  }
+  if (raw.maxPrimaryCtas !== void 0) {
+    if (typeof raw.maxPrimaryCtas === "number" && Number.isFinite(raw.maxPrimaryCtas) && raw.maxPrimaryCtas >= 0) {
+      result.maxPrimaryCtas = raw.maxPrimaryCtas;
+    } else {
+      issues.push(
+        configIssue(configPath, "uiux.audit.maxPrimaryCtas \u306F0\u4EE5\u4E0A\u306E\u6570\u5024\u3067\u3042\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059\u3002")
+      );
+    }
+  }
+  if (raw.maxRawTokenLiteralWarnings !== void 0) {
+    if (typeof raw.maxRawTokenLiteralWarnings === "number" && Number.isFinite(raw.maxRawTokenLiteralWarnings) && raw.maxRawTokenLiteralWarnings >= 0) {
+      result.maxRawTokenLiteralWarnings = raw.maxRawTokenLiteralWarnings;
+    } else {
+      issues.push(
+        configIssue(
+          configPath,
+          "uiux.audit.maxRawTokenLiteralWarnings \u306F0\u4EE5\u4E0A\u306E\u6570\u5024\u3067\u3042\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059\u3002"
+        )
+      );
+    }
+  }
+  if (raw.maxDuplicateFindingsPerRule !== void 0) {
+    if (typeof raw.maxDuplicateFindingsPerRule === "number" && Number.isFinite(raw.maxDuplicateFindingsPerRule) && raw.maxDuplicateFindingsPerRule >= 0) {
+      result.maxDuplicateFindingsPerRule = raw.maxDuplicateFindingsPerRule;
+    } else {
+      issues.push(
+        configIssue(
+          configPath,
+          "uiux.audit.maxDuplicateFindingsPerRule \u306F0\u4EE5\u4E0A\u306E\u6570\u5024\u3067\u3042\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059\u3002"
+        )
+      );
+    }
+  }
   return Object.keys(result).length > 0 ? result : void 0;
 }
 function normalizeRenderEvidence(raw, configPath, issues) {
@@ -1644,8 +1707,8 @@ var import_promises7 = require("fs/promises");
 var import_node_path8 = __toESM(require("path"), 1);
 var import_node_url2 = require("url");
 async function resolveToolVersion() {
-  if ("1.7.1".length > 0) {
-    return "1.7.1";
+  if ("1.7.2".length > 0) {
+    return "1.7.2";
   }
   try {
     const packagePath = resolvePackageJsonPath();
@@ -4208,9 +4271,9 @@ function applyRenderEvidence(evidence, options, autogenEnabled, outputPath) {
   };
 }
 function buildRenderBundle(toolVersion, command, options, autogenEnabled) {
-  const path62 = resolveRenderOutPath(options.root, options.renderOut);
+  const path64 = resolveRenderOutPath(options.root, options.renderOut);
   return {
-    path: path62,
+    path: path64,
     bundle: {
       meta: {
         generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -4222,7 +4285,7 @@ function buildRenderBundle(toolVersion, command, options, autogenEnabled) {
         requested: true,
         autogenEnabled,
         viewports: normalizeRenderViewports(options.renderViewports),
-        outputPath: path62,
+        outputPath: path64,
         reason: autogenEnabled ? "render evidence capture not implemented in this slice" : "render requested without autogen-ui-fidelity"
       }
     }
@@ -4288,8 +4351,8 @@ function extractRouteHintsFromEvidence(evidence) {
 }
 
 // src/cli/commands/report.ts
-var import_promises56 = require("fs/promises");
-var import_node_path59 = __toESM(require("path"), 1);
+var import_promises58 = require("fs/promises");
+var import_node_path61 = __toESM(require("path"), 1);
 
 // src/core/normalize.ts
 function normalizeIssuePaths(root, issues) {
@@ -4384,8 +4447,8 @@ async function createPhaseGuardResult(phase, blockedIssue) {
 }
 
 // src/core/report.ts
-var import_promises54 = require("fs/promises");
-var import_node_path57 = __toESM(require("path"), 1);
+var import_promises56 = require("fs/promises");
+var import_node_path59 = __toESM(require("path"), 1);
 
 // src/core/contractIndex.ts
 var import_promises15 = require("fs/promises");
@@ -12794,7 +12857,7 @@ function collectLayer(layer, layerName, target, errors) {
 }
 function flattenTokens(obj, prefix, target, errors) {
   for (const [key, value] of Object.entries(obj)) {
-    const path62 = `${prefix}.${key}`;
+    const path64 = `${prefix}.${key}`;
     if (value && typeof value === "object" && !Array.isArray(value)) {
       const record2 = value;
       if ("$value" in record2) {
@@ -12810,9 +12873,9 @@ function flattenTokens(obj, prefix, target, errors) {
         if (typeof record2.platform === "string") {
           token.platform = record2.platform;
         }
-        target.set(path62, token);
+        target.set(path64, token);
       } else {
-        flattenTokens(record2, path62, target, errors);
+        flattenTokens(record2, path64, target, errors);
       }
     }
   }
@@ -12822,44 +12885,44 @@ function resolveAllReferences(result) {
   for (const [key, val] of result.primitives) allTokens.set(key, val);
   for (const [key, val] of result.semantics) allTokens.set(key, val);
   for (const [key, val] of result.components) allTokens.set(key, val);
-  for (const [path62] of allTokens) {
-    resolveTokenRef(path62, allTokens, /* @__PURE__ */ new Set(), 0, result);
+  for (const [path64] of allTokens) {
+    resolveTokenRef(path64, allTokens, /* @__PURE__ */ new Set(), 0, result);
   }
 }
-function resolveTokenRef(path62, allTokens, visited, depth, result) {
-  if (result.resolved.has(path62)) {
-    return result.resolved.get(path62);
+function resolveTokenRef(path64, allTokens, visited, depth, result) {
+  if (result.resolved.has(path64)) {
+    return result.resolved.get(path64);
   }
   if (depth > MAX_RESOLVE_DEPTH) {
     result.errors.push({
-      message: `Max reference depth exceeded at: ${path62}`,
-      path: path62
+      message: `Max reference depth exceeded at: ${path64}`,
+      path: path64
     });
     return void 0;
   }
-  if (visited.has(path62)) {
+  if (visited.has(path64)) {
     result.errors.push({
-      message: `Circular reference detected: ${path62}`,
-      path: path62
+      message: `Circular reference detected: ${path64}`,
+      path: path64
     });
     return void 0;
   }
-  const token = allTokens.get(path62);
+  const token = allTokens.get(path64);
   if (!token) {
     return void 0;
   }
   if (typeof token.$value !== "string") {
     const rawValue2 = stringifyTokenValue(token.$value);
-    result.resolved.set(path62, rawValue2);
+    result.resolved.set(path64, rawValue2);
     return rawValue2;
   }
   const rawValue = stringifyTokenValue(token.$value);
   const refs = [...rawValue.matchAll(REF_PATTERN)];
   if (refs.length === 0) {
-    result.resolved.set(path62, rawValue);
+    result.resolved.set(path64, rawValue);
     return rawValue;
   }
-  visited.add(path62);
+  visited.add(path64);
   let resolved = rawValue;
   for (const ref of refs) {
     const refPath = ref[1];
@@ -12867,8 +12930,8 @@ function resolveTokenRef(path62, allTokens, visited, depth, result) {
     const refToken = allTokens.get(refPath);
     if (!refToken) {
       result.errors.push({
-        message: `Unresolved token reference: {${refPath}} at ${path62}`,
-        path: path62
+        message: `Unresolved token reference: {${refPath}} at ${path64}`,
+        path: path64
       });
       continue;
     }
@@ -12877,7 +12940,7 @@ function resolveTokenRef(path62, allTokens, visited, depth, result) {
       resolved = resolved.split(`{${refPath}}`).join(refValue);
     }
   }
-  result.resolved.set(path62, resolved);
+  result.resolved.set(path64, resolved);
   return resolved;
 }
 function stringifyTokenValue(value) {
@@ -16934,6 +16997,252 @@ async function validateDiscussionDesignHardening(root, config) {
   return issues;
 }
 
+// src/core/validators/designAudit.ts
+var import_promises54 = require("fs/promises");
+var import_node_path57 = __toESM(require("path"), 1);
+var COSMETIC_CATEGORIES = ["generic-shell", "stock-imagery", "placeholder-copy"];
+function resolveAuditConfig(config) {
+  const audit = config.uiux?.audit;
+  const profile = config.uiux?.qualityProfile ?? "default";
+  return {
+    enabled: audit?.enabled ?? true,
+    slopDetection: audit?.slopDetection ?? true,
+    qualityProfile: profile,
+    maxPrimaryCtas: audit?.maxPrimaryCtas ?? 1,
+    maxRawTokenLiteralWarnings: audit?.maxRawTokenLiteralWarnings ?? 5,
+    maxDuplicateFindingsPerRule: audit?.maxDuplicateFindingsPerRule ?? 5
+  };
+}
+function mapSeverity(tier, profile, category) {
+  if (tier === 1) return "error";
+  if (tier === 2) return profile === "strict" ? "error" : "warning";
+  if (profile === "default") {
+    return category && COSMETIC_CATEGORIES.includes(category) ? "info" : "warning";
+  }
+  return "warning";
+}
+function findingToIssue(finding, profile, rulePrefix = "audit") {
+  const severity = mapSeverity(finding.severityTier, profile, finding.dimension);
+  return issue(
+    finding.ruleId,
+    finding.message,
+    severity,
+    finding.file,
+    `${rulePrefix}.${finding.dimension}`,
+    finding.evidence.length > 0 ? finding.evidence : void 0,
+    "compatibility",
+    finding.guidance
+  );
+}
+function extractSection2(content, heading) {
+  const idx = content.indexOf(heading);
+  if (idx === -1) return null;
+  const start = idx + heading.length;
+  const headingLevel = heading.match(/^#+/)?.[0]?.length ?? 3;
+  const rest = content.slice(start);
+  const headingPattern = new RegExp(`^#{1,${headingLevel}} `, "m");
+  const nextHeadingMatch = headingPattern.exec(rest);
+  const sectionContent = nextHeadingMatch ? rest.slice(0, nextHeadingMatch.index) : rest;
+  return sectionContent.trim() || null;
+}
+function checkCtaHierarchy(content, auditConfig, file) {
+  const findings = [];
+  const ctaSection = extractSection2(content, "### CTA Hierarchy");
+  if (!ctaSection) return findings;
+  const primaryLines = ctaSection.match(/^-\s*Primary:/gm) || [];
+  const primaryCount = primaryLines.length;
+  if (primaryCount === 0) {
+    findings.push({
+      ruleId: "QFAI-AUD-001",
+      dimension: "visualHierarchy",
+      severityTier: 1,
+      message: "No primary CTA defined in CTA Hierarchy",
+      why: "Every UI screen needs a clear primary action to guide users",
+      evidence: [],
+      guidance: "Define at least one primary CTA in the CTA Hierarchy section",
+      file
+    });
+  }
+  if (primaryCount > auditConfig.maxPrimaryCtas) {
+    findings.push({
+      ruleId: "QFAI-AUD-020",
+      dimension: "visualHierarchy",
+      severityTier: 2,
+      message: `Multiple primary CTAs detected (${primaryCount} > ${auditConfig.maxPrimaryCtas})`,
+      why: "Multiple primary CTAs create decision paralysis and weaken visual hierarchy",
+      evidence: primaryLines.map((l) => l.trim()),
+      guidance: "Reduce to a single primary CTA per screen; demote others to secondary",
+      file
+    });
+  }
+  return findings;
+}
+var RAW_COLOR_RE = /#[0-9a-fA-F]{3,8}\b|rgb\([^)]+\)|rgba\([^)]+\)|hsl\([^)]+\)|hsla\([^)]+\)/g;
+async function checkTokenDrift(root, auditConfig, cfg) {
+  const findings = [];
+  const configuredDir = cfg.uiux?.designTokensDir;
+  const tokensDir = configuredDir ? import_node_path57.default.resolve(root, configuredDir) : import_node_path57.default.join(root, cfg.paths.contractsDir, "design");
+  let hasTokenFiles = false;
+  try {
+    const entries = await (0, import_promises54.readdir)(tokensDir);
+    hasTokenFiles = entries.some((e) => /\.ya?ml$/i.test(e));
+  } catch {
+    return findings;
+  }
+  if (!hasTokenFiles) return findings;
+  const contractsUiDir = import_node_path57.default.join(root, cfg.paths.contractsDir, "ui");
+  let htmlFiles = [];
+  try {
+    const entries = await (0, import_promises54.readdir)(contractsUiDir);
+    htmlFiles = entries.filter((e) => /\.html?$/i.test(e));
+  } catch {
+    return findings;
+  }
+  let rawCount = 0;
+  const sampleLiterals = [];
+  for (const htmlFile of htmlFiles) {
+    const content = await readSafe(import_node_path57.default.join(contractsUiDir, htmlFile));
+    if (!content) continue;
+    const matches = content.match(RAW_COLOR_RE);
+    if (matches) {
+      rawCount += matches.length;
+      for (const m of matches) {
+        if (sampleLiterals.length < 10) {
+          sampleLiterals.push(m.toLowerCase());
+        }
+      }
+    }
+  }
+  if (rawCount > auditConfig.maxRawTokenLiteralWarnings) {
+    findings.push({
+      ruleId: "QFAI-AUD-004",
+      dimension: "tokenDiscipline",
+      severityTier: 1,
+      message: `Token drift: ${rawCount} raw color literal occurrences found (threshold: ${auditConfig.maxRawTokenLiteralWarnings})`,
+      why: "Raw color values bypass design tokens, causing visual inconsistency",
+      evidence: sampleLiterals,
+      guidance: "Replace raw color literals with design token references"
+    });
+  }
+  return findings;
+}
+function deduplicateFindings(issues, maxPerRule) {
+  const counts = /* @__PURE__ */ new Map();
+  const result = [];
+  for (const iss of issues) {
+    const count = counts.get(iss.code) ?? 0;
+    if (count < maxPerRule) {
+      result.push(iss);
+    }
+    counts.set(iss.code, count + 1);
+  }
+  for (const [code, count] of counts) {
+    if (count > maxPerRule) {
+      result.push({
+        code,
+        severity: "info",
+        category: "compatibility",
+        message: `${count - maxPerRule} additional "${code}" finding(s) suppressed (max ${maxPerRule} per rule)`,
+        rule: `audit.dedup.${code}`
+      });
+    }
+  }
+  return result;
+}
+async function validateDesignAudit(root, config) {
+  const auditConfig = resolveAuditConfig(config);
+  if (!auditConfig.enabled) return [];
+  const discussionDir = import_node_path57.default.join(root, config.paths.discussionDir);
+  const packRoot = await findLatestDiscussionPackDir(discussionDir);
+  if (!packRoot) return [];
+  const uiBearing = await isUiBearing(packRoot);
+  if (!uiBearing) return [];
+  const storyPath = import_node_path57.default.join(packRoot, "03_Story-Workshop.md");
+  const content = await readSafe(storyPath);
+  if (!content) return [];
+  const findings = [];
+  findings.push(...checkCtaHierarchy(content, auditConfig, "03_Story-Workshop.md"));
+  findings.push(...await checkTokenDrift(root, auditConfig, config));
+  const issues = findings.map((f) => findingToIssue(f, auditConfig.qualityProfile));
+  return deduplicateFindings(issues, auditConfig.maxDuplicateFindingsPerRule);
+}
+
+// src/core/validators/designSlop.ts
+var import_node_fs2 = require("fs");
+var import_promises55 = require("fs/promises");
+var import_node_path58 = __toESM(require("path"), 1);
+var import_node_url4 = require("url");
+function isValidSlopPattern(rule) {
+  if (typeof rule !== "object" || rule === null) return false;
+  const r = rule;
+  return typeof r.id === "string" && typeof r.category === "string" && typeof r.tier === "number" && Array.isArray(r.scopes) && typeof r.match === "string" && typeof r.message === "string" && typeof r.guidance === "string";
+}
+async function loadSlopPatterns(jsonPath) {
+  const raw = await (0, import_promises55.readFile)(jsonPath, "utf-8");
+  const parsed = JSON.parse(raw);
+  if (!Array.isArray(parsed)) return [];
+  return parsed.filter((r) => isValidSlopPattern(r));
+}
+function defaultPatternsPath() {
+  const base = __filename;
+  const basePath = base.startsWith("file:") ? (0, import_node_url4.fileURLToPath)(base) : base;
+  const baseDir = import_node_path58.default.dirname(basePath);
+  const candidates = [
+    import_node_path58.default.join(baseDir, "designSlopPatterns.json"),
+    import_node_path58.default.resolve(baseDir, "../../../assets/validators/designSlopPatterns.json"),
+    import_node_path58.default.resolve(baseDir, "../../assets/validators/designSlopPatterns.json")
+  ];
+  for (const c of candidates) {
+    if ((0, import_node_fs2.existsSync)(c)) return c;
+  }
+  return candidates[0];
+}
+async function validateDesignSlop(root, config) {
+  const auditConfig = resolveAuditConfig(config);
+  if (!auditConfig.enabled) return [];
+  if (!auditConfig.slopDetection) return [];
+  const discussionDir = import_node_path58.default.join(root, config.paths.discussionDir);
+  const packRoot = await findLatestDiscussionPackDir(discussionDir);
+  if (!packRoot) return [];
+  const uiBearing = await isUiBearing(packRoot);
+  if (!uiBearing) return [];
+  let patterns;
+  try {
+    patterns = await loadSlopPatterns(defaultPatternsPath());
+  } catch {
+    return [];
+  }
+  const findings = [];
+  const seenRules = /* @__PURE__ */ new Set();
+  for (const pattern of patterns) {
+    let regex;
+    try {
+      regex = new RegExp(pattern.match, "gi");
+    } catch {
+      continue;
+    }
+    for (const scope of pattern.scopes) {
+      const filePath = import_node_path58.default.join(packRoot, scope);
+      const content = await readSafe(filePath);
+      if (!content) continue;
+      if (regex.test(content) && !seenRules.has(pattern.id)) {
+        seenRules.add(pattern.id);
+        findings.push({
+          ruleId: pattern.id,
+          dimension: pattern.category,
+          severityTier: pattern.tier,
+          message: pattern.message,
+          why: `Slop pattern "${pattern.id}" matched in ${scope}`,
+          evidence: [],
+          guidance: pattern.guidance,
+          file: scope
+        });
+      }
+    }
+  }
+  return findings.map((f) => findingToIssue(f, auditConfig.qualityProfile, "slop"));
+}
+
 // src/core/validate.ts
 var UIUX_VALIDATION_BUDGET_MS = 2e3;
 async function validateProject(root, configResult, options = {}) {
@@ -16951,7 +17260,9 @@ async function validateProject(root, configResult, options = {}) {
     () => validateBpApDb(root, config),
     () => validateUiDefinitionConsistency(root, config),
     () => validateResearchSummary(root, config),
-    () => validateAgentDefinition(root, config)
+    () => validateAgentDefinition(root, config),
+    () => validateDesignAudit(root, config),
+    () => validateDesignSlop(root, config)
   ];
   const uiuxIssueGroups = await Promise.all(uiuxValidators.map((validator) => validator()));
   const uiuxIssues = [...platformResult.issues, ...uiuxIssueGroups.flat()];
@@ -17038,15 +17349,15 @@ var REPORT_GUARDRAILS_MAX = 20;
 var REPORT_TEST_STRATEGY_SAMPLE_LIMIT = 20;
 var SC_TAG_RE4 = /^SC-\d{4}-\d{4}$/;
 async function createReportData(root, validation, configResult) {
-  const resolvedRoot = import_node_path57.default.resolve(root);
+  const resolvedRoot = import_node_path59.default.resolve(root);
   const resolved = configResult ?? await loadConfig(resolvedRoot);
   const config = resolved.config;
   const configPath = resolved.configPath;
   const specsRoot = resolvePath(resolvedRoot, config, "specsDir");
   const contractsRoot = resolvePath(resolvedRoot, config, "contractsDir");
-  const apiRoot = import_node_path57.default.join(contractsRoot, "api");
-  const uiRoot = import_node_path57.default.join(contractsRoot, "ui");
-  const dbRoot = import_node_path57.default.join(contractsRoot, "db");
+  const apiRoot = import_node_path59.default.join(contractsRoot, "api");
+  const uiRoot = import_node_path59.default.join(contractsRoot, "ui");
+  const dbRoot = import_node_path59.default.join(contractsRoot, "db");
   const srcRoot = resolvePath(resolvedRoot, config, "srcDir");
   const testsRoot = resolvePath(resolvedRoot, config, "testsDir");
   const specEntries = await collectSpecEntries(specsRoot);
@@ -17374,6 +17685,8 @@ function formatReportMarkdown(data, options = {}) {
   lines.push("");
   lines.push("- [Compatibility Issues](#compatibility-issues)");
   lines.push("- [Change Issues](#change-issues)");
+  lines.push("- [Design Audit Findings](#design-audit-findings)");
+  lines.push("- [Slop Guardrails Findings](#slop-guardrails-findings)");
   lines.push("- [Change Type](#change-type)");
   lines.push("- [Waivers](#waivers)");
   lines.push("- [Decision Guardrails](#decision-guardrails)");
@@ -17522,6 +17835,46 @@ function formatReportMarkdown(data, options = {}) {
   lines.push("### Issues");
   lines.push("");
   lines.push(...formatIssueCards(issuesByCategory.change));
+  const auditIssues = data.issues.filter((i) => /^QFAI-AUD-/.test(i.code));
+  if (auditIssues.length > 0) {
+    lines.push("## Design Audit Findings");
+    lines.push("");
+    const byDimension = /* @__PURE__ */ new Map();
+    for (const iss of auditIssues) {
+      const dim = iss.rule?.replace(/^audit\./, "").split(".")[0] ?? "unknown";
+      const group = byDimension.get(dim) ?? [];
+      group.push(iss);
+      byDimension.set(dim, group);
+    }
+    for (const [dim, dimIssues] of byDimension) {
+      lines.push(`### ${dim}`);
+      lines.push("");
+      for (const iss of dimIssues) {
+        lines.push(`- **${iss.severity.toUpperCase()}** [${iss.code}] ${iss.message}`);
+      }
+      lines.push("");
+    }
+  }
+  const slopIssues = data.issues.filter((i) => /^SLP-/.test(i.code));
+  if (slopIssues.length > 0) {
+    lines.push("## Slop Guardrails Findings");
+    lines.push("");
+    const byCategory = /* @__PURE__ */ new Map();
+    for (const iss of slopIssues) {
+      const cat = iss.rule?.replace(/^slop\./, "").split(".")[0] ?? "unknown";
+      const group = byCategory.get(cat) ?? [];
+      group.push(iss);
+      byCategory.set(cat, group);
+    }
+    for (const [cat, catIssues] of byCategory) {
+      lines.push(`### ${cat}`);
+      lines.push("");
+      for (const iss of catIssues) {
+        lines.push(`- **${iss.severity.toUpperCase()}** [${iss.code}] ${iss.message}`);
+      }
+      lines.push("");
+    }
+  }
   lines.push("## Change Type");
   lines.push("");
   lines.push("### Summary");
@@ -17941,7 +18294,7 @@ async function collectChangeTypeSummary(specsRoot) {
   };
   const deltaFiles = await collectDeltaFiles(specsRoot);
   for (const deltaFile of deltaFiles) {
-    const text = await (0, import_promises54.readFile)(deltaFile, "utf-8");
+    const text = await (0, import_promises56.readFile)(deltaFile, "utf-8");
     const parsed = parseDeltaV1(text);
     for (const entry of parsed.entries) {
       if (!entry.meta) {
@@ -17978,7 +18331,7 @@ async function collectSpecContractRefs(specFiles, contractIdList) {
     idToSpecs.set(contractId, /* @__PURE__ */ new Set());
   }
   for (const file of specFiles) {
-    const text = await (0, import_promises54.readFile)(file, "utf-8");
+    const text = await (0, import_promises56.readFile)(file, "utf-8");
     const parsed = parseSpec(text, file);
     const specKey = parsed.specId;
     if (!specKey) {
@@ -18015,7 +18368,7 @@ async function collectIds(files) {
     result[prefix] = /* @__PURE__ */ new Set();
   }
   for (const file of files) {
-    const text = await (0, import_promises54.readFile)(file, "utf-8");
+    const text = await (0, import_promises56.readFile)(file, "utf-8");
     for (const prefix of ID_PREFIXES) {
       const ids = extractIds(text, prefix);
       ids.forEach((id) => result[prefix].add(id));
@@ -18030,7 +18383,7 @@ async function collectIds(files) {
 async function collectUpstreamIds(files) {
   const ids = /* @__PURE__ */ new Set();
   for (const file of files) {
-    const text = await (0, import_promises54.readFile)(file, "utf-8");
+    const text = await (0, import_promises56.readFile)(file, "utf-8");
     extractAllIds(text).forEach((id) => ids.add(id));
   }
   return ids;
@@ -18051,7 +18404,7 @@ async function evaluateTraceability(upstreamIds, srcRoot, testsRoot) {
   }
   const pattern = buildIdPattern(Array.from(upstreamIds));
   for (const file of targetFiles) {
-    const text = await (0, import_promises54.readFile)(file, "utf-8");
+    const text = await (0, import_promises56.readFile)(file, "utf-8");
     if (pattern.test(text)) {
       return true;
     }
@@ -18170,7 +18523,7 @@ function normalizeScSources(root, sources) {
 async function countScenarios(scenarioFiles) {
   let total = 0;
   for (const file of scenarioFiles) {
-    const text = await (0, import_promises54.readFile)(file, "utf-8");
+    const text = await (0, import_promises56.readFile)(file, "utf-8");
     const { document, errors } = parseScenarioDocument(text, file);
     if (!document || errors.length > 0) {
       continue;
@@ -18201,7 +18554,7 @@ async function collectTestStrategy(scenarioFiles, root, config, limit) {
   let totalScenarios = 0;
   let e2eCount = 0;
   for (const file of scenarioFiles) {
-    const text = await (0, import_promises54.readFile)(file, "utf-8");
+    const text = await (0, import_promises56.readFile)(file, "utf-8");
     const { document, errors } = parseScenarioDocument(text, file);
     if (!document || errors.length > 0) {
       continue;
@@ -18289,10 +18642,10 @@ function buildHotspots(issues) {
 async function collectTddCoverage(entries) {
   const specs = [];
   for (const entry of entries) {
-    const testCasesPath = import_node_path57.default.join(entry.dir, "06_Test-Cases.md");
+    const testCasesPath = import_node_path59.default.join(entry.dir, "06_Test-Cases.md");
     let tcContent;
     try {
-      tcContent = await (0, import_promises54.readFile)(testCasesPath, "utf-8");
+      tcContent = await (0, import_promises56.readFile)(testCasesPath, "utf-8");
     } catch {
       continue;
     }
@@ -18324,10 +18677,10 @@ async function collectTddCoverage(entries) {
       });
       continue;
     }
-    const tddListPath = import_node_path57.default.join(entry.dir, "tdd", "test-list.md");
+    const tddListPath = import_node_path59.default.join(entry.dir, "tdd", "test-list.md");
     let tddContent;
     try {
-      tddContent = await (0, import_promises54.readFile)(tddListPath, "utf-8");
+      tddContent = await (0, import_promises56.readFile)(tddListPath, "utf-8");
     } catch {
       specs.push({
         specNumber: entry.specNumber,
@@ -18410,8 +18763,8 @@ async function collectTddCoverage(entries) {
 }
 
 // src/core/specPackReport.ts
-var import_promises55 = require("fs/promises");
-var import_node_path58 = __toESM(require("path"), 1);
+var import_promises57 = require("fs/promises");
+var import_node_path60 = __toESM(require("path"), 1);
 var REQUIRED_LEDGER_COLUMNS = [
   "trace_id",
   "obj_id",
@@ -18429,9 +18782,9 @@ async function writeSpecPackReports(root, config) {
   const entries = await collectSpecEntries(specsRoot);
   const contractIndex = await buildContractIndex(root, config);
   for (const entry of entries) {
-    const specName = import_node_path58.default.basename(entry.dir);
-    const outputDir = import_node_path58.default.join(outRoot, specName);
-    await (0, import_promises55.mkdir)(outputDir, { recursive: true });
+    const specName = import_node_path60.default.basename(entry.dir);
+    const outputDir = import_node_path60.default.join(outRoot, specName);
+    await (0, import_promises57.mkdir)(outputDir, { recursive: true });
     const [acText, tcText, exText, ledgerText] = await Promise.all([
       readSafe12(entry.acceptanceCriteriaPath),
       readSafe12(entry.testCasesPath),
@@ -18456,14 +18809,14 @@ async function writeSpecPackReports(root, config) {
       contractIds: contractIndex.ids
     });
     const graph = buildTraceabilityGraph(ledgerRows);
-    await (0, import_promises55.writeFile)(
-      import_node_path58.default.join(outputDir, "coverage.md"),
+    await (0, import_promises57.writeFile)(
+      import_node_path60.default.join(outputDir, "coverage.md"),
       `${formatCoverageMarkdown(specName, coverage)}
 `,
       "utf-8"
     );
-    await (0, import_promises55.writeFile)(
-      import_node_path58.default.join(outputDir, "traceability-graph.json"),
+    await (0, import_promises57.writeFile)(
+      import_node_path60.default.join(outputDir, "traceability-graph.json"),
       `${JSON.stringify(graph, null, 2)}
 `,
       "utf-8"
@@ -18638,7 +18991,7 @@ function getCell(row, indexByColumn, column) {
 }
 async function readSafe12(filePath) {
   try {
-    return await (0, import_promises55.readFile)(filePath, "utf-8");
+    return await (0, import_promises57.readFile)(filePath, "utf-8");
   } catch {
     return "";
   }
@@ -18656,7 +19009,7 @@ function warnIfTruncated(scan, context) {
 
 // src/cli/commands/report.ts
 async function runReport(options) {
-  const root = import_node_path59.default.resolve(options.root);
+  const root = import_node_path61.default.resolve(options.root);
   const configResult = await loadConfig(root);
   let validation;
   let blockedByPhaseGuard = false;
@@ -18672,7 +19025,7 @@ async function runReport(options) {
     validation = normalized;
   } else {
     const input = options.inputPath ?? configResult.config.output.validateJsonPath;
-    const inputPath = import_node_path59.default.isAbsolute(input) ? input : import_node_path59.default.resolve(root, input);
+    const inputPath = import_node_path61.default.isAbsolute(input) ? input : import_node_path61.default.resolve(root, input);
     try {
       validation = await readValidationResult(inputPath);
     } catch (err) {
@@ -18699,11 +19052,11 @@ async function runReport(options) {
   warnIfTruncated(data.traceability.testFiles, "report");
   const output = options.format === "json" ? formatReportJson(data) : options.baseUrl ? formatReportMarkdown(data, { baseUrl: options.baseUrl }) : formatReportMarkdown(data);
   const outRoot = resolvePath(root, configResult.config, "outDir");
-  const defaultOut = options.format === "json" ? import_node_path59.default.join(outRoot, "report.json") : import_node_path59.default.join(outRoot, "report.md");
+  const defaultOut = options.format === "json" ? import_node_path61.default.join(outRoot, "report.json") : import_node_path61.default.join(outRoot, "report.md");
   const out = options.outPath ?? defaultOut;
-  const outPath = import_node_path59.default.isAbsolute(out) ? out : import_node_path59.default.resolve(root, out);
-  await (0, import_promises56.mkdir)(import_node_path59.default.dirname(outPath), { recursive: true });
-  await (0, import_promises56.writeFile)(outPath, `${output}
+  const outPath = import_node_path61.default.isAbsolute(out) ? out : import_node_path61.default.resolve(root, out);
+  await (0, import_promises58.mkdir)(import_node_path61.default.dirname(outPath), { recursive: true });
+  await (0, import_promises58.writeFile)(outPath, `${output}
 `, "utf-8");
   await writeSpecPackReports(root, configResult.config);
   if (blockedByPhaseGuard) {
@@ -18718,7 +19071,7 @@ async function runReport(options) {
   info(`wrote report: ${outPath}`);
 }
 async function readValidationResult(inputPath) {
-  const raw = await (0, import_promises56.readFile)(inputPath, "utf-8");
+  const raw = await (0, import_promises58.readFile)(inputPath, "utf-8");
   const parsed = JSON.parse(raw);
   if (!isValidationResult(parsed)) {
     throw new Error(`validate.json \u306E\u5F62\u5F0F\u304C\u4E0D\u6B63\u3067\u3059: ${inputPath}`);
@@ -18778,23 +19131,23 @@ function isMissingFileError2(error2) {
   return record2.code === "ENOENT";
 }
 async function writeValidationResult(root, outputPath, result) {
-  const abs = import_node_path59.default.isAbsolute(outputPath) ? outputPath : import_node_path59.default.resolve(root, outputPath);
-  await (0, import_promises56.mkdir)(import_node_path59.default.dirname(abs), { recursive: true });
-  await (0, import_promises56.writeFile)(abs, `${JSON.stringify(result, null, 2)}
+  const abs = import_node_path61.default.isAbsolute(outputPath) ? outputPath : import_node_path61.default.resolve(root, outputPath);
+  await (0, import_promises58.mkdir)(import_node_path61.default.dirname(abs), { recursive: true });
+  await (0, import_promises58.writeFile)(abs, `${JSON.stringify(result, null, 2)}
 `, "utf-8");
 }
 
 // src/cli/commands/validate.ts
-var import_promises58 = require("fs/promises");
-var import_node_path61 = __toESM(require("path"), 1);
+var import_promises60 = require("fs/promises");
+var import_node_path63 = __toESM(require("path"), 1);
 
 // src/core/runLog.ts
-var import_promises57 = require("fs/promises");
-var import_node_path60 = __toESM(require("path"), 1);
+var import_promises59 = require("fs/promises");
+var import_node_path62 = __toESM(require("path"), 1);
 async function writeValidateRunLog(input) {
-  const root = import_node_path60.default.resolve(input.root);
+  const root = import_node_path62.default.resolve(input.root);
   const outDir = resolvePath(root, input.config, "outDir");
-  await (0, import_promises57.mkdir)(outDir, { recursive: true });
+  await (0, import_promises59.mkdir)(outDir, { recursive: true });
   const { runId, reportDir } = await allocateRunReportDir(outDir, input.startedAt);
   const relativeSpecsRoot = toRelativePath(root, resolvePath(root, input.config, "specsDir"));
   const latestDiscussion = await findLatestPack(
@@ -18839,10 +19192,10 @@ async function writeValidateRunLog(input) {
     errors,
     warnings
   });
-  await writeJson(import_node_path60.default.join(reportDir, "run.json"), runJson);
-  await writeJson(import_node_path60.default.join(reportDir, "validator.json"), validatorJson);
-  await writeJson(import_node_path60.default.join(reportDir, "traceability.json"), traceabilityJson);
-  await (0, import_promises57.writeFile)(import_node_path60.default.join(reportDir, "summary.md"), `${summaryMd}
+  await writeJson(import_node_path62.default.join(reportDir, "run.json"), runJson);
+  await writeJson(import_node_path62.default.join(reportDir, "validator.json"), validatorJson);
+  await writeJson(import_node_path62.default.join(reportDir, "traceability.json"), traceabilityJson);
+  await (0, import_promises59.writeFile)(import_node_path62.default.join(reportDir, "summary.md"), `${summaryMd}
 `, "utf-8");
   return {
     runId,
@@ -18850,7 +19203,7 @@ async function writeValidateRunLog(input) {
   };
 }
 async function writeJson(filePath, value) {
-  await (0, import_promises57.writeFile)(filePath, `${JSON.stringify(value, null, 2)}
+  await (0, import_promises59.writeFile)(filePath, `${JSON.stringify(value, null, 2)}
 `, "utf-8");
 }
 function resolveStatus(result, override) {
@@ -18966,9 +19319,9 @@ async function allocateRunReportDir(outDir, startedAt) {
   for (let attempt = 0; attempt < maxAttempts; attempt++) {
     const candidateDate = new Date(startedAt.getTime() + attempt);
     const runId = `run-${formatTimestamp17(candidateDate)}`;
-    const reportDir = import_node_path60.default.join(outDir, runId);
+    const reportDir = import_node_path62.default.join(outDir, runId);
     try {
-      await (0, import_promises57.mkdir)(reportDir);
+      await (0, import_promises59.mkdir)(reportDir);
       return { runId, reportDir };
     } catch (error2) {
       if (isAlreadyExistsError(error2)) {
@@ -18997,7 +19350,7 @@ function shouldFail(result, failOn) {
 // src/cli/commands/validate.ts
 async function runValidate(options) {
   const startedAt = /* @__PURE__ */ new Date();
-  const root = import_node_path61.default.resolve(options.root);
+  const root = import_node_path63.default.resolve(options.root);
   const configResult = await loadConfig(root);
   const blockedIssue = buildCiRefinementIssue(options.phase);
   const blockedByPhaseGuard = blockedIssue !== null;
@@ -19153,12 +19506,12 @@ function issueKey(issue2) {
 }
 async function emitJson(result, root, jsonPath) {
   const abs = resolveJsonPath(root, jsonPath);
-  await (0, import_promises58.mkdir)(import_node_path61.default.dirname(abs), { recursive: true });
-  await (0, import_promises58.writeFile)(abs, `${JSON.stringify(result, null, 2)}
+  await (0, import_promises60.mkdir)(import_node_path63.default.dirname(abs), { recursive: true });
+  await (0, import_promises60.writeFile)(abs, `${JSON.stringify(result, null, 2)}
 `, "utf-8");
 }
 function resolveJsonPath(root, jsonPath) {
-  return import_node_path61.default.isAbsolute(jsonPath) ? jsonPath : import_node_path61.default.resolve(root, jsonPath);
+  return import_node_path63.default.isAbsolute(jsonPath) ? jsonPath : import_node_path63.default.resolve(root, jsonPath);
 }
 var GITHUB_ANNOTATION_LIMIT = 100;
 var ISSUE_EXPECTED_BY_CODE = {