ai-saas-guard 0.44.0 → 0.45.0

package/README.md

@@ -124,23 +124,30 @@ The demo command uses packaged public fixtures: `examples/demo-risky-saas` curre
 The report is designed to be read before launch or before merging an AI-heavy PR. A longer copy-paste example is in [docs/sample-launch-report.md](docs/sample-launch-report.md).
 
 ```text
-ai-saas-guard scan summary
-Findings: 20 findings: 2 critical, 6 high, 8 medium, 3 low, 1 info
-Launch gate: blocked: critical launch-readiness findings need review before inviting users
-
-Top risks:
-- CRITICAL stripe.webhook.missing-signature at app/api/stripe/webhook/route.ts:1 - Stripe webhook does not verify the Stripe signature
-- CRITICAL supabase.rls.broad-policy at supabase/migrations/001_accounts.sql:10 - Broad Supabase RLS policy on public.accounts
-- HIGH silent-success.swallowed-error at app/api/billing/checkout/route.ts:4 - Catch block may turn upstream failure into success
-
-Manual proof to run next:
-- Send a request without a valid Stripe signature and confirm the handler rejects it before changing entitlement state.
-- Run the generated two-account IDOR test and confirm User B cannot read, update, or delete User A resources.
-- Force the upstream billing call to fail and confirm the route returns an error, not fake success.
-
-Next steps
-- Fix critical and high trust-boundary findings first.
-- Run the manual proof steps in staging and confirm each risky path fails closed.
+ai-saas-guard | SCAN SUMMARY
+----------------------------------------
+Target       /path/to/your-saas
+Launch gate  blocked: critical launch-readiness findings need review before inviting users
+Findings     20 findings | 2 critical | 6 high | 8 medium | 3 low | 1 info
+Decision     Can a real user get access they should not have? Review auth, tenant ownership, Supabase RLS, webhook entitlement, and data mutation findings first.
+
+TOP RISKS
+1. CRITICAL stripe.webhook.missing-signature at app/api/stripe/webhook/route.ts:1 - Stripe webhook does not verify the Stripe signature
+2. CRITICAL supabase.rls.broad-policy at supabase/migrations/001_accounts.sql:10 - Broad Supabase RLS policy on public.accounts
+3. HIGH silent-success.swallowed-error at app/api/billing/checkout/route.ts:4 - Catch block may turn upstream failure into success: app/api/billing/checkout/route.ts
+
+MANUAL PROOF
+1. Send a request without a valid Stripe signature and confirm the handler rejects it before changing entitlement state.
+2. Run the generated two-account IDOR test and confirm User B cannot read, update, or delete User A resources.
+3. Force the upstream API, auth provider, billing provider, or database call to fail and confirm the route returns an error or disclosed degraded mode, not a fake success.
+
+NEXT STEPS
+1. Fix critical and high trust-boundary findings first: auth/session, billing/webhook, tenant data, and silent-success paths.
+2. Run the manual proof steps above in staging and confirm each risky path fails closed.
+3. Treat low and info deploy/CI hygiene hints as cleanup after critical, high, and medium launch paths are understood.
+
+FULL REPORT
+  Rerun without --summary, or use --json, --sarif, or --markdown where supported.
 ```
 
 ## What You Get
@@ -338,7 +345,7 @@ node dist/cli.js pr-risk --root /path/to/your-saas --base origin/main --json
 node dist/cli.js pr-risk --root /path/to/your-saas --base origin/main --markdown
 ```
 
-If `--base` cannot be resolved, `pr-risk` emits `pr-risk.diff-unavailable` instead of silently reporting a clean or empty diff. In GitHub Actions, use `actions/checkout` with `fetch-depth: 0` when you need merge-base comparison against `origin/main`.
+If `--base` cannot be resolved, `pr-risk` emits `pr-risk.diff-unavailable` instead of silently reporting a clean or empty diff. `--base` accepts branch, tag, full ref, or commit SHA names only (letters, numbers, dots, underscores, slashes, hyphens); revision expressions such as `HEAD~3` are rejected so option-like or malformed values never reach git argument parsing. In GitHub Actions, use `actions/checkout` with `fetch-depth: 0` when you need merge-base comparison against `origin/main`.
 
 ## Commands
 

package/action.yml

@@ -12,7 +12,7 @@ inputs:
     required: false
     default: ${{ github.workspace }}
   format:
-    description: "Output format: terminal, json, sarif, markdown, or summary. Use summary for first-run CLI output, markdown for PR summaries, and sarif for code scanning."
+    description: "Output format: terminal, json, sarif, markdown, summary, or comment. Use summary for first-run CLI output, markdown for PR summaries, sarif for code scanning, and comment for PR-comment-ready markdown (pr-risk)."
     required: false
     default: terminal
   fail-on:
@@ -67,7 +67,7 @@ runs:
         esac
 
         case "${INPUT_FORMAT}" in
-          terminal|json|sarif|markdown|summary) ;;
+          terminal|json|sarif|markdown|summary|comment) ;;
           *)
             echo "Invalid format input: ${INPUT_FORMAT}" >&2
             exit 2
@@ -102,6 +102,8 @@ runs:
           args+=("--markdown")
         elif [ "${INPUT_FORMAT}" = "summary" ]; then
           args+=("--summary")
+        elif [ "${INPUT_FORMAT}" = "comment" ]; then
+          args+=("--format" "comment")
         fi
 
         if [ "${INPUT_FAIL_ON}" != "none" ]; then

package/dist/cli.js

@@ -8,6 +8,7 @@ import { formatMarkdownReport } from "./report/markdown.js";
 import { formatSarifReport } from "./report/sarif.js";
 import { formatSummaryReport } from "./report/summary.js";
 import { formatTerminalReport } from "./report/terminal.js";
+import { isSafeGitBaseRef } from "./scanners/gitDiff.js";
 async function main(argv) {
     const args = parseArgs(argv);
     if (!args.command || args.command === "help") {
@@ -120,6 +121,9 @@ function parseArgs(argv) {
             const value = argv[index + 1];
             if (!value)
                 throw new Error("--base requires a branch or ref");
+            if (!isSafeGitBaseRef(value)) {
+                throw new Error("--base must be a safe branch or ref using letters, numbers, dots, underscores, slashes, or hyphens");
+            }
             result.base = value;
             index += 1;
             continue;
@@ -202,6 +206,7 @@ Defaults:
   - first-run launch summary with --summary
   - project config auto-loaded from .ai-saas-guard.json when present
   - --doctor is deprecated: the Supabase RLS doctor section is always included in check-supabase output; the flag is still accepted but has no effect
+  - --base accepts branch, tag, full ref, or commit SHA names only (letters, numbers, dots, underscores, slashes, hyphens); revisions like HEAD~3 are rejected
 `;
 }
 main(process.argv.slice(2)).then((code) => {

package/dist/commands/scan.js

@@ -16,7 +16,12 @@ export async function scanRepository(options) {
         scanSecrets(context),
         scanNextPublicEnv(context),
         checkStripe(context),
-        stackInventory.databases.includes("supabase") ? checkSupabase(context) : createSkippedSupabaseReport(context.rootDir),
+        // Never gate on the stack inventory: it only recognizes standard
+        // layouts (supabase/ paths, package deps, policy syntax), so SQL
+        // migrations in non-standard paths would silently skip every Supabase
+        // rule while the scan still reported clear. checkSupabase already
+        // returns an empty report when it finds no Supabase context.
+        checkSupabase(context),
         checkMcp(context),
         scanApiRoutes(context),
         scanDeployConfig(context),
@@ -35,15 +40,3 @@ export async function scanRepository(options) {
         ...actionsReport.findings
     ]), { stackInventory, fileCollection: context.fileCollection });
 }
-function createSkippedSupabaseReport(rootDir) {
-    return createReport("check-supabase", rootDir, [], {
-        riskyTables: [],
-        riskyPolicies: [],
-        manualAuthorizationTest: [],
-        doctor: {
-            staticChecks: [],
-            twoAccountVerificationSteps: [],
-            sqlCookbook: []
-        }
-    });
-}

package/dist/context.js

@@ -1,6 +1,9 @@
 import { collectTextFilesWithDiagnostics } from "./utils/files.js";
 export async function createScanContext(rootDir) {
     const collection = await collectTextFilesWithDiagnostics(rootDir);
+    if (collection.diagnostics.unreadableDirectories.includes(".")) {
+        throw new Error(`Could not read scan root: ${rootDir}`);
+    }
     const { files } = collection;
     const filesByPath = new Map(files.map((file) => [file.path, file]));
     return {

package/dist/hosted/contracts.js

@@ -477,7 +477,7 @@ export function createCompactHostedReport(input) {
 export function createHostedCheckRunSummary(input) {
     const { report } = input;
     const totalFindings = getHostedReportFindingTotal(report);
-    const localCliCommand = `npx ai-saas-guard@${report.scannerVersion} pr-risk --root . --base ${report.baseSha} --json`;
+    const localCliCommand = `npx ai-saas-guard@${safeHostedCliVersion(report.scannerVersion)} pr-risk --root . --base ${safeHostedBaseSha(report.baseSha)} --json`;
     const conclusion = resolveCheckRunConclusion(report, input.failOnSeverity);
     const launchGate = hostedLaunchGateVerdict(report);
     return {
@@ -486,7 +486,7 @@ export function createHostedCheckRunSummary(input) {
         output: {
             title: formatCheckRunTitle(totalFindings, conclusion, input.failOnSeverity),
             summary: [
-                `Launch-risk gate: ${launchGate}. Launch gate: ${launchGate}.`,
+                `Launch gate: ${launchGate}. ${totalFindings} finding${totalFindings === 1 ? "" : "s"}.`,
                 "Review task: inspect risk areas and files before merge.",
                 "Manual proof: prove changed auth, billing, data, deploy, or tests fail closed.",
                 "Boundary: selected repository only; not an AI reviewer, pentest, full audit, or certification."
@@ -1146,54 +1146,61 @@ function formatCheckRunMarkdown(report, conclusion, localCliCommand, launchGate)
     const filesToReview = getHostedCheckRunFiles(report);
     const findingLines = report.evidence.length === 0
         ? ["No findings in the compact hosted report."]
-        : [
-            "| Severity | Rule | Evidence |",
-            "| --- | --- | --- |",
-            ...report.evidence.map((finding) => `| ${escapeMarkdownTableCell(finding.severity)} | ${escapeMarkdownTableCell(finding.ruleId)} | ${escapeMarkdownTableCell(formatFindingLocation(finding))} |`)
-        ];
+        : report.evidence.flatMap((finding, index) => [
+            `${index + 1}. **${escapeHostedMarkdownInline(finding.severity.toUpperCase())}** ${hostedMarkdownCode(finding.ruleId)}`,
+            `   - Location: ${hostedMarkdownCode(formatFindingLocation(finding))}`
+        ]);
     return [
-        "### AI SaaS Guard Launch-risk gate",
+        "## AI SaaS Guard",
         "",
-        "Review task: inspect risk areas and files before merge.",
-        "Manual proof: prove changed auth, billing, data, deploy, or tests fail closed.",
-        "Boundary: selected repository only; not an AI reviewer, pentest, full audit, or certification.",
+        `**Launch gate:** ${escapeHostedMarkdownInline(launchGate)}`,
         "",
-        `Launch gate: ${launchGate}`,
-        `Conclusion: ${conclusion}`,
-        `Local CLI: \`${localCliCommand}\``,
-        `Retention: compact report ${report.retentionDays} days; no raw source, diffs, secrets, or customer payloads.`,
+        `**Conclusion:** ${escapeHostedMarkdownInline(conclusion)}`,
         "",
-        "Review categories:",
-        ...(categories.length === 0 ? ["- None"] : categories.map((category) => `- ${category}`)),
+        `**Review categories:** ${categories.length === 0 ? "None" : categories.map(hostedMarkdownCode).join(", ")}`,
         "",
-        "Verification steps:",
-        "- Inspect the listed files locally before release or merge.",
-        "- Reproduce locally with the CLI command above.",
-        "- Prove changed auth, billing, data, deploy, or tests fail closed.",
+        "> Review task: inspect the risk areas and files below before merge.",
+        "> Manual proof: prove changed auth, billing, data, deploy, or tests fail closed.",
         "",
-        "Risk areas:",
+        `**Reproduce locally:** ${hostedMarkdownCode(localCliCommand)}`,
+        "",
+        "**Scope:** Selected repository only. No raw source, diffs, secrets, installation tokens, or customer payloads are included.",
+        "",
+        "### Review First",
         ...(riskAreas.length === 0
-            ? ["- None"]
-            : riskAreas.map((area) => `- ${area.name}: ${area.count} finding(s). Proof: ${area.proof}`)),
+            ? ["No risk areas in the compact hosted report."]
+            : riskAreas.map((area, index) => `${index + 1}. **${escapeHostedMarkdownInline(area.name)}** - ${area.count} finding(s). ${escapeHostedMarkdownInline(area.proof)}`)),
+        "",
+        "### Files",
+        ...(filesToReview.length === 0
+            ? ["No files in the review queue."]
+            : filesToReview.map((file, index) => `${index + 1}. ${hostedMarkdownCode(file)}`)),
         "",
-        "Launch decision queue:",
+        "### Findings",
+        ...findingLines,
+        "",
+        "### Manual Proof",
+        "1. Inspect each listed file locally before release or merge.",
+        "2. Reproduce the result with the local CLI command below.",
+        "3. Prove changed auth, billing, data, deploy, or tests fail closed.",
+        "",
+        "### Launch Decision Queue",
         "- Can a real user get access they should not have?",
         "- Can the app claim success when something failed?",
         "- Can launch infrastructure do too much damage?",
         "",
-        "Summary:",
+        "### Scan Summary",
         ...severityOrder.map((severity) => `- ${capitalize(severity)}: ${report.summaryCounts[severity] ?? 0}`),
         "",
-        "Files to review first:",
-        ...(filesToReview.length === 0 ? ["- None"] : filesToReview.map((file) => `- ${file}`)),
-        "",
-        "Launch-boundary reviewer checklist:",
+        "### Reviewer Checklist",
         "- What changed at the launch boundary?",
         "- Why this auth billing data or deploy decision is safe?",
         "- What manual test proves it fails closed?",
         "",
-        "Findings:",
-        ...findingLines
+        "### Scope And Privacy",
+        "- Boundary: selected repository only; not an AI reviewer, pentest, full audit, or certification.",
+        `- Retention: compact report ${report.retentionDays} days.`,
+        "- No raw source, diffs, secrets, installation tokens, or customer payloads are included."
     ].join("\n");
 }
 function truncateMarkdown(markdown, maxMarkdownChars) {
@@ -1207,7 +1214,11 @@ function truncateMarkdown(markdown, maxMarkdownChars) {
     if (maxChars <= suffix.length) {
         return suffix.slice(0, maxChars);
     }
-    return `${markdown.slice(0, maxChars - suffix.length).trimEnd()}${suffix}`;
+    const availableChars = maxChars - suffix.length;
+    const candidate = markdown.slice(0, availableChars);
+    const lastLineBreak = candidate.lastIndexOf("\n");
+    const safePrefix = lastLineBreak > 0 ? candidate.slice(0, lastLineBreak) : candidate;
+    return `${safePrefix.trimEnd()}${suffix}`;
 }
 function severityRank(severity) {
     const normalized = severity.toLowerCase();
@@ -1312,8 +1323,29 @@ function categoryForRuleId(ruleId) {
 function getHostedCheckRunFiles(report) {
     return [...new Set(report.evidence.map((finding) => finding.file))].slice(0, 10);
 }
-function escapeMarkdownTableCell(value) {
-    return value.replaceAll("\\", "\\\\").replaceAll("|", "\\|").replaceAll("\r", " ").replaceAll("\n", " ");
+function escapeHostedMarkdownInline(value) {
+    return normalizeHostedMarkdownInline(value)
+        .replaceAll("&", "&amp;")
+        .replaceAll("<", "&lt;")
+        .replaceAll(">", "&gt;")
+        .replace(/([\\`*_[\]])/g, "\\$1")
+        .replaceAll("|", "\\|");
+}
+function hostedMarkdownCode(value) {
+    return `\`${normalizeHostedMarkdownInline(value).replaceAll("`", "'")}\``;
+}
+function normalizeHostedMarkdownInline(value) {
+    return value
+        .replace(/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f-\u009f]/g, "")
+        .replace(/[\r\n]+/g, " ")
+        .replace(/\s+/g, " ")
+        .trim();
+}
+function safeHostedCliVersion(value) {
+    return /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(value) ? value : "latest";
+}
+function safeHostedBaseSha(value) {
+    return /^[a-f0-9]{40}$/i.test(value) ? value : "<base-sha>";
 }
 function capitalize(value) {
     return `${value.charAt(0).toUpperCase()}${value.slice(1)}`;

package/dist/hosted/production-adapters.js

@@ -198,6 +198,8 @@ function safeGitHubApiBaseUrl(apiBaseUrl) {
             url.password ||
             url.search ||
             url.hash ||
+            url.port ||
+            url.hostname.toLowerCase() !== "api.github.com" ||
             !isRootPath(url.pathname) ||
             isUnsafeHostedHostname(url.hostname)) {
             return undefined;

package/dist/hosted/worker.js

@@ -462,10 +462,13 @@ function parseRepositoryFullName(value) {
     const match = /^([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)$/.exec(value);
     if (!match)
         return undefined;
-    return {
-        owner: match[1],
-        repo: match[2]
-    };
+    const owner = match[1];
+    const repo = match[2];
+    // Reject path-traversal segments: `.`/`..` in the clone URL path could
+    // resolve outside the intended repository location.
+    if (owner === "." || owner === ".." || repo === "." || repo === "..")
+        return undefined;
+    return { owner, repo };
 }
 function normalizeSafeCloneBaseUrl(value) {
     try {

package/dist/report/comment.js

@@ -1,4 +1,5 @@
 import { launchGateVerdict, nextSteps, reviewFirst, trustStatement } from "./launchGate.js";
+import { escapeMarkdownInline, formatScanCoverage, markdownCode } from "./presentation.js";
 /**
  * `--format comment` renders a compact PR-comment-ready markdown body.
  * It is optimized for `pr-risk` (paste into a PR review), but works for
@@ -9,14 +10,27 @@ export function formatCommentReport(report) {
         return `${formatPrRiskComment(report)}\n`;
     return `${formatGenericComment(report)}\n`;
 }
+function appendCoverageWarning(lines, report) {
+    const coverage = formatScanCoverage(report);
+    if (coverage) {
+        lines.push("");
+        lines.push(`**Coverage:** ${escapeMarkdownInline(coverage)}`);
+    }
+}
 function formatPrRiskComment(report) {
     const lines = [];
     lines.push("## \u{1F6E1}\uFE0F ai-saas-guard PR risk");
     lines.push("");
-    lines.push(`**Verdict:** ${escapeInline(launchGateVerdict(report))}`);
+    lines.push(`**Verdict:** ${escapeMarkdownInline(launchGateVerdict(report))}`);
+    appendCoverageWarning(lines, report);
+    const diffUnavailable = report.findings.filter((finding) => finding.ruleId === "pr-risk.diff-unavailable");
+    if (diffUnavailable.length > 0) {
+        lines.push("");
+        lines.push(`> \u26A0\uFE0F ${escapeMarkdownInline(diffUnavailable[0].title)}. ${escapeMarkdownInline(diffUnavailable[0].suggestedFix)}`);
+    }
     if (report.categories.length > 0) {
         lines.push("");
-        lines.push(`**This PR touches:** ${report.categories.map((category) => `\`${escapeInline(category)}\``).join(", ")}`);
+        lines.push(`**This PR touches:** ${report.categories.map((category) => markdownCode(category)).join(", ")}`);
     }
     const topFiles = report.topRiskyFiles.slice(0, 3);
     lines.push("");
@@ -28,7 +42,7 @@ function formatPrRiskComment(report) {
     else {
         lines.push("");
         for (const [index, file] of topFiles.entries()) {
-            lines.push(`${index + 1}. \`${escapeInline(file.path)}\` — ${file.categories.map((category) => `\`${escapeInline(category)}\``).join(", ")} (+${file.added}/-${file.removed})`);
+            lines.push(`${index + 1}. ${markdownCode(file.path)} — ${file.categories.map((category) => markdownCode(category)).join(", ")} (+${file.added}/-${file.removed})`);
         }
     }
     const verification = report.requiredTests.length > 0 ? report.requiredTests : report.reviewChecklist;
@@ -37,7 +51,7 @@ function formatPrRiskComment(report) {
         lines.push("### \u2705 Verify before merge");
         lines.push("");
         for (const item of verification.slice(0, 4)) {
-            lines.push(`- ${escapeInline(item)}`);
+            lines.push(`- ${escapeMarkdownInline(item)}`);
         }
     }
     const split = report.suggestedSplit.filter((item) => !/no split required/i.test(item));
@@ -46,36 +60,34 @@ function formatPrRiskComment(report) {
         lines.push("### \u2702\uFE0F Suggested split");
         lines.push("");
         for (const item of split.slice(0, 3)) {
-            lines.push(`- ${escapeInline(item)}`);
+            lines.push(`- ${escapeMarkdownInline(item)}`);
         }
     }
     lines.push("");
     lines.push("---");
-    lines.push(`<sub>Posted by \`ai-saas-guard pr-risk --format comment\`. ${trustStatement().map(escapeInline).join(" ")}</sub>`);
+    lines.push(`<sub>Posted by \`ai-saas-guard pr-risk --format comment\`. ${trustStatement().map(escapeMarkdownInline).join(" ")}</sub>`);
     return lines.join("\n");
 }
 function formatGenericComment(report) {
     const lines = [];
-    lines.push(`## \u{1F6E1}\uFE0F ai-saas-guard ${escapeInline(report.command)}`);
+    lines.push(`## \u{1F6E1}\uFE0F ai-saas-guard ${escapeMarkdownInline(report.command)}`);
     lines.push("");
-    lines.push(`**Verdict:** ${escapeInline(launchGateVerdict(report))}`);
+    lines.push(`**Verdict:** ${escapeMarkdownInline(launchGateVerdict(report))}`);
+    appendCoverageWarning(lines, report);
     lines.push("");
     lines.push("### Review first");
     lines.push("");
     for (const item of reviewFirst(report.findings, 3)) {
-        lines.push(`- ${escapeInline(item)}`);
+        lines.push(`- ${escapeMarkdownInline(item)}`);
     }
     lines.push("");
     lines.push("### Next");
     lines.push("");
     for (const item of nextSteps(report.findings).slice(0, 3)) {
-        lines.push(`- ${escapeInline(item)}`);
+        lines.push(`- ${escapeMarkdownInline(item)}`);
     }
     lines.push("");
     lines.push("---");
-    lines.push(`<sub>${trustStatement().map(escapeInline).join(" ")}</sub>`);
+    lines.push(`<sub>${trustStatement().map(escapeMarkdownInline).join(" ")}</sub>`);
     return lines.join("\n");
 }
-function escapeInline(value) {
-    return value.replace(/\r?\n/g, " ").replaceAll("|", "\\|").trim();
-}

package/dist/report/findings.d.ts

@@ -1,6 +1,6 @@
 import type { BaseReport, CommandName, Finding, Summary } from "../types.js";
 export declare function summarizeFindings(findings: Finding[]): Summary;
-export declare function createReport<T extends BaseReport>(command: CommandName, rootDir: string, findings: Finding[], extra: Omit<T, keyof BaseReport | "command">): T;
+export declare function createReport<T extends BaseReport>(command: CommandName, rootDir: string, findings: Finding[], extra: Omit<T, keyof BaseReport | "command"> & Partial<Pick<BaseReport, "stackInventory" | "fileCollection">>): T;
 export declare function sortFindings(findings: Finding[]): Finding[];
 export declare function finding(input: Finding): Finding;
 export declare function uniqueFindings(findings: Finding[]): Finding[];

package/dist/report/findings.js

@@ -28,7 +28,19 @@ export function sortFindings(findings) {
         const severityDelta = severities.indexOf(a.severity) - severities.indexOf(b.severity);
         if (severityDelta !== 0)
             return severityDelta;
-        return a.ruleId.localeCompare(b.ruleId);
+        const ruleDelta = compareText(a.ruleId, b.ruleId);
+        if (ruleDelta !== 0)
+            return ruleDelta;
+        const fileDelta = compareText(a.evidence[0]?.file ?? "", b.evidence[0]?.file ?? "");
+        if (fileDelta !== 0)
+            return fileDelta;
+        const lineDelta = (a.evidence[0]?.line ?? 0) - (b.evidence[0]?.line ?? 0);
+        if (lineDelta !== 0)
+            return lineDelta;
+        const columnDelta = (a.evidence[0]?.column ?? 0) - (b.evidence[0]?.column ?? 0);
+        if (columnDelta !== 0)
+            return columnDelta;
+        return compareText(a.title, b.title);
     });
 }
 export function finding(input) {
@@ -47,3 +59,6 @@ export function uniqueFindings(findings) {
     }
     return result;
 }
+function compareText(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}

package/dist/report/launchGate.js

@@ -1,15 +1,20 @@
+import { hasIncompleteScanCoverage } from "./presentation.js";
 export function launchGateVerdict(report) {
+    const coverageNote = hasIncompleteScanCoverage(report) ? "; scan coverage is incomplete" : "";
     if (report.summary.critical > 0) {
-        return "blocked: critical launch-readiness findings need review before inviting users";
+        return `blocked: critical launch-readiness findings need review before inviting users${coverageNote}`;
     }
     if (report.summary.high > 0) {
-        return "review required: high-risk launch paths need manual verification before launch";
+        return `review required: high-risk launch paths need manual verification before launch${coverageNote}`;
     }
     if (report.summary.medium > 0) {
-        return "check before launch: medium-risk findings should be verified by an owner";
+        return `check before launch: medium-risk findings should be verified by an owner${coverageNote}`;
     }
     if (report.summary.low > 0 || report.summary.info > 0) {
-        return "low-noise review: confirm these hints against the launch checklist";
+        return `low-noise review: confirm these hints against the launch checklist${coverageNote}`;
+    }
+    if (hasIncompleteScanCoverage(report)) {
+        return "incomplete: scan coverage was limited; no clear launch verdict is available";
     }
     return "clear from current heuristics: no findings from this command, not a certification";
 }