agent-contracts 0.19.3 → 0.19.5

package/dist/index.d.ts

@@ -1757,7 +1757,7 @@ declare function buildAuditContext(auditType: AuditType, dsl: Dsl, config: Resol
 
 declare function formatAuditResult(r: AuditRunResult, format: OutputFormat): string;
 declare function formatAuditResults(results: AuditRunResult[], format: OutputFormat): string;
-declare function computeExitCode(results: AuditRunResult[]): number;
+declare function computeExitCode(results: AuditRunResult[], failOn?: string): number;
 
 interface ResolvedCheck {
     guardrail_id: string;

package/dist/index.js

@@ -49347,18 +49347,27 @@ async function resolveRefsDeep(data, baseDir, resolving, rootDoc) {
       }
       resolving.add(refValue);
       const target = resolveJsonPointer(rootDoc, refValue);
-      const resolved2 = await resolveRefsDeep(
+      const resolved = await resolveRefsDeep(
         deepClone(target),
         baseDir,
         resolving,
         rootDoc
       );
       resolving.delete(refValue);
-      return resolved2;
+      return resolved;
     }
-    const refTarget = resolve(baseDir, refValue);
+    const hashIdx = refValue.indexOf("#");
+    const filePart = hashIdx >= 0 ? refValue.slice(0, hashIdx) : refValue;
+    const fragment = hashIdx >= 0 ? refValue.slice(hashIdx) : null;
+    const refTarget = resolve(baseDir, filePart);
     const s2 = await fsStat(refTarget).catch(() => null);
     if (s2?.isDirectory()) {
+      if (fragment) {
+        throw new DslLoadError(
+          `Cannot use JSON Pointer fragment with directory $ref: ${refValue}`,
+          refTarget
+        );
+      }
       if (resolving.has(refTarget)) {
         throw new DslLoadError(
           `Circular $ref detected: ${refTarget}`,
@@ -49381,14 +49390,24 @@ async function resolveRefsDeep(data, baseDir, resolving, rootDoc) {
     }
     resolving.add(refTarget);
     const content = await readYaml(refTarget);
-    const resolved = await resolveRefsDeep(
+    const fileRoot = fragment ? content : rootDoc;
+    let fileData = await resolveRefsDeep(
       content,
       dirname(refTarget),
       resolving,
-      rootDoc
+      fileRoot
     );
     resolving.delete(refTarget);
-    return resolved;
+    if (fragment && fragment.startsWith("#/")) {
+      if (!isRecord(fileData)) {
+        throw new DslLoadError(
+          `Cannot resolve fragment "${fragment}" in ${refTarget}: file content is not an object`,
+          refTarget
+        );
+      }
+      fileData = resolveJsonPointer(fileData, fragment);
+    }
+    return fileData;
   }
   let obj = data;
   if (hasRefs(obj)) {
@@ -55080,16 +55099,22 @@ function formatAuditResults(results, format2) {
   }
   return results.map((r3) => formatAuditResult(r3, format2)).join("\n\n");
 }
-function computeExitCode(results) {
+function computeExitCode(results, failOn) {
   for (const r3 of results) {
     if (r3.status === "error") {
-      if (r3.errorMessage?.includes("not installed") || r3.errorMessage?.includes("adapter")) return 3;
-      return 2;
+      if (r3.errorMessage?.includes("not installed")) return 11;
+      if (r3.errorMessage?.includes("adapter") || r3.errorMessage?.includes("API")) return 12;
+      return 1;
     }
   }
+  const severityRank = { info: 0, warning: 1, error: 2, critical: 3 };
+  const threshold = severityRank[failOn ?? "critical"] ?? 3;
   for (const r3 of results) {
-    if (r3.data?.critical_gaps && r3.data.critical_gaps.some((g2) => g2.severity === "critical")) {
-      return 1;
+    if (r3.data?.critical_gaps) {
+      for (const gap of r3.data.critical_gaps) {
+        const rank = severityRank[gap.severity ?? ""] ?? 0;
+        if (rank >= threshold) return 10;
+      }
     }
   }
   return 0;