fix: preserve artifact writer failures

scripts/contracts/release-artifacts.ts

@@ -45,9 +45,9 @@ export const dependencyInventoryArtifactSchema = z
     schemaVersion: z.literal(2),
     packageManager: nonEmptyString,
     lockfileSha256: sha256,
-    dependencyCount: z.int().nonnegative(),
-    directDependencyCount: z.int().nonnegative(),
-    dependencies: z.array(dependencyInventoryRowSchema),
+    dependencyCount: z.int().positive(),
+    directDependencyCount: z.int().positive(),
+    dependencies: z.array(dependencyInventoryRowSchema).min(1),
   })
   .strict()
   .superRefine((inventory, context) => {
@@ -128,7 +128,7 @@ const registryArtifactRowSchema = z
   })
   .strict();
 
-export const registrySnapshotArtifactSchema = z
+const registrySnapshotBaseArtifactSchema = z
   .object({
     schemaVersion: z.literal(2),
     generatedAt: timestamp,
@@ -146,11 +146,34 @@ export const registrySnapshotArtifactSchema = z
         changes: z.array(registryChangeSchema),
       })
       .strict(),
-    failures: z.array(z.string()),
-    registries: z.array(registryArtifactRowSchema),
   })
   .strict();
 
+const successfulRegistrySnapshotArtifactSchema =
+  registrySnapshotBaseArtifactSchema.extend({
+    failures: z.array(z.string()).max(0),
+    registries: z.array(registryArtifactRowSchema).length(11),
+  });
+
+const failedRegistrySnapshotArtifactSchema =
+  registrySnapshotBaseArtifactSchema.extend({
+    failures: z.array(z.string()).min(1),
+    registries: z.array(registryArtifactRowSchema),
+  });
+
+export const registrySnapshotArtifactSchema = z.union([
+  successfulRegistrySnapshotArtifactSchema,
+  failedRegistrySnapshotArtifactSchema,
+]);
+
+export const registryGovernanceRunArtifactSchema = z.union([
+  registrySnapshotBaseArtifactSchema.extend({
+    failures: z.array(z.string()).max(0),
+    registries: z.array(registryArtifactRowSchema).min(1),
+  }),
+  failedRegistrySnapshotArtifactSchema,
+]);
+
 const outputDigestSchema = z
   .object({
     path: nonEmptyString,