@riddledc/riddle-proof 0.7.44 → 0.7.46

package/README.md

@@ -223,6 +223,14 @@ cycle instead of reusing the final response, for example to repeat a fail-then-
 success pair across multiple viewports. Repeated sequences also record
 `sequence_cycle: true` after the first cycle.
 
+Set `capture_request_body: true` to include compact request-body evidence on
+mock hits. Add `request_body_contains` / `request_body_patterns` or
+`request_body_not_contains` / `request_body_not_patterns` when the request body
+is part of the contract, such as proving that a save request references the
+current build ID returned by a prior mocked build response and not a stale one.
+Body assertions use the full request body for matching and store only length
+plus a compact sample in the proof evidence.
+
 `target.setup_actions` is optional. Use it when the meaningful proof surface
 appears only after a picker, tab, login stub, storage seed, form fill,
 transport control, or other bounded interaction. Supported setup actions are

package/dist/{chunk-G673RKAC.js → chunk-WSZ5AVKX.js}

@@ -253,6 +253,24 @@ function normalizeNetworkMock(input, index) {
   const payload = normalizeNetworkMockResponsePayload(input, `target.network_mocks[${index}]`);
   const responsesInput = input.responses ?? input.sequence;
   const responses = normalizeNetworkMockResponses(responsesInput, index, payload);
+  const requestBodyContains = normalizeStringList(
+    input.request_body_contains ?? input.requestBodyContains ?? input.body_contains ?? input.bodyContains,
+    `target.network_mocks[${index}].request_body_contains`
+  );
+  const requestBodyPatterns = normalizeStringList(
+    input.request_body_patterns ?? input.requestBodyPatterns ?? input.body_patterns ?? input.bodyPatterns,
+    `target.network_mocks[${index}].request_body_patterns`
+  );
+  validateRegexPatterns(requestBodyPatterns, `target.network_mocks[${index}].request_body_patterns`);
+  const requestBodyNotContains = normalizeStringList(
+    input.request_body_not_contains ?? input.requestBodyNotContains ?? input.request_body_absent ?? input.requestBodyAbsent ?? input.body_not_contains ?? input.bodyNotContains ?? input.body_absent ?? input.bodyAbsent,
+    `target.network_mocks[${index}].request_body_not_contains`
+  );
+  const requestBodyNotPatterns = normalizeStringList(
+    input.request_body_not_patterns ?? input.requestBodyNotPatterns ?? input.request_body_forbidden_patterns ?? input.requestBodyForbiddenPatterns ?? input.body_not_patterns ?? input.bodyNotPatterns ?? input.body_forbidden_patterns ?? input.bodyForbiddenPatterns,
+    `target.network_mocks[${index}].request_body_not_patterns`
+  );
+  validateRegexPatterns(requestBodyNotPatterns, `target.network_mocks[${index}].request_body_not_patterns`);
   const requiredHitCount = numberValue(
     input.required_hit_count ?? input.requiredHitCount ?? input.required_hits ?? input.requiredHits ?? input.min_hits ?? input.minHits
   );
@@ -267,7 +285,12 @@ function normalizeNetworkMock(input, index) {
     responses,
     repeat_responses: input.repeat_responses === true || input.repeatResponses === true || input.cycle_responses === true || input.cycleResponses === true,
     required_hit_count: requiredHitCount,
-    required: input.required === false ? false : true
+    required: input.required === false ? false : true,
+    capture_request_body: input.capture_request_body === true || input.captureRequestBody === true || Boolean(requestBodyContains?.length) || Boolean(requestBodyPatterns?.length) || Boolean(requestBodyNotContains?.length) || Boolean(requestBodyNotPatterns?.length),
+    request_body_contains: requestBodyContains,
+    request_body_patterns: requestBodyPatterns,
+    request_body_not_contains: requestBodyNotContains,
+    request_body_not_patterns: requestBodyNotPatterns
   };
 }
 function normalizeNetworkMockResponsePayload(input, label, defaults = {}) {
@@ -350,6 +373,16 @@ function normalizeStringList(value, label) {
   if (!values.length) throw new Error(`${label} must contain non-empty strings.`);
   return values;
 }
+function validateRegexPatterns(patterns, label) {
+  for (const pattern of patterns || []) {
+    try {
+      new RegExp(pattern);
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      throw new Error(`${label} contains invalid regex ${JSON.stringify(pattern)}: ${message}`);
+    }
+  }
+}
 function normalizeCheck(input, index) {
   if (!isRecord(input)) throw new Error(`checks[${index}] must be an object.`);
   const type = stringValue(input.type);
@@ -1020,6 +1053,17 @@ function assessNetworkMocksFromEvidence(profile, evidence) {
         reason: event.reason ?? event.error ?? "mock_failed"
       });
     }
+    if (event.request_body_matches === false) {
+      failed.push({
+        label: event.label ?? null,
+        url: event.url ?? null,
+        method: event.method ?? null,
+        reason: "request_body_mismatch",
+        request_body_failures: event.request_body_failures ?? [],
+        request_body_length: event.request_body_length ?? null,
+        request_body_sample: event.request_body_sample ?? null
+      });
+    }
   }
   return {
     type: "network_mocks_succeeded",
@@ -1392,6 +1436,17 @@ function assessProfile(profile, evidence) {
           reason: event.reason || event.error || "mock_failed",
         });
       }
+      if (event && event.request_body_matches === false) {
+        failed.push({
+          label: event.label || null,
+          url: event.url || null,
+          method: event.method || null,
+          reason: "request_body_mismatch",
+          request_body_failures: event.request_body_failures || [],
+          request_body_length: event.request_body_length || null,
+          request_body_sample: event.request_body_sample || null,
+        });
+      }
     }
     const hitsByLabel = {};
     const requiredHitsByLabel = {};
@@ -1840,6 +1895,79 @@ function compactSetupResultText(value) {
   if (text.length <= 500) return text;
   return text.slice(0, 500) + "... (" + text.length + " chars)";
 }
+function compactNetworkMockRequestBody(value) {
+  const text = String(value || "").replace(/\s+/g, " ").trim();
+  if (text.length <= 1000) return text;
+  return text.slice(0, 1000) + "... (" + text.length + " chars)";
+}
+function networkMockStringList(value) {
+  return Array.isArray(value) ? value.map((item) => String(item)).filter(Boolean) : [];
+}
+function networkMockShouldCaptureRequestBody(mock) {
+  return mock && (
+    mock.capture_request_body === true
+    || networkMockStringList(mock.request_body_contains).length > 0
+    || networkMockStringList(mock.request_body_patterns).length > 0
+    || networkMockStringList(mock.request_body_not_contains).length > 0
+    || networkMockStringList(mock.request_body_not_patterns).length > 0
+  );
+}
+function networkMockRequestBodyFailures(body, mock) {
+  const failures = [];
+  const rawBody = String(body || "");
+  const compactBody = compactNetworkMockRequestBody(rawBody);
+  for (const expected of networkMockStringList(mock.request_body_contains)) {
+    if (!rawBody.includes(expected) && !compactBody.includes(expected)) {
+      failures.push({
+        type: "request_body_missing_text",
+        text: String(expected).slice(0, 200),
+      });
+    }
+  }
+  for (const pattern of networkMockStringList(mock.request_body_patterns)) {
+    try {
+      const regex = new RegExp(pattern);
+      if (!regex.test(rawBody) && !regex.test(compactBody)) {
+        failures.push({
+          type: "request_body_pattern_not_matched",
+          pattern: String(pattern).slice(0, 200),
+        });
+      }
+    } catch (error) {
+      failures.push({
+        type: "request_body_invalid_pattern",
+        pattern: String(pattern).slice(0, 200),
+        error: String(error && error.message ? error.message : error).slice(0, 500),
+      });
+    }
+  }
+  for (const forbidden of networkMockStringList(mock.request_body_not_contains)) {
+    if (rawBody.includes(forbidden) || compactBody.includes(forbidden)) {
+      failures.push({
+        type: "request_body_forbidden_text",
+        text: String(forbidden).slice(0, 200),
+      });
+    }
+  }
+  for (const pattern of networkMockStringList(mock.request_body_not_patterns)) {
+    try {
+      const regex = new RegExp(pattern);
+      if (regex.test(rawBody) || regex.test(compactBody)) {
+        failures.push({
+          type: "request_body_forbidden_pattern_matched",
+          pattern: String(pattern).slice(0, 200),
+        });
+      }
+    } catch (error) {
+      failures.push({
+        type: "request_body_invalid_pattern",
+        pattern: String(pattern).slice(0, 200),
+        error: String(error && error.message ? error.message : error).slice(0, 500),
+      });
+    }
+  }
+  return failures;
+}
 async function setupLocatorVisible(locator, index) {
   return await locator.nth(index).isVisible({ timeout: 1000 }).catch(() => false);
 }
@@ -1868,7 +1996,11 @@ async function registerNetworkMocks(mocks) {
           body = JSON.stringify(response.body_json);
           contentType = response.content_type || headers["content-type"] || headers["Content-Type"] || "application/json";
         }
-        networkMockEvents.push({
+        const shouldCaptureRequestBody = networkMockShouldCaptureRequestBody(mock);
+        const requestBody = shouldCaptureRequestBody && request.postData ? request.postData() || "" : "";
+        const requestBodyFailures = shouldCaptureRequestBody ? networkMockRequestBodyFailures(requestBody, mock) : [];
+        const status = response.status || mock.status || 200;
+        const event = {
           ok: true,
           label: mock.label,
           response_label: response.label || null,
@@ -1878,10 +2010,17 @@ async function registerNetworkMocks(mocks) {
           sequence_cycle: responseIndex !== null && mock.repeat_responses === true && hitIndex >= responses.length,
           url: request.url(),
           method,
-          status: response.status || mock.status || 200,
-        });
+          status,
+        };
+        if (shouldCaptureRequestBody) {
+          event.request_body_matches = requestBodyFailures.length === 0;
+          event.request_body_failures = requestBodyFailures;
+          event.request_body_length = requestBody.length;
+          event.request_body_sample = compactNetworkMockRequestBody(requestBody);
+        }
+        networkMockEvents.push(event);
         await route.fulfill({
-          status: response.status || mock.status || 200,
+          status,
           headers,
           contentType,
           body,

package/dist/cli.cjs

@@ -7126,6 +7126,24 @@ function normalizeNetworkMock(input, index) {
   const payload = normalizeNetworkMockResponsePayload(input, `target.network_mocks[${index}]`);
   const responsesInput = input.responses ?? input.sequence;
   const responses = normalizeNetworkMockResponses(responsesInput, index, payload);
+  const requestBodyContains = normalizeStringList(
+    input.request_body_contains ?? input.requestBodyContains ?? input.body_contains ?? input.bodyContains,
+    `target.network_mocks[${index}].request_body_contains`
+  );
+  const requestBodyPatterns = normalizeStringList(
+    input.request_body_patterns ?? input.requestBodyPatterns ?? input.body_patterns ?? input.bodyPatterns,
+    `target.network_mocks[${index}].request_body_patterns`
+  );
+  validateRegexPatterns(requestBodyPatterns, `target.network_mocks[${index}].request_body_patterns`);
+  const requestBodyNotContains = normalizeStringList(
+    input.request_body_not_contains ?? input.requestBodyNotContains ?? input.request_body_absent ?? input.requestBodyAbsent ?? input.body_not_contains ?? input.bodyNotContains ?? input.body_absent ?? input.bodyAbsent,
+    `target.network_mocks[${index}].request_body_not_contains`
+  );
+  const requestBodyNotPatterns = normalizeStringList(
+    input.request_body_not_patterns ?? input.requestBodyNotPatterns ?? input.request_body_forbidden_patterns ?? input.requestBodyForbiddenPatterns ?? input.body_not_patterns ?? input.bodyNotPatterns ?? input.body_forbidden_patterns ?? input.bodyForbiddenPatterns,
+    `target.network_mocks[${index}].request_body_not_patterns`
+  );
+  validateRegexPatterns(requestBodyNotPatterns, `target.network_mocks[${index}].request_body_not_patterns`);
   const requiredHitCount = numberValue(
     input.required_hit_count ?? input.requiredHitCount ?? input.required_hits ?? input.requiredHits ?? input.min_hits ?? input.minHits
   );
@@ -7140,7 +7158,12 @@ function normalizeNetworkMock(input, index) {
     responses,
     repeat_responses: input.repeat_responses === true || input.repeatResponses === true || input.cycle_responses === true || input.cycleResponses === true,
     required_hit_count: requiredHitCount,
-    required: input.required === false ? false : true
+    required: input.required === false ? false : true,
+    capture_request_body: input.capture_request_body === true || input.captureRequestBody === true || Boolean(requestBodyContains?.length) || Boolean(requestBodyPatterns?.length) || Boolean(requestBodyNotContains?.length) || Boolean(requestBodyNotPatterns?.length),
+    request_body_contains: requestBodyContains,
+    request_body_patterns: requestBodyPatterns,
+    request_body_not_contains: requestBodyNotContains,
+    request_body_not_patterns: requestBodyNotPatterns
   };
 }
 function normalizeNetworkMockResponsePayload(input, label, defaults = {}) {
@@ -7223,6 +7246,16 @@ function normalizeStringList(value, label) {
   if (!values.length) throw new Error(`${label} must contain non-empty strings.`);
   return values;
 }
+function validateRegexPatterns(patterns, label) {
+  for (const pattern of patterns || []) {
+    try {
+      new RegExp(pattern);
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      throw new Error(`${label} contains invalid regex ${JSON.stringify(pattern)}: ${message}`);
+    }
+  }
+}
 function normalizeCheck(input, index) {
   if (!isRecord(input)) throw new Error(`checks[${index}] must be an object.`);
   const type = stringValue2(input.type);
@@ -7893,6 +7926,17 @@ function assessNetworkMocksFromEvidence(profile, evidence) {
         reason: event.reason ?? event.error ?? "mock_failed"
       });
     }
+    if (event.request_body_matches === false) {
+      failed.push({
+        label: event.label ?? null,
+        url: event.url ?? null,
+        method: event.method ?? null,
+        reason: "request_body_mismatch",
+        request_body_failures: event.request_body_failures ?? [],
+        request_body_length: event.request_body_length ?? null,
+        request_body_sample: event.request_body_sample ?? null
+      });
+    }
   }
   return {
     type: "network_mocks_succeeded",
@@ -8249,6 +8293,17 @@ function assessProfile(profile, evidence) {
           reason: event.reason || event.error || "mock_failed",
         });
       }
+      if (event && event.request_body_matches === false) {
+        failed.push({
+          label: event.label || null,
+          url: event.url || null,
+          method: event.method || null,
+          reason: "request_body_mismatch",
+          request_body_failures: event.request_body_failures || [],
+          request_body_length: event.request_body_length || null,
+          request_body_sample: event.request_body_sample || null,
+        });
+      }
     }
     const hitsByLabel = {};
     const requiredHitsByLabel = {};
@@ -8697,6 +8752,79 @@ function compactSetupResultText(value) {
   if (text.length <= 500) return text;
   return text.slice(0, 500) + "... (" + text.length + " chars)";
 }
+function compactNetworkMockRequestBody(value) {
+  const text = String(value || "").replace(/\s+/g, " ").trim();
+  if (text.length <= 1000) return text;
+  return text.slice(0, 1000) + "... (" + text.length + " chars)";
+}
+function networkMockStringList(value) {
+  return Array.isArray(value) ? value.map((item) => String(item)).filter(Boolean) : [];
+}
+function networkMockShouldCaptureRequestBody(mock) {
+  return mock && (
+    mock.capture_request_body === true
+    || networkMockStringList(mock.request_body_contains).length > 0
+    || networkMockStringList(mock.request_body_patterns).length > 0
+    || networkMockStringList(mock.request_body_not_contains).length > 0
+    || networkMockStringList(mock.request_body_not_patterns).length > 0
+  );
+}
+function networkMockRequestBodyFailures(body, mock) {
+  const failures = [];
+  const rawBody = String(body || "");
+  const compactBody = compactNetworkMockRequestBody(rawBody);
+  for (const expected of networkMockStringList(mock.request_body_contains)) {
+    if (!rawBody.includes(expected) && !compactBody.includes(expected)) {
+      failures.push({
+        type: "request_body_missing_text",
+        text: String(expected).slice(0, 200),
+      });
+    }
+  }
+  for (const pattern of networkMockStringList(mock.request_body_patterns)) {
+    try {
+      const regex = new RegExp(pattern);
+      if (!regex.test(rawBody) && !regex.test(compactBody)) {
+        failures.push({
+          type: "request_body_pattern_not_matched",
+          pattern: String(pattern).slice(0, 200),
+        });
+      }
+    } catch (error) {
+      failures.push({
+        type: "request_body_invalid_pattern",
+        pattern: String(pattern).slice(0, 200),
+        error: String(error && error.message ? error.message : error).slice(0, 500),
+      });
+    }
+  }
+  for (const forbidden of networkMockStringList(mock.request_body_not_contains)) {
+    if (rawBody.includes(forbidden) || compactBody.includes(forbidden)) {
+      failures.push({
+        type: "request_body_forbidden_text",
+        text: String(forbidden).slice(0, 200),
+      });
+    }
+  }
+  for (const pattern of networkMockStringList(mock.request_body_not_patterns)) {
+    try {
+      const regex = new RegExp(pattern);
+      if (regex.test(rawBody) || regex.test(compactBody)) {
+        failures.push({
+          type: "request_body_forbidden_pattern_matched",
+          pattern: String(pattern).slice(0, 200),
+        });
+      }
+    } catch (error) {
+      failures.push({
+        type: "request_body_invalid_pattern",
+        pattern: String(pattern).slice(0, 200),
+        error: String(error && error.message ? error.message : error).slice(0, 500),
+      });
+    }
+  }
+  return failures;
+}
 async function setupLocatorVisible(locator, index) {
   return await locator.nth(index).isVisible({ timeout: 1000 }).catch(() => false);
 }
@@ -8725,7 +8853,11 @@ async function registerNetworkMocks(mocks) {
           body = JSON.stringify(response.body_json);
           contentType = response.content_type || headers["content-type"] || headers["Content-Type"] || "application/json";
         }
-        networkMockEvents.push({
+        const shouldCaptureRequestBody = networkMockShouldCaptureRequestBody(mock);
+        const requestBody = shouldCaptureRequestBody && request.postData ? request.postData() || "" : "";
+        const requestBodyFailures = shouldCaptureRequestBody ? networkMockRequestBodyFailures(requestBody, mock) : [];
+        const status = response.status || mock.status || 200;
+        const event = {
           ok: true,
           label: mock.label,
           response_label: response.label || null,
@@ -8735,10 +8867,17 @@ async function registerNetworkMocks(mocks) {
           sequence_cycle: responseIndex !== null && mock.repeat_responses === true && hitIndex >= responses.length,
           url: request.url(),
           method,
-          status: response.status || mock.status || 200,
-        });
+          status,
+        };
+        if (shouldCaptureRequestBody) {
+          event.request_body_matches = requestBodyFailures.length === 0;
+          event.request_body_failures = requestBodyFailures;
+          event.request_body_length = requestBody.length;
+          event.request_body_sample = compactNetworkMockRequestBody(requestBody);
+        }
+        networkMockEvents.push(event);
         await route.fulfill({
-          status: response.status || mock.status || 200,
+          status,
           headers,
           contentType,
           body,

package/dist/cli.js

@@ -10,7 +10,7 @@ import {
   profileStatusExitCode,
   resolveRiddleProofProfileTargetUrl,
   resolveRiddleProofProfileTimeoutSec
-} from "./chunk-G673RKAC.js";
+} from "./chunk-WSZ5AVKX.js";
 import {
   createRiddleApiClient,
   parseRiddleViewport

package/dist/index.cjs

@@ -8967,6 +8967,24 @@ function normalizeNetworkMock(input, index) {
   const payload = normalizeNetworkMockResponsePayload(input, `target.network_mocks[${index}]`);
   const responsesInput = input.responses ?? input.sequence;
   const responses = normalizeNetworkMockResponses(responsesInput, index, payload);
+  const requestBodyContains = normalizeStringList(
+    input.request_body_contains ?? input.requestBodyContains ?? input.body_contains ?? input.bodyContains,
+    `target.network_mocks[${index}].request_body_contains`
+  );
+  const requestBodyPatterns = normalizeStringList(
+    input.request_body_patterns ?? input.requestBodyPatterns ?? input.body_patterns ?? input.bodyPatterns,
+    `target.network_mocks[${index}].request_body_patterns`
+  );
+  validateRegexPatterns(requestBodyPatterns, `target.network_mocks[${index}].request_body_patterns`);
+  const requestBodyNotContains = normalizeStringList(
+    input.request_body_not_contains ?? input.requestBodyNotContains ?? input.request_body_absent ?? input.requestBodyAbsent ?? input.body_not_contains ?? input.bodyNotContains ?? input.body_absent ?? input.bodyAbsent,
+    `target.network_mocks[${index}].request_body_not_contains`
+  );
+  const requestBodyNotPatterns = normalizeStringList(
+    input.request_body_not_patterns ?? input.requestBodyNotPatterns ?? input.request_body_forbidden_patterns ?? input.requestBodyForbiddenPatterns ?? input.body_not_patterns ?? input.bodyNotPatterns ?? input.body_forbidden_patterns ?? input.bodyForbiddenPatterns,
+    `target.network_mocks[${index}].request_body_not_patterns`
+  );
+  validateRegexPatterns(requestBodyNotPatterns, `target.network_mocks[${index}].request_body_not_patterns`);
   const requiredHitCount = numberValue3(
     input.required_hit_count ?? input.requiredHitCount ?? input.required_hits ?? input.requiredHits ?? input.min_hits ?? input.minHits
   );
@@ -8981,7 +8999,12 @@ function normalizeNetworkMock(input, index) {
     responses,
     repeat_responses: input.repeat_responses === true || input.repeatResponses === true || input.cycle_responses === true || input.cycleResponses === true,
     required_hit_count: requiredHitCount,
-    required: input.required === false ? false : true
+    required: input.required === false ? false : true,
+    capture_request_body: input.capture_request_body === true || input.captureRequestBody === true || Boolean(requestBodyContains?.length) || Boolean(requestBodyPatterns?.length) || Boolean(requestBodyNotContains?.length) || Boolean(requestBodyNotPatterns?.length),
+    request_body_contains: requestBodyContains,
+    request_body_patterns: requestBodyPatterns,
+    request_body_not_contains: requestBodyNotContains,
+    request_body_not_patterns: requestBodyNotPatterns
   };
 }
 function normalizeNetworkMockResponsePayload(input, label, defaults = {}) {
@@ -9064,6 +9087,16 @@ function normalizeStringList(value, label) {
   if (!values.length) throw new Error(`${label} must contain non-empty strings.`);
   return values;
 }
+function validateRegexPatterns(patterns, label) {
+  for (const pattern of patterns || []) {
+    try {
+      new RegExp(pattern);
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      throw new Error(`${label} contains invalid regex ${JSON.stringify(pattern)}: ${message}`);
+    }
+  }
+}
 function normalizeCheck(input, index) {
   if (!isRecord2(input)) throw new Error(`checks[${index}] must be an object.`);
   const type = stringValue5(input.type);
@@ -9734,6 +9767,17 @@ function assessNetworkMocksFromEvidence(profile, evidence) {
         reason: event.reason ?? event.error ?? "mock_failed"
       });
     }
+    if (event.request_body_matches === false) {
+      failed.push({
+        label: event.label ?? null,
+        url: event.url ?? null,
+        method: event.method ?? null,
+        reason: "request_body_mismatch",
+        request_body_failures: event.request_body_failures ?? [],
+        request_body_length: event.request_body_length ?? null,
+        request_body_sample: event.request_body_sample ?? null
+      });
+    }
   }
   return {
     type: "network_mocks_succeeded",
@@ -10106,6 +10150,17 @@ function assessProfile(profile, evidence) {
           reason: event.reason || event.error || "mock_failed",
         });
       }
+      if (event && event.request_body_matches === false) {
+        failed.push({
+          label: event.label || null,
+          url: event.url || null,
+          method: event.method || null,
+          reason: "request_body_mismatch",
+          request_body_failures: event.request_body_failures || [],
+          request_body_length: event.request_body_length || null,
+          request_body_sample: event.request_body_sample || null,
+        });
+      }
     }
     const hitsByLabel = {};
     const requiredHitsByLabel = {};
@@ -10554,6 +10609,79 @@ function compactSetupResultText(value) {
   if (text.length <= 500) return text;
   return text.slice(0, 500) + "... (" + text.length + " chars)";
 }
+function compactNetworkMockRequestBody(value) {
+  const text = String(value || "").replace(/\s+/g, " ").trim();
+  if (text.length <= 1000) return text;
+  return text.slice(0, 1000) + "... (" + text.length + " chars)";
+}
+function networkMockStringList(value) {
+  return Array.isArray(value) ? value.map((item) => String(item)).filter(Boolean) : [];
+}
+function networkMockShouldCaptureRequestBody(mock) {
+  return mock && (
+    mock.capture_request_body === true
+    || networkMockStringList(mock.request_body_contains).length > 0
+    || networkMockStringList(mock.request_body_patterns).length > 0
+    || networkMockStringList(mock.request_body_not_contains).length > 0
+    || networkMockStringList(mock.request_body_not_patterns).length > 0
+  );
+}
+function networkMockRequestBodyFailures(body, mock) {
+  const failures = [];
+  const rawBody = String(body || "");
+  const compactBody = compactNetworkMockRequestBody(rawBody);
+  for (const expected of networkMockStringList(mock.request_body_contains)) {
+    if (!rawBody.includes(expected) && !compactBody.includes(expected)) {
+      failures.push({
+        type: "request_body_missing_text",
+        text: String(expected).slice(0, 200),
+      });
+    }
+  }
+  for (const pattern of networkMockStringList(mock.request_body_patterns)) {
+    try {
+      const regex = new RegExp(pattern);
+      if (!regex.test(rawBody) && !regex.test(compactBody)) {
+        failures.push({
+          type: "request_body_pattern_not_matched",
+          pattern: String(pattern).slice(0, 200),
+        });
+      }
+    } catch (error) {
+      failures.push({
+        type: "request_body_invalid_pattern",
+        pattern: String(pattern).slice(0, 200),
+        error: String(error && error.message ? error.message : error).slice(0, 500),
+      });
+    }
+  }
+  for (const forbidden of networkMockStringList(mock.request_body_not_contains)) {
+    if (rawBody.includes(forbidden) || compactBody.includes(forbidden)) {
+      failures.push({
+        type: "request_body_forbidden_text",
+        text: String(forbidden).slice(0, 200),
+      });
+    }
+  }
+  for (const pattern of networkMockStringList(mock.request_body_not_patterns)) {
+    try {
+      const regex = new RegExp(pattern);
+      if (regex.test(rawBody) || regex.test(compactBody)) {
+        failures.push({
+          type: "request_body_forbidden_pattern_matched",
+          pattern: String(pattern).slice(0, 200),
+        });
+      }
+    } catch (error) {
+      failures.push({
+        type: "request_body_invalid_pattern",
+        pattern: String(pattern).slice(0, 200),
+        error: String(error && error.message ? error.message : error).slice(0, 500),
+      });
+    }
+  }
+  return failures;
+}
 async function setupLocatorVisible(locator, index) {
   return await locator.nth(index).isVisible({ timeout: 1000 }).catch(() => false);
 }
@@ -10582,7 +10710,11 @@ async function registerNetworkMocks(mocks) {
           body = JSON.stringify(response.body_json);
           contentType = response.content_type || headers["content-type"] || headers["Content-Type"] || "application/json";
         }
-        networkMockEvents.push({
+        const shouldCaptureRequestBody = networkMockShouldCaptureRequestBody(mock);
+        const requestBody = shouldCaptureRequestBody && request.postData ? request.postData() || "" : "";
+        const requestBodyFailures = shouldCaptureRequestBody ? networkMockRequestBodyFailures(requestBody, mock) : [];
+        const status = response.status || mock.status || 200;
+        const event = {
           ok: true,
           label: mock.label,
           response_label: response.label || null,
@@ -10592,10 +10724,17 @@ async function registerNetworkMocks(mocks) {
           sequence_cycle: responseIndex !== null && mock.repeat_responses === true && hitIndex >= responses.length,
           url: request.url(),
           method,
-          status: response.status || mock.status || 200,
-        });
+          status,
+        };
+        if (shouldCaptureRequestBody) {
+          event.request_body_matches = requestBodyFailures.length === 0;
+          event.request_body_failures = requestBodyFailures;
+          event.request_body_length = requestBody.length;
+          event.request_body_sample = compactNetworkMockRequestBody(requestBody);
+        }
+        networkMockEvents.push(event);
         await route.fulfill({
-          status: response.status || mock.status || 200,
+          status,
           headers,
           contentType,
           body,

package/dist/index.js

@@ -58,7 +58,7 @@ import {
   resolveRiddleProofProfileTimeoutSec,
   slugifyRiddleProofProfileName,
   summarizeRiddleProofProfileResult
-} from "./chunk-G673RKAC.js";
+} from "./chunk-WSZ5AVKX.js";
 import {
   DEFAULT_RIDDLE_API_BASE_URL,
   DEFAULT_RIDDLE_API_KEY_FILE,

package/dist/profile.cjs

@@ -296,6 +296,24 @@ function normalizeNetworkMock(input, index) {
   const payload = normalizeNetworkMockResponsePayload(input, `target.network_mocks[${index}]`);
   const responsesInput = input.responses ?? input.sequence;
   const responses = normalizeNetworkMockResponses(responsesInput, index, payload);
+  const requestBodyContains = normalizeStringList(
+    input.request_body_contains ?? input.requestBodyContains ?? input.body_contains ?? input.bodyContains,
+    `target.network_mocks[${index}].request_body_contains`
+  );
+  const requestBodyPatterns = normalizeStringList(
+    input.request_body_patterns ?? input.requestBodyPatterns ?? input.body_patterns ?? input.bodyPatterns,
+    `target.network_mocks[${index}].request_body_patterns`
+  );
+  validateRegexPatterns(requestBodyPatterns, `target.network_mocks[${index}].request_body_patterns`);
+  const requestBodyNotContains = normalizeStringList(
+    input.request_body_not_contains ?? input.requestBodyNotContains ?? input.request_body_absent ?? input.requestBodyAbsent ?? input.body_not_contains ?? input.bodyNotContains ?? input.body_absent ?? input.bodyAbsent,
+    `target.network_mocks[${index}].request_body_not_contains`
+  );
+  const requestBodyNotPatterns = normalizeStringList(
+    input.request_body_not_patterns ?? input.requestBodyNotPatterns ?? input.request_body_forbidden_patterns ?? input.requestBodyForbiddenPatterns ?? input.body_not_patterns ?? input.bodyNotPatterns ?? input.body_forbidden_patterns ?? input.bodyForbiddenPatterns,
+    `target.network_mocks[${index}].request_body_not_patterns`
+  );
+  validateRegexPatterns(requestBodyNotPatterns, `target.network_mocks[${index}].request_body_not_patterns`);
   const requiredHitCount = numberValue(
     input.required_hit_count ?? input.requiredHitCount ?? input.required_hits ?? input.requiredHits ?? input.min_hits ?? input.minHits
   );
@@ -310,7 +328,12 @@ function normalizeNetworkMock(input, index) {
     responses,
     repeat_responses: input.repeat_responses === true || input.repeatResponses === true || input.cycle_responses === true || input.cycleResponses === true,
     required_hit_count: requiredHitCount,
-    required: input.required === false ? false : true
+    required: input.required === false ? false : true,
+    capture_request_body: input.capture_request_body === true || input.captureRequestBody === true || Boolean(requestBodyContains?.length) || Boolean(requestBodyPatterns?.length) || Boolean(requestBodyNotContains?.length) || Boolean(requestBodyNotPatterns?.length),
+    request_body_contains: requestBodyContains,
+    request_body_patterns: requestBodyPatterns,
+    request_body_not_contains: requestBodyNotContains,
+    request_body_not_patterns: requestBodyNotPatterns
   };
 }
 function normalizeNetworkMockResponsePayload(input, label, defaults = {}) {
@@ -393,6 +416,16 @@ function normalizeStringList(value, label) {
   if (!values.length) throw new Error(`${label} must contain non-empty strings.`);
   return values;
 }
+function validateRegexPatterns(patterns, label) {
+  for (const pattern of patterns || []) {
+    try {
+      new RegExp(pattern);
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      throw new Error(`${label} contains invalid regex ${JSON.stringify(pattern)}: ${message}`);
+    }
+  }
+}
 function normalizeCheck(input, index) {
   if (!isRecord(input)) throw new Error(`checks[${index}] must be an object.`);
   const type = stringValue(input.type);
@@ -1063,6 +1096,17 @@ function assessNetworkMocksFromEvidence(profile, evidence) {
         reason: event.reason ?? event.error ?? "mock_failed"
       });
     }
+    if (event.request_body_matches === false) {
+      failed.push({
+        label: event.label ?? null,
+        url: event.url ?? null,
+        method: event.method ?? null,
+        reason: "request_body_mismatch",
+        request_body_failures: event.request_body_failures ?? [],
+        request_body_length: event.request_body_length ?? null,
+        request_body_sample: event.request_body_sample ?? null
+      });
+    }
   }
   return {
     type: "network_mocks_succeeded",
@@ -1435,6 +1479,17 @@ function assessProfile(profile, evidence) {
           reason: event.reason || event.error || "mock_failed",
         });
       }
+      if (event && event.request_body_matches === false) {
+        failed.push({
+          label: event.label || null,
+          url: event.url || null,
+          method: event.method || null,
+          reason: "request_body_mismatch",
+          request_body_failures: event.request_body_failures || [],
+          request_body_length: event.request_body_length || null,
+          request_body_sample: event.request_body_sample || null,
+        });
+      }
     }
     const hitsByLabel = {};
     const requiredHitsByLabel = {};
@@ -1883,6 +1938,79 @@ function compactSetupResultText(value) {
   if (text.length <= 500) return text;
   return text.slice(0, 500) + "... (" + text.length + " chars)";
 }
+function compactNetworkMockRequestBody(value) {
+  const text = String(value || "").replace(/\s+/g, " ").trim();
+  if (text.length <= 1000) return text;
+  return text.slice(0, 1000) + "... (" + text.length + " chars)";
+}
+function networkMockStringList(value) {
+  return Array.isArray(value) ? value.map((item) => String(item)).filter(Boolean) : [];
+}
+function networkMockShouldCaptureRequestBody(mock) {
+  return mock && (
+    mock.capture_request_body === true
+    || networkMockStringList(mock.request_body_contains).length > 0
+    || networkMockStringList(mock.request_body_patterns).length > 0
+    || networkMockStringList(mock.request_body_not_contains).length > 0
+    || networkMockStringList(mock.request_body_not_patterns).length > 0
+  );
+}
+function networkMockRequestBodyFailures(body, mock) {
+  const failures = [];
+  const rawBody = String(body || "");
+  const compactBody = compactNetworkMockRequestBody(rawBody);
+  for (const expected of networkMockStringList(mock.request_body_contains)) {
+    if (!rawBody.includes(expected) && !compactBody.includes(expected)) {
+      failures.push({
+        type: "request_body_missing_text",
+        text: String(expected).slice(0, 200),
+      });
+    }
+  }
+  for (const pattern of networkMockStringList(mock.request_body_patterns)) {
+    try {
+      const regex = new RegExp(pattern);
+      if (!regex.test(rawBody) && !regex.test(compactBody)) {
+        failures.push({
+          type: "request_body_pattern_not_matched",
+          pattern: String(pattern).slice(0, 200),
+        });
+      }
+    } catch (error) {
+      failures.push({
+        type: "request_body_invalid_pattern",
+        pattern: String(pattern).slice(0, 200),
+        error: String(error && error.message ? error.message : error).slice(0, 500),
+      });
+    }
+  }
+  for (const forbidden of networkMockStringList(mock.request_body_not_contains)) {
+    if (rawBody.includes(forbidden) || compactBody.includes(forbidden)) {
+      failures.push({
+        type: "request_body_forbidden_text",
+        text: String(forbidden).slice(0, 200),
+      });
+    }
+  }
+  for (const pattern of networkMockStringList(mock.request_body_not_patterns)) {
+    try {
+      const regex = new RegExp(pattern);
+      if (regex.test(rawBody) || regex.test(compactBody)) {
+        failures.push({
+          type: "request_body_forbidden_pattern_matched",
+          pattern: String(pattern).slice(0, 200),
+        });
+      }
+    } catch (error) {
+      failures.push({
+        type: "request_body_invalid_pattern",
+        pattern: String(pattern).slice(0, 200),
+        error: String(error && error.message ? error.message : error).slice(0, 500),
+      });
+    }
+  }
+  return failures;
+}
 async function setupLocatorVisible(locator, index) {
   return await locator.nth(index).isVisible({ timeout: 1000 }).catch(() => false);
 }
@@ -1911,7 +2039,11 @@ async function registerNetworkMocks(mocks) {
           body = JSON.stringify(response.body_json);
           contentType = response.content_type || headers["content-type"] || headers["Content-Type"] || "application/json";
         }
-        networkMockEvents.push({
+        const shouldCaptureRequestBody = networkMockShouldCaptureRequestBody(mock);
+        const requestBody = shouldCaptureRequestBody && request.postData ? request.postData() || "" : "";
+        const requestBodyFailures = shouldCaptureRequestBody ? networkMockRequestBodyFailures(requestBody, mock) : [];
+        const status = response.status || mock.status || 200;
+        const event = {
           ok: true,
           label: mock.label,
           response_label: response.label || null,
@@ -1921,10 +2053,17 @@ async function registerNetworkMocks(mocks) {
           sequence_cycle: responseIndex !== null && mock.repeat_responses === true && hitIndex >= responses.length,
           url: request.url(),
           method,
-          status: response.status || mock.status || 200,
-        });
+          status,
+        };
+        if (shouldCaptureRequestBody) {
+          event.request_body_matches = requestBodyFailures.length === 0;
+          event.request_body_failures = requestBodyFailures;
+          event.request_body_length = requestBody.length;
+          event.request_body_sample = compactNetworkMockRequestBody(requestBody);
+        }
+        networkMockEvents.push(event);
         await route.fulfill({
-          status: response.status || mock.status || 200,
+          status,
           headers,
           contentType,
           body,

package/dist/profile.d.cts

@@ -50,6 +50,11 @@ interface RiddleProofProfileNetworkMock extends RiddleProofProfileNetworkMockRes
     repeat_responses?: boolean;
     required_hit_count?: number;
     required?: boolean;
+    capture_request_body?: boolean;
+    request_body_contains?: string[];
+    request_body_patterns?: string[];
+    request_body_not_contains?: string[];
+    request_body_not_patterns?: string[];
 }
 interface RiddleProofProfileRouteInventoryRoute {
     name?: string;

package/dist/profile.d.ts

@@ -50,6 +50,11 @@ interface RiddleProofProfileNetworkMock extends RiddleProofProfileNetworkMockRes
     repeat_responses?: boolean;
     required_hit_count?: number;
     required?: boolean;
+    capture_request_body?: boolean;
+    request_body_contains?: string[];
+    request_body_patterns?: string[];
+    request_body_not_contains?: string[];
+    request_body_not_patterns?: string[];
 }
 interface RiddleProofProfileRouteInventoryRoute {
     name?: string;

package/dist/profile.js

@@ -19,7 +19,7 @@ import {
   resolveRiddleProofProfileTimeoutSec,
   slugifyRiddleProofProfileName,
   summarizeRiddleProofProfileResult
-} from "./chunk-G673RKAC.js";
+} from "./chunk-WSZ5AVKX.js";
 export {
   RIDDLE_PROOF_PROFILE_CHECK_TYPES,
   RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION,

package/dist/proof-run-engine.d.cts

@@ -292,7 +292,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     blocking?: boolean;
     details?: Record<string, unknown>;
     ok: boolean;
-    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship" | "run";
+    action: "author" | "recon" | "ship" | "implement" | "verify" | "setup" | "run";
     state_path: string;
     stage: any;
     summary: string;
@@ -382,7 +382,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     continueWithStage?: WorkflowStage | null;
     blocking?: boolean;
     details?: Record<string, unknown>;
-    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship" | "run";
+    action: "author" | "recon" | "ship" | "implement" | "verify" | "setup" | "run";
     state_path: string;
     stage: any;
     checkpoint: string;
@@ -659,7 +659,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     error?: undefined;
 } | {
     ok: boolean;
-    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship" | "run";
+    action: "author" | "recon" | "ship" | "implement" | "verify" | "setup" | "run";
     state_path: string;
     stage: any;
     summary: string;

package/dist/proof-run-engine.d.ts

@@ -292,7 +292,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     blocking?: boolean;
     details?: Record<string, unknown>;
     ok: boolean;
-    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship" | "run";
+    action: "author" | "recon" | "ship" | "implement" | "verify" | "setup" | "run";
     state_path: string;
     stage: any;
     summary: string;
@@ -382,7 +382,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     continueWithStage?: WorkflowStage | null;
     blocking?: boolean;
     details?: Record<string, unknown>;
-    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship" | "run";
+    action: "author" | "recon" | "ship" | "implement" | "verify" | "setup" | "run";
     state_path: string;
     stage: any;
     checkpoint: string;
@@ -659,7 +659,7 @@ declare function executeWorkflow(params: WorkflowParams, pluginConfig: any, reso
     error?: undefined;
 } | {
     ok: boolean;
-    action: "setup" | "recon" | "author" | "implement" | "verify" | "ship" | "run";
+    action: "author" | "recon" | "ship" | "implement" | "verify" | "setup" | "run";
     state_path: string;
     stage: any;
     summary: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riddledc/riddle-proof",
-  "version": "0.7.44",
+  "version": "0.7.46",
   "description": "Reusable Riddle Proof contracts and helpers for evidence-backed agent changes.",
   "license": "MIT",
   "author": "RiddleDC",