@riddledc/riddle-proof 0.7.45 → 0.7.46

package/README.md

@@ -224,11 +224,12 @@ success pair across multiple viewports. Repeated sequences also record
 `sequence_cycle: true` after the first cycle.
 
 Set `capture_request_body: true` to include compact request-body evidence on
-mock hits. Add `request_body_contains` or `request_body_patterns` when the
-request body is part of the contract, such as proving that a save request
-references the build ID returned by a prior mocked build response. Body
-assertions use the full request body for matching and store only length plus a
-compact sample in the proof evidence.
+mock hits. Add `request_body_contains` / `request_body_patterns` or
+`request_body_not_contains` / `request_body_not_patterns` when the request body
+is part of the contract, such as proving that a save request references the
+current build ID returned by a prior mocked build response and not a stale one.
+Body assertions use the full request body for matching and store only length
+plus a compact sample in the proof evidence.
 
 `target.setup_actions` is optional. Use it when the meaningful proof surface
 appears only after a picker, tab, login stub, storage seed, form fill,

package/dist/{chunk-IJGMTTVP.js → chunk-WSZ5AVKX.js}

@@ -262,6 +262,15 @@ function normalizeNetworkMock(input, index) {
     `target.network_mocks[${index}].request_body_patterns`
   );
   validateRegexPatterns(requestBodyPatterns, `target.network_mocks[${index}].request_body_patterns`);
+  const requestBodyNotContains = normalizeStringList(
+    input.request_body_not_contains ?? input.requestBodyNotContains ?? input.request_body_absent ?? input.requestBodyAbsent ?? input.body_not_contains ?? input.bodyNotContains ?? input.body_absent ?? input.bodyAbsent,
+    `target.network_mocks[${index}].request_body_not_contains`
+  );
+  const requestBodyNotPatterns = normalizeStringList(
+    input.request_body_not_patterns ?? input.requestBodyNotPatterns ?? input.request_body_forbidden_patterns ?? input.requestBodyForbiddenPatterns ?? input.body_not_patterns ?? input.bodyNotPatterns ?? input.body_forbidden_patterns ?? input.bodyForbiddenPatterns,
+    `target.network_mocks[${index}].request_body_not_patterns`
+  );
+  validateRegexPatterns(requestBodyNotPatterns, `target.network_mocks[${index}].request_body_not_patterns`);
   const requiredHitCount = numberValue(
     input.required_hit_count ?? input.requiredHitCount ?? input.required_hits ?? input.requiredHits ?? input.min_hits ?? input.minHits
   );
@@ -277,9 +286,11 @@ function normalizeNetworkMock(input, index) {
     repeat_responses: input.repeat_responses === true || input.repeatResponses === true || input.cycle_responses === true || input.cycleResponses === true,
     required_hit_count: requiredHitCount,
     required: input.required === false ? false : true,
-    capture_request_body: input.capture_request_body === true || input.captureRequestBody === true || Boolean(requestBodyContains?.length) || Boolean(requestBodyPatterns?.length),
+    capture_request_body: input.capture_request_body === true || input.captureRequestBody === true || Boolean(requestBodyContains?.length) || Boolean(requestBodyPatterns?.length) || Boolean(requestBodyNotContains?.length) || Boolean(requestBodyNotPatterns?.length),
     request_body_contains: requestBodyContains,
-    request_body_patterns: requestBodyPatterns
+    request_body_patterns: requestBodyPatterns,
+    request_body_not_contains: requestBodyNotContains,
+    request_body_not_patterns: requestBodyNotPatterns
   };
 }
 function normalizeNetworkMockResponsePayload(input, label, defaults = {}) {
@@ -1897,6 +1908,8 @@ function networkMockShouldCaptureRequestBody(mock) {
     mock.capture_request_body === true
     || networkMockStringList(mock.request_body_contains).length > 0
     || networkMockStringList(mock.request_body_patterns).length > 0
+    || networkMockStringList(mock.request_body_not_contains).length > 0
+    || networkMockStringList(mock.request_body_not_patterns).length > 0
   );
 }
 function networkMockRequestBodyFailures(body, mock) {
@@ -1928,6 +1941,31 @@ function networkMockRequestBodyFailures(body, mock) {
       });
     }
   }
+  for (const forbidden of networkMockStringList(mock.request_body_not_contains)) {
+    if (rawBody.includes(forbidden) || compactBody.includes(forbidden)) {
+      failures.push({
+        type: "request_body_forbidden_text",
+        text: String(forbidden).slice(0, 200),
+      });
+    }
+  }
+  for (const pattern of networkMockStringList(mock.request_body_not_patterns)) {
+    try {
+      const regex = new RegExp(pattern);
+      if (regex.test(rawBody) || regex.test(compactBody)) {
+        failures.push({
+          type: "request_body_forbidden_pattern_matched",
+          pattern: String(pattern).slice(0, 200),
+        });
+      }
+    } catch (error) {
+      failures.push({
+        type: "request_body_invalid_pattern",
+        pattern: String(pattern).slice(0, 200),
+        error: String(error && error.message ? error.message : error).slice(0, 500),
+      });
+    }
+  }
   return failures;
 }
 async function setupLocatorVisible(locator, index) {

package/dist/cli.cjs

@@ -7135,6 +7135,15 @@ function normalizeNetworkMock(input, index) {
     `target.network_mocks[${index}].request_body_patterns`
   );
   validateRegexPatterns(requestBodyPatterns, `target.network_mocks[${index}].request_body_patterns`);
+  const requestBodyNotContains = normalizeStringList(
+    input.request_body_not_contains ?? input.requestBodyNotContains ?? input.request_body_absent ?? input.requestBodyAbsent ?? input.body_not_contains ?? input.bodyNotContains ?? input.body_absent ?? input.bodyAbsent,
+    `target.network_mocks[${index}].request_body_not_contains`
+  );
+  const requestBodyNotPatterns = normalizeStringList(
+    input.request_body_not_patterns ?? input.requestBodyNotPatterns ?? input.request_body_forbidden_patterns ?? input.requestBodyForbiddenPatterns ?? input.body_not_patterns ?? input.bodyNotPatterns ?? input.body_forbidden_patterns ?? input.bodyForbiddenPatterns,
+    `target.network_mocks[${index}].request_body_not_patterns`
+  );
+  validateRegexPatterns(requestBodyNotPatterns, `target.network_mocks[${index}].request_body_not_patterns`);
   const requiredHitCount = numberValue(
     input.required_hit_count ?? input.requiredHitCount ?? input.required_hits ?? input.requiredHits ?? input.min_hits ?? input.minHits
   );
@@ -7150,9 +7159,11 @@ function normalizeNetworkMock(input, index) {
     repeat_responses: input.repeat_responses === true || input.repeatResponses === true || input.cycle_responses === true || input.cycleResponses === true,
     required_hit_count: requiredHitCount,
     required: input.required === false ? false : true,
-    capture_request_body: input.capture_request_body === true || input.captureRequestBody === true || Boolean(requestBodyContains?.length) || Boolean(requestBodyPatterns?.length),
+    capture_request_body: input.capture_request_body === true || input.captureRequestBody === true || Boolean(requestBodyContains?.length) || Boolean(requestBodyPatterns?.length) || Boolean(requestBodyNotContains?.length) || Boolean(requestBodyNotPatterns?.length),
     request_body_contains: requestBodyContains,
-    request_body_patterns: requestBodyPatterns
+    request_body_patterns: requestBodyPatterns,
+    request_body_not_contains: requestBodyNotContains,
+    request_body_not_patterns: requestBodyNotPatterns
   };
 }
 function normalizeNetworkMockResponsePayload(input, label, defaults = {}) {
@@ -8754,6 +8765,8 @@ function networkMockShouldCaptureRequestBody(mock) {
     mock.capture_request_body === true
     || networkMockStringList(mock.request_body_contains).length > 0
     || networkMockStringList(mock.request_body_patterns).length > 0
+    || networkMockStringList(mock.request_body_not_contains).length > 0
+    || networkMockStringList(mock.request_body_not_patterns).length > 0
   );
 }
 function networkMockRequestBodyFailures(body, mock) {
@@ -8785,6 +8798,31 @@ function networkMockRequestBodyFailures(body, mock) {
       });
     }
   }
+  for (const forbidden of networkMockStringList(mock.request_body_not_contains)) {
+    if (rawBody.includes(forbidden) || compactBody.includes(forbidden)) {
+      failures.push({
+        type: "request_body_forbidden_text",
+        text: String(forbidden).slice(0, 200),
+      });
+    }
+  }
+  for (const pattern of networkMockStringList(mock.request_body_not_patterns)) {
+    try {
+      const regex = new RegExp(pattern);
+      if (regex.test(rawBody) || regex.test(compactBody)) {
+        failures.push({
+          type: "request_body_forbidden_pattern_matched",
+          pattern: String(pattern).slice(0, 200),
+        });
+      }
+    } catch (error) {
+      failures.push({
+        type: "request_body_invalid_pattern",
+        pattern: String(pattern).slice(0, 200),
+        error: String(error && error.message ? error.message : error).slice(0, 500),
+      });
+    }
+  }
   return failures;
 }
 async function setupLocatorVisible(locator, index) {

package/dist/cli.js

@@ -10,7 +10,7 @@ import {
   profileStatusExitCode,
   resolveRiddleProofProfileTargetUrl,
   resolveRiddleProofProfileTimeoutSec
-} from "./chunk-IJGMTTVP.js";
+} from "./chunk-WSZ5AVKX.js";
 import {
   createRiddleApiClient,
   parseRiddleViewport

package/dist/index.cjs

@@ -8976,6 +8976,15 @@ function normalizeNetworkMock(input, index) {
     `target.network_mocks[${index}].request_body_patterns`
   );
   validateRegexPatterns(requestBodyPatterns, `target.network_mocks[${index}].request_body_patterns`);
+  const requestBodyNotContains = normalizeStringList(
+    input.request_body_not_contains ?? input.requestBodyNotContains ?? input.request_body_absent ?? input.requestBodyAbsent ?? input.body_not_contains ?? input.bodyNotContains ?? input.body_absent ?? input.bodyAbsent,
+    `target.network_mocks[${index}].request_body_not_contains`
+  );
+  const requestBodyNotPatterns = normalizeStringList(
+    input.request_body_not_patterns ?? input.requestBodyNotPatterns ?? input.request_body_forbidden_patterns ?? input.requestBodyForbiddenPatterns ?? input.body_not_patterns ?? input.bodyNotPatterns ?? input.body_forbidden_patterns ?? input.bodyForbiddenPatterns,
+    `target.network_mocks[${index}].request_body_not_patterns`
+  );
+  validateRegexPatterns(requestBodyNotPatterns, `target.network_mocks[${index}].request_body_not_patterns`);
   const requiredHitCount = numberValue3(
     input.required_hit_count ?? input.requiredHitCount ?? input.required_hits ?? input.requiredHits ?? input.min_hits ?? input.minHits
   );
@@ -8991,9 +9000,11 @@ function normalizeNetworkMock(input, index) {
     repeat_responses: input.repeat_responses === true || input.repeatResponses === true || input.cycle_responses === true || input.cycleResponses === true,
     required_hit_count: requiredHitCount,
     required: input.required === false ? false : true,
-    capture_request_body: input.capture_request_body === true || input.captureRequestBody === true || Boolean(requestBodyContains?.length) || Boolean(requestBodyPatterns?.length),
+    capture_request_body: input.capture_request_body === true || input.captureRequestBody === true || Boolean(requestBodyContains?.length) || Boolean(requestBodyPatterns?.length) || Boolean(requestBodyNotContains?.length) || Boolean(requestBodyNotPatterns?.length),
     request_body_contains: requestBodyContains,
-    request_body_patterns: requestBodyPatterns
+    request_body_patterns: requestBodyPatterns,
+    request_body_not_contains: requestBodyNotContains,
+    request_body_not_patterns: requestBodyNotPatterns
   };
 }
 function normalizeNetworkMockResponsePayload(input, label, defaults = {}) {
@@ -10611,6 +10622,8 @@ function networkMockShouldCaptureRequestBody(mock) {
     mock.capture_request_body === true
     || networkMockStringList(mock.request_body_contains).length > 0
     || networkMockStringList(mock.request_body_patterns).length > 0
+    || networkMockStringList(mock.request_body_not_contains).length > 0
+    || networkMockStringList(mock.request_body_not_patterns).length > 0
   );
 }
 function networkMockRequestBodyFailures(body, mock) {
@@ -10642,6 +10655,31 @@ function networkMockRequestBodyFailures(body, mock) {
       });
     }
   }
+  for (const forbidden of networkMockStringList(mock.request_body_not_contains)) {
+    if (rawBody.includes(forbidden) || compactBody.includes(forbidden)) {
+      failures.push({
+        type: "request_body_forbidden_text",
+        text: String(forbidden).slice(0, 200),
+      });
+    }
+  }
+  for (const pattern of networkMockStringList(mock.request_body_not_patterns)) {
+    try {
+      const regex = new RegExp(pattern);
+      if (regex.test(rawBody) || regex.test(compactBody)) {
+        failures.push({
+          type: "request_body_forbidden_pattern_matched",
+          pattern: String(pattern).slice(0, 200),
+        });
+      }
+    } catch (error) {
+      failures.push({
+        type: "request_body_invalid_pattern",
+        pattern: String(pattern).slice(0, 200),
+        error: String(error && error.message ? error.message : error).slice(0, 500),
+      });
+    }
+  }
   return failures;
 }
 async function setupLocatorVisible(locator, index) {

package/dist/index.js

@@ -58,7 +58,7 @@ import {
   resolveRiddleProofProfileTimeoutSec,
   slugifyRiddleProofProfileName,
   summarizeRiddleProofProfileResult
-} from "./chunk-IJGMTTVP.js";
+} from "./chunk-WSZ5AVKX.js";
 import {
   DEFAULT_RIDDLE_API_BASE_URL,
   DEFAULT_RIDDLE_API_KEY_FILE,

package/dist/profile.cjs

@@ -305,6 +305,15 @@ function normalizeNetworkMock(input, index) {
     `target.network_mocks[${index}].request_body_patterns`
   );
   validateRegexPatterns(requestBodyPatterns, `target.network_mocks[${index}].request_body_patterns`);
+  const requestBodyNotContains = normalizeStringList(
+    input.request_body_not_contains ?? input.requestBodyNotContains ?? input.request_body_absent ?? input.requestBodyAbsent ?? input.body_not_contains ?? input.bodyNotContains ?? input.body_absent ?? input.bodyAbsent,
+    `target.network_mocks[${index}].request_body_not_contains`
+  );
+  const requestBodyNotPatterns = normalizeStringList(
+    input.request_body_not_patterns ?? input.requestBodyNotPatterns ?? input.request_body_forbidden_patterns ?? input.requestBodyForbiddenPatterns ?? input.body_not_patterns ?? input.bodyNotPatterns ?? input.body_forbidden_patterns ?? input.bodyForbiddenPatterns,
+    `target.network_mocks[${index}].request_body_not_patterns`
+  );
+  validateRegexPatterns(requestBodyNotPatterns, `target.network_mocks[${index}].request_body_not_patterns`);
   const requiredHitCount = numberValue(
     input.required_hit_count ?? input.requiredHitCount ?? input.required_hits ?? input.requiredHits ?? input.min_hits ?? input.minHits
   );
@@ -320,9 +329,11 @@ function normalizeNetworkMock(input, index) {
     repeat_responses: input.repeat_responses === true || input.repeatResponses === true || input.cycle_responses === true || input.cycleResponses === true,
     required_hit_count: requiredHitCount,
     required: input.required === false ? false : true,
-    capture_request_body: input.capture_request_body === true || input.captureRequestBody === true || Boolean(requestBodyContains?.length) || Boolean(requestBodyPatterns?.length),
+    capture_request_body: input.capture_request_body === true || input.captureRequestBody === true || Boolean(requestBodyContains?.length) || Boolean(requestBodyPatterns?.length) || Boolean(requestBodyNotContains?.length) || Boolean(requestBodyNotPatterns?.length),
     request_body_contains: requestBodyContains,
-    request_body_patterns: requestBodyPatterns
+    request_body_patterns: requestBodyPatterns,
+    request_body_not_contains: requestBodyNotContains,
+    request_body_not_patterns: requestBodyNotPatterns
   };
 }
 function normalizeNetworkMockResponsePayload(input, label, defaults = {}) {
@@ -1940,6 +1951,8 @@ function networkMockShouldCaptureRequestBody(mock) {
     mock.capture_request_body === true
     || networkMockStringList(mock.request_body_contains).length > 0
     || networkMockStringList(mock.request_body_patterns).length > 0
+    || networkMockStringList(mock.request_body_not_contains).length > 0
+    || networkMockStringList(mock.request_body_not_patterns).length > 0
   );
 }
 function networkMockRequestBodyFailures(body, mock) {
@@ -1971,6 +1984,31 @@ function networkMockRequestBodyFailures(body, mock) {
       });
     }
   }
+  for (const forbidden of networkMockStringList(mock.request_body_not_contains)) {
+    if (rawBody.includes(forbidden) || compactBody.includes(forbidden)) {
+      failures.push({
+        type: "request_body_forbidden_text",
+        text: String(forbidden).slice(0, 200),
+      });
+    }
+  }
+  for (const pattern of networkMockStringList(mock.request_body_not_patterns)) {
+    try {
+      const regex = new RegExp(pattern);
+      if (regex.test(rawBody) || regex.test(compactBody)) {
+        failures.push({
+          type: "request_body_forbidden_pattern_matched",
+          pattern: String(pattern).slice(0, 200),
+        });
+      }
+    } catch (error) {
+      failures.push({
+        type: "request_body_invalid_pattern",
+        pattern: String(pattern).slice(0, 200),
+        error: String(error && error.message ? error.message : error).slice(0, 500),
+      });
+    }
+  }
   return failures;
 }
 async function setupLocatorVisible(locator, index) {

package/dist/profile.d.cts

@@ -53,6 +53,8 @@ interface RiddleProofProfileNetworkMock extends RiddleProofProfileNetworkMockRes
     capture_request_body?: boolean;
     request_body_contains?: string[];
     request_body_patterns?: string[];
+    request_body_not_contains?: string[];
+    request_body_not_patterns?: string[];
 }
 interface RiddleProofProfileRouteInventoryRoute {
     name?: string;

package/dist/profile.d.ts

@@ -53,6 +53,8 @@ interface RiddleProofProfileNetworkMock extends RiddleProofProfileNetworkMockRes
     capture_request_body?: boolean;
     request_body_contains?: string[];
     request_body_patterns?: string[];
+    request_body_not_contains?: string[];
+    request_body_not_patterns?: string[];
 }
 interface RiddleProofProfileRouteInventoryRoute {
     name?: string;

package/dist/profile.js

@@ -19,7 +19,7 @@ import {
   resolveRiddleProofProfileTimeoutSec,
   slugifyRiddleProofProfileName,
   summarizeRiddleProofProfileResult
-} from "./chunk-IJGMTTVP.js";
+} from "./chunk-WSZ5AVKX.js";
 export {
   RIDDLE_PROOF_PROFILE_CHECK_TYPES,
   RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riddledc/riddle-proof",
-  "version": "0.7.45",
+  "version": "0.7.46",
   "description": "Reusable Riddle Proof contracts and helpers for evidence-backed agent changes.",
   "license": "MIT",
   "author": "RiddleDC",