@riddledc/riddle-proof 0.7.46 → 0.7.48

package/README.md

@@ -229,21 +229,29 @@ mock hits. Add `request_body_contains` / `request_body_patterns` or
 is part of the contract, such as proving that a save request references the
 current build ID returned by a prior mocked build response and not a stale one.
 Body assertions use the full request body for matching and store only length
-plus a compact sample in the proof evidence.
+plus a compact sample in the proof evidence. For sequenced mocks, the same
+request-body fields may also be placed on individual `responses[]` entries when
+each step has a different request contract, such as a fail-then-success retry
+where the second request must carry newer state.
 
 `target.setup_actions` is optional. Use it when the meaningful proof surface
 appears only after a picker, tab, login stub, storage seed, form fill,
 transport control, or other bounded interaction. Supported setup actions are
-`click`, `fill`, `set_input_value`, `local_storage`, `session_storage`,
-`clear_storage`, `wait`, `wait_for_selector`, and `wait_for_text`; a failed
-setup action is recorded as a failed `setup_actions_succeeded` check so the
-profile cannot pass without reaching the intended state. Text-matched `click`
-actions prefer visible matching elements, which keeps responsive layouts from
-selecting hidden desktop or mobile-only links. `local_storage` and
-`session_storage` accept a `key` plus string `value` or JSON `json` /
-`value_json`, and can reload the page with `reload: true`. `clear_storage`
-clears `local`, `session`, or `both` browser storage scopes, defaults to
-`both`, and can also reload with `reload: true`.
+`click`, `fill`, `set_input_value`, `assert_text_visible`,
+`assert_text_absent`, `assert_selector_count`, `local_storage`,
+`session_storage`, `clear_storage`, `wait`, `wait_for_selector`, and
+`wait_for_text`; a failed setup action is recorded as a failed
+`setup_actions_succeeded` check so the profile cannot pass without reaching
+the intended state. Text-matched `click` actions prefer visible matching
+elements, which keeps responsive layouts from selecting hidden desktop or
+mobile-only links. Use setup assertions when the pre-click or pre-navigation
+state is part of the contract, for example a fresh row must be present, stale
+copy must be absent, or exactly one source link must exist before clicking into
+the final route. `assert_selector_count` accepts `expected_count`.
+`local_storage` and `session_storage` accept a `key` plus string `value` or
+JSON `json` / `value_json`, and can reload the page with `reload: true`.
+`clear_storage` clears `local`, `session`, or `both` browser storage scopes,
+defaults to `both`, and can also reload with `reload: true`.
 
 `target.timeout_sec` is optional. Use it for known-heavy profile targets so the
 profile carries its own hosted Riddle worker budget; an explicit CLI `--timeout`

package/dist/{chunk-WSZ5AVKX.js → chunk-V2KNQTQD.js}

@@ -32,6 +32,9 @@ var RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES = [
   "click",
   "fill",
   "set_input_value",
+  "assert_text_visible",
+  "assert_text_absent",
+  "assert_selector_count",
   "local_storage",
   "session_storage",
   "clear_storage",
@@ -205,12 +208,19 @@ function normalizeSetupAction(input, index) {
   if (!isRecord(input)) throw new Error(`target.setup_actions[${index}] must be an object.`);
   const type = normalizeSetupActionType(stringValue(input.type), index);
   const selector = stringValue(input.selector);
-  if ((type === "click" || type === "fill" || type === "set_input_value" || type === "wait_for_selector" || type === "wait_for_text") && !selector) {
+  if ((type === "click" || type === "fill" || type === "set_input_value" || type === "wait_for_selector" || type === "wait_for_text" || type === "assert_text_visible" || type === "assert_text_absent" || type === "assert_selector_count") && !selector) {
     throw new Error(`target.setup_actions[${index}] ${type} requires selector.`);
   }
   if (type === "wait_for_text" && !stringValue(input.text) && !stringValue(input.pattern)) {
     throw new Error(`target.setup_actions[${index}] wait_for_text requires text or pattern.`);
   }
+  if ((type === "assert_text_visible" || type === "assert_text_absent") && !stringValue(input.text) && !stringValue(input.pattern)) {
+    throw new Error(`target.setup_actions[${index}] ${type} requires text or pattern.`);
+  }
+  const expectedCount = numberValue(input.expected_count ?? input.expectedCount ?? input.count);
+  if (type === "assert_selector_count" && (expectedCount === void 0 || !Number.isInteger(expectedCount) || expectedCount < 0)) {
+    throw new Error(`target.setup_actions[${index}] ${type} requires non-negative integer expected_count.`);
+  }
   const value = stringFromOwn(input, "value", "input_value", "inputValue");
   const hasJsonValue = hasOwn(input, "value_json") || hasOwn(input, "valueJson") || hasOwn(input, "json");
   if ((type === "fill" || type === "set_input_value") && value === void 0 && !hasJsonValue) {
@@ -233,6 +243,7 @@ function normalizeSetupAction(input, index) {
     pattern: stringValue(input.pattern),
     flags: stringValue(input.flags),
     index: numberValue(input.index),
+    expected_count: expectedCount,
     ms: numberValue(input.ms) ?? numberValue(input.wait_ms) ?? numberValue(input.waitMs),
     timeout_ms: numberValue(input.timeout_ms) ?? numberValue(input.timeoutMs),
     after_ms: numberValue(input.after_ms) ?? numberValue(input.afterMs),
@@ -253,24 +264,7 @@ function normalizeNetworkMock(input, index) {
   const payload = normalizeNetworkMockResponsePayload(input, `target.network_mocks[${index}]`);
   const responsesInput = input.responses ?? input.sequence;
   const responses = normalizeNetworkMockResponses(responsesInput, index, payload);
-  const requestBodyContains = normalizeStringList(
-    input.request_body_contains ?? input.requestBodyContains ?? input.body_contains ?? input.bodyContains,
-    `target.network_mocks[${index}].request_body_contains`
-  );
-  const requestBodyPatterns = normalizeStringList(
-    input.request_body_patterns ?? input.requestBodyPatterns ?? input.body_patterns ?? input.bodyPatterns,
-    `target.network_mocks[${index}].request_body_patterns`
-  );
-  validateRegexPatterns(requestBodyPatterns, `target.network_mocks[${index}].request_body_patterns`);
-  const requestBodyNotContains = normalizeStringList(
-    input.request_body_not_contains ?? input.requestBodyNotContains ?? input.request_body_absent ?? input.requestBodyAbsent ?? input.body_not_contains ?? input.bodyNotContains ?? input.body_absent ?? input.bodyAbsent,
-    `target.network_mocks[${index}].request_body_not_contains`
-  );
-  const requestBodyNotPatterns = normalizeStringList(
-    input.request_body_not_patterns ?? input.requestBodyNotPatterns ?? input.request_body_forbidden_patterns ?? input.requestBodyForbiddenPatterns ?? input.body_not_patterns ?? input.bodyNotPatterns ?? input.body_forbidden_patterns ?? input.bodyForbiddenPatterns,
-    `target.network_mocks[${index}].request_body_not_patterns`
-  );
-  validateRegexPatterns(requestBodyNotPatterns, `target.network_mocks[${index}].request_body_not_patterns`);
+  const requestBody = normalizeNetworkMockRequestBodyConstraints(input, `target.network_mocks[${index}]`);
   const requiredHitCount = numberValue(
     input.required_hit_count ?? input.requiredHitCount ?? input.required_hits ?? input.requiredHits ?? input.min_hits ?? input.minHits
   );
@@ -286,6 +280,33 @@ function normalizeNetworkMock(input, index) {
     repeat_responses: input.repeat_responses === true || input.repeatResponses === true || input.cycle_responses === true || input.cycleResponses === true,
     required_hit_count: requiredHitCount,
     required: input.required === false ? false : true,
+    capture_request_body: requestBody.capture_request_body,
+    request_body_contains: requestBody.request_body_contains,
+    request_body_patterns: requestBody.request_body_patterns,
+    request_body_not_contains: requestBody.request_body_not_contains,
+    request_body_not_patterns: requestBody.request_body_not_patterns
+  };
+}
+function normalizeNetworkMockRequestBodyConstraints(input, label) {
+  const requestBodyContains = normalizeStringList(
+    input.request_body_contains ?? input.requestBodyContains ?? input.body_contains ?? input.bodyContains,
+    `${label}.request_body_contains`
+  );
+  const requestBodyPatterns = normalizeStringList(
+    input.request_body_patterns ?? input.requestBodyPatterns ?? input.body_patterns ?? input.bodyPatterns,
+    `${label}.request_body_patterns`
+  );
+  validateRegexPatterns(requestBodyPatterns, `${label}.request_body_patterns`);
+  const requestBodyNotContains = normalizeStringList(
+    input.request_body_not_contains ?? input.requestBodyNotContains ?? input.request_body_absent ?? input.requestBodyAbsent ?? input.body_not_contains ?? input.bodyNotContains ?? input.body_absent ?? input.bodyAbsent,
+    `${label}.request_body_not_contains`
+  );
+  const requestBodyNotPatterns = normalizeStringList(
+    input.request_body_not_patterns ?? input.requestBodyNotPatterns ?? input.request_body_forbidden_patterns ?? input.requestBodyForbiddenPatterns ?? input.body_not_patterns ?? input.bodyNotPatterns ?? input.body_forbidden_patterns ?? input.bodyForbiddenPatterns,
+    `${label}.request_body_not_patterns`
+  );
+  validateRegexPatterns(requestBodyNotPatterns, `${label}.request_body_not_patterns`);
+  return {
     capture_request_body: input.capture_request_body === true || input.captureRequestBody === true || Boolean(requestBodyContains?.length) || Boolean(requestBodyPatterns?.length) || Boolean(requestBodyNotContains?.length) || Boolean(requestBodyNotPatterns?.length),
     request_body_contains: requestBodyContains,
     request_body_patterns: requestBodyPatterns,
@@ -300,20 +321,33 @@ function normalizeNetworkMockResponsePayload(input, label, defaults = {}) {
   }
   const body = stringValue(input.body) ?? stringValue(input.body_text) ?? stringValue(input.bodyText) ?? defaults.body;
   const hasJsonBody = Object.prototype.hasOwnProperty.call(input, "body_json") || Object.prototype.hasOwnProperty.call(input, "bodyJson") || Object.prototype.hasOwnProperty.call(input, "json");
+  const requestBody = normalizeNetworkMockRequestBodyConstraints(input, label);
   return {
     label: stringValue(input.label) || stringValue(input.name) || defaults.label,
     status,
     content_type: stringValue(input.content_type) || stringValue(input.contentType) || defaults.content_type,
     headers: stringRecord(input.headers) || defaults.headers,
     body,
-    body_json: hasJsonBody ? toJsonValue(input.body_json ?? input.bodyJson ?? input.json) : defaults.body_json
+    body_json: hasJsonBody ? toJsonValue(input.body_json ?? input.bodyJson ?? input.json) : defaults.body_json,
+    capture_request_body: requestBody.capture_request_body,
+    request_body_contains: requestBody.request_body_contains,
+    request_body_patterns: requestBody.request_body_patterns,
+    request_body_not_contains: requestBody.request_body_not_contains,
+    request_body_not_patterns: requestBody.request_body_not_patterns
   };
 }
 function normalizeNetworkMockResponses(value, mockIndex, defaults) {
   if (value === void 0) return void 0;
   if (!Array.isArray(value)) throw new Error(`target.network_mocks[${mockIndex}].responses must be an array.`);
   if (!value.length) throw new Error(`target.network_mocks[${mockIndex}].responses must not be empty.`);
-  const responseDefaults = { ...defaults, label: void 0 };
+  const responseDefaults = {
+    label: void 0,
+    status: defaults.status,
+    content_type: defaults.content_type,
+    headers: defaults.headers,
+    body: defaults.body,
+    body_json: defaults.body_json
+  };
   return value.map((response, responseIndex) => {
     if (!isRecord(response)) {
       throw new Error(`target.network_mocks[${mockIndex}].responses[${responseIndex}] must be an object.`);
@@ -1056,6 +1090,9 @@ function assessNetworkMocksFromEvidence(profile, evidence) {
     if (event.request_body_matches === false) {
       failed.push({
         label: event.label ?? null,
+        response_label: event.response_label ?? null,
+        hit_index: event.hit_index ?? null,
+        response_index: event.response_index ?? null,
         url: event.url ?? null,
         method: event.method ?? null,
         reason: "request_body_mismatch",
@@ -1439,6 +1476,9 @@ function assessProfile(profile, evidence) {
       if (event && event.request_body_matches === false) {
         failed.push({
           label: event.label || null,
+          response_label: event.response_label || null,
+          hit_index: event.hit_index ?? null,
+          response_index: event.response_index ?? null,
           url: event.url || null,
           method: event.method || null,
           reason: "request_body_mismatch",
@@ -1903,20 +1943,21 @@ function compactNetworkMockRequestBody(value) {
 function networkMockStringList(value) {
   return Array.isArray(value) ? value.map((item) => String(item)).filter(Boolean) : [];
 }
-function networkMockShouldCaptureRequestBody(mock) {
-  return mock && (
-    mock.capture_request_body === true
-    || networkMockStringList(mock.request_body_contains).length > 0
-    || networkMockStringList(mock.request_body_patterns).length > 0
-    || networkMockStringList(mock.request_body_not_contains).length > 0
-    || networkMockStringList(mock.request_body_not_patterns).length > 0
-  );
+function networkMockShouldCaptureRequestBody(...sources) {
+  return sources.some((source) => source && (
+    source.capture_request_body === true
+    || networkMockStringList(source.request_body_contains).length > 0
+    || networkMockStringList(source.request_body_patterns).length > 0
+    || networkMockStringList(source.request_body_not_contains).length > 0
+    || networkMockStringList(source.request_body_not_patterns).length > 0
+  ));
 }
-function networkMockRequestBodyFailures(body, mock) {
+function networkMockRequestBodyFailuresForSource(body, source) {
   const failures = [];
+  if (!source) return failures;
   const rawBody = String(body || "");
   const compactBody = compactNetworkMockRequestBody(rawBody);
-  for (const expected of networkMockStringList(mock.request_body_contains)) {
+  for (const expected of networkMockStringList(source.request_body_contains)) {
     if (!rawBody.includes(expected) && !compactBody.includes(expected)) {
       failures.push({
         type: "request_body_missing_text",
@@ -1924,7 +1965,7 @@ function networkMockRequestBodyFailures(body, mock) {
       });
     }
   }
-  for (const pattern of networkMockStringList(mock.request_body_patterns)) {
+  for (const pattern of networkMockStringList(source.request_body_patterns)) {
     try {
       const regex = new RegExp(pattern);
       if (!regex.test(rawBody) && !regex.test(compactBody)) {
@@ -1941,7 +1982,7 @@ function networkMockRequestBodyFailures(body, mock) {
       });
     }
   }
-  for (const forbidden of networkMockStringList(mock.request_body_not_contains)) {
+  for (const forbidden of networkMockStringList(source.request_body_not_contains)) {
     if (rawBody.includes(forbidden) || compactBody.includes(forbidden)) {
       failures.push({
         type: "request_body_forbidden_text",
@@ -1949,7 +1990,7 @@ function networkMockRequestBodyFailures(body, mock) {
       });
     }
   }
-  for (const pattern of networkMockStringList(mock.request_body_not_patterns)) {
+  for (const pattern of networkMockStringList(source.request_body_not_patterns)) {
     try {
       const regex = new RegExp(pattern);
       if (regex.test(rawBody) || regex.test(compactBody)) {
@@ -1968,6 +2009,9 @@ function networkMockRequestBodyFailures(body, mock) {
   }
   return failures;
 }
+function networkMockRequestBodyFailures(body, ...sources) {
+  return sources.flatMap((source) => networkMockRequestBodyFailuresForSource(body, source));
+}
 async function setupLocatorVisible(locator, index) {
   return await locator.nth(index).isVisible({ timeout: 1000 }).catch(() => false);
 }
@@ -1996,9 +2040,10 @@ async function registerNetworkMocks(mocks) {
           body = JSON.stringify(response.body_json);
           contentType = response.content_type || headers["content-type"] || headers["Content-Type"] || "application/json";
         }
-        const shouldCaptureRequestBody = networkMockShouldCaptureRequestBody(mock);
+        const responseBodyContract = responseIndex === null ? null : response;
+        const shouldCaptureRequestBody = networkMockShouldCaptureRequestBody(mock, responseBodyContract);
         const requestBody = shouldCaptureRequestBody && request.postData ? request.postData() || "" : "";
-        const requestBodyFailures = shouldCaptureRequestBody ? networkMockRequestBodyFailures(requestBody, mock) : [];
+        const requestBodyFailures = shouldCaptureRequestBody ? networkMockRequestBodyFailures(requestBody, mock, responseBodyContract) : [];
         const status = response.status || mock.status || 200;
         const event = {
           ok: true,
@@ -2116,6 +2161,19 @@ async function executeSetupAction(action, ordinal) {
       await locator.nth(targetIndex).fill(value, { timeout });
       return { ...base, ok: true, count, target_index: targetIndex, value_length: value.length };
     }
+    if (type === "assert_selector_count") {
+      const locator = page.locator(action.selector);
+      const expectedCount = setupNumber(action.expected_count, -1);
+      if (!Number.isInteger(expectedCount) || expectedCount < 0) return { ...base, reason: "invalid_expected_count", expected_count: action.expected_count };
+      const startedAt = Date.now();
+      let count = 0;
+      while (Date.now() - startedAt <= timeout) {
+        count = await locator.count().catch(() => 0);
+        if (count === expectedCount) return { ...base, ok: true, count, expected_count: expectedCount, timeout_ms: timeout };
+        await page.waitForTimeout(100);
+      }
+      return { ...base, reason: "selector_count_mismatch", count, expected_count: expectedCount, timeout_ms: timeout };
+    }
     if (type === "wait_for_text") {
       const locator = page.locator(action.selector);
       const startedAt = Date.now();
@@ -2133,6 +2191,47 @@ async function executeSetupAction(action, ordinal) {
       }
       return { ...base, reason: "text_not_found", text: compactSetupResultText(lastText), timeout_ms: timeout };
     }
+    if (type === "assert_text_visible" || type === "assert_text_absent") {
+      const locator = page.locator(action.selector);
+      const startedAt = Date.now();
+      let lastText = "";
+      let matchedText = "";
+      let hiddenMatch = false;
+      while (Date.now() - startedAt <= timeout) {
+        const count = await locator.count().catch(() => 0);
+        let matched = false;
+        matchedText = "";
+        hiddenMatch = false;
+        for (let index = 0; index < count; index += 1) {
+          const text = await setupLocatorText(locator, index);
+          lastText = text || lastText;
+          if (setupTextMatches(text, action)) {
+            matched = true;
+            matchedText = text;
+            if (type === "assert_text_visible") {
+              const visible = await setupLocatorVisible(locator, index);
+              if (visible) {
+                return { ...base, ok: true, count, text: compactSetupResultText(text), target_index: index, timeout_ms: timeout };
+              }
+              hiddenMatch = true;
+              break;
+            }
+            break;
+          }
+        }
+        if (type === "assert_text_absent" && !matched) {
+          return { ...base, ok: true, count, timeout_ms: timeout };
+        }
+        await page.waitForTimeout(100);
+      }
+      if (type === "assert_text_visible") {
+        if (hiddenMatch) {
+          return { ...base, reason: "matching_element_not_visible", text: compactSetupResultText(matchedText), timeout_ms: timeout };
+        }
+        return { ...base, reason: "text_not_found", text: compactSetupResultText(lastText), timeout_ms: timeout };
+      }
+      return { ...base, reason: "text_still_present", text: compactSetupResultText(matchedText || lastText), timeout_ms: timeout };
+    }
     return { ...base, reason: "unsupported_action" };
   } catch (error) {
     return { ...base, error: String(error && error.message ? error.message : error).slice(0, 1000) };

package/dist/cli.cjs

@@ -6905,6 +6905,9 @@ var RIDDLE_PROOF_PROFILE_SETUP_ACTION_TYPES = [
   "click",
   "fill",
   "set_input_value",
+  "assert_text_visible",
+  "assert_text_absent",
+  "assert_selector_count",
   "local_storage",
   "session_storage",
   "clear_storage",
@@ -7078,12 +7081,19 @@ function normalizeSetupAction(input, index) {
   if (!isRecord(input)) throw new Error(`target.setup_actions[${index}] must be an object.`);
   const type = normalizeSetupActionType(stringValue2(input.type), index);
   const selector = stringValue2(input.selector);
-  if ((type === "click" || type === "fill" || type === "set_input_value" || type === "wait_for_selector" || type === "wait_for_text") && !selector) {
+  if ((type === "click" || type === "fill" || type === "set_input_value" || type === "wait_for_selector" || type === "wait_for_text" || type === "assert_text_visible" || type === "assert_text_absent" || type === "assert_selector_count") && !selector) {
     throw new Error(`target.setup_actions[${index}] ${type} requires selector.`);
   }
   if (type === "wait_for_text" && !stringValue2(input.text) && !stringValue2(input.pattern)) {
     throw new Error(`target.setup_actions[${index}] wait_for_text requires text or pattern.`);
   }
+  if ((type === "assert_text_visible" || type === "assert_text_absent") && !stringValue2(input.text) && !stringValue2(input.pattern)) {
+    throw new Error(`target.setup_actions[${index}] ${type} requires text or pattern.`);
+  }
+  const expectedCount = numberValue(input.expected_count ?? input.expectedCount ?? input.count);
+  if (type === "assert_selector_count" && (expectedCount === void 0 || !Number.isInteger(expectedCount) || expectedCount < 0)) {
+    throw new Error(`target.setup_actions[${index}] ${type} requires non-negative integer expected_count.`);
+  }
   const value = stringFromOwn(input, "value", "input_value", "inputValue");
   const hasJsonValue = hasOwn(input, "value_json") || hasOwn(input, "valueJson") || hasOwn(input, "json");
   if ((type === "fill" || type === "set_input_value") && value === void 0 && !hasJsonValue) {
@@ -7106,6 +7116,7 @@ function normalizeSetupAction(input, index) {
     pattern: stringValue2(input.pattern),
     flags: stringValue2(input.flags),
     index: numberValue(input.index),
+    expected_count: expectedCount,
     ms: numberValue(input.ms) ?? numberValue(input.wait_ms) ?? numberValue(input.waitMs),
     timeout_ms: numberValue(input.timeout_ms) ?? numberValue(input.timeoutMs),
     after_ms: numberValue(input.after_ms) ?? numberValue(input.afterMs),
@@ -7126,24 +7137,7 @@ function normalizeNetworkMock(input, index) {
   const payload = normalizeNetworkMockResponsePayload(input, `target.network_mocks[${index}]`);
   const responsesInput = input.responses ?? input.sequence;
   const responses = normalizeNetworkMockResponses(responsesInput, index, payload);
-  const requestBodyContains = normalizeStringList(
-    input.request_body_contains ?? input.requestBodyContains ?? input.body_contains ?? input.bodyContains,
-    `target.network_mocks[${index}].request_body_contains`
-  );
-  const requestBodyPatterns = normalizeStringList(
-    input.request_body_patterns ?? input.requestBodyPatterns ?? input.body_patterns ?? input.bodyPatterns,
-    `target.network_mocks[${index}].request_body_patterns`
-  );
-  validateRegexPatterns(requestBodyPatterns, `target.network_mocks[${index}].request_body_patterns`);
-  const requestBodyNotContains = normalizeStringList(
-    input.request_body_not_contains ?? input.requestBodyNotContains ?? input.request_body_absent ?? input.requestBodyAbsent ?? input.body_not_contains ?? input.bodyNotContains ?? input.body_absent ?? input.bodyAbsent,
-    `target.network_mocks[${index}].request_body_not_contains`
-  );
-  const requestBodyNotPatterns = normalizeStringList(
-    input.request_body_not_patterns ?? input.requestBodyNotPatterns ?? input.request_body_forbidden_patterns ?? input.requestBodyForbiddenPatterns ?? input.body_not_patterns ?? input.bodyNotPatterns ?? input.body_forbidden_patterns ?? input.bodyForbiddenPatterns,
-    `target.network_mocks[${index}].request_body_not_patterns`
-  );
-  validateRegexPatterns(requestBodyNotPatterns, `target.network_mocks[${index}].request_body_not_patterns`);
+  const requestBody = normalizeNetworkMockRequestBodyConstraints(input, `target.network_mocks[${index}]`);
   const requiredHitCount = numberValue(
     input.required_hit_count ?? input.requiredHitCount ?? input.required_hits ?? input.requiredHits ?? input.min_hits ?? input.minHits
   );
@@ -7159,6 +7153,33 @@ function normalizeNetworkMock(input, index) {
     repeat_responses: input.repeat_responses === true || input.repeatResponses === true || input.cycle_responses === true || input.cycleResponses === true,
     required_hit_count: requiredHitCount,
     required: input.required === false ? false : true,
+    capture_request_body: requestBody.capture_request_body,
+    request_body_contains: requestBody.request_body_contains,
+    request_body_patterns: requestBody.request_body_patterns,
+    request_body_not_contains: requestBody.request_body_not_contains,
+    request_body_not_patterns: requestBody.request_body_not_patterns
+  };
+}
+function normalizeNetworkMockRequestBodyConstraints(input, label) {
+  const requestBodyContains = normalizeStringList(
+    input.request_body_contains ?? input.requestBodyContains ?? input.body_contains ?? input.bodyContains,
+    `${label}.request_body_contains`
+  );
+  const requestBodyPatterns = normalizeStringList(
+    input.request_body_patterns ?? input.requestBodyPatterns ?? input.body_patterns ?? input.bodyPatterns,
+    `${label}.request_body_patterns`
+  );
+  validateRegexPatterns(requestBodyPatterns, `${label}.request_body_patterns`);
+  const requestBodyNotContains = normalizeStringList(
+    input.request_body_not_contains ?? input.requestBodyNotContains ?? input.request_body_absent ?? input.requestBodyAbsent ?? input.body_not_contains ?? input.bodyNotContains ?? input.body_absent ?? input.bodyAbsent,
+    `${label}.request_body_not_contains`
+  );
+  const requestBodyNotPatterns = normalizeStringList(
+    input.request_body_not_patterns ?? input.requestBodyNotPatterns ?? input.request_body_forbidden_patterns ?? input.requestBodyForbiddenPatterns ?? input.body_not_patterns ?? input.bodyNotPatterns ?? input.body_forbidden_patterns ?? input.bodyForbiddenPatterns,
+    `${label}.request_body_not_patterns`
+  );
+  validateRegexPatterns(requestBodyNotPatterns, `${label}.request_body_not_patterns`);
+  return {
     capture_request_body: input.capture_request_body === true || input.captureRequestBody === true || Boolean(requestBodyContains?.length) || Boolean(requestBodyPatterns?.length) || Boolean(requestBodyNotContains?.length) || Boolean(requestBodyNotPatterns?.length),
     request_body_contains: requestBodyContains,
     request_body_patterns: requestBodyPatterns,
@@ -7173,20 +7194,33 @@ function normalizeNetworkMockResponsePayload(input, label, defaults = {}) {
   }
   const body = stringValue2(input.body) ?? stringValue2(input.body_text) ?? stringValue2(input.bodyText) ?? defaults.body;
   const hasJsonBody = Object.prototype.hasOwnProperty.call(input, "body_json") || Object.prototype.hasOwnProperty.call(input, "bodyJson") || Object.prototype.hasOwnProperty.call(input, "json");
+  const requestBody = normalizeNetworkMockRequestBodyConstraints(input, label);
   return {
     label: stringValue2(input.label) || stringValue2(input.name) || defaults.label,
     status,
     content_type: stringValue2(input.content_type) || stringValue2(input.contentType) || defaults.content_type,
     headers: stringRecord(input.headers) || defaults.headers,
     body,
-    body_json: hasJsonBody ? toJsonValue(input.body_json ?? input.bodyJson ?? input.json) : defaults.body_json
+    body_json: hasJsonBody ? toJsonValue(input.body_json ?? input.bodyJson ?? input.json) : defaults.body_json,
+    capture_request_body: requestBody.capture_request_body,
+    request_body_contains: requestBody.request_body_contains,
+    request_body_patterns: requestBody.request_body_patterns,
+    request_body_not_contains: requestBody.request_body_not_contains,
+    request_body_not_patterns: requestBody.request_body_not_patterns
   };
 }
 function normalizeNetworkMockResponses(value, mockIndex, defaults) {
   if (value === void 0) return void 0;
   if (!Array.isArray(value)) throw new Error(`target.network_mocks[${mockIndex}].responses must be an array.`);
   if (!value.length) throw new Error(`target.network_mocks[${mockIndex}].responses must not be empty.`);
-  const responseDefaults = { ...defaults, label: void 0 };
+  const responseDefaults = {
+    label: void 0,
+    status: defaults.status,
+    content_type: defaults.content_type,
+    headers: defaults.headers,
+    body: defaults.body,
+    body_json: defaults.body_json
+  };
   return value.map((response, responseIndex) => {
     if (!isRecord(response)) {
       throw new Error(`target.network_mocks[${mockIndex}].responses[${responseIndex}] must be an object.`);
@@ -7929,6 +7963,9 @@ function assessNetworkMocksFromEvidence(profile, evidence) {
     if (event.request_body_matches === false) {
       failed.push({
         label: event.label ?? null,
+        response_label: event.response_label ?? null,
+        hit_index: event.hit_index ?? null,
+        response_index: event.response_index ?? null,
         url: event.url ?? null,
         method: event.method ?? null,
         reason: "request_body_mismatch",
@@ -8296,6 +8333,9 @@ function assessProfile(profile, evidence) {
       if (event && event.request_body_matches === false) {
         failed.push({
           label: event.label || null,
+          response_label: event.response_label || null,
+          hit_index: event.hit_index ?? null,
+          response_index: event.response_index ?? null,
           url: event.url || null,
           method: event.method || null,
           reason: "request_body_mismatch",
@@ -8760,20 +8800,21 @@ function compactNetworkMockRequestBody(value) {
 function networkMockStringList(value) {
   return Array.isArray(value) ? value.map((item) => String(item)).filter(Boolean) : [];
 }
-function networkMockShouldCaptureRequestBody(mock) {
-  return mock && (
-    mock.capture_request_body === true
-    || networkMockStringList(mock.request_body_contains).length > 0
-    || networkMockStringList(mock.request_body_patterns).length > 0
-    || networkMockStringList(mock.request_body_not_contains).length > 0
-    || networkMockStringList(mock.request_body_not_patterns).length > 0
-  );
+function networkMockShouldCaptureRequestBody(...sources) {
+  return sources.some((source) => source && (
+    source.capture_request_body === true
+    || networkMockStringList(source.request_body_contains).length > 0
+    || networkMockStringList(source.request_body_patterns).length > 0
+    || networkMockStringList(source.request_body_not_contains).length > 0
+    || networkMockStringList(source.request_body_not_patterns).length > 0
+  ));
 }
-function networkMockRequestBodyFailures(body, mock) {
+function networkMockRequestBodyFailuresForSource(body, source) {
   const failures = [];
+  if (!source) return failures;
   const rawBody = String(body || "");
   const compactBody = compactNetworkMockRequestBody(rawBody);
-  for (const expected of networkMockStringList(mock.request_body_contains)) {
+  for (const expected of networkMockStringList(source.request_body_contains)) {
     if (!rawBody.includes(expected) && !compactBody.includes(expected)) {
       failures.push({
         type: "request_body_missing_text",
@@ -8781,7 +8822,7 @@ function networkMockRequestBodyFailures(body, mock) {
       });
     }
   }
-  for (const pattern of networkMockStringList(mock.request_body_patterns)) {
+  for (const pattern of networkMockStringList(source.request_body_patterns)) {
     try {
       const regex = new RegExp(pattern);
       if (!regex.test(rawBody) && !regex.test(compactBody)) {
@@ -8798,7 +8839,7 @@ function networkMockRequestBodyFailures(body, mock) {
       });
     }
   }
-  for (const forbidden of networkMockStringList(mock.request_body_not_contains)) {
+  for (const forbidden of networkMockStringList(source.request_body_not_contains)) {
     if (rawBody.includes(forbidden) || compactBody.includes(forbidden)) {
       failures.push({
         type: "request_body_forbidden_text",
@@ -8806,7 +8847,7 @@ function networkMockRequestBodyFailures(body, mock) {
       });
     }
   }
-  for (const pattern of networkMockStringList(mock.request_body_not_patterns)) {
+  for (const pattern of networkMockStringList(source.request_body_not_patterns)) {
     try {
       const regex = new RegExp(pattern);
       if (regex.test(rawBody) || regex.test(compactBody)) {
@@ -8825,6 +8866,9 @@ function networkMockRequestBodyFailures(body, mock) {
   }
   return failures;
 }
+function networkMockRequestBodyFailures(body, ...sources) {
+  return sources.flatMap((source) => networkMockRequestBodyFailuresForSource(body, source));
+}
 async function setupLocatorVisible(locator, index) {
   return await locator.nth(index).isVisible({ timeout: 1000 }).catch(() => false);
 }
@@ -8853,9 +8897,10 @@ async function registerNetworkMocks(mocks) {
           body = JSON.stringify(response.body_json);
           contentType = response.content_type || headers["content-type"] || headers["Content-Type"] || "application/json";
         }
-        const shouldCaptureRequestBody = networkMockShouldCaptureRequestBody(mock);
+        const responseBodyContract = responseIndex === null ? null : response;
+        const shouldCaptureRequestBody = networkMockShouldCaptureRequestBody(mock, responseBodyContract);
         const requestBody = shouldCaptureRequestBody && request.postData ? request.postData() || "" : "";
-        const requestBodyFailures = shouldCaptureRequestBody ? networkMockRequestBodyFailures(requestBody, mock) : [];
+        const requestBodyFailures = shouldCaptureRequestBody ? networkMockRequestBodyFailures(requestBody, mock, responseBodyContract) : [];
         const status = response.status || mock.status || 200;
         const event = {
           ok: true,
@@ -8973,6 +9018,19 @@ async function executeSetupAction(action, ordinal) {
       await locator.nth(targetIndex).fill(value, { timeout });
       return { ...base, ok: true, count, target_index: targetIndex, value_length: value.length };
     }
+    if (type === "assert_selector_count") {
+      const locator = page.locator(action.selector);
+      const expectedCount = setupNumber(action.expected_count, -1);
+      if (!Number.isInteger(expectedCount) || expectedCount < 0) return { ...base, reason: "invalid_expected_count", expected_count: action.expected_count };
+      const startedAt = Date.now();
+      let count = 0;
+      while (Date.now() - startedAt <= timeout) {
+        count = await locator.count().catch(() => 0);
+        if (count === expectedCount) return { ...base, ok: true, count, expected_count: expectedCount, timeout_ms: timeout };
+        await page.waitForTimeout(100);
+      }
+      return { ...base, reason: "selector_count_mismatch", count, expected_count: expectedCount, timeout_ms: timeout };
+    }
     if (type === "wait_for_text") {
       const locator = page.locator(action.selector);
       const startedAt = Date.now();
@@ -8990,6 +9048,47 @@ async function executeSetupAction(action, ordinal) {
       }
       return { ...base, reason: "text_not_found", text: compactSetupResultText(lastText), timeout_ms: timeout };
     }
+    if (type === "assert_text_visible" || type === "assert_text_absent") {
+      const locator = page.locator(action.selector);
+      const startedAt = Date.now();
+      let lastText = "";
+      let matchedText = "";
+      let hiddenMatch = false;
+      while (Date.now() - startedAt <= timeout) {
+        const count = await locator.count().catch(() => 0);
+        let matched = false;
+        matchedText = "";
+        hiddenMatch = false;
+        for (let index = 0; index < count; index += 1) {
+          const text = await setupLocatorText(locator, index);
+          lastText = text || lastText;
+          if (setupTextMatches(text, action)) {
+            matched = true;
+            matchedText = text;
+            if (type === "assert_text_visible") {
+              const visible = await setupLocatorVisible(locator, index);
+              if (visible) {
+                return { ...base, ok: true, count, text: compactSetupResultText(text), target_index: index, timeout_ms: timeout };
+              }
+              hiddenMatch = true;
+              break;
+            }
+            break;
+          }
+        }
+        if (type === "assert_text_absent" && !matched) {
+          return { ...base, ok: true, count, timeout_ms: timeout };
+        }
+        await page.waitForTimeout(100);
+      }
+      if (type === "assert_text_visible") {
+        if (hiddenMatch) {
+          return { ...base, reason: "matching_element_not_visible", text: compactSetupResultText(matchedText), timeout_ms: timeout };
+        }
+        return { ...base, reason: "text_not_found", text: compactSetupResultText(lastText), timeout_ms: timeout };
+      }
+      return { ...base, reason: "text_still_present", text: compactSetupResultText(matchedText || lastText), timeout_ms: timeout };
+    }
     return { ...base, reason: "unsupported_action" };
   } catch (error) {
     return { ...base, error: String(error && error.message ? error.message : error).slice(0, 1000) };

package/dist/cli.js

@@ -10,7 +10,7 @@ import {
   profileStatusExitCode,
   resolveRiddleProofProfileTargetUrl,
   resolveRiddleProofProfileTimeoutSec
-} from "./chunk-WSZ5AVKX.js";
+} from "./chunk-V2KNQTQD.js";
 import {
   createRiddleApiClient,
   parseRiddleViewport