@riddledc/riddle-proof 0.7.94 → 0.7.95

package/README.md

@@ -479,6 +479,8 @@ artifact links should fail the profile:
   "expected_count": 88,
   "same_origin_only": true,
   "require_nonzero_bytes": true,
+  "min_bytes": 32,
+  "allowed_content_types": ["image/*", "application/json"],
   "max_links": 150
 }
 ```
@@ -486,9 +488,12 @@ artifact links should fail the profile:
 The check defaults to `a[href]`, deduplicates URLs, probes up to 100 selected
 URLs, and treats HTTP `2xx` / `3xx` responses as healthy. Use
 `allowed_statuses` or `expected_status` when a narrower status contract is
-intentional, `min_count` for lower-bound audits, and `max_links` when the
-selected set is intentionally larger than 100. `artifact_link_status` is an
-alias with the same behavior for profiles that want artifact-specific wording.
+intentional, `min_count` for lower-bound audits, `min_bytes` when a one-byte
+range response is too weak, `allowed_content_types` for MIME checks, and
+`max_links` when the selected set is intentionally larger than 100.
+`allowed_content_types` accepts exact types and family wildcards such as
+`image/*`. `artifact_link_status` is an alias with the same behavior for
+profiles that want artifact-specific wording.
 
 Use the `route_inventory` check for source-page route coverage audits where a
 navigation surface must expose a known set of routes and each route must load

package/dist/{chunk-FQ4QBY2N.js → chunk-5OCJKEHE.js}

@@ -785,6 +785,12 @@ function normalizeCheck(input, index) {
     `checks[${index}] allowed_statuses`
   ) : void 0;
   const maxLinks = isLinkStatusCheck ? normalizePositiveInteger(input.max_links ?? input.maxLinks ?? input.limit, `checks[${index}] max_links`, 500) : void 0;
+  const minBytes = isLinkStatusCheck ? normalizePositiveInteger(input.min_bytes ?? input.minBytes ?? input.min_response_bytes ?? input.minResponseBytes, `checks[${index}] min_bytes`) : void 0;
+  const expectedContentType = isLinkStatusCheck ? stringValue(input.expected_content_type) || stringValue(input.expectedContentType) || stringValue(input.content_type) || stringValue(input.contentType) : void 0;
+  const allowedContentTypes = isLinkStatusCheck ? normalizeStringList(
+    input.allowed_content_types ?? input.allowedContentTypes ?? input.expected_content_types ?? input.expectedContentTypes,
+    `checks[${index}] allowed_content_types`
+  ) ?? (expectedContentType ? [expectedContentType] : void 0) : void 0;
   if (isLinkStatusCheck) {
     if (minCount !== void 0 && (!Number.isInteger(minCount) || minCount < 0)) {
       throw new Error(`checks[${index}] ${type} min_count must be a non-negative integer.`);
@@ -826,6 +832,8 @@ function normalizeCheck(input, index) {
     same_origin_only: isLinkStatusCheck ? input.same_origin_only === true || input.sameOriginOnly === true : void 0,
     dedupe: isLinkStatusCheck ? input.dedupe === false ? false : true : void 0,
     require_nonzero_bytes: isLinkStatusCheck ? input.require_nonzero_bytes === true || input.requireNonzeroBytes === true : void 0,
+    min_bytes: minBytes,
+    allowed_content_types: allowedContentTypes,
     allow_get_fallback: isLinkStatusCheck ? input.allow_get_fallback === false || input.allowGetFallback === false ? false : true : void 0,
     max_overflow_px: numberValue(input.max_overflow_px),
     timeout_ms: numberValue(input.timeout_ms) ?? numberValue(input.timeoutMs),
@@ -932,15 +940,40 @@ function linkStatusIsAllowed(status, check) {
   const allowed = linkStatusAllowedStatuses(check);
   return allowed?.length ? allowed.includes(status) : status >= 200 && status < 400;
 }
+function linkStatusObservedBytes(result) {
+  const bytes = numberValue(result.bytes);
+  const contentLength = numberValue(result.content_length);
+  return Math.max(bytes ?? 0, contentLength ?? 0) || void 0;
+}
+function normalizeLinkStatusContentType(value) {
+  const normalized = value?.split(";")[0]?.trim().toLowerCase();
+  return normalized || void 0;
+}
+function linkStatusContentTypeOk(result, check) {
+  const expected = check.allowed_content_types;
+  if (!expected?.length) return true;
+  const actual = normalizeLinkStatusContentType(stringValue(result.content_type));
+  if (!actual) return false;
+  return expected.some((contentType) => {
+    const normalized = normalizeLinkStatusContentType(contentType);
+    if (!normalized) return false;
+    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
+    return actual === normalized;
+  });
+}
 function linkStatusResultOk(result, check) {
   const status = numberValue(result.status);
   if (!linkStatusIsAllowed(status, check)) return false;
   if (stringValue(result.error)) return false;
   if (result.ok === false) return false;
+  if (!linkStatusContentTypeOk(result, check)) return false;
   if (check.require_nonzero_bytes) {
-    const bytes = numberValue(result.bytes);
-    const contentLength = numberValue(result.content_length);
-    return bytes !== void 0 && bytes > 0 || contentLength !== void 0 && contentLength > 0;
+    const observedBytes = linkStatusObservedBytes(result);
+    if (observedBytes === void 0 || observedBytes <= 0) return false;
+  }
+  if (check.min_bytes !== void 0) {
+    const observedBytes = linkStatusObservedBytes(result);
+    if (observedBytes === void 0 || observedBytes < check.min_bytes) return false;
   }
   return true;
 }
@@ -969,7 +1002,10 @@ function summarizeLinkStatusEvidence(viewport, check) {
     status: numberValue(result.status) ?? null,
     method: stringValue(result.method) ?? null,
     error: stringValue(result.error) ?? null,
-    bytes: numberValue(result.bytes) ?? numberValue(result.content_length) ?? null
+    content_type: stringValue(result.content_type) ?? null,
+    bytes: linkStatusObservedBytes(result) ?? null,
+    min_bytes: check.min_bytes ?? null,
+    allowed_content_types: check.allowed_content_types ?? null
   }));
   if (stringValue(linkEvidence.error)) {
     failures.push({ code: "link_status_capture_failed", error: stringValue(linkEvidence.error) ?? "" });
@@ -1006,6 +1042,8 @@ function summarizeLinkStatusEvidence(viewport, check) {
     failed_count: failures.length,
     truncated: linkEvidence.truncated === true,
     max_links: numberValue(linkEvidence.max_links) ?? check.max_links ?? 100,
+    min_bytes: check.min_bytes ?? null,
+    allowed_content_types: check.allowed_content_types ?? null,
     status_counts: statusCounts,
     failures: failures.slice(0, 20)
   };
@@ -1534,6 +1572,8 @@ function assessCheckFromEvidence(check, evidence) {
         min_count: check.min_count ?? null,
         allowed_statuses: linkStatusAllowedStatuses(check) || ["2xx", "3xx"],
         require_nonzero_bytes: check.require_nonzero_bytes === true,
+        min_bytes: check.min_bytes ?? null,
+        allowed_content_types: check.allowed_content_types ?? null,
         viewports: summaries.map((summary) => toJsonValue(summary)),
         failures: failed.flatMap((summary) => Array.isArray(summary.failures) ? summary.failures.map((failure) => toJsonValue({ viewport: stringValue(summary.viewport) ?? null, failure })) : [])
       },
@@ -2137,15 +2177,41 @@ function linkStatusIsAllowed(status, check) {
   const allowed = linkStatusAllowedStatuses(check);
   return Array.isArray(allowed) && allowed.length ? allowed.includes(status) : status >= 200 && status < 400;
 }
+function linkStatusObservedBytes(result) {
+  const bytes = typeof result.bytes === "number" && Number.isFinite(result.bytes) ? result.bytes : undefined;
+  const contentLength = typeof result.content_length === "number" && Number.isFinite(result.content_length) ? result.content_length : undefined;
+  const observed = Math.max(bytes || 0, contentLength || 0);
+  return observed > 0 ? observed : undefined;
+}
+function normalizeLinkStatusContentType(value) {
+  if (typeof value !== "string") return undefined;
+  const normalized = (value.split(";")[0] || "").trim().toLowerCase();
+  return normalized || undefined;
+}
+function linkStatusContentTypeOk(result, check) {
+  if (!Array.isArray(check.allowed_content_types) || !check.allowed_content_types.length) return true;
+  const actual = normalizeLinkStatusContentType(result.content_type);
+  if (!actual) return false;
+  return check.allowed_content_types.some((contentType) => {
+    const normalized = normalizeLinkStatusContentType(contentType);
+    if (!normalized) return false;
+    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
+    return actual === normalized;
+  });
+}
 function linkStatusResultOk(result, check) {
   if (!result || typeof result !== "object" || Array.isArray(result)) return false;
   if (!linkStatusIsAllowed(result.status, check)) return false;
   if (typeof result.error === "string" && result.error.trim()) return false;
   if (result.ok === false) return false;
+  if (!linkStatusContentTypeOk(result, check)) return false;
   if (check.require_nonzero_bytes === true) {
-    const bytes = typeof result.bytes === "number" && Number.isFinite(result.bytes) ? result.bytes : undefined;
-    const contentLength = typeof result.content_length === "number" && Number.isFinite(result.content_length) ? result.content_length : undefined;
-    return (bytes !== undefined && bytes > 0) || (contentLength !== undefined && contentLength > 0);
+    const observedBytes = linkStatusObservedBytes(result);
+    if (observedBytes === undefined || observedBytes <= 0) return false;
+  }
+  if (typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) {
+    const observedBytes = linkStatusObservedBytes(result);
+    if (observedBytes === undefined || observedBytes < check.min_bytes) return false;
   }
   return true;
 }
@@ -2173,11 +2239,10 @@ function summarizeLinkStatusEvidence(viewport, check) {
       status: typeof result.status === "number" && Number.isFinite(result.status) ? result.status : null,
       method: typeof result.method === "string" ? result.method : null,
       error: typeof result.error === "string" ? result.error : null,
-      bytes: typeof result.bytes === "number" && Number.isFinite(result.bytes)
-        ? result.bytes
-        : typeof result.content_length === "number" && Number.isFinite(result.content_length)
-          ? result.content_length
-          : null,
+      content_type: typeof result.content_type === "string" ? result.content_type : null,
+      bytes: linkStatusObservedBytes(result) ?? null,
+      min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
+      allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
     }));
   if (typeof linkEvidence.error === "string" && linkEvidence.error.trim()) {
     failures.push({ code: "link_status_capture_failed", error: linkEvidence.error });
@@ -2212,6 +2277,8 @@ function summarizeLinkStatusEvidence(viewport, check) {
     failed_count: failures.length,
     truncated: linkEvidence.truncated === true,
     max_links: typeof linkEvidence.max_links === "number" ? linkEvidence.max_links : check.max_links || 100,
+    min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
+    allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
     status_counts: linkEvidence.status_counts && typeof linkEvidence.status_counts === "object" && !Array.isArray(linkEvidence.status_counts) ? linkEvidence.status_counts : {},
     failures: failures.slice(0, 20),
   };
@@ -2908,6 +2975,8 @@ function assessProfile(profile, evidence) {
           min_count: check.min_count ?? null,
           allowed_statuses: linkStatusAllowedStatuses(check) || ["2xx", "3xx"],
           require_nonzero_bytes: check.require_nonzero_bytes === true,
+          min_bytes: check.min_bytes ?? null,
+          allowed_content_types: check.allowed_content_types ?? null,
           viewports: summaries,
           failures: failed.flatMap((summary) => Array.isArray(summary.failures)
             ? summary.failures.map((failure) => ({ viewport: summary.viewport || null, failure }))
@@ -4055,6 +4124,28 @@ function linkProbeAllowed(status, check) {
       : null;
   return allowed ? allowed.includes(status) : status >= 200 && status < 400;
 }
+function linkProbeObservedBytes(result) {
+  const bytes = typeof result.bytes === "number" && Number.isFinite(result.bytes) ? result.bytes : undefined;
+  const contentLength = typeof result.content_length === "number" && Number.isFinite(result.content_length) ? result.content_length : undefined;
+  const observed = Math.max(bytes || 0, contentLength || 0);
+  return observed > 0 ? observed : undefined;
+}
+function normalizeLinkProbeContentType(value) {
+  if (typeof value !== "string") return undefined;
+  const normalized = (value.split(";")[0] || "").trim().toLowerCase();
+  return normalized || undefined;
+}
+function linkProbeContentTypeAllowed(result, check) {
+  if (!Array.isArray(check.allowed_content_types) || !check.allowed_content_types.length) return true;
+  const actual = normalizeLinkProbeContentType(result.content_type);
+  if (!actual) return false;
+  return check.allowed_content_types.some((contentType) => {
+    const normalized = normalizeLinkProbeContentType(contentType);
+    if (!normalized) return false;
+    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
+    return actual === normalized;
+  });
+}
 function linkProbeResponseFields(response, method) {
   const contentLengthHeader = response.headers && typeof response.headers.get === "function" ? response.headers.get("content-length") : null;
   const contentLength = contentLengthHeader && /^\d+$/.test(contentLengthHeader) ? Number(contentLengthHeader) : null;
@@ -4069,6 +4160,7 @@ function linkProbeResponseFields(response, method) {
 }
 async function probeLinkStatus(candidate, check) {
   const requireNonzeroBytes = check.require_nonzero_bytes === true;
+  const minBytes = typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? Math.max(1, Math.floor(check.min_bytes)) : null;
   const allowGetFallback = check.allow_get_fallback !== false;
   const result = {
     url: candidate.url,
@@ -4086,7 +4178,7 @@ async function probeLinkStatus(candidate, check) {
   };
   const applyResponse = async (response, method, readBytes) => {
     Object.assign(result, linkProbeResponseFields(response, method));
-    if (readBytes || requireNonzeroBytes) {
+    if (readBytes) {
       try {
         const buffer = await response.arrayBuffer();
         result.bytes = buffer.byteLength;
@@ -4095,7 +4187,9 @@ async function probeLinkStatus(candidate, check) {
       }
     }
     result.ok = linkProbeAllowed(result.status, check)
-      && (!requireNonzeroBytes || (typeof result.bytes === "number" ? result.bytes > 0 : typeof result.content_length === "number" && result.content_length > 0))
+      && linkProbeContentTypeAllowed(result, check)
+      && (!requireNonzeroBytes || ((linkProbeObservedBytes(result) || 0) > 0))
+      && (minBytes === null || ((linkProbeObservedBytes(result) || 0) >= minBytes))
       && !result.error;
   };
   try {
@@ -4112,9 +4206,9 @@ async function probeLinkStatus(candidate, check) {
       method: "GET",
       redirect: "follow",
       cache: "no-store",
-      headers: { Range: "bytes=0-0" },
+      headers: { Range: "bytes=0-" + String((minBytes || 1) - 1) },
     });
-    await applyResponse(response, "GET", requireNonzeroBytes);
+    await applyResponse(response, "GET", requireNonzeroBytes || minBytes !== null);
     return result;
   } catch (error) {
     result.error = String(error && error.message ? error.message : error).slice(0, 500);
@@ -4168,7 +4262,10 @@ async function collectLinkStatus(check) {
     status: result.status,
     method: result.method,
     error: result.error,
-    bytes: result.bytes == null ? result.content_length : result.bytes,
+    content_type: result.content_type,
+    bytes: linkProbeObservedBytes(result) || null,
+    min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
+    allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
   }));
   const statusCounts = {};
   for (const result of results) {
@@ -4182,6 +4279,8 @@ async function collectLinkStatus(check) {
     same_origin_only: linkProbeSameOriginOnly(check),
     dedupe: linkProbeDedupe(check),
     require_nonzero_bytes: check.require_nonzero_bytes === true,
+    min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
+    allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
     allowed_statuses: Array.isArray(check.allowed_statuses) && check.allowed_statuses.length
       ? check.allowed_statuses
       : typeof check.expected_status === "number"

package/dist/cli.cjs

@@ -7678,6 +7678,12 @@ function normalizeCheck(input, index) {
     `checks[${index}] allowed_statuses`
   ) : void 0;
   const maxLinks = isLinkStatusCheck ? normalizePositiveInteger(input.max_links ?? input.maxLinks ?? input.limit, `checks[${index}] max_links`, 500) : void 0;
+  const minBytes = isLinkStatusCheck ? normalizePositiveInteger(input.min_bytes ?? input.minBytes ?? input.min_response_bytes ?? input.minResponseBytes, `checks[${index}] min_bytes`) : void 0;
+  const expectedContentType = isLinkStatusCheck ? stringValue2(input.expected_content_type) || stringValue2(input.expectedContentType) || stringValue2(input.content_type) || stringValue2(input.contentType) : void 0;
+  const allowedContentTypes = isLinkStatusCheck ? normalizeStringList(
+    input.allowed_content_types ?? input.allowedContentTypes ?? input.expected_content_types ?? input.expectedContentTypes,
+    `checks[${index}] allowed_content_types`
+  ) ?? (expectedContentType ? [expectedContentType] : void 0) : void 0;
   if (isLinkStatusCheck) {
     if (minCount !== void 0 && (!Number.isInteger(minCount) || minCount < 0)) {
       throw new Error(`checks[${index}] ${type} min_count must be a non-negative integer.`);
@@ -7719,6 +7725,8 @@ function normalizeCheck(input, index) {
     same_origin_only: isLinkStatusCheck ? input.same_origin_only === true || input.sameOriginOnly === true : void 0,
     dedupe: isLinkStatusCheck ? input.dedupe === false ? false : true : void 0,
     require_nonzero_bytes: isLinkStatusCheck ? input.require_nonzero_bytes === true || input.requireNonzeroBytes === true : void 0,
+    min_bytes: minBytes,
+    allowed_content_types: allowedContentTypes,
     allow_get_fallback: isLinkStatusCheck ? input.allow_get_fallback === false || input.allowGetFallback === false ? false : true : void 0,
     max_overflow_px: numberValue(input.max_overflow_px),
     timeout_ms: numberValue(input.timeout_ms) ?? numberValue(input.timeoutMs),
@@ -7825,15 +7833,40 @@ function linkStatusIsAllowed(status, check) {
   const allowed = linkStatusAllowedStatuses(check);
   return allowed?.length ? allowed.includes(status) : status >= 200 && status < 400;
 }
+function linkStatusObservedBytes(result) {
+  const bytes = numberValue(result.bytes);
+  const contentLength = numberValue(result.content_length);
+  return Math.max(bytes ?? 0, contentLength ?? 0) || void 0;
+}
+function normalizeLinkStatusContentType(value) {
+  const normalized = value?.split(";")[0]?.trim().toLowerCase();
+  return normalized || void 0;
+}
+function linkStatusContentTypeOk(result, check) {
+  const expected = check.allowed_content_types;
+  if (!expected?.length) return true;
+  const actual = normalizeLinkStatusContentType(stringValue2(result.content_type));
+  if (!actual) return false;
+  return expected.some((contentType) => {
+    const normalized = normalizeLinkStatusContentType(contentType);
+    if (!normalized) return false;
+    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
+    return actual === normalized;
+  });
+}
 function linkStatusResultOk(result, check) {
   const status = numberValue(result.status);
   if (!linkStatusIsAllowed(status, check)) return false;
   if (stringValue2(result.error)) return false;
   if (result.ok === false) return false;
+  if (!linkStatusContentTypeOk(result, check)) return false;
   if (check.require_nonzero_bytes) {
-    const bytes = numberValue(result.bytes);
-    const contentLength = numberValue(result.content_length);
-    return bytes !== void 0 && bytes > 0 || contentLength !== void 0 && contentLength > 0;
+    const observedBytes = linkStatusObservedBytes(result);
+    if (observedBytes === void 0 || observedBytes <= 0) return false;
+  }
+  if (check.min_bytes !== void 0) {
+    const observedBytes = linkStatusObservedBytes(result);
+    if (observedBytes === void 0 || observedBytes < check.min_bytes) return false;
   }
   return true;
 }
@@ -7862,7 +7895,10 @@ function summarizeLinkStatusEvidence(viewport, check) {
     status: numberValue(result.status) ?? null,
     method: stringValue2(result.method) ?? null,
     error: stringValue2(result.error) ?? null,
-    bytes: numberValue(result.bytes) ?? numberValue(result.content_length) ?? null
+    content_type: stringValue2(result.content_type) ?? null,
+    bytes: linkStatusObservedBytes(result) ?? null,
+    min_bytes: check.min_bytes ?? null,
+    allowed_content_types: check.allowed_content_types ?? null
   }));
   if (stringValue2(linkEvidence.error)) {
     failures.push({ code: "link_status_capture_failed", error: stringValue2(linkEvidence.error) ?? "" });
@@ -7899,6 +7935,8 @@ function summarizeLinkStatusEvidence(viewport, check) {
     failed_count: failures.length,
     truncated: linkEvidence.truncated === true,
     max_links: numberValue(linkEvidence.max_links) ?? check.max_links ?? 100,
+    min_bytes: check.min_bytes ?? null,
+    allowed_content_types: check.allowed_content_types ?? null,
     status_counts: statusCounts,
     failures: failures.slice(0, 20)
   };
@@ -8427,6 +8465,8 @@ function assessCheckFromEvidence(check, evidence) {
         min_count: check.min_count ?? null,
         allowed_statuses: linkStatusAllowedStatuses(check) || ["2xx", "3xx"],
         require_nonzero_bytes: check.require_nonzero_bytes === true,
+        min_bytes: check.min_bytes ?? null,
+        allowed_content_types: check.allowed_content_types ?? null,
         viewports: summaries.map((summary) => toJsonValue(summary)),
         failures: failed.flatMap((summary) => Array.isArray(summary.failures) ? summary.failures.map((failure) => toJsonValue({ viewport: stringValue2(summary.viewport) ?? null, failure })) : [])
       },
@@ -9014,15 +9054,41 @@ function linkStatusIsAllowed(status, check) {
   const allowed = linkStatusAllowedStatuses(check);
   return Array.isArray(allowed) && allowed.length ? allowed.includes(status) : status >= 200 && status < 400;
 }
+function linkStatusObservedBytes(result) {
+  const bytes = typeof result.bytes === "number" && Number.isFinite(result.bytes) ? result.bytes : undefined;
+  const contentLength = typeof result.content_length === "number" && Number.isFinite(result.content_length) ? result.content_length : undefined;
+  const observed = Math.max(bytes || 0, contentLength || 0);
+  return observed > 0 ? observed : undefined;
+}
+function normalizeLinkStatusContentType(value) {
+  if (typeof value !== "string") return undefined;
+  const normalized = (value.split(";")[0] || "").trim().toLowerCase();
+  return normalized || undefined;
+}
+function linkStatusContentTypeOk(result, check) {
+  if (!Array.isArray(check.allowed_content_types) || !check.allowed_content_types.length) return true;
+  const actual = normalizeLinkStatusContentType(result.content_type);
+  if (!actual) return false;
+  return check.allowed_content_types.some((contentType) => {
+    const normalized = normalizeLinkStatusContentType(contentType);
+    if (!normalized) return false;
+    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
+    return actual === normalized;
+  });
+}
 function linkStatusResultOk(result, check) {
   if (!result || typeof result !== "object" || Array.isArray(result)) return false;
   if (!linkStatusIsAllowed(result.status, check)) return false;
   if (typeof result.error === "string" && result.error.trim()) return false;
   if (result.ok === false) return false;
+  if (!linkStatusContentTypeOk(result, check)) return false;
   if (check.require_nonzero_bytes === true) {
-    const bytes = typeof result.bytes === "number" && Number.isFinite(result.bytes) ? result.bytes : undefined;
-    const contentLength = typeof result.content_length === "number" && Number.isFinite(result.content_length) ? result.content_length : undefined;
-    return (bytes !== undefined && bytes > 0) || (contentLength !== undefined && contentLength > 0);
+    const observedBytes = linkStatusObservedBytes(result);
+    if (observedBytes === undefined || observedBytes <= 0) return false;
+  }
+  if (typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) {
+    const observedBytes = linkStatusObservedBytes(result);
+    if (observedBytes === undefined || observedBytes < check.min_bytes) return false;
   }
   return true;
 }
@@ -9050,11 +9116,10 @@ function summarizeLinkStatusEvidence(viewport, check) {
       status: typeof result.status === "number" && Number.isFinite(result.status) ? result.status : null,
       method: typeof result.method === "string" ? result.method : null,
       error: typeof result.error === "string" ? result.error : null,
-      bytes: typeof result.bytes === "number" && Number.isFinite(result.bytes)
-        ? result.bytes
-        : typeof result.content_length === "number" && Number.isFinite(result.content_length)
-          ? result.content_length
-          : null,
+      content_type: typeof result.content_type === "string" ? result.content_type : null,
+      bytes: linkStatusObservedBytes(result) ?? null,
+      min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
+      allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
     }));
   if (typeof linkEvidence.error === "string" && linkEvidence.error.trim()) {
     failures.push({ code: "link_status_capture_failed", error: linkEvidence.error });
@@ -9089,6 +9154,8 @@ function summarizeLinkStatusEvidence(viewport, check) {
     failed_count: failures.length,
     truncated: linkEvidence.truncated === true,
     max_links: typeof linkEvidence.max_links === "number" ? linkEvidence.max_links : check.max_links || 100,
+    min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
+    allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
     status_counts: linkEvidence.status_counts && typeof linkEvidence.status_counts === "object" && !Array.isArray(linkEvidence.status_counts) ? linkEvidence.status_counts : {},
     failures: failures.slice(0, 20),
   };
@@ -9785,6 +9852,8 @@ function assessProfile(profile, evidence) {
           min_count: check.min_count ?? null,
           allowed_statuses: linkStatusAllowedStatuses(check) || ["2xx", "3xx"],
           require_nonzero_bytes: check.require_nonzero_bytes === true,
+          min_bytes: check.min_bytes ?? null,
+          allowed_content_types: check.allowed_content_types ?? null,
           viewports: summaries,
           failures: failed.flatMap((summary) => Array.isArray(summary.failures)
             ? summary.failures.map((failure) => ({ viewport: summary.viewport || null, failure }))
@@ -10932,6 +11001,28 @@ function linkProbeAllowed(status, check) {
       : null;
   return allowed ? allowed.includes(status) : status >= 200 && status < 400;
 }
+function linkProbeObservedBytes(result) {
+  const bytes = typeof result.bytes === "number" && Number.isFinite(result.bytes) ? result.bytes : undefined;
+  const contentLength = typeof result.content_length === "number" && Number.isFinite(result.content_length) ? result.content_length : undefined;
+  const observed = Math.max(bytes || 0, contentLength || 0);
+  return observed > 0 ? observed : undefined;
+}
+function normalizeLinkProbeContentType(value) {
+  if (typeof value !== "string") return undefined;
+  const normalized = (value.split(";")[0] || "").trim().toLowerCase();
+  return normalized || undefined;
+}
+function linkProbeContentTypeAllowed(result, check) {
+  if (!Array.isArray(check.allowed_content_types) || !check.allowed_content_types.length) return true;
+  const actual = normalizeLinkProbeContentType(result.content_type);
+  if (!actual) return false;
+  return check.allowed_content_types.some((contentType) => {
+    const normalized = normalizeLinkProbeContentType(contentType);
+    if (!normalized) return false;
+    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
+    return actual === normalized;
+  });
+}
 function linkProbeResponseFields(response, method) {
   const contentLengthHeader = response.headers && typeof response.headers.get === "function" ? response.headers.get("content-length") : null;
   const contentLength = contentLengthHeader && /^\d+$/.test(contentLengthHeader) ? Number(contentLengthHeader) : null;
@@ -10946,6 +11037,7 @@ function linkProbeResponseFields(response, method) {
 }
 async function probeLinkStatus(candidate, check) {
   const requireNonzeroBytes = check.require_nonzero_bytes === true;
+  const minBytes = typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? Math.max(1, Math.floor(check.min_bytes)) : null;
   const allowGetFallback = check.allow_get_fallback !== false;
   const result = {
     url: candidate.url,
@@ -10963,7 +11055,7 @@ async function probeLinkStatus(candidate, check) {
   };
   const applyResponse = async (response, method, readBytes) => {
     Object.assign(result, linkProbeResponseFields(response, method));
-    if (readBytes || requireNonzeroBytes) {
+    if (readBytes) {
       try {
         const buffer = await response.arrayBuffer();
         result.bytes = buffer.byteLength;
@@ -10972,7 +11064,9 @@ async function probeLinkStatus(candidate, check) {
       }
     }
     result.ok = linkProbeAllowed(result.status, check)
-      && (!requireNonzeroBytes || (typeof result.bytes === "number" ? result.bytes > 0 : typeof result.content_length === "number" && result.content_length > 0))
+      && linkProbeContentTypeAllowed(result, check)
+      && (!requireNonzeroBytes || ((linkProbeObservedBytes(result) || 0) > 0))
+      && (minBytes === null || ((linkProbeObservedBytes(result) || 0) >= minBytes))
       && !result.error;
   };
   try {
@@ -10989,9 +11083,9 @@ async function probeLinkStatus(candidate, check) {
       method: "GET",
       redirect: "follow",
       cache: "no-store",
-      headers: { Range: "bytes=0-0" },
+      headers: { Range: "bytes=0-" + String((minBytes || 1) - 1) },
     });
-    await applyResponse(response, "GET", requireNonzeroBytes);
+    await applyResponse(response, "GET", requireNonzeroBytes || minBytes !== null);
     return result;
   } catch (error) {
     result.error = String(error && error.message ? error.message : error).slice(0, 500);
@@ -11045,7 +11139,10 @@ async function collectLinkStatus(check) {
     status: result.status,
     method: result.method,
     error: result.error,
-    bytes: result.bytes == null ? result.content_length : result.bytes,
+    content_type: result.content_type,
+    bytes: linkProbeObservedBytes(result) || null,
+    min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
+    allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
   }));
   const statusCounts = {};
   for (const result of results) {
@@ -11059,6 +11156,8 @@ async function collectLinkStatus(check) {
     same_origin_only: linkProbeSameOriginOnly(check),
     dedupe: linkProbeDedupe(check),
     require_nonzero_bytes: check.require_nonzero_bytes === true,
+    min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
+    allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
     allowed_statuses: Array.isArray(check.allowed_statuses) && check.allowed_statuses.length
       ? check.allowed_statuses
       : typeof check.expected_status === "number"
@@ -12279,9 +12378,13 @@ function profileCheckMarkdownTarget(check) {
   if (check.type === "link_status" || check.type === "artifact_link_status") {
     const expectedCount = cliFiniteNumber(evidence.expected_count);
     const minCount = cliFiniteNumber(evidence.min_count);
-    if (selector && expectedCount !== void 0) return `${markdownInlineCode(selector)} links = ${expectedCount}`;
-    if (selector && minCount !== void 0) return `${markdownInlineCode(selector)} links >= ${minCount}`;
-    return selector ? markdownInlineCode(selector) : void 0;
+    const minBytes = cliFiniteNumber(evidence.min_bytes);
+    const parts = [];
+    if (expectedCount !== void 0) parts.push(`links = ${expectedCount}`);
+    else if (minCount !== void 0) parts.push(`links >= ${minCount}`);
+    if (minBytes !== void 0) parts.push(`bytes >= ${minBytes}`);
+    if (selector && parts.length) return `${markdownInlineCode(selector)} ${parts.join(", ")}`;
+    return selector ? markdownInlineCode(selector) : parts.join(", ") || void 0;
   }
   if (check.type === "no_horizontal_overflow" || check.type === "no_mobile_horizontal_overflow") {
     const maxOverflow = cliFiniteNumber(evidence.max_overflow_px);
@@ -12489,9 +12592,11 @@ function profileLinkStatusSummaryMarkdown(result) {
     const okTotal = viewports.reduce((sum, viewport) => sum + (cliFiniteNumber(viewport.ok_count) || 0), 0);
     const failedTotal = viewports.reduce((sum, viewport) => sum + (cliFiniteNumber(viewport.failed_count) || 0), 0);
     const truncatedTotal = viewports.filter((viewport) => viewport.truncated === true).length;
+    const minBytes = cliFiniteNumber(evidence.min_bytes);
+    const allowedContentTypes = Array.isArray(evidence.allowed_content_types) ? evidence.allowed_content_types.map(cliString).filter((value) => Boolean(value)) : [];
     const countText = totals.length ? totals.join("/") : "unknown";
     lines.push(
-      `- ${label}${selector ? ` ${markdownInlineCode(selector)}` : ""}: links ${countText}, ok ${okTotal}, failures ${failedTotal}${truncatedTotal ? `, truncated viewports ${truncatedTotal}` : ""}`
+      `- ${label}${selector ? ` ${markdownInlineCode(selector)}` : ""}: links ${countText}, ok ${okTotal}, failures ${failedTotal}${truncatedTotal ? `, truncated viewports ${truncatedTotal}` : ""}${minBytes !== void 0 ? `, min bytes ${minBytes}` : ""}${allowedContentTypes.length ? `, content types ${allowedContentTypes.map((value) => markdownInlineCode(value)).join(", ")}` : ""}`
     );
   }
   return lines;

package/dist/cli.js

@@ -10,7 +10,7 @@ import {
   profileStatusExitCode,
   resolveRiddleProofProfileTargetUrl,
   resolveRiddleProofProfileTimeoutSec
-} from "./chunk-FQ4QBY2N.js";
+} from "./chunk-5OCJKEHE.js";
 import {
   createRiddleApiClient,
   parseRiddleViewport
@@ -423,9 +423,13 @@ function profileCheckMarkdownTarget(check) {
   if (check.type === "link_status" || check.type === "artifact_link_status") {
     const expectedCount = cliFiniteNumber(evidence.expected_count);
     const minCount = cliFiniteNumber(evidence.min_count);
-    if (selector && expectedCount !== void 0) return `${markdownInlineCode(selector)} links = ${expectedCount}`;
-    if (selector && minCount !== void 0) return `${markdownInlineCode(selector)} links >= ${minCount}`;
-    return selector ? markdownInlineCode(selector) : void 0;
+    const minBytes = cliFiniteNumber(evidence.min_bytes);
+    const parts = [];
+    if (expectedCount !== void 0) parts.push(`links = ${expectedCount}`);
+    else if (minCount !== void 0) parts.push(`links >= ${minCount}`);
+    if (minBytes !== void 0) parts.push(`bytes >= ${minBytes}`);
+    if (selector && parts.length) return `${markdownInlineCode(selector)} ${parts.join(", ")}`;
+    return selector ? markdownInlineCode(selector) : parts.join(", ") || void 0;
   }
   if (check.type === "no_horizontal_overflow" || check.type === "no_mobile_horizontal_overflow") {
     const maxOverflow = cliFiniteNumber(evidence.max_overflow_px);
@@ -633,9 +637,11 @@ function profileLinkStatusSummaryMarkdown(result) {
     const okTotal = viewports.reduce((sum, viewport) => sum + (cliFiniteNumber(viewport.ok_count) || 0), 0);
     const failedTotal = viewports.reduce((sum, viewport) => sum + (cliFiniteNumber(viewport.failed_count) || 0), 0);
     const truncatedTotal = viewports.filter((viewport) => viewport.truncated === true).length;
+    const minBytes = cliFiniteNumber(evidence.min_bytes);
+    const allowedContentTypes = Array.isArray(evidence.allowed_content_types) ? evidence.allowed_content_types.map(cliString).filter((value) => Boolean(value)) : [];
     const countText = totals.length ? totals.join("/") : "unknown";
     lines.push(
-      `- ${label}${selector ? ` ${markdownInlineCode(selector)}` : ""}: links ${countText}, ok ${okTotal}, failures ${failedTotal}${truncatedTotal ? `, truncated viewports ${truncatedTotal}` : ""}`
+      `- ${label}${selector ? ` ${markdownInlineCode(selector)}` : ""}: links ${countText}, ok ${okTotal}, failures ${failedTotal}${truncatedTotal ? `, truncated viewports ${truncatedTotal}` : ""}${minBytes !== void 0 ? `, min bytes ${minBytes}` : ""}${allowedContentTypes.length ? `, content types ${allowedContentTypes.map((value) => markdownInlineCode(value)).join(", ")}` : ""}`
     );
   }
   return lines;

package/dist/index.cjs

@@ -9514,6 +9514,12 @@ function normalizeCheck(input, index) {
     `checks[${index}] allowed_statuses`
   ) : void 0;
   const maxLinks = isLinkStatusCheck ? normalizePositiveInteger(input.max_links ?? input.maxLinks ?? input.limit, `checks[${index}] max_links`, 500) : void 0;
+  const minBytes = isLinkStatusCheck ? normalizePositiveInteger(input.min_bytes ?? input.minBytes ?? input.min_response_bytes ?? input.minResponseBytes, `checks[${index}] min_bytes`) : void 0;
+  const expectedContentType = isLinkStatusCheck ? stringValue5(input.expected_content_type) || stringValue5(input.expectedContentType) || stringValue5(input.content_type) || stringValue5(input.contentType) : void 0;
+  const allowedContentTypes = isLinkStatusCheck ? normalizeStringList(
+    input.allowed_content_types ?? input.allowedContentTypes ?? input.expected_content_types ?? input.expectedContentTypes,
+    `checks[${index}] allowed_content_types`
+  ) ?? (expectedContentType ? [expectedContentType] : void 0) : void 0;
   if (isLinkStatusCheck) {
     if (minCount !== void 0 && (!Number.isInteger(minCount) || minCount < 0)) {
       throw new Error(`checks[${index}] ${type} min_count must be a non-negative integer.`);
@@ -9555,6 +9561,8 @@ function normalizeCheck(input, index) {
     same_origin_only: isLinkStatusCheck ? input.same_origin_only === true || input.sameOriginOnly === true : void 0,
     dedupe: isLinkStatusCheck ? input.dedupe === false ? false : true : void 0,
     require_nonzero_bytes: isLinkStatusCheck ? input.require_nonzero_bytes === true || input.requireNonzeroBytes === true : void 0,
+    min_bytes: minBytes,
+    allowed_content_types: allowedContentTypes,
     allow_get_fallback: isLinkStatusCheck ? input.allow_get_fallback === false || input.allowGetFallback === false ? false : true : void 0,
     max_overflow_px: numberValue3(input.max_overflow_px),
     timeout_ms: numberValue3(input.timeout_ms) ?? numberValue3(input.timeoutMs),
@@ -9661,15 +9669,40 @@ function linkStatusIsAllowed(status, check) {
   const allowed = linkStatusAllowedStatuses(check);
   return allowed?.length ? allowed.includes(status) : status >= 200 && status < 400;
 }
+function linkStatusObservedBytes(result) {
+  const bytes = numberValue3(result.bytes);
+  const contentLength = numberValue3(result.content_length);
+  return Math.max(bytes ?? 0, contentLength ?? 0) || void 0;
+}
+function normalizeLinkStatusContentType(value) {
+  const normalized = value?.split(";")[0]?.trim().toLowerCase();
+  return normalized || void 0;
+}
+function linkStatusContentTypeOk(result, check) {
+  const expected = check.allowed_content_types;
+  if (!expected?.length) return true;
+  const actual = normalizeLinkStatusContentType(stringValue5(result.content_type));
+  if (!actual) return false;
+  return expected.some((contentType) => {
+    const normalized = normalizeLinkStatusContentType(contentType);
+    if (!normalized) return false;
+    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
+    return actual === normalized;
+  });
+}
 function linkStatusResultOk(result, check) {
   const status = numberValue3(result.status);
   if (!linkStatusIsAllowed(status, check)) return false;
   if (stringValue5(result.error)) return false;
   if (result.ok === false) return false;
+  if (!linkStatusContentTypeOk(result, check)) return false;
   if (check.require_nonzero_bytes) {
-    const bytes = numberValue3(result.bytes);
-    const contentLength = numberValue3(result.content_length);
-    return bytes !== void 0 && bytes > 0 || contentLength !== void 0 && contentLength > 0;
+    const observedBytes = linkStatusObservedBytes(result);
+    if (observedBytes === void 0 || observedBytes <= 0) return false;
+  }
+  if (check.min_bytes !== void 0) {
+    const observedBytes = linkStatusObservedBytes(result);
+    if (observedBytes === void 0 || observedBytes < check.min_bytes) return false;
   }
   return true;
 }
@@ -9698,7 +9731,10 @@ function summarizeLinkStatusEvidence(viewport, check) {
     status: numberValue3(result.status) ?? null,
     method: stringValue5(result.method) ?? null,
     error: stringValue5(result.error) ?? null,
-    bytes: numberValue3(result.bytes) ?? numberValue3(result.content_length) ?? null
+    content_type: stringValue5(result.content_type) ?? null,
+    bytes: linkStatusObservedBytes(result) ?? null,
+    min_bytes: check.min_bytes ?? null,
+    allowed_content_types: check.allowed_content_types ?? null
   }));
   if (stringValue5(linkEvidence.error)) {
     failures.push({ code: "link_status_capture_failed", error: stringValue5(linkEvidence.error) ?? "" });
@@ -9735,6 +9771,8 @@ function summarizeLinkStatusEvidence(viewport, check) {
     failed_count: failures.length,
     truncated: linkEvidence.truncated === true,
     max_links: numberValue3(linkEvidence.max_links) ?? check.max_links ?? 100,
+    min_bytes: check.min_bytes ?? null,
+    allowed_content_types: check.allowed_content_types ?? null,
     status_counts: statusCounts,
     failures: failures.slice(0, 20)
   };
@@ -10263,6 +10301,8 @@ function assessCheckFromEvidence(check, evidence) {
         min_count: check.min_count ?? null,
         allowed_statuses: linkStatusAllowedStatuses(check) || ["2xx", "3xx"],
         require_nonzero_bytes: check.require_nonzero_bytes === true,
+        min_bytes: check.min_bytes ?? null,
+        allowed_content_types: check.allowed_content_types ?? null,
         viewports: summaries.map((summary) => toJsonValue(summary)),
         failures: failed.flatMap((summary) => Array.isArray(summary.failures) ? summary.failures.map((failure) => toJsonValue({ viewport: stringValue5(summary.viewport) ?? null, failure })) : [])
       },
@@ -10866,15 +10906,41 @@ function linkStatusIsAllowed(status, check) {
   const allowed = linkStatusAllowedStatuses(check);
   return Array.isArray(allowed) && allowed.length ? allowed.includes(status) : status >= 200 && status < 400;
 }
+function linkStatusObservedBytes(result) {
+  const bytes = typeof result.bytes === "number" && Number.isFinite(result.bytes) ? result.bytes : undefined;
+  const contentLength = typeof result.content_length === "number" && Number.isFinite(result.content_length) ? result.content_length : undefined;
+  const observed = Math.max(bytes || 0, contentLength || 0);
+  return observed > 0 ? observed : undefined;
+}
+function normalizeLinkStatusContentType(value) {
+  if (typeof value !== "string") return undefined;
+  const normalized = (value.split(";")[0] || "").trim().toLowerCase();
+  return normalized || undefined;
+}
+function linkStatusContentTypeOk(result, check) {
+  if (!Array.isArray(check.allowed_content_types) || !check.allowed_content_types.length) return true;
+  const actual = normalizeLinkStatusContentType(result.content_type);
+  if (!actual) return false;
+  return check.allowed_content_types.some((contentType) => {
+    const normalized = normalizeLinkStatusContentType(contentType);
+    if (!normalized) return false;
+    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
+    return actual === normalized;
+  });
+}
 function linkStatusResultOk(result, check) {
   if (!result || typeof result !== "object" || Array.isArray(result)) return false;
   if (!linkStatusIsAllowed(result.status, check)) return false;
   if (typeof result.error === "string" && result.error.trim()) return false;
   if (result.ok === false) return false;
+  if (!linkStatusContentTypeOk(result, check)) return false;
   if (check.require_nonzero_bytes === true) {
-    const bytes = typeof result.bytes === "number" && Number.isFinite(result.bytes) ? result.bytes : undefined;
-    const contentLength = typeof result.content_length === "number" && Number.isFinite(result.content_length) ? result.content_length : undefined;
-    return (bytes !== undefined && bytes > 0) || (contentLength !== undefined && contentLength > 0);
+    const observedBytes = linkStatusObservedBytes(result);
+    if (observedBytes === undefined || observedBytes <= 0) return false;
+  }
+  if (typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) {
+    const observedBytes = linkStatusObservedBytes(result);
+    if (observedBytes === undefined || observedBytes < check.min_bytes) return false;
   }
   return true;
 }
@@ -10902,11 +10968,10 @@ function summarizeLinkStatusEvidence(viewport, check) {
       status: typeof result.status === "number" && Number.isFinite(result.status) ? result.status : null,
       method: typeof result.method === "string" ? result.method : null,
       error: typeof result.error === "string" ? result.error : null,
-      bytes: typeof result.bytes === "number" && Number.isFinite(result.bytes)
-        ? result.bytes
-        : typeof result.content_length === "number" && Number.isFinite(result.content_length)
-          ? result.content_length
-          : null,
+      content_type: typeof result.content_type === "string" ? result.content_type : null,
+      bytes: linkStatusObservedBytes(result) ?? null,
+      min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
+      allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
     }));
   if (typeof linkEvidence.error === "string" && linkEvidence.error.trim()) {
     failures.push({ code: "link_status_capture_failed", error: linkEvidence.error });
@@ -10941,6 +11006,8 @@ function summarizeLinkStatusEvidence(viewport, check) {
     failed_count: failures.length,
     truncated: linkEvidence.truncated === true,
     max_links: typeof linkEvidence.max_links === "number" ? linkEvidence.max_links : check.max_links || 100,
+    min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
+    allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
     status_counts: linkEvidence.status_counts && typeof linkEvidence.status_counts === "object" && !Array.isArray(linkEvidence.status_counts) ? linkEvidence.status_counts : {},
     failures: failures.slice(0, 20),
   };
@@ -11637,6 +11704,8 @@ function assessProfile(profile, evidence) {
           min_count: check.min_count ?? null,
           allowed_statuses: linkStatusAllowedStatuses(check) || ["2xx", "3xx"],
           require_nonzero_bytes: check.require_nonzero_bytes === true,
+          min_bytes: check.min_bytes ?? null,
+          allowed_content_types: check.allowed_content_types ?? null,
           viewports: summaries,
           failures: failed.flatMap((summary) => Array.isArray(summary.failures)
             ? summary.failures.map((failure) => ({ viewport: summary.viewport || null, failure }))
@@ -12784,6 +12853,28 @@ function linkProbeAllowed(status, check) {
       : null;
   return allowed ? allowed.includes(status) : status >= 200 && status < 400;
 }
+function linkProbeObservedBytes(result) {
+  const bytes = typeof result.bytes === "number" && Number.isFinite(result.bytes) ? result.bytes : undefined;
+  const contentLength = typeof result.content_length === "number" && Number.isFinite(result.content_length) ? result.content_length : undefined;
+  const observed = Math.max(bytes || 0, contentLength || 0);
+  return observed > 0 ? observed : undefined;
+}
+function normalizeLinkProbeContentType(value) {
+  if (typeof value !== "string") return undefined;
+  const normalized = (value.split(";")[0] || "").trim().toLowerCase();
+  return normalized || undefined;
+}
+function linkProbeContentTypeAllowed(result, check) {
+  if (!Array.isArray(check.allowed_content_types) || !check.allowed_content_types.length) return true;
+  const actual = normalizeLinkProbeContentType(result.content_type);
+  if (!actual) return false;
+  return check.allowed_content_types.some((contentType) => {
+    const normalized = normalizeLinkProbeContentType(contentType);
+    if (!normalized) return false;
+    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
+    return actual === normalized;
+  });
+}
 function linkProbeResponseFields(response, method) {
   const contentLengthHeader = response.headers && typeof response.headers.get === "function" ? response.headers.get("content-length") : null;
   const contentLength = contentLengthHeader && /^\d+$/.test(contentLengthHeader) ? Number(contentLengthHeader) : null;
@@ -12798,6 +12889,7 @@ function linkProbeResponseFields(response, method) {
 }
 async function probeLinkStatus(candidate, check) {
   const requireNonzeroBytes = check.require_nonzero_bytes === true;
+  const minBytes = typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? Math.max(1, Math.floor(check.min_bytes)) : null;
   const allowGetFallback = check.allow_get_fallback !== false;
   const result = {
     url: candidate.url,
@@ -12815,7 +12907,7 @@ async function probeLinkStatus(candidate, check) {
   };
   const applyResponse = async (response, method, readBytes) => {
     Object.assign(result, linkProbeResponseFields(response, method));
-    if (readBytes || requireNonzeroBytes) {
+    if (readBytes) {
       try {
         const buffer = await response.arrayBuffer();
         result.bytes = buffer.byteLength;
@@ -12824,7 +12916,9 @@ async function probeLinkStatus(candidate, check) {
       }
     }
     result.ok = linkProbeAllowed(result.status, check)
-      && (!requireNonzeroBytes || (typeof result.bytes === "number" ? result.bytes > 0 : typeof result.content_length === "number" && result.content_length > 0))
+      && linkProbeContentTypeAllowed(result, check)
+      && (!requireNonzeroBytes || ((linkProbeObservedBytes(result) || 0) > 0))
+      && (minBytes === null || ((linkProbeObservedBytes(result) || 0) >= minBytes))
       && !result.error;
   };
   try {
@@ -12841,9 +12935,9 @@ async function probeLinkStatus(candidate, check) {
       method: "GET",
       redirect: "follow",
       cache: "no-store",
-      headers: { Range: "bytes=0-0" },
+      headers: { Range: "bytes=0-" + String((minBytes || 1) - 1) },
     });
-    await applyResponse(response, "GET", requireNonzeroBytes);
+    await applyResponse(response, "GET", requireNonzeroBytes || minBytes !== null);
     return result;
   } catch (error) {
     result.error = String(error && error.message ? error.message : error).slice(0, 500);
@@ -12897,7 +12991,10 @@ async function collectLinkStatus(check) {
     status: result.status,
     method: result.method,
     error: result.error,
-    bytes: result.bytes == null ? result.content_length : result.bytes,
+    content_type: result.content_type,
+    bytes: linkProbeObservedBytes(result) || null,
+    min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
+    allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
   }));
   const statusCounts = {};
   for (const result of results) {
@@ -12911,6 +13008,8 @@ async function collectLinkStatus(check) {
     same_origin_only: linkProbeSameOriginOnly(check),
     dedupe: linkProbeDedupe(check),
     require_nonzero_bytes: check.require_nonzero_bytes === true,
+    min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
+    allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
     allowed_statuses: Array.isArray(check.allowed_statuses) && check.allowed_statuses.length
       ? check.allowed_statuses
       : typeof check.expected_status === "number"

package/dist/index.js

@@ -58,7 +58,7 @@ import {
   resolveRiddleProofProfileTimeoutSec,
   slugifyRiddleProofProfileName,
   summarizeRiddleProofProfileResult
-} from "./chunk-FQ4QBY2N.js";
+} from "./chunk-5OCJKEHE.js";
 import {
   DEFAULT_RIDDLE_API_BASE_URL,
   DEFAULT_RIDDLE_API_KEY_FILE,

package/dist/profile.cjs

@@ -828,6 +828,12 @@ function normalizeCheck(input, index) {
     `checks[${index}] allowed_statuses`
   ) : void 0;
   const maxLinks = isLinkStatusCheck ? normalizePositiveInteger(input.max_links ?? input.maxLinks ?? input.limit, `checks[${index}] max_links`, 500) : void 0;
+  const minBytes = isLinkStatusCheck ? normalizePositiveInteger(input.min_bytes ?? input.minBytes ?? input.min_response_bytes ?? input.minResponseBytes, `checks[${index}] min_bytes`) : void 0;
+  const expectedContentType = isLinkStatusCheck ? stringValue(input.expected_content_type) || stringValue(input.expectedContentType) || stringValue(input.content_type) || stringValue(input.contentType) : void 0;
+  const allowedContentTypes = isLinkStatusCheck ? normalizeStringList(
+    input.allowed_content_types ?? input.allowedContentTypes ?? input.expected_content_types ?? input.expectedContentTypes,
+    `checks[${index}] allowed_content_types`
+  ) ?? (expectedContentType ? [expectedContentType] : void 0) : void 0;
   if (isLinkStatusCheck) {
     if (minCount !== void 0 && (!Number.isInteger(minCount) || minCount < 0)) {
       throw new Error(`checks[${index}] ${type} min_count must be a non-negative integer.`);
@@ -869,6 +875,8 @@ function normalizeCheck(input, index) {
     same_origin_only: isLinkStatusCheck ? input.same_origin_only === true || input.sameOriginOnly === true : void 0,
     dedupe: isLinkStatusCheck ? input.dedupe === false ? false : true : void 0,
     require_nonzero_bytes: isLinkStatusCheck ? input.require_nonzero_bytes === true || input.requireNonzeroBytes === true : void 0,
+    min_bytes: minBytes,
+    allowed_content_types: allowedContentTypes,
     allow_get_fallback: isLinkStatusCheck ? input.allow_get_fallback === false || input.allowGetFallback === false ? false : true : void 0,
     max_overflow_px: numberValue(input.max_overflow_px),
     timeout_ms: numberValue(input.timeout_ms) ?? numberValue(input.timeoutMs),
@@ -975,15 +983,40 @@ function linkStatusIsAllowed(status, check) {
   const allowed = linkStatusAllowedStatuses(check);
   return allowed?.length ? allowed.includes(status) : status >= 200 && status < 400;
 }
+function linkStatusObservedBytes(result) {
+  const bytes = numberValue(result.bytes);
+  const contentLength = numberValue(result.content_length);
+  return Math.max(bytes ?? 0, contentLength ?? 0) || void 0;
+}
+function normalizeLinkStatusContentType(value) {
+  const normalized = value?.split(";")[0]?.trim().toLowerCase();
+  return normalized || void 0;
+}
+function linkStatusContentTypeOk(result, check) {
+  const expected = check.allowed_content_types;
+  if (!expected?.length) return true;
+  const actual = normalizeLinkStatusContentType(stringValue(result.content_type));
+  if (!actual) return false;
+  return expected.some((contentType) => {
+    const normalized = normalizeLinkStatusContentType(contentType);
+    if (!normalized) return false;
+    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
+    return actual === normalized;
+  });
+}
 function linkStatusResultOk(result, check) {
   const status = numberValue(result.status);
   if (!linkStatusIsAllowed(status, check)) return false;
   if (stringValue(result.error)) return false;
   if (result.ok === false) return false;
+  if (!linkStatusContentTypeOk(result, check)) return false;
   if (check.require_nonzero_bytes) {
-    const bytes = numberValue(result.bytes);
-    const contentLength = numberValue(result.content_length);
-    return bytes !== void 0 && bytes > 0 || contentLength !== void 0 && contentLength > 0;
+    const observedBytes = linkStatusObservedBytes(result);
+    if (observedBytes === void 0 || observedBytes <= 0) return false;
+  }
+  if (check.min_bytes !== void 0) {
+    const observedBytes = linkStatusObservedBytes(result);
+    if (observedBytes === void 0 || observedBytes < check.min_bytes) return false;
   }
   return true;
 }
@@ -1012,7 +1045,10 @@ function summarizeLinkStatusEvidence(viewport, check) {
     status: numberValue(result.status) ?? null,
     method: stringValue(result.method) ?? null,
     error: stringValue(result.error) ?? null,
-    bytes: numberValue(result.bytes) ?? numberValue(result.content_length) ?? null
+    content_type: stringValue(result.content_type) ?? null,
+    bytes: linkStatusObservedBytes(result) ?? null,
+    min_bytes: check.min_bytes ?? null,
+    allowed_content_types: check.allowed_content_types ?? null
   }));
   if (stringValue(linkEvidence.error)) {
     failures.push({ code: "link_status_capture_failed", error: stringValue(linkEvidence.error) ?? "" });
@@ -1049,6 +1085,8 @@ function summarizeLinkStatusEvidence(viewport, check) {
     failed_count: failures.length,
     truncated: linkEvidence.truncated === true,
     max_links: numberValue(linkEvidence.max_links) ?? check.max_links ?? 100,
+    min_bytes: check.min_bytes ?? null,
+    allowed_content_types: check.allowed_content_types ?? null,
     status_counts: statusCounts,
     failures: failures.slice(0, 20)
   };
@@ -1577,6 +1615,8 @@ function assessCheckFromEvidence(check, evidence) {
         min_count: check.min_count ?? null,
         allowed_statuses: linkStatusAllowedStatuses(check) || ["2xx", "3xx"],
         require_nonzero_bytes: check.require_nonzero_bytes === true,
+        min_bytes: check.min_bytes ?? null,
+        allowed_content_types: check.allowed_content_types ?? null,
         viewports: summaries.map((summary) => toJsonValue(summary)),
         failures: failed.flatMap((summary) => Array.isArray(summary.failures) ? summary.failures.map((failure) => toJsonValue({ viewport: stringValue(summary.viewport) ?? null, failure })) : [])
       },
@@ -2180,15 +2220,41 @@ function linkStatusIsAllowed(status, check) {
   const allowed = linkStatusAllowedStatuses(check);
   return Array.isArray(allowed) && allowed.length ? allowed.includes(status) : status >= 200 && status < 400;
 }
+function linkStatusObservedBytes(result) {
+  const bytes = typeof result.bytes === "number" && Number.isFinite(result.bytes) ? result.bytes : undefined;
+  const contentLength = typeof result.content_length === "number" && Number.isFinite(result.content_length) ? result.content_length : undefined;
+  const observed = Math.max(bytes || 0, contentLength || 0);
+  return observed > 0 ? observed : undefined;
+}
+function normalizeLinkStatusContentType(value) {
+  if (typeof value !== "string") return undefined;
+  const normalized = (value.split(";")[0] || "").trim().toLowerCase();
+  return normalized || undefined;
+}
+function linkStatusContentTypeOk(result, check) {
+  if (!Array.isArray(check.allowed_content_types) || !check.allowed_content_types.length) return true;
+  const actual = normalizeLinkStatusContentType(result.content_type);
+  if (!actual) return false;
+  return check.allowed_content_types.some((contentType) => {
+    const normalized = normalizeLinkStatusContentType(contentType);
+    if (!normalized) return false;
+    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
+    return actual === normalized;
+  });
+}
 function linkStatusResultOk(result, check) {
   if (!result || typeof result !== "object" || Array.isArray(result)) return false;
   if (!linkStatusIsAllowed(result.status, check)) return false;
   if (typeof result.error === "string" && result.error.trim()) return false;
   if (result.ok === false) return false;
+  if (!linkStatusContentTypeOk(result, check)) return false;
   if (check.require_nonzero_bytes === true) {
-    const bytes = typeof result.bytes === "number" && Number.isFinite(result.bytes) ? result.bytes : undefined;
-    const contentLength = typeof result.content_length === "number" && Number.isFinite(result.content_length) ? result.content_length : undefined;
-    return (bytes !== undefined && bytes > 0) || (contentLength !== undefined && contentLength > 0);
+    const observedBytes = linkStatusObservedBytes(result);
+    if (observedBytes === undefined || observedBytes <= 0) return false;
+  }
+  if (typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) {
+    const observedBytes = linkStatusObservedBytes(result);
+    if (observedBytes === undefined || observedBytes < check.min_bytes) return false;
   }
   return true;
 }
@@ -2216,11 +2282,10 @@ function summarizeLinkStatusEvidence(viewport, check) {
       status: typeof result.status === "number" && Number.isFinite(result.status) ? result.status : null,
       method: typeof result.method === "string" ? result.method : null,
       error: typeof result.error === "string" ? result.error : null,
-      bytes: typeof result.bytes === "number" && Number.isFinite(result.bytes)
-        ? result.bytes
-        : typeof result.content_length === "number" && Number.isFinite(result.content_length)
-          ? result.content_length
-          : null,
+      content_type: typeof result.content_type === "string" ? result.content_type : null,
+      bytes: linkStatusObservedBytes(result) ?? null,
+      min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
+      allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
     }));
   if (typeof linkEvidence.error === "string" && linkEvidence.error.trim()) {
     failures.push({ code: "link_status_capture_failed", error: linkEvidence.error });
@@ -2255,6 +2320,8 @@ function summarizeLinkStatusEvidence(viewport, check) {
     failed_count: failures.length,
     truncated: linkEvidence.truncated === true,
     max_links: typeof linkEvidence.max_links === "number" ? linkEvidence.max_links : check.max_links || 100,
+    min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
+    allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
     status_counts: linkEvidence.status_counts && typeof linkEvidence.status_counts === "object" && !Array.isArray(linkEvidence.status_counts) ? linkEvidence.status_counts : {},
     failures: failures.slice(0, 20),
   };
@@ -2951,6 +3018,8 @@ function assessProfile(profile, evidence) {
           min_count: check.min_count ?? null,
           allowed_statuses: linkStatusAllowedStatuses(check) || ["2xx", "3xx"],
           require_nonzero_bytes: check.require_nonzero_bytes === true,
+          min_bytes: check.min_bytes ?? null,
+          allowed_content_types: check.allowed_content_types ?? null,
           viewports: summaries,
           failures: failed.flatMap((summary) => Array.isArray(summary.failures)
             ? summary.failures.map((failure) => ({ viewport: summary.viewport || null, failure }))
@@ -4098,6 +4167,28 @@ function linkProbeAllowed(status, check) {
       : null;
   return allowed ? allowed.includes(status) : status >= 200 && status < 400;
 }
+function linkProbeObservedBytes(result) {
+  const bytes = typeof result.bytes === "number" && Number.isFinite(result.bytes) ? result.bytes : undefined;
+  const contentLength = typeof result.content_length === "number" && Number.isFinite(result.content_length) ? result.content_length : undefined;
+  const observed = Math.max(bytes || 0, contentLength || 0);
+  return observed > 0 ? observed : undefined;
+}
+function normalizeLinkProbeContentType(value) {
+  if (typeof value !== "string") return undefined;
+  const normalized = (value.split(";")[0] || "").trim().toLowerCase();
+  return normalized || undefined;
+}
+function linkProbeContentTypeAllowed(result, check) {
+  if (!Array.isArray(check.allowed_content_types) || !check.allowed_content_types.length) return true;
+  const actual = normalizeLinkProbeContentType(result.content_type);
+  if (!actual) return false;
+  return check.allowed_content_types.some((contentType) => {
+    const normalized = normalizeLinkProbeContentType(contentType);
+    if (!normalized) return false;
+    if (normalized.endsWith("/*")) return actual.startsWith(normalized.slice(0, -1));
+    return actual === normalized;
+  });
+}
 function linkProbeResponseFields(response, method) {
   const contentLengthHeader = response.headers && typeof response.headers.get === "function" ? response.headers.get("content-length") : null;
   const contentLength = contentLengthHeader && /^\d+$/.test(contentLengthHeader) ? Number(contentLengthHeader) : null;
@@ -4112,6 +4203,7 @@ function linkProbeResponseFields(response, method) {
 }
 async function probeLinkStatus(candidate, check) {
   const requireNonzeroBytes = check.require_nonzero_bytes === true;
+  const minBytes = typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? Math.max(1, Math.floor(check.min_bytes)) : null;
   const allowGetFallback = check.allow_get_fallback !== false;
   const result = {
     url: candidate.url,
@@ -4129,7 +4221,7 @@ async function probeLinkStatus(candidate, check) {
   };
   const applyResponse = async (response, method, readBytes) => {
     Object.assign(result, linkProbeResponseFields(response, method));
-    if (readBytes || requireNonzeroBytes) {
+    if (readBytes) {
       try {
         const buffer = await response.arrayBuffer();
         result.bytes = buffer.byteLength;
@@ -4138,7 +4230,9 @@ async function probeLinkStatus(candidate, check) {
       }
     }
     result.ok = linkProbeAllowed(result.status, check)
-      && (!requireNonzeroBytes || (typeof result.bytes === "number" ? result.bytes > 0 : typeof result.content_length === "number" && result.content_length > 0))
+      && linkProbeContentTypeAllowed(result, check)
+      && (!requireNonzeroBytes || ((linkProbeObservedBytes(result) || 0) > 0))
+      && (minBytes === null || ((linkProbeObservedBytes(result) || 0) >= minBytes))
       && !result.error;
   };
   try {
@@ -4155,9 +4249,9 @@ async function probeLinkStatus(candidate, check) {
       method: "GET",
       redirect: "follow",
       cache: "no-store",
-      headers: { Range: "bytes=0-0" },
+      headers: { Range: "bytes=0-" + String((minBytes || 1) - 1) },
     });
-    await applyResponse(response, "GET", requireNonzeroBytes);
+    await applyResponse(response, "GET", requireNonzeroBytes || minBytes !== null);
     return result;
   } catch (error) {
     result.error = String(error && error.message ? error.message : error).slice(0, 500);
@@ -4211,7 +4305,10 @@ async function collectLinkStatus(check) {
     status: result.status,
     method: result.method,
     error: result.error,
-    bytes: result.bytes == null ? result.content_length : result.bytes,
+    content_type: result.content_type,
+    bytes: linkProbeObservedBytes(result) || null,
+    min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
+    allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
   }));
   const statusCounts = {};
   for (const result of results) {
@@ -4225,6 +4322,8 @@ async function collectLinkStatus(check) {
     same_origin_only: linkProbeSameOriginOnly(check),
     dedupe: linkProbeDedupe(check),
     require_nonzero_bytes: check.require_nonzero_bytes === true,
+    min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
+    allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
     allowed_statuses: Array.isArray(check.allowed_statuses) && check.allowed_statuses.length
       ? check.allowed_statuses
       : typeof check.expected_status === "number"

package/dist/profile.d.cts

@@ -138,6 +138,8 @@ interface RiddleProofProfileCheck {
     same_origin_only?: boolean;
     dedupe?: boolean;
     require_nonzero_bytes?: boolean;
+    min_bytes?: number;
+    allowed_content_types?: string[];
     allow_get_fallback?: boolean;
     max_overflow_px?: number;
     timeout_ms?: number;

package/dist/profile.d.ts

@@ -138,6 +138,8 @@ interface RiddleProofProfileCheck {
     same_origin_only?: boolean;
     dedupe?: boolean;
     require_nonzero_bytes?: boolean;
+    min_bytes?: number;
+    allowed_content_types?: string[];
     allow_get_fallback?: boolean;
     max_overflow_px?: number;
     timeout_ms?: number;

package/dist/profile.js

@@ -19,7 +19,7 @@ import {
   resolveRiddleProofProfileTimeoutSec,
   slugifyRiddleProofProfileName,
   summarizeRiddleProofProfileResult
-} from "./chunk-FQ4QBY2N.js";
+} from "./chunk-5OCJKEHE.js";
 export {
   RIDDLE_PROOF_PROFILE_CHECK_TYPES,
   RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riddledc/riddle-proof",
-  "version": "0.7.94",
+  "version": "0.7.95",
   "description": "Reusable Riddle Proof contracts and helpers for evidence-backed agent changes.",
   "license": "MIT",
   "author": "RiddleDC",