@riddledc/riddle-proof 0.7.97 → 0.7.99

package/dist/cli.cjs

@@ -6922,6 +6922,7 @@ var RIDDLE_PROOF_PROFILE_CHECK_TYPES = [
   "frame_no_horizontal_overflow",
   "text_visible",
   "text_absent",
+  "http_status",
   "link_status",
   "artifact_link_status",
   "route_inventory",
@@ -7671,19 +7672,34 @@ function normalizeCheck(input, index) {
   if (type === "route_inventory" && !expectedRoutes?.length) {
     throw new Error(`checks[${index}] route_inventory requires expected_routes.`);
   }
+  const isHttpStatusCheck = type === "http_status";
   const isLinkStatusCheck = type === "link_status" || type === "artifact_link_status";
-  const expectedStatus = isLinkStatusCheck ? normalizeHttpStatus(input.expected_status ?? input.expectedStatus ?? input.status, `checks[${index}] expected_status`) : void 0;
-  const allowedStatuses = isLinkStatusCheck ? normalizeHttpStatuses(
+  const isStatusCheck = isHttpStatusCheck || isLinkStatusCheck;
+  const requestUrl = stringFromOwn(input, "url", "endpoint_url", "endpointUrl", "endpoint", "request_url", "requestUrl", "path");
+  if (isHttpStatusCheck && !requestUrl) {
+    throw new Error(`checks[${index}] http_status requires url.`);
+  }
+  const method = stringFromOwn(input, "method", "http_method", "httpMethod")?.toUpperCase();
+  if (isHttpStatusCheck && method && !/^[A-Z]+$/.test(method)) {
+    throw new Error(`checks[${index}] http_status method must contain only letters.`);
+  }
+  const hasBodyJson = hasOwn(input, "body_json") || hasOwn(input, "bodyJson") || hasOwn(input, "json");
+  const expectedStatus = isStatusCheck ? normalizeHttpStatus(input.expected_status ?? input.expectedStatus ?? input.status, `checks[${index}] expected_status`) : void 0;
+  const allowedStatuses = isStatusCheck ? normalizeHttpStatuses(
     input.allowed_statuses ?? input.allowedStatuses ?? input.expected_statuses ?? input.expectedStatuses,
     `checks[${index}] allowed_statuses`
   ) : void 0;
   const maxLinks = isLinkStatusCheck ? normalizePositiveInteger(input.max_links ?? input.maxLinks ?? input.limit, `checks[${index}] max_links`, 500) : void 0;
-  const minBytes = isLinkStatusCheck ? normalizePositiveInteger(input.min_bytes ?? input.minBytes ?? input.min_response_bytes ?? input.minResponseBytes, `checks[${index}] min_bytes`) : void 0;
-  const expectedContentType = isLinkStatusCheck ? stringValue2(input.expected_content_type) || stringValue2(input.expectedContentType) || stringValue2(input.content_type) || stringValue2(input.contentType) : void 0;
-  const allowedContentTypes = isLinkStatusCheck ? normalizeStringList(
+  const minBytes = isStatusCheck ? normalizePositiveInteger(input.min_bytes ?? input.minBytes ?? input.min_response_bytes ?? input.minResponseBytes, `checks[${index}] min_bytes`) : void 0;
+  const expectedContentType = isStatusCheck ? stringValue2(input.expected_content_type) || stringValue2(input.expectedContentType) || stringValue2(input.content_type) || stringValue2(input.contentType) : void 0;
+  const allowedContentTypes = isStatusCheck ? normalizeStringList(
     input.allowed_content_types ?? input.allowedContentTypes ?? input.expected_content_types ?? input.expectedContentTypes,
     `checks[${index}] allowed_content_types`
   ) ?? (expectedContentType ? [expectedContentType] : void 0) : void 0;
+  const bodyContains = isHttpStatusCheck ? normalizeStringList(
+    input.body_contains ?? input.bodyContains ?? input.expected_body_contains ?? input.expectedBodyContains ?? input.response_body_contains ?? input.responseBodyContains ?? input.body_includes ?? input.bodyIncludes,
+    `checks[${index}] body_contains`
+  ) : void 0;
   if (isLinkStatusCheck) {
     if (minCount !== void 0 && (!Number.isInteger(minCount) || minCount < 0)) {
       throw new Error(`checks[${index}] ${type} min_count must be a non-negative integer.`);
@@ -7701,6 +7717,12 @@ function normalizeCheck(input, index) {
     expected_url: expectedUrl,
     expected_routes: expectedRoutes,
     selector: stringValue2(input.selector),
+    url: isHttpStatusCheck ? requestUrl : void 0,
+    method: isHttpStatusCheck ? method || "GET" : void 0,
+    headers: isHttpStatusCheck ? stringRecord(input.headers) : void 0,
+    body: isHttpStatusCheck ? stringValue2(input.body) : void 0,
+    body_json: isHttpStatusCheck && hasBodyJson ? toJsonValue(input.body_json ?? input.bodyJson ?? input.json) : void 0,
+    body_contains: bodyContains,
     expected_texts: expectedTexts,
     link_selector: stringValue2(input.link_selector) || stringValue2(input.linkSelector),
     source_selector: stringValue2(input.source_selector) || stringValue2(input.sourceSelector),
@@ -7724,7 +7746,7 @@ function normalizeCheck(input, index) {
     max_links: maxLinks,
     same_origin_only: isLinkStatusCheck ? input.same_origin_only === true || input.sameOriginOnly === true : void 0,
     dedupe: isLinkStatusCheck ? input.dedupe === false ? false : true : void 0,
-    require_nonzero_bytes: isLinkStatusCheck ? input.require_nonzero_bytes === true || input.requireNonzeroBytes === true : void 0,
+    require_nonzero_bytes: isStatusCheck ? input.require_nonzero_bytes === true || input.requireNonzeroBytes === true : void 0,
     min_bytes: minBytes,
     allowed_content_types: allowedContentTypes,
     allow_get_fallback: isLinkStatusCheck ? input.allow_get_fallback === false || input.allowGetFallback === false ? false : true : void 0,
@@ -7823,14 +7845,32 @@ function selectorKey(check) {
 function linkStatusSelector(check) {
   return check.selector || check.link_selector || "a[href]";
 }
-function linkStatusAllowedStatuses(check) {
+function httpStatusRequestUrl(check, baseUrl) {
+  const rawUrl = check.url || "";
+  if (!rawUrl) return "";
+  try {
+    return baseUrl ? new URL(rawUrl, baseUrl).href : new URL(rawUrl).href;
+  } catch {
+    return rawUrl;
+  }
+}
+function httpStatusMethod(check) {
+  return (check.method || "GET").toUpperCase();
+}
+function httpStatusKey(check, baseUrl) {
+  return `${httpStatusMethod(check)} ${httpStatusRequestUrl(check, baseUrl)}`;
+}
+function httpStatusAllowedStatuses(check) {
   if (check.allowed_statuses?.length) return check.allowed_statuses;
   if (check.expected_status !== void 0) return [check.expected_status];
   return void 0;
 }
-function linkStatusIsAllowed(status, check) {
+function linkStatusAllowedStatuses(check) {
+  return httpStatusAllowedStatuses(check);
+}
+function httpStatusIsAllowed(status, check) {
   if (status === void 0) return false;
-  const allowed = linkStatusAllowedStatuses(check);
+  const allowed = httpStatusAllowedStatuses(check);
   return allowed?.length ? allowed.includes(status) : status >= 200 && status < 400;
 }
 function linkStatusObservedBytes(result) {
@@ -7854,9 +7894,15 @@ function linkStatusContentTypeOk(result, check) {
     return actual === normalized;
   });
 }
+function httpStatusBodyContainsFailures(result, check) {
+  const expected = check.body_contains?.filter(Boolean) ?? [];
+  if (!expected.length) return [];
+  const observed = isRecord(result.body_contains) ? result.body_contains : {};
+  return expected.filter((text) => observed[text] !== true);
+}
 function linkStatusResultOk(result, check) {
   const status = numberValue(result.status);
-  if (!linkStatusIsAllowed(status, check)) return false;
+  if (!httpStatusIsAllowed(status, check)) return false;
   if (stringValue2(result.error)) return false;
   if (result.ok === false) return false;
   if (!linkStatusContentTypeOk(result, check)) return false;
@@ -7868,8 +7914,64 @@ function linkStatusResultOk(result, check) {
     const observedBytes = linkStatusObservedBytes(result);
     if (observedBytes === void 0 || observedBytes < check.min_bytes) return false;
   }
+  if (httpStatusBodyContainsFailures(result, check).length) return false;
   return true;
 }
+function httpStatusEvidenceForCheck(viewport, check) {
+  const evidence = viewport.http_statuses?.[httpStatusKey(check, viewport.url)];
+  return isRecord(evidence) ? evidence : void 0;
+}
+function summarizeHttpStatusEvidence(viewport, check) {
+  const key = httpStatusKey(check, viewport.url);
+  const statusEvidence = httpStatusEvidenceForCheck(viewport, check);
+  if (!statusEvidence) {
+    return {
+      viewport: viewport.name,
+      key,
+      url: httpStatusRequestUrl(check, viewport.url),
+      method: httpStatusMethod(check),
+      ok: false,
+      status: null,
+      failures: [{ code: "http_status_evidence_missing" }]
+    };
+  }
+  const failures = [];
+  const bodyContainsMissing = httpStatusBodyContainsFailures(statusEvidence, check);
+  if (!linkStatusResultOk(statusEvidence, check)) {
+    failures.push({
+      code: "http_status_failed",
+      url: stringValue2(statusEvidence.url) ?? httpStatusRequestUrl(check, viewport.url),
+      status: numberValue(statusEvidence.status) ?? null,
+      method: stringValue2(statusEvidence.method) ?? httpStatusMethod(check),
+      error: stringValue2(statusEvidence.error) ?? null,
+      content_type: stringValue2(statusEvidence.content_type) ?? null,
+      bytes: linkStatusObservedBytes(statusEvidence) ?? null,
+      allowed_statuses: httpStatusAllowedStatuses(check) ?? ["2xx", "3xx"],
+      min_bytes: check.min_bytes ?? null,
+      allowed_content_types: check.allowed_content_types ?? null,
+      body_contains: check.body_contains ?? null,
+      body_contains_missing: bodyContainsMissing,
+      body_sample: stringValue2(statusEvidence.body_sample) ?? null
+    });
+  }
+  return {
+    viewport: viewport.name,
+    key,
+    url: stringValue2(statusEvidence.url) ?? httpStatusRequestUrl(check, viewport.url),
+    method: stringValue2(statusEvidence.method) ?? httpStatusMethod(check),
+    status: numberValue(statusEvidence.status) ?? null,
+    status_text: stringValue2(statusEvidence.status_text) ?? null,
+    ok: failures.length === 0,
+    error: stringValue2(statusEvidence.error) ?? null,
+    content_type: stringValue2(statusEvidence.content_type) ?? null,
+    content_length: numberValue(statusEvidence.content_length) ?? null,
+    bytes: linkStatusObservedBytes(statusEvidence) ?? null,
+    body_contains: isRecord(statusEvidence.body_contains) ? toJsonValue(statusEvidence.body_contains) : null,
+    body_contains_missing: bodyContainsMissing,
+    body_sample: stringValue2(statusEvidence.body_sample) ?? null,
+    failures
+  };
+}
 function linkStatusEvidenceForCheck(viewport, check) {
   const evidence = viewport.link_statuses?.[linkStatusSelector(check)];
   return isRecord(evidence) ? evidence : void 0;
@@ -8460,6 +8562,29 @@ function assessCheckFromEvidence(check, evidence) {
       message: failed ? `Text assertion failed in ${failed} viewport(s).` : void 0
     };
   }
+  if (check.type === "http_status") {
+    const url = httpStatusRequestUrl(check, evidence.target_url);
+    const method = httpStatusMethod(check);
+    const summaries = viewports.map((viewport) => summarizeHttpStatusEvidence(viewport, check));
+    const failed = summaries.filter((summary) => Array.isArray(summary.failures) && summary.failures.length > 0);
+    return {
+      type: check.type,
+      label: checkLabel(check),
+      status: failed.length ? "failed" : "passed",
+      evidence: {
+        url,
+        method,
+        allowed_statuses: httpStatusAllowedStatuses(check) || ["2xx", "3xx"],
+        require_nonzero_bytes: check.require_nonzero_bytes === true,
+        min_bytes: check.min_bytes ?? null,
+        allowed_content_types: check.allowed_content_types ?? null,
+        body_contains: check.body_contains ?? [],
+        viewports: summaries.map((summary) => toJsonValue(summary)),
+        failures: failed.flatMap((summary) => Array.isArray(summary.failures) ? summary.failures.map((failure) => toJsonValue({ viewport: stringValue2(summary.viewport) ?? null, failure })) : [])
+      },
+      message: failed.length ? `HTTP status failed in ${failed.length} viewport(s).` : void 0
+    };
+  }
   if (check.type === "link_status" || check.type === "artifact_link_status") {
     const selector = linkStatusSelector(check);
     const summaries = viewports.map((viewport) => summarizeLinkStatusEvidence(viewport, check));
@@ -9053,16 +9178,37 @@ function textOrderMatch(texts, expectedTexts) {
 function linkStatusSelector(check) {
   return check.selector || check.link_selector || "a[href]";
 }
-function linkStatusAllowedStatuses(check) {
+function httpStatusRequestUrl(check, baseUrl) {
+  const rawUrl = check.url || "";
+  if (!rawUrl) return "";
+  try {
+    return baseUrl ? new URL(rawUrl, baseUrl).href : new URL(rawUrl).href;
+  } catch {
+    return rawUrl;
+  }
+}
+function httpStatusMethod(check) {
+  return String(check.method || "GET").toUpperCase();
+}
+function httpStatusKey(check, baseUrl) {
+  return httpStatusMethod(check) + " " + httpStatusRequestUrl(check, baseUrl);
+}
+function httpStatusAllowedStatuses(check) {
   if (Array.isArray(check.allowed_statuses) && check.allowed_statuses.length) return check.allowed_statuses;
   if (typeof check.expected_status === "number" && Number.isFinite(check.expected_status)) return [check.expected_status];
   return undefined;
 }
-function linkStatusIsAllowed(status, check) {
+function linkStatusAllowedStatuses(check) {
+  return httpStatusAllowedStatuses(check);
+}
+function httpStatusIsAllowed(status, check) {
   if (typeof status !== "number" || !Number.isFinite(status)) return false;
-  const allowed = linkStatusAllowedStatuses(check);
+  const allowed = httpStatusAllowedStatuses(check);
   return Array.isArray(allowed) && allowed.length ? allowed.includes(status) : status >= 200 && status < 400;
 }
+function linkStatusIsAllowed(status, check) {
+  return httpStatusIsAllowed(status, check);
+}
 function linkStatusObservedBytes(result) {
   const bytes = typeof result.bytes === "number" && Number.isFinite(result.bytes) ? result.bytes : undefined;
   const contentLength = typeof result.content_length === "number" && Number.isFinite(result.content_length) ? result.content_length : undefined;
@@ -9085,9 +9231,17 @@ function linkStatusContentTypeOk(result, check) {
     return actual === normalized;
   });
 }
+function httpStatusBodyContainsFailures(result, check) {
+  const expected = Array.isArray(check.body_contains) ? check.body_contains.filter(Boolean) : [];
+  if (!expected.length) return [];
+  const observed = result && typeof result.body_contains === "object" && !Array.isArray(result.body_contains)
+    ? result.body_contains
+    : {};
+  return expected.filter((text) => observed[text] !== true);
+}
 function linkStatusResultOk(result, check) {
   if (!result || typeof result !== "object" || Array.isArray(result)) return false;
-  if (!linkStatusIsAllowed(result.status, check)) return false;
+  if (!httpStatusIsAllowed(result.status, check)) return false;
   if (typeof result.error === "string" && result.error.trim()) return false;
   if (result.ok === false) return false;
   if (!linkStatusContentTypeOk(result, check)) return false;
@@ -9099,8 +9253,62 @@ function linkStatusResultOk(result, check) {
     const observedBytes = linkStatusObservedBytes(result);
     if (observedBytes === undefined || observedBytes < check.min_bytes) return false;
   }
+  if (httpStatusBodyContainsFailures(result, check).length) return false;
   return true;
 }
+function summarizeHttpStatusEvidence(viewport, check) {
+  const key = httpStatusKey(check, viewport && viewport.url);
+  const statusEvidence = viewport && viewport.http_statuses && viewport.http_statuses[key];
+  if (!statusEvidence || typeof statusEvidence !== "object" || Array.isArray(statusEvidence)) {
+    return {
+      viewport: viewport && viewport.name,
+      key,
+      url: httpStatusRequestUrl(check, viewport && viewport.url),
+      method: httpStatusMethod(check),
+      ok: false,
+      status: null,
+      failures: [{ code: "http_status_evidence_missing" }],
+    };
+  }
+  const failures = [];
+  const bodyContainsMissing = httpStatusBodyContainsFailures(statusEvidence, check);
+  if (!linkStatusResultOk(statusEvidence, check)) {
+    failures.push({
+      code: "http_status_failed",
+      url: typeof statusEvidence.url === "string" ? statusEvidence.url : httpStatusRequestUrl(check, viewport && viewport.url),
+      status: typeof statusEvidence.status === "number" && Number.isFinite(statusEvidence.status) ? statusEvidence.status : null,
+      method: typeof statusEvidence.method === "string" ? statusEvidence.method : httpStatusMethod(check),
+      error: typeof statusEvidence.error === "string" ? statusEvidence.error : null,
+      content_type: typeof statusEvidence.content_type === "string" ? statusEvidence.content_type : null,
+      bytes: linkStatusObservedBytes(statusEvidence) ?? null,
+      allowed_statuses: httpStatusAllowedStatuses(check) || ["2xx", "3xx"],
+      min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
+      allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
+      body_contains: Array.isArray(check.body_contains) ? check.body_contains : null,
+      body_contains_missing: bodyContainsMissing,
+      body_sample: typeof statusEvidence.body_sample === "string" ? statusEvidence.body_sample : null,
+    });
+  }
+  return {
+    viewport: viewport && viewport.name,
+    key,
+    url: typeof statusEvidence.url === "string" ? statusEvidence.url : httpStatusRequestUrl(check, viewport && viewport.url),
+    method: typeof statusEvidence.method === "string" ? statusEvidence.method : httpStatusMethod(check),
+    status: typeof statusEvidence.status === "number" && Number.isFinite(statusEvidence.status) ? statusEvidence.status : null,
+    status_text: typeof statusEvidence.status_text === "string" ? statusEvidence.status_text : null,
+    ok: failures.length === 0,
+    error: typeof statusEvidence.error === "string" ? statusEvidence.error : null,
+    content_type: typeof statusEvidence.content_type === "string" ? statusEvidence.content_type : null,
+    content_length: typeof statusEvidence.content_length === "number" && Number.isFinite(statusEvidence.content_length) ? statusEvidence.content_length : null,
+    bytes: linkStatusObservedBytes(statusEvidence) ?? null,
+    body_contains: statusEvidence.body_contains && typeof statusEvidence.body_contains === "object" && !Array.isArray(statusEvidence.body_contains)
+      ? statusEvidence.body_contains
+      : null,
+    body_contains_missing: bodyContainsMissing,
+    body_sample: typeof statusEvidence.body_sample === "string" ? statusEvidence.body_sample : null,
+    failures,
+  };
+}
 function summarizeLinkStatusEvidence(viewport, check) {
   const selector = linkStatusSelector(check);
   const linkEvidence = viewport && viewport.link_statuses && viewport.link_statuses[selector];
@@ -9856,6 +10064,31 @@ function assessProfile(profile, evidence) {
       });
       continue;
     }
+    if (check.type === "http_status") {
+      const url = httpStatusRequestUrl(check, evidence.target_url);
+      const method = httpStatusMethod(check);
+      const summaries = checkViewports.map((viewport) => summarizeHttpStatusEvidence(viewport, check));
+      const failed = summaries.filter((summary) => Array.isArray(summary.failures) && summary.failures.length > 0);
+      checks.push({
+        type: check.type,
+        label: check.label || check.type,
+        status: failed.length ? "failed" : "passed",
+        evidence: {
+          url,
+          method,
+          allowed_statuses: httpStatusAllowedStatuses(check) || ["2xx", "3xx"],
+          require_nonzero_bytes: check.require_nonzero_bytes === true,
+          min_bytes: check.min_bytes ?? null,
+          allowed_content_types: check.allowed_content_types ?? null,
+          viewports: summaries,
+          failures: failed.flatMap((summary) => Array.isArray(summary.failures)
+            ? summary.failures.map((failure) => ({ viewport: summary.viewport || null, failure }))
+            : []),
+        },
+        message: failed.length ? "HTTP status failed in " + failed.length + " viewport(s)." : undefined,
+      });
+      continue;
+    }
     if (check.type === "link_status" || check.type === "artifact_link_status") {
       const selector = linkStatusSelector(check);
       const summaries = checkViewports.map((viewport) => summarizeLinkStatusEvidence(viewport, check));
@@ -11053,6 +11286,72 @@ function linkProbeResponseFields(response, method) {
     content_length: contentLength,
   };
 }
+async function collectHttpStatus(check) {
+  const url = httpStatusRequestUrl(check, page.url() || targetUrl);
+  const method = httpStatusMethod(check);
+  const headers = check.headers && typeof check.headers === "object" && !Array.isArray(check.headers)
+    ? Object.fromEntries(Object.entries(check.headers).map(([key, value]) => [key, String(value)]).filter(([key]) => key.trim()))
+    : {};
+  let body;
+  if (check.body_json !== undefined) {
+    body = JSON.stringify(check.body_json);
+    if (!Object.keys(headers).some((key) => key.toLowerCase() === "content-type")) headers["content-type"] = "application/json";
+  } else if (typeof check.body === "string") {
+    body = check.body;
+  }
+  const bodyContains = Array.isArray(check.body_contains) ? check.body_contains.filter(Boolean) : [];
+  const options = {
+    method,
+    redirect: "follow",
+    cache: "no-store",
+    headers,
+  };
+  if (body !== undefined && method !== "GET" && method !== "HEAD") options.body = body;
+  const result = {
+    version: "riddle-proof.http-status.v1",
+    url,
+    method,
+    status: null,
+    ok: false,
+    error: null,
+    request_body_bytes: typeof body === "string" ? body.length : 0,
+    allowed_statuses: httpStatusAllowedStatuses(check) || ["2xx", "3xx"],
+    require_nonzero_bytes: check.require_nonzero_bytes === true,
+    min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
+    allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
+  };
+  try {
+    const response = await fetch(url, options);
+    Object.assign(result, linkProbeResponseFields(response, method));
+    result.url = url;
+    result.status_text = response.statusText || "";
+    const shouldReadBody = check.require_nonzero_bytes === true || (typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || bodyContains.length > 0;
+    if (shouldReadBody) {
+      try {
+        const buffer = await response.arrayBuffer();
+        result.bytes = buffer.byteLength;
+        if (bodyContains.length) {
+          const text = new TextDecoder().decode(buffer);
+          result.body_sample = text.slice(0, 1000);
+          result.body_contains = Object.fromEntries(bodyContains.map((expected) => [expected, text.includes(expected)]));
+        }
+      } catch (error) {
+        result.error = String(error && error.message ? error.message : error).slice(0, 500);
+      }
+    }
+    result.ok = linkProbeAllowed(result.status, check)
+      && linkProbeContentTypeAllowed(result, check)
+      && (check.require_nonzero_bytes !== true || ((linkProbeObservedBytes(result) || 0) > 0))
+      && (!(typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || ((linkProbeObservedBytes(result) || 0) >= check.min_bytes))
+      && (!bodyContains.length || bodyContains.every((expected) => result.body_contains && result.body_contains[expected] === true))
+      && !result.error;
+    return result;
+  } catch (error) {
+    result.error = String(error && error.message ? error.message : error).slice(0, 500);
+    result.ok = false;
+    return result;
+  }
+}
 async function probeLinkStatus(candidate, check) {
   const requireNonzeroBytes = check.require_nonzero_bytes === true;
   const minBytes = typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? Math.max(1, Math.floor(check.min_bytes)) : null;
@@ -11745,6 +12044,7 @@ async function captureViewport(viewport) {
   const frames = {};
   const text_sequences = {};
   const text_matches = {};
+  const http_statuses = {};
   const link_statuses = {};
   for (const check of profile.checks || []) {
     if (!profileCheckAppliesToViewport(check, viewport)) continue;
@@ -11771,6 +12071,10 @@ async function captureViewport(viewport) {
       selectors[check.selector] = selectors[check.selector] || await selectorStats(check.selector);
       frames[check.selector] = frames[check.selector] || await frameEvidence(check.selector);
     }
+    if (check.type === "http_status") {
+      const key = httpStatusKey(check, page.url() || targetUrl);
+      http_statuses[key] = http_statuses[key] || await collectHttpStatus(check);
+    }
     if (check.type === "link_status" || check.type === "artifact_link_status") {
       const selector = linkStatusSelector(check);
       link_statuses[selector] = link_statuses[selector] || await collectLinkStatus(check);
@@ -11838,6 +12142,7 @@ async function captureViewport(viewport) {
     frames,
     text_sequences,
     text_matches,
+    http_statuses,
     link_statuses,
     route_inventory: routeInventory,
     setup_action_results: setupActionResults,
@@ -11887,6 +12192,19 @@ function buildProfileEvidence(currentViewports) {
             ),
           })),
         })),
+      http_status: currentViewports
+        .filter((viewport) => viewport.http_statuses && Object.keys(viewport.http_statuses).length)
+        .map((viewport) => ({
+          viewport: viewport.name,
+          requests: Object.entries(viewport.http_statuses || {}).map(([key, statusSet]) => ({
+            key,
+            url: statusSet && statusSet.url,
+            method: statusSet && statusSet.method,
+            status: statusSet && statusSet.status,
+            ok: statusSet && statusSet.ok === true,
+            error: statusSet && statusSet.error,
+          })),
+        })),
       link_status: currentViewports
         .filter((viewport) => viewport.link_statuses && Object.keys(viewport.link_statuses).length)
         .map((viewport) => ({
@@ -12344,6 +12662,10 @@ function profileResultMarkdown(result) {
   if (linkStatusSummaryLines.length) {
     lines.push("", "## Link Status", "", ...linkStatusSummaryLines);
   }
+  const httpStatusSummaryLines = profileHttpStatusSummaryMarkdown(result);
+  if (httpStatusSummaryLines.length) {
+    lines.push("", "## HTTP Status", "", ...httpStatusSummaryLines);
+  }
   const environmentBlockerLines = profileEnvironmentBlockerMarkdown(result);
   if (environmentBlockerLines.length) {
     lines.push("", "## Environment Blocker", "", ...environmentBlockerLines);
@@ -12420,6 +12742,13 @@ function profileCheckMarkdownTarget(check) {
     if (selector && maxOverflow !== void 0) return `${markdownInlineCode(selector)} <= ${maxOverflow}px`;
     return selector ? markdownInlineCode(selector) : maxOverflow !== void 0 ? `<= ${maxOverflow}px` : void 0;
   }
+  if (check.type === "http_status") {
+    const url = cliString(evidence.url);
+    const method = cliString(evidence.method);
+    const statuses = Array.isArray(evidence.allowed_statuses) ? evidence.allowed_statuses.map((status) => cliString(status) || String(status)).filter(Boolean) : [];
+    const target = [method, url ? markdownInlineCode(url) : ""].filter(Boolean).join(" ");
+    return statuses.length ? `${target} -> ${statuses.join("/")}` : target || void 0;
+  }
   if (check.type === "link_status" || check.type === "artifact_link_status") {
     const expectedCount = cliFiniteNumber(evidence.expected_count);
     const minCount = cliFiniteNumber(evidence.min_count);
@@ -12647,6 +12976,24 @@ function profileLinkStatusSummaryMarkdown(result) {
   }
   return lines;
 }
+function profileHttpStatusSummaryMarkdown(result) {
+  const httpStatusChecks = result.checks.filter((check) => check.type === "http_status");
+  const lines = [];
+  for (const check of httpStatusChecks) {
+    const evidence = cliRecord(check.evidence);
+    if (!evidence) continue;
+    const label = check.label || check.type;
+    const url = cliString(evidence.url);
+    const method = cliString(evidence.method) || "GET";
+    const viewports = Array.isArray(evidence.viewports) ? evidence.viewports.map(cliRecord).filter((viewport) => Boolean(viewport)) : [];
+    const statuses = viewports.map((viewport) => cliFiniteNumber(viewport.status)).map((status) => status === void 0 ? "error" : String(status));
+    const failedTotal = Array.isArray(evidence.failures) ? evidence.failures.length : 0;
+    lines.push(
+      `- ${label}: ${method}${url ? ` ${markdownInlineCode(url)}` : ""}, statuses ${statuses.length ? statuses.join("/") : "unknown"}, failures ${failedTotal}`
+    );
+  }
+  return lines;
+}
 function writeProfileOutput(outputDir, result) {
   if (!outputDir) return;
   (0, import_node_fs6.mkdirSync)(outputDir, { recursive: true });

package/dist/cli.js

@@ -10,7 +10,7 @@ import {
   profileStatusExitCode,
   resolveRiddleProofProfileTargetUrl,
   resolveRiddleProofProfileTimeoutSec
-} from "./chunk-G3UY3SHZ.js";
+} from "./chunk-W5PBTTMJ.js";
 import {
   createRiddleApiClient,
   parseRiddleViewport
@@ -346,6 +346,10 @@ function profileResultMarkdown(result) {
   if (linkStatusSummaryLines.length) {
     lines.push("", "## Link Status", "", ...linkStatusSummaryLines);
   }
+  const httpStatusSummaryLines = profileHttpStatusSummaryMarkdown(result);
+  if (httpStatusSummaryLines.length) {
+    lines.push("", "## HTTP Status", "", ...httpStatusSummaryLines);
+  }
   const environmentBlockerLines = profileEnvironmentBlockerMarkdown(result);
   if (environmentBlockerLines.length) {
     lines.push("", "## Environment Blocker", "", ...environmentBlockerLines);
@@ -422,6 +426,13 @@ function profileCheckMarkdownTarget(check) {
     if (selector && maxOverflow !== void 0) return `${markdownInlineCode(selector)} <= ${maxOverflow}px`;
     return selector ? markdownInlineCode(selector) : maxOverflow !== void 0 ? `<= ${maxOverflow}px` : void 0;
   }
+  if (check.type === "http_status") {
+    const url = cliString(evidence.url);
+    const method = cliString(evidence.method);
+    const statuses = Array.isArray(evidence.allowed_statuses) ? evidence.allowed_statuses.map((status) => cliString(status) || String(status)).filter(Boolean) : [];
+    const target = [method, url ? markdownInlineCode(url) : ""].filter(Boolean).join(" ");
+    return statuses.length ? `${target} -> ${statuses.join("/")}` : target || void 0;
+  }
   if (check.type === "link_status" || check.type === "artifact_link_status") {
     const expectedCount = cliFiniteNumber(evidence.expected_count);
     const minCount = cliFiniteNumber(evidence.min_count);
@@ -649,6 +660,24 @@ function profileLinkStatusSummaryMarkdown(result) {
   }
   return lines;
 }
+function profileHttpStatusSummaryMarkdown(result) {
+  const httpStatusChecks = result.checks.filter((check) => check.type === "http_status");
+  const lines = [];
+  for (const check of httpStatusChecks) {
+    const evidence = cliRecord(check.evidence);
+    if (!evidence) continue;
+    const label = check.label || check.type;
+    const url = cliString(evidence.url);
+    const method = cliString(evidence.method) || "GET";
+    const viewports = Array.isArray(evidence.viewports) ? evidence.viewports.map(cliRecord).filter((viewport) => Boolean(viewport)) : [];
+    const statuses = viewports.map((viewport) => cliFiniteNumber(viewport.status)).map((status) => status === void 0 ? "error" : String(status));
+    const failedTotal = Array.isArray(evidence.failures) ? evidence.failures.length : 0;
+    lines.push(
+      `- ${label}: ${method}${url ? ` ${markdownInlineCode(url)}` : ""}, statuses ${statuses.length ? statuses.join("/") : "unknown"}, failures ${failedTotal}`
+    );
+  }
+  return lines;
+}
 function writeProfileOutput(outputDir, result) {
   if (!outputDir) return;
   mkdirSync(outputDir, { recursive: true });