@riddledc/riddle-proof 0.7.98 → 0.7.99

package/dist/{chunk-OMTWNL4B.js → chunk-W5PBTTMJ.js}

@@ -803,6 +803,10 @@ function normalizeCheck(input, index) {
     input.allowed_content_types ?? input.allowedContentTypes ?? input.expected_content_types ?? input.expectedContentTypes,
     `checks[${index}] allowed_content_types`
   ) ?? (expectedContentType ? [expectedContentType] : void 0) : void 0;
+  const bodyContains = isHttpStatusCheck ? normalizeStringList(
+    input.body_contains ?? input.bodyContains ?? input.expected_body_contains ?? input.expectedBodyContains ?? input.response_body_contains ?? input.responseBodyContains ?? input.body_includes ?? input.bodyIncludes,
+    `checks[${index}] body_contains`
+  ) : void 0;
   if (isLinkStatusCheck) {
     if (minCount !== void 0 && (!Number.isInteger(minCount) || minCount < 0)) {
       throw new Error(`checks[${index}] ${type} min_count must be a non-negative integer.`);
@@ -825,6 +829,7 @@ function normalizeCheck(input, index) {
     headers: isHttpStatusCheck ? stringRecord(input.headers) : void 0,
     body: isHttpStatusCheck ? stringValue(input.body) : void 0,
     body_json: isHttpStatusCheck && hasBodyJson ? toJsonValue(input.body_json ?? input.bodyJson ?? input.json) : void 0,
+    body_contains: bodyContains,
     expected_texts: expectedTexts,
     link_selector: stringValue(input.link_selector) || stringValue(input.linkSelector),
     source_selector: stringValue(input.source_selector) || stringValue(input.sourceSelector),
@@ -996,6 +1001,12 @@ function linkStatusContentTypeOk(result, check) {
     return actual === normalized;
   });
 }
+function httpStatusBodyContainsFailures(result, check) {
+  const expected = check.body_contains?.filter(Boolean) ?? [];
+  if (!expected.length) return [];
+  const observed = isRecord(result.body_contains) ? result.body_contains : {};
+  return expected.filter((text) => observed[text] !== true);
+}
 function linkStatusResultOk(result, check) {
   const status = numberValue(result.status);
   if (!httpStatusIsAllowed(status, check)) return false;
@@ -1010,6 +1021,7 @@ function linkStatusResultOk(result, check) {
     const observedBytes = linkStatusObservedBytes(result);
     if (observedBytes === void 0 || observedBytes < check.min_bytes) return false;
   }
+  if (httpStatusBodyContainsFailures(result, check).length) return false;
   return true;
 }
 function httpStatusEvidenceForCheck(viewport, check) {
@@ -1031,6 +1043,7 @@ function summarizeHttpStatusEvidence(viewport, check) {
     };
   }
   const failures = [];
+  const bodyContainsMissing = httpStatusBodyContainsFailures(statusEvidence, check);
   if (!linkStatusResultOk(statusEvidence, check)) {
     failures.push({
       code: "http_status_failed",
@@ -1042,7 +1055,10 @@ function summarizeHttpStatusEvidence(viewport, check) {
       bytes: linkStatusObservedBytes(statusEvidence) ?? null,
       allowed_statuses: httpStatusAllowedStatuses(check) ?? ["2xx", "3xx"],
       min_bytes: check.min_bytes ?? null,
-      allowed_content_types: check.allowed_content_types ?? null
+      allowed_content_types: check.allowed_content_types ?? null,
+      body_contains: check.body_contains ?? null,
+      body_contains_missing: bodyContainsMissing,
+      body_sample: stringValue(statusEvidence.body_sample) ?? null
     });
   }
   return {
@@ -1057,6 +1073,9 @@ function summarizeHttpStatusEvidence(viewport, check) {
     content_type: stringValue(statusEvidence.content_type) ?? null,
     content_length: numberValue(statusEvidence.content_length) ?? null,
     bytes: linkStatusObservedBytes(statusEvidence) ?? null,
+    body_contains: isRecord(statusEvidence.body_contains) ? toJsonValue(statusEvidence.body_contains) : null,
+    body_contains_missing: bodyContainsMissing,
+    body_sample: stringValue(statusEvidence.body_sample) ?? null,
     failures
   };
 }
@@ -1666,6 +1685,7 @@ function assessCheckFromEvidence(check, evidence) {
         require_nonzero_bytes: check.require_nonzero_bytes === true,
         min_bytes: check.min_bytes ?? null,
         allowed_content_types: check.allowed_content_types ?? null,
+        body_contains: check.body_contains ?? [],
         viewports: summaries.map((summary) => toJsonValue(summary)),
         failures: failed.flatMap((summary) => Array.isArray(summary.failures) ? summary.failures.map((failure) => toJsonValue({ viewport: stringValue(summary.viewport) ?? null, failure })) : [])
       },
@@ -2334,6 +2354,14 @@ function linkStatusContentTypeOk(result, check) {
     return actual === normalized;
   });
 }
+function httpStatusBodyContainsFailures(result, check) {
+  const expected = Array.isArray(check.body_contains) ? check.body_contains.filter(Boolean) : [];
+  if (!expected.length) return [];
+  const observed = result && typeof result.body_contains === "object" && !Array.isArray(result.body_contains)
+    ? result.body_contains
+    : {};
+  return expected.filter((text) => observed[text] !== true);
+}
 function linkStatusResultOk(result, check) {
   if (!result || typeof result !== "object" || Array.isArray(result)) return false;
   if (!httpStatusIsAllowed(result.status, check)) return false;
@@ -2348,6 +2376,7 @@ function linkStatusResultOk(result, check) {
     const observedBytes = linkStatusObservedBytes(result);
     if (observedBytes === undefined || observedBytes < check.min_bytes) return false;
   }
+  if (httpStatusBodyContainsFailures(result, check).length) return false;
   return true;
 }
 function summarizeHttpStatusEvidence(viewport, check) {
@@ -2365,6 +2394,7 @@ function summarizeHttpStatusEvidence(viewport, check) {
     };
   }
   const failures = [];
+  const bodyContainsMissing = httpStatusBodyContainsFailures(statusEvidence, check);
   if (!linkStatusResultOk(statusEvidence, check)) {
     failures.push({
       code: "http_status_failed",
@@ -2377,6 +2407,9 @@ function summarizeHttpStatusEvidence(viewport, check) {
       allowed_statuses: httpStatusAllowedStatuses(check) || ["2xx", "3xx"],
       min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
       allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
+      body_contains: Array.isArray(check.body_contains) ? check.body_contains : null,
+      body_contains_missing: bodyContainsMissing,
+      body_sample: typeof statusEvidence.body_sample === "string" ? statusEvidence.body_sample : null,
     });
   }
   return {
@@ -2391,6 +2424,11 @@ function summarizeHttpStatusEvidence(viewport, check) {
     content_type: typeof statusEvidence.content_type === "string" ? statusEvidence.content_type : null,
     content_length: typeof statusEvidence.content_length === "number" && Number.isFinite(statusEvidence.content_length) ? statusEvidence.content_length : null,
     bytes: linkStatusObservedBytes(statusEvidence) ?? null,
+    body_contains: statusEvidence.body_contains && typeof statusEvidence.body_contains === "object" && !Array.isArray(statusEvidence.body_contains)
+      ? statusEvidence.body_contains
+      : null,
+    body_contains_missing: bodyContainsMissing,
+    body_sample: typeof statusEvidence.body_sample === "string" ? statusEvidence.body_sample : null,
     failures,
   };
 }
@@ -4384,6 +4422,7 @@ async function collectHttpStatus(check) {
   } else if (typeof check.body === "string") {
     body = check.body;
   }
+  const bodyContains = Array.isArray(check.body_contains) ? check.body_contains.filter(Boolean) : [];
   const options = {
     method,
     redirect: "follow",
@@ -4409,11 +4448,16 @@ async function collectHttpStatus(check) {
     Object.assign(result, linkProbeResponseFields(response, method));
     result.url = url;
     result.status_text = response.statusText || "";
-    const shouldReadBody = check.require_nonzero_bytes === true || (typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes));
+    const shouldReadBody = check.require_nonzero_bytes === true || (typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || bodyContains.length > 0;
     if (shouldReadBody) {
       try {
         const buffer = await response.arrayBuffer();
         result.bytes = buffer.byteLength;
+        if (bodyContains.length) {
+          const text = new TextDecoder().decode(buffer);
+          result.body_sample = text.slice(0, 1000);
+          result.body_contains = Object.fromEntries(bodyContains.map((expected) => [expected, text.includes(expected)]));
+        }
       } catch (error) {
         result.error = String(error && error.message ? error.message : error).slice(0, 500);
       }
@@ -4422,6 +4466,7 @@ async function collectHttpStatus(check) {
       && linkProbeContentTypeAllowed(result, check)
       && (check.require_nonzero_bytes !== true || ((linkProbeObservedBytes(result) || 0) > 0))
       && (!(typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || ((linkProbeObservedBytes(result) || 0) >= check.min_bytes))
+      && (!bodyContains.length || bodyContains.every((expected) => result.body_contains && result.body_contains[expected] === true))
       && !result.error;
     return result;
   } catch (error) {

package/dist/cli.cjs

@@ -7696,6 +7696,10 @@ function normalizeCheck(input, index) {
     input.allowed_content_types ?? input.allowedContentTypes ?? input.expected_content_types ?? input.expectedContentTypes,
     `checks[${index}] allowed_content_types`
   ) ?? (expectedContentType ? [expectedContentType] : void 0) : void 0;
+  const bodyContains = isHttpStatusCheck ? normalizeStringList(
+    input.body_contains ?? input.bodyContains ?? input.expected_body_contains ?? input.expectedBodyContains ?? input.response_body_contains ?? input.responseBodyContains ?? input.body_includes ?? input.bodyIncludes,
+    `checks[${index}] body_contains`
+  ) : void 0;
   if (isLinkStatusCheck) {
     if (minCount !== void 0 && (!Number.isInteger(minCount) || minCount < 0)) {
       throw new Error(`checks[${index}] ${type} min_count must be a non-negative integer.`);
@@ -7718,6 +7722,7 @@ function normalizeCheck(input, index) {
     headers: isHttpStatusCheck ? stringRecord(input.headers) : void 0,
     body: isHttpStatusCheck ? stringValue2(input.body) : void 0,
     body_json: isHttpStatusCheck && hasBodyJson ? toJsonValue(input.body_json ?? input.bodyJson ?? input.json) : void 0,
+    body_contains: bodyContains,
     expected_texts: expectedTexts,
     link_selector: stringValue2(input.link_selector) || stringValue2(input.linkSelector),
     source_selector: stringValue2(input.source_selector) || stringValue2(input.sourceSelector),
@@ -7889,6 +7894,12 @@ function linkStatusContentTypeOk(result, check) {
     return actual === normalized;
   });
 }
+function httpStatusBodyContainsFailures(result, check) {
+  const expected = check.body_contains?.filter(Boolean) ?? [];
+  if (!expected.length) return [];
+  const observed = isRecord(result.body_contains) ? result.body_contains : {};
+  return expected.filter((text) => observed[text] !== true);
+}
 function linkStatusResultOk(result, check) {
   const status = numberValue(result.status);
   if (!httpStatusIsAllowed(status, check)) return false;
@@ -7903,6 +7914,7 @@ function linkStatusResultOk(result, check) {
     const observedBytes = linkStatusObservedBytes(result);
     if (observedBytes === void 0 || observedBytes < check.min_bytes) return false;
   }
+  if (httpStatusBodyContainsFailures(result, check).length) return false;
   return true;
 }
 function httpStatusEvidenceForCheck(viewport, check) {
@@ -7924,6 +7936,7 @@ function summarizeHttpStatusEvidence(viewport, check) {
     };
   }
   const failures = [];
+  const bodyContainsMissing = httpStatusBodyContainsFailures(statusEvidence, check);
   if (!linkStatusResultOk(statusEvidence, check)) {
     failures.push({
       code: "http_status_failed",
@@ -7935,7 +7948,10 @@ function summarizeHttpStatusEvidence(viewport, check) {
       bytes: linkStatusObservedBytes(statusEvidence) ?? null,
       allowed_statuses: httpStatusAllowedStatuses(check) ?? ["2xx", "3xx"],
       min_bytes: check.min_bytes ?? null,
-      allowed_content_types: check.allowed_content_types ?? null
+      allowed_content_types: check.allowed_content_types ?? null,
+      body_contains: check.body_contains ?? null,
+      body_contains_missing: bodyContainsMissing,
+      body_sample: stringValue2(statusEvidence.body_sample) ?? null
     });
   }
   return {
@@ -7950,6 +7966,9 @@ function summarizeHttpStatusEvidence(viewport, check) {
     content_type: stringValue2(statusEvidence.content_type) ?? null,
     content_length: numberValue(statusEvidence.content_length) ?? null,
     bytes: linkStatusObservedBytes(statusEvidence) ?? null,
+    body_contains: isRecord(statusEvidence.body_contains) ? toJsonValue(statusEvidence.body_contains) : null,
+    body_contains_missing: bodyContainsMissing,
+    body_sample: stringValue2(statusEvidence.body_sample) ?? null,
     failures
   };
 }
@@ -8559,6 +8578,7 @@ function assessCheckFromEvidence(check, evidence) {
         require_nonzero_bytes: check.require_nonzero_bytes === true,
         min_bytes: check.min_bytes ?? null,
         allowed_content_types: check.allowed_content_types ?? null,
+        body_contains: check.body_contains ?? [],
         viewports: summaries.map((summary) => toJsonValue(summary)),
         failures: failed.flatMap((summary) => Array.isArray(summary.failures) ? summary.failures.map((failure) => toJsonValue({ viewport: stringValue2(summary.viewport) ?? null, failure })) : [])
       },
@@ -9211,6 +9231,14 @@ function linkStatusContentTypeOk(result, check) {
     return actual === normalized;
   });
 }
+function httpStatusBodyContainsFailures(result, check) {
+  const expected = Array.isArray(check.body_contains) ? check.body_contains.filter(Boolean) : [];
+  if (!expected.length) return [];
+  const observed = result && typeof result.body_contains === "object" && !Array.isArray(result.body_contains)
+    ? result.body_contains
+    : {};
+  return expected.filter((text) => observed[text] !== true);
+}
 function linkStatusResultOk(result, check) {
   if (!result || typeof result !== "object" || Array.isArray(result)) return false;
   if (!httpStatusIsAllowed(result.status, check)) return false;
@@ -9225,6 +9253,7 @@ function linkStatusResultOk(result, check) {
     const observedBytes = linkStatusObservedBytes(result);
     if (observedBytes === undefined || observedBytes < check.min_bytes) return false;
   }
+  if (httpStatusBodyContainsFailures(result, check).length) return false;
   return true;
 }
 function summarizeHttpStatusEvidence(viewport, check) {
@@ -9242,6 +9271,7 @@ function summarizeHttpStatusEvidence(viewport, check) {
     };
   }
   const failures = [];
+  const bodyContainsMissing = httpStatusBodyContainsFailures(statusEvidence, check);
   if (!linkStatusResultOk(statusEvidence, check)) {
     failures.push({
       code: "http_status_failed",
@@ -9254,6 +9284,9 @@ function summarizeHttpStatusEvidence(viewport, check) {
       allowed_statuses: httpStatusAllowedStatuses(check) || ["2xx", "3xx"],
       min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
       allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
+      body_contains: Array.isArray(check.body_contains) ? check.body_contains : null,
+      body_contains_missing: bodyContainsMissing,
+      body_sample: typeof statusEvidence.body_sample === "string" ? statusEvidence.body_sample : null,
     });
   }
   return {
@@ -9268,6 +9301,11 @@ function summarizeHttpStatusEvidence(viewport, check) {
     content_type: typeof statusEvidence.content_type === "string" ? statusEvidence.content_type : null,
     content_length: typeof statusEvidence.content_length === "number" && Number.isFinite(statusEvidence.content_length) ? statusEvidence.content_length : null,
     bytes: linkStatusObservedBytes(statusEvidence) ?? null,
+    body_contains: statusEvidence.body_contains && typeof statusEvidence.body_contains === "object" && !Array.isArray(statusEvidence.body_contains)
+      ? statusEvidence.body_contains
+      : null,
+    body_contains_missing: bodyContainsMissing,
+    body_sample: typeof statusEvidence.body_sample === "string" ? statusEvidence.body_sample : null,
     failures,
   };
 }
@@ -11261,6 +11299,7 @@ async function collectHttpStatus(check) {
   } else if (typeof check.body === "string") {
     body = check.body;
   }
+  const bodyContains = Array.isArray(check.body_contains) ? check.body_contains.filter(Boolean) : [];
   const options = {
     method,
     redirect: "follow",
@@ -11286,11 +11325,16 @@ async function collectHttpStatus(check) {
     Object.assign(result, linkProbeResponseFields(response, method));
     result.url = url;
     result.status_text = response.statusText || "";
-    const shouldReadBody = check.require_nonzero_bytes === true || (typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes));
+    const shouldReadBody = check.require_nonzero_bytes === true || (typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || bodyContains.length > 0;
     if (shouldReadBody) {
       try {
         const buffer = await response.arrayBuffer();
         result.bytes = buffer.byteLength;
+        if (bodyContains.length) {
+          const text = new TextDecoder().decode(buffer);
+          result.body_sample = text.slice(0, 1000);
+          result.body_contains = Object.fromEntries(bodyContains.map((expected) => [expected, text.includes(expected)]));
+        }
       } catch (error) {
         result.error = String(error && error.message ? error.message : error).slice(0, 500);
       }
@@ -11299,6 +11343,7 @@ async function collectHttpStatus(check) {
       && linkProbeContentTypeAllowed(result, check)
       && (check.require_nonzero_bytes !== true || ((linkProbeObservedBytes(result) || 0) > 0))
       && (!(typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || ((linkProbeObservedBytes(result) || 0) >= check.min_bytes))
+      && (!bodyContains.length || bodyContains.every((expected) => result.body_contains && result.body_contains[expected] === true))
       && !result.error;
     return result;
   } catch (error) {

package/dist/cli.js

@@ -10,7 +10,7 @@ import {
   profileStatusExitCode,
   resolveRiddleProofProfileTargetUrl,
   resolveRiddleProofProfileTimeoutSec
-} from "./chunk-OMTWNL4B.js";
+} from "./chunk-W5PBTTMJ.js";
 import {
   createRiddleApiClient,
   parseRiddleViewport

package/dist/index.cjs

@@ -9532,6 +9532,10 @@ function normalizeCheck(input, index) {
     input.allowed_content_types ?? input.allowedContentTypes ?? input.expected_content_types ?? input.expectedContentTypes,
     `checks[${index}] allowed_content_types`
   ) ?? (expectedContentType ? [expectedContentType] : void 0) : void 0;
+  const bodyContains = isHttpStatusCheck ? normalizeStringList(
+    input.body_contains ?? input.bodyContains ?? input.expected_body_contains ?? input.expectedBodyContains ?? input.response_body_contains ?? input.responseBodyContains ?? input.body_includes ?? input.bodyIncludes,
+    `checks[${index}] body_contains`
+  ) : void 0;
   if (isLinkStatusCheck) {
     if (minCount !== void 0 && (!Number.isInteger(minCount) || minCount < 0)) {
       throw new Error(`checks[${index}] ${type} min_count must be a non-negative integer.`);
@@ -9554,6 +9558,7 @@ function normalizeCheck(input, index) {
     headers: isHttpStatusCheck ? stringRecord(input.headers) : void 0,
     body: isHttpStatusCheck ? stringValue5(input.body) : void 0,
     body_json: isHttpStatusCheck && hasBodyJson ? toJsonValue(input.body_json ?? input.bodyJson ?? input.json) : void 0,
+    body_contains: bodyContains,
     expected_texts: expectedTexts,
     link_selector: stringValue5(input.link_selector) || stringValue5(input.linkSelector),
     source_selector: stringValue5(input.source_selector) || stringValue5(input.sourceSelector),
@@ -9725,6 +9730,12 @@ function linkStatusContentTypeOk(result, check) {
     return actual === normalized;
   });
 }
+function httpStatusBodyContainsFailures(result, check) {
+  const expected = check.body_contains?.filter(Boolean) ?? [];
+  if (!expected.length) return [];
+  const observed = isRecord2(result.body_contains) ? result.body_contains : {};
+  return expected.filter((text) => observed[text] !== true);
+}
 function linkStatusResultOk(result, check) {
   const status = numberValue3(result.status);
   if (!httpStatusIsAllowed(status, check)) return false;
@@ -9739,6 +9750,7 @@ function linkStatusResultOk(result, check) {
     const observedBytes = linkStatusObservedBytes(result);
     if (observedBytes === void 0 || observedBytes < check.min_bytes) return false;
   }
+  if (httpStatusBodyContainsFailures(result, check).length) return false;
   return true;
 }
 function httpStatusEvidenceForCheck(viewport, check) {
@@ -9760,6 +9772,7 @@ function summarizeHttpStatusEvidence(viewport, check) {
     };
   }
   const failures = [];
+  const bodyContainsMissing = httpStatusBodyContainsFailures(statusEvidence, check);
   if (!linkStatusResultOk(statusEvidence, check)) {
     failures.push({
       code: "http_status_failed",
@@ -9771,7 +9784,10 @@ function summarizeHttpStatusEvidence(viewport, check) {
       bytes: linkStatusObservedBytes(statusEvidence) ?? null,
       allowed_statuses: httpStatusAllowedStatuses(check) ?? ["2xx", "3xx"],
       min_bytes: check.min_bytes ?? null,
-      allowed_content_types: check.allowed_content_types ?? null
+      allowed_content_types: check.allowed_content_types ?? null,
+      body_contains: check.body_contains ?? null,
+      body_contains_missing: bodyContainsMissing,
+      body_sample: stringValue5(statusEvidence.body_sample) ?? null
     });
   }
   return {
@@ -9786,6 +9802,9 @@ function summarizeHttpStatusEvidence(viewport, check) {
     content_type: stringValue5(statusEvidence.content_type) ?? null,
     content_length: numberValue3(statusEvidence.content_length) ?? null,
     bytes: linkStatusObservedBytes(statusEvidence) ?? null,
+    body_contains: isRecord2(statusEvidence.body_contains) ? toJsonValue(statusEvidence.body_contains) : null,
+    body_contains_missing: bodyContainsMissing,
+    body_sample: stringValue5(statusEvidence.body_sample) ?? null,
     failures
   };
 }
@@ -10395,6 +10414,7 @@ function assessCheckFromEvidence(check, evidence) {
         require_nonzero_bytes: check.require_nonzero_bytes === true,
         min_bytes: check.min_bytes ?? null,
         allowed_content_types: check.allowed_content_types ?? null,
+        body_contains: check.body_contains ?? [],
         viewports: summaries.map((summary) => toJsonValue(summary)),
         failures: failed.flatMap((summary) => Array.isArray(summary.failures) ? summary.failures.map((failure) => toJsonValue({ viewport: stringValue5(summary.viewport) ?? null, failure })) : [])
       },
@@ -11063,6 +11083,14 @@ function linkStatusContentTypeOk(result, check) {
     return actual === normalized;
   });
 }
+function httpStatusBodyContainsFailures(result, check) {
+  const expected = Array.isArray(check.body_contains) ? check.body_contains.filter(Boolean) : [];
+  if (!expected.length) return [];
+  const observed = result && typeof result.body_contains === "object" && !Array.isArray(result.body_contains)
+    ? result.body_contains
+    : {};
+  return expected.filter((text) => observed[text] !== true);
+}
 function linkStatusResultOk(result, check) {
   if (!result || typeof result !== "object" || Array.isArray(result)) return false;
   if (!httpStatusIsAllowed(result.status, check)) return false;
@@ -11077,6 +11105,7 @@ function linkStatusResultOk(result, check) {
     const observedBytes = linkStatusObservedBytes(result);
     if (observedBytes === undefined || observedBytes < check.min_bytes) return false;
   }
+  if (httpStatusBodyContainsFailures(result, check).length) return false;
   return true;
 }
 function summarizeHttpStatusEvidence(viewport, check) {
@@ -11094,6 +11123,7 @@ function summarizeHttpStatusEvidence(viewport, check) {
     };
   }
   const failures = [];
+  const bodyContainsMissing = httpStatusBodyContainsFailures(statusEvidence, check);
   if (!linkStatusResultOk(statusEvidence, check)) {
     failures.push({
       code: "http_status_failed",
@@ -11106,6 +11136,9 @@ function summarizeHttpStatusEvidence(viewport, check) {
       allowed_statuses: httpStatusAllowedStatuses(check) || ["2xx", "3xx"],
       min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
       allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
+      body_contains: Array.isArray(check.body_contains) ? check.body_contains : null,
+      body_contains_missing: bodyContainsMissing,
+      body_sample: typeof statusEvidence.body_sample === "string" ? statusEvidence.body_sample : null,
     });
   }
   return {
@@ -11120,6 +11153,11 @@ function summarizeHttpStatusEvidence(viewport, check) {
     content_type: typeof statusEvidence.content_type === "string" ? statusEvidence.content_type : null,
     content_length: typeof statusEvidence.content_length === "number" && Number.isFinite(statusEvidence.content_length) ? statusEvidence.content_length : null,
     bytes: linkStatusObservedBytes(statusEvidence) ?? null,
+    body_contains: statusEvidence.body_contains && typeof statusEvidence.body_contains === "object" && !Array.isArray(statusEvidence.body_contains)
+      ? statusEvidence.body_contains
+      : null,
+    body_contains_missing: bodyContainsMissing,
+    body_sample: typeof statusEvidence.body_sample === "string" ? statusEvidence.body_sample : null,
     failures,
   };
 }
@@ -13113,6 +13151,7 @@ async function collectHttpStatus(check) {
   } else if (typeof check.body === "string") {
     body = check.body;
   }
+  const bodyContains = Array.isArray(check.body_contains) ? check.body_contains.filter(Boolean) : [];
   const options = {
     method,
     redirect: "follow",
@@ -13138,11 +13177,16 @@ async function collectHttpStatus(check) {
     Object.assign(result, linkProbeResponseFields(response, method));
     result.url = url;
     result.status_text = response.statusText || "";
-    const shouldReadBody = check.require_nonzero_bytes === true || (typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes));
+    const shouldReadBody = check.require_nonzero_bytes === true || (typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || bodyContains.length > 0;
     if (shouldReadBody) {
       try {
         const buffer = await response.arrayBuffer();
         result.bytes = buffer.byteLength;
+        if (bodyContains.length) {
+          const text = new TextDecoder().decode(buffer);
+          result.body_sample = text.slice(0, 1000);
+          result.body_contains = Object.fromEntries(bodyContains.map((expected) => [expected, text.includes(expected)]));
+        }
       } catch (error) {
         result.error = String(error && error.message ? error.message : error).slice(0, 500);
       }
@@ -13151,6 +13195,7 @@ async function collectHttpStatus(check) {
       && linkProbeContentTypeAllowed(result, check)
       && (check.require_nonzero_bytes !== true || ((linkProbeObservedBytes(result) || 0) > 0))
       && (!(typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || ((linkProbeObservedBytes(result) || 0) >= check.min_bytes))
+      && (!bodyContains.length || bodyContains.every((expected) => result.body_contains && result.body_contains[expected] === true))
       && !result.error;
     return result;
   } catch (error) {

package/dist/index.js

@@ -58,7 +58,7 @@ import {
   resolveRiddleProofProfileTimeoutSec,
   slugifyRiddleProofProfileName,
   summarizeRiddleProofProfileResult
-} from "./chunk-OMTWNL4B.js";
+} from "./chunk-W5PBTTMJ.js";
 import {
   DEFAULT_RIDDLE_API_BASE_URL,
   DEFAULT_RIDDLE_API_KEY_FILE,

package/dist/profile.cjs

@@ -846,6 +846,10 @@ function normalizeCheck(input, index) {
     input.allowed_content_types ?? input.allowedContentTypes ?? input.expected_content_types ?? input.expectedContentTypes,
     `checks[${index}] allowed_content_types`
   ) ?? (expectedContentType ? [expectedContentType] : void 0) : void 0;
+  const bodyContains = isHttpStatusCheck ? normalizeStringList(
+    input.body_contains ?? input.bodyContains ?? input.expected_body_contains ?? input.expectedBodyContains ?? input.response_body_contains ?? input.responseBodyContains ?? input.body_includes ?? input.bodyIncludes,
+    `checks[${index}] body_contains`
+  ) : void 0;
   if (isLinkStatusCheck) {
     if (minCount !== void 0 && (!Number.isInteger(minCount) || minCount < 0)) {
       throw new Error(`checks[${index}] ${type} min_count must be a non-negative integer.`);
@@ -868,6 +872,7 @@ function normalizeCheck(input, index) {
     headers: isHttpStatusCheck ? stringRecord(input.headers) : void 0,
     body: isHttpStatusCheck ? stringValue(input.body) : void 0,
     body_json: isHttpStatusCheck && hasBodyJson ? toJsonValue(input.body_json ?? input.bodyJson ?? input.json) : void 0,
+    body_contains: bodyContains,
     expected_texts: expectedTexts,
     link_selector: stringValue(input.link_selector) || stringValue(input.linkSelector),
     source_selector: stringValue(input.source_selector) || stringValue(input.sourceSelector),
@@ -1039,6 +1044,12 @@ function linkStatusContentTypeOk(result, check) {
     return actual === normalized;
   });
 }
+function httpStatusBodyContainsFailures(result, check) {
+  const expected = check.body_contains?.filter(Boolean) ?? [];
+  if (!expected.length) return [];
+  const observed = isRecord(result.body_contains) ? result.body_contains : {};
+  return expected.filter((text) => observed[text] !== true);
+}
 function linkStatusResultOk(result, check) {
   const status = numberValue(result.status);
   if (!httpStatusIsAllowed(status, check)) return false;
@@ -1053,6 +1064,7 @@ function linkStatusResultOk(result, check) {
     const observedBytes = linkStatusObservedBytes(result);
     if (observedBytes === void 0 || observedBytes < check.min_bytes) return false;
   }
+  if (httpStatusBodyContainsFailures(result, check).length) return false;
   return true;
 }
 function httpStatusEvidenceForCheck(viewport, check) {
@@ -1074,6 +1086,7 @@ function summarizeHttpStatusEvidence(viewport, check) {
     };
   }
   const failures = [];
+  const bodyContainsMissing = httpStatusBodyContainsFailures(statusEvidence, check);
   if (!linkStatusResultOk(statusEvidence, check)) {
     failures.push({
       code: "http_status_failed",
@@ -1085,7 +1098,10 @@ function summarizeHttpStatusEvidence(viewport, check) {
       bytes: linkStatusObservedBytes(statusEvidence) ?? null,
       allowed_statuses: httpStatusAllowedStatuses(check) ?? ["2xx", "3xx"],
       min_bytes: check.min_bytes ?? null,
-      allowed_content_types: check.allowed_content_types ?? null
+      allowed_content_types: check.allowed_content_types ?? null,
+      body_contains: check.body_contains ?? null,
+      body_contains_missing: bodyContainsMissing,
+      body_sample: stringValue(statusEvidence.body_sample) ?? null
     });
   }
   return {
@@ -1100,6 +1116,9 @@ function summarizeHttpStatusEvidence(viewport, check) {
     content_type: stringValue(statusEvidence.content_type) ?? null,
     content_length: numberValue(statusEvidence.content_length) ?? null,
     bytes: linkStatusObservedBytes(statusEvidence) ?? null,
+    body_contains: isRecord(statusEvidence.body_contains) ? toJsonValue(statusEvidence.body_contains) : null,
+    body_contains_missing: bodyContainsMissing,
+    body_sample: stringValue(statusEvidence.body_sample) ?? null,
     failures
   };
 }
@@ -1709,6 +1728,7 @@ function assessCheckFromEvidence(check, evidence) {
         require_nonzero_bytes: check.require_nonzero_bytes === true,
         min_bytes: check.min_bytes ?? null,
         allowed_content_types: check.allowed_content_types ?? null,
+        body_contains: check.body_contains ?? [],
         viewports: summaries.map((summary) => toJsonValue(summary)),
         failures: failed.flatMap((summary) => Array.isArray(summary.failures) ? summary.failures.map((failure) => toJsonValue({ viewport: stringValue(summary.viewport) ?? null, failure })) : [])
       },
@@ -2377,6 +2397,14 @@ function linkStatusContentTypeOk(result, check) {
     return actual === normalized;
   });
 }
+function httpStatusBodyContainsFailures(result, check) {
+  const expected = Array.isArray(check.body_contains) ? check.body_contains.filter(Boolean) : [];
+  if (!expected.length) return [];
+  const observed = result && typeof result.body_contains === "object" && !Array.isArray(result.body_contains)
+    ? result.body_contains
+    : {};
+  return expected.filter((text) => observed[text] !== true);
+}
 function linkStatusResultOk(result, check) {
   if (!result || typeof result !== "object" || Array.isArray(result)) return false;
   if (!httpStatusIsAllowed(result.status, check)) return false;
@@ -2391,6 +2419,7 @@ function linkStatusResultOk(result, check) {
     const observedBytes = linkStatusObservedBytes(result);
     if (observedBytes === undefined || observedBytes < check.min_bytes) return false;
   }
+  if (httpStatusBodyContainsFailures(result, check).length) return false;
   return true;
 }
 function summarizeHttpStatusEvidence(viewport, check) {
@@ -2408,6 +2437,7 @@ function summarizeHttpStatusEvidence(viewport, check) {
     };
   }
   const failures = [];
+  const bodyContainsMissing = httpStatusBodyContainsFailures(statusEvidence, check);
   if (!linkStatusResultOk(statusEvidence, check)) {
     failures.push({
       code: "http_status_failed",
@@ -2420,6 +2450,9 @@ function summarizeHttpStatusEvidence(viewport, check) {
       allowed_statuses: httpStatusAllowedStatuses(check) || ["2xx", "3xx"],
       min_bytes: typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes) ? check.min_bytes : null,
       allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
+      body_contains: Array.isArray(check.body_contains) ? check.body_contains : null,
+      body_contains_missing: bodyContainsMissing,
+      body_sample: typeof statusEvidence.body_sample === "string" ? statusEvidence.body_sample : null,
     });
   }
   return {
@@ -2434,6 +2467,11 @@ function summarizeHttpStatusEvidence(viewport, check) {
     content_type: typeof statusEvidence.content_type === "string" ? statusEvidence.content_type : null,
     content_length: typeof statusEvidence.content_length === "number" && Number.isFinite(statusEvidence.content_length) ? statusEvidence.content_length : null,
     bytes: linkStatusObservedBytes(statusEvidence) ?? null,
+    body_contains: statusEvidence.body_contains && typeof statusEvidence.body_contains === "object" && !Array.isArray(statusEvidence.body_contains)
+      ? statusEvidence.body_contains
+      : null,
+    body_contains_missing: bodyContainsMissing,
+    body_sample: typeof statusEvidence.body_sample === "string" ? statusEvidence.body_sample : null,
     failures,
   };
 }
@@ -4427,6 +4465,7 @@ async function collectHttpStatus(check) {
   } else if (typeof check.body === "string") {
     body = check.body;
   }
+  const bodyContains = Array.isArray(check.body_contains) ? check.body_contains.filter(Boolean) : [];
   const options = {
     method,
     redirect: "follow",
@@ -4452,11 +4491,16 @@ async function collectHttpStatus(check) {
     Object.assign(result, linkProbeResponseFields(response, method));
     result.url = url;
     result.status_text = response.statusText || "";
-    const shouldReadBody = check.require_nonzero_bytes === true || (typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes));
+    const shouldReadBody = check.require_nonzero_bytes === true || (typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || bodyContains.length > 0;
     if (shouldReadBody) {
       try {
         const buffer = await response.arrayBuffer();
         result.bytes = buffer.byteLength;
+        if (bodyContains.length) {
+          const text = new TextDecoder().decode(buffer);
+          result.body_sample = text.slice(0, 1000);
+          result.body_contains = Object.fromEntries(bodyContains.map((expected) => [expected, text.includes(expected)]));
+        }
       } catch (error) {
         result.error = String(error && error.message ? error.message : error).slice(0, 500);
       }
@@ -4465,6 +4509,7 @@ async function collectHttpStatus(check) {
       && linkProbeContentTypeAllowed(result, check)
       && (check.require_nonzero_bytes !== true || ((linkProbeObservedBytes(result) || 0) > 0))
       && (!(typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || ((linkProbeObservedBytes(result) || 0) >= check.min_bytes))
+      && (!bodyContains.length || bodyContains.every((expected) => result.body_contains && result.body_contains[expected] === true))
       && !result.error;
     return result;
   } catch (error) {

package/dist/profile.d.cts

@@ -119,6 +119,7 @@ interface RiddleProofProfileCheck {
     headers?: Record<string, string>;
     body?: string;
     body_json?: JsonValue;
+    body_contains?: string[];
     expected_texts?: string[];
     link_selector?: string;
     source_selector?: string;

package/dist/profile.d.ts

@@ -119,6 +119,7 @@ interface RiddleProofProfileCheck {
     headers?: Record<string, string>;
     body?: string;
     body_json?: JsonValue;
+    body_contains?: string[];
     expected_texts?: string[];
     link_selector?: string;
     source_selector?: string;

package/dist/profile.js

@@ -19,7 +19,7 @@ import {
   resolveRiddleProofProfileTimeoutSec,
   slugifyRiddleProofProfileName,
   summarizeRiddleProofProfileResult
-} from "./chunk-OMTWNL4B.js";
+} from "./chunk-W5PBTTMJ.js";
 export {
   RIDDLE_PROOF_PROFILE_CHECK_TYPES,
   RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riddledc/riddle-proof",
-  "version": "0.7.98",
+  "version": "0.7.99",
   "description": "Reusable Riddle Proof contracts and helpers for evidence-backed agent changes.",
   "license": "MIT",
   "author": "RiddleDC",