@riddledc/riddle-proof 0.7.99 → 0.7.101

package/dist/{chunk-W5PBTTMJ.js → chunk-7FQU5UH7.js}

@@ -807,6 +807,15 @@ function normalizeCheck(input, index) {
     input.body_contains ?? input.bodyContains ?? input.expected_body_contains ?? input.expectedBodyContains ?? input.response_body_contains ?? input.responseBodyContains ?? input.body_includes ?? input.bodyIncludes,
     `checks[${index}] body_contains`
   ) : void 0;
+  const bodyNotContains = isHttpStatusCheck ? normalizeStringList(
+    input.body_not_contains ?? input.bodyNotContains ?? input.expected_body_not_contains ?? input.expectedBodyNotContains ?? input.response_body_not_contains ?? input.responseBodyNotContains ?? input.body_absent ?? input.bodyAbsent,
+    `checks[${index}] body_not_contains`
+  ) : void 0;
+  const bodyNotPatterns = isHttpStatusCheck ? normalizeStringList(
+    input.body_not_patterns ?? input.bodyNotPatterns ?? input.expected_body_not_patterns ?? input.expectedBodyNotPatterns ?? input.response_body_not_patterns ?? input.responseBodyNotPatterns ?? input.body_forbidden_patterns ?? input.bodyForbiddenPatterns,
+    `checks[${index}] body_not_patterns`
+  ) : void 0;
+  if (bodyNotPatterns?.length) validateRegexPatterns(bodyNotPatterns, `checks[${index}] body_not_patterns`);
   if (isLinkStatusCheck) {
     if (minCount !== void 0 && (!Number.isInteger(minCount) || minCount < 0)) {
       throw new Error(`checks[${index}] ${type} min_count must be a non-negative integer.`);
@@ -830,6 +839,8 @@ function normalizeCheck(input, index) {
     body: isHttpStatusCheck ? stringValue(input.body) : void 0,
     body_json: isHttpStatusCheck && hasBodyJson ? toJsonValue(input.body_json ?? input.bodyJson ?? input.json) : void 0,
     body_contains: bodyContains,
+    body_not_contains: bodyNotContains,
+    body_not_patterns: bodyNotPatterns,
     expected_texts: expectedTexts,
     link_selector: stringValue(input.link_selector) || stringValue(input.linkSelector),
     source_selector: stringValue(input.source_selector) || stringValue(input.sourceSelector),
@@ -1007,6 +1018,18 @@ function httpStatusBodyContainsFailures(result, check) {
   const observed = isRecord(result.body_contains) ? result.body_contains : {};
   return expected.filter((text) => observed[text] !== true);
 }
+function httpStatusBodyNotContainsFailures(result, check) {
+  const forbidden = check.body_not_contains?.filter(Boolean) ?? [];
+  if (!forbidden.length) return [];
+  const observed = isRecord(result.body_not_contains) ? result.body_not_contains : {};
+  return forbidden.filter((text) => observed[text] !== false);
+}
+function httpStatusBodyNotPatternFailures(result, check) {
+  const forbidden = check.body_not_patterns?.filter(Boolean) ?? [];
+  if (!forbidden.length) return [];
+  const observed = isRecord(result.body_not_patterns) ? result.body_not_patterns : {};
+  return forbidden.filter((pattern) => observed[pattern] !== false);
+}
 function linkStatusResultOk(result, check) {
   const status = numberValue(result.status);
   if (!httpStatusIsAllowed(status, check)) return false;
@@ -1022,6 +1045,8 @@ function linkStatusResultOk(result, check) {
     if (observedBytes === void 0 || observedBytes < check.min_bytes) return false;
   }
   if (httpStatusBodyContainsFailures(result, check).length) return false;
+  if (httpStatusBodyNotContainsFailures(result, check).length) return false;
+  if (httpStatusBodyNotPatternFailures(result, check).length) return false;
   return true;
 }
 function httpStatusEvidenceForCheck(viewport, check) {
@@ -1044,6 +1069,8 @@ function summarizeHttpStatusEvidence(viewport, check) {
   }
   const failures = [];
   const bodyContainsMissing = httpStatusBodyContainsFailures(statusEvidence, check);
+  const bodyNotContainsFound = httpStatusBodyNotContainsFailures(statusEvidence, check);
+  const bodyNotPatternsFound = httpStatusBodyNotPatternFailures(statusEvidence, check);
   if (!linkStatusResultOk(statusEvidence, check)) {
     failures.push({
       code: "http_status_failed",
@@ -1058,6 +1085,10 @@ function summarizeHttpStatusEvidence(viewport, check) {
       allowed_content_types: check.allowed_content_types ?? null,
       body_contains: check.body_contains ?? null,
       body_contains_missing: bodyContainsMissing,
+      body_not_contains: check.body_not_contains ?? null,
+      body_not_contains_found: bodyNotContainsFound,
+      body_not_patterns: check.body_not_patterns ?? null,
+      body_not_patterns_found: bodyNotPatternsFound,
       body_sample: stringValue(statusEvidence.body_sample) ?? null
     });
   }
@@ -1075,6 +1106,10 @@ function summarizeHttpStatusEvidence(viewport, check) {
     bytes: linkStatusObservedBytes(statusEvidence) ?? null,
     body_contains: isRecord(statusEvidence.body_contains) ? toJsonValue(statusEvidence.body_contains) : null,
     body_contains_missing: bodyContainsMissing,
+    body_not_contains: isRecord(statusEvidence.body_not_contains) ? toJsonValue(statusEvidence.body_not_contains) : null,
+    body_not_contains_found: bodyNotContainsFound,
+    body_not_patterns: isRecord(statusEvidence.body_not_patterns) ? toJsonValue(statusEvidence.body_not_patterns) : null,
+    body_not_patterns_found: bodyNotPatternsFound,
     body_sample: stringValue(statusEvidence.body_sample) ?? null,
     failures
   };
@@ -1686,6 +1721,8 @@ function assessCheckFromEvidence(check, evidence) {
         min_bytes: check.min_bytes ?? null,
         allowed_content_types: check.allowed_content_types ?? null,
         body_contains: check.body_contains ?? [],
+        body_not_contains: check.body_not_contains ?? [],
+        body_not_patterns: check.body_not_patterns ?? [],
         viewports: summaries.map((summary) => toJsonValue(summary)),
         failures: failed.flatMap((summary) => Array.isArray(summary.failures) ? summary.failures.map((failure) => toJsonValue({ viewport: stringValue(summary.viewport) ?? null, failure })) : [])
       },
@@ -2362,6 +2399,22 @@ function httpStatusBodyContainsFailures(result, check) {
     : {};
   return expected.filter((text) => observed[text] !== true);
 }
+function httpStatusBodyNotContainsFailures(result, check) {
+  const forbidden = Array.isArray(check.body_not_contains) ? check.body_not_contains.filter(Boolean) : [];
+  if (!forbidden.length) return [];
+  const observed = result && typeof result.body_not_contains === "object" && !Array.isArray(result.body_not_contains)
+    ? result.body_not_contains
+    : {};
+  return forbidden.filter((text) => observed[text] !== false);
+}
+function httpStatusBodyNotPatternFailures(result, check) {
+  const forbidden = Array.isArray(check.body_not_patterns) ? check.body_not_patterns.filter(Boolean) : [];
+  if (!forbidden.length) return [];
+  const observed = result && typeof result.body_not_patterns === "object" && !Array.isArray(result.body_not_patterns)
+    ? result.body_not_patterns
+    : {};
+  return forbidden.filter((pattern) => observed[pattern] !== false);
+}
 function linkStatusResultOk(result, check) {
   if (!result || typeof result !== "object" || Array.isArray(result)) return false;
   if (!httpStatusIsAllowed(result.status, check)) return false;
@@ -2377,6 +2430,8 @@ function linkStatusResultOk(result, check) {
     if (observedBytes === undefined || observedBytes < check.min_bytes) return false;
   }
   if (httpStatusBodyContainsFailures(result, check).length) return false;
+  if (httpStatusBodyNotContainsFailures(result, check).length) return false;
+  if (httpStatusBodyNotPatternFailures(result, check).length) return false;
   return true;
 }
 function summarizeHttpStatusEvidence(viewport, check) {
@@ -2395,6 +2450,8 @@ function summarizeHttpStatusEvidence(viewport, check) {
   }
   const failures = [];
   const bodyContainsMissing = httpStatusBodyContainsFailures(statusEvidence, check);
+  const bodyNotContainsFound = httpStatusBodyNotContainsFailures(statusEvidence, check);
+  const bodyNotPatternsFound = httpStatusBodyNotPatternFailures(statusEvidence, check);
   if (!linkStatusResultOk(statusEvidence, check)) {
     failures.push({
       code: "http_status_failed",
@@ -2409,6 +2466,10 @@ function summarizeHttpStatusEvidence(viewport, check) {
       allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
       body_contains: Array.isArray(check.body_contains) ? check.body_contains : null,
       body_contains_missing: bodyContainsMissing,
+      body_not_contains: Array.isArray(check.body_not_contains) ? check.body_not_contains : null,
+      body_not_contains_found: bodyNotContainsFound,
+      body_not_patterns: Array.isArray(check.body_not_patterns) ? check.body_not_patterns : null,
+      body_not_patterns_found: bodyNotPatternsFound,
       body_sample: typeof statusEvidence.body_sample === "string" ? statusEvidence.body_sample : null,
     });
   }
@@ -2428,6 +2489,14 @@ function summarizeHttpStatusEvidence(viewport, check) {
       ? statusEvidence.body_contains
       : null,
     body_contains_missing: bodyContainsMissing,
+    body_not_contains: statusEvidence.body_not_contains && typeof statusEvidence.body_not_contains === "object" && !Array.isArray(statusEvidence.body_not_contains)
+      ? statusEvidence.body_not_contains
+      : null,
+    body_not_contains_found: bodyNotContainsFound,
+    body_not_patterns: statusEvidence.body_not_patterns && typeof statusEvidence.body_not_patterns === "object" && !Array.isArray(statusEvidence.body_not_patterns)
+      ? statusEvidence.body_not_patterns
+      : null,
+    body_not_patterns_found: bodyNotPatternsFound,
     body_sample: typeof statusEvidence.body_sample === "string" ? statusEvidence.body_sample : null,
     failures,
   };
@@ -4423,6 +4492,8 @@ async function collectHttpStatus(check) {
     body = check.body;
   }
   const bodyContains = Array.isArray(check.body_contains) ? check.body_contains.filter(Boolean) : [];
+  const bodyNotContains = Array.isArray(check.body_not_contains) ? check.body_not_contains.filter(Boolean) : [];
+  const bodyNotPatterns = Array.isArray(check.body_not_patterns) ? check.body_not_patterns.filter(Boolean) : [];
   const options = {
     method,
     redirect: "follow",
@@ -4448,15 +4519,17 @@ async function collectHttpStatus(check) {
     Object.assign(result, linkProbeResponseFields(response, method));
     result.url = url;
     result.status_text = response.statusText || "";
-    const shouldReadBody = check.require_nonzero_bytes === true || (typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || bodyContains.length > 0;
+    const shouldReadBody = check.require_nonzero_bytes === true || (typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || bodyContains.length > 0 || bodyNotContains.length > 0 || bodyNotPatterns.length > 0;
     if (shouldReadBody) {
       try {
         const buffer = await response.arrayBuffer();
         result.bytes = buffer.byteLength;
-        if (bodyContains.length) {
+        if (bodyContains.length || bodyNotContains.length || bodyNotPatterns.length) {
           const text = new TextDecoder().decode(buffer);
           result.body_sample = text.slice(0, 1000);
-          result.body_contains = Object.fromEntries(bodyContains.map((expected) => [expected, text.includes(expected)]));
+          if (bodyContains.length) result.body_contains = Object.fromEntries(bodyContains.map((expected) => [expected, text.includes(expected)]));
+          if (bodyNotContains.length) result.body_not_contains = Object.fromEntries(bodyNotContains.map((forbidden) => [forbidden, text.includes(forbidden)]));
+          if (bodyNotPatterns.length) result.body_not_patterns = Object.fromEntries(bodyNotPatterns.map((pattern) => [pattern, new RegExp(pattern).test(text)]));
         }
       } catch (error) {
         result.error = String(error && error.message ? error.message : error).slice(0, 500);
@@ -4467,6 +4540,8 @@ async function collectHttpStatus(check) {
       && (check.require_nonzero_bytes !== true || ((linkProbeObservedBytes(result) || 0) > 0))
       && (!(typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || ((linkProbeObservedBytes(result) || 0) >= check.min_bytes))
       && (!bodyContains.length || bodyContains.every((expected) => result.body_contains && result.body_contains[expected] === true))
+      && (!bodyNotContains.length || bodyNotContains.every((forbidden) => result.body_not_contains && result.body_not_contains[forbidden] === false))
+      && (!bodyNotPatterns.length || bodyNotPatterns.every((pattern) => result.body_not_patterns && result.body_not_patterns[pattern] === false))
       && !result.error;
     return result;
   } catch (error) {

package/dist/cli.cjs

@@ -7700,6 +7700,15 @@ function normalizeCheck(input, index) {
     input.body_contains ?? input.bodyContains ?? input.expected_body_contains ?? input.expectedBodyContains ?? input.response_body_contains ?? input.responseBodyContains ?? input.body_includes ?? input.bodyIncludes,
     `checks[${index}] body_contains`
   ) : void 0;
+  const bodyNotContains = isHttpStatusCheck ? normalizeStringList(
+    input.body_not_contains ?? input.bodyNotContains ?? input.expected_body_not_contains ?? input.expectedBodyNotContains ?? input.response_body_not_contains ?? input.responseBodyNotContains ?? input.body_absent ?? input.bodyAbsent,
+    `checks[${index}] body_not_contains`
+  ) : void 0;
+  const bodyNotPatterns = isHttpStatusCheck ? normalizeStringList(
+    input.body_not_patterns ?? input.bodyNotPatterns ?? input.expected_body_not_patterns ?? input.expectedBodyNotPatterns ?? input.response_body_not_patterns ?? input.responseBodyNotPatterns ?? input.body_forbidden_patterns ?? input.bodyForbiddenPatterns,
+    `checks[${index}] body_not_patterns`
+  ) : void 0;
+  if (bodyNotPatterns?.length) validateRegexPatterns(bodyNotPatterns, `checks[${index}] body_not_patterns`);
   if (isLinkStatusCheck) {
     if (minCount !== void 0 && (!Number.isInteger(minCount) || minCount < 0)) {
       throw new Error(`checks[${index}] ${type} min_count must be a non-negative integer.`);
@@ -7723,6 +7732,8 @@ function normalizeCheck(input, index) {
     body: isHttpStatusCheck ? stringValue2(input.body) : void 0,
     body_json: isHttpStatusCheck && hasBodyJson ? toJsonValue(input.body_json ?? input.bodyJson ?? input.json) : void 0,
     body_contains: bodyContains,
+    body_not_contains: bodyNotContains,
+    body_not_patterns: bodyNotPatterns,
     expected_texts: expectedTexts,
     link_selector: stringValue2(input.link_selector) || stringValue2(input.linkSelector),
     source_selector: stringValue2(input.source_selector) || stringValue2(input.sourceSelector),
@@ -7900,6 +7911,18 @@ function httpStatusBodyContainsFailures(result, check) {
   const observed = isRecord(result.body_contains) ? result.body_contains : {};
   return expected.filter((text) => observed[text] !== true);
 }
+function httpStatusBodyNotContainsFailures(result, check) {
+  const forbidden = check.body_not_contains?.filter(Boolean) ?? [];
+  if (!forbidden.length) return [];
+  const observed = isRecord(result.body_not_contains) ? result.body_not_contains : {};
+  return forbidden.filter((text) => observed[text] !== false);
+}
+function httpStatusBodyNotPatternFailures(result, check) {
+  const forbidden = check.body_not_patterns?.filter(Boolean) ?? [];
+  if (!forbidden.length) return [];
+  const observed = isRecord(result.body_not_patterns) ? result.body_not_patterns : {};
+  return forbidden.filter((pattern) => observed[pattern] !== false);
+}
 function linkStatusResultOk(result, check) {
   const status = numberValue(result.status);
   if (!httpStatusIsAllowed(status, check)) return false;
@@ -7915,6 +7938,8 @@ function linkStatusResultOk(result, check) {
     if (observedBytes === void 0 || observedBytes < check.min_bytes) return false;
   }
   if (httpStatusBodyContainsFailures(result, check).length) return false;
+  if (httpStatusBodyNotContainsFailures(result, check).length) return false;
+  if (httpStatusBodyNotPatternFailures(result, check).length) return false;
   return true;
 }
 function httpStatusEvidenceForCheck(viewport, check) {
@@ -7937,6 +7962,8 @@ function summarizeHttpStatusEvidence(viewport, check) {
   }
   const failures = [];
   const bodyContainsMissing = httpStatusBodyContainsFailures(statusEvidence, check);
+  const bodyNotContainsFound = httpStatusBodyNotContainsFailures(statusEvidence, check);
+  const bodyNotPatternsFound = httpStatusBodyNotPatternFailures(statusEvidence, check);
   if (!linkStatusResultOk(statusEvidence, check)) {
     failures.push({
       code: "http_status_failed",
@@ -7951,6 +7978,10 @@ function summarizeHttpStatusEvidence(viewport, check) {
       allowed_content_types: check.allowed_content_types ?? null,
       body_contains: check.body_contains ?? null,
       body_contains_missing: bodyContainsMissing,
+      body_not_contains: check.body_not_contains ?? null,
+      body_not_contains_found: bodyNotContainsFound,
+      body_not_patterns: check.body_not_patterns ?? null,
+      body_not_patterns_found: bodyNotPatternsFound,
       body_sample: stringValue2(statusEvidence.body_sample) ?? null
     });
   }
@@ -7968,6 +7999,10 @@ function summarizeHttpStatusEvidence(viewport, check) {
     bytes: linkStatusObservedBytes(statusEvidence) ?? null,
     body_contains: isRecord(statusEvidence.body_contains) ? toJsonValue(statusEvidence.body_contains) : null,
     body_contains_missing: bodyContainsMissing,
+    body_not_contains: isRecord(statusEvidence.body_not_contains) ? toJsonValue(statusEvidence.body_not_contains) : null,
+    body_not_contains_found: bodyNotContainsFound,
+    body_not_patterns: isRecord(statusEvidence.body_not_patterns) ? toJsonValue(statusEvidence.body_not_patterns) : null,
+    body_not_patterns_found: bodyNotPatternsFound,
     body_sample: stringValue2(statusEvidence.body_sample) ?? null,
     failures
   };
@@ -8579,6 +8614,8 @@ function assessCheckFromEvidence(check, evidence) {
         min_bytes: check.min_bytes ?? null,
         allowed_content_types: check.allowed_content_types ?? null,
         body_contains: check.body_contains ?? [],
+        body_not_contains: check.body_not_contains ?? [],
+        body_not_patterns: check.body_not_patterns ?? [],
         viewports: summaries.map((summary) => toJsonValue(summary)),
         failures: failed.flatMap((summary) => Array.isArray(summary.failures) ? summary.failures.map((failure) => toJsonValue({ viewport: stringValue2(summary.viewport) ?? null, failure })) : [])
       },
@@ -9239,6 +9276,22 @@ function httpStatusBodyContainsFailures(result, check) {
     : {};
   return expected.filter((text) => observed[text] !== true);
 }
+function httpStatusBodyNotContainsFailures(result, check) {
+  const forbidden = Array.isArray(check.body_not_contains) ? check.body_not_contains.filter(Boolean) : [];
+  if (!forbidden.length) return [];
+  const observed = result && typeof result.body_not_contains === "object" && !Array.isArray(result.body_not_contains)
+    ? result.body_not_contains
+    : {};
+  return forbidden.filter((text) => observed[text] !== false);
+}
+function httpStatusBodyNotPatternFailures(result, check) {
+  const forbidden = Array.isArray(check.body_not_patterns) ? check.body_not_patterns.filter(Boolean) : [];
+  if (!forbidden.length) return [];
+  const observed = result && typeof result.body_not_patterns === "object" && !Array.isArray(result.body_not_patterns)
+    ? result.body_not_patterns
+    : {};
+  return forbidden.filter((pattern) => observed[pattern] !== false);
+}
 function linkStatusResultOk(result, check) {
   if (!result || typeof result !== "object" || Array.isArray(result)) return false;
   if (!httpStatusIsAllowed(result.status, check)) return false;
@@ -9254,6 +9307,8 @@ function linkStatusResultOk(result, check) {
     if (observedBytes === undefined || observedBytes < check.min_bytes) return false;
   }
   if (httpStatusBodyContainsFailures(result, check).length) return false;
+  if (httpStatusBodyNotContainsFailures(result, check).length) return false;
+  if (httpStatusBodyNotPatternFailures(result, check).length) return false;
   return true;
 }
 function summarizeHttpStatusEvidence(viewport, check) {
@@ -9272,6 +9327,8 @@ function summarizeHttpStatusEvidence(viewport, check) {
   }
   const failures = [];
   const bodyContainsMissing = httpStatusBodyContainsFailures(statusEvidence, check);
+  const bodyNotContainsFound = httpStatusBodyNotContainsFailures(statusEvidence, check);
+  const bodyNotPatternsFound = httpStatusBodyNotPatternFailures(statusEvidence, check);
   if (!linkStatusResultOk(statusEvidence, check)) {
     failures.push({
       code: "http_status_failed",
@@ -9286,6 +9343,10 @@ function summarizeHttpStatusEvidence(viewport, check) {
       allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
       body_contains: Array.isArray(check.body_contains) ? check.body_contains : null,
       body_contains_missing: bodyContainsMissing,
+      body_not_contains: Array.isArray(check.body_not_contains) ? check.body_not_contains : null,
+      body_not_contains_found: bodyNotContainsFound,
+      body_not_patterns: Array.isArray(check.body_not_patterns) ? check.body_not_patterns : null,
+      body_not_patterns_found: bodyNotPatternsFound,
       body_sample: typeof statusEvidence.body_sample === "string" ? statusEvidence.body_sample : null,
     });
   }
@@ -9305,6 +9366,14 @@ function summarizeHttpStatusEvidence(viewport, check) {
       ? statusEvidence.body_contains
       : null,
     body_contains_missing: bodyContainsMissing,
+    body_not_contains: statusEvidence.body_not_contains && typeof statusEvidence.body_not_contains === "object" && !Array.isArray(statusEvidence.body_not_contains)
+      ? statusEvidence.body_not_contains
+      : null,
+    body_not_contains_found: bodyNotContainsFound,
+    body_not_patterns: statusEvidence.body_not_patterns && typeof statusEvidence.body_not_patterns === "object" && !Array.isArray(statusEvidence.body_not_patterns)
+      ? statusEvidence.body_not_patterns
+      : null,
+    body_not_patterns_found: bodyNotPatternsFound,
     body_sample: typeof statusEvidence.body_sample === "string" ? statusEvidence.body_sample : null,
     failures,
   };
@@ -11300,6 +11369,8 @@ async function collectHttpStatus(check) {
     body = check.body;
   }
   const bodyContains = Array.isArray(check.body_contains) ? check.body_contains.filter(Boolean) : [];
+  const bodyNotContains = Array.isArray(check.body_not_contains) ? check.body_not_contains.filter(Boolean) : [];
+  const bodyNotPatterns = Array.isArray(check.body_not_patterns) ? check.body_not_patterns.filter(Boolean) : [];
   const options = {
     method,
     redirect: "follow",
@@ -11325,15 +11396,17 @@ async function collectHttpStatus(check) {
     Object.assign(result, linkProbeResponseFields(response, method));
     result.url = url;
     result.status_text = response.statusText || "";
-    const shouldReadBody = check.require_nonzero_bytes === true || (typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || bodyContains.length > 0;
+    const shouldReadBody = check.require_nonzero_bytes === true || (typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || bodyContains.length > 0 || bodyNotContains.length > 0 || bodyNotPatterns.length > 0;
     if (shouldReadBody) {
       try {
         const buffer = await response.arrayBuffer();
         result.bytes = buffer.byteLength;
-        if (bodyContains.length) {
+        if (bodyContains.length || bodyNotContains.length || bodyNotPatterns.length) {
           const text = new TextDecoder().decode(buffer);
           result.body_sample = text.slice(0, 1000);
-          result.body_contains = Object.fromEntries(bodyContains.map((expected) => [expected, text.includes(expected)]));
+          if (bodyContains.length) result.body_contains = Object.fromEntries(bodyContains.map((expected) => [expected, text.includes(expected)]));
+          if (bodyNotContains.length) result.body_not_contains = Object.fromEntries(bodyNotContains.map((forbidden) => [forbidden, text.includes(forbidden)]));
+          if (bodyNotPatterns.length) result.body_not_patterns = Object.fromEntries(bodyNotPatterns.map((pattern) => [pattern, new RegExp(pattern).test(text)]));
         }
       } catch (error) {
         result.error = String(error && error.message ? error.message : error).slice(0, 500);
@@ -11344,6 +11417,8 @@ async function collectHttpStatus(check) {
       && (check.require_nonzero_bytes !== true || ((linkProbeObservedBytes(result) || 0) > 0))
       && (!(typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || ((linkProbeObservedBytes(result) || 0) >= check.min_bytes))
       && (!bodyContains.length || bodyContains.every((expected) => result.body_contains && result.body_contains[expected] === true))
+      && (!bodyNotContains.length || bodyNotContains.every((forbidden) => result.body_not_contains && result.body_not_contains[forbidden] === false))
+      && (!bodyNotPatterns.length || bodyNotPatterns.every((pattern) => result.body_not_patterns && result.body_not_patterns[pattern] === false))
       && !result.error;
     return result;
   } catch (error) {

package/dist/cli.js

@@ -10,7 +10,7 @@ import {
   profileStatusExitCode,
   resolveRiddleProofProfileTargetUrl,
   resolveRiddleProofProfileTimeoutSec
-} from "./chunk-W5PBTTMJ.js";
+} from "./chunk-7FQU5UH7.js";
 import {
   createRiddleApiClient,
   parseRiddleViewport

package/dist/index.cjs

@@ -9536,6 +9536,15 @@ function normalizeCheck(input, index) {
     input.body_contains ?? input.bodyContains ?? input.expected_body_contains ?? input.expectedBodyContains ?? input.response_body_contains ?? input.responseBodyContains ?? input.body_includes ?? input.bodyIncludes,
     `checks[${index}] body_contains`
   ) : void 0;
+  const bodyNotContains = isHttpStatusCheck ? normalizeStringList(
+    input.body_not_contains ?? input.bodyNotContains ?? input.expected_body_not_contains ?? input.expectedBodyNotContains ?? input.response_body_not_contains ?? input.responseBodyNotContains ?? input.body_absent ?? input.bodyAbsent,
+    `checks[${index}] body_not_contains`
+  ) : void 0;
+  const bodyNotPatterns = isHttpStatusCheck ? normalizeStringList(
+    input.body_not_patterns ?? input.bodyNotPatterns ?? input.expected_body_not_patterns ?? input.expectedBodyNotPatterns ?? input.response_body_not_patterns ?? input.responseBodyNotPatterns ?? input.body_forbidden_patterns ?? input.bodyForbiddenPatterns,
+    `checks[${index}] body_not_patterns`
+  ) : void 0;
+  if (bodyNotPatterns?.length) validateRegexPatterns(bodyNotPatterns, `checks[${index}] body_not_patterns`);
   if (isLinkStatusCheck) {
     if (minCount !== void 0 && (!Number.isInteger(minCount) || minCount < 0)) {
       throw new Error(`checks[${index}] ${type} min_count must be a non-negative integer.`);
@@ -9559,6 +9568,8 @@ function normalizeCheck(input, index) {
     body: isHttpStatusCheck ? stringValue5(input.body) : void 0,
     body_json: isHttpStatusCheck && hasBodyJson ? toJsonValue(input.body_json ?? input.bodyJson ?? input.json) : void 0,
     body_contains: bodyContains,
+    body_not_contains: bodyNotContains,
+    body_not_patterns: bodyNotPatterns,
     expected_texts: expectedTexts,
     link_selector: stringValue5(input.link_selector) || stringValue5(input.linkSelector),
     source_selector: stringValue5(input.source_selector) || stringValue5(input.sourceSelector),
@@ -9736,6 +9747,18 @@ function httpStatusBodyContainsFailures(result, check) {
   const observed = isRecord2(result.body_contains) ? result.body_contains : {};
   return expected.filter((text) => observed[text] !== true);
 }
+function httpStatusBodyNotContainsFailures(result, check) {
+  const forbidden = check.body_not_contains?.filter(Boolean) ?? [];
+  if (!forbidden.length) return [];
+  const observed = isRecord2(result.body_not_contains) ? result.body_not_contains : {};
+  return forbidden.filter((text) => observed[text] !== false);
+}
+function httpStatusBodyNotPatternFailures(result, check) {
+  const forbidden = check.body_not_patterns?.filter(Boolean) ?? [];
+  if (!forbidden.length) return [];
+  const observed = isRecord2(result.body_not_patterns) ? result.body_not_patterns : {};
+  return forbidden.filter((pattern) => observed[pattern] !== false);
+}
 function linkStatusResultOk(result, check) {
   const status = numberValue3(result.status);
   if (!httpStatusIsAllowed(status, check)) return false;
@@ -9751,6 +9774,8 @@ function linkStatusResultOk(result, check) {
     if (observedBytes === void 0 || observedBytes < check.min_bytes) return false;
   }
   if (httpStatusBodyContainsFailures(result, check).length) return false;
+  if (httpStatusBodyNotContainsFailures(result, check).length) return false;
+  if (httpStatusBodyNotPatternFailures(result, check).length) return false;
   return true;
 }
 function httpStatusEvidenceForCheck(viewport, check) {
@@ -9773,6 +9798,8 @@ function summarizeHttpStatusEvidence(viewport, check) {
   }
   const failures = [];
   const bodyContainsMissing = httpStatusBodyContainsFailures(statusEvidence, check);
+  const bodyNotContainsFound = httpStatusBodyNotContainsFailures(statusEvidence, check);
+  const bodyNotPatternsFound = httpStatusBodyNotPatternFailures(statusEvidence, check);
   if (!linkStatusResultOk(statusEvidence, check)) {
     failures.push({
       code: "http_status_failed",
@@ -9787,6 +9814,10 @@ function summarizeHttpStatusEvidence(viewport, check) {
       allowed_content_types: check.allowed_content_types ?? null,
       body_contains: check.body_contains ?? null,
       body_contains_missing: bodyContainsMissing,
+      body_not_contains: check.body_not_contains ?? null,
+      body_not_contains_found: bodyNotContainsFound,
+      body_not_patterns: check.body_not_patterns ?? null,
+      body_not_patterns_found: bodyNotPatternsFound,
       body_sample: stringValue5(statusEvidence.body_sample) ?? null
     });
   }
@@ -9804,6 +9835,10 @@ function summarizeHttpStatusEvidence(viewport, check) {
     bytes: linkStatusObservedBytes(statusEvidence) ?? null,
     body_contains: isRecord2(statusEvidence.body_contains) ? toJsonValue(statusEvidence.body_contains) : null,
     body_contains_missing: bodyContainsMissing,
+    body_not_contains: isRecord2(statusEvidence.body_not_contains) ? toJsonValue(statusEvidence.body_not_contains) : null,
+    body_not_contains_found: bodyNotContainsFound,
+    body_not_patterns: isRecord2(statusEvidence.body_not_patterns) ? toJsonValue(statusEvidence.body_not_patterns) : null,
+    body_not_patterns_found: bodyNotPatternsFound,
     body_sample: stringValue5(statusEvidence.body_sample) ?? null,
     failures
   };
@@ -10415,6 +10450,8 @@ function assessCheckFromEvidence(check, evidence) {
         min_bytes: check.min_bytes ?? null,
         allowed_content_types: check.allowed_content_types ?? null,
         body_contains: check.body_contains ?? [],
+        body_not_contains: check.body_not_contains ?? [],
+        body_not_patterns: check.body_not_patterns ?? [],
         viewports: summaries.map((summary) => toJsonValue(summary)),
         failures: failed.flatMap((summary) => Array.isArray(summary.failures) ? summary.failures.map((failure) => toJsonValue({ viewport: stringValue5(summary.viewport) ?? null, failure })) : [])
       },
@@ -11091,6 +11128,22 @@ function httpStatusBodyContainsFailures(result, check) {
     : {};
   return expected.filter((text) => observed[text] !== true);
 }
+function httpStatusBodyNotContainsFailures(result, check) {
+  const forbidden = Array.isArray(check.body_not_contains) ? check.body_not_contains.filter(Boolean) : [];
+  if (!forbidden.length) return [];
+  const observed = result && typeof result.body_not_contains === "object" && !Array.isArray(result.body_not_contains)
+    ? result.body_not_contains
+    : {};
+  return forbidden.filter((text) => observed[text] !== false);
+}
+function httpStatusBodyNotPatternFailures(result, check) {
+  const forbidden = Array.isArray(check.body_not_patterns) ? check.body_not_patterns.filter(Boolean) : [];
+  if (!forbidden.length) return [];
+  const observed = result && typeof result.body_not_patterns === "object" && !Array.isArray(result.body_not_patterns)
+    ? result.body_not_patterns
+    : {};
+  return forbidden.filter((pattern) => observed[pattern] !== false);
+}
 function linkStatusResultOk(result, check) {
   if (!result || typeof result !== "object" || Array.isArray(result)) return false;
   if (!httpStatusIsAllowed(result.status, check)) return false;
@@ -11106,6 +11159,8 @@ function linkStatusResultOk(result, check) {
     if (observedBytes === undefined || observedBytes < check.min_bytes) return false;
   }
   if (httpStatusBodyContainsFailures(result, check).length) return false;
+  if (httpStatusBodyNotContainsFailures(result, check).length) return false;
+  if (httpStatusBodyNotPatternFailures(result, check).length) return false;
   return true;
 }
 function summarizeHttpStatusEvidence(viewport, check) {
@@ -11124,6 +11179,8 @@ function summarizeHttpStatusEvidence(viewport, check) {
   }
   const failures = [];
   const bodyContainsMissing = httpStatusBodyContainsFailures(statusEvidence, check);
+  const bodyNotContainsFound = httpStatusBodyNotContainsFailures(statusEvidence, check);
+  const bodyNotPatternsFound = httpStatusBodyNotPatternFailures(statusEvidence, check);
   if (!linkStatusResultOk(statusEvidence, check)) {
     failures.push({
       code: "http_status_failed",
@@ -11138,6 +11195,10 @@ function summarizeHttpStatusEvidence(viewport, check) {
       allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
       body_contains: Array.isArray(check.body_contains) ? check.body_contains : null,
       body_contains_missing: bodyContainsMissing,
+      body_not_contains: Array.isArray(check.body_not_contains) ? check.body_not_contains : null,
+      body_not_contains_found: bodyNotContainsFound,
+      body_not_patterns: Array.isArray(check.body_not_patterns) ? check.body_not_patterns : null,
+      body_not_patterns_found: bodyNotPatternsFound,
       body_sample: typeof statusEvidence.body_sample === "string" ? statusEvidence.body_sample : null,
     });
   }
@@ -11157,6 +11218,14 @@ function summarizeHttpStatusEvidence(viewport, check) {
       ? statusEvidence.body_contains
       : null,
     body_contains_missing: bodyContainsMissing,
+    body_not_contains: statusEvidence.body_not_contains && typeof statusEvidence.body_not_contains === "object" && !Array.isArray(statusEvidence.body_not_contains)
+      ? statusEvidence.body_not_contains
+      : null,
+    body_not_contains_found: bodyNotContainsFound,
+    body_not_patterns: statusEvidence.body_not_patterns && typeof statusEvidence.body_not_patterns === "object" && !Array.isArray(statusEvidence.body_not_patterns)
+      ? statusEvidence.body_not_patterns
+      : null,
+    body_not_patterns_found: bodyNotPatternsFound,
     body_sample: typeof statusEvidence.body_sample === "string" ? statusEvidence.body_sample : null,
     failures,
   };
@@ -13152,6 +13221,8 @@ async function collectHttpStatus(check) {
     body = check.body;
   }
   const bodyContains = Array.isArray(check.body_contains) ? check.body_contains.filter(Boolean) : [];
+  const bodyNotContains = Array.isArray(check.body_not_contains) ? check.body_not_contains.filter(Boolean) : [];
+  const bodyNotPatterns = Array.isArray(check.body_not_patterns) ? check.body_not_patterns.filter(Boolean) : [];
   const options = {
     method,
     redirect: "follow",
@@ -13177,15 +13248,17 @@ async function collectHttpStatus(check) {
     Object.assign(result, linkProbeResponseFields(response, method));
     result.url = url;
     result.status_text = response.statusText || "";
-    const shouldReadBody = check.require_nonzero_bytes === true || (typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || bodyContains.length > 0;
+    const shouldReadBody = check.require_nonzero_bytes === true || (typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || bodyContains.length > 0 || bodyNotContains.length > 0 || bodyNotPatterns.length > 0;
     if (shouldReadBody) {
       try {
         const buffer = await response.arrayBuffer();
         result.bytes = buffer.byteLength;
-        if (bodyContains.length) {
+        if (bodyContains.length || bodyNotContains.length || bodyNotPatterns.length) {
           const text = new TextDecoder().decode(buffer);
           result.body_sample = text.slice(0, 1000);
-          result.body_contains = Object.fromEntries(bodyContains.map((expected) => [expected, text.includes(expected)]));
+          if (bodyContains.length) result.body_contains = Object.fromEntries(bodyContains.map((expected) => [expected, text.includes(expected)]));
+          if (bodyNotContains.length) result.body_not_contains = Object.fromEntries(bodyNotContains.map((forbidden) => [forbidden, text.includes(forbidden)]));
+          if (bodyNotPatterns.length) result.body_not_patterns = Object.fromEntries(bodyNotPatterns.map((pattern) => [pattern, new RegExp(pattern).test(text)]));
         }
       } catch (error) {
         result.error = String(error && error.message ? error.message : error).slice(0, 500);
@@ -13196,6 +13269,8 @@ async function collectHttpStatus(check) {
       && (check.require_nonzero_bytes !== true || ((linkProbeObservedBytes(result) || 0) > 0))
       && (!(typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || ((linkProbeObservedBytes(result) || 0) >= check.min_bytes))
       && (!bodyContains.length || bodyContains.every((expected) => result.body_contains && result.body_contains[expected] === true))
+      && (!bodyNotContains.length || bodyNotContains.every((forbidden) => result.body_not_contains && result.body_not_contains[forbidden] === false))
+      && (!bodyNotPatterns.length || bodyNotPatterns.every((pattern) => result.body_not_patterns && result.body_not_patterns[pattern] === false))
       && !result.error;
     return result;
   } catch (error) {

package/dist/index.js

@@ -58,7 +58,7 @@ import {
   resolveRiddleProofProfileTimeoutSec,
   slugifyRiddleProofProfileName,
   summarizeRiddleProofProfileResult
-} from "./chunk-W5PBTTMJ.js";
+} from "./chunk-7FQU5UH7.js";
 import {
   DEFAULT_RIDDLE_API_BASE_URL,
   DEFAULT_RIDDLE_API_KEY_FILE,

package/dist/profile.cjs

@@ -850,6 +850,15 @@ function normalizeCheck(input, index) {
     input.body_contains ?? input.bodyContains ?? input.expected_body_contains ?? input.expectedBodyContains ?? input.response_body_contains ?? input.responseBodyContains ?? input.body_includes ?? input.bodyIncludes,
     `checks[${index}] body_contains`
   ) : void 0;
+  const bodyNotContains = isHttpStatusCheck ? normalizeStringList(
+    input.body_not_contains ?? input.bodyNotContains ?? input.expected_body_not_contains ?? input.expectedBodyNotContains ?? input.response_body_not_contains ?? input.responseBodyNotContains ?? input.body_absent ?? input.bodyAbsent,
+    `checks[${index}] body_not_contains`
+  ) : void 0;
+  const bodyNotPatterns = isHttpStatusCheck ? normalizeStringList(
+    input.body_not_patterns ?? input.bodyNotPatterns ?? input.expected_body_not_patterns ?? input.expectedBodyNotPatterns ?? input.response_body_not_patterns ?? input.responseBodyNotPatterns ?? input.body_forbidden_patterns ?? input.bodyForbiddenPatterns,
+    `checks[${index}] body_not_patterns`
+  ) : void 0;
+  if (bodyNotPatterns?.length) validateRegexPatterns(bodyNotPatterns, `checks[${index}] body_not_patterns`);
   if (isLinkStatusCheck) {
     if (minCount !== void 0 && (!Number.isInteger(minCount) || minCount < 0)) {
       throw new Error(`checks[${index}] ${type} min_count must be a non-negative integer.`);
@@ -873,6 +882,8 @@ function normalizeCheck(input, index) {
     body: isHttpStatusCheck ? stringValue(input.body) : void 0,
     body_json: isHttpStatusCheck && hasBodyJson ? toJsonValue(input.body_json ?? input.bodyJson ?? input.json) : void 0,
     body_contains: bodyContains,
+    body_not_contains: bodyNotContains,
+    body_not_patterns: bodyNotPatterns,
     expected_texts: expectedTexts,
     link_selector: stringValue(input.link_selector) || stringValue(input.linkSelector),
     source_selector: stringValue(input.source_selector) || stringValue(input.sourceSelector),
@@ -1050,6 +1061,18 @@ function httpStatusBodyContainsFailures(result, check) {
   const observed = isRecord(result.body_contains) ? result.body_contains : {};
   return expected.filter((text) => observed[text] !== true);
 }
+function httpStatusBodyNotContainsFailures(result, check) {
+  const forbidden = check.body_not_contains?.filter(Boolean) ?? [];
+  if (!forbidden.length) return [];
+  const observed = isRecord(result.body_not_contains) ? result.body_not_contains : {};
+  return forbidden.filter((text) => observed[text] !== false);
+}
+function httpStatusBodyNotPatternFailures(result, check) {
+  const forbidden = check.body_not_patterns?.filter(Boolean) ?? [];
+  if (!forbidden.length) return [];
+  const observed = isRecord(result.body_not_patterns) ? result.body_not_patterns : {};
+  return forbidden.filter((pattern) => observed[pattern] !== false);
+}
 function linkStatusResultOk(result, check) {
   const status = numberValue(result.status);
   if (!httpStatusIsAllowed(status, check)) return false;
@@ -1065,6 +1088,8 @@ function linkStatusResultOk(result, check) {
     if (observedBytes === void 0 || observedBytes < check.min_bytes) return false;
   }
   if (httpStatusBodyContainsFailures(result, check).length) return false;
+  if (httpStatusBodyNotContainsFailures(result, check).length) return false;
+  if (httpStatusBodyNotPatternFailures(result, check).length) return false;
   return true;
 }
 function httpStatusEvidenceForCheck(viewport, check) {
@@ -1087,6 +1112,8 @@ function summarizeHttpStatusEvidence(viewport, check) {
   }
   const failures = [];
   const bodyContainsMissing = httpStatusBodyContainsFailures(statusEvidence, check);
+  const bodyNotContainsFound = httpStatusBodyNotContainsFailures(statusEvidence, check);
+  const bodyNotPatternsFound = httpStatusBodyNotPatternFailures(statusEvidence, check);
   if (!linkStatusResultOk(statusEvidence, check)) {
     failures.push({
       code: "http_status_failed",
@@ -1101,6 +1128,10 @@ function summarizeHttpStatusEvidence(viewport, check) {
       allowed_content_types: check.allowed_content_types ?? null,
       body_contains: check.body_contains ?? null,
       body_contains_missing: bodyContainsMissing,
+      body_not_contains: check.body_not_contains ?? null,
+      body_not_contains_found: bodyNotContainsFound,
+      body_not_patterns: check.body_not_patterns ?? null,
+      body_not_patterns_found: bodyNotPatternsFound,
       body_sample: stringValue(statusEvidence.body_sample) ?? null
     });
   }
@@ -1118,6 +1149,10 @@ function summarizeHttpStatusEvidence(viewport, check) {
     bytes: linkStatusObservedBytes(statusEvidence) ?? null,
     body_contains: isRecord(statusEvidence.body_contains) ? toJsonValue(statusEvidence.body_contains) : null,
     body_contains_missing: bodyContainsMissing,
+    body_not_contains: isRecord(statusEvidence.body_not_contains) ? toJsonValue(statusEvidence.body_not_contains) : null,
+    body_not_contains_found: bodyNotContainsFound,
+    body_not_patterns: isRecord(statusEvidence.body_not_patterns) ? toJsonValue(statusEvidence.body_not_patterns) : null,
+    body_not_patterns_found: bodyNotPatternsFound,
     body_sample: stringValue(statusEvidence.body_sample) ?? null,
     failures
   };
@@ -1729,6 +1764,8 @@ function assessCheckFromEvidence(check, evidence) {
         min_bytes: check.min_bytes ?? null,
         allowed_content_types: check.allowed_content_types ?? null,
         body_contains: check.body_contains ?? [],
+        body_not_contains: check.body_not_contains ?? [],
+        body_not_patterns: check.body_not_patterns ?? [],
         viewports: summaries.map((summary) => toJsonValue(summary)),
         failures: failed.flatMap((summary) => Array.isArray(summary.failures) ? summary.failures.map((failure) => toJsonValue({ viewport: stringValue(summary.viewport) ?? null, failure })) : [])
       },
@@ -2405,6 +2442,22 @@ function httpStatusBodyContainsFailures(result, check) {
     : {};
   return expected.filter((text) => observed[text] !== true);
 }
+function httpStatusBodyNotContainsFailures(result, check) {
+  const forbidden = Array.isArray(check.body_not_contains) ? check.body_not_contains.filter(Boolean) : [];
+  if (!forbidden.length) return [];
+  const observed = result && typeof result.body_not_contains === "object" && !Array.isArray(result.body_not_contains)
+    ? result.body_not_contains
+    : {};
+  return forbidden.filter((text) => observed[text] !== false);
+}
+function httpStatusBodyNotPatternFailures(result, check) {
+  const forbidden = Array.isArray(check.body_not_patterns) ? check.body_not_patterns.filter(Boolean) : [];
+  if (!forbidden.length) return [];
+  const observed = result && typeof result.body_not_patterns === "object" && !Array.isArray(result.body_not_patterns)
+    ? result.body_not_patterns
+    : {};
+  return forbidden.filter((pattern) => observed[pattern] !== false);
+}
 function linkStatusResultOk(result, check) {
   if (!result || typeof result !== "object" || Array.isArray(result)) return false;
   if (!httpStatusIsAllowed(result.status, check)) return false;
@@ -2420,6 +2473,8 @@ function linkStatusResultOk(result, check) {
     if (observedBytes === undefined || observedBytes < check.min_bytes) return false;
   }
   if (httpStatusBodyContainsFailures(result, check).length) return false;
+  if (httpStatusBodyNotContainsFailures(result, check).length) return false;
+  if (httpStatusBodyNotPatternFailures(result, check).length) return false;
   return true;
 }
 function summarizeHttpStatusEvidence(viewport, check) {
@@ -2438,6 +2493,8 @@ function summarizeHttpStatusEvidence(viewport, check) {
   }
   const failures = [];
   const bodyContainsMissing = httpStatusBodyContainsFailures(statusEvidence, check);
+  const bodyNotContainsFound = httpStatusBodyNotContainsFailures(statusEvidence, check);
+  const bodyNotPatternsFound = httpStatusBodyNotPatternFailures(statusEvidence, check);
   if (!linkStatusResultOk(statusEvidence, check)) {
     failures.push({
       code: "http_status_failed",
@@ -2452,6 +2509,10 @@ function summarizeHttpStatusEvidence(viewport, check) {
       allowed_content_types: Array.isArray(check.allowed_content_types) ? check.allowed_content_types : null,
       body_contains: Array.isArray(check.body_contains) ? check.body_contains : null,
       body_contains_missing: bodyContainsMissing,
+      body_not_contains: Array.isArray(check.body_not_contains) ? check.body_not_contains : null,
+      body_not_contains_found: bodyNotContainsFound,
+      body_not_patterns: Array.isArray(check.body_not_patterns) ? check.body_not_patterns : null,
+      body_not_patterns_found: bodyNotPatternsFound,
       body_sample: typeof statusEvidence.body_sample === "string" ? statusEvidence.body_sample : null,
     });
   }
@@ -2471,6 +2532,14 @@ function summarizeHttpStatusEvidence(viewport, check) {
       ? statusEvidence.body_contains
       : null,
     body_contains_missing: bodyContainsMissing,
+    body_not_contains: statusEvidence.body_not_contains && typeof statusEvidence.body_not_contains === "object" && !Array.isArray(statusEvidence.body_not_contains)
+      ? statusEvidence.body_not_contains
+      : null,
+    body_not_contains_found: bodyNotContainsFound,
+    body_not_patterns: statusEvidence.body_not_patterns && typeof statusEvidence.body_not_patterns === "object" && !Array.isArray(statusEvidence.body_not_patterns)
+      ? statusEvidence.body_not_patterns
+      : null,
+    body_not_patterns_found: bodyNotPatternsFound,
     body_sample: typeof statusEvidence.body_sample === "string" ? statusEvidence.body_sample : null,
     failures,
   };
@@ -4466,6 +4535,8 @@ async function collectHttpStatus(check) {
     body = check.body;
   }
   const bodyContains = Array.isArray(check.body_contains) ? check.body_contains.filter(Boolean) : [];
+  const bodyNotContains = Array.isArray(check.body_not_contains) ? check.body_not_contains.filter(Boolean) : [];
+  const bodyNotPatterns = Array.isArray(check.body_not_patterns) ? check.body_not_patterns.filter(Boolean) : [];
   const options = {
     method,
     redirect: "follow",
@@ -4491,15 +4562,17 @@ async function collectHttpStatus(check) {
     Object.assign(result, linkProbeResponseFields(response, method));
     result.url = url;
     result.status_text = response.statusText || "";
-    const shouldReadBody = check.require_nonzero_bytes === true || (typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || bodyContains.length > 0;
+    const shouldReadBody = check.require_nonzero_bytes === true || (typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || bodyContains.length > 0 || bodyNotContains.length > 0 || bodyNotPatterns.length > 0;
     if (shouldReadBody) {
       try {
         const buffer = await response.arrayBuffer();
         result.bytes = buffer.byteLength;
-        if (bodyContains.length) {
+        if (bodyContains.length || bodyNotContains.length || bodyNotPatterns.length) {
           const text = new TextDecoder().decode(buffer);
           result.body_sample = text.slice(0, 1000);
-          result.body_contains = Object.fromEntries(bodyContains.map((expected) => [expected, text.includes(expected)]));
+          if (bodyContains.length) result.body_contains = Object.fromEntries(bodyContains.map((expected) => [expected, text.includes(expected)]));
+          if (bodyNotContains.length) result.body_not_contains = Object.fromEntries(bodyNotContains.map((forbidden) => [forbidden, text.includes(forbidden)]));
+          if (bodyNotPatterns.length) result.body_not_patterns = Object.fromEntries(bodyNotPatterns.map((pattern) => [pattern, new RegExp(pattern).test(text)]));
         }
       } catch (error) {
         result.error = String(error && error.message ? error.message : error).slice(0, 500);
@@ -4510,6 +4583,8 @@ async function collectHttpStatus(check) {
       && (check.require_nonzero_bytes !== true || ((linkProbeObservedBytes(result) || 0) > 0))
       && (!(typeof check.min_bytes === "number" && Number.isFinite(check.min_bytes)) || ((linkProbeObservedBytes(result) || 0) >= check.min_bytes))
       && (!bodyContains.length || bodyContains.every((expected) => result.body_contains && result.body_contains[expected] === true))
+      && (!bodyNotContains.length || bodyNotContains.every((forbidden) => result.body_not_contains && result.body_not_contains[forbidden] === false))
+      && (!bodyNotPatterns.length || bodyNotPatterns.every((pattern) => result.body_not_patterns && result.body_not_patterns[pattern] === false))
       && !result.error;
     return result;
   } catch (error) {

package/dist/profile.d.cts

@@ -120,6 +120,8 @@ interface RiddleProofProfileCheck {
     body?: string;
     body_json?: JsonValue;
     body_contains?: string[];
+    body_not_contains?: string[];
+    body_not_patterns?: string[];
     expected_texts?: string[];
     link_selector?: string;
     source_selector?: string;

package/dist/profile.d.ts

@@ -120,6 +120,8 @@ interface RiddleProofProfileCheck {
     body?: string;
     body_json?: JsonValue;
     body_contains?: string[];
+    body_not_contains?: string[];
+    body_not_patterns?: string[];
     expected_texts?: string[];
     link_selector?: string;
     source_selector?: string;

package/dist/profile.js

@@ -19,7 +19,7 @@ import {
   resolveRiddleProofProfileTimeoutSec,
   slugifyRiddleProofProfileName,
   summarizeRiddleProofProfileResult
-} from "./chunk-W5PBTTMJ.js";
+} from "./chunk-7FQU5UH7.js";
 export {
   RIDDLE_PROOF_PROFILE_CHECK_TYPES,
   RIDDLE_PROOF_PROFILE_EVIDENCE_VERSION,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@riddledc/riddle-proof",
-  "version": "0.7.99",
+  "version": "0.7.101",
   "description": "Reusable Riddle Proof contracts and helpers for evidence-backed agent changes.",
   "license": "MIT",
   "author": "RiddleDC",