chore: import upstream snapshot with attribution
CI / Shell Format Check (push) Has been cancelled
CI / Check Ruby (3.4) (push) Has been cancelled
CI / CI Config (push) Has been cancelled
CI / Test on Node ${{ matrix.node }} and ${{ matrix.os }}${{ matrix.shard && format(' (shard {0}/3)', matrix.shard) || '' }} (push) Has been cancelled
CI / Build on Node ${{ matrix.node }} (push) Has been cancelled
CI / Style Check (push) Has been cancelled
CI / Generate Assets (push) Has been cancelled
CI / Check Python (3.14) (push) Has been cancelled
CI / Check Python (3.9) (push) Has been cancelled
CI / Build Docs (push) Has been cancelled
CI / Code Scan Action (push) Has been cancelled
CI / Site tests (push) Has been cancelled
CI / webui tests (push) Has been cancelled
CI / Run Integration Tests (push) Has been cancelled
CI / Run Smoke Tests (push) Has been cancelled
CI / Go Tests (push) Has been cancelled
CI / Share Test (push) Has been cancelled
CI / Redteam (Production API) (push) Has been cancelled
CI / Redteam (Staging API) (push) Has been cancelled
CI / GitHub Actions Lint (push) Has been cancelled
CI / Check Ruby (3.0) (push) Has been cancelled
release-please / release-please (push) Has been cancelled
release-please / build (push) Has been cancelled
release-please / publish-npm (push) Has been cancelled
release-please / publish-npm-backfill (push) Has been cancelled
release-please / docker (push) Has been cancelled
release-please / publish-code-scan-action (push) Has been cancelled
release-please / attest-code-scan-action (push) Has been cancelled
Deploy local.promptfoo.app / Deploy to Cloudflare Pages (push) Has been cancelled
Test and Publish Multi-arch Docker Image / test (push) Has been cancelled
Test and Publish Multi-arch Docker Image / build-docker-and-push-digests (map[digest-suffix:linux-amd64 platform:linux/amd64 runner:ubuntu-latest]) (push) Has been cancelled
Test and Publish Multi-arch Docker Image / build-docker-and-push-digests (map[digest-suffix:linux-arm64 platform:linux/arm64 runner:ubuntu-24.04-arm]) (push) Has been cancelled
Test and Publish Multi-arch Docker Image / merge-docker-digests (push) Has been cancelled
Test and Publish Multi-arch Docker Image / Attest Multi-arch Image (push) Has been cancelled
Validate Renovate Config / Validate Renovate Configuration (push) Has been cancelled
CI / Shell Format Check (push) Has been cancelled
CI / Check Ruby (3.4) (push) Has been cancelled
CI / CI Config (push) Has been cancelled
CI / Test on Node ${{ matrix.node }} and ${{ matrix.os }}${{ matrix.shard && format(' (shard {0}/3)', matrix.shard) || '' }} (push) Has been cancelled
CI / Build on Node ${{ matrix.node }} (push) Has been cancelled
CI / Style Check (push) Has been cancelled
CI / Generate Assets (push) Has been cancelled
CI / Check Python (3.14) (push) Has been cancelled
CI / Check Python (3.9) (push) Has been cancelled
CI / Build Docs (push) Has been cancelled
CI / Code Scan Action (push) Has been cancelled
CI / Site tests (push) Has been cancelled
CI / webui tests (push) Has been cancelled
CI / Run Integration Tests (push) Has been cancelled
CI / Run Smoke Tests (push) Has been cancelled
CI / Go Tests (push) Has been cancelled
CI / Share Test (push) Has been cancelled
CI / Redteam (Production API) (push) Has been cancelled
CI / Redteam (Staging API) (push) Has been cancelled
CI / GitHub Actions Lint (push) Has been cancelled
CI / Check Ruby (3.0) (push) Has been cancelled
release-please / release-please (push) Has been cancelled
release-please / build (push) Has been cancelled
release-please / publish-npm (push) Has been cancelled
release-please / publish-npm-backfill (push) Has been cancelled
release-please / docker (push) Has been cancelled
release-please / publish-code-scan-action (push) Has been cancelled
release-please / attest-code-scan-action (push) Has been cancelled
Deploy local.promptfoo.app / Deploy to Cloudflare Pages (push) Has been cancelled
Test and Publish Multi-arch Docker Image / test (push) Has been cancelled
Test and Publish Multi-arch Docker Image / build-docker-and-push-digests (map[digest-suffix:linux-amd64 platform:linux/amd64 runner:ubuntu-latest]) (push) Has been cancelled
Test and Publish Multi-arch Docker Image / build-docker-and-push-digests (map[digest-suffix:linux-arm64 platform:linux/arm64 runner:ubuntu-24.04-arm]) (push) Has been cancelled
Test and Publish Multi-arch Docker Image / merge-docker-digests (push) Has been cancelled
Test and Publish Multi-arch Docker Image / Attest Multi-arch Image (push) Has been cancelled
Validate Renovate Config / Validate Renovate Configuration (push) Has been cancelled
This commit is contained in:
@@ -0,0 +1,291 @@
|
||||
import { describe, expect, it } from 'vitest';
|
||||
import { handleGuardrails } from '../../src/assertions/guardrails';
|
||||
|
||||
import type { AssertionParams, AtomicTestCase } from '../../src/types/index';
|
||||
|
||||
describe('handleGuardrail', () => {
|
||||
const baseAssertion = {
|
||||
type: 'guardrails' as const,
|
||||
};
|
||||
|
||||
const defaultContext = {
|
||||
prompt: undefined,
|
||||
vars: {},
|
||||
test: {} as AtomicTestCase,
|
||||
logProbs: undefined,
|
||||
providerResponse: undefined,
|
||||
provider: undefined,
|
||||
};
|
||||
|
||||
const defaultParams: AssertionParams = {
|
||||
assertion: baseAssertion,
|
||||
baseType: 'guardrails',
|
||||
assertionValueContext: defaultContext,
|
||||
inverse: false,
|
||||
output: '',
|
||||
outputString: '',
|
||||
test: {} as AtomicTestCase,
|
||||
providerResponse: {
|
||||
output: '',
|
||||
},
|
||||
};
|
||||
|
||||
it('should pass when guardrails are not flagged', async () => {
|
||||
const params: AssertionParams = {
|
||||
...defaultParams,
|
||||
providerResponse: {
|
||||
guardrails: {
|
||||
flagged: false,
|
||||
},
|
||||
output: 'test output',
|
||||
},
|
||||
};
|
||||
|
||||
const result = await handleGuardrails(params);
|
||||
expect(result).toEqual({
|
||||
pass: true,
|
||||
score: 1,
|
||||
reason: 'Content passed safety checks',
|
||||
assertion: baseAssertion,
|
||||
});
|
||||
});
|
||||
|
||||
it('should default flagged to false when undefined', async () => {
|
||||
const params: AssertionParams = {
|
||||
...defaultParams,
|
||||
providerResponse: {
|
||||
guardrails: {
|
||||
// flagged is intentionally undefined
|
||||
},
|
||||
output: 'test output',
|
||||
},
|
||||
};
|
||||
|
||||
const result = await handleGuardrails(params);
|
||||
expect(result).toEqual({
|
||||
pass: true,
|
||||
score: 1,
|
||||
reason: 'Content passed safety checks',
|
||||
assertion: baseAssertion,
|
||||
});
|
||||
});
|
||||
|
||||
it('should fail when content is flagged', async () => {
|
||||
const params: AssertionParams = {
|
||||
...defaultParams,
|
||||
providerResponse: {
|
||||
guardrails: {
|
||||
flagged: true,
|
||||
},
|
||||
output: 'test output',
|
||||
},
|
||||
};
|
||||
|
||||
const result = await handleGuardrails(params);
|
||||
expect(result).toEqual({
|
||||
pass: false,
|
||||
score: 0,
|
||||
reason: 'Content failed safety checks',
|
||||
assertion: baseAssertion,
|
||||
});
|
||||
});
|
||||
|
||||
it('should fail with specific reason when input is flagged', async () => {
|
||||
const params: AssertionParams = {
|
||||
...defaultParams,
|
||||
providerResponse: {
|
||||
guardrails: {
|
||||
flagged: true,
|
||||
flaggedInput: true,
|
||||
},
|
||||
output: 'test output',
|
||||
},
|
||||
};
|
||||
|
||||
const result = await handleGuardrails(params);
|
||||
expect(result).toEqual({
|
||||
pass: false,
|
||||
score: 0,
|
||||
reason: 'Prompt failed safety checks',
|
||||
assertion: baseAssertion,
|
||||
});
|
||||
});
|
||||
|
||||
it('should fail with specific reason when output is flagged', async () => {
|
||||
const params: AssertionParams = {
|
||||
...defaultParams,
|
||||
providerResponse: {
|
||||
guardrails: {
|
||||
flagged: true,
|
||||
flaggedOutput: true,
|
||||
},
|
||||
output: 'test output',
|
||||
},
|
||||
};
|
||||
|
||||
const result = await handleGuardrails(params);
|
||||
expect(result).toEqual({
|
||||
pass: false,
|
||||
score: 0,
|
||||
reason: 'Output failed safety checks',
|
||||
assertion: baseAssertion,
|
||||
});
|
||||
});
|
||||
|
||||
it('should handle case when guardrails are in redteam history', async () => {
|
||||
const params: AssertionParams = {
|
||||
...defaultParams,
|
||||
providerResponse: {
|
||||
metadata: {
|
||||
redteamHistory: [
|
||||
{
|
||||
guardrails: {
|
||||
flagged: true,
|
||||
},
|
||||
},
|
||||
],
|
||||
},
|
||||
output: 'test output',
|
||||
},
|
||||
};
|
||||
|
||||
const result = await handleGuardrails(params);
|
||||
expect(result).toEqual({
|
||||
pass: false,
|
||||
score: 0,
|
||||
reason: 'Content failed safety checks',
|
||||
assertion: baseAssertion,
|
||||
});
|
||||
});
|
||||
|
||||
it('should pass with score 1 when no guardrails are present (defaults to flagged: false)', async () => {
|
||||
const params: AssertionParams = {
|
||||
...defaultParams,
|
||||
providerResponse: {
|
||||
output: 'test output',
|
||||
},
|
||||
};
|
||||
|
||||
const result = await handleGuardrails(params);
|
||||
expect(result).toEqual({
|
||||
pass: true,
|
||||
score: 1,
|
||||
reason: 'Content passed safety checks',
|
||||
assertion: baseAssertion,
|
||||
});
|
||||
});
|
||||
|
||||
it('should use custom reason when provided in guardrails', async () => {
|
||||
const params: AssertionParams = {
|
||||
...defaultParams,
|
||||
providerResponse: {
|
||||
guardrails: {
|
||||
flagged: true,
|
||||
reason: 'Custom safety violation reason',
|
||||
},
|
||||
output: 'test output',
|
||||
},
|
||||
};
|
||||
|
||||
const result = await handleGuardrails(params);
|
||||
expect(result).toEqual({
|
||||
pass: false,
|
||||
score: 0,
|
||||
reason: 'Custom safety violation reason',
|
||||
assertion: baseAssertion,
|
||||
});
|
||||
});
|
||||
|
||||
describe('inverse mode (not-guardrails)', () => {
|
||||
const inverseAssertion = {
|
||||
type: 'not-guardrails' as const,
|
||||
};
|
||||
|
||||
it('should pass when content is flagged and inverse=true', async () => {
|
||||
const params: AssertionParams = {
|
||||
...defaultParams,
|
||||
assertion: inverseAssertion,
|
||||
inverse: true,
|
||||
providerResponse: {
|
||||
guardrails: {
|
||||
flagged: true,
|
||||
reason: 'Prompt injection detected',
|
||||
},
|
||||
output: 'test output',
|
||||
},
|
||||
};
|
||||
|
||||
const result = await handleGuardrails(params);
|
||||
expect(result).toEqual({
|
||||
pass: true,
|
||||
score: 1,
|
||||
reason: 'Guardrail correctly blocked: Prompt injection detected',
|
||||
assertion: inverseAssertion,
|
||||
});
|
||||
});
|
||||
|
||||
it('should fail when content is not flagged and inverse=true', async () => {
|
||||
const params: AssertionParams = {
|
||||
...defaultParams,
|
||||
assertion: inverseAssertion,
|
||||
inverse: true,
|
||||
providerResponse: {
|
||||
guardrails: {
|
||||
flagged: false,
|
||||
},
|
||||
output: 'test output',
|
||||
},
|
||||
};
|
||||
|
||||
const result = await handleGuardrails(params);
|
||||
expect(result).toEqual({
|
||||
pass: false,
|
||||
score: 0,
|
||||
reason: 'Content was not blocked by guardrails (expected to be blocked)',
|
||||
assertion: inverseAssertion,
|
||||
});
|
||||
});
|
||||
|
||||
it('should fail when no guardrails are present and inverse=true (defaults to flagged: false)', async () => {
|
||||
const params: AssertionParams = {
|
||||
...defaultParams,
|
||||
assertion: inverseAssertion,
|
||||
inverse: true,
|
||||
providerResponse: {
|
||||
output: 'test output',
|
||||
},
|
||||
};
|
||||
|
||||
const result = await handleGuardrails(params);
|
||||
expect(result).toEqual({
|
||||
pass: false,
|
||||
score: 0,
|
||||
reason: 'Content was not blocked by guardrails (expected to be blocked)',
|
||||
assertion: inverseAssertion,
|
||||
});
|
||||
});
|
||||
|
||||
it('should pass with specific message when input is flagged and inverse=true', async () => {
|
||||
const params: AssertionParams = {
|
||||
...defaultParams,
|
||||
assertion: inverseAssertion,
|
||||
inverse: true,
|
||||
providerResponse: {
|
||||
guardrails: {
|
||||
flagged: true,
|
||||
flaggedInput: true,
|
||||
},
|
||||
output: 'test output',
|
||||
},
|
||||
};
|
||||
|
||||
const result = await handleGuardrails(params);
|
||||
expect(result).toEqual({
|
||||
pass: true,
|
||||
score: 1,
|
||||
reason: 'Guardrail correctly blocked: Prompt failed safety checks',
|
||||
assertion: inverseAssertion,
|
||||
});
|
||||
});
|
||||
});
|
||||
});
|
||||
Reference in New Issue
Block a user