promptfoo 0.121.4 → 0.121.7

package/dist/src/app/assets/{vendor-utils-BnEYbx2Q.js → vendor-utils-BHPO71pu.js}

@@ -6,7 +6,7 @@ import{r as e}from"./rolldown-runtime-COnpUsM8.js";var t=e({CORE_SCHEMA:()=>er,D
 `,l=1;l<=t.linesAfter&&!(o+l>=i.length);l++)u=f(e.buffer,r[o+l],i[o+l],e.position-(r[o]-r[o+l]),m),s+=c.repeat(` `,t.indent)+p((e.line+l+1).toString(),d)+` | `+u.str+`
 `;return s.replace(/\n$/,``)}var h=m,g=[`kind`,`multi`,`resolve`,`construct`,`instanceOf`,`predicate`,`represent`,`representName`,`defaultStyle`,`styleAliases`],_=[`scalar`,`sequence`,`mapping`];function v(e){var t={};return e!==null&&Object.keys(e).forEach(function(n){e[n].forEach(function(e){t[String(e)]=n})}),t}function ee(e,t){if(t||={},Object.keys(t).forEach(function(t){if(g.indexOf(t)===-1)throw new d(`Unknown option "`+t+`" is met in definition of "`+e+`" YAML type.`)}),this.options=t,this.tag=e,this.kind=t.kind||null,this.resolve=t.resolve||function(){return!0},this.construct=t.construct||function(e){return e},this.instanceOf=t.instanceOf||null,this.predicate=t.predicate||null,this.represent=t.represent||null,this.representName=t.representName||null,this.defaultStyle=t.defaultStyle||null,this.multi=t.multi||!1,this.styleAliases=v(t.styleAliases||null),_.indexOf(this.kind)===-1)throw new d(`Unknown kind "`+this.kind+`" is specified for "`+e+`" YAML type.`)}var y=ee;function te(e,t){var n=[];return e[t].forEach(function(e){var t=n.length;n.forEach(function(n,r){n.tag===e.tag&&n.kind===e.kind&&n.multi===e.multi&&(t=r)}),n[t]=e}),n}function ne(){var e={scalar:{},sequence:{},mapping:{},fallback:{},multi:{scalar:[],sequence:[],mapping:[],fallback:[]}},t,n;function r(t){t.multi?(e.multi[t.kind].push(t),e.multi.fallback.push(t)):e[t.kind][t.tag]=e.fallback[t.tag]=t}for(t=0,n=arguments.length;t<n;t+=1)arguments[t].forEach(r);return e}function re(e){return this.extend(e)}re.prototype.extend=function(e){var t=[],n=[];if(e instanceof y)n.push(e);else if(Array.isArray(e))n=n.concat(e);else if(e&&(Array.isArray(e.implicit)||Array.isArray(e.explicit)))e.implicit&&(t=t.concat(e.implicit)),e.explicit&&(n=n.concat(e.explicit));else throw new d(`Schema.extend argument should be a Type, [ Type ], or a schema definition ({ implicit: [...], explicit: [...] })`);t.forEach(function(e){if(!(e instanceof y))throw new d(`Specified list of YAML types (or a single Type object) contains a non-Type object.`);if(e.loadKind&&e.loadKind!==`scalar`)throw new d(`There is a non-scalar type in the implicit list of a schema. Implicit resolving of such types is not supported.`);if(e.multi)throw new d(`There is a multi type in the implicit list of a schema. Multi tags can only be listed as explicit.`)}),n.forEach(function(e){if(!(e instanceof y))throw new d(`Specified list of YAML types (or a single Type object) contains a non-Type object.`)});var r=Object.create(re.prototype);return r.implicit=(this.implicit||[]).concat(t),r.explicit=(this.explicit||[]).concat(n),r.compiledImplicit=te(r,`implicit`),r.compiledExplicit=te(r,`explicit`),r.compiledTypeMap=ne(r.compiledImplicit,r.compiledExplicit),r};var ie=re,ae=new y(`tag:yaml.org,2002:str`,{kind:`scalar`,construct:function(e){return e===null?``:e}}),oe=new y(`tag:yaml.org,2002:seq`,{kind:`sequence`,construct:function(e){return e===null?[]:e}}),se=new y(`tag:yaml.org,2002:map`,{kind:`mapping`,construct:function(e){return e===null?{}:e}}),ce=new ie({explicit:[ae,oe,se]});function le(e){if(e===null)return!0;var t=e.length;return t===1&&e===`~`||t===4&&(e===`null`||e===`Null`||e===`NULL`)}function ue(){return null}function de(e){return e===null}var fe=new y(`tag:yaml.org,2002:null`,{kind:`scalar`,resolve:le,construct:ue,predicate:de,represent:{canonical:function(){return`~`},lowercase:function(){return`null`},uppercase:function(){return`NULL`},camelcase:function(){return`Null`},empty:function(){return``}},defaultStyle:`lowercase`});function pe(e){if(e===null)return!1;var t=e.length;return t===4&&(e===`true`||e===`True`||e===`TRUE`)||t===5&&(e===`false`||e===`False`||e===`FALSE`)}function me(e){return e===`true`||e===`True`||e===`TRUE`}function he(e){return Object.prototype.toString.call(e)===`[object Boolean]`}var ge=new y(`tag:yaml.org,2002:bool`,{kind:`scalar`,resolve:pe,construct:me,predicate:he,represent:{lowercase:function(e){return e?`true`:`false`},uppercase:function(e){return e?`TRUE`:`FALSE`},camelcase:function(e){return e?`True`:`False`}},defaultStyle:`lowercase`});function _e(e){return 48<=e&&e<=57||65<=e&&e<=70||97<=e&&e<=102}function ve(e){return 48<=e&&e<=55}function ye(e){return 48<=e&&e<=57}function be(e){if(e===null)return!1;var t=e.length,n=0,r=!1,i;if(!t)return!1;if(i=e[n],(i===`-`||i===`+`)&&(i=e[++n]),i===`0`){if(n+1===t)return!0;if(i=e[++n],i===`b`){for(n++;n<t;n++)if(i=e[n],i!==`_`){if(i!==`0`&&i!==`1`)return!1;r=!0}return r&&i!==`_`}if(i===`x`){for(n++;n<t;n++)if(i=e[n],i!==`_`){if(!_e(e.charCodeAt(n)))return!1;r=!0}return r&&i!==`_`}if(i===`o`){for(n++;n<t;n++)if(i=e[n],i!==`_`){if(!ve(e.charCodeAt(n)))return!1;r=!0}return r&&i!==`_`}}if(i===`_`)return!1;for(;n<t;n++)if(i=e[n],i!==`_`){if(!ye(e.charCodeAt(n)))return!1;r=!0}return!(!r||i===`_`)}function xe(e){var t=e,n=1,r;if(t.indexOf(`_`)!==-1&&(t=t.replace(/_/g,``)),r=t[0],(r===`-`||r===`+`)&&(r===`-`&&(n=-1),t=t.slice(1),r=t[0]),t===`0`)return 0;if(r===`0`){if(t[1]===`b`)return n*parseInt(t.slice(2),2);if(t[1]===`x`)return n*parseInt(t.slice(2),16);if(t[1]===`o`)return n*parseInt(t.slice(2),8)}return n*parseInt(t,10)}function Se(e){return Object.prototype.toString.call(e)===`[object Number]`&&e%1==0&&!c.isNegativeZero(e)}var Ce=new y(`tag:yaml.org,2002:int`,{kind:`scalar`,resolve:be,construct:xe,predicate:Se,represent:{binary:function(e){return e>=0?`0b`+e.toString(2):`-0b`+e.toString(2).slice(1)},octal:function(e){return e>=0?`0o`+e.toString(8):`-0o`+e.toString(8).slice(1)},decimal:function(e){return e.toString(10)},hexadecimal:function(e){return e>=0?`0x`+e.toString(16).toUpperCase():`-0x`+e.toString(16).toUpperCase().slice(1)}},defaultStyle:`decimal`,styleAliases:{binary:[2,`bin`],octal:[8,`oct`],decimal:[10,`dec`],hexadecimal:[16,`hex`]}}),we=RegExp(`^(?:[-+]?(?:[0-9][0-9_]*)(?:\\.[0-9_]*)?(?:[eE][-+]?[0-9]+)?|\\.[0-9_]+(?:[eE][-+]?[0-9]+)?|[-+]?\\.(?:inf|Inf|INF)|\\.(?:nan|NaN|NAN))$`);function Te(e){return!(e===null||!we.test(e)||e[e.length-1]===`_`)}function Ee(e){var t=e.replace(/_/g,``).toLowerCase(),n=t[0]===`-`?-1:1;return`+-`.indexOf(t[0])>=0&&(t=t.slice(1)),t===`.inf`?n===1?1/0:-1/0:t===`.nan`?NaN:n*parseFloat(t,10)}var De=/^[-+]?[0-9]+e/;function Oe(e,t){var n;if(isNaN(e))switch(t){case`lowercase`:return`.nan`;case`uppercase`:return`.NAN`;case`camelcase`:return`.NaN`}else if(e===1/0)switch(t){case`lowercase`:return`.inf`;case`uppercase`:return`.INF`;case`camelcase`:return`.Inf`}else if(e===-1/0)switch(t){case`lowercase`:return`-.inf`;case`uppercase`:return`-.INF`;case`camelcase`:return`-.Inf`}else if(c.isNegativeZero(e))return`-0.0`;return n=e.toString(10),De.test(n)?n.replace(`e`,`.e`):n}function ke(e){return Object.prototype.toString.call(e)===`[object Number]`&&(e%1!=0||c.isNegativeZero(e))}var Ae=new y(`tag:yaml.org,2002:float`,{kind:`scalar`,resolve:Te,construct:Ee,predicate:ke,represent:Oe,defaultStyle:`lowercase`}),je=ce.extend({implicit:[fe,ge,Ce,Ae]}),Me=je,Ne=RegExp(`^([0-9][0-9][0-9][0-9])-([0-9][0-9])-([0-9][0-9])$`),Pe=RegExp(`^([0-9][0-9][0-9][0-9])-([0-9][0-9]?)-([0-9][0-9]?)(?:[Tt]|[ \\t]+)([0-9][0-9]?):([0-9][0-9]):([0-9][0-9])(?:\\.([0-9]*))?(?:[ \\t]*(Z|([-+])([0-9][0-9]?)(?::([0-9][0-9]))?))?$`);function Fe(e){return e===null?!1:Ne.exec(e)!==null||Pe.exec(e)!==null}function Ie(e){var t,n,r,i,a,o,s,c=0,l=null,u,d,f;if(t=Ne.exec(e),t===null&&(t=Pe.exec(e)),t===null)throw Error(`Date resolve error`);if(n=+t[1],r=t[2]-1,i=+t[3],!t[4])return new Date(Date.UTC(n,r,i));if(a=+t[4],o=+t[5],s=+t[6],t[7]){for(c=t[7].slice(0,3);c.length<3;)c+=`0`;c=+c}return t[9]&&(u=+t[10],d=+(t[11]||0),l=(u*60+d)*6e4,t[9]===`-`&&(l=-l)),f=new Date(Date.UTC(n,r,i,a,o,s,c)),l&&f.setTime(f.getTime()-l),f}function Le(e){return e.toISOString()}var Re=new y(`tag:yaml.org,2002:timestamp`,{kind:`scalar`,resolve:Fe,construct:Ie,instanceOf:Date,represent:Le});function ze(e){return e===`<<`||e===null}var Be=new y(`tag:yaml.org,2002:merge`,{kind:`scalar`,resolve:ze}),Ve=`ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=
 \r`;function He(e){if(e===null)return!1;var t,n,r=0,i=e.length,a=Ve;for(n=0;n<i;n++)if(t=a.indexOf(e.charAt(n)),!(t>64)){if(t<0)return!1;r+=6}return r%8==0}function Ue(e){var t,n,r=e.replace(/[\r\n=]/g,``),i=r.length,a=Ve,o=0,s=[];for(t=0;t<i;t++)t%4==0&&t&&(s.push(o>>16&255),s.push(o>>8&255),s.push(o&255)),o=o<<6|a.indexOf(r.charAt(t));return n=i%4*6,n===0?(s.push(o>>16&255),s.push(o>>8&255),s.push(o&255)):n===18?(s.push(o>>10&255),s.push(o>>2&255)):n===12&&s.push(o>>4&255),new Uint8Array(s)}function We(e){var t=``,n=0,r,i,a=e.length,o=Ve;for(r=0;r<a;r++)r%3==0&&r&&(t+=o[n>>18&63],t+=o[n>>12&63],t+=o[n>>6&63],t+=o[n&63]),n=(n<<8)+e[r];return i=a%3,i===0?(t+=o[n>>18&63],t+=o[n>>12&63],t+=o[n>>6&63],t+=o[n&63]):i===2?(t+=o[n>>10&63],t+=o[n>>4&63],t+=o[n<<2&63],t+=o[64]):i===1&&(t+=o[n>>2&63],t+=o[n<<4&63],t+=o[64],t+=o[64]),t}function Ge(e){return Object.prototype.toString.call(e)===`[object Uint8Array]`}var Ke=new y(`tag:yaml.org,2002:binary`,{kind:`scalar`,resolve:He,construct:Ue,predicate:Ge,represent:We}),qe=Object.prototype.hasOwnProperty,Je=Object.prototype.toString;function Ye(e){if(e===null)return!0;var t=[],n,r,i,a,o,s=e;for(n=0,r=s.length;n<r;n+=1){if(i=s[n],o=!1,Je.call(i)!==`[object Object]`)return!1;for(a in i)if(qe.call(i,a))if(!o)o=!0;else return!1;if(!o)return!1;if(t.indexOf(a)===-1)t.push(a);else return!1}return!0}function Xe(e){return e===null?[]:e}var Ze=new y(`tag:yaml.org,2002:omap`,{kind:`sequence`,resolve:Ye,construct:Xe}),Qe=Object.prototype.toString;function $e(e){if(e===null)return!0;var t,n,r,i,a,o=e;for(a=Array(o.length),t=0,n=o.length;t<n;t+=1){if(r=o[t],Qe.call(r)!==`[object Object]`||(i=Object.keys(r),i.length!==1))return!1;a[t]=[i[0],r[i[0]]]}return!0}function et(e){if(e===null)return[];var t,n,r,i,a,o=e;for(a=Array(o.length),t=0,n=o.length;t<n;t+=1)r=o[t],i=Object.keys(r),a[t]=[i[0],r[i[0]]];return a}var tt=new y(`tag:yaml.org,2002:pairs`,{kind:`sequence`,resolve:$e,construct:et}),nt=Object.prototype.hasOwnProperty;function rt(e){if(e===null)return!0;var t,n=e;for(t in n)if(nt.call(n,t)&&n[t]!==null)return!1;return!0}function it(e){return e===null?{}:e}var at=new y(`tag:yaml.org,2002:set`,{kind:`mapping`,resolve:rt,construct:it}),b=Me.extend({implicit:[Re,Be],explicit:[Ke,Ze,tt,at]}),x=Object.prototype.hasOwnProperty,S=1,ot=2,st=3,C=4,w=1,ct=2,lt=3,ut=/[\x00-\x08\x0B\x0C\x0E-\x1F\x7F-\x84\x86-\x9F\uFFFE\uFFFF]|[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?:[^\uD800-\uDBFF]|^)[\uDC00-\uDFFF]/,dt=/[\x85\u2028\u2029]/,ft=/[,\[\]\{\}]/,pt=/^(?:!|!!|![a-z\-]+!)$/i,mt=/^(?:!|[^,\[\]\{\}])(?:%[0-9a-f]{2}|[0-9a-z\-#;\/\?:@&=\+\$,_\.!~\*'\(\)\[\]])*$/i;function ht(e){return Object.prototype.toString.call(e)}function T(e){return e===10||e===13}function E(e){return e===9||e===32}function D(e){return e===9||e===32||e===10||e===13}function O(e){return e===44||e===91||e===93||e===123||e===125}function gt(e){var t;return 48<=e&&e<=57?e-48:(t=e|32,97<=t&&t<=102?t-97+10:-1)}function _t(e){return e===120?2:e===117?4:e===85?8:0}function vt(e){return 48<=e&&e<=57?e-48:-1}function yt(e){return e===48?`\0`:e===97?`\x07`:e===98?`\b`:e===116||e===9?`	`:e===110?`
-`:e===118?`\v`:e===102?`\f`:e===114?`\r`:e===101?`\x1B`:e===32?` `:e===34?`"`:e===47?`/`:e===92?`\\`:e===78?`…`:e===95?`\xA0`:e===76?`\u2028`:e===80?`\u2029`:``}function bt(e){return e<=65535?String.fromCharCode(e):String.fromCharCode((e-65536>>10)+55296,(e-65536&1023)+56320)}function xt(e,t,n){t===`__proto__`?Object.defineProperty(e,t,{configurable:!0,enumerable:!0,writable:!0,value:n}):e[t]=n}for(var St=Array(256),Ct=Array(256),k=0;k<256;k++)St[k]=yt(k)?1:0,Ct[k]=yt(k);function wt(e,t){this.input=e,this.filename=t.filename||null,this.schema=t.schema||b,this.onWarning=t.onWarning||null,this.legacy=t.legacy||!1,this.json=t.json||!1,this.listener=t.listener||null,this.implicitTypes=this.schema.compiledImplicit,this.typeMap=this.schema.compiledTypeMap,this.length=e.length,this.position=0,this.line=0,this.lineStart=0,this.lineIndent=0,this.firstTabInLine=-1,this.documents=[]}function Tt(e,t){var n={name:e.filename,buffer:e.input.slice(0,-1),position:e.position,line:e.line,column:e.position-e.lineStart};return n.snippet=h(n),new d(t,n)}function A(e,t){throw Tt(e,t)}function j(e,t){e.onWarning&&e.onWarning.call(null,Tt(e,t))}var Et={YAML:function(e,t,n){var r,i,a;e.version!==null&&A(e,`duplication of %YAML directive`),n.length!==1&&A(e,`YAML directive accepts exactly one argument`),r=/^([0-9]+)\.([0-9]+)$/.exec(n[0]),r===null&&A(e,`ill-formed argument of the YAML directive`),i=parseInt(r[1],10),a=parseInt(r[2],10),i!==1&&A(e,`unacceptable YAML version of the document`),e.version=n[0],e.checkLineBreaks=a<2,a!==1&&a!==2&&j(e,`unsupported YAML version of the document`)},TAG:function(e,t,n){var r,i;n.length!==2&&A(e,`TAG directive accepts exactly two arguments`),r=n[0],i=n[1],pt.test(r)||A(e,`ill-formed tag handle (first argument) of the TAG directive`),x.call(e.tagMap,r)&&A(e,`there is a previously declared suffix for "`+r+`" tag handle`),mt.test(i)||A(e,`ill-formed tag prefix (second argument) of the TAG directive`);try{i=decodeURIComponent(i)}catch{A(e,`tag prefix is malformed: `+i)}e.tagMap[r]=i}};function M(e,t,n,r){var i,a,o,s;if(t<n){if(s=e.input.slice(t,n),r)for(i=0,a=s.length;i<a;i+=1)o=s.charCodeAt(i),o===9||32<=o&&o<=1114111||A(e,`expected valid JSON character`);else ut.test(s)&&A(e,`the stream contains non-printable characters`);e.result+=s}}function Dt(e,t,n,r){var i,a,o,s;for(c.isObject(n)||A(e,`cannot merge mappings; the provided source object is unacceptable`),i=Object.keys(n),o=0,s=i.length;o<s;o+=1)a=i[o],x.call(t,a)||(xt(t,a,n[a]),r[a]=!0)}function N(e,t,n,r,i,a,o,s,c){var l,u;if(Array.isArray(i))for(i=Array.prototype.slice.call(i),l=0,u=i.length;l<u;l+=1)Array.isArray(i[l])&&A(e,`nested arrays are not supported inside keys`),typeof i==`object`&&ht(i[l])===`[object Object]`&&(i[l]=`[object Object]`);if(typeof i==`object`&&ht(i)===`[object Object]`&&(i=`[object Object]`),i=String(i),t===null&&(t={}),r===`tag:yaml.org,2002:merge`)if(Array.isArray(a))for(l=0,u=a.length;l<u;l+=1)Dt(e,t,a[l],n);else Dt(e,t,a,n);else !e.json&&!x.call(n,i)&&x.call(t,i)&&(e.line=o||e.line,e.lineStart=s||e.lineStart,e.position=c||e.position,A(e,`duplicated mapping key`)),xt(t,i,a),delete n[i];return t}function P(e){var t=e.input.charCodeAt(e.position);t===10?e.position++:t===13?(e.position++,e.input.charCodeAt(e.position)===10&&e.position++):A(e,`a line break is expected`),e.line+=1,e.lineStart=e.position,e.firstTabInLine=-1}function F(e,t,n){for(var r=0,i=e.input.charCodeAt(e.position);i!==0;){for(;E(i);)i===9&&e.firstTabInLine===-1&&(e.firstTabInLine=e.position),i=e.input.charCodeAt(++e.position);if(t&&i===35)do i=e.input.charCodeAt(++e.position);while(i!==10&&i!==13&&i!==0);if(T(i))for(P(e),i=e.input.charCodeAt(e.position),r++,e.lineIndent=0;i===32;)e.lineIndent++,i=e.input.charCodeAt(++e.position);else break}return n!==-1&&r!==0&&e.lineIndent<n&&j(e,`deficient indentation`),r}function I(e){var t=e.position,n=e.input.charCodeAt(t);return!!((n===45||n===46)&&n===e.input.charCodeAt(t+1)&&n===e.input.charCodeAt(t+2)&&(t+=3,n=e.input.charCodeAt(t),n===0||D(n)))}function Ot(e,t){t===1?e.result+=` `:t>1&&(e.result+=c.repeat(`
+`:e===118?`\v`:e===102?`\f`:e===114?`\r`:e===101?`\x1B`:e===32?` `:e===34?`"`:e===47?`/`:e===92?`\\`:e===78?`…`:e===95?`\xA0`:e===76?`\u2028`:e===80?`\u2029`:``}function bt(e){return e<=65535?String.fromCharCode(e):String.fromCharCode((e-65536>>10)+55296,(e-65536&1023)+56320)}function xt(e,t,n){t===`__proto__`?Object.defineProperty(e,t,{configurable:!0,enumerable:!0,writable:!0,value:n}):e[t]=n}for(var St=Array(256),Ct=Array(256),k=0;k<256;k++)St[k]=+!!yt(k),Ct[k]=yt(k);function wt(e,t){this.input=e,this.filename=t.filename||null,this.schema=t.schema||b,this.onWarning=t.onWarning||null,this.legacy=t.legacy||!1,this.json=t.json||!1,this.listener=t.listener||null,this.implicitTypes=this.schema.compiledImplicit,this.typeMap=this.schema.compiledTypeMap,this.length=e.length,this.position=0,this.line=0,this.lineStart=0,this.lineIndent=0,this.firstTabInLine=-1,this.documents=[]}function Tt(e,t){var n={name:e.filename,buffer:e.input.slice(0,-1),position:e.position,line:e.line,column:e.position-e.lineStart};return n.snippet=h(n),new d(t,n)}function A(e,t){throw Tt(e,t)}function j(e,t){e.onWarning&&e.onWarning.call(null,Tt(e,t))}var Et={YAML:function(e,t,n){var r,i,a;e.version!==null&&A(e,`duplication of %YAML directive`),n.length!==1&&A(e,`YAML directive accepts exactly one argument`),r=/^([0-9]+)\.([0-9]+)$/.exec(n[0]),r===null&&A(e,`ill-formed argument of the YAML directive`),i=parseInt(r[1],10),a=parseInt(r[2],10),i!==1&&A(e,`unacceptable YAML version of the document`),e.version=n[0],e.checkLineBreaks=a<2,a!==1&&a!==2&&j(e,`unsupported YAML version of the document`)},TAG:function(e,t,n){var r,i;n.length!==2&&A(e,`TAG directive accepts exactly two arguments`),r=n[0],i=n[1],pt.test(r)||A(e,`ill-formed tag handle (first argument) of the TAG directive`),x.call(e.tagMap,r)&&A(e,`there is a previously declared suffix for "`+r+`" tag handle`),mt.test(i)||A(e,`ill-formed tag prefix (second argument) of the TAG directive`);try{i=decodeURIComponent(i)}catch{A(e,`tag prefix is malformed: `+i)}e.tagMap[r]=i}};function M(e,t,n,r){var i,a,o,s;if(t<n){if(s=e.input.slice(t,n),r)for(i=0,a=s.length;i<a;i+=1)o=s.charCodeAt(i),o===9||32<=o&&o<=1114111||A(e,`expected valid JSON character`);else ut.test(s)&&A(e,`the stream contains non-printable characters`);e.result+=s}}function Dt(e,t,n,r){var i,a,o,s;for(c.isObject(n)||A(e,`cannot merge mappings; the provided source object is unacceptable`),i=Object.keys(n),o=0,s=i.length;o<s;o+=1)a=i[o],x.call(t,a)||(xt(t,a,n[a]),r[a]=!0)}function N(e,t,n,r,i,a,o,s,c){var l,u;if(Array.isArray(i))for(i=Array.prototype.slice.call(i),l=0,u=i.length;l<u;l+=1)Array.isArray(i[l])&&A(e,`nested arrays are not supported inside keys`),typeof i==`object`&&ht(i[l])===`[object Object]`&&(i[l]=`[object Object]`);if(typeof i==`object`&&ht(i)===`[object Object]`&&(i=`[object Object]`),i=String(i),t===null&&(t={}),r===`tag:yaml.org,2002:merge`)if(Array.isArray(a))for(l=0,u=a.length;l<u;l+=1)Dt(e,t,a[l],n);else Dt(e,t,a,n);else !e.json&&!x.call(n,i)&&x.call(t,i)&&(e.line=o||e.line,e.lineStart=s||e.lineStart,e.position=c||e.position,A(e,`duplicated mapping key`)),xt(t,i,a),delete n[i];return t}function P(e){var t=e.input.charCodeAt(e.position);t===10?e.position++:t===13?(e.position++,e.input.charCodeAt(e.position)===10&&e.position++):A(e,`a line break is expected`),e.line+=1,e.lineStart=e.position,e.firstTabInLine=-1}function F(e,t,n){for(var r=0,i=e.input.charCodeAt(e.position);i!==0;){for(;E(i);)i===9&&e.firstTabInLine===-1&&(e.firstTabInLine=e.position),i=e.input.charCodeAt(++e.position);if(t&&i===35)do i=e.input.charCodeAt(++e.position);while(i!==10&&i!==13&&i!==0);if(T(i))for(P(e),i=e.input.charCodeAt(e.position),r++,e.lineIndent=0;i===32;)e.lineIndent++,i=e.input.charCodeAt(++e.position);else break}return n!==-1&&r!==0&&e.lineIndent<n&&j(e,`deficient indentation`),r}function I(e){var t=e.position,n=e.input.charCodeAt(t);return!!((n===45||n===46)&&n===e.input.charCodeAt(t+1)&&n===e.input.charCodeAt(t+2)&&(t+=3,n=e.input.charCodeAt(t),n===0||D(n)))}function Ot(e,t){t===1?e.result+=` `:t>1&&(e.result+=c.repeat(`
 `,t-1))}function kt(e,t,n){var r,i,a,o,s,c,l,u,d=e.kind,f=e.result,p=e.input.charCodeAt(e.position);if(D(p)||O(p)||p===35||p===38||p===42||p===33||p===124||p===62||p===39||p===34||p===37||p===64||p===96||(p===63||p===45)&&(i=e.input.charCodeAt(e.position+1),D(i)||n&&O(i)))return!1;for(e.kind=`scalar`,e.result=``,a=o=e.position,s=!1;p!==0;){if(p===58){if(i=e.input.charCodeAt(e.position+1),D(i)||n&&O(i))break}else if(p===35){if(r=e.input.charCodeAt(e.position-1),D(r))break}else if(e.position===e.lineStart&&I(e)||n&&O(p))break;else if(T(p))if(c=e.line,l=e.lineStart,u=e.lineIndent,F(e,!1,-1),e.lineIndent>=t){s=!0,p=e.input.charCodeAt(e.position);continue}else{e.position=o,e.line=c,e.lineStart=l,e.lineIndent=u;break}s&&=(M(e,a,o,!1),Ot(e,e.line-c),a=o=e.position,!1),E(p)||(o=e.position+1),p=e.input.charCodeAt(++e.position)}return M(e,a,o,!1),e.result?!0:(e.kind=d,e.result=f,!1)}function At(e,t){var n=e.input.charCodeAt(e.position),r,i;if(n!==39)return!1;for(e.kind=`scalar`,e.result=``,e.position++,r=i=e.position;(n=e.input.charCodeAt(e.position))!==0;)if(n===39)if(M(e,r,e.position,!0),n=e.input.charCodeAt(++e.position),n===39)r=e.position,e.position++,i=e.position;else return!0;else T(n)?(M(e,r,i,!0),Ot(e,F(e,!1,t)),r=i=e.position):e.position===e.lineStart&&I(e)?A(e,`unexpected end of the document within a single quoted scalar`):(e.position++,i=e.position);A(e,`unexpected end of the stream within a single quoted scalar`)}function jt(e,t){var n,r,i,a,o,s=e.input.charCodeAt(e.position);if(s!==34)return!1;for(e.kind=`scalar`,e.result=``,e.position++,n=r=e.position;(s=e.input.charCodeAt(e.position))!==0;)if(s===34)return M(e,n,e.position,!0),e.position++,!0;else if(s===92){if(M(e,n,e.position,!0),s=e.input.charCodeAt(++e.position),T(s))F(e,!1,t);else if(s<256&&St[s])e.result+=Ct[s],e.position++;else if((o=_t(s))>0){for(i=o,a=0;i>0;i--)s=e.input.charCodeAt(++e.position),(o=gt(s))>=0?a=(a<<4)+o:A(e,`expected hexadecimal character`);e.result+=bt(a),e.position++}else A(e,`unknown escape sequence`);n=r=e.position}else T(s)?(M(e,n,r,!0),Ot(e,F(e,!1,t)),n=r=e.position):e.position===e.lineStart&&I(e)?A(e,`unexpected end of the document within a double quoted scalar`):(e.position++,r=e.position);A(e,`unexpected end of the stream within a double quoted scalar`)}function Mt(e,t){var n=!0,r,i,a,o=e.tag,s,c=e.anchor,l,u,d,f,p,m=Object.create(null),h,g,_,v=e.input.charCodeAt(e.position);if(v===91)u=93,p=!1,s=[];else if(v===123)u=125,p=!0,s={};else return!1;for(e.anchor!==null&&(e.anchorMap[e.anchor]=s),v=e.input.charCodeAt(++e.position);v!==0;){if(F(e,!0,t),v=e.input.charCodeAt(e.position),v===u)return e.position++,e.tag=o,e.anchor=c,e.kind=p?`mapping`:`sequence`,e.result=s,!0;n?v===44&&A(e,`expected the node content, but found ','`):A(e,`missed comma between flow collection entries`),g=h=_=null,d=f=!1,v===63&&(l=e.input.charCodeAt(e.position+1),D(l)&&(d=f=!0,e.position++,F(e,!0,t))),r=e.line,i=e.lineStart,a=e.position,L(e,t,S,!1,!0),g=e.tag,h=e.result,F(e,!0,t),v=e.input.charCodeAt(e.position),(f||e.line===r)&&v===58&&(d=!0,v=e.input.charCodeAt(++e.position),F(e,!0,t),L(e,t,S,!1,!0),_=e.result),p?N(e,s,m,g,h,_,r,i,a):d?s.push(N(e,null,m,g,h,_,r,i,a)):s.push(h),F(e,!0,t),v=e.input.charCodeAt(e.position),v===44?(n=!0,v=e.input.charCodeAt(++e.position)):n=!1}A(e,`unexpected end of the stream within a flow collection`)}function Nt(e,t){var n,r,i=w,a=!1,o=!1,s=t,l=0,u=!1,d,f=e.input.charCodeAt(e.position);if(f===124)r=!1;else if(f===62)r=!0;else return!1;for(e.kind=`scalar`,e.result=``;f!==0;)if(f=e.input.charCodeAt(++e.position),f===43||f===45)w===i?i=f===43?lt:ct:A(e,`repeat of a chomping mode identifier`);else if((d=vt(f))>=0)d===0?A(e,`bad explicit indentation width of a block scalar; it cannot be less than one`):o?A(e,`repeat of an indentation width identifier`):(s=t+d-1,o=!0);else break;if(E(f)){do f=e.input.charCodeAt(++e.position);while(E(f));if(f===35)do f=e.input.charCodeAt(++e.position);while(!T(f)&&f!==0)}for(;f!==0;){for(P(e),e.lineIndent=0,f=e.input.charCodeAt(e.position);(!o||e.lineIndent<s)&&f===32;)e.lineIndent++,f=e.input.charCodeAt(++e.position);if(!o&&e.lineIndent>s&&(s=e.lineIndent),T(f)){l++;continue}if(e.lineIndent<s){i===lt?e.result+=c.repeat(`
 `,a?1+l:l):i===w&&a&&(e.result+=`
 `);break}for(r?E(f)?(u=!0,e.result+=c.repeat(`

package/dist/src/app/index.html

@@ -7,13 +7,38 @@
     <title>promptfoo</title>
     <meta name="description" content="LLM testing and evaluation" />
     <meta property="og:image" content="https://www.promptfoo.dev/img/thumbnail.png" />
-    <script type="module" crossorigin src="/assets/index-BzJt18Jz.js"></script>
+    <script>
+      (() => {
+        let savedMode = null;
+        let systemPrefersDark = false;
+
+        try {
+          systemPrefersDark =
+            typeof window.matchMedia === 'function' &&
+            window.matchMedia('(prefers-color-scheme: dark)').matches;
+        } catch {}
+
+        try {
+          savedMode = localStorage.getItem('darkMode');
+        } catch {}
+
+        const resolvedTheme =
+          savedMode === 'true' || (savedMode !== 'false' && systemPrefersDark) ? 'dark' : 'light';
+
+        document.documentElement.style.colorScheme = resolvedTheme;
+
+        if (resolvedTheme === 'dark') {
+          document.documentElement.setAttribute('data-theme', 'dark');
+        }
+      })();
+    </script>
+    <script type="module" crossorigin src="/assets/index-BnT6P6sF.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-COnpUsM8.js">
-    <link rel="modulepreload" crossorigin href="/assets/vendor-react-CVvmk1UB.js">
-    <link rel="modulepreload" crossorigin href="/assets/vendor-charts-BNdH8TCw.js">
-    <link rel="modulepreload" crossorigin href="/assets/vendor-markdown-Ch00wnNI.js">
-    <link rel="modulepreload" crossorigin href="/assets/vendor-utils-BnEYbx2Q.js">
-    <link rel="stylesheet" crossorigin href="/assets/index-BXGkeMwh.css">
+    <link rel="modulepreload" crossorigin href="/assets/vendor-react-CqWgVW6T.js">
+    <link rel="modulepreload" crossorigin href="/assets/vendor-charts-BL9OMNU7.js">
+    <link rel="modulepreload" crossorigin href="/assets/vendor-markdown-BYsQqn7Z.js">
+    <link rel="modulepreload" crossorigin href="/assets/vendor-utils-BHPO71pu.js">
+    <link rel="stylesheet" crossorigin href="/assets/index-yhM8y1PP.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/src/{audio-COrn8rM6.js → audio-BqnRvcWG.js}

@@ -1,6 +1,6 @@
 import { T as getEnvString, a as logger } from "./logger-Ct2S6Yx-.js";
-import { h as REQUEST_TIMEOUT_MS } from "./fetch-Di00EQrc.js";
-import { r as fetchWithCache } from "./cache-D5NZmMiT.js";
+import { p as REQUEST_TIMEOUT_MS } from "./fetch-It34O8Ur.js";
+import { r as fetchWithCache } from "./cache-DIXbtkNO.js";
 //#region src/providers/hyperbolic/audio.ts
 const HYPERBOLIC_AUDIO_MODELS = [{
 	id: "Melo-TTS",
@@ -94,4 +94,4 @@ function createHyperbolicAudioProvider(providerPath, options = {}) {
 //#endregion
 export { createHyperbolicAudioProvider };
 
-//# sourceMappingURL=audio-COrn8rM6.js.map
+//# sourceMappingURL=audio-BqnRvcWG.js.map

package/dist/src/{audio-DcVKoInv.js → audio-CPMtV1yR.js}

@@ -1,6 +1,6 @@
-import { T as getEnvString, a as logger } from "./logger-B88EkIn6.js";
-import { h as REQUEST_TIMEOUT_MS } from "./fetch-B0Z3Oe4k.js";
-import { r as fetchWithCache } from "./cache-C4Xb-hNb.js";
+import { T as getEnvString, a as logger } from "./logger-KD8JjCRJ.js";
+import { v as REQUEST_TIMEOUT_MS } from "./fetch-BufrQtvR.js";
+import { r as fetchWithCache } from "./cache-roFAE0cI.js";
 //#region src/providers/hyperbolic/audio.ts
 const HYPERBOLIC_AUDIO_MODELS = [{
 	id: "Melo-TTS",
@@ -94,4 +94,4 @@ function createHyperbolicAudioProvider(providerPath, options = {}) {
 //#endregion
 export { createHyperbolicAudioProvider };
 
-//# sourceMappingURL=audio-DcVKoInv.js.map
+//# sourceMappingURL=audio-CPMtV1yR.js.map

package/dist/src/{audio-B7izf48x.js → audio-DyiebVB3.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
-import { O as getEnvString, s as logger } from "./logger-DksKw1Qc.js";
-import { m as REQUEST_TIMEOUT_MS } from "./fetch-BEWnXrrG.js";
-import { a as fetchWithCache } from "./cache-mb7c8hbp.js";
+import { O as getEnvString, s as logger } from "./logger-BbY6ypFL.js";
+import { _ as REQUEST_TIMEOUT_MS } from "./fetch-DXUnXkVU.js";
+import { a as fetchWithCache } from "./cache-DpPWrkTE.js";
 //#region src/providers/hyperbolic/audio.ts
 const HYPERBOLIC_AUDIO_MODELS = [{
 	id: "Melo-TTS",
@@ -95,4 +95,4 @@ function createHyperbolicAudioProvider(providerPath, options = {}) {
 //#endregion
 export { createHyperbolicAudioProvider };
 
-//# sourceMappingURL=audio-B7izf48x.js.map
+//# sourceMappingURL=audio-DyiebVB3.js.map

package/dist/src/{audio-BQtNuYBj.cjs → audio-FnxbEnSE.cjs}

@@ -1,6 +1,6 @@
-const require_logger = require("./logger-COuQb2xB.cjs");
-const require_fetch = require("./fetch-CJU5ELPa.cjs");
-const require_cache = require("./cache-BIyPcp5v.cjs");
+const require_logger = require("./logger-cfNpzI4o.cjs");
+const require_fetch = require("./fetch-Dw4XZHjj.cjs");
+const require_cache = require("./cache-CPGUA4Yl.cjs");
 //#region src/providers/hyperbolic/audio.ts
 const HYPERBOLIC_AUDIO_MODELS = [{
 	id: "Melo-TTS",
@@ -94,4 +94,4 @@ function createHyperbolicAudioProvider(providerPath, options = {}) {
 //#endregion
 exports.createHyperbolicAudioProvider = createHyperbolicAudioProvider;
 
-//# sourceMappingURL=audio-BQtNuYBj.cjs.map
+//# sourceMappingURL=audio-FnxbEnSE.cjs.map

package/dist/src/authoritativeMarkupInjection-BZIywVjG.js

@@ -0,0 +1,74 @@
+import { a as logger, y as safeJsonStringify } from "./logger-KD8JjCRJ.js";
+import { t as fetchWithProxy } from "./fetch-BufrQtvR.js";
+import { n as VERSION } from "./version-BK20a4sw.js";
+import { t as invariant } from "./invariant-DIYf9sP1.js";
+import { o as getUserEmail } from "./accounts-DanM1wq_.js";
+import { r as getRemoteGenerationUrl, s as neverGenerateRemote } from "./remoteGeneration-COpWcmWd.js";
+import { a as createEmptyTokenUsage, n as accumulateResponseTokenUsage } from "./tokenUsageUtils-BjVkdk18.js";
+import { i as throwIfTargetPromptExceedsMaxChars } from "./promptLength-0qIHyhA5.js";
+import { n as renderPrompt } from "./server/index.js";
+//#region src/redteam/providers/authoritativeMarkupInjection.ts
+var AuthoritativeMarkupInjectionProvider = class {
+	config;
+	id() {
+		return "promptfoo:redteam:authoritative-markup-injection";
+	}
+	constructor(options = {}) {
+		if (neverGenerateRemote()) throw new Error(`Authoritative Markup Injection strategy requires remote grading to be enabled`);
+		invariant(typeof options.injectVar === "string", "Expected injectVar to be set");
+		this.config = { injectVar: options.injectVar };
+		logger.debug("[AuthoritativeMarkupInjection] Constructor options", { injectVar: options.injectVar });
+	}
+	async callApi(_prompt, context, options) {
+		logger.debug("[AuthoritativeMarkupInjection] callApi context", { context });
+		invariant(context?.originalProvider, "Expected originalProvider to be set");
+		invariant(context?.vars, "Expected vars to be set");
+		const targetProvider = context.originalProvider;
+		const originalText = context?.test?.metadata?.originalText || context?.vars[this.config.injectVar];
+		const body = JSON.stringify({
+			originalText,
+			i: 0,
+			prompt: context?.prompt?.raw,
+			task: "authoritative-markup-injection",
+			version: VERSION,
+			email: getUserEmail(),
+			purpose: context?.test?.metadata?.purpose
+		});
+		logger.debug(`[AuthoritativeMarkupInjection] Sending request to ${getRemoteGenerationUrl()}: ${body}`);
+		const data = await (await fetchWithProxy(getRemoteGenerationUrl(), {
+			body,
+			headers: { "Content-Type": "application/json" },
+			method: "POST"
+		}, options?.abortSignal)).json();
+		if (typeof data?.message !== "object" || !data.message?.content || !data.message?.role) throw new Error(`[AuthoritativeMarkupInjection] Invalid response from server: ${safeJsonStringify(data)}`);
+		const attackerMessage = data.message;
+		const targetVars = {
+			...context.vars,
+			[this.config.injectVar]: attackerMessage.content
+		};
+		const renderedAttackerPrompt = await renderPrompt(context.prompt, targetVars, context.filters, targetProvider, [this.config.injectVar]);
+		logger.debug(`[AuthoritativeMarkupInjection] Rendered attack prompt`, { prompt: renderedAttackerPrompt });
+		const totalTokenUsage = createEmptyTokenUsage();
+		throwIfTargetPromptExceedsMaxChars(renderedAttackerPrompt);
+		const targetResponse = await targetProvider.callApi(renderedAttackerPrompt, context, options);
+		accumulateResponseTokenUsage(totalTokenUsage, targetResponse);
+		logger.debug("[AuthoritativeMarkupInjection] Target response", { response: targetResponse });
+		if (targetResponse.error) return {
+			...targetResponse,
+			tokenUsage: totalTokenUsage
+		};
+		return {
+			...targetResponse,
+			prompt: renderedAttackerPrompt,
+			metadata: {
+				...targetResponse.metadata,
+				redteamFinalPrompt: renderedAttackerPrompt
+			},
+			tokenUsage: totalTokenUsage
+		};
+	}
+};
+//#endregion
+export { AuthoritativeMarkupInjectionProvider as default };
+
+//# sourceMappingURL=authoritativeMarkupInjection-BZIywVjG.js.map

package/dist/src/authoritativeMarkupInjection-DyAXAsSr.js

@@ -0,0 +1,75 @@
+#!/usr/bin/env node
+import { s as logger, x as safeJsonStringify } from "./logger-BbY6ypFL.js";
+import { n as fetchWithProxy } from "./fetch-DXUnXkVU.js";
+import { n as VERSION } from "./version-eRkNuGv8.js";
+import { t as invariant } from "./invariant-B2Rf6avk.js";
+import { o as getUserEmail } from "./accounts-CjFnOPmb.js";
+import { r as getRemoteGenerationUrl, s as neverGenerateRemote } from "./remoteGeneration-B1_XsKXU.js";
+import { a as createEmptyTokenUsage, n as accumulateResponseTokenUsage } from "./tokenUsageUtils-CDet74yk.js";
+import { i as throwIfTargetPromptExceedsMaxChars } from "./promptLength-4X-Wd8PG.js";
+import { n as renderPrompt } from "./evaluatorHelpers-BsYP_muT.js";
+//#region src/redteam/providers/authoritativeMarkupInjection.ts
+var AuthoritativeMarkupInjectionProvider = class {
+	config;
+	id() {
+		return "promptfoo:redteam:authoritative-markup-injection";
+	}
+	constructor(options = {}) {
+		if (neverGenerateRemote()) throw new Error(`Authoritative Markup Injection strategy requires remote grading to be enabled`);
+		invariant(typeof options.injectVar === "string", "Expected injectVar to be set");
+		this.config = { injectVar: options.injectVar };
+		logger.debug("[AuthoritativeMarkupInjection] Constructor options", { injectVar: options.injectVar });
+	}
+	async callApi(_prompt, context, options) {
+		logger.debug("[AuthoritativeMarkupInjection] callApi context", { context });
+		invariant(context?.originalProvider, "Expected originalProvider to be set");
+		invariant(context?.vars, "Expected vars to be set");
+		const targetProvider = context.originalProvider;
+		const originalText = context?.test?.metadata?.originalText || context?.vars[this.config.injectVar];
+		const body = JSON.stringify({
+			originalText,
+			i: 0,
+			prompt: context?.prompt?.raw,
+			task: "authoritative-markup-injection",
+			version: VERSION,
+			email: getUserEmail(),
+			purpose: context?.test?.metadata?.purpose
+		});
+		logger.debug(`[AuthoritativeMarkupInjection] Sending request to ${getRemoteGenerationUrl()}: ${body}`);
+		const data = await (await fetchWithProxy(getRemoteGenerationUrl(), {
+			body,
+			headers: { "Content-Type": "application/json" },
+			method: "POST"
+		}, options?.abortSignal)).json();
+		if (typeof data?.message !== "object" || !data.message?.content || !data.message?.role) throw new Error(`[AuthoritativeMarkupInjection] Invalid response from server: ${safeJsonStringify(data)}`);
+		const attackerMessage = data.message;
+		const targetVars = {
+			...context.vars,
+			[this.config.injectVar]: attackerMessage.content
+		};
+		const renderedAttackerPrompt = await renderPrompt(context.prompt, targetVars, context.filters, targetProvider, [this.config.injectVar]);
+		logger.debug(`[AuthoritativeMarkupInjection] Rendered attack prompt`, { prompt: renderedAttackerPrompt });
+		const totalTokenUsage = createEmptyTokenUsage();
+		throwIfTargetPromptExceedsMaxChars(renderedAttackerPrompt);
+		const targetResponse = await targetProvider.callApi(renderedAttackerPrompt, context, options);
+		accumulateResponseTokenUsage(totalTokenUsage, targetResponse);
+		logger.debug("[AuthoritativeMarkupInjection] Target response", { response: targetResponse });
+		if (targetResponse.error) return {
+			...targetResponse,
+			tokenUsage: totalTokenUsage
+		};
+		return {
+			...targetResponse,
+			prompt: renderedAttackerPrompt,
+			metadata: {
+				...targetResponse.metadata,
+				redteamFinalPrompt: renderedAttackerPrompt
+			},
+			tokenUsage: totalTokenUsage
+		};
+	}
+};
+//#endregion
+export { AuthoritativeMarkupInjectionProvider as default };
+
+//# sourceMappingURL=authoritativeMarkupInjection-DyAXAsSr.js.map

package/dist/src/authoritativeMarkupInjection-F2gBw0lN.cjs

@@ -0,0 +1,74 @@
+const require_logger = require("./logger-cfNpzI4o.cjs");
+const require_invariant = require("./invariant-QtnLD03y.cjs");
+const require_fetch = require("./fetch-Dw4XZHjj.cjs");
+const require_version = require("./version-BWCSaByA.cjs");
+const require_accounts = require("./accounts-CmWzeD2d.cjs");
+const require_remoteGeneration = require("./remoteGeneration-DS9N3pgB.cjs");
+const require_tokenUsageUtils = require("./tokenUsageUtils-_B-P8IAi.cjs");
+const require_promptLength = require("./promptLength-BbBbDHNj.cjs");
+const require_evaluatorHelpers = require("./evaluatorHelpers-CRqTvSux.cjs");
+//#region src/redteam/providers/authoritativeMarkupInjection.ts
+var AuthoritativeMarkupInjectionProvider = class {
+	config;
+	id() {
+		return "promptfoo:redteam:authoritative-markup-injection";
+	}
+	constructor(options = {}) {
+		if (require_remoteGeneration.neverGenerateRemote()) throw new Error(`Authoritative Markup Injection strategy requires remote grading to be enabled`);
+		require_invariant.invariant(typeof options.injectVar === "string", "Expected injectVar to be set");
+		this.config = { injectVar: options.injectVar };
+		require_logger.logger.debug("[AuthoritativeMarkupInjection] Constructor options", { injectVar: options.injectVar });
+	}
+	async callApi(_prompt, context, options) {
+		require_logger.logger.debug("[AuthoritativeMarkupInjection] callApi context", { context });
+		require_invariant.invariant(context?.originalProvider, "Expected originalProvider to be set");
+		require_invariant.invariant(context?.vars, "Expected vars to be set");
+		const targetProvider = context.originalProvider;
+		const originalText = context?.test?.metadata?.originalText || context?.vars[this.config.injectVar];
+		const body = JSON.stringify({
+			originalText,
+			i: 0,
+			prompt: context?.prompt?.raw,
+			task: "authoritative-markup-injection",
+			version: require_version.VERSION,
+			email: require_accounts.getUserEmail(),
+			purpose: context?.test?.metadata?.purpose
+		});
+		require_logger.logger.debug(`[AuthoritativeMarkupInjection] Sending request to ${require_remoteGeneration.getRemoteGenerationUrl()}: ${body}`);
+		const data = await (await require_fetch.fetchWithProxy(require_remoteGeneration.getRemoteGenerationUrl(), {
+			body,
+			headers: { "Content-Type": "application/json" },
+			method: "POST"
+		}, options?.abortSignal)).json();
+		if (typeof data?.message !== "object" || !data.message?.content || !data.message?.role) throw new Error(`[AuthoritativeMarkupInjection] Invalid response from server: ${require_logger.safeJsonStringify(data)}`);
+		const attackerMessage = data.message;
+		const targetVars = {
+			...context.vars,
+			[this.config.injectVar]: attackerMessage.content
+		};
+		const renderedAttackerPrompt = await require_evaluatorHelpers.renderPrompt(context.prompt, targetVars, context.filters, targetProvider, [this.config.injectVar]);
+		require_logger.logger.debug(`[AuthoritativeMarkupInjection] Rendered attack prompt`, { prompt: renderedAttackerPrompt });
+		const totalTokenUsage = require_tokenUsageUtils.createEmptyTokenUsage();
+		require_promptLength.throwIfTargetPromptExceedsMaxChars(renderedAttackerPrompt);
+		const targetResponse = await targetProvider.callApi(renderedAttackerPrompt, context, options);
+		require_tokenUsageUtils.accumulateResponseTokenUsage(totalTokenUsage, targetResponse);
+		require_logger.logger.debug("[AuthoritativeMarkupInjection] Target response", { response: targetResponse });
+		if (targetResponse.error) return {
+			...targetResponse,
+			tokenUsage: totalTokenUsage
+		};
+		return {
+			...targetResponse,
+			prompt: renderedAttackerPrompt,
+			metadata: {
+				...targetResponse.metadata,
+				redteamFinalPrompt: renderedAttackerPrompt
+			},
+			tokenUsage: totalTokenUsage
+		};
+	}
+};
+//#endregion
+exports.default = AuthoritativeMarkupInjectionProvider;
+
+//# sourceMappingURL=authoritativeMarkupInjection-F2gBw0lN.cjs.map

package/dist/src/authoritativeMarkupInjection-QEQmFS83.js

@@ -0,0 +1,74 @@
+import { a as logger, y as safeJsonStringify } from "./logger-Ct2S6Yx-.js";
+import { t as invariant } from "./invariant-Ddh24eXh.js";
+import { t as fetchWithProxy } from "./fetch-It34O8Ur.js";
+import { n as VERSION } from "./version-lpHV_53E.js";
+import { i as getUserEmail } from "./accounts-Ca7WIoPY.js";
+import { r as getRemoteGenerationUrl, s as neverGenerateRemote } from "./remoteGeneration-DsaSwmG2.js";
+import { a as createEmptyTokenUsage, n as accumulateResponseTokenUsage } from "./tokenUsageUtils-CmnQ0G2m.js";
+import { i as throwIfTargetPromptExceedsMaxChars } from "./promptLength-B9nZEfO6.js";
+import { n as renderPrompt } from "./evaluatorHelpers-DuqFFfq7.js";
+//#region src/redteam/providers/authoritativeMarkupInjection.ts
+var AuthoritativeMarkupInjectionProvider = class {
+	config;
+	id() {
+		return "promptfoo:redteam:authoritative-markup-injection";
+	}
+	constructor(options = {}) {
+		if (neverGenerateRemote()) throw new Error(`Authoritative Markup Injection strategy requires remote grading to be enabled`);
+		invariant(typeof options.injectVar === "string", "Expected injectVar to be set");
+		this.config = { injectVar: options.injectVar };
+		logger.debug("[AuthoritativeMarkupInjection] Constructor options", { injectVar: options.injectVar });
+	}
+	async callApi(_prompt, context, options) {
+		logger.debug("[AuthoritativeMarkupInjection] callApi context", { context });
+		invariant(context?.originalProvider, "Expected originalProvider to be set");
+		invariant(context?.vars, "Expected vars to be set");
+		const targetProvider = context.originalProvider;
+		const originalText = context?.test?.metadata?.originalText || context?.vars[this.config.injectVar];
+		const body = JSON.stringify({
+			originalText,
+			i: 0,
+			prompt: context?.prompt?.raw,
+			task: "authoritative-markup-injection",
+			version: VERSION,
+			email: getUserEmail(),
+			purpose: context?.test?.metadata?.purpose
+		});
+		logger.debug(`[AuthoritativeMarkupInjection] Sending request to ${getRemoteGenerationUrl()}: ${body}`);
+		const data = await (await fetchWithProxy(getRemoteGenerationUrl(), {
+			body,
+			headers: { "Content-Type": "application/json" },
+			method: "POST"
+		}, options?.abortSignal)).json();
+		if (typeof data?.message !== "object" || !data.message?.content || !data.message?.role) throw new Error(`[AuthoritativeMarkupInjection] Invalid response from server: ${safeJsonStringify(data)}`);
+		const attackerMessage = data.message;
+		const targetVars = {
+			...context.vars,
+			[this.config.injectVar]: attackerMessage.content
+		};
+		const renderedAttackerPrompt = await renderPrompt(context.prompt, targetVars, context.filters, targetProvider, [this.config.injectVar]);
+		logger.debug(`[AuthoritativeMarkupInjection] Rendered attack prompt`, { prompt: renderedAttackerPrompt });
+		const totalTokenUsage = createEmptyTokenUsage();
+		throwIfTargetPromptExceedsMaxChars(renderedAttackerPrompt);
+		const targetResponse = await targetProvider.callApi(renderedAttackerPrompt, context, options);
+		accumulateResponseTokenUsage(totalTokenUsage, targetResponse);
+		logger.debug("[AuthoritativeMarkupInjection] Target response", { response: targetResponse });
+		if (targetResponse.error) return {
+			...targetResponse,
+			tokenUsage: totalTokenUsage
+		};
+		return {
+			...targetResponse,
+			prompt: renderedAttackerPrompt,
+			metadata: {
+				...targetResponse.metadata,
+				redteamFinalPrompt: renderedAttackerPrompt
+			},
+			tokenUsage: totalTokenUsage
+		};
+	}
+};
+//#endregion
+export { AuthoritativeMarkupInjectionProvider as default };
+
+//# sourceMappingURL=authoritativeMarkupInjection-QEQmFS83.js.map

package/dist/src/{base-PYJvBE1i.js → base-CKLo890h.js}

@@ -1,5 +1,5 @@
 import { T as getEnvString, a as logger, w as getEnvInt } from "./logger-Ct2S6Yx-.js";
-import { t as telemetry } from "./telemetry-Dvqxv3YC.js";
+import { t as telemetry } from "./telemetry-DwX9XUN5.js";
 //#region src/providers/bedrock/util.ts
 const REQUEST_TIMEOUT_MS = 3e5;
 function hasProxyEnv() {
@@ -168,7 +168,7 @@ var AwsBedrockGenericProvider = class {
 			try {
 				const { BedrockRuntime } = await import("@aws-sdk/client-bedrock-runtime");
 				const credentials = await this.getCredentials();
-				this.bedrock = new BedrockRuntime({
+				const bedrock = new BedrockRuntime({
 					region: this.getRegion(),
 					maxAttempts: getEnvInt("AWS_BEDROCK_MAX_RETRIES", 10),
 					retryMode: "adaptive",
@@ -176,6 +176,7 @@ var AwsBedrockGenericProvider = class {
 					...credentials ? { credentials } : {},
 					...this.config.endpoint ? { endpoint: this.config.endpoint } : {}
 				});
+				this.bedrock = bedrock;
 			} catch (err) {
 				logger.error(`Error creating BedrockRuntime: ${err}`);
 				throw new Error("The @aws-sdk/client-bedrock-runtime package is required as a peer dependency. Please install it in your project or globally.");
@@ -190,4 +191,4 @@ var AwsBedrockGenericProvider = class {
 //#endregion
 export { novaParseMessages as a, novaOutputFromMessage as i, createBedrockRequestHandler as n, hasProxyEnv as r, AwsBedrockGenericProvider as t };
 
-//# sourceMappingURL=base-PYJvBE1i.js.map
+//# sourceMappingURL=base-CKLo890h.js.map

package/dist/src/{base-fZ9wgg50.js → base-Co80MMCi.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { D as getEnvInt, O as getEnvString, s as logger } from "./logger-DksKw1Qc.js";
-import { r as telemetry } from "./telemetry-CQPez_Jp.js";
+import { D as getEnvInt, O as getEnvString, s as logger } from "./logger-BbY6ypFL.js";
+import { r as telemetry } from "./telemetry-00ezXr_t.js";
 //#region src/providers/bedrock/util.ts
 const REQUEST_TIMEOUT_MS = 3e5;
 function hasProxyEnv() {
@@ -169,7 +169,7 @@ var AwsBedrockGenericProvider = class {
 			try {
 				const { BedrockRuntime } = await import("@aws-sdk/client-bedrock-runtime");
 				const credentials = await this.getCredentials();
-				this.bedrock = new BedrockRuntime({
+				const bedrock = new BedrockRuntime({
 					region: this.getRegion(),
 					maxAttempts: getEnvInt("AWS_BEDROCK_MAX_RETRIES", 10),
 					retryMode: "adaptive",
@@ -177,6 +177,7 @@ var AwsBedrockGenericProvider = class {
 					...credentials ? { credentials } : {},
 					...this.config.endpoint ? { endpoint: this.config.endpoint } : {}
 				});
+				this.bedrock = bedrock;
 			} catch (err) {
 				logger.error(`Error creating BedrockRuntime: ${err}`);
 				throw new Error("The @aws-sdk/client-bedrock-runtime package is required as a peer dependency. Please install it in your project or globally.");
@@ -191,4 +192,4 @@ var AwsBedrockGenericProvider = class {
 //#endregion
 export { novaParseMessages as a, novaOutputFromMessage as i, createBedrockRequestHandler as n, hasProxyEnv as r, AwsBedrockGenericProvider as t };
 
-//# sourceMappingURL=base-fZ9wgg50.js.map
+//# sourceMappingURL=base-Co80MMCi.js.map

package/dist/src/{base-D-670DX8.cjs → base-DGJW48uz.cjs}

@@ -1,5 +1,5 @@
-const require_logger = require("./logger-COuQb2xB.cjs");
-const require_telemetry = require("./telemetry-Dsw_faFj.cjs");
+const require_logger = require("./logger-cfNpzI4o.cjs");
+const require_telemetry = require("./telemetry-CJ7FnCsc.cjs");
 //#region src/providers/bedrock/util.ts
 const REQUEST_TIMEOUT_MS = 3e5;
 function hasProxyEnv() {
@@ -168,7 +168,7 @@ var AwsBedrockGenericProvider = class {
 			try {
 				const { BedrockRuntime } = await import("@aws-sdk/client-bedrock-runtime");
 				const credentials = await this.getCredentials();
-				this.bedrock = new BedrockRuntime({
+				const bedrock = new BedrockRuntime({
 					region: this.getRegion(),
 					maxAttempts: require_logger.getEnvInt("AWS_BEDROCK_MAX_RETRIES", 10),
 					retryMode: "adaptive",
@@ -176,6 +176,7 @@ var AwsBedrockGenericProvider = class {
 					...credentials ? { credentials } : {},
 					...this.config.endpoint ? { endpoint: this.config.endpoint } : {}
 				});
+				this.bedrock = bedrock;
 			} catch (err) {
 				require_logger.logger.error(`Error creating BedrockRuntime: ${err}`);
 				throw new Error("The @aws-sdk/client-bedrock-runtime package is required as a peer dependency. Please install it in your project or globally.");
@@ -219,4 +220,4 @@ Object.defineProperty(exports, "novaParseMessages", {
 	}
 });
 
-//# sourceMappingURL=base-D-670DX8.cjs.map
+//# sourceMappingURL=base-DGJW48uz.cjs.map

package/dist/src/{base-yrI1Yal4.js → base-E9I8zXjz.js}

@@ -1,5 +1,5 @@
-import { T as getEnvString, a as logger, w as getEnvInt } from "./logger-B88EkIn6.js";
-import { n as telemetry } from "./telemetry-dbaJ0E98.js";
+import { T as getEnvString, a as logger, w as getEnvInt } from "./logger-KD8JjCRJ.js";
+import { n as telemetry } from "./telemetry-DmXYcJNV.js";
 //#region src/providers/bedrock/util.ts
 const REQUEST_TIMEOUT_MS = 3e5;
 function hasProxyEnv() {
@@ -168,7 +168,7 @@ var AwsBedrockGenericProvider = class {
 			try {
 				const { BedrockRuntime } = await import("@aws-sdk/client-bedrock-runtime");
 				const credentials = await this.getCredentials();
-				this.bedrock = new BedrockRuntime({
+				const bedrock = new BedrockRuntime({
 					region: this.getRegion(),
 					maxAttempts: getEnvInt("AWS_BEDROCK_MAX_RETRIES", 10),
 					retryMode: "adaptive",
@@ -176,6 +176,7 @@ var AwsBedrockGenericProvider = class {
 					...credentials ? { credentials } : {},
 					...this.config.endpoint ? { endpoint: this.config.endpoint } : {}
 				});
+				this.bedrock = bedrock;
 			} catch (err) {
 				logger.error(`Error creating BedrockRuntime: ${err}`);
 				throw new Error("The @aws-sdk/client-bedrock-runtime package is required as a peer dependency. Please install it in your project or globally.");
@@ -190,4 +191,4 @@ var AwsBedrockGenericProvider = class {
 //#endregion
 export { novaParseMessages as a, novaOutputFromMessage as i, createBedrockRequestHandler as n, hasProxyEnv as r, AwsBedrockGenericProvider as t };
 
-//# sourceMappingURL=base-yrI1Yal4.js.map
+//# sourceMappingURL=base-E9I8zXjz.js.map