promptfoo 0.121.4 → 0.121.5

package/dist/src/{providers-Domz_llv.js → providers-DRrerKra.js}

@@ -1,38 +1,39 @@
-import { C as getEnvFloat, S as getEnvBool, T as getEnvString, _ as isValidJson, a as logger, c as REDACTED, f as sanitizeObject, k as state, l as isSecretField, m as extractFirstJsonObject, p as sanitizeUrl, u as looksLikeSecret, w as getEnvInt, x as getConfigDirectoryPath, y as safeJsonStringify } from "./logger-B88EkIn6.js";
-import { C as toTitleCase, E as CLOUD_PROVIDER_PREFIX, I as VERSION, S as parseChatPrompt, T as transformTools, _ as isOpenAIToolArray, b as openaiToolChoiceToBedrock, d as sleep, f as parseRateLimitHeaders, g as calculateCost, h as REQUEST_TIMEOUT_MS$1, m as LONG_RUNNING_MODEL_TIMEOUT_MS, n as fetchWithRetries, o as cloudConfig, p as parseRetryAfter, r as fetchWithTimeout, t as fetchWithProxy, v as isOpenAIToolChoice, w as transformToolChoice, x as openaiToolsToBedrock } from "./fetch-B0Z3Oe4k.js";
-import { t as invariant } from "./invariant-vgHWClmd.js";
-import { c as isLoggedIntoCloud, o as getUserEmail } from "./accounts-DdJ2pHMI.js";
-import { a as safeJoin, i as resolvePackageEntryPoint, n as getWrapperDir, o as safeResolve, r as importModule } from "./esm-Dh4dOLlt.js";
-import { n as withGenAISpan } from "./genaiTracer-COYDi-tC.js";
-import { a as getNunjucksEngine, i as extractVariablesFromTemplates, n as renderVarsInObject, r as extractVariablesFromTemplate, t as renderEnvOnlyInObject } from "./render-DHIZ6_k8.js";
-import { t as providerRegistry } from "./providerRegistry-CPQ_CmVO.js";
-import { c as getRemoteGenerationUrl, d as neverGenerateRemote, f as neverGenerateRemoteForRegularEvals, l as getRemoteGenerationUrlForUnaligned, p as shouldGenerateRemote, r as checkServerFeatureSupport } from "./server-BSB45Nt9.js";
-import { a as evalResultsTable, h as getDb } from "./tables-CsWou1Bx.js";
-import { D as DATASET_PLUGINS, N as isCustomStrategy, R as pluginDescriptions, T as AGENTIC_STRATEGIES, g as ProviderOptionsSchema, k as MULTI_TURN_STRATEGIES, m as isProviderOptions, p as isApiProvider, st as STRATEGY_EXEMPT_PLUGINS, w as isUuid } from "./types-Bgh5SOn6.js";
-import { a as isVideoFile, i as isJavascriptFile, n as isAudioFile, r as isImageFile } from "./fileExtensions-BArZuxsI.js";
-import { n as sha256 } from "./createHash-CwDVU5xr.js";
-import { t as getTraceStore } from "./store-Dn9HUkdW.js";
-import { a as isCacheEnabled, i as getCache, l as isTransientConnectionError, r as fetchWithCache } from "./cache-C4Xb-hNb.js";
-import { a as createEmptyTokenUsage, n as accumulateResponseTokenUsage, r as accumulateTokenUsage } from "./tokenUsageUtils-C-bmyHoE.js";
-import { i as storeBlob } from "./blobs-BCZavS8s.js";
-import { n as isBlobStorageEnabled, r as shouldAttemptRemoteBlobUpload, t as extractAndStoreBinaryData } from "./extractor-CAfTSraf.js";
-import { n as telemetry } from "./telemetry-dbaJ0E98.js";
-import { i as validatePythonPath, n as getEnvInt$1, r as runPython, t as getConfiguredPythonPath } from "./pythonUtils-Cldx7huE.js";
-import { C as getResolvedRelativePath, D as maybeLoadResponseFormatFromExternalFile, E as maybeLoadFromExternalFileWithVars, M as loadFunction, N as parseFileUrl, O as maybeLoadToolsFromExternalFile, T as maybeLoadFromExternalFile, k as parsePathOrGlob, w as maybeLoadConfigFromExternalFile } from "./util-C8e5uydV.js";
-import { i as normalizeFinishReason, n as MCPClient, r as FINISH_REASON_MAP, t as OpenAiChatCompletionProvider } from "./chat-BfPaS15_.js";
-import { C as resolveProjectId, S as loadCredentials, T as toDataUri, _ as GoogleAuthManager, a as calculateGoogleCost, b as getGoogleClient, c as geminiFormatAndSystemInstructions, d as mergeParts, f as normalizeSafetySettings, g as CHAT_MODELS, i as transformMCPToolsToOpenAi, j as TOKEN_REFRESH_BUFFER_MS, l as getCandidate, m as parseConfigSystemInstruction, o as createAuthCacheDiscriminator, p as normalizeTools, r as transformMCPToolsToGoogle, s as formatCandidateContents, u as getGoogleAccessToken, v as determineGoogleVertexMode, y as getGoogleApiKey } from "./transform-lQrDE1BQ.js";
-import { n as AnthropicGenericProvider, t as AnthropicMessagesProvider } from "./messages-MYTQ2TWp.js";
-import { a as outputFromMessage, i as getTokenUsage$2, n as calculateAnthropicCost, o as parseMessages, t as ANTHROPIC_MODELS } from "./util-BYvQUPp7.js";
-import { n as ResponsesProcessor, r as FunctionCallbackHandler, t as OpenAiResponsesProvider } from "./responses-C-flexAY.js";
-import { t as OpenAiGenericProvider } from "./openai-DhVEmgeZ.js";
-import { a as calculateOpenAICost, c as getTokenUsage$3, o as failApiCall, r as OPENAI_REALTIME_MODELS, s as formatOpenAiError } from "./util-D3q0WQ-0.js";
-import { t as OpenAiEmbeddingProvider } from "./embedding-DD9wa3ae.js";
-import { i as getProcessShim, n as transform, t as TransformInputType } from "./transform-DYX1_Xnh.js";
-import { n as escapeRegExp, t as ellipsize } from "./text-CZr46tp_.js";
-import { a as novaParseMessages, i as novaOutputFromMessage, t as AwsBedrockGenericProvider } from "./base-yrI1Yal4.js";
-import { i as formatOutput, n as buildStructuredImageOutputs, r as callOpenAiImageApi, t as OpenAiImageProvider } from "./image-B5Mv-Z3h.js";
-import { t as OpenAiCompletionProvider } from "./completion-HUe8wDhZ.js";
-import { n as runRuby } from "./rubyUtils-CYSQEG4a.js";
+import { C as getEnvFloat, S as getEnvBool, T as getEnvString, _ as isValidJson, a as logger, c as REDACTED, f as sanitizeObject, k as state, l as isSecretField, m as extractFirstJsonObject, p as sanitizeUrl, u as looksLikeSecret, w as getEnvInt, x as getConfigDirectoryPath, y as safeJsonStringify } from "./logger-KD8JjCRJ.js";
+import { C as toTitleCase, E as CLOUD_PROVIDER_PREFIX, S as parseChatPrompt, T as transformTools, _ as isOpenAIToolArray, b as openaiToolChoiceToBedrock, d as sleep, f as parseRateLimitHeaders, g as calculateCost, h as REQUEST_TIMEOUT_MS$1, m as LONG_RUNNING_MODEL_TIMEOUT_MS, n as fetchWithRetries, o as cloudConfig, p as parseRetryAfter, r as fetchWithTimeout, t as fetchWithProxy, v as isOpenAIToolChoice, w as transformToolChoice, x as openaiToolsToBedrock } from "./fetch-Y5qX_kST.js";
+import { n as VERSION } from "./version-0frU0UTr.js";
+import { t as invariant } from "./invariant-DIYf9sP1.js";
+import { c as isLoggedIntoCloud, o as getUserEmail } from "./accounts-bnyHT7Ju.js";
+import { a as safeJoin, i as resolvePackageEntryPoint, n as getWrapperDir, o as safeResolve, r as importModule } from "./esm-B6whoAcf.js";
+import { n as withGenAISpan } from "./genaiTracer-DxODqT9e.js";
+import { a as getNunjucksEngine, i as extractVariablesFromTemplates, n as renderVarsInObject, r as extractVariablesFromTemplate, t as renderEnvOnlyInObject } from "./render-7uNJ2V14.js";
+import { t as providerRegistry } from "./providerRegistry-1gB5vtzQ.js";
+import { c as getRemoteGenerationUrl, d as neverGenerateRemote, f as neverGenerateRemoteForRegularEvals, l as getRemoteGenerationUrlForUnaligned, p as shouldGenerateRemote, r as checkServerFeatureSupport } from "./server-ByxbqAcQ.js";
+import { a as evalResultsTable, h as getDb } from "./tables-BMSOS2Gg.js";
+import { D as DATASET_PLUGINS, N as isCustomStrategy, R as pluginDescriptions, T as AGENTIC_STRATEGIES, g as ProviderOptionsSchema, k as MULTI_TURN_STRATEGIES, m as isProviderOptions, p as isApiProvider, st as STRATEGY_EXEMPT_PLUGINS, w as isUuid } from "./types-BDjGOq4E.js";
+import { a as isVideoFile, i as isJavascriptFile, n as isAudioFile, r as isImageFile } from "./fileExtensions-BGh-W-HT.js";
+import { n as sha256 } from "./createHash-4gFQpDDv.js";
+import { t as getTraceStore } from "./store-2OXm_eBY.js";
+import { a as isCacheEnabled, i as getCache, l as isTransientConnectionError, r as fetchWithCache } from "./cache-Cr-qWIbP.js";
+import { a as createEmptyTokenUsage, n as accumulateResponseTokenUsage, r as accumulateTokenUsage } from "./tokenUsageUtils-BjVkdk18.js";
+import { i as storeBlob } from "./blobs-D_gg8nbm.js";
+import { n as isBlobStorageEnabled, r as shouldAttemptRemoteBlobUpload, t as extractAndStoreBinaryData } from "./extractor-YlZbUMsL.js";
+import { n as telemetry } from "./telemetry--iqaGyaS.js";
+import { i as validatePythonPath, n as getEnvInt$1, r as runPython, t as getConfiguredPythonPath } from "./pythonUtils-C4tltmIn.js";
+import { A as maybeLoadFromExternalFileWithVars, C as loadProviderConfigsFromFile, D as getResolvedRelativePath, I as loadFunction, L as parseFileUrl, M as maybeLoadToolsFromExternalFile, N as parsePathOrGlob, O as maybeLoadConfigFromExternalFile, S as isProviderConfigFileReference, T as readProviderConfigFile, j as maybeLoadResponseFormatFromExternalFile, k as maybeLoadFromExternalFile, w as normalizeProviderRef } from "./util-3pBZZb_H.js";
+import { i as normalizeFinishReason, n as MCPClient, r as FINISH_REASON_MAP, t as OpenAiChatCompletionProvider } from "./chat-DChSH_Es.js";
+import { C as resolveProjectId, S as loadCredentials, T as toDataUri, _ as GoogleAuthManager, a as calculateGoogleCost, b as getGoogleClient, c as geminiFormatAndSystemInstructions, d as mergeParts, f as normalizeSafetySettings, g as CHAT_MODELS, i as transformMCPToolsToOpenAi, j as TOKEN_REFRESH_BUFFER_MS, l as getCandidate, m as parseConfigSystemInstruction, o as createAuthCacheDiscriminator, p as normalizeTools, r as transformMCPToolsToGoogle, s as formatCandidateContents, u as getGoogleAccessToken, v as determineGoogleVertexMode, y as getGoogleApiKey } from "./transform-DtooZqYY.js";
+import { n as AnthropicGenericProvider, t as AnthropicMessagesProvider } from "./messages-CewuNcNS.js";
+import { a as outputFromMessage, i as getTokenUsage$2, n as calculateAnthropicCost, o as parseMessages, t as ANTHROPIC_MODELS } from "./util-DFPeFkiV.js";
+import { n as ResponsesProcessor, r as FunctionCallbackHandler, t as OpenAiResponsesProvider } from "./responses-1ztiVYsx.js";
+import { t as OpenAiGenericProvider } from "./openai-BMHD2Huo.js";
+import { a as calculateOpenAICost, c as getTokenUsage$3, o as failApiCall, r as OPENAI_REALTIME_MODELS, s as formatOpenAiError } from "./util-B9CNhyac.js";
+import { t as OpenAiEmbeddingProvider } from "./embedding-D_bI4NDq.js";
+import { i as getProcessShim, n as transform, t as TransformInputType } from "./transform-CwbAZ84V.js";
+import { n as escapeRegExp, t as ellipsize } from "./text-NWvfMfkF.js";
+import { a as novaParseMessages, i as novaOutputFromMessage, t as AwsBedrockGenericProvider } from "./base-dYsl2hmL.js";
+import { i as formatOutput, n as buildStructuredImageOutputs, r as callOpenAiImageApi, t as OpenAiImageProvider } from "./image-DsGRlkh7.js";
+import { t as OpenAiCompletionProvider } from "./completion-Vq_ad618.js";
+import { n as runRuby } from "./rubyUtils-DGnoCYL2.js";
 import * as fs$2 from "fs";
 import fs, { promises } from "fs";
 import * as path$1 from "path";
@@ -2811,7 +2812,7 @@ var AIStudioChatProvider = class extends GoogleGenericProvider {
 				headers,
 				body: JSON.stringify(body),
 				...authDiscriminator && { _authHash: authDiscriminator }
-			}, REQUEST_TIMEOUT_MS$1, "json", context?.bustCache ?? context?.debug));
+			}, REQUEST_TIMEOUT_MS$1, "json", shouldBustCache(context)));
 		} catch (err) {
 			return { error: `API call error: ${String(err)}` };
 		}
@@ -5269,8 +5270,6 @@ var TokenUsageTracker = class TokenUsageTracker {
 const ATTACKER_MODEL = "gpt-5.4-2026-03-05";
 const ATTACKER_MODEL_SMALL = "gpt-5.4-mini-2026-03-17";
 const TEMPERATURE = getEnvFloat("PROMPTFOO_JAILBREAK_TEMPERATURE") ? getEnvFloat("PROMPTFOO_JAILBREAK_TEMPERATURE") : .7;
-//#endregion
-//#region src/redteam/providers/shared.ts
 async function loadRedteamProvider({ provider, jsonOnly = false, preferSmallModel = false, purpose = "redteam" } = {}) {
 	let ret;
 	const redteamProvider = provider || state.config?.redteam?.provider;
@@ -5279,7 +5278,7 @@ async function loadRedteamProvider({ provider, jsonOnly = false, preferSmallMode
 		ret = redteamProvider;
 	} else if (typeof redteamProvider === "string" || isProviderOptions(redteamProvider)) {
 		logger.debug(`Loading ${purpose} provider`, { provider: redteamProvider });
-		ret = (await (await import("./providers-Bp4S-FvO.js")).loadApiProviders([redteamProvider]))[0];
+		ret = (await (await import("./providers-BuyzKt7C.js")).loadApiProviders([redteamProvider]))[0];
 	} else {
 		const defaultModel = preferSmallModel ? ATTACKER_MODEL_SMALL : ATTACKER_MODEL;
 		logger.debug(`Using default ${purpose} provider: ${defaultModel}`);
@@ -5583,7 +5582,7 @@ async function tryUnblocking({ messages, lastResponse, goal, purpose }) {
 			logger.debug("[Unblocking] Disabled by default (set PROMPTFOO_ENABLE_UNBLOCKING=true to enable)");
 			return { success: false };
 		}
-		const { checkServerFeatureSupport } = await import("./server-BSB45Nt9.js").then((n) => n.o);
+		const { checkServerFeatureSupport } = await import("./server-ByxbqAcQ.js").then((n) => n.o);
 		if (!await checkServerFeatureSupport("blocking-question-analysis", "2025-06-16T14:49:11-07:00")) {
 			logger.debug("[Unblocking] Server does not support unblocking, skipping gracefully");
 			return { success: false };
@@ -5633,6 +5632,9 @@ async function tryUnblocking({ messages, lastResponse, goal, purpose }) {
 		return { success: false };
 	}
 }
+function isSingleAssertion(assertToUse) {
+	return Boolean(assertToUse && assertToUse.type !== "assert-set");
+}
 /**
 * Builds the assertion object for storedGraderResult with the rubric value.
 * This ensures the grading template is preserved for display in the UI.
@@ -5642,11 +5644,15 @@ function buildGraderResultAssertion(gradeAssertion, assertToUse, rubric) {
 		...gradeAssertion,
 		value: rubric
 	};
-	if (assertToUse && "type" in assertToUse && assertToUse.type !== "assert-set") return {
+	if (isSingleAssertion(assertToUse)) return {
 		...assertToUse,
 		value: rubric
 	};
 }
+function getGraderAssertionValue(assertToUse) {
+	if (!isSingleAssertion(assertToUse)) return;
+	return assertToUse.value;
+}
 //#endregion
 //#region src/redteam/providers/agentic/memoryPoisoning.ts
 var MemoryPoisoningProvider = class {
@@ -10658,7 +10664,7 @@ var CrescendoProvider = class {
 		});
 		let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 		if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
-		const { getGraderById } = await import("./graders-DOJK1XpV.js");
+		const { getGraderById } = await import("./graders-DS42d3ZG.js");
 		let graderPassed;
 		const additionalRubric = getGoalRubric(this.userGoal);
 		while (roundNum < this.maxTurns) try {
@@ -10809,7 +10815,7 @@ var CrescendoProvider = class {
 						conversationHistory: conversationHistoryForGrading,
 						conversationTranscript: formatRedteamHistoryAsTranscript(conversationHistoryForGrading)
 					};
-					const { grade, rubric } = await grader.getResult(attackPrompt, lastResponse.output, test, provider, "value" in assertToUse ? assertToUse.value : void 0, additionalRubric, void 0, gradingContext);
+					const { grade, rubric } = await grader.getResult(attackPrompt, lastResponse.output, test, provider, getGraderAssertionValue(assertToUse), additionalRubric, void 0, gradingContext);
 					graderPassed = grade.pass;
 					storedGraderResult = {
 						...grade,
@@ -11353,7 +11359,7 @@ var CustomProvider = class {
 		let lastTransformResult;
 		let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 		if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
-		const { getGraderById } = await import("./graders-DOJK1XpV.js");
+		const { getGraderById } = await import("./graders-DS42d3ZG.js");
 		let graderPassed;
 		let storedGraderResult;
 		const additionalRubric = getGoalRubric(this.userGoal);
@@ -11469,7 +11475,7 @@ var CustomProvider = class {
 			if (test && assertToUse) {
 				const grader = getGraderById(assertToUse.type);
 				if (grader) {
-					const { grade, rubric } = await grader.getResult(attackPrompt, lastResponse.output, test, provider, "value" in assertToUse ? assertToUse.value : void 0, additionalRubric);
+					const { grade, rubric } = await grader.getResult(attackPrompt, lastResponse.output, test, provider, getGraderAssertionValue(assertToUse), additionalRubric);
 					graderPassed = grade.pass;
 					storedGraderResult = {
 						...grade,
@@ -11854,7 +11860,7 @@ var GoatProvider = class {
 		let assertToUse;
 		let graderPassed;
 		let storedGraderResult;
-		const { getGraderById } = await import("./graders-DOJK1XpV.js");
+		const { getGraderById } = await import("./graders-DS42d3ZG.js");
 		let test;
 		if (context?.test) {
 			test = context?.test;
@@ -12173,7 +12179,7 @@ var GoatProvider = class {
 					traceContext: targetResponse.traceContext,
 					traceSummary: gradingTraceSummary
 				};
-				const { grade, rubric } = await grader.getResult(attackerMessage.content, finalOutput, test, targetProvider, "value" in assertToUse ? assertToUse.value : void 0, additionalRubric, void 0, gradingContext);
+				const { grade, rubric } = await grader.getResult(attackerMessage.content, finalOutput, test, targetProvider, getGraderAssertionValue(assertToUse), additionalRubric, void 0, gradingContext);
 				graderPassed = grade.pass;
 				storedGraderResult = {
 					...grade,
@@ -12322,7 +12328,7 @@ var HydraProvider = class {
 		let lastTransformResult;
 		let lastTransformDisplayVars;
 		let lastFinalAttackPrompt;
-		const { getGraderById } = await import("./graders-DOJK1XpV.js");
+		const { getGraderById } = await import("./graders-DS42d3ZG.js");
 		let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 		if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
 		let previousTraceSummary;
@@ -12635,7 +12641,7 @@ var HydraProvider = class {
 							exfilRecords: []
 						});
 					}
-					const { grade, rubric } = await grader.getResult(nextMessage, targetResponse.output, test, targetProvider, "value" in assertToUse ? assertToUse.value : void 0, void 0, void 0, gradingContext);
+					const { grade, rubric } = await grader.getResult(nextMessage, targetResponse.output, test, targetProvider, getGraderAssertionValue(assertToUse), void 0, void 0, gradingContext);
 					graderResult = grade;
 					storedGraderResult = {
 						...grade,
@@ -13170,7 +13176,7 @@ async function runRedteamConversation$2({ context, filters, injectVar, numIterat
 		if (sessionId) sessionIds.push(sessionId);
 		let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 		if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
-		const { getGraderById } = await import("./graders-DOJK1XpV.js");
+		const { getGraderById } = await import("./graders-DS42d3ZG.js");
 		if (test && assertToUse) {
 			const grader = getGraderById(assertToUse.type);
 			if (grader) {
@@ -13223,7 +13229,7 @@ async function runRedteamConversation$2({ context, filters, injectVar, numIterat
 					traceContext,
 					traceSummary: graderTraceSummary
 				};
-				const { grade, rubric } = await grader.getResult(newInjectVar, targetResponse.output, iterationTest, gradingProvider, "value" in assertToUse ? assertToUse.value : void 0, additionalRubric, void 0, gradingContext);
+				const { grade, rubric } = await grader.getResult(newInjectVar, targetResponse.output, iterationTest, gradingProvider, getGraderAssertionValue(assertToUse), additionalRubric, void 0, gradingContext);
 				storedGraderResult = {
 					...grade,
 					assertion: buildGraderResultAssertion(grade.assertion, assertToUse, rubric)
@@ -13997,7 +14003,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 		previousTraceSummary = attackTraceSummary;
 		let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 		if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
-		const { getGraderById } = await import("./graders-DOJK1XpV.js");
+		const { getGraderById } = await import("./graders-DS42d3ZG.js");
 		if (test && assertToUse) {
 			const grader = getGraderById(assertToUse.type);
 			if (grader) {
@@ -14043,7 +14049,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 						exfilRecords: []
 					});
 				}
-				const { grade, rubric } = await grader.getResult(attackPrompt, targetResponse.output, iterationTest, gradingProvider, "value" in assertToUse ? assertToUse.value : void 0, additionalRubric, void 0, gradingContext);
+				const { grade, rubric } = await grader.getResult(attackPrompt, targetResponse.output, iterationTest, gradingProvider, getGraderAssertionValue(assertToUse), additionalRubric, void 0, gradingContext);
 				graderResult = {
 					...grade,
 					assertion: buildGraderResultAssertion(grade.assertion, assertToUse, rubric)
@@ -14567,7 +14573,7 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 					noImprovementCount++;
 					if (noImprovementCount % 5 === 0) logger.debug(`[Depth ${depth}, Attempt ${attempts}] No improvement for ${noImprovementCount} consecutive iterations. Max score: ${maxScore}`);
 				}
-				const { getGraderById } = await import("./graders-DOJK1XpV.js");
+				const { getGraderById } = await import("./graders-DS42d3ZG.js");
 				let graderPassed;
 				let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 				if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
@@ -14610,7 +14616,7 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 								exfilRecords: []
 							};
 						}
-						const { grade, rubric } = await grader.getResult(newInjectVar, targetResponse.output, iterationTest, gradingProvider, "value" in assertToUse ? assertToUse.value : void 0, additionalRubric, void 0, gradingContext);
+						const { grade, rubric } = await grader.getResult(newInjectVar, targetResponse.output, iterationTest, gradingProvider, getGraderAssertionValue(assertToUse), additionalRubric, void 0, gradingContext);
 						storedGraderResult = {
 							...grade,
 							assertion: buildGraderResultAssertion(grade.assertion, assertToUse, rubric)
@@ -15155,6 +15161,59 @@ var RedteamMischievousUserProvider = class extends SimulatedUser {
 	}
 };
 //#endregion
+//#region src/providers/abliteration.ts
+const ABLITERATION_API_BASE_URL = "https://api.abliteration.ai/v1";
+const ABLITERATION_API_BASE_URL_ENV_VAR = "ABLIT_API_BASE_URL";
+function normalizeApiBaseUrl(apiBaseUrl) {
+	const trimmedApiBaseUrl = apiBaseUrl?.trim();
+	return trimmedApiBaseUrl ? trimmedApiBaseUrl : void 0;
+}
+var AbliterationProvider = class extends OpenAiChatCompletionProvider {
+	constructor(modelName, providerOptions = {}) {
+		super(modelName, {
+			...providerOptions,
+			config: {
+				...providerOptions.config,
+				apiBaseUrl: normalizeApiBaseUrl(providerOptions.config?.apiBaseUrl) ?? normalizeApiBaseUrl(providerOptions.env?.ABLIT_API_BASE_URL) ?? normalizeApiBaseUrl(getEnvString(ABLITERATION_API_BASE_URL_ENV_VAR)) ?? ABLITERATION_API_BASE_URL,
+				apiKeyEnvar: providerOptions.config?.apiKeyEnvar ?? "ABLIT_KEY",
+				showThinking: providerOptions.config?.showThinking ?? false
+			}
+		});
+	}
+	getApiKey() {
+		const apiKeyEnvar = this.config.apiKeyEnvar;
+		return this.config.apiKey || (apiKeyEnvar ? this.env?.[apiKeyEnvar] || getEnvString(apiKeyEnvar) : void 0);
+	}
+	getOrganization() {}
+	id() {
+		return `abliteration:${this.modelName}`;
+	}
+	toString() {
+		return `[Abliteration Provider ${this.modelName}]`;
+	}
+	toJSON() {
+		return {
+			provider: "abliteration",
+			model: this.modelName,
+			config: {
+				...this.config,
+				apiKey: void 0
+			}
+		};
+	}
+};
+function createAbliterationProvider(providerPath, options = {}) {
+	const splits = providerPath.split(":");
+	const modelName = splits[1] === "chat" ? splits.slice(2).join(":") : splits.slice(1).join(":");
+	if (!modelName) throw new Error("Abliteration provider requires a model name. Use format: abliteration:<model_name> or abliteration:chat:<model_name>");
+	const providerOptions = options.config || {};
+	return new AbliterationProvider(modelName, {
+		...providerOptions,
+		id: options.id ?? providerOptions.id,
+		env: providerOptions.env ?? options.env
+	});
+}
+//#endregion
 //#region src/providers/ai21.ts
 const AI21_CHAT_MODELS = [{
 	id: "jamba-1.5-mini",
@@ -17070,16 +17129,15 @@ function convertToolsToConverseFormat(tools) {
 * Convert tool choice to Converse API format.
 * Supports OpenAI tool choice format and native Bedrock format.
 */
+function isNamedConverseToolChoice(toolChoice) {
+	if (!toolChoice || typeof toolChoice !== "object" || !("tool" in toolChoice)) return false;
+	const tool = toolChoice.tool;
+	return Boolean(tool && typeof tool === "object" && typeof tool.name === "string");
+}
 function convertToolChoiceToConverseFormat(toolChoice) {
 	if (isOpenAIToolChoice(toolChoice)) return openaiToolChoiceToBedrock(toolChoice);
 	if (toolChoice === "any") return { any: {} };
-	if (toolChoice && typeof toolChoice === "object") {
-		const tool = toolChoice.tool;
-		if (tool && typeof tool === "object") {
-			const name = tool.name;
-			if (typeof name === "string") return { tool: { name } };
-		}
-	}
+	if (isNamedConverseToolChoice(toolChoice)) return { tool: { name: toolChoice.tool.name } };
 	return { auto: {} };
 }
 /**
@@ -28993,7 +29051,112 @@ async function processConfigFileReferences(config, basePath = "") {
 	return config;
 }
 //#endregion
+//#region src/providers/scriptContext.ts
+/**
+* Keys on `CallApiContextParams` that cannot be sent to a subprocess script
+* provider (Python, Ruby, etc.) because they are either non-serializable or
+* contain circular references (e.g., Timeout handles inside `logger`,
+* functions inside `filters`, or `ApiProvider` instances with methods).
+*
+* This list is the single source of truth for script-provider sanitization;
+* adding a new non-serializable field to `CallApiContextParams` requires only
+* a single update here so every script provider stays in lockstep.
+*/
+const NON_SERIALIZABLE_CONTEXT_KEYS = [
+	"getCache",
+	"logger",
+	"filters",
+	"originalProvider"
+];
+/**
+* Returns a shallow-cloned copy of `context` with non-serializable keys
+* removed. The caller's `context` is never mutated so wrappers that reuse
+* the same object across turns (e.g., redteam multi-turn strategies) are
+* safe. Logs the stripped keys at debug level for traceability when script
+* authors are investigating "missing filters/logger in my script" reports.
+*
+* @param providerLabel - Label used in debug logs (e.g., `"PythonProvider"`).
+* @param context - Caller-owned context, possibly `undefined`.
+* @returns A sanitized clone, or `undefined` if `context` was `undefined`.
+*/
+function sanitizeScriptContext(providerLabel, context) {
+	if (!context) return;
+	const sanitizedContext = { ...context };
+	const stripped = [];
+	for (const key of NON_SERIALIZABLE_CONTEXT_KEYS) if (key in sanitizedContext) {
+		stripped.push(key);
+		delete sanitizedContext[key];
+	}
+	if (stripped.length > 0) logger.debug(`${providerLabel} sanitized context: stripped non-serializable keys [${stripped.join(", ")}]`);
+	return sanitizedContext;
+}
+//#endregion
 //#region src/providers/pythonCompletion.ts
+function buildPythonScriptArgs(apiType, prompt, optionsWithProcessedConfig, sanitizedContext) {
+	return apiType === "call_api" ? [
+		prompt,
+		optionsWithProcessedConfig,
+		sanitizedContext
+	] : [prompt, optionsWithProcessedConfig];
+}
+function hasPythonResultProperty(result, propertyName) {
+	return Boolean(result) && typeof result === "object" && Object.prototype.hasOwnProperty.call(result, propertyName);
+}
+function applyCachedCallApiMetadata(apiType, parsedResult) {
+	if (apiType !== "call_api" || typeof parsedResult !== "object" || parsedResult === null) return parsedResult;
+	logger.debug(`PythonProvider setting cached=true for cached ${apiType} result`);
+	parsedResult.cached = true;
+	if (parsedResult.tokenUsage) {
+		const total = parsedResult.tokenUsage.total || 0;
+		parsedResult.tokenUsage = {
+			cached: total,
+			total,
+			numRequests: parsedResult.tokenUsage.numRequests ?? 1
+		};
+		logger.debug(`Updated token usage for cached result: ${JSON.stringify(parsedResult.tokenUsage)}`);
+	}
+	return parsedResult;
+}
+function applyFreshCallApiMetadata(apiType, result) {
+	if (apiType !== "call_api" || typeof result !== "object" || result === null) return result;
+	logger.debug(`PythonProvider explicitly setting cached=false for fresh result`);
+	result.cached = false;
+	if (result.tokenUsage && !result.tokenUsage.numRequests) {
+		result.tokenUsage.numRequests = 1;
+		logger.debug(`Added numRequests to fresh result token usage: ${JSON.stringify(result.tokenUsage)}`);
+	}
+	return result;
+}
+function hasPythonResultError(result) {
+	return hasPythonResultProperty(result, "error") && result.error !== null && result.error !== void 0 && result.error !== "";
+}
+function validateCallApiResult(functionName, result) {
+	const resultType = result === null ? "null" : typeof result;
+	const resultKeys = result && typeof result === "object" ? Object.keys(result).join(",") : "none";
+	logger.debug(`Python provider result structure: ${resultType}, keys: ${resultKeys}`);
+	if (hasPythonResultProperty(result, "output")) logger.debug(`Python provider output type: ${typeof result.output}, isArray: ${Array.isArray(result.output)}`);
+	if (!hasPythonResultProperty(result, "output") && !hasPythonResultProperty(result, "error")) throw new Error(`The Python script \`${functionName}\` function must return a dict with an own \`output\` string/object or \`error\` string (inherited prototype properties are rejected), instead got: ${JSON.stringify(result)}`);
+}
+function validateEmbeddingResult(functionName, result) {
+	if (!hasPythonResultProperty(result, "embedding") && !hasPythonResultProperty(result, "error")) throw new Error(`The Python script \`${functionName}\` function must return a dict with an own \`embedding\` array or \`error\` string (inherited prototype properties are rejected), instead got ${JSON.stringify(result)}`);
+}
+function validateClassificationResult(functionName, result) {
+	if (!hasPythonResultProperty(result, "classification") && !hasPythonResultProperty(result, "error")) throw new Error(`The Python script \`${functionName}\` function must return a dict with an own \`classification\` object or \`error\` string (inherited prototype properties are rejected), instead of ${JSON.stringify(result)}`);
+}
+function validatePythonScriptResult(apiType, functionName, result) {
+	switch (apiType) {
+		case "call_api":
+			validateCallApiResult(functionName, result);
+			return;
+		case "call_embedding_api":
+			validateEmbeddingResult(functionName, result);
+			return;
+		case "call_classification_api":
+			validateClassificationResult(functionName, result);
+			return;
+		default: throw new Error(`Unsupported apiType: ${apiType}`);
+	}
+}
 var PythonProvider = class {
 	config;
 	scriptPath;
@@ -29103,72 +29266,26 @@ var PythonProvider = class {
 			logger.debug(`Returning cached ${apiType} result for script ${absPath}`);
 			const parsedResult = JSON.parse(cachedResult);
 			logger.debug(`PythonProvider parsed cached result type: ${typeof parsedResult}, keys: ${Object.keys(parsedResult).join(",")}`);
-			if (apiType === "call_api" && typeof parsedResult === "object" && parsedResult !== null) {
-				logger.debug(`PythonProvider setting cached=true for cached ${apiType} result`);
-				parsedResult.cached = true;
-				if (parsedResult.tokenUsage) {
-					const total = parsedResult.tokenUsage.total || 0;
-					parsedResult.tokenUsage = {
-						cached: total,
-						total,
-						numRequests: parsedResult.tokenUsage.numRequests ?? 1
-					};
-					logger.debug(`Updated token usage for cached result: ${JSON.stringify(parsedResult.tokenUsage)}`);
-				}
-			}
-			return parsedResult;
+			return applyCachedCallApiMetadata(apiType, parsedResult);
 		} else {
-			const sanitizedContext = context ? { ...context } : void 0;
-			if (sanitizedContext) {
-				delete sanitizedContext.getCache;
-				delete sanitizedContext.logger;
-				delete sanitizedContext.filters;
-				delete sanitizedContext.originalProvider;
-			}
-			const optionsWithProcessedConfig = {
+			const sanitizedContext = sanitizeScriptContext("PythonProvider", context);
+			const args = buildPythonScriptArgs(apiType, prompt, {
 				...this.options,
 				config: {
 					...this.options?.config,
 					...this.config
 				}
-			};
-			const args = apiType === "call_api" ? [
-				prompt,
-				optionsWithProcessedConfig,
-				sanitizedContext
-			] : [prompt, optionsWithProcessedConfig];
+			}, sanitizedContext);
 			logger.debug(`Executing python script ${absPath} via worker pool with args: ${safeJsonStringify(args)}`);
 			const functionName = this.functionName || apiType;
-			let result;
-			result = await this.pool.execute(functionName, args);
-			switch (apiType) {
-				case "call_api":
-					logger.debug(`Python provider result structure: ${result ? typeof result : "undefined"}, keys: ${result ? Object.keys(result).join(",") : "none"}`);
-					if (result && "output" in result) logger.debug(`Python provider output type: ${typeof result.output}, isArray: ${Array.isArray(result.output)}`);
-					if (!result || typeof result !== "object" || !("output" in result) && !("error" in result)) throw new Error(`The Python script \`${functionName}\` function must return a dict with an \`output\` string/object or \`error\` string, instead got: ${JSON.stringify(result)}`);
-					break;
-				case "call_embedding_api":
-					if (!result || typeof result !== "object" || !("embedding" in result) && !("error" in result)) throw new Error(`The Python script \`${functionName}\` function must return a dict with an \`embedding\` array or \`error\` string, instead got ${JSON.stringify(result)}`);
-					break;
-				case "call_classification_api":
-					if (!result || typeof result !== "object" || !("classification" in result) && !("error" in result)) throw new Error(`The Python script \`${functionName}\` function must return a dict with a \`classification\` object or \`error\` string, instead of ${JSON.stringify(result)}`);
-					break;
-				default: throw new Error(`Unsupported apiType: ${apiType}`);
-			}
-			const hasError = "error" in result && result.error !== null && result.error !== void 0 && result.error !== "";
+			const result = await this.pool.execute(functionName, args);
+			validatePythonScriptResult(apiType, functionName, result);
+			const hasError = hasPythonResultError(result);
 			if (isCacheEnabled() && !hasError) {
 				logger.debug(`PythonProvider caching result: ${cacheKey}`);
 				await cache.set(cacheKey, JSON.stringify(result));
 			} else logger.debug(`PythonProvider not caching result: ${isCacheEnabled() ? hasError ? "has error" : "unknown reason" : "cache disabled"}`);
-			if (apiType === "call_api") {
-				logger.debug(`PythonProvider explicitly setting cached=false for fresh result`);
-				result.cached = false;
-				if (result.tokenUsage && !result.tokenUsage.numRequests) {
-					result.tokenUsage.numRequests = 1;
-					logger.debug(`Added numRequests to fresh result token usage: ${JSON.stringify(result.tokenUsage)}`);
-				}
-			}
-			return result;
+			return applyFreshCallApiMetadata(apiType, result);
 		}
 	}
 	async callApi(prompt, context) {
@@ -29455,6 +29572,67 @@ var ReplicateImageProvider = class extends ReplicateProvider {
 };
 //#endregion
 //#region src/providers/rubyCompletion.ts
+function buildRubyScriptArgs(apiType, prompt, optionsWithProcessedConfig, sanitizedContext) {
+	return apiType === "call_api" ? [
+		prompt,
+		optionsWithProcessedConfig,
+		sanitizedContext
+	] : [prompt, optionsWithProcessedConfig];
+}
+function hasRubyResultProperty(result, propertyName) {
+	return Boolean(result) && typeof result === "object" && Object.prototype.hasOwnProperty.call(result, propertyName);
+}
+function applyCachedRubyCallApiMetadata(apiType, parsedResult) {
+	if (apiType !== "call_api" || typeof parsedResult !== "object" || parsedResult === null) return parsedResult;
+	logger.debug(`RubyProvider setting cached=true for cached ${apiType} result`);
+	parsedResult.cached = true;
+	if (parsedResult.tokenUsage) {
+		const total = parsedResult.tokenUsage.total || 0;
+		parsedResult.tokenUsage = {
+			cached: total,
+			total,
+			numRequests: parsedResult.tokenUsage.numRequests ?? 1
+		};
+		logger.debug(`Updated token usage for cached result: ${JSON.stringify(parsedResult.tokenUsage)}`);
+	}
+	return parsedResult;
+}
+function applyFreshRubyCallApiMetadata(apiType, result) {
+	if (apiType !== "call_api" || typeof result !== "object" || result === null) return result;
+	logger.debug(`RubyProvider explicitly setting cached=false for fresh result`);
+	result.cached = false;
+	return result;
+}
+function hasRubyResultError(result) {
+	return hasRubyResultProperty(result, "error") && result.error !== null && result.error !== void 0 && result.error !== "";
+}
+function validateRubyCallApiResult(functionName, result) {
+	const resultType = result === null ? "null" : typeof result;
+	const resultKeys = result && typeof result === "object" ? Object.keys(result).join(",") : "none";
+	logger.debug(`Ruby provider result structure: ${resultType}, keys: ${resultKeys}`);
+	if (hasRubyResultProperty(result, "output")) logger.debug(`Ruby provider output type: ${typeof result.output}, isArray: ${Array.isArray(result.output)}`);
+	if (!hasRubyResultProperty(result, "output") && !hasRubyResultProperty(result, "error")) throw new Error(`The Ruby script \`${functionName}\` function must return a hash with an own \`output\` string/object or \`error\` string (inherited prototype properties are rejected), instead got: ${JSON.stringify(result)}`);
+}
+function validateRubyEmbeddingResult(functionName, result) {
+	if (!hasRubyResultProperty(result, "embedding") && !hasRubyResultProperty(result, "error")) throw new Error(`The Ruby script \`${functionName}\` function must return a hash with an own \`embedding\` array or \`error\` string (inherited prototype properties are rejected), instead got ${JSON.stringify(result)}`);
+}
+function validateRubyClassificationResult(functionName, result) {
+	if (!hasRubyResultProperty(result, "classification") && !hasRubyResultProperty(result, "error")) throw new Error(`The Ruby script \`${functionName}\` function must return a hash with an own \`classification\` object or \`error\` string (inherited prototype properties are rejected), instead of ${JSON.stringify(result)}`);
+}
+function validateRubyScriptResult(apiType, functionName, result) {
+	switch (apiType) {
+		case "call_api":
+			validateRubyCallApiResult(functionName, result);
+			return;
+		case "call_embedding_api":
+			validateRubyEmbeddingResult(functionName, result);
+			return;
+		case "call_classification_api":
+			validateRubyClassificationResult(functionName, result);
+			return;
+		default: throw new Error(`Unsupported apiType: ${apiType}`);
+	}
+}
 /**
 * Ruby provider for executing custom Ruby scripts as API providers.
 * Supports text generation, embeddings, and classification tasks.
@@ -29529,70 +29707,26 @@ var RubyProvider = class {
 			logger.debug(`Returning cached ${apiType} result for script ${absPath}`);
 			const parsedResult = JSON.parse(cachedResult);
 			logger.debug(`RubyProvider parsed cached result type: ${typeof parsedResult}, keys: ${Object.keys(parsedResult).join(",")}`);
-			if (apiType === "call_api" && typeof parsedResult === "object" && parsedResult !== null) {
-				logger.debug(`RubyProvider setting cached=true for cached ${apiType} result`);
-				parsedResult.cached = true;
-				if (parsedResult.tokenUsage) {
-					const total = parsedResult.tokenUsage.total || 0;
-					parsedResult.tokenUsage = {
-						cached: total,
-						total,
-						numRequests: parsedResult.tokenUsage.numRequests ?? 1
-					};
-					logger.debug(`Updated token usage for cached result: ${JSON.stringify(parsedResult.tokenUsage)}`);
-				}
-			}
-			return parsedResult;
+			return applyCachedRubyCallApiMetadata(apiType, parsedResult);
 		} else {
-			const sanitizedContext = context ? { ...context } : void 0;
-			if (sanitizedContext) {
-				delete sanitizedContext.getCache;
-				delete sanitizedContext.logger;
-				delete sanitizedContext.filters;
-				delete sanitizedContext.originalProvider;
-			}
-			const optionsWithProcessedConfig = {
+			const sanitizedContext = sanitizeScriptContext("RubyProvider", context);
+			const args = buildRubyScriptArgs(apiType, prompt, {
 				...this.options,
 				config: {
 					...this.options?.config,
 					...this.config
 				}
-			};
-			const args = apiType === "call_api" ? [
-				prompt,
-				optionsWithProcessedConfig,
-				sanitizedContext
-			] : [prompt, optionsWithProcessedConfig];
+			}, sanitizedContext);
 			logger.debug(`Running ruby script ${absPath} with scriptPath ${this.scriptPath} and args: ${safeJsonStringify(args)}`);
 			const functionName = this.functionName || apiType;
-			let result;
-			switch (apiType) {
-				case "call_api":
-					result = await runRuby(absPath, functionName, args, { rubyExecutable: this.config.rubyExecutable });
-					logger.debug(`Ruby provider result structure: ${result ? typeof result : "undefined"}, keys: ${result && typeof result === "object" ? Object.keys(result).join(",") : "none"}`);
-					if (result && typeof result === "object" && "output" in result) logger.debug(`Ruby provider output type: ${typeof result.output}, isArray: ${Array.isArray(result.output)}`);
-					if (!result || typeof result !== "object" || !("output" in result) && !("error" in result)) throw new Error(`The Ruby script \`${functionName}\` function must return a hash with an \`output\` string/object or \`error\` string, instead got: ${JSON.stringify(result)}`);
-					break;
-				case "call_embedding_api":
-					result = await runRuby(absPath, functionName, args, { rubyExecutable: this.config.rubyExecutable });
-					if (!result || typeof result !== "object" || !("embedding" in result) && !("error" in result)) throw new Error(`The Ruby script \`${functionName}\` function must return a hash with an \`embedding\` array or \`error\` string, instead got ${JSON.stringify(result)}`);
-					break;
-				case "call_classification_api":
-					result = await runRuby(absPath, functionName, args, { rubyExecutable: this.config.rubyExecutable });
-					if (!result || typeof result !== "object" || !("classification" in result) && !("error" in result)) throw new Error(`The Ruby script \`${functionName}\` function must return a hash with a \`classification\` object or \`error\` string, instead of ${JSON.stringify(result)}`);
-					break;
-				default: throw new Error(`Unsupported apiType: ${apiType}`);
-			}
-			const hasError = "error" in result && result.error !== null && result.error !== void 0 && result.error !== "";
+			const result = await runRuby(absPath, functionName, args, { rubyExecutable: this.config.rubyExecutable });
+			validateRubyScriptResult(apiType, functionName, result);
+			const hasError = hasRubyResultError(result);
 			if (isCacheEnabled() && !hasError) {
 				logger.debug(`RubyProvider caching result: ${cacheKey}`);
 				await cache.set(cacheKey, JSON.stringify(result));
 			} else logger.debug(`RubyProvider not caching result: ${isCacheEnabled() ? hasError ? "has error" : "unknown reason" : "cache disabled"}`);
-			if (apiType === "call_api") {
-				logger.debug(`RubyProvider explicitly setting cached=false for fresh result`);
-				result.cached = false;
-			}
-			return result;
+			return applyFreshRubyCallApiMetadata(apiType, result);
 		}
 	}
 	/**
@@ -29728,7 +29862,7 @@ var ScriptCompletionProvider = class {
 				const result = { output: standardOutput };
 				if (fileHashes.length > 0 && isCacheEnabled()) await (await getCache()).set(cacheKey, JSON.stringify(result));
 				resolve(result);
-			});
+			}).stdin?.end();
 		});
 	}
 };
@@ -32549,6 +32683,15 @@ const providerMap = [
 	createScriptBasedProviderFactory("golang", "go", GolangProvider),
 	createScriptBasedProviderFactory("python", "py", PythonProvider),
 	createScriptBasedProviderFactory("ruby", "rb", RubyProvider),
+	{
+		test: (providerPath) => providerPath.startsWith("abliteration:"),
+		create: async (providerPath, providerOptions, context) => {
+			return createAbliterationProvider(providerPath, {
+				config: providerOptions,
+				env: context.env
+			});
+		}
+	},
 	{
 		test: (providerPath) => providerPath === "agentic:memory-poisoning",
 		create: async (_providerPath, providerOptions, _context) => {
@@ -32575,7 +32718,7 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath.startsWith("opencode:") || providerPath === "opencode",
 		create: async (providerPath, providerOptions, context) => {
-			const { OpenCodeSDKProvider } = await import("./opencode-sdk-BUu5Nevv.js");
+			const { OpenCodeSDKProvider } = await import("./opencode-sdk-BB40Wir1.js");
 			return new OpenCodeSDKProvider({
 				...providerOptions,
 				id: providerPath,
@@ -32587,14 +32730,14 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath.startsWith("openclaw:") || providerPath === "openclaw",
 		create: async (providerPath, providerOptions, context) => {
-			const { createOpenClawProvider } = await import("./openclaw-CnQ363Wi.js");
+			const { createOpenClawProvider } = await import("./openclaw-Bq7RVR3k.js");
 			return createOpenClawProvider(providerPath, providerOptions, context.env);
 		}
 	},
 	{
 		test: (providerPath) => providerPath.startsWith("anthropic:claude-agent-sdk") || providerPath.startsWith("anthropic:claude-code"),
 		create: async (_providerPath, providerOptions, _context) => {
-			const { ClaudeCodeSDKProvider } = await import("./claude-agent-sdk-Dtq_L-Sc.js");
+			const { ClaudeCodeSDKProvider } = await import("./claude-agent-sdk-BzNZeZ0N.js");
 			return new ClaudeCodeSDKProvider({ ...providerOptions });
 		}
 	},
@@ -32650,25 +32793,25 @@ const providerMap = [
 			const modelName = splits.slice(2).join(":");
 			if (modelType === "converse") return new AwsBedrockConverseProvider(modelName, providerOptions);
 			if (modelType === "nova-sonic" || modelType.includes("amazon.nova-sonic")) {
-				const { NovaSonicProvider } = await import("./nova-sonic-TDgrlTk7.js");
+				const { NovaSonicProvider } = await import("./nova-sonic-BeTRaFOh.js");
 				return new NovaSonicProvider("amazon.nova-sonic-v1:0", providerOptions);
 			}
 			if (modelType.includes("luma.ray") || modelName.includes("luma.ray")) {
-				const { LumaRayVideoProvider } = await import("./luma-ray-KgTCXrZC.js");
+				const { LumaRayVideoProvider } = await import("./luma-ray-B-tNZzqW.js");
 				return new LumaRayVideoProvider(modelName.includes("luma.ray") ? modelName : splits.slice(1).join(":") || "luma.ray-v2:0", providerOptions);
 			}
 			if (modelType.includes("amazon.nova-reel") || modelType === "video" && (modelName.includes("amazon.nova-reel") || modelName === "")) {
-				const { NovaReelVideoProvider } = await import("./nova-reel-gr11WG7f.js");
+				const { NovaReelVideoProvider } = await import("./nova-reel-CNGJTLtG.js");
 				return new NovaReelVideoProvider(modelName || "amazon.nova-reel-v1:1", providerOptions);
 			}
 			if (modelType === "agents") {
-				const { AwsBedrockAgentsProvider } = await import("./agents-CgaMXvLM.js");
+				const { AwsBedrockAgentsProvider } = await import("./agents-BGqaTDnr.js");
 				return new AwsBedrockAgentsProvider(modelName, providerOptions);
 			}
 			if (modelType === "completion") return new AwsBedrockCompletionProvider(modelName, providerOptions);
 			if (modelType === "embeddings" || modelType === "embedding") return new AwsBedrockEmbeddingProvider(modelName, providerOptions);
 			if (modelType === "kb" || modelType === "knowledge-base") {
-				const { AwsBedrockKnowledgeBaseProvider } = await import("./knowledgeBase-RhFPGWDc.js");
+				const { AwsBedrockKnowledgeBaseProvider } = await import("./knowledgeBase-BBETc5-S.js");
 				return new AwsBedrockKnowledgeBaseProvider(modelName, providerOptions);
 			}
 			return new AwsBedrockCompletionProvider(splits.slice(1).join(":"), providerOptions);
@@ -32678,7 +32821,7 @@ const providerMap = [
 		test: (providerPath) => providerPath.startsWith("bedrock-agent:"),
 		create: async (providerPath, providerOptions, _context) => {
 			const agentId = providerPath.substring(14);
-			const { AwsBedrockAgentsProvider } = await import("./agents-CgaMXvLM.js");
+			const { AwsBedrockAgentsProvider } = await import("./agents-BGqaTDnr.js");
 			return new AwsBedrockAgentsProvider(agentId, providerOptions);
 		}
 	},
@@ -32688,7 +32831,7 @@ const providerMap = [
 			const splits = providerPath.split(":");
 			const modelType = splits[1];
 			const endpointName = splits.slice(2).join(":");
-			const { SageMakerCompletionProvider, SageMakerEmbeddingProvider } = await import("./sagemaker-BVkaG2-l.js");
+			const { SageMakerCompletionProvider, SageMakerEmbeddingProvider } = await import("./sagemaker-ClS_NB07.js");
 			if (modelType === "embedding" || modelType === "embeddings") return new SageMakerEmbeddingProvider(endpointName || modelType, providerOptions);
 			if (splits.length === 2) return new SageMakerCompletionProvider(modelType, providerOptions);
 			if (endpointName.includes("jumpstart") || modelType === "jumpstart") return new SageMakerCompletionProvider(endpointName, {
@@ -32729,7 +32872,7 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath.startsWith("cloudflare-ai:"),
 		create: async (providerPath, providerOptions, context) => {
-			const { createCloudflareAiProvider } = await import("./cloudflare-ai-DGLte7Py.js");
+			const { createCloudflareAiProvider } = await import("./cloudflare-ai-DGOwgexC.js");
 			return createCloudflareAiProvider(providerPath, {
 				...providerOptions,
 				env: context.env
@@ -32739,7 +32882,7 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath.startsWith("cloudflare-gateway:"),
 		create: async (providerPath, providerOptions, context) => {
-			const { createCloudflareGatewayProvider } = await import("./cloudflare-gateway-CiIZHU0Q.js");
+			const { createCloudflareGatewayProvider } = await import("./cloudflare-gateway-D-dnkzCF.js");
 			return createCloudflareGatewayProvider(providerPath, {
 				...providerOptions,
 				env: context.env
@@ -32891,27 +33034,27 @@ const providerMap = [
 		create: async (providerPath, providerOptions, context) => {
 			const modelType = providerPath.split(":")[1];
 			if (modelType === "image") {
-				const { createHyperbolicImageProvider } = await import("./image-u7-rKnYU.js");
+				const { createHyperbolicImageProvider } = await import("./image-qjO6FWPs.js");
 				return createHyperbolicImageProvider(providerPath, {
 					...providerOptions,
 					env: context.env
 				});
 			}
 			if (modelType === "audio") {
-				const { createHyperbolicAudioProvider } = await import("./audio-DcVKoInv.js");
+				const { createHyperbolicAudioProvider } = await import("./audio-BvpTOArF.js");
 				return createHyperbolicAudioProvider(providerPath, {
 					...providerOptions,
 					env: context.env
 				});
 			}
-			const { createHyperbolicProvider } = await import("./chat-0bwXjVP0.js");
+			const { createHyperbolicProvider } = await import("./chat-aMQZw6R7.js");
 			return createHyperbolicProvider(providerPath, providerOptions);
 		}
 	},
 	{
 		test: (providerPath) => providerPath.startsWith("litellm:"),
 		create: async (providerPath, providerOptions, context) => {
-			const { createLiteLLMProvider } = await import("./litellm-DRjpcSa7.js");
+			const { createLiteLLMProvider } = await import("./litellm-DRc4qWfc.js");
 			return createLiteLLMProvider(providerPath, {
 				config: providerOptions,
 				env: context.env
@@ -32967,8 +33110,25 @@ const providerMap = [
 			const modelType = splits[1];
 			const modelName = splits.slice(2).join(":");
 			const configuredModel = getConfiguredOpenAiModel(providerOptions);
+			if (modelType === "codex-app-server" || modelType === "codex-desktop") {
+				const { OpenAICodexAppServerProvider } = await import("./codex-app-server-CCLjqCh9.js");
+				const codexModel = modelName || configuredModel;
+				const codexProviderId = providerOptions.id ?? providerPath;
+				return new OpenAICodexAppServerProvider({
+					...providerOptions,
+					id: codexProviderId,
+					config: codexModel ? {
+						...providerOptions.config,
+						model: codexModel
+					} : providerOptions.config,
+					env: {
+						...context.env,
+						...providerOptions.env
+					}
+				});
+			}
 			if (modelType === "codex-sdk" || modelType === "codex") {
-				const { OpenAICodexSDKProvider } = await import("./codex-sdk-Rtky3M4I.js").then((n) => n.n);
+				const { OpenAICodexSDKProvider } = await import("./codex-sdk-Bzb_TqX9.js").then((n) => n.n);
 				const codexModel = modelName || configuredModel;
 				const codexProviderId = providerOptions.id ?? providerPath;
 				return new OpenAICodexSDKProvider({
@@ -32988,7 +33148,7 @@ const providerMap = [
 			if (modelType === "realtime") return new OpenAiRealtimeProvider(modelName || configuredModel || "gpt-4o-realtime-preview-2024-12-17", providerOptions);
 			if (modelType === "responses") return new OpenAiResponsesProvider(modelName || configuredModel || "gpt-4.1-2025-04-14", providerOptions);
 			if (modelType === "transcription") {
-				const { OpenAiTranscriptionProvider } = await import("./transcription-V2HaAmy2.js");
+				const { OpenAiTranscriptionProvider } = await import("./transcription-D7Q0vJsh.js");
 				return new OpenAiTranscriptionProvider(modelName || configuredModel || "gpt-4o-transcribe-diarize", providerOptions);
 			}
 			if (OpenAiChatCompletionProvider.OPENAI_CHAT_MODEL_NAMES.includes(modelType)) return new OpenAiChatCompletionProvider(modelType, providerOptions);
@@ -32996,11 +33156,11 @@ const providerMap = [
 			if (OpenAiRealtimeProvider.OPENAI_REALTIME_MODEL_NAMES.includes(modelType)) return new OpenAiRealtimeProvider(modelType, providerOptions);
 			if (OpenAiResponsesProvider.OPENAI_RESPONSES_MODEL_NAMES.includes(modelType)) return new OpenAiResponsesProvider(modelType, providerOptions);
 			if (modelType === "agents") {
-				const { OpenAiAgentsProvider } = await import("./agents-DJ35I3Nt.js");
+				const { OpenAiAgentsProvider } = await import("./agents-emVcx3yh.js");
 				return new OpenAiAgentsProvider(modelName || "default-agent", providerOptions);
 			}
 			if (modelType === "chatkit") {
-				const { OpenAiChatKitProvider } = await import("./chatkit-CJnHRRMM.js");
+				const { OpenAiChatKitProvider } = await import("./chatkit-CbMRoeYw.js");
 				return new OpenAiChatKitProvider(modelName || "", providerOptions);
 			}
 			if (modelType === "assistant") return new OpenAiAssistantProvider(modelName, providerOptions);
@@ -33043,7 +33203,7 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath.startsWith("quiverai:"),
 		create: async (providerPath, providerOptions, context) => {
-			const { createQuiverAiProvider } = await import("./quiverai-CtWi6x_g.js");
+			const { createQuiverAiProvider } = await import("./quiverai-Bk1KrvL6.js");
 			return createQuiverAiProvider(providerPath, providerOptions, context.env);
 		}
 	},
@@ -33061,7 +33221,7 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath.startsWith("modelslab:"),
 		create: async (providerPath, providerOptions, context) => {
-			const { ModelsLabImageProvider } = await import("./modelslab-D0erNWKe.js");
+			const { ModelsLabImageProvider } = await import("./modelslab-zpz9JcK0.js");
 			const splits = providerPath.split(":");
 			const modelType = splits[1];
 			const modelName = splits.slice(2).join(":");
@@ -33105,7 +33265,7 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath.startsWith("aimlapi:"),
 		create: async (providerPath, providerOptions, context) => {
-			const { createAimlApiProvider } = await import("./aimlapi-sgYnkE54.js");
+			const { createAimlApiProvider } = await import("./aimlapi-uPGp0Zdo.js");
 			return createAimlApiProvider(providerPath, {
 				...providerOptions,
 				env: context.env
@@ -33115,7 +33275,7 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath.startsWith("cometapi:"),
 		create: async (providerPath, providerOptions, context) => {
-			const { createCometApiProvider } = await import("./cometapi-BUlt_ELa.js");
+			const { createCometApiProvider } = await import("./cometapi-CC7hWxmX.js");
 			return createCometApiProvider(providerPath, {
 				...providerOptions,
 				env: context.env
@@ -33125,7 +33285,7 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath.startsWith("docker:"),
 		create: async (providerPath, providerOptions, context) => {
-			const { createDockerProvider } = await import("./docker-DCgsveLD.js");
+			const { createDockerProvider } = await import("./docker--3qzPa-6.js");
 			return createDockerProvider(providerPath, {
 				...providerOptions,
 				env: context.env
@@ -33402,7 +33562,7 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath.startsWith("transformers:") || providerPath.startsWith("transformers.js:"),
 		create: async (providerPath, providerOptions, _context) => {
-			const { validateTransformersDependency } = await import("./transformersAvailability-CcHusyhw.js");
+			const { validateTransformersDependency } = await import("./transformersAvailability-lvCCvuPT.js");
 			await validateTransformersDependency();
 			const splits = providerPath.split(":");
 			if (splits.length < 3) throw new Error(`Invalid Transformers.js provider path: ${providerPath}. Format: transformers:<task>:<model>
@@ -33422,7 +33582,7 @@ Example: transformers:feature-extraction:Xenova/all-MiniLM-L6-v2`);
 		test: (providerPath) => providerPath === "slack" || providerPath.startsWith("slack:"),
 		create: async (providerPath, providerOptions, _context) => {
 			try {
-				const { SlackProvider } = await import("./slack-DDUe-5MC.js");
+				const { SlackProvider } = await import("./slack-Bamy_7te.js");
 				if (providerPath === "slack") return new SlackProvider(providerOptions);
 				const splits = providerPath.split(":");
 				if (splits.length < 2) throw new Error("Invalid Slack provider path. Use slack:<channel_id> or slack:channel:<channel_id>");
@@ -33461,6 +33621,17 @@ Example: transformers:feature-extraction:Xenova/all-MiniLM-L6-v2`);
 ];
 //#endregion
 //#region src/providers/index.ts
+function describeInvalidProvider(provider) {
+	try {
+		return (safeJsonStringify(sanitizeObject(provider, {
+			context: "invalid provider config",
+			throwOnError: true
+		})) ?? Object.prototype.toString.call(provider)).slice(0, 200);
+	} catch (err) {
+		logger.debug("Failed to sanitize invalid provider for error message", { error: err });
+		return Object.prototype.toString.call(provider);
+	}
+}
 async function loadApiProvider(providerPath, context = {}) {
 	const { options = {}, basePath, env } = context;
 	const mergedEnv = env || options.env ? {
@@ -33507,17 +33678,19 @@ async function loadApiProvider(providerPath, context = {}) {
 		};
 		return loadApiProvider(cloudProvider.id, mergedContext);
 	}
-	if (renderedProviderPath.startsWith("file://") && (renderedProviderPath.endsWith(".yaml") || renderedProviderPath.endsWith(".yml") || renderedProviderPath.endsWith(".json"))) {
-		const filePath = renderedProviderPath.slice(7);
-		const modulePath = path.isAbsolute(filePath) ? filePath : path.join(basePath || process.cwd(), filePath);
-		const fileContent = maybeLoadConfigFromExternalFile(yaml.load(fs.readFileSync(modulePath, "utf8")));
-		invariant(fileContent, `Provider config ${filePath} is undefined`);
-		if (Array.isArray(fileContent)) throw new Error(`Multiple providers found in ${filePath}. Use loadApiProviders instead of loadApiProvider.`);
-		invariant(fileContent.id, `Provider config ${filePath} must have an id`);
-		logger.info(`Loaded provider ${fileContent.id} from ${filePath}`);
-		const mergedFileEnv = fileContent.env || env ? {
+	if (isProviderConfigFileReference(renderedProviderPath)) {
+		const { configs, relativePath, wasArray } = readProviderConfigFile(renderedProviderPath, basePath);
+		const fileContent = configs[0];
+		invariant(fileContent, `Provider config file ${relativePath} contains no providers`);
+		if (wasArray) throw new Error(`Multiple providers found in ${relativePath}. Use loadApiProviders instead of loadApiProvider.`);
+		invariant(fileContent.id, `Provider config ${relativePath} must have an id`);
+		logger.info("Loaded provider from config file", {
+			providerConfigPath: relativePath,
+			providerId: fileContent.id
+		});
+		const mergedFileEnv = fileContent.env || mergedEnv ? {
 			...fileContent.env,
-			...env
+			...mergedEnv
 		} : void 0;
 		return loadApiProvider(fileContent.id, {
 			basePath,
@@ -33532,7 +33705,7 @@ async function loadApiProvider(providerPath, context = {}) {
 		ret.transform = options.transform;
 		ret.delay = options.delay;
 		ret.inputs = options.inputs;
-		ret.label ||= renderEnvOnlyInObject(String(options.label || ""), mergedEnv);
+		ret.label ||= renderEnvOnlyInObject(options.label || "", mergedEnv);
 		return ret;
 	}
 	const errorMessage = dedent`
@@ -33547,46 +33720,31 @@ async function loadApiProvider(providerPath, context = {}) {
 	throw new Error(errorMessage);
 }
 /**
-* Helper function to resolve provider from various formats (string, object, function)
-* Uses providerMap for optimization and falls back to loadApiProvider with proper context
+* Helper function to resolve provider from various formats (string, object, function).
+* Checks the resolved provider cache first and falls back to loadApiProvider for uncached providers.
 */
-async function resolveProvider(provider, providerMap, context = {}) {
+async function resolveProvider(provider, resolvedProviders, context = {}) {
 	if (provider == null) throw new Error("Provider cannot be null or undefined");
 	if (typeof provider === "string") {
-		if (providerMap[provider]) return providerMap[provider];
+		if (resolvedProviders[provider]) return resolvedProviders[provider];
 		const loadOptions = {};
 		if (context.env) loadOptions.env = context.env;
 		if (context.basePath) loadOptions.basePath = context.basePath;
 		return await loadApiProvider(provider, loadOptions);
 	} else if (typeof provider === "object") {
-		const casted = provider;
-		invariant(casted.id, "Provider object must have an id");
-		const loadOptions = { options: casted };
+		const descriptor = normalizeProviderRef(provider);
+		invariant(descriptor.kind === "options" || descriptor.kind === "map", `Provider object must have an 'id' field or be a ProviderOptionsMap (e.g. { "openai:responses:gpt-5.4": { config: ... } }). Got: ${describeInvalidProvider(provider)}`);
+		const loadOptions = { options: descriptor.loadOptions };
 		if (context.env) loadOptions.env = context.env;
 		if (context.basePath) loadOptions.basePath = context.basePath;
-		return await loadApiProvider(casted.id, loadOptions);
-	} else if (typeof provider === "function") return {
-		id: () => provider.label ?? "custom-function",
-		callApi: provider
-	};
-	else throw new Error("Invalid provider type");
-}
-/**
-* Helper function to load provider configs from a file path without instantiating them.
-* Returns the raw ProviderOptions with all fields (including `prompts`) intact.
-*/
-function loadProviderConfigsFromFile(filePath, basePath) {
-	const relativePath = filePath.slice(7);
-	const modulePath = path.isAbsolute(relativePath) ? relativePath : path.join(basePath || process.cwd(), relativePath);
-	const fileContent = maybeLoadConfigFromExternalFile(yaml.load(fs.readFileSync(modulePath, "utf8")));
-	invariant(fileContent, `Provider config ${relativePath} is undefined`);
-	return [fileContent].flat();
-}
-/**
-* Checks if a string is a file:// reference to a YAML/JSON config file.
-*/
-function isFileReference(str) {
-	return str.startsWith("file://") && (str.endsWith(".yaml") || str.endsWith(".yml") || str.endsWith(".json"));
+		return await loadApiProvider(descriptor.loadProviderPath, loadOptions);
+	} else if (typeof provider === "function") {
+		const descriptor = normalizeProviderRef(provider);
+		return {
+			id: () => descriptor.id,
+			callApi: provider
+		};
+	} else throw new Error("Invalid provider type");
 }
 /**
 * Resolves raw provider configurations, loading file:// references.
@@ -33601,16 +33759,18 @@ function isFileReference(str) {
 function resolveProviderConfigs(providerPaths, options = {}) {
 	const { basePath } = options;
 	if (typeof providerPaths === "string") {
-		if (isFileReference(providerPaths)) return loadProviderConfigsFromFile(providerPaths, basePath);
+		if (isProviderConfigFileReference(providerPaths)) return loadProviderConfigsFromFile(providerPaths, basePath);
 		return providerPaths;
 	}
 	if (typeof providerPaths === "function") return providerPaths;
 	if (!Array.isArray(providerPaths)) return providerPaths;
 	const results = [];
-	for (const provider of providerPaths) if (typeof provider === "string") if (isFileReference(provider)) results.push(...loadProviderConfigsFromFile(provider, basePath));
-	else results.push(provider);
-	else if (typeof provider === "function") results.push(provider);
-	else results.push(provider);
+	for (const provider of providerPaths) {
+		const descriptor = normalizeProviderRef(provider);
+		if (descriptor.kind === "file") results.push(...loadProviderConfigsFromFile(descriptor.loadProviderPath, basePath));
+		else if (descriptor.kind === "named") results.push(descriptor.loadProviderPath);
+		else results.push(provider);
+	}
 	return results;
 }
 /**
@@ -33637,7 +33797,7 @@ async function loadApiProviders(providerPaths, options = {}) {
 		...options.env
 	};
 	if (typeof providerPaths === "string") {
-		if (providerPaths.startsWith("file://") && (providerPaths.endsWith(".yaml") || providerPaths.endsWith(".yml") || providerPaths.endsWith(".json"))) return loadProvidersFromFile(providerPaths, {
+		if (isProviderConfigFileReference(providerPaths)) return loadProvidersFromFile(providerPaths, {
 			basePath,
 			env
 		});
@@ -33650,45 +33810,35 @@ async function loadApiProviders(providerPaths, options = {}) {
 		callApi: providerPaths
 	}];
 	else if (Array.isArray(providerPaths)) return (await Promise.all(providerPaths.map(async (provider, idx) => {
-		if (typeof provider === "string") {
-			if (provider.startsWith("file://") && (provider.endsWith(".yaml") || provider.endsWith(".yml") || provider.endsWith(".json"))) return loadProvidersFromFile(provider, {
+		const descriptor = normalizeProviderRef(provider, { index: idx });
+		switch (descriptor.kind) {
+			case "file": return loadProvidersFromFile(descriptor.loadProviderPath, {
 				basePath,
 				env
 			});
-			return [await loadApiProvider(provider, {
+			case "named": return [await loadApiProvider(descriptor.loadProviderPath, {
+				basePath,
+				env
+			})];
+			case "function": return [{
+				id: () => descriptor.id,
+				callApi: provider
+			}];
+			case "options":
+			case "map": return [await loadApiProvider(descriptor.loadProviderPath, {
+				options: descriptor.loadOptions,
 				basePath,
 				env
 			})];
+			case "unknown": throw new Error(`Invalid provider at index ${idx}: expected a provider id string, ProviderOptions with an 'id' field, or a ProviderOptionsMap (e.g. { "openai:responses:gpt-5.4": { config: ... } }). Got: ${describeInvalidProvider(provider)}`);
+			default: throw new Error(`Unhandled provider kind: ${descriptor.kind}`);
 		}
-		if (typeof provider === "function") return [{
-			id: () => provider.label ?? `custom-function-${idx}`,
-			callApi: provider
-		}];
-		if (provider.id) return [await loadApiProvider(provider.id, {
-			options: provider,
-			basePath,
-			env
-		})];
-		const id = Object.keys(provider)[0];
-		const providerObject = provider[id];
-		return [await loadApiProvider(id, {
-			options: {
-				...providerObject,
-				id: providerObject.id || id
-			},
-			basePath,
-			env
-		})];
 	}))).flat();
 	throw new Error("Invalid providers list");
 }
 /**
-* Given a `providerPaths` object, resolves a list of provider IDs. Mimics the waterfall behavior
-* of `loadApiProviders` to ensure consistent behavior given the shape of the `providerPaths`
-* object.
-*
-* @param providerPaths - The list of providers to get the IDs of.
-* @returns The IDs of the providers in the providerPaths list.
+* Reads a provider config file and returns the IDs of all providers defined in it.
+* Requires every provider entry to have an `id` field.
 */
 function getProviderIdsFromFile(providerPath) {
 	const configs = loadProviderConfigsFromFile(providerPath, state.basePath || process.cwd());
@@ -33698,24 +33848,25 @@ function getProviderIdsFromFile(providerPath) {
 		return config.id;
 	});
 }
+/**
+* Extracts provider IDs from a provider paths configuration without instantiating providers.
+* Handles strings, functions, and arrays of mixed provider types.
+* For file:// references, reads the config file to extract IDs.
+*/
 function getProviderIds(providerPaths) {
 	if (typeof providerPaths === "string") {
-		if (isFileReference(providerPaths)) return getProviderIdsFromFile(providerPaths);
+		if (isProviderConfigFileReference(providerPaths)) return getProviderIdsFromFile(providerPaths);
 		return [providerPaths];
 	} else if (typeof providerPaths === "function") return ["custom-function"];
 	else if (Array.isArray(providerPaths)) return providerPaths.flatMap((provider, idx) => {
-		if (typeof provider === "string") {
-			if (isFileReference(provider)) return getProviderIdsFromFile(provider);
-			return provider;
-		}
-		if (typeof provider === "function") return provider.label || `custom-function-${idx}`;
-		if (provider.id) return provider.id;
-		const id = Object.keys(provider)[0];
-		return provider[id].id || id;
+		const descriptor = normalizeProviderRef(provider, { index: idx });
+		if (descriptor.kind === "file") return getProviderIdsFromFile(descriptor.loadProviderPath);
+		if (descriptor.kind === "unknown") throw new Error(`Invalid provider at index ${idx}: expected a provider id string, ProviderOptions with an 'id' field, or a ProviderOptionsMap. Got: ${describeInvalidProvider(provider)}`);
+		return descriptor.id;
 	});
 	throw new Error("Invalid providers list");
 }
 //#endregion
 export { AIStudioChatProvider as $, removePrefix as A, isRateLimitWrapped as B, extractInputVarsFromPrompt as C, getShortPluginId as D, getSessionId as E, loadFromPackage as F, throwIfTargetPromptExceedsMaxChars as G, MAX_CHARS_PER_MESSAGE_MODIFIER_KEY as H, redteamProviderManager as I, MistralChatCompletionProvider as J, REDTEAM_MEMORY_POISONING_PLUGIN_ID as K, TokenUsageTracker as L, renderPrompt as M, runExtensionHook as N, isBasicRefusal as O, isPackagePath as P, VertexChatProvider as Q, createRateLimitRegistry as R, extractGoalFromPrompt as S, extractVariablesFromJson as T, getGeneratedPromptOverLimit as U, PromptfooHarmfulCompletionProvider as V, getMaxCharsPerMessageModifierValue as W, DefaultEmbeddingProvider as X, MistralEmbeddingProvider as Y, DefaultGradingProvider as Z, mediaExists as _, resolveProviderConfigs as a, AzureModerationProvider as at, checkExfilTracking as b, MCPProvider as c, checkCloudPermissions as ct, createTransformResponse$1 as d, getOrgContext as dt, DefaultGradingJsonProvider as et, GoogleLiveProvider as f, getPluginSeverityOverridesFromCloud as ft, getMediaStorage as g, validateStrategies as h, resolveTeamId as ht, resolveProvider as i, DefaultSynthesizeProvider as it, collectFileMetadata as j, isEmptyResponse as k, HttpProvider as l, getCloudDatabaseId as lt, loadStrategy as m, isCloudProvider as mt, loadApiProvider as n, DefaultLlmRubricProvider as nt, getFileHashes as o, AzureEmbeddingProvider as ot, Strategies as p, getPoliciesFromCloud as pt, OpenAiModerationProvider as q, loadApiProviders as r, DefaultSuggestionsProvider as rt, parseScriptParts as s, AzureChatCompletionProvider as st, getProviderIds as t, DefaultGradingProvider$1 as tt, createTransformRequest as u, getEvalConfigFromCloud as ut, retrieveMedia as v, extractPromptFromTags as w, extractAllPromptsFromTags as x, pluginMatchesStrategyTargets as y, createProviderRateLimitOptions as z };
 
-//# sourceMappingURL=providers-Domz_llv.js.map
+//# sourceMappingURL=providers-DRrerKra.js.map