promptfoo 0.121.4 → 0.121.7

package/dist/src/{responses--OsX2aYW.js → responses-B6ktc3Ra.js}

@@ -1,12 +1,12 @@
-import { C as getEnvFloat, T as getEnvString, a as logger, k as state, w as getEnvInt } from "./logger-Ct2S6Yx-.js";
-import { r as importModule } from "./esm-C7PnfdF8.js";
-import { i as isJavascriptFile } from "./fileExtensions-DnqA1y9x.js";
-import { d as maybeLoadToolsFromExternalFile, u as maybeLoadResponseFormatFromExternalFile } from "./util-oGMLA7vc.js";
-import { n as renderVarsInObject } from "./render-CH-62LbA.js";
-import { h as REQUEST_TIMEOUT_MS, m as LONG_RUNNING_MODEL_TIMEOUT_MS } from "./fetch-Di00EQrc.js";
-import { r as fetchWithCache } from "./cache-D5NZmMiT.js";
-import { t as OpenAiGenericProvider } from "./openai-iYtrXzOX.js";
-import { a as calculateOpenAICost, c as getTokenUsage$1, s as formatOpenAiError } from "./util-D9TisOyk.js";
+import { C as getEnvFloat, T as getEnvString, a as logger, k as state, w as getEnvInt } from "./logger-KD8JjCRJ.js";
+import { _ as LONG_RUNNING_MODEL_TIMEOUT_MS, v as REQUEST_TIMEOUT_MS } from "./fetch-BufrQtvR.js";
+import { r as importModule } from "./esm-B6whoAcf.js";
+import { n as renderVarsInObject } from "./render-_6ur1fhE.js";
+import { o as isJavascriptFile } from "./shared-BoG7qLMv.js";
+import { r as fetchWithCache } from "./cache-roFAE0cI.js";
+import { N as maybeLoadResponseFormatFromExternalFile, P as maybeLoadToolsFromExternalFile } from "./util-I-Rf-KaD.js";
+import { t as OpenAiGenericProvider } from "./openai-BMHD2Huo.js";
+import { a as calculateOpenAICost, c as getTokenUsage$1, s as formatOpenAiError } from "./util-efByNxcr.js";
 import path from "path";
 //#region src/providers/functionCallbackUtils.ts
 /**
@@ -452,7 +452,9 @@ var OpenAiResponsesProvider = class extends OpenAiGenericProvider {
 		"gpt-5.4-pro-2026-03-05",
 		"gpt-audio",
 		"gpt-audio-2025-08-28",
+		"gpt-audio-1.5",
 		"gpt-audio-mini",
+		"gpt-audio-mini-2025-12-15",
 		"gpt-audio-mini-2025-10-06",
 		"computer-use-preview",
 		"computer-use-preview-2025-03-11",
@@ -499,6 +501,30 @@ var OpenAiResponsesProvider = class extends OpenAiGenericProvider {
 	supportsTemperature() {
 		return !this.isReasoningModel();
 	}
+	isAzureOpenAiEndpoint(value) {
+		if (!value) return false;
+		const endpoint = /^[a-z][a-z0-9+.-]*:\/\//i.test(value) ? value : `https://${value}`;
+		try {
+			const hostname = new URL(endpoint).hostname.toLowerCase();
+			return hostname === "openai.azure.com" || hostname.endsWith(".openai.azure.com");
+		} catch {
+			return false;
+		}
+	}
+	getDeploymentCapabilities(config) {
+		const hasAzureCustomDeploymentHost = [
+			config.apiHost,
+			config.apiBaseUrl,
+			this.getApiUrl()
+		].some((endpoint) => this.isAzureOpenAiEndpoint(endpoint));
+		const isAzureResponsesDeploymentWithReasoningConfig = hasAzureCustomDeploymentHost && (config.reasoning !== void 0 || config.reasoning_effort !== void 0);
+		const isAzureResponsesDeploymentWithVerbosityConfig = hasAzureCustomDeploymentHost && config.verbosity !== void 0;
+		return {
+			isAzureResponsesDeploymentWithReasoningConfig,
+			isReasoningModel: this.isReasoningModel() || isAzureResponsesDeploymentWithReasoningConfig,
+			isGPT5Model: this.isGPT5Model() || isAzureResponsesDeploymentWithVerbosityConfig
+		};
+	}
 	async getOpenAiBody(prompt, context, _callApiOptions) {
 		const config = {
 			...this.config,
@@ -512,13 +538,17 @@ var OpenAiResponsesProvider = class extends OpenAiGenericProvider {
 		} catch {
 			input = prompt;
 		}
-		const isReasoningModel = this.isReasoningModel();
+		const { isAzureResponsesDeploymentWithReasoningConfig, isReasoningModel, isGPT5Model } = this.getDeploymentCapabilities(config);
 		const maxOutputTokensDefault = config.omitDefaults ? getEnvString("OPENAI_MAX_TOKENS") === void 0 ? void 0 : getEnvInt("OPENAI_MAX_TOKENS") : getEnvInt("OPENAI_MAX_TOKENS", 1024);
 		const reasoningMaxOutputTokensDefault = getEnvInt("OPENAI_MAX_COMPLETION_TOKENS") ?? getEnvInt("OPENAI_MAX_TOKENS");
 		const maxOutputTokens = config.max_output_tokens ?? (isReasoningModel ? reasoningMaxOutputTokensDefault : maxOutputTokensDefault);
+		const renderedReasoning = renderVarsInObject(config.reasoning, context?.vars);
+		const renderedReasoningEffort = isReasoningModel ? renderVarsInObject(config.reasoning_effort, context?.vars) : void 0;
+		const effectiveReasoningEffort = renderedReasoning?.effort ?? renderedReasoningEffort;
+		const hasAzureReasoningEffort = isAzureResponsesDeploymentWithReasoningConfig && effectiveReasoningEffort !== void 0 && effectiveReasoningEffort !== "none";
 		const temperatureDefault = config.omitDefaults ? getEnvString("OPENAI_TEMPERATURE") === void 0 ? void 0 : getEnvFloat("OPENAI_TEMPERATURE") : getEnvFloat("OPENAI_TEMPERATURE", 0);
-		const temperature = this.supportsTemperature() ? config.temperature ?? temperatureDefault : void 0;
-		const reasoningEffort = isReasoningModel ? renderVarsInObject(config.reasoning_effort, context?.vars) : void 0;
+		const temperature = this.supportsTemperature() && !hasAzureReasoningEffort ? config.temperature ?? temperatureDefault : void 0;
+		const reasoningEffort = isReasoningModel ? effectiveReasoningEffort : void 0;
 		const instructions = config.instructions;
 		const responseFormat = maybeLoadResponseFormatFromExternalFile(config.response_format, context?.vars);
 		let textFormat;
@@ -533,7 +563,7 @@ var OpenAiResponsesProvider = class extends OpenAiGenericProvider {
 			} };
 		} else textFormat = { format: { type: "text" } };
 		else textFormat = { format: { type: "text" } };
-		if (this.isGPT5Model() && config.verbosity) textFormat = {
+		if (isGPT5Model && config.verbosity) textFormat = {
 			...textFormat,
 			verbosity: config.verbosity
 		};
@@ -561,7 +591,11 @@ var OpenAiResponsesProvider = class extends OpenAiGenericProvider {
 			...config.user ? { user: config.user } : {},
 			...config.passthrough || {}
 		};
-		if (config.reasoning && this.isReasoningModel()) body.reasoning = config.reasoning;
+		if (renderedReasoning && isReasoningModel) body.reasoning = {
+			...body.reasoning,
+			...renderedReasoning
+		};
+		if ("max_tokens" in body) delete body.max_tokens;
 		if ("max_tokens" in body) delete body.max_tokens;
 		return {
 			body,
@@ -666,4 +700,4 @@ var OpenAiResponsesProvider = class extends OpenAiGenericProvider {
 //#endregion
 export { ResponsesProcessor as n, FunctionCallbackHandler as r, OpenAiResponsesProvider as t };
 
-//# sourceMappingURL=responses--OsX2aYW.js.map
+//# sourceMappingURL=responses-B6ktc3Ra.js.map

package/dist/src/{responses-C-flexAY.js → responses-URRzV8qE.js}

@@ -1,12 +1,12 @@
-import { C as getEnvFloat, T as getEnvString, a as logger, k as state, w as getEnvInt } from "./logger-B88EkIn6.js";
-import { h as REQUEST_TIMEOUT_MS, m as LONG_RUNNING_MODEL_TIMEOUT_MS } from "./fetch-B0Z3Oe4k.js";
-import { r as importModule } from "./esm-Dh4dOLlt.js";
-import { n as renderVarsInObject } from "./render-DHIZ6_k8.js";
-import { i as isJavascriptFile } from "./fileExtensions-BArZuxsI.js";
-import { r as fetchWithCache } from "./cache-C4Xb-hNb.js";
-import { D as maybeLoadResponseFormatFromExternalFile, O as maybeLoadToolsFromExternalFile } from "./util-C8e5uydV.js";
-import { t as OpenAiGenericProvider } from "./openai-DhVEmgeZ.js";
-import { a as calculateOpenAICost, c as getTokenUsage$1, s as formatOpenAiError } from "./util-D3q0WQ-0.js";
+import { C as getEnvFloat, T as getEnvString, a as logger, k as state, w as getEnvInt } from "./logger-Ct2S6Yx-.js";
+import { f as LONG_RUNNING_MODEL_TIMEOUT_MS, p as REQUEST_TIMEOUT_MS } from "./fetch-It34O8Ur.js";
+import { i as isJavascriptFile } from "./fileExtensions-CXRfY3Ss.js";
+import { r as importModule } from "./esm-BTK1W7lG.js";
+import { n as renderVarsInObject } from "./render-DFfDeYUK.js";
+import { D as maybeLoadResponseFormatFromExternalFile, O as maybeLoadToolsFromExternalFile } from "./util-Bx677_k2.js";
+import { r as fetchWithCache } from "./cache-DIXbtkNO.js";
+import { t as OpenAiGenericProvider } from "./openai-zgwBb4Ff.js";
+import { a as calculateOpenAICost, c as getTokenUsage$1, s as formatOpenAiError } from "./util-LKTmNsMQ.js";
 import path from "path";
 //#region src/providers/functionCallbackUtils.ts
 /**
@@ -452,7 +452,9 @@ var OpenAiResponsesProvider = class extends OpenAiGenericProvider {
 		"gpt-5.4-pro-2026-03-05",
 		"gpt-audio",
 		"gpt-audio-2025-08-28",
+		"gpt-audio-1.5",
 		"gpt-audio-mini",
+		"gpt-audio-mini-2025-12-15",
 		"gpt-audio-mini-2025-10-06",
 		"computer-use-preview",
 		"computer-use-preview-2025-03-11",
@@ -499,6 +501,30 @@ var OpenAiResponsesProvider = class extends OpenAiGenericProvider {
 	supportsTemperature() {
 		return !this.isReasoningModel();
 	}
+	isAzureOpenAiEndpoint(value) {
+		if (!value) return false;
+		const endpoint = /^[a-z][a-z0-9+.-]*:\/\//i.test(value) ? value : `https://${value}`;
+		try {
+			const hostname = new URL(endpoint).hostname.toLowerCase();
+			return hostname === "openai.azure.com" || hostname.endsWith(".openai.azure.com");
+		} catch {
+			return false;
+		}
+	}
+	getDeploymentCapabilities(config) {
+		const hasAzureCustomDeploymentHost = [
+			config.apiHost,
+			config.apiBaseUrl,
+			this.getApiUrl()
+		].some((endpoint) => this.isAzureOpenAiEndpoint(endpoint));
+		const isAzureResponsesDeploymentWithReasoningConfig = hasAzureCustomDeploymentHost && (config.reasoning !== void 0 || config.reasoning_effort !== void 0);
+		const isAzureResponsesDeploymentWithVerbosityConfig = hasAzureCustomDeploymentHost && config.verbosity !== void 0;
+		return {
+			isAzureResponsesDeploymentWithReasoningConfig,
+			isReasoningModel: this.isReasoningModel() || isAzureResponsesDeploymentWithReasoningConfig,
+			isGPT5Model: this.isGPT5Model() || isAzureResponsesDeploymentWithVerbosityConfig
+		};
+	}
 	async getOpenAiBody(prompt, context, _callApiOptions) {
 		const config = {
 			...this.config,
@@ -512,13 +538,17 @@ var OpenAiResponsesProvider = class extends OpenAiGenericProvider {
 		} catch {
 			input = prompt;
 		}
-		const isReasoningModel = this.isReasoningModel();
+		const { isAzureResponsesDeploymentWithReasoningConfig, isReasoningModel, isGPT5Model } = this.getDeploymentCapabilities(config);
 		const maxOutputTokensDefault = config.omitDefaults ? getEnvString("OPENAI_MAX_TOKENS") === void 0 ? void 0 : getEnvInt("OPENAI_MAX_TOKENS") : getEnvInt("OPENAI_MAX_TOKENS", 1024);
 		const reasoningMaxOutputTokensDefault = getEnvInt("OPENAI_MAX_COMPLETION_TOKENS") ?? getEnvInt("OPENAI_MAX_TOKENS");
 		const maxOutputTokens = config.max_output_tokens ?? (isReasoningModel ? reasoningMaxOutputTokensDefault : maxOutputTokensDefault);
+		const renderedReasoning = renderVarsInObject(config.reasoning, context?.vars);
+		const renderedReasoningEffort = isReasoningModel ? renderVarsInObject(config.reasoning_effort, context?.vars) : void 0;
+		const effectiveReasoningEffort = renderedReasoning?.effort ?? renderedReasoningEffort;
+		const hasAzureReasoningEffort = isAzureResponsesDeploymentWithReasoningConfig && effectiveReasoningEffort !== void 0 && effectiveReasoningEffort !== "none";
 		const temperatureDefault = config.omitDefaults ? getEnvString("OPENAI_TEMPERATURE") === void 0 ? void 0 : getEnvFloat("OPENAI_TEMPERATURE") : getEnvFloat("OPENAI_TEMPERATURE", 0);
-		const temperature = this.supportsTemperature() ? config.temperature ?? temperatureDefault : void 0;
-		const reasoningEffort = isReasoningModel ? renderVarsInObject(config.reasoning_effort, context?.vars) : void 0;
+		const temperature = this.supportsTemperature() && !hasAzureReasoningEffort ? config.temperature ?? temperatureDefault : void 0;
+		const reasoningEffort = isReasoningModel ? effectiveReasoningEffort : void 0;
 		const instructions = config.instructions;
 		const responseFormat = maybeLoadResponseFormatFromExternalFile(config.response_format, context?.vars);
 		let textFormat;
@@ -533,7 +563,7 @@ var OpenAiResponsesProvider = class extends OpenAiGenericProvider {
 			} };
 		} else textFormat = { format: { type: "text" } };
 		else textFormat = { format: { type: "text" } };
-		if (this.isGPT5Model() && config.verbosity) textFormat = {
+		if (isGPT5Model && config.verbosity) textFormat = {
 			...textFormat,
 			verbosity: config.verbosity
 		};
@@ -561,7 +591,11 @@ var OpenAiResponsesProvider = class extends OpenAiGenericProvider {
 			...config.user ? { user: config.user } : {},
 			...config.passthrough || {}
 		};
-		if (config.reasoning && this.isReasoningModel()) body.reasoning = config.reasoning;
+		if (renderedReasoning && isReasoningModel) body.reasoning = {
+			...body.reasoning,
+			...renderedReasoning
+		};
+		if ("max_tokens" in body) delete body.max_tokens;
 		if ("max_tokens" in body) delete body.max_tokens;
 		return {
 			body,
@@ -666,4 +700,4 @@ var OpenAiResponsesProvider = class extends OpenAiGenericProvider {
 //#endregion
 export { ResponsesProcessor as n, FunctionCallbackHandler as r, OpenAiResponsesProvider as t };
 
-//# sourceMappingURL=responses-C-flexAY.js.map
+//# sourceMappingURL=responses-URRzV8qE.js.map

package/dist/src/rolldown-runtime-D_mwlA32.cjs

@@ -0,0 +1,43 @@
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+//#endregion
+Object.defineProperty(exports, "__exportAll", {
+	enumerable: true,
+	get: function() {
+		return __exportAll;
+	}
+});
+Object.defineProperty(exports, "__toESM", {
+	enumerable: true,
+	get: function() {
+		return __toESM;
+	}
+});

package/dist/src/rubyUtils-BYVlQ94c.js

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import { n as runRuby } from "./rubyUtils-CXlFM2rR.js";
+export { runRuby };

package/dist/src/{rubyUtils-DsGrTx8R.js → rubyUtils-CXlFM2rR.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { O as getEnvString, s as logger, x as safeJsonStringify } from "./logger-DksKw1Qc.js";
-import { n as getWrapperDir } from "./esm-tVgYPY-f.js";
+import { O as getEnvString, s as logger, x as safeJsonStringify } from "./logger-BbY6ypFL.js";
+import { n as getWrapperDir } from "./esm-Bexx2PFc.js";
 import fs from "fs";
 import path from "path";
 import os from "os";
@@ -212,4 +212,4 @@ async function runRuby(scriptPath, method, args, options = {}) {
 //#endregion
 export { validateRubyPath as a, tryPath as i, runRuby as n, state as r, getSysExecutable as t };
 
-//# sourceMappingURL=rubyUtils-DsGrTx8R.js.map
+//# sourceMappingURL=rubyUtils-CXlFM2rR.js.map

package/dist/src/{rubyUtils-DVLeA2jg.js → rubyUtils-CnlW8AYb.js}

@@ -1,11 +1,11 @@
 import { t as __exportAll } from "./chunk-DEq-mXcV.js";
 import { T as getEnvString, a as logger, y as safeJsonStringify } from "./logger-Ct2S6Yx-.js";
-import { n as getWrapperDir } from "./esm-C7PnfdF8.js";
+import { n as getWrapperDir } from "./esm-BTK1W7lG.js";
 import fs from "fs";
 import path from "path";
 import os from "os";
-import { execFile } from "child_process";
 import { promisify } from "util";
+import { execFile } from "child_process";
 //#region src/ruby/rubyUtils.ts
 var rubyUtils_exports = /* @__PURE__ */ __exportAll({
 	getSysExecutable: () => getSysExecutable,
@@ -219,4 +219,4 @@ async function runRuby(scriptPath, method, args, options = {}) {
 //#endregion
 export { runRuby as n, rubyUtils_exports as t };
 
-//# sourceMappingURL=rubyUtils-DVLeA2jg.js.map
+//# sourceMappingURL=rubyUtils-CnlW8AYb.js.map

package/dist/src/{rubyUtils-B6eljPuh.cjs → rubyUtils-CqUWBZAt.cjs}

@@ -1,14 +1,23 @@
-const require_logger = require("./logger-COuQb2xB.cjs");
-const require_esm = require("./esm-CtEPLdAj.cjs");
+const require_rolldown_runtime = require("./rolldown-runtime-D_mwlA32.cjs");
+const require_logger = require("./logger-cfNpzI4o.cjs");
+const require_esm = require("./esm-BIKakvNa.cjs");
 let fs = require("fs");
-fs = require_logger.__toESM(fs);
+fs = require_rolldown_runtime.__toESM(fs, 1);
 let path = require("path");
-path = require_logger.__toESM(path);
+path = require_rolldown_runtime.__toESM(path, 1);
 let os = require("os");
-os = require_logger.__toESM(os);
+os = require_rolldown_runtime.__toESM(os, 1);
+let util = require("util");
 let child_process = require("child_process");
 //#region src/ruby/rubyUtils.ts
-const execFileAsync = (0, require("util").promisify)(child_process.execFile);
+var rubyUtils_exports = /* @__PURE__ */ require_rolldown_runtime.__exportAll({
+	getSysExecutable: () => getSysExecutable,
+	runRuby: () => runRuby,
+	state: () => state,
+	tryPath: () => tryPath,
+	validateRubyPath: () => validateRubyPath
+});
+const execFileAsync = (0, util.promisify)(child_process.execFile);
 /**
 * Global state for Ruby executable path caching.
 * Ensures consistent Ruby executable usage across multiple provider instances.
@@ -211,10 +220,10 @@ async function runRuby(scriptPath, method, args, options = {}) {
 	}
 }
 //#endregion
-Object.defineProperty(exports, "getSysExecutable", {
+Object.defineProperty(exports, "rubyUtils_exports", {
 	enumerable: true,
 	get: function() {
-		return getSysExecutable;
+		return rubyUtils_exports;
 	}
 });
 Object.defineProperty(exports, "runRuby", {
@@ -223,23 +232,5 @@ Object.defineProperty(exports, "runRuby", {
 		return runRuby;
 	}
 });
-Object.defineProperty(exports, "state", {
-	enumerable: true,
-	get: function() {
-		return state;
-	}
-});
-Object.defineProperty(exports, "tryPath", {
-	enumerable: true,
-	get: function() {
-		return tryPath;
-	}
-});
-Object.defineProperty(exports, "validateRubyPath", {
-	enumerable: true,
-	get: function() {
-		return validateRubyPath;
-	}
-});
 
-//# sourceMappingURL=rubyUtils-B6eljPuh.cjs.map
+//# sourceMappingURL=rubyUtils-CqUWBZAt.cjs.map

package/dist/src/{rubyUtils-CYSQEG4a.js → rubyUtils-DdGojpfv.js}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./chunk-DEq-mXcV.js";
-import { T as getEnvString, a as logger, y as safeJsonStringify } from "./logger-B88EkIn6.js";
-import { n as getWrapperDir } from "./esm-Dh4dOLlt.js";
+import { T as getEnvString, a as logger, y as safeJsonStringify } from "./logger-KD8JjCRJ.js";
+import { n as getWrapperDir } from "./esm-B6whoAcf.js";
 import fs from "fs";
 import path from "path";
 import os from "os";
@@ -219,4 +219,4 @@ async function runRuby(scriptPath, method, args, options = {}) {
 //#endregion
 export { runRuby as n, rubyUtils_exports as t };
 
-//# sourceMappingURL=rubyUtils-CYSQEG4a.js.map
+//# sourceMappingURL=rubyUtils-DdGojpfv.js.map

package/dist/src/runtimeTransform-BJOpL9Yc.js

@@ -0,0 +1,142 @@
+import { a as logger } from "./logger-KD8JjCRJ.js";
+//#region src/redteam/shared/runtimeTransform.ts
+/**
+* Runtime transform utility for applying strategy transforms per-turn.
+*
+* This module enables multi-turn attack providers (Hydra, Crescendo, etc.)
+* to apply layer transforms (audio, base64, etc.) to each turn's prompt
+* before sending to the target.
+*
+* It reuses existing strategy implementations, avoiding code duplication.
+*/
+/**
+* Applies strategy transforms to a prompt at runtime (per-turn).
+* This is used by multi-turn attack providers to transform each turn's
+* output before sending to the target.
+*
+* @param prompt - The text prompt to transform
+* @param injectVar - The variable name used for injection (e.g., 'query')
+* @param layerConfigs - Array of layer configurations to apply in order
+* @param strategies - The loaded strategies array (to avoid circular imports)
+* @param context - Optional context metadata to pass to layer strategies
+* @returns TransformResult with transformed prompt and audio metadata
+*
+* @example
+* ```typescript
+* // In Hydra provider:
+* const result = await applyRuntimeTransforms(
+*   attackPrompt,
+*   'query',
+*   ['audio', 'base64'],
+*   Strategies,
+*   { evaluationId: context?.evaluationId, purpose: context?.test?.metadata?.purpose }
+* );
+* // result.prompt = transformed, result.audio = { data, format } if audio
+* ```
+*/
+async function applyRuntimeTransforms(prompt, injectVar, layerConfigs, strategies, context) {
+	const originalPrompt = prompt;
+	if (!layerConfigs?.length) return {
+		prompt,
+		originalPrompt
+	};
+	logger.debug(`[RuntimeTransform] Applying ${layerConfigs.length} transforms to prompt`, {
+		hasContext: !!context,
+		hasEvaluationId: !!context?.evaluationId,
+		hasPurpose: !!context?.purpose
+	});
+	let testCase = {
+		vars: { [injectVar]: prompt },
+		assert: [],
+		metadata: {
+			pluginId: "runtime-transform",
+			evaluationId: context?.evaluationId,
+			testCaseId: context?.testCaseId,
+			purpose: context?.purpose,
+			goal: context?.goal
+		}
+	};
+	let audioApplied = false;
+	let imageApplied = false;
+	for (const layer of layerConfigs) {
+		const layerId = typeof layer === "string" ? layer : layer.id;
+		const layerConfig = typeof layer === "string" ? {} : layer.config || {};
+		const strategy = strategies.find((s) => s.id === layerId);
+		if (!strategy) {
+			logger.warn(`[RuntimeTransform] Unknown layer strategy: ${layerId}, skipping`);
+			continue;
+		}
+		logger.debug(`[RuntimeTransform] Applying layer: ${layerId}`);
+		if (layerId === "audio") audioApplied = true;
+		else if (layerId === "image") imageApplied = true;
+		try {
+			const transformed = (await strategy.action([testCase], injectVar, layerConfig))[0];
+			if (transformed) testCase = {
+				...transformed,
+				metadata: {
+					...testCase.metadata,
+					...transformed.metadata,
+					pluginId: testCase.metadata.pluginId
+				}
+			};
+			else logger.warn(`[RuntimeTransform] Layer ${layerId} returned no test cases`);
+		} catch (error) {
+			const errorMsg = `Transform ${layerId} failed: ${error.message || "Unknown error"}`;
+			logger.error(`[RuntimeTransform] ${errorMsg}`, { error });
+			return {
+				prompt: originalPrompt,
+				originalPrompt,
+				error: errorMsg
+			};
+		}
+	}
+	const transformedPrompt = String(testCase.vars?.[injectVar] ?? prompt);
+	logger.debug(`[RuntimeTransform] Transform complete`, {
+		originalLength: prompt.length,
+		resultLength: transformedPrompt.length,
+		layersApplied: layerConfigs.length,
+		audioApplied,
+		imageApplied
+	});
+	const displayVars = {};
+	if (testCase.vars) {
+		for (const [key, value] of Object.entries(testCase.vars)) if (key !== injectVar && typeof value === "string") displayVars[key] = value;
+	}
+	const result = {
+		prompt: transformedPrompt,
+		originalPrompt,
+		...Object.keys(displayVars).length > 0 && { displayVars },
+		metadata: testCase.metadata
+	};
+	const audioStorageKey = testCase.metadata?.audioStorageKey;
+	const imageStorageKey = testCase.metadata?.imageStorageKey;
+	if (audioApplied && transformedPrompt !== originalPrompt) {
+		const dataUrlMatch = transformedPrompt.match(/^data:audio\/([^;]+);base64,(.+)$/);
+		if (dataUrlMatch) result.audio = {
+			data: dataUrlMatch[2],
+			format: dataUrlMatch[1]
+		};
+		else result.audio = {
+			data: transformedPrompt,
+			format: "mp3"
+		};
+		if (audioStorageKey) logger.debug(`[RuntimeTransform] Audio stored to: ${audioStorageKey} (will be sanitized before DB save)`);
+	}
+	if (imageApplied && transformedPrompt !== originalPrompt) {
+		const dataUrlMatch = transformedPrompt.match(/^data:image\/([^;]+);base64,(.+)$/);
+		if (dataUrlMatch) result.image = {
+			data: dataUrlMatch[2],
+			format: dataUrlMatch[1]
+		};
+		else result.image = {
+			data: transformedPrompt,
+			format: "png"
+		};
+		if (imageStorageKey) logger.debug(`[RuntimeTransform] Image stored to: ${imageStorageKey} (will be sanitized before DB save)`);
+	}
+	return result;
+}
+//#endregion
+export { applyRuntimeTransforms as t };
+
+//# sourceMappingURL=runtimeTransform-BJOpL9Yc.js.map