promptfoo 0.121.7 → 0.121.8

package/dist/src/{iterative-DJQEQpG3.js → iterative-B-l0syBV.js}

@@ -1,18 +1,18 @@
 import { a as logger, m as extractFirstJsonObject, w as getEnvInt } from "./logger-Ct2S6Yx-.js";
 import { t as invariant } from "./invariant-Ddh24eXh.js";
-import { l as sleep } from "./fetch-It34O8Ur.js";
-import { o as isLoggedIntoCloud } from "./accounts-Ca7WIoPY.js";
+import { l as sleep } from "./fetch-Doks14zQ.js";
+import { o as isLoggedIntoCloud } from "./accounts-DAv_0iE7.js";
 import { o as getNunjucksEngine } from "./render-DFfDeYUK.js";
-import { l as shouldGenerateRemote } from "./remoteGeneration-DsaSwmG2.js";
+import { l as shouldGenerateRemote } from "./remoteGeneration-CJC3E0aW.js";
 import { a as createEmptyTokenUsage, n as accumulateResponseTokenUsage } from "./tokenUsageUtils-CmnQ0G2m.js";
 import { n as materializeInputVariablesWithMetadata, t as buildPromptInputDescriptions } from "./inputVariables-DUGMb9Ka.js";
-import { a as extractPromptFromTags, o as getSessionId, r as extractInputVarsFromPrompt } from "./util-DNl96nNs.js";
-import { t as PromptfooChatCompletionProvider } from "./promptfoo-Cm4hiy1Y.js";
-import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, m as TokenUsageTracker, n as checkPenalizedPhrases, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-D6IjElRI.js";
-import { n as checkExfilTracking } from "./indirectWebPwn-CbjUG0rh.js";
-import { n as renderPrompt } from "./evaluatorHelpers-DuqFFfq7.js";
-import { t as Strategies } from "./strategies-CiSeroPH.js";
-import { a as fetchTraceContext, i as extractTraceIdFromTraceparent, n as formatTraceForMetadata, r as formatTraceSummary, t as resolveTracingOptions } from "./tracingOptions-ji2OuXbT.js";
+import { a as extractPromptFromTags, o as getSessionId, r as extractInputVarsFromPrompt } from "./util-DpV6KT5i.js";
+import { a as assertRemoteMaterializationHandled, o as buildRemoteMaterializationContextVars, s as buildRemoteMaterializedInputVariables, t as PromptfooChatCompletionProvider } from "./promptfoo-CqEpj6Sr.js";
+import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, m as TokenUsageTracker, n as checkPenalizedPhrases, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-CSIGeGLl.js";
+import { n as checkExfilTracking } from "./indirectWebPwn-CiWB-vVH.js";
+import { n as renderPrompt } from "./evaluatorHelpers-CrRObe2z.js";
+import { t as Strategies } from "./strategies-CD1gHeeQ.js";
+import { a as fetchTraceContext, i as extractTraceIdFromTraceparent, n as formatTraceForMetadata, r as formatTraceSummary, t as resolveTracingOptions } from "./tracingOptions-BOP1FsRt.js";
 import { t as applyRuntimeTransforms } from "./runtimeTransform-DigbjU1r.js";
 import { n as CLOUD_ATTACKER_SYSTEM_PROMPT, r as JUDGE_SYSTEM_PROMPT, t as ATTACKER_SYSTEM_PROMPT } from "./prompts-DHhQsANy.js";
 import dedent from "dedent";
@@ -61,6 +61,7 @@ async function runRedteamConversation({ context, filters, injectVar, numIteratio
 	let stopReason = "Max iterations reached";
 	const sessionIds = [];
 	const totalTokenUsage = createEmptyTokenUsage();
+	const usingRemoteRedteamProvider = shouldGenerateRemote();
 	const previousOutputs = [];
 	let lastResponse = void 0;
 	const tracingOptions = resolveTracingOptions({
@@ -87,7 +88,13 @@ async function runRedteamConversation({ context, filters, injectVar, numIteratio
 				raw: redteamBody,
 				label: "history"
 			},
-			vars: {}
+			vars: usingRemoteRedteamProvider ? buildRemoteMaterializationContextVars({
+				injectVar,
+				inputs,
+				materializationIndex: i,
+				pluginId: String(test?.metadata?.pluginId || "iterative"),
+				purpose: test?.metadata?.purpose
+			}) : {}
 		}, options);
 		TokenUsageTracker.getInstance().trackUsage(redteamProvider.id(), redteamResp.tokenUsage);
 		if (redteamProvider.delay) {
@@ -156,13 +163,16 @@ async function runRedteamConversation({ context, filters, injectVar, numIteratio
 				hasImage: !!lastTransformResult.image
 			});
 		}
+		if (inputs && usingRemoteRedteamProvider) assertRemoteMaterializationHandled(redteamResp, "Iterative multi-input generation");
 		const currentInputVars = extractInputVarsFromPrompt(newInjectVar, inputs);
-		const materializedInputVars = currentInputVars && inputs ? await materializeInputVariablesWithMetadata(currentInputVars, inputs, {
+		let materializedInputVars;
+		if (currentInputVars && inputs) if (usingRemoteRedteamProvider) materializedInputVars = buildRemoteMaterializedInputVariables(redteamResp, currentInputVars, inputs);
+		else materializedInputVars = await materializeInputVariablesWithMetadata(currentInputVars, inputs, {
 			materializationIndex: i,
 			pluginId: String(test?.metadata?.pluginId || "iterative"),
 			provider: redteamProvider,
 			purpose: test?.metadata?.purpose
-		}) : void 0;
+		});
 		const currentRenderInputVars = materializedInputVars?.vars ?? currentInputVars;
 		const updatedVars = {
 			...iterationVars,
@@ -221,7 +231,7 @@ async function runRedteamConversation({ context, filters, injectVar, numIteratio
 		if (sessionId) sessionIds.push(sessionId);
 		let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 		if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
-		const { getGraderById } = await import("./graders-BX0f2tvS.js").then((n) => n.r);
+		const { getGraderById } = await import("./graders-KXzjnIim.js").then((n) => n.r);
 		if (test && assertToUse) {
 			const grader = getGraderById(assertToUse.type);
 			if (grader) {
@@ -488,4 +498,4 @@ var RedteamIterativeProvider = class {
 //#endregion
 export { RedteamIterativeProvider as default };
 
-//# sourceMappingURL=iterative-DJQEQpG3.js.map
+//# sourceMappingURL=iterative-B-l0syBV.js.map

package/dist/src/{iterative-DQBuWM-j.cjs → iterative-BACUeCCz.cjs}

@@ -1,19 +1,19 @@
 const require_rolldown_runtime = require("./rolldown-runtime-D_mwlA32.cjs");
 const require_logger = require("./logger-cfNpzI4o.cjs");
 const require_invariant = require("./invariant-QtnLD03y.cjs");
-const require_fetch = require("./fetch-Dw4XZHjj.cjs");
-const require_accounts = require("./accounts-CmWzeD2d.cjs");
+const require_fetch = require("./fetch-Cfm4EuOB.cjs");
+const require_accounts = require("./accounts-BVz5gHLK.cjs");
 const require_render = require("./render-BNTrbmBw.cjs");
-const require_remoteGeneration = require("./remoteGeneration-DS9N3pgB.cjs");
+const require_remoteGeneration = require("./remoteGeneration-BpIYlb_O.cjs");
 const require_tokenUsageUtils = require("./tokenUsageUtils-_B-P8IAi.cjs");
 const require_inputVariables = require("./inputVariables-Dq9W-Z3a.cjs");
-const require_util = require("./util-CN8om2rz.cjs");
-const require_promptfoo = require("./promptfoo-b-baRMj-.cjs");
-const require_shared = require("./shared-WkgnDkcg.cjs");
-const require_indirectWebPwn = require("./indirectWebPwn-BJ22AbQa.cjs");
-const require_evaluatorHelpers = require("./evaluatorHelpers-CRqTvSux.cjs");
-const require_strategies = require("./strategies-7CS3Alao.cjs");
-const require_tracingOptions = require("./tracingOptions-DrbSFaKy.cjs");
+const require_util = require("./util-DNtUsus_.cjs");
+const require_promptfoo = require("./promptfoo-ClChwT74.cjs");
+const require_shared = require("./shared-aHWko3P1.cjs");
+const require_indirectWebPwn = require("./indirectWebPwn-D7NA9Nsv.cjs");
+const require_evaluatorHelpers = require("./evaluatorHelpers-D06I9WFL.cjs");
+const require_strategies = require("./strategies-CCcnEbFO.cjs");
+const require_tracingOptions = require("./tracingOptions-DFBoE8O0.cjs");
 const require_runtimeTransform = require("./runtimeTransform-ON3YYILw.cjs");
 const require_prompts = require("./prompts-hNvWBD3z.cjs");
 let dedent = require("dedent");
@@ -63,6 +63,7 @@ async function runRedteamConversation({ context, filters, injectVar, numIteratio
 	let stopReason = "Max iterations reached";
 	const sessionIds = [];
 	const totalTokenUsage = require_tokenUsageUtils.createEmptyTokenUsage();
+	const usingRemoteRedteamProvider = require_remoteGeneration.shouldGenerateRemote();
 	const previousOutputs = [];
 	let lastResponse = void 0;
 	const tracingOptions = require_tracingOptions.resolveTracingOptions({
@@ -89,7 +90,13 @@ async function runRedteamConversation({ context, filters, injectVar, numIteratio
 				raw: redteamBody,
 				label: "history"
 			},
-			vars: {}
+			vars: usingRemoteRedteamProvider ? require_promptfoo.buildRemoteMaterializationContextVars({
+				injectVar,
+				inputs,
+				materializationIndex: i,
+				pluginId: String(test?.metadata?.pluginId || "iterative"),
+				purpose: test?.metadata?.purpose
+			}) : {}
 		}, options);
 		require_shared.TokenUsageTracker.getInstance().trackUsage(redteamProvider.id(), redteamResp.tokenUsage);
 		if (redteamProvider.delay) {
@@ -158,13 +165,16 @@ async function runRedteamConversation({ context, filters, injectVar, numIteratio
 				hasImage: !!lastTransformResult.image
 			});
 		}
+		if (inputs && usingRemoteRedteamProvider) require_promptfoo.assertRemoteMaterializationHandled(redteamResp, "Iterative multi-input generation");
 		const currentInputVars = require_util.extractInputVarsFromPrompt(newInjectVar, inputs);
-		const materializedInputVars = currentInputVars && inputs ? await require_inputVariables.materializeInputVariablesWithMetadata(currentInputVars, inputs, {
+		let materializedInputVars;
+		if (currentInputVars && inputs) if (usingRemoteRedteamProvider) materializedInputVars = require_promptfoo.buildRemoteMaterializedInputVariables(redteamResp, currentInputVars, inputs);
+		else materializedInputVars = await require_inputVariables.materializeInputVariablesWithMetadata(currentInputVars, inputs, {
 			materializationIndex: i,
 			pluginId: String(test?.metadata?.pluginId || "iterative"),
 			provider: redteamProvider,
 			purpose: test?.metadata?.purpose
-		}) : void 0;
+		});
 		const currentRenderInputVars = materializedInputVars?.vars ?? currentInputVars;
 		const updatedVars = {
 			...iterationVars,
@@ -223,7 +233,7 @@ async function runRedteamConversation({ context, filters, injectVar, numIteratio
 		if (sessionId) sessionIds.push(sessionId);
 		let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 		if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
-		const { getGraderById } = await Promise.resolve().then(() => require("./graders-ClrU2fnd.cjs")).then((n) => n.graders_exports);
+		const { getGraderById } = await Promise.resolve().then(() => require("./graders-CBQ2s6gz.cjs")).then((n) => n.graders_exports);
 		if (test && assertToUse) {
 			const grader = getGraderById(assertToUse.type);
 			if (grader) {
@@ -490,4 +500,4 @@ var RedteamIterativeProvider = class {
 //#endregion
 exports.default = RedteamIterativeProvider;
 
-//# sourceMappingURL=iterative-DQBuWM-j.cjs.map
+//# sourceMappingURL=iterative-BACUeCCz.cjs.map

package/dist/src/{iterative-FTS4Bz67.js → iterative-CVwoExo8.js}

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
 import { D as getEnvInt, g as extractFirstJsonObject, s as logger } from "./logger-BbY6ypFL.js";
-import { f as sleep } from "./fetch-DXUnXkVU.js";
+import { f as sleep } from "./fetch-Cpf1U1nO.js";
 import { t as invariant } from "./invariant-B2Rf6avk.js";
-import { c as isLoggedIntoCloud } from "./accounts-CjFnOPmb.js";
+import { c as isLoggedIntoCloud } from "./accounts-D6IBfEE0.js";
 import { o as getNunjucksEngine } from "./render-CSP99NLm.js";
-import { l as shouldGenerateRemote } from "./remoteGeneration-B1_XsKXU.js";
+import { l as shouldGenerateRemote } from "./remoteGeneration-D6UjE2JT.js";
 import { a as createEmptyTokenUsage, n as accumulateResponseTokenUsage } from "./tokenUsageUtils-CDet74yk.js";
 import { r as materializeInputVariablesWithMetadata, t as buildPromptInputDescriptions } from "./inputVariables-DXFdi7AI.js";
-import { a as extractPromptFromTags, o as getSessionId, r as extractInputVarsFromPrompt } from "./util-kDURhgJW.js";
-import { t as PromptfooChatCompletionProvider } from "./promptfoo-Rjp-MeBb.js";
-import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, m as TokenUsageTracker, n as checkPenalizedPhrases, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-9WHQ1oNE.js";
-import { n as checkExfilTracking } from "./indirectWebPwn-uyWdHx04.js";
-import { n as renderPrompt } from "./evaluatorHelpers-BsYP_muT.js";
-import { t as Strategies } from "./strategies-DRJjGTIY.js";
-import { a as fetchTraceContext, i as extractTraceIdFromTraceparent, n as formatTraceForMetadata, r as formatTraceSummary, t as resolveTracingOptions } from "./tracingOptions-BnwKCkSB.js";
+import { a as extractPromptFromTags, o as getSessionId, r as extractInputVarsFromPrompt } from "./util-ETfU_sS9.js";
+import { a as assertRemoteMaterializationHandled, o as buildRemoteMaterializationContextVars, s as buildRemoteMaterializedInputVariables, t as PromptfooChatCompletionProvider } from "./promptfoo-BU4_0J85.js";
+import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, m as TokenUsageTracker, n as checkPenalizedPhrases, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-DNvim54U.js";
+import { n as checkExfilTracking } from "./indirectWebPwn-BMTXXznx.js";
+import { n as renderPrompt } from "./evaluatorHelpers-D1_kwvyp.js";
+import { t as Strategies } from "./strategies-CBI1brSy.js";
+import { a as fetchTraceContext, i as extractTraceIdFromTraceparent, n as formatTraceForMetadata, r as formatTraceSummary, t as resolveTracingOptions } from "./tracingOptions-xhjOg2b1.js";
 import { t as applyRuntimeTransforms } from "./runtimeTransform-Dgh_D7DU.js";
 import { n as CLOUD_ATTACKER_SYSTEM_PROMPT, r as JUDGE_SYSTEM_PROMPT, t as ATTACKER_SYSTEM_PROMPT } from "./prompts-C-bqE1Yp.js";
 import dedent from "dedent";
@@ -62,6 +62,7 @@ async function runRedteamConversation({ context, filters, injectVar, numIteratio
 	let stopReason = "Max iterations reached";
 	const sessionIds = [];
 	const totalTokenUsage = createEmptyTokenUsage();
+	const usingRemoteRedteamProvider = shouldGenerateRemote();
 	const previousOutputs = [];
 	let lastResponse = void 0;
 	const tracingOptions = resolveTracingOptions({
@@ -88,7 +89,13 @@ async function runRedteamConversation({ context, filters, injectVar, numIteratio
 				raw: redteamBody,
 				label: "history"
 			},
-			vars: {}
+			vars: usingRemoteRedteamProvider ? buildRemoteMaterializationContextVars({
+				injectVar,
+				inputs,
+				materializationIndex: i,
+				pluginId: String(test?.metadata?.pluginId || "iterative"),
+				purpose: test?.metadata?.purpose
+			}) : {}
 		}, options);
 		TokenUsageTracker.getInstance().trackUsage(redteamProvider.id(), redteamResp.tokenUsage);
 		if (redteamProvider.delay) {
@@ -157,13 +164,16 @@ async function runRedteamConversation({ context, filters, injectVar, numIteratio
 				hasImage: !!lastTransformResult.image
 			});
 		}
+		if (inputs && usingRemoteRedteamProvider) assertRemoteMaterializationHandled(redteamResp, "Iterative multi-input generation");
 		const currentInputVars = extractInputVarsFromPrompt(newInjectVar, inputs);
-		const materializedInputVars = currentInputVars && inputs ? await materializeInputVariablesWithMetadata(currentInputVars, inputs, {
+		let materializedInputVars;
+		if (currentInputVars && inputs) if (usingRemoteRedteamProvider) materializedInputVars = buildRemoteMaterializedInputVariables(redteamResp, currentInputVars, inputs);
+		else materializedInputVars = await materializeInputVariablesWithMetadata(currentInputVars, inputs, {
 			materializationIndex: i,
 			pluginId: String(test?.metadata?.pluginId || "iterative"),
 			provider: redteamProvider,
 			purpose: test?.metadata?.purpose
-		}) : void 0;
+		});
 		const currentRenderInputVars = materializedInputVars?.vars ?? currentInputVars;
 		const updatedVars = {
 			...iterationVars,
@@ -222,7 +232,7 @@ async function runRedteamConversation({ context, filters, injectVar, numIteratio
 		if (sessionId) sessionIds.push(sessionId);
 		let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 		if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
-		const { getGraderById } = await import("./graders-BDT7dif6.js");
+		const { getGraderById } = await import("./graders-B3D7kCcD.js");
 		if (test && assertToUse) {
 			const grader = getGraderById(assertToUse.type);
 			if (grader) {
@@ -489,4 +499,4 @@ var RedteamIterativeProvider = class {
 //#endregion
 export { RedteamIterativeProvider as default };
 
-//# sourceMappingURL=iterative-FTS4Bz67.js.map
+//# sourceMappingURL=iterative-CVwoExo8.js.map

package/dist/src/{iterative-CpU6i2As.js → iterative-QDrGSyss.js}

@@ -1,17 +1,17 @@
 import { a as logger, m as extractFirstJsonObject, w as getEnvInt } from "./logger-KD8JjCRJ.js";
-import { m as sleep } from "./fetch-BufrQtvR.js";
+import { m as sleep } from "./fetch-BSSAcMxf.js";
 import { t as invariant } from "./invariant-DIYf9sP1.js";
-import { c as isLoggedIntoCloud } from "./accounts-DanM1wq_.js";
+import { c as isLoggedIntoCloud } from "./accounts-BWjqwsrf.js";
 import { o as getNunjucksEngine } from "./render-_6ur1fhE.js";
-import { l as shouldGenerateRemote } from "./remoteGeneration-COpWcmWd.js";
+import { l as shouldGenerateRemote } from "./remoteGeneration--D6WjzUm.js";
 import { a as createEmptyTokenUsage, n as accumulateResponseTokenUsage } from "./tokenUsageUtils-BjVkdk18.js";
 import { r as materializeInputVariablesWithMetadata, t as buildPromptInputDescriptions } from "./inputVariables-B0qUChbV.js";
-import { a as extractPromptFromTags, o as getSessionId, r as extractInputVarsFromPrompt } from "./util-Df8YMvS1.js";
-import { t as PromptfooChatCompletionProvider } from "./promptfoo-BDrfT30-.js";
-import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, m as TokenUsageTracker, n as checkPenalizedPhrases, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-7pmVZLNO.js";
-import { n as checkExfilTracking } from "./indirectWebPwn-tNx9OZ35.js";
+import { a as extractPromptFromTags, o as getSessionId, r as extractInputVarsFromPrompt } from "./util-DGqkTb2-.js";
+import { a as assertRemoteMaterializationHandled, o as buildRemoteMaterializationContextVars, s as buildRemoteMaterializedInputVariables, t as PromptfooChatCompletionProvider } from "./promptfoo-CReYAtfb.js";
+import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, m as TokenUsageTracker, n as checkPenalizedPhrases, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-CRq0gGVf.js";
+import { n as checkExfilTracking } from "./indirectWebPwn-BZFPV7Q9.js";
 import { n as renderPrompt, t as Strategies } from "./server/index.js";
-import { a as fetchTraceContext, i as extractTraceIdFromTraceparent, n as formatTraceForMetadata, r as formatTraceSummary, t as resolveTracingOptions } from "./tracingOptions-Chi74lOD.js";
+import { a as fetchTraceContext, i as extractTraceIdFromTraceparent, n as formatTraceForMetadata, r as formatTraceSummary, t as resolveTracingOptions } from "./tracingOptions-BvmDa_jH.js";
 import { t as applyRuntimeTransforms } from "./runtimeTransform-BJOpL9Yc.js";
 import { n as CLOUD_ATTACKER_SYSTEM_PROMPT, r as JUDGE_SYSTEM_PROMPT, t as ATTACKER_SYSTEM_PROMPT } from "./prompts-BYMtqPCw.js";
 import dedent from "dedent";
@@ -60,6 +60,7 @@ async function runRedteamConversation({ context, filters, injectVar, numIteratio
 	let stopReason = "Max iterations reached";
 	const sessionIds = [];
 	const totalTokenUsage = createEmptyTokenUsage();
+	const usingRemoteRedteamProvider = shouldGenerateRemote();
 	const previousOutputs = [];
 	let lastResponse = void 0;
 	const tracingOptions = resolveTracingOptions({
@@ -86,7 +87,13 @@ async function runRedteamConversation({ context, filters, injectVar, numIteratio
 				raw: redteamBody,
 				label: "history"
 			},
-			vars: {}
+			vars: usingRemoteRedteamProvider ? buildRemoteMaterializationContextVars({
+				injectVar,
+				inputs,
+				materializationIndex: i,
+				pluginId: String(test?.metadata?.pluginId || "iterative"),
+				purpose: test?.metadata?.purpose
+			}) : {}
 		}, options);
 		TokenUsageTracker.getInstance().trackUsage(redteamProvider.id(), redteamResp.tokenUsage);
 		if (redteamProvider.delay) {
@@ -155,13 +162,16 @@ async function runRedteamConversation({ context, filters, injectVar, numIteratio
 				hasImage: !!lastTransformResult.image
 			});
 		}
+		if (inputs && usingRemoteRedteamProvider) assertRemoteMaterializationHandled(redteamResp, "Iterative multi-input generation");
 		const currentInputVars = extractInputVarsFromPrompt(newInjectVar, inputs);
-		const materializedInputVars = currentInputVars && inputs ? await materializeInputVariablesWithMetadata(currentInputVars, inputs, {
+		let materializedInputVars;
+		if (currentInputVars && inputs) if (usingRemoteRedteamProvider) materializedInputVars = buildRemoteMaterializedInputVariables(redteamResp, currentInputVars, inputs);
+		else materializedInputVars = await materializeInputVariablesWithMetadata(currentInputVars, inputs, {
 			materializationIndex: i,
 			pluginId: String(test?.metadata?.pluginId || "iterative"),
 			provider: redteamProvider,
 			purpose: test?.metadata?.purpose
-		}) : void 0;
+		});
 		const currentRenderInputVars = materializedInputVars?.vars ?? currentInputVars;
 		const updatedVars = {
 			...iterationVars,
@@ -220,7 +230,7 @@ async function runRedteamConversation({ context, filters, injectVar, numIteratio
 		if (sessionId) sessionIds.push(sessionId);
 		let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 		if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
-		const { getGraderById } = await import("./graders-C0nXU_ZP.js").then((n) => n.r);
+		const { getGraderById } = await import("./graders-DaRU98zs.js").then((n) => n.r);
 		if (test && assertToUse) {
 			const grader = getGraderById(assertToUse.type);
 			if (grader) {
@@ -487,4 +497,4 @@ var RedteamIterativeProvider = class {
 //#endregion
 export { RedteamIterativeProvider as default };
 
-//# sourceMappingURL=iterative-CpU6i2As.js.map
+//# sourceMappingURL=iterative-QDrGSyss.js.map

package/dist/src/{iterativeImage-BUABMVOA.js → iterativeImage-BQg2OwA6.js}

@@ -1,10 +1,10 @@
 import { a as logger, m as extractFirstJsonObject, w as getEnvInt } from "./logger-KD8JjCRJ.js";
-import { m as sleep } from "./fetch-BufrQtvR.js";
+import { m as sleep } from "./fetch-BSSAcMxf.js";
 import { t as invariant } from "./invariant-DIYf9sP1.js";
 import { a as extractVariablesFromTemplates, o as getNunjucksEngine } from "./render-_6ur1fhE.js";
 import { a as createEmptyTokenUsage, n as accumulateResponseTokenUsage } from "./tokenUsageUtils-BjVkdk18.js";
 import { r as materializeInputVariablesWithMetadata, t as buildPromptInputDescriptions } from "./inputVariables-B0qUChbV.js";
-import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, m as TokenUsageTracker, r as createIterationContext } from "./shared-7pmVZLNO.js";
+import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, m as TokenUsageTracker, r as createIterationContext } from "./shared-CRq0gGVf.js";
 import { n as renderPrompt } from "./server/index.js";
 import dedent from "dedent";
 //#region src/redteam/providers/iterativeImage.ts
@@ -410,4 +410,4 @@ var RedteamIterativeProvider = class {
 //#endregion
 export { RedteamIterativeProvider as default };
 
-//# sourceMappingURL=iterativeImage-BUABMVOA.js.map
+//# sourceMappingURL=iterativeImage-BQg2OwA6.js.map

package/dist/src/{iterativeImage-Doz8mgxF.js → iterativeImage-Bwn0fM75.js}

@@ -1,11 +1,11 @@
 import { a as logger, m as extractFirstJsonObject, w as getEnvInt } from "./logger-Ct2S6Yx-.js";
 import { t as invariant } from "./invariant-Ddh24eXh.js";
-import { l as sleep } from "./fetch-It34O8Ur.js";
+import { l as sleep } from "./fetch-Doks14zQ.js";
 import { a as extractVariablesFromTemplates, o as getNunjucksEngine } from "./render-DFfDeYUK.js";
 import { a as createEmptyTokenUsage, n as accumulateResponseTokenUsage } from "./tokenUsageUtils-CmnQ0G2m.js";
 import { n as materializeInputVariablesWithMetadata, t as buildPromptInputDescriptions } from "./inputVariables-DUGMb9Ka.js";
-import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, m as TokenUsageTracker, r as createIterationContext } from "./shared-D6IjElRI.js";
-import { n as renderPrompt } from "./evaluatorHelpers-DuqFFfq7.js";
+import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, m as TokenUsageTracker, r as createIterationContext } from "./shared-CSIGeGLl.js";
+import { n as renderPrompt } from "./evaluatorHelpers-CrRObe2z.js";
 import dedent from "dedent";
 //#region src/redteam/providers/iterativeImage.ts
 const ATTACKER_SYSTEM_PROMPT = dedent`
@@ -410,4 +410,4 @@ var RedteamIterativeProvider = class {
 //#endregion
 export { RedteamIterativeProvider as default };
 
-//# sourceMappingURL=iterativeImage-Doz8mgxF.js.map
+//# sourceMappingURL=iterativeImage-Bwn0fM75.js.map

package/dist/src/{iterativeImage-ByFWkxax.cjs → iterativeImage-CcgVyASo.cjs}

@@ -1,12 +1,12 @@
 const require_rolldown_runtime = require("./rolldown-runtime-D_mwlA32.cjs");
 const require_logger = require("./logger-cfNpzI4o.cjs");
 const require_invariant = require("./invariant-QtnLD03y.cjs");
-const require_fetch = require("./fetch-Dw4XZHjj.cjs");
+const require_fetch = require("./fetch-Cfm4EuOB.cjs");
 const require_render = require("./render-BNTrbmBw.cjs");
 const require_tokenUsageUtils = require("./tokenUsageUtils-_B-P8IAi.cjs");
 const require_inputVariables = require("./inputVariables-Dq9W-Z3a.cjs");
-const require_shared = require("./shared-WkgnDkcg.cjs");
-const require_evaluatorHelpers = require("./evaluatorHelpers-CRqTvSux.cjs");
+const require_shared = require("./shared-aHWko3P1.cjs");
+const require_evaluatorHelpers = require("./evaluatorHelpers-D06I9WFL.cjs");
 let dedent = require("dedent");
 dedent = require_rolldown_runtime.__toESM(dedent, 1);
 //#region src/redteam/providers/iterativeImage.ts
@@ -412,4 +412,4 @@ var RedteamIterativeProvider = class {
 //#endregion
 exports.default = RedteamIterativeProvider;
 
-//# sourceMappingURL=iterativeImage-ByFWkxax.cjs.map
+//# sourceMappingURL=iterativeImage-CcgVyASo.cjs.map

package/dist/src/{iterativeImage-BzUapOUi.js → iterativeImage-D_UbQXg4.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { D as getEnvInt, g as extractFirstJsonObject, s as logger } from "./logger-BbY6ypFL.js";
-import { f as sleep } from "./fetch-DXUnXkVU.js";
+import { f as sleep } from "./fetch-Cpf1U1nO.js";
 import { t as invariant } from "./invariant-B2Rf6avk.js";
 import { a as extractVariablesFromTemplates, o as getNunjucksEngine } from "./render-CSP99NLm.js";
 import { a as createEmptyTokenUsage, n as accumulateResponseTokenUsage } from "./tokenUsageUtils-CDet74yk.js";
 import { r as materializeInputVariablesWithMetadata, t as buildPromptInputDescriptions } from "./inputVariables-DXFdi7AI.js";
-import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, m as TokenUsageTracker, r as createIterationContext } from "./shared-9WHQ1oNE.js";
-import { n as renderPrompt } from "./evaluatorHelpers-BsYP_muT.js";
+import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, m as TokenUsageTracker, r as createIterationContext } from "./shared-DNvim54U.js";
+import { n as renderPrompt } from "./evaluatorHelpers-D1_kwvyp.js";
 import dedent from "dedent";
 //#region src/redteam/providers/iterativeImage.ts
 const ATTACKER_SYSTEM_PROMPT = dedent`
@@ -411,4 +411,4 @@ var RedteamIterativeProvider = class {
 //#endregion
 export { RedteamIterativeProvider as default };
 
-//# sourceMappingURL=iterativeImage-BzUapOUi.js.map
+//# sourceMappingURL=iterativeImage-D_UbQXg4.js.map

package/dist/src/{iterativeMeta-C7APE_P1.js → iterativeMeta-CIu-CHRS.js}

@@ -1,17 +1,17 @@
 import { a as logger, w as getEnvInt } from "./logger-Ct2S6Yx-.js";
 import { t as invariant } from "./invariant-Ddh24eXh.js";
-import { l as sleep } from "./fetch-It34O8Ur.js";
-import { o as isLoggedIntoCloud } from "./accounts-Ca7WIoPY.js";
-import { l as shouldGenerateRemote, n as getRemoteGenerationExplicitlyDisabledError, s as neverGenerateRemote, t as getRemoteGenerationDisabledError } from "./remoteGeneration-DsaSwmG2.js";
+import { l as sleep } from "./fetch-Doks14zQ.js";
+import { o as isLoggedIntoCloud } from "./accounts-DAv_0iE7.js";
+import { l as shouldGenerateRemote, n as getRemoteGenerationExplicitlyDisabledError, s as neverGenerateRemote, t as getRemoteGenerationDisabledError } from "./remoteGeneration-CJC3E0aW.js";
 import { a as createEmptyTokenUsage, n as accumulateResponseTokenUsage } from "./tokenUsageUtils-CmnQ0G2m.js";
 import { n as materializeInputVariablesWithMetadata } from "./inputVariables-DUGMb9Ka.js";
-import { a as extractPromptFromTags, r as extractInputVarsFromPrompt } from "./util-DNl96nNs.js";
-import { t as PromptfooChatCompletionProvider } from "./promptfoo-Cm4hiy1Y.js";
-import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-D6IjElRI.js";
-import { n as checkExfilTracking } from "./indirectWebPwn-CbjUG0rh.js";
-import { n as renderPrompt } from "./evaluatorHelpers-DuqFFfq7.js";
-import { t as Strategies } from "./strategies-CiSeroPH.js";
-import { a as fetchTraceContext, i as extractTraceIdFromTraceparent, n as formatTraceForMetadata, r as formatTraceSummary, t as resolveTracingOptions } from "./tracingOptions-ji2OuXbT.js";
+import { a as extractPromptFromTags, r as extractInputVarsFromPrompt } from "./util-DpV6KT5i.js";
+import { a as assertRemoteMaterializationHandled, o as buildRemoteMaterializationContextVars, s as buildRemoteMaterializedInputVariables, t as PromptfooChatCompletionProvider } from "./promptfoo-CqEpj6Sr.js";
+import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-CSIGeGLl.js";
+import { n as checkExfilTracking } from "./indirectWebPwn-CiWB-vVH.js";
+import { n as renderPrompt } from "./evaluatorHelpers-CrRObe2z.js";
+import { t as Strategies } from "./strategies-CD1gHeeQ.js";
+import { a as fetchTraceContext, i as extractTraceIdFromTraceparent, n as formatTraceForMetadata, r as formatTraceSummary, t as resolveTracingOptions } from "./tracingOptions-BOP1FsRt.js";
 import { t as applyRuntimeTransforms } from "./runtimeTransform-DigbjU1r.js";
 //#region src/redteam/providers/iterativeMeta.ts
 function getIterativeMetaGoalRubric(goal) {
@@ -47,6 +47,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 	let storedGraderResult = void 0;
 	let stopReason = "Max iterations reached";
 	let lastResponse = void 0;
+	let failClosedError;
 	let previousTraceSummary;
 	const redteamHistory = [];
 	let lastTransformDisplayVars;
@@ -71,6 +72,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 			goal,
 			purpose: test?.metadata?.purpose,
 			modifiers: test?.metadata?.modifiers,
+			inputs,
 			excludeTargetOutputFromAgenticAttackGeneration,
 			lastAttempt: i > 0 && lastResponse && redteamHistory[i - 1] ? {
 				prompt: redteamHistory[i - 1].prompt,
@@ -86,7 +88,13 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 				raw: JSON.stringify(cloudRequest),
 				label: "meta-agent"
 			},
-			vars: {}
+			vars: shouldGenerateRemote() ? buildRemoteMaterializationContextVars({
+				injectVar,
+				inputs,
+				materializationIndex: i,
+				pluginId: String(test?.metadata?.pluginId || "iterative-meta"),
+				purpose: test?.metadata?.purpose
+			}) : {}
 		}, options);
 		accumulateResponseTokenUsage(totalTokenUsage, agentResp, { countAsRequest: false });
 		if (agentProvider.delay) {
@@ -139,13 +147,25 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 		}
 		lastFinalAttackPrompt = finalAttackPrompt;
 		const escapedAttackPrompt = finalAttackPrompt.replace(/\{\{/g, "{ {").replace(/\}\}/g, "} }").replace(/\{%/g, "{ %").replace(/%\}/g, "% }");
+		if (inputs && shouldGenerateRemote()) assertRemoteMaterializationHandled(agentResp, "Iterative Meta multi-input generation");
 		const currentInputVars = extractInputVarsFromPrompt(attackPrompt, inputs);
-		const currentRenderInputVars = (currentInputVars && inputs ? await materializeInputVariablesWithMetadata(currentInputVars, inputs, {
+		let materializedInputVars;
+		if (inputs && shouldGenerateRemote() && !currentInputVars && !agentResp.materializedVars) {
+			failClosedError = "Iterative Meta remote multi-input generation returned an invalid prompt format";
+			logger.warn("[IterativeMeta] Remote multi-input generation returned an invalid prompt format", {
+				iteration: i + 1,
+				attackPromptPreview: attackPrompt.slice(0, 200)
+			});
+			break;
+		}
+		if ((currentInputVars || agentResp.materializedVars) && inputs) if (shouldGenerateRemote()) materializedInputVars = buildRemoteMaterializedInputVariables(agentResp, currentInputVars ?? {}, inputs);
+		else materializedInputVars = await materializeInputVariablesWithMetadata(currentInputVars, inputs, {
 			materializationIndex: i,
 			pluginId: String(test?.metadata?.pluginId || "iterative-meta"),
 			provider: agentProvider,
 			purpose: test?.metadata?.purpose
-		}) : void 0)?.vars ?? currentInputVars;
+		});
+		const currentRenderInputVars = materializedInputVars?.vars ?? currentInputVars;
 		const updatedVars = {
 			...iterationVars,
 			[injectVar]: escapedAttackPrompt,
@@ -211,7 +231,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 		previousTraceSummary = attackTraceSummary;
 		let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 		if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
-		const { getGraderById } = await import("./graders-BX0f2tvS.js").then((n) => n.r);
+		const { getGraderById } = await import("./graders-KXzjnIim.js").then((n) => n.r);
 		if (test && assertToUse) {
 			const grader = getGraderById(assertToUse.type);
 			if (grader) {
@@ -302,7 +322,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 	return {
 		output: bestResponse || lastResponse?.output || "",
 		prompt: bestPrompt,
-		...lastResponse?.error ? { error: lastResponse.error } : {},
+		...failClosedError ? { error: failClosedError } : lastResponse?.error ? { error: lastResponse.error } : {},
 		metadata: {
 			finalIteration,
 			vulnerabilityAchieved,
@@ -382,4 +402,4 @@ var RedteamIterativeMetaProvider = class {
 //#endregion
 export { RedteamIterativeMetaProvider as default };
 
-//# sourceMappingURL=iterativeMeta-C7APE_P1.js.map
+//# sourceMappingURL=iterativeMeta-CIu-CHRS.js.map