promptfoo 0.121.7 → 0.121.8

package/dist/src/{iterativeMeta-B3YiAOc8.js → iterativeMeta-CN8CNjFA.js}

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
 import { D as getEnvInt, s as logger } from "./logger-BbY6ypFL.js";
-import { f as sleep } from "./fetch-DXUnXkVU.js";
+import { f as sleep } from "./fetch-Cpf1U1nO.js";
 import { t as invariant } from "./invariant-B2Rf6avk.js";
-import { c as isLoggedIntoCloud } from "./accounts-CjFnOPmb.js";
-import { l as shouldGenerateRemote, n as getRemoteGenerationExplicitlyDisabledError, s as neverGenerateRemote, t as getRemoteGenerationDisabledError } from "./remoteGeneration-B1_XsKXU.js";
+import { c as isLoggedIntoCloud } from "./accounts-D6IBfEE0.js";
+import { l as shouldGenerateRemote, n as getRemoteGenerationExplicitlyDisabledError, s as neverGenerateRemote, t as getRemoteGenerationDisabledError } from "./remoteGeneration-D6UjE2JT.js";
 import { a as createEmptyTokenUsage, n as accumulateResponseTokenUsage } from "./tokenUsageUtils-CDet74yk.js";
 import { r as materializeInputVariablesWithMetadata } from "./inputVariables-DXFdi7AI.js";
-import { a as extractPromptFromTags, r as extractInputVarsFromPrompt } from "./util-kDURhgJW.js";
-import { t as PromptfooChatCompletionProvider } from "./promptfoo-Rjp-MeBb.js";
-import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-9WHQ1oNE.js";
-import { n as checkExfilTracking } from "./indirectWebPwn-uyWdHx04.js";
-import { n as renderPrompt } from "./evaluatorHelpers-BsYP_muT.js";
-import { t as Strategies } from "./strategies-DRJjGTIY.js";
-import { a as fetchTraceContext, i as extractTraceIdFromTraceparent, n as formatTraceForMetadata, r as formatTraceSummary, t as resolveTracingOptions } from "./tracingOptions-BnwKCkSB.js";
+import { a as extractPromptFromTags, r as extractInputVarsFromPrompt } from "./util-ETfU_sS9.js";
+import { a as assertRemoteMaterializationHandled, o as buildRemoteMaterializationContextVars, s as buildRemoteMaterializedInputVariables, t as PromptfooChatCompletionProvider } from "./promptfoo-BU4_0J85.js";
+import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-DNvim54U.js";
+import { n as checkExfilTracking } from "./indirectWebPwn-BMTXXznx.js";
+import { n as renderPrompt } from "./evaluatorHelpers-D1_kwvyp.js";
+import { t as Strategies } from "./strategies-CBI1brSy.js";
+import { a as fetchTraceContext, i as extractTraceIdFromTraceparent, n as formatTraceForMetadata, r as formatTraceSummary, t as resolveTracingOptions } from "./tracingOptions-xhjOg2b1.js";
 import { t as applyRuntimeTransforms } from "./runtimeTransform-Dgh_D7DU.js";
 //#region src/redteam/providers/iterativeMeta.ts
 function getIterativeMetaGoalRubric(goal) {
@@ -48,6 +48,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 	let storedGraderResult = void 0;
 	let stopReason = "Max iterations reached";
 	let lastResponse = void 0;
+	let failClosedError;
 	let previousTraceSummary;
 	const redteamHistory = [];
 	let lastTransformDisplayVars;
@@ -72,6 +73,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 			goal,
 			purpose: test?.metadata?.purpose,
 			modifiers: test?.metadata?.modifiers,
+			inputs,
 			excludeTargetOutputFromAgenticAttackGeneration,
 			lastAttempt: i > 0 && lastResponse && redteamHistory[i - 1] ? {
 				prompt: redteamHistory[i - 1].prompt,
@@ -87,7 +89,13 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 				raw: JSON.stringify(cloudRequest),
 				label: "meta-agent"
 			},
-			vars: {}
+			vars: shouldGenerateRemote() ? buildRemoteMaterializationContextVars({
+				injectVar,
+				inputs,
+				materializationIndex: i,
+				pluginId: String(test?.metadata?.pluginId || "iterative-meta"),
+				purpose: test?.metadata?.purpose
+			}) : {}
 		}, options);
 		accumulateResponseTokenUsage(totalTokenUsage, agentResp, { countAsRequest: false });
 		if (agentProvider.delay) {
@@ -140,13 +148,25 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 		}
 		lastFinalAttackPrompt = finalAttackPrompt;
 		const escapedAttackPrompt = finalAttackPrompt.replace(/\{\{/g, "{ {").replace(/\}\}/g, "} }").replace(/\{%/g, "{ %").replace(/%\}/g, "% }");
+		if (inputs && shouldGenerateRemote()) assertRemoteMaterializationHandled(agentResp, "Iterative Meta multi-input generation");
 		const currentInputVars = extractInputVarsFromPrompt(attackPrompt, inputs);
-		const currentRenderInputVars = (currentInputVars && inputs ? await materializeInputVariablesWithMetadata(currentInputVars, inputs, {
+		let materializedInputVars;
+		if (inputs && shouldGenerateRemote() && !currentInputVars && !agentResp.materializedVars) {
+			failClosedError = "Iterative Meta remote multi-input generation returned an invalid prompt format";
+			logger.warn("[IterativeMeta] Remote multi-input generation returned an invalid prompt format", {
+				iteration: i + 1,
+				attackPromptPreview: attackPrompt.slice(0, 200)
+			});
+			break;
+		}
+		if ((currentInputVars || agentResp.materializedVars) && inputs) if (shouldGenerateRemote()) materializedInputVars = buildRemoteMaterializedInputVariables(agentResp, currentInputVars ?? {}, inputs);
+		else materializedInputVars = await materializeInputVariablesWithMetadata(currentInputVars, inputs, {
 			materializationIndex: i,
 			pluginId: String(test?.metadata?.pluginId || "iterative-meta"),
 			provider: agentProvider,
 			purpose: test?.metadata?.purpose
-		}) : void 0)?.vars ?? currentInputVars;
+		});
+		const currentRenderInputVars = materializedInputVars?.vars ?? currentInputVars;
 		const updatedVars = {
 			...iterationVars,
 			[injectVar]: escapedAttackPrompt,
@@ -212,7 +232,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 		previousTraceSummary = attackTraceSummary;
 		let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 		if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
-		const { getGraderById } = await import("./graders-BDT7dif6.js");
+		const { getGraderById } = await import("./graders-B3D7kCcD.js");
 		if (test && assertToUse) {
 			const grader = getGraderById(assertToUse.type);
 			if (grader) {
@@ -303,7 +323,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 	return {
 		output: bestResponse || lastResponse?.output || "",
 		prompt: bestPrompt,
-		...lastResponse?.error ? { error: lastResponse.error } : {},
+		...failClosedError ? { error: failClosedError } : lastResponse?.error ? { error: lastResponse.error } : {},
 		metadata: {
 			finalIteration,
 			vulnerabilityAchieved,
@@ -383,4 +403,4 @@ var RedteamIterativeMetaProvider = class {
 //#endregion
 export { RedteamIterativeMetaProvider as default };
 
-//# sourceMappingURL=iterativeMeta-B3YiAOc8.js.map
+//# sourceMappingURL=iterativeMeta-CN8CNjFA.js.map

package/dist/src/{iterativeMeta-DgoQ7bLh.js → iterativeMeta-DN6BTjpq.js}

@@ -1,16 +1,16 @@
 import { a as logger, w as getEnvInt } from "./logger-KD8JjCRJ.js";
-import { m as sleep } from "./fetch-BufrQtvR.js";
+import { m as sleep } from "./fetch-BSSAcMxf.js";
 import { t as invariant } from "./invariant-DIYf9sP1.js";
-import { c as isLoggedIntoCloud } from "./accounts-DanM1wq_.js";
-import { l as shouldGenerateRemote, n as getRemoteGenerationExplicitlyDisabledError, s as neverGenerateRemote, t as getRemoteGenerationDisabledError } from "./remoteGeneration-COpWcmWd.js";
+import { c as isLoggedIntoCloud } from "./accounts-BWjqwsrf.js";
+import { l as shouldGenerateRemote, n as getRemoteGenerationExplicitlyDisabledError, s as neverGenerateRemote, t as getRemoteGenerationDisabledError } from "./remoteGeneration--D6WjzUm.js";
 import { a as createEmptyTokenUsage, n as accumulateResponseTokenUsage } from "./tokenUsageUtils-BjVkdk18.js";
 import { r as materializeInputVariablesWithMetadata } from "./inputVariables-B0qUChbV.js";
-import { a as extractPromptFromTags, r as extractInputVarsFromPrompt } from "./util-Df8YMvS1.js";
-import { t as PromptfooChatCompletionProvider } from "./promptfoo-BDrfT30-.js";
-import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-7pmVZLNO.js";
-import { n as checkExfilTracking } from "./indirectWebPwn-tNx9OZ35.js";
+import { a as extractPromptFromTags, r as extractInputVarsFromPrompt } from "./util-DGqkTb2-.js";
+import { a as assertRemoteMaterializationHandled, o as buildRemoteMaterializationContextVars, s as buildRemoteMaterializedInputVariables, t as PromptfooChatCompletionProvider } from "./promptfoo-CReYAtfb.js";
+import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-CRq0gGVf.js";
+import { n as checkExfilTracking } from "./indirectWebPwn-BZFPV7Q9.js";
 import { n as renderPrompt, t as Strategies } from "./server/index.js";
-import { a as fetchTraceContext, i as extractTraceIdFromTraceparent, n as formatTraceForMetadata, r as formatTraceSummary, t as resolveTracingOptions } from "./tracingOptions-Chi74lOD.js";
+import { a as fetchTraceContext, i as extractTraceIdFromTraceparent, n as formatTraceForMetadata, r as formatTraceSummary, t as resolveTracingOptions } from "./tracingOptions-BvmDa_jH.js";
 import { t as applyRuntimeTransforms } from "./runtimeTransform-BJOpL9Yc.js";
 //#region src/redteam/providers/iterativeMeta.ts
 function getIterativeMetaGoalRubric(goal) {
@@ -46,6 +46,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 	let storedGraderResult = void 0;
 	let stopReason = "Max iterations reached";
 	let lastResponse = void 0;
+	let failClosedError;
 	let previousTraceSummary;
 	const redteamHistory = [];
 	let lastTransformDisplayVars;
@@ -70,6 +71,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 			goal,
 			purpose: test?.metadata?.purpose,
 			modifiers: test?.metadata?.modifiers,
+			inputs,
 			excludeTargetOutputFromAgenticAttackGeneration,
 			lastAttempt: i > 0 && lastResponse && redteamHistory[i - 1] ? {
 				prompt: redteamHistory[i - 1].prompt,
@@ -85,7 +87,13 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 				raw: JSON.stringify(cloudRequest),
 				label: "meta-agent"
 			},
-			vars: {}
+			vars: shouldGenerateRemote() ? buildRemoteMaterializationContextVars({
+				injectVar,
+				inputs,
+				materializationIndex: i,
+				pluginId: String(test?.metadata?.pluginId || "iterative-meta"),
+				purpose: test?.metadata?.purpose
+			}) : {}
 		}, options);
 		accumulateResponseTokenUsage(totalTokenUsage, agentResp, { countAsRequest: false });
 		if (agentProvider.delay) {
@@ -138,13 +146,25 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 		}
 		lastFinalAttackPrompt = finalAttackPrompt;
 		const escapedAttackPrompt = finalAttackPrompt.replace(/\{\{/g, "{ {").replace(/\}\}/g, "} }").replace(/\{%/g, "{ %").replace(/%\}/g, "% }");
+		if (inputs && shouldGenerateRemote()) assertRemoteMaterializationHandled(agentResp, "Iterative Meta multi-input generation");
 		const currentInputVars = extractInputVarsFromPrompt(attackPrompt, inputs);
-		const currentRenderInputVars = (currentInputVars && inputs ? await materializeInputVariablesWithMetadata(currentInputVars, inputs, {
+		let materializedInputVars;
+		if (inputs && shouldGenerateRemote() && !currentInputVars && !agentResp.materializedVars) {
+			failClosedError = "Iterative Meta remote multi-input generation returned an invalid prompt format";
+			logger.warn("[IterativeMeta] Remote multi-input generation returned an invalid prompt format", {
+				iteration: i + 1,
+				attackPromptPreview: attackPrompt.slice(0, 200)
+			});
+			break;
+		}
+		if ((currentInputVars || agentResp.materializedVars) && inputs) if (shouldGenerateRemote()) materializedInputVars = buildRemoteMaterializedInputVariables(agentResp, currentInputVars ?? {}, inputs);
+		else materializedInputVars = await materializeInputVariablesWithMetadata(currentInputVars, inputs, {
 			materializationIndex: i,
 			pluginId: String(test?.metadata?.pluginId || "iterative-meta"),
 			provider: agentProvider,
 			purpose: test?.metadata?.purpose
-		}) : void 0)?.vars ?? currentInputVars;
+		});
+		const currentRenderInputVars = materializedInputVars?.vars ?? currentInputVars;
 		const updatedVars = {
 			...iterationVars,
 			[injectVar]: escapedAttackPrompt,
@@ -210,7 +230,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 		previousTraceSummary = attackTraceSummary;
 		let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 		if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
-		const { getGraderById } = await import("./graders-C0nXU_ZP.js").then((n) => n.r);
+		const { getGraderById } = await import("./graders-DaRU98zs.js").then((n) => n.r);
 		if (test && assertToUse) {
 			const grader = getGraderById(assertToUse.type);
 			if (grader) {
@@ -301,7 +321,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 	return {
 		output: bestResponse || lastResponse?.output || "",
 		prompt: bestPrompt,
-		...lastResponse?.error ? { error: lastResponse.error } : {},
+		...failClosedError ? { error: failClosedError } : lastResponse?.error ? { error: lastResponse.error } : {},
 		metadata: {
 			finalIteration,
 			vulnerabilityAchieved,
@@ -381,4 +401,4 @@ var RedteamIterativeMetaProvider = class {
 //#endregion
 export { RedteamIterativeMetaProvider as default };
 
-//# sourceMappingURL=iterativeMeta-DgoQ7bLh.js.map
+//# sourceMappingURL=iterativeMeta-DN6BTjpq.js.map

package/dist/src/{iterativeMeta-CSS8M6Ds.cjs → iterativeMeta-DlqY3BsS.cjs}

@@ -1,17 +1,17 @@
 const require_logger = require("./logger-cfNpzI4o.cjs");
 const require_invariant = require("./invariant-QtnLD03y.cjs");
-const require_fetch = require("./fetch-Dw4XZHjj.cjs");
-const require_accounts = require("./accounts-CmWzeD2d.cjs");
-const require_remoteGeneration = require("./remoteGeneration-DS9N3pgB.cjs");
+const require_fetch = require("./fetch-Cfm4EuOB.cjs");
+const require_accounts = require("./accounts-BVz5gHLK.cjs");
+const require_remoteGeneration = require("./remoteGeneration-BpIYlb_O.cjs");
 const require_tokenUsageUtils = require("./tokenUsageUtils-_B-P8IAi.cjs");
 const require_inputVariables = require("./inputVariables-Dq9W-Z3a.cjs");
-const require_util = require("./util-CN8om2rz.cjs");
-const require_promptfoo = require("./promptfoo-b-baRMj-.cjs");
-const require_shared = require("./shared-WkgnDkcg.cjs");
-const require_indirectWebPwn = require("./indirectWebPwn-BJ22AbQa.cjs");
-const require_evaluatorHelpers = require("./evaluatorHelpers-CRqTvSux.cjs");
-const require_strategies = require("./strategies-7CS3Alao.cjs");
-const require_tracingOptions = require("./tracingOptions-DrbSFaKy.cjs");
+const require_util = require("./util-DNtUsus_.cjs");
+const require_promptfoo = require("./promptfoo-ClChwT74.cjs");
+const require_shared = require("./shared-aHWko3P1.cjs");
+const require_indirectWebPwn = require("./indirectWebPwn-D7NA9Nsv.cjs");
+const require_evaluatorHelpers = require("./evaluatorHelpers-D06I9WFL.cjs");
+const require_strategies = require("./strategies-CCcnEbFO.cjs");
+const require_tracingOptions = require("./tracingOptions-DFBoE8O0.cjs");
 const require_runtimeTransform = require("./runtimeTransform-ON3YYILw.cjs");
 //#region src/redteam/providers/iterativeMeta.ts
 function getIterativeMetaGoalRubric(goal) {
@@ -47,6 +47,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 	let storedGraderResult = void 0;
 	let stopReason = "Max iterations reached";
 	let lastResponse = void 0;
+	let failClosedError;
 	let previousTraceSummary;
 	const redteamHistory = [];
 	let lastTransformDisplayVars;
@@ -71,6 +72,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 			goal,
 			purpose: test?.metadata?.purpose,
 			modifiers: test?.metadata?.modifiers,
+			inputs,
 			excludeTargetOutputFromAgenticAttackGeneration,
 			lastAttempt: i > 0 && lastResponse && redteamHistory[i - 1] ? {
 				prompt: redteamHistory[i - 1].prompt,
@@ -86,7 +88,13 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 				raw: JSON.stringify(cloudRequest),
 				label: "meta-agent"
 			},
-			vars: {}
+			vars: require_remoteGeneration.shouldGenerateRemote() ? require_promptfoo.buildRemoteMaterializationContextVars({
+				injectVar,
+				inputs,
+				materializationIndex: i,
+				pluginId: String(test?.metadata?.pluginId || "iterative-meta"),
+				purpose: test?.metadata?.purpose
+			}) : {}
 		}, options);
 		require_tokenUsageUtils.accumulateResponseTokenUsage(totalTokenUsage, agentResp, { countAsRequest: false });
 		if (agentProvider.delay) {
@@ -139,13 +147,25 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 		}
 		lastFinalAttackPrompt = finalAttackPrompt;
 		const escapedAttackPrompt = finalAttackPrompt.replace(/\{\{/g, "{ {").replace(/\}\}/g, "} }").replace(/\{%/g, "{ %").replace(/%\}/g, "% }");
+		if (inputs && require_remoteGeneration.shouldGenerateRemote()) require_promptfoo.assertRemoteMaterializationHandled(agentResp, "Iterative Meta multi-input generation");
 		const currentInputVars = require_util.extractInputVarsFromPrompt(attackPrompt, inputs);
-		const currentRenderInputVars = (currentInputVars && inputs ? await require_inputVariables.materializeInputVariablesWithMetadata(currentInputVars, inputs, {
+		let materializedInputVars;
+		if (inputs && require_remoteGeneration.shouldGenerateRemote() && !currentInputVars && !agentResp.materializedVars) {
+			failClosedError = "Iterative Meta remote multi-input generation returned an invalid prompt format";
+			require_logger.logger.warn("[IterativeMeta] Remote multi-input generation returned an invalid prompt format", {
+				iteration: i + 1,
+				attackPromptPreview: attackPrompt.slice(0, 200)
+			});
+			break;
+		}
+		if ((currentInputVars || agentResp.materializedVars) && inputs) if (require_remoteGeneration.shouldGenerateRemote()) materializedInputVars = require_promptfoo.buildRemoteMaterializedInputVariables(agentResp, currentInputVars ?? {}, inputs);
+		else materializedInputVars = await require_inputVariables.materializeInputVariablesWithMetadata(currentInputVars, inputs, {
 			materializationIndex: i,
 			pluginId: String(test?.metadata?.pluginId || "iterative-meta"),
 			provider: agentProvider,
 			purpose: test?.metadata?.purpose
-		}) : void 0)?.vars ?? currentInputVars;
+		});
+		const currentRenderInputVars = materializedInputVars?.vars ?? currentInputVars;
 		const updatedVars = {
 			...iterationVars,
 			[injectVar]: escapedAttackPrompt,
@@ -211,7 +231,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 		previousTraceSummary = attackTraceSummary;
 		let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 		if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
-		const { getGraderById } = await Promise.resolve().then(() => require("./graders-ClrU2fnd.cjs")).then((n) => n.graders_exports);
+		const { getGraderById } = await Promise.resolve().then(() => require("./graders-CBQ2s6gz.cjs")).then((n) => n.graders_exports);
 		if (test && assertToUse) {
 			const grader = getGraderById(assertToUse.type);
 			if (grader) {
@@ -302,7 +322,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 	return {
 		output: bestResponse || lastResponse?.output || "",
 		prompt: bestPrompt,
-		...lastResponse?.error ? { error: lastResponse.error } : {},
+		...failClosedError ? { error: failClosedError } : lastResponse?.error ? { error: lastResponse.error } : {},
 		metadata: {
 			finalIteration,
 			vulnerabilityAchieved,
@@ -382,4 +402,4 @@ var RedteamIterativeMetaProvider = class {
 //#endregion
 exports.default = RedteamIterativeMetaProvider;
 
-//# sourceMappingURL=iterativeMeta-CSS8M6Ds.cjs.map
+//# sourceMappingURL=iterativeMeta-DlqY3BsS.cjs.map

package/dist/src/{iterativeTree-DvZ7GBwt.js → iterativeTree-CJ8a8G9T.js}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import { g as extractFirstJsonObject, s as logger } from "./logger-BbY6ypFL.js";
-import { f as sleep } from "./fetch-DXUnXkVU.js";
+import { f as sleep } from "./fetch-Cpf1U1nO.js";
 import { t as invariant } from "./invariant-B2Rf6avk.js";
-import { c as isLoggedIntoCloud } from "./accounts-CjFnOPmb.js";
+import { c as isLoggedIntoCloud } from "./accounts-D6IBfEE0.js";
 import { o as getNunjucksEngine } from "./render-CSP99NLm.js";
-import { l as shouldGenerateRemote } from "./remoteGeneration-B1_XsKXU.js";
+import { l as shouldGenerateRemote } from "./remoteGeneration-D6UjE2JT.js";
 import { a as createEmptyTokenUsage, n as accumulateResponseTokenUsage } from "./tokenUsageUtils-CDet74yk.js";
-import { a as extractPromptFromTags, i as extractMaterializedVariablesFromJsonWithMetadata, o as getSessionId } from "./util-kDURhgJW.js";
-import { t as PromptfooChatCompletionProvider } from "./promptfoo-Rjp-MeBb.js";
-import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, m as TokenUsageTracker, n as checkPenalizedPhrases, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-9WHQ1oNE.js";
-import { n as checkExfilTracking } from "./indirectWebPwn-uyWdHx04.js";
-import { n as renderPrompt } from "./evaluatorHelpers-BsYP_muT.js";
-import { t as Strategies } from "./strategies-DRJjGTIY.js";
+import { a as extractPromptFromTags, i as extractMaterializedVariablesFromJsonWithMetadata, o as getSessionId } from "./util-ETfU_sS9.js";
+import { a as assertRemoteMaterializationHandled, o as buildRemoteMaterializationContextVars, s as buildRemoteMaterializedInputVariables, t as PromptfooChatCompletionProvider } from "./promptfoo-BU4_0J85.js";
+import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, m as TokenUsageTracker, n as checkPenalizedPhrases, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-DNvim54U.js";
+import { n as checkExfilTracking } from "./indirectWebPwn-BMTXXznx.js";
+import { n as renderPrompt } from "./evaluatorHelpers-D1_kwvyp.js";
+import { t as Strategies } from "./strategies-CBI1brSy.js";
 import { t as applyRuntimeTransforms } from "./runtimeTransform-Dgh_D7DU.js";
 import { n as CLOUD_ATTACKER_SYSTEM_PROMPT, r as JUDGE_SYSTEM_PROMPT, t as ATTACKER_SYSTEM_PROMPT } from "./prompts-C-bqE1Yp.js";
 import dedent from "dedent";
@@ -156,14 +156,20 @@ async function evaluateResponse(provider, judgeSystemPrompt, targetResponse, pre
 * @param redteamHistory - The conversation history of the red team.
 * @returns A promise that resolves to an object containing the improvement and new prompt.
 */
-async function getNewPrompt(redteamProvider, redteamHistory) {
+async function getNewPrompt(redteamProvider, redteamHistory, materializationContext) {
 	const redteamBody = JSON.stringify(redteamHistory);
 	const redteamResp = await redteamProvider.callApi(redteamBody, {
 		prompt: {
 			raw: redteamBody,
 			label: "history"
 		},
-		vars: {}
+		vars: materializationContext ? buildRemoteMaterializationContextVars({
+			injectVar: void 0,
+			inputs: materializationContext.inputs,
+			materializationIndex: materializationContext.materializationIndex,
+			pluginId: materializationContext.pluginId,
+			purpose: materializationContext.purpose
+		}) : {}
 	});
 	if (redteamProvider.delay) {
 		logger.debug(`[IterativeTree] Sleeping for ${redteamProvider.delay}ms`);
@@ -186,6 +192,9 @@ async function getNewPrompt(redteamProvider, redteamHistory) {
 			logger.info(`[IterativeTree] Failed to parse attacker response as JSON (primary and fallback). Skipping this turn. primary=${String(primaryErr)} fallback=${String(fallbackErr)} outputPreview="${redteamResp.output.slice(0, 200)}"`);
 			return {
 				improvement: "parse failure – skipping turn",
+				inputMaterialization: redteamResp.inputMaterialization,
+				materializationHandled: redteamResp.materializationHandled,
+				materializedVars: redteamResp.materializedVars,
 				prompt: "",
 				tokenUsage: redteamResp.tokenUsage
 			};
@@ -194,6 +203,9 @@ async function getNewPrompt(redteamProvider, redteamHistory) {
 	else retObj = redteamResp.output;
 	return {
 		...retObj,
+		inputMaterialization: redteamResp.inputMaterialization,
+		materializationHandled: redteamResp.materializationHandled,
+		materializedVars: redteamResp.materializedVars,
 		tokenUsage: redteamResp.tokenUsage
 	};
 }
@@ -232,13 +244,16 @@ function updateRedteamHistory(targetResponse, goal, score, containsPenalizedPhra
 * @param id - Optional custom UUID for the node. If not provided, a new UUID will be generated.
 * @returns A new TreeNode object.
 */
-function createTreeNode(prompt, score, depth, id) {
+function createTreeNode(prompt, score, depth, id, options) {
 	return {
 		id: id || crypto.randomUUID(),
 		prompt,
 		score,
 		children: [],
-		depth
+		depth,
+		inputMaterialization: options?.inputMaterialization,
+		materializationHandled: options?.materializationHandled,
+		materializedVars: options?.materializedVars
 	};
 }
 /**
@@ -315,10 +330,20 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 					loggerTag: "[IterativeTree]"
 				});
 				const iterationVars = iterationContext?.vars || {};
-				let { improvement, prompt: newInjectVar } = await getNewPrompt(redteamProvider, [...redteamHistory, {
+				let { improvement, inputMaterialization, materializationHandled, materializedVars, prompt: newInjectVar } = await getNewPrompt(redteamProvider, [...redteamHistory, {
 					role: "assistant",
 					content: node.prompt
-				}]);
+				}], shouldGenerateRemote() ? {
+					inputs,
+					materializationIndex: attempts,
+					pluginId: String(test?.metadata?.pluginId || "unknown-plugin"),
+					purpose: test?.metadata?.purpose
+				} : void 0);
+				if (inputs && shouldGenerateRemote()) assertRemoteMaterializationHandled({
+					inputMaterialization,
+					materializationHandled,
+					materializedVars
+				}, "Iterative Tree multi-input generation");
 				attempts++;
 				const extractedPrompt = extractPromptFromTags(newInjectVar);
 				if (extractedPrompt) newInjectVar = extractedPrompt;
@@ -361,14 +386,22 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 					...iterationVars,
 					[injectVar]: finalInjectVar
 				};
-				if (inputs && Object.keys(inputs).length > 0) try {
-					const { vars: materializedVars } = await extractMaterializedVariablesFromJsonWithMetadata(JSON.parse(newInjectVar), inputs, {
+				if (inputs && Object.keys(inputs).length > 0) if (shouldGenerateRemote()) try {
+					const parsed = JSON.parse(newInjectVar);
+					Object.assign(updatedVars, buildRemoteMaterializedInputVariables({
+						inputMaterialization,
+						materializationHandled,
+						materializedVars
+					}, parsed, inputs).vars);
+				} catch {}
+				else try {
+					const { vars: localMaterializedVars } = await extractMaterializedVariablesFromJsonWithMetadata(JSON.parse(newInjectVar), inputs, {
 						materializationIndex: attempts - 1,
 						pluginId: String(test?.metadata?.pluginId || "unknown-plugin"),
 						provider: redteamProvider,
 						purpose: test?.metadata?.purpose
 					});
-					Object.assign(updatedVars, materializedVars);
+					Object.assign(updatedVars, localMaterializedVars);
 				} catch {}
 				const targetPrompt = await renderPrompt(prompt, updatedVars, filters, targetProvider, [injectVar]);
 				let targetResponse = await getTargetResponse(targetProvider, targetPrompt, iterationContext, options);
@@ -405,11 +438,18 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 				const containsPenalizedPhrase = checkPenalizedPhrases(targetResponse.output);
 				const { score, explanation } = await evaluateResponse(gradingProvider, judgeSystemPrompt, targetResponse.output, bestResponse, containsPenalizedPhrase);
 				logger.debug(`[Depth ${depth}, Attempt ${attempts}] Evaluation: score=${score}, penalized=${containsPenalizedPhrase}. Max score so far: ${maxScore}`);
-				nextLevelNodes.push(createTreeNode(newInjectVar, score, depth + 1));
+				nextLevelNodes.push(createTreeNode(newInjectVar, score, depth + 1, void 0, {
+					inputMaterialization,
+					materializationHandled,
+					materializedVars
+				}));
 				if (score > maxScore) {
 					maxScore = score;
 					bestResponse = targetResponse.output;
 					bestNode.prompt = newInjectVar;
+					bestNode.inputMaterialization = inputMaterialization;
+					bestNode.materializationHandled = materializationHandled;
+					bestNode.materializedVars = materializedVars;
 					bestFinalAttackPrompt = finalInjectVar;
 					bestTransformDisplayVars = lastTransformDisplayVars;
 					logger.debug(`[Depth ${depth}, Attempt ${attempts}] New max score: ${maxScore}`);
@@ -421,7 +461,7 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 					noImprovementCount++;
 					if (noImprovementCount % 5 === 0) logger.debug(`[Depth ${depth}, Attempt ${attempts}] No improvement for ${noImprovementCount} consecutive iterations. Max score: ${maxScore}`);
 				}
-				const { getGraderById } = await import("./graders-BDT7dif6.js");
+				const { getGraderById } = await import("./graders-B3D7kCcD.js");
 				let graderPassed;
 				let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 				if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
@@ -620,13 +660,23 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 		[injectVar]: bestPrompt
 	};
 	if (inputs && Object.keys(inputs).length > 0) try {
-		const { vars: materializedVars } = await extractMaterializedVariablesFromJsonWithMetadata(JSON.parse(bestPrompt), inputs, {
-			materializationIndex: attempts,
-			pluginId: String(test?.metadata?.pluginId || "unknown-plugin"),
-			provider: redteamProvider,
-			purpose: test?.metadata?.purpose
-		});
-		Object.assign(finalUpdatedVars, materializedVars);
+		const parsed = JSON.parse(bestPrompt);
+		if (shouldGenerateRemote()) {
+			const remoteBestNodeMaterialization = {
+				inputMaterialization: bestNode.inputMaterialization,
+				materializationHandled: bestNode.materializationHandled,
+				materializedVars: bestNode.materializedVars
+			};
+			if (remoteBestNodeMaterialization.materializationHandled) Object.assign(finalUpdatedVars, buildRemoteMaterializedInputVariables(remoteBestNodeMaterialization, parsed, inputs).vars);
+		} else {
+			const { vars: materializedVars } = await extractMaterializedVariablesFromJsonWithMetadata(parsed, inputs, {
+				materializationIndex: attempts,
+				pluginId: String(test?.metadata?.pluginId || "unknown-plugin"),
+				provider: redteamProvider,
+				purpose: test?.metadata?.purpose
+			});
+			Object.assign(finalUpdatedVars, materializedVars);
+		}
 	} catch {}
 	const finalTargetPrompt = await renderPrompt(prompt, finalUpdatedVars, filters, targetProvider, [injectVar]);
 	const finalTargetResponse = await getTargetResponse(targetProvider, finalTargetPrompt, context, options);
@@ -767,4 +817,4 @@ var RedteamIterativeTreeProvider = class {
 //#endregion
 export { RedteamIterativeTreeProvider as default };
 
-//# sourceMappingURL=iterativeTree-DvZ7GBwt.js.map
+//# sourceMappingURL=iterativeTree-CJ8a8G9T.js.map