promptfoo 0.121.7 → 0.121.9

package/dist/src/{iterativeMeta-CSS8M6Ds.cjs → iterativeMeta-9gsvnsl1.cjs}

@@ -1,18 +1,18 @@
-const require_logger = require("./logger-cfNpzI4o.cjs");
+const require_logger = require("./logger-Cm0Nb8YX.cjs");
 const require_invariant = require("./invariant-QtnLD03y.cjs");
-const require_fetch = require("./fetch-Dw4XZHjj.cjs");
-const require_accounts = require("./accounts-CmWzeD2d.cjs");
-const require_remoteGeneration = require("./remoteGeneration-DS9N3pgB.cjs");
+const require_fetch = require("./fetch-B2HvaVUc.cjs");
+const require_accounts = require("./accounts-DAcQXPwE.cjs");
+const require_remoteGeneration = require("./remoteGeneration-CD3c_rzc.cjs");
 const require_tokenUsageUtils = require("./tokenUsageUtils-_B-P8IAi.cjs");
-const require_inputVariables = require("./inputVariables-Dq9W-Z3a.cjs");
-const require_util = require("./util-CN8om2rz.cjs");
-const require_promptfoo = require("./promptfoo-b-baRMj-.cjs");
-const require_shared = require("./shared-WkgnDkcg.cjs");
-const require_indirectWebPwn = require("./indirectWebPwn-BJ22AbQa.cjs");
-const require_evaluatorHelpers = require("./evaluatorHelpers-CRqTvSux.cjs");
-const require_strategies = require("./strategies-7CS3Alao.cjs");
-const require_tracingOptions = require("./tracingOptions-DrbSFaKy.cjs");
-const require_runtimeTransform = require("./runtimeTransform-ON3YYILw.cjs");
+const require_inputVariables = require("./inputVariables-D5K2vTp4.cjs");
+const require_util = require("./util-3BRss2KA.cjs");
+const require_promptfoo = require("./promptfoo-DAXBmrE6.cjs");
+const require_shared = require("./shared-DlmtkptR.cjs");
+const require_indirectWebPwn = require("./indirectWebPwn-04ziKbly.cjs");
+const require_evaluatorHelpers = require("./evaluatorHelpers-2gpZ9Q_f.cjs");
+const require_strategies = require("./strategies-BD7US9WB.cjs");
+const require_tracingOptions = require("./tracingOptions-eqmq5sA2.cjs");
+const require_runtimeTransform = require("./runtimeTransform-DJEknTZQ.cjs");
 //#region src/redteam/providers/iterativeMeta.ts
 function getIterativeMetaGoalRubric(goal) {
 	if (!goal) return "";
@@ -47,6 +47,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 	let storedGraderResult = void 0;
 	let stopReason = "Max iterations reached";
 	let lastResponse = void 0;
+	let failClosedError;
 	let previousTraceSummary;
 	const redteamHistory = [];
 	let lastTransformDisplayVars;
@@ -71,6 +72,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 			goal,
 			purpose: test?.metadata?.purpose,
 			modifiers: test?.metadata?.modifiers,
+			inputs,
 			excludeTargetOutputFromAgenticAttackGeneration,
 			lastAttempt: i > 0 && lastResponse && redteamHistory[i - 1] ? {
 				prompt: redteamHistory[i - 1].prompt,
@@ -86,7 +88,13 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 				raw: JSON.stringify(cloudRequest),
 				label: "meta-agent"
 			},
-			vars: {}
+			vars: require_remoteGeneration.shouldGenerateRemote() ? require_promptfoo.buildRemoteMaterializationContextVars({
+				injectVar,
+				inputs,
+				materializationIndex: i,
+				pluginId: String(test?.metadata?.pluginId || "iterative-meta"),
+				purpose: test?.metadata?.purpose
+			}) : {}
 		}, options);
 		require_tokenUsageUtils.accumulateResponseTokenUsage(totalTokenUsage, agentResp, { countAsRequest: false });
 		if (agentProvider.delay) {
@@ -139,13 +147,25 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 		}
 		lastFinalAttackPrompt = finalAttackPrompt;
 		const escapedAttackPrompt = finalAttackPrompt.replace(/\{\{/g, "{ {").replace(/\}\}/g, "} }").replace(/\{%/g, "{ %").replace(/%\}/g, "% }");
+		if (inputs && require_remoteGeneration.shouldGenerateRemote()) require_promptfoo.assertRemoteMaterializationHandled(agentResp, "Iterative Meta multi-input generation");
 		const currentInputVars = require_util.extractInputVarsFromPrompt(attackPrompt, inputs);
-		const currentRenderInputVars = (currentInputVars && inputs ? await require_inputVariables.materializeInputVariablesWithMetadata(currentInputVars, inputs, {
+		let materializedInputVars;
+		if (inputs && require_remoteGeneration.shouldGenerateRemote() && !currentInputVars && !agentResp.materializedVars) {
+			failClosedError = "Iterative Meta remote multi-input generation returned an invalid prompt format";
+			require_logger.logger.warn("[IterativeMeta] Remote multi-input generation returned an invalid prompt format", {
+				iteration: i + 1,
+				attackPromptPreview: attackPrompt.slice(0, 200)
+			});
+			break;
+		}
+		if ((currentInputVars || agentResp.materializedVars) && inputs) if (require_remoteGeneration.shouldGenerateRemote()) materializedInputVars = require_promptfoo.buildRemoteMaterializedInputVariables(agentResp, currentInputVars ?? {}, inputs);
+		else materializedInputVars = await require_inputVariables.materializeInputVariablesWithMetadata(currentInputVars, inputs, {
 			materializationIndex: i,
 			pluginId: String(test?.metadata?.pluginId || "iterative-meta"),
 			provider: agentProvider,
 			purpose: test?.metadata?.purpose
-		}) : void 0)?.vars ?? currentInputVars;
+		});
+		const currentRenderInputVars = materializedInputVars?.vars ?? currentInputVars;
 		const updatedVars = {
 			...iterationVars,
 			[injectVar]: escapedAttackPrompt,
@@ -211,7 +231,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 		previousTraceSummary = attackTraceSummary;
 		let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 		if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
-		const { getGraderById } = await Promise.resolve().then(() => require("./graders-ClrU2fnd.cjs")).then((n) => n.graders_exports);
+		const { getGraderById } = await Promise.resolve().then(() => require("./graders-CQv1GT5Q.cjs")).then((n) => n.graders_exports);
 		if (test && assertToUse) {
 			const grader = getGraderById(assertToUse.type);
 			if (grader) {
@@ -302,7 +322,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 	return {
 		output: bestResponse || lastResponse?.output || "",
 		prompt: bestPrompt,
-		...lastResponse?.error ? { error: lastResponse.error } : {},
+		...failClosedError ? { error: failClosedError } : lastResponse?.error ? { error: lastResponse.error } : {},
 		metadata: {
 			finalIteration,
 			vulnerabilityAchieved,
@@ -382,4 +402,4 @@ var RedteamIterativeMetaProvider = class {
 //#endregion
 exports.default = RedteamIterativeMetaProvider;
 
-//# sourceMappingURL=iterativeMeta-CSS8M6Ds.cjs.map
+//# sourceMappingURL=iterativeMeta-9gsvnsl1.cjs.map

package/dist/src/{iterativeMeta-B3YiAOc8.js → iterativeMeta-AgI6UEh6.js}

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
-import { D as getEnvInt, s as logger } from "./logger-BbY6ypFL.js";
-import { f as sleep } from "./fetch-DXUnXkVU.js";
+import { D as getEnvInt, s as logger } from "./logger-h-eiS4iv.js";
+import { f as sleep } from "./fetch-C59QM4cf.js";
 import { t as invariant } from "./invariant-B2Rf6avk.js";
-import { c as isLoggedIntoCloud } from "./accounts-CjFnOPmb.js";
-import { l as shouldGenerateRemote, n as getRemoteGenerationExplicitlyDisabledError, s as neverGenerateRemote, t as getRemoteGenerationDisabledError } from "./remoteGeneration-B1_XsKXU.js";
+import { c as isLoggedIntoCloud } from "./accounts-Bw2qPqE-.js";
+import { l as shouldGenerateRemote, n as getRemoteGenerationExplicitlyDisabledError, s as neverGenerateRemote, t as getRemoteGenerationDisabledError } from "./remoteGeneration-DW6mPZnO.js";
 import { a as createEmptyTokenUsage, n as accumulateResponseTokenUsage } from "./tokenUsageUtils-CDet74yk.js";
-import { r as materializeInputVariablesWithMetadata } from "./inputVariables-DXFdi7AI.js";
-import { a as extractPromptFromTags, r as extractInputVarsFromPrompt } from "./util-kDURhgJW.js";
-import { t as PromptfooChatCompletionProvider } from "./promptfoo-Rjp-MeBb.js";
-import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-9WHQ1oNE.js";
-import { n as checkExfilTracking } from "./indirectWebPwn-uyWdHx04.js";
-import { n as renderPrompt } from "./evaluatorHelpers-BsYP_muT.js";
-import { t as Strategies } from "./strategies-DRJjGTIY.js";
-import { a as fetchTraceContext, i as extractTraceIdFromTraceparent, n as formatTraceForMetadata, r as formatTraceSummary, t as resolveTracingOptions } from "./tracingOptions-BnwKCkSB.js";
-import { t as applyRuntimeTransforms } from "./runtimeTransform-Dgh_D7DU.js";
+import { r as materializeInputVariablesWithMetadata } from "./inputVariables-qJmuSN5i.js";
+import { a as extractPromptFromTags, r as extractInputVarsFromPrompt } from "./util-D9grslJP.js";
+import { a as assertRemoteMaterializationHandled, o as buildRemoteMaterializationContextVars, s as buildRemoteMaterializedInputVariables, t as PromptfooChatCompletionProvider } from "./promptfoo-wxe28-q9.js";
+import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-DsbObxvy.js";
+import { n as checkExfilTracking } from "./indirectWebPwn-BXUoJl4I.js";
+import { n as renderPrompt } from "./evaluatorHelpers-DDG44JeI.js";
+import { t as Strategies } from "./strategies-Ptz_P4P4.js";
+import { a as fetchTraceContext, i as extractTraceIdFromTraceparent, n as formatTraceForMetadata, r as formatTraceSummary, t as resolveTracingOptions } from "./tracingOptions-D2F0D7es.js";
+import { t as applyRuntimeTransforms } from "./runtimeTransform-s14J7yxm.js";
 //#region src/redteam/providers/iterativeMeta.ts
 function getIterativeMetaGoalRubric(goal) {
 	if (!goal) return "";
@@ -48,6 +48,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 	let storedGraderResult = void 0;
 	let stopReason = "Max iterations reached";
 	let lastResponse = void 0;
+	let failClosedError;
 	let previousTraceSummary;
 	const redteamHistory = [];
 	let lastTransformDisplayVars;
@@ -72,6 +73,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 			goal,
 			purpose: test?.metadata?.purpose,
 			modifiers: test?.metadata?.modifiers,
+			inputs,
 			excludeTargetOutputFromAgenticAttackGeneration,
 			lastAttempt: i > 0 && lastResponse && redteamHistory[i - 1] ? {
 				prompt: redteamHistory[i - 1].prompt,
@@ -87,7 +89,13 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 				raw: JSON.stringify(cloudRequest),
 				label: "meta-agent"
 			},
-			vars: {}
+			vars: shouldGenerateRemote() ? buildRemoteMaterializationContextVars({
+				injectVar,
+				inputs,
+				materializationIndex: i,
+				pluginId: String(test?.metadata?.pluginId || "iterative-meta"),
+				purpose: test?.metadata?.purpose
+			}) : {}
 		}, options);
 		accumulateResponseTokenUsage(totalTokenUsage, agentResp, { countAsRequest: false });
 		if (agentProvider.delay) {
@@ -140,13 +148,25 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 		}
 		lastFinalAttackPrompt = finalAttackPrompt;
 		const escapedAttackPrompt = finalAttackPrompt.replace(/\{\{/g, "{ {").replace(/\}\}/g, "} }").replace(/\{%/g, "{ %").replace(/%\}/g, "% }");
+		if (inputs && shouldGenerateRemote()) assertRemoteMaterializationHandled(agentResp, "Iterative Meta multi-input generation");
 		const currentInputVars = extractInputVarsFromPrompt(attackPrompt, inputs);
-		const currentRenderInputVars = (currentInputVars && inputs ? await materializeInputVariablesWithMetadata(currentInputVars, inputs, {
+		let materializedInputVars;
+		if (inputs && shouldGenerateRemote() && !currentInputVars && !agentResp.materializedVars) {
+			failClosedError = "Iterative Meta remote multi-input generation returned an invalid prompt format";
+			logger.warn("[IterativeMeta] Remote multi-input generation returned an invalid prompt format", {
+				iteration: i + 1,
+				attackPromptPreview: attackPrompt.slice(0, 200)
+			});
+			break;
+		}
+		if ((currentInputVars || agentResp.materializedVars) && inputs) if (shouldGenerateRemote()) materializedInputVars = buildRemoteMaterializedInputVariables(agentResp, currentInputVars ?? {}, inputs);
+		else materializedInputVars = await materializeInputVariablesWithMetadata(currentInputVars, inputs, {
 			materializationIndex: i,
 			pluginId: String(test?.metadata?.pluginId || "iterative-meta"),
 			provider: agentProvider,
 			purpose: test?.metadata?.purpose
-		}) : void 0)?.vars ?? currentInputVars;
+		});
+		const currentRenderInputVars = materializedInputVars?.vars ?? currentInputVars;
 		const updatedVars = {
 			...iterationVars,
 			[injectVar]: escapedAttackPrompt,
@@ -212,7 +232,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 		previousTraceSummary = attackTraceSummary;
 		let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 		if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
-		const { getGraderById } = await import("./graders-BDT7dif6.js");
+		const { getGraderById } = await import("./graders-D4vc1PFi.js");
 		if (test && assertToUse) {
 			const grader = getGraderById(assertToUse.type);
 			if (grader) {
@@ -303,7 +323,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 	return {
 		output: bestResponse || lastResponse?.output || "",
 		prompt: bestPrompt,
-		...lastResponse?.error ? { error: lastResponse.error } : {},
+		...failClosedError ? { error: failClosedError } : lastResponse?.error ? { error: lastResponse.error } : {},
 		metadata: {
 			finalIteration,
 			vulnerabilityAchieved,
@@ -383,4 +403,4 @@ var RedteamIterativeMetaProvider = class {
 //#endregion
 export { RedteamIterativeMetaProvider as default };
 
-//# sourceMappingURL=iterativeMeta-B3YiAOc8.js.map
+//# sourceMappingURL=iterativeMeta-AgI6UEh6.js.map

package/dist/src/{iterativeMeta-C7APE_P1.js → iterativeMeta-BbcVN5nQ.js}

@@ -1,18 +1,18 @@
-import { a as logger, w as getEnvInt } from "./logger-Ct2S6Yx-.js";
+import { a as logger, w as getEnvInt } from "./logger-Cs0I2v_y.js";
 import { t as invariant } from "./invariant-Ddh24eXh.js";
-import { l as sleep } from "./fetch-It34O8Ur.js";
-import { o as isLoggedIntoCloud } from "./accounts-Ca7WIoPY.js";
-import { l as shouldGenerateRemote, n as getRemoteGenerationExplicitlyDisabledError, s as neverGenerateRemote, t as getRemoteGenerationDisabledError } from "./remoteGeneration-DsaSwmG2.js";
+import { l as sleep } from "./fetch-CHJu2KON.js";
+import { o as isLoggedIntoCloud } from "./accounts-4Xa5fcHy.js";
+import { l as shouldGenerateRemote, n as getRemoteGenerationExplicitlyDisabledError, s as neverGenerateRemote, t as getRemoteGenerationDisabledError } from "./remoteGeneration-DvWEm3yi.js";
 import { a as createEmptyTokenUsage, n as accumulateResponseTokenUsage } from "./tokenUsageUtils-CmnQ0G2m.js";
-import { n as materializeInputVariablesWithMetadata } from "./inputVariables-DUGMb9Ka.js";
-import { a as extractPromptFromTags, r as extractInputVarsFromPrompt } from "./util-DNl96nNs.js";
-import { t as PromptfooChatCompletionProvider } from "./promptfoo-Cm4hiy1Y.js";
-import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-D6IjElRI.js";
-import { n as checkExfilTracking } from "./indirectWebPwn-CbjUG0rh.js";
-import { n as renderPrompt } from "./evaluatorHelpers-DuqFFfq7.js";
-import { t as Strategies } from "./strategies-CiSeroPH.js";
-import { a as fetchTraceContext, i as extractTraceIdFromTraceparent, n as formatTraceForMetadata, r as formatTraceSummary, t as resolveTracingOptions } from "./tracingOptions-ji2OuXbT.js";
-import { t as applyRuntimeTransforms } from "./runtimeTransform-DigbjU1r.js";
+import { n as materializeInputVariablesWithMetadata } from "./inputVariables-B7cylqzM.js";
+import { a as extractPromptFromTags, r as extractInputVarsFromPrompt } from "./util-D1NKMz55.js";
+import { a as assertRemoteMaterializationHandled, o as buildRemoteMaterializationContextVars, s as buildRemoteMaterializedInputVariables, t as PromptfooChatCompletionProvider } from "./promptfoo-CEsoPlBa.js";
+import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-BF25a7ms.js";
+import { n as checkExfilTracking } from "./indirectWebPwn-1gHqaL91.js";
+import { n as renderPrompt } from "./evaluatorHelpers-C8C8WQTv.js";
+import { t as Strategies } from "./strategies-4Nnr_9xt.js";
+import { a as fetchTraceContext, i as extractTraceIdFromTraceparent, n as formatTraceForMetadata, r as formatTraceSummary, t as resolveTracingOptions } from "./tracingOptions-WpE9IqC8.js";
+import { t as applyRuntimeTransforms } from "./runtimeTransform-Bw9Tttpp.js";
 //#region src/redteam/providers/iterativeMeta.ts
 function getIterativeMetaGoalRubric(goal) {
 	if (!goal) return "";
@@ -47,6 +47,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 	let storedGraderResult = void 0;
 	let stopReason = "Max iterations reached";
 	let lastResponse = void 0;
+	let failClosedError;
 	let previousTraceSummary;
 	const redteamHistory = [];
 	let lastTransformDisplayVars;
@@ -71,6 +72,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 			goal,
 			purpose: test?.metadata?.purpose,
 			modifiers: test?.metadata?.modifiers,
+			inputs,
 			excludeTargetOutputFromAgenticAttackGeneration,
 			lastAttempt: i > 0 && lastResponse && redteamHistory[i - 1] ? {
 				prompt: redteamHistory[i - 1].prompt,
@@ -86,7 +88,13 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 				raw: JSON.stringify(cloudRequest),
 				label: "meta-agent"
 			},
-			vars: {}
+			vars: shouldGenerateRemote() ? buildRemoteMaterializationContextVars({
+				injectVar,
+				inputs,
+				materializationIndex: i,
+				pluginId: String(test?.metadata?.pluginId || "iterative-meta"),
+				purpose: test?.metadata?.purpose
+			}) : {}
 		}, options);
 		accumulateResponseTokenUsage(totalTokenUsage, agentResp, { countAsRequest: false });
 		if (agentProvider.delay) {
@@ -139,13 +147,25 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 		}
 		lastFinalAttackPrompt = finalAttackPrompt;
 		const escapedAttackPrompt = finalAttackPrompt.replace(/\{\{/g, "{ {").replace(/\}\}/g, "} }").replace(/\{%/g, "{ %").replace(/%\}/g, "% }");
+		if (inputs && shouldGenerateRemote()) assertRemoteMaterializationHandled(agentResp, "Iterative Meta multi-input generation");
 		const currentInputVars = extractInputVarsFromPrompt(attackPrompt, inputs);
-		const currentRenderInputVars = (currentInputVars && inputs ? await materializeInputVariablesWithMetadata(currentInputVars, inputs, {
+		let materializedInputVars;
+		if (inputs && shouldGenerateRemote() && !currentInputVars && !agentResp.materializedVars) {
+			failClosedError = "Iterative Meta remote multi-input generation returned an invalid prompt format";
+			logger.warn("[IterativeMeta] Remote multi-input generation returned an invalid prompt format", {
+				iteration: i + 1,
+				attackPromptPreview: attackPrompt.slice(0, 200)
+			});
+			break;
+		}
+		if ((currentInputVars || agentResp.materializedVars) && inputs) if (shouldGenerateRemote()) materializedInputVars = buildRemoteMaterializedInputVariables(agentResp, currentInputVars ?? {}, inputs);
+		else materializedInputVars = await materializeInputVariablesWithMetadata(currentInputVars, inputs, {
 			materializationIndex: i,
 			pluginId: String(test?.metadata?.pluginId || "iterative-meta"),
 			provider: agentProvider,
 			purpose: test?.metadata?.purpose
-		}) : void 0)?.vars ?? currentInputVars;
+		});
+		const currentRenderInputVars = materializedInputVars?.vars ?? currentInputVars;
 		const updatedVars = {
 			...iterationVars,
 			[injectVar]: escapedAttackPrompt,
@@ -211,7 +231,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 		previousTraceSummary = attackTraceSummary;
 		let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 		if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
-		const { getGraderById } = await import("./graders-BX0f2tvS.js").then((n) => n.r);
+		const { getGraderById } = await import("./graders-GNRQ1357.js").then((n) => n.r);
 		if (test && assertToUse) {
 			const grader = getGraderById(assertToUse.type);
 			if (grader) {
@@ -302,7 +322,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 	return {
 		output: bestResponse || lastResponse?.output || "",
 		prompt: bestPrompt,
-		...lastResponse?.error ? { error: lastResponse.error } : {},
+		...failClosedError ? { error: failClosedError } : lastResponse?.error ? { error: lastResponse.error } : {},
 		metadata: {
 			finalIteration,
 			vulnerabilityAchieved,
@@ -382,4 +402,4 @@ var RedteamIterativeMetaProvider = class {
 //#endregion
 export { RedteamIterativeMetaProvider as default };
 
-//# sourceMappingURL=iterativeMeta-C7APE_P1.js.map
+//# sourceMappingURL=iterativeMeta-BbcVN5nQ.js.map

package/dist/src/{iterativeMeta-DgoQ7bLh.js → iterativeMeta-BcF8LsFk.js}

@@ -1,17 +1,17 @@
-import { a as logger, w as getEnvInt } from "./logger-KD8JjCRJ.js";
-import { m as sleep } from "./fetch-BufrQtvR.js";
+import { T as getEnvInt, a as logger } from "./logger-BjYLHvGm.js";
+import { m as sleep } from "./fetch-CBe8pU8Q.js";
 import { t as invariant } from "./invariant-DIYf9sP1.js";
-import { c as isLoggedIntoCloud } from "./accounts-DanM1wq_.js";
-import { l as shouldGenerateRemote, n as getRemoteGenerationExplicitlyDisabledError, s as neverGenerateRemote, t as getRemoteGenerationDisabledError } from "./remoteGeneration-COpWcmWd.js";
+import { c as isLoggedIntoCloud } from "./accounts-BAajbKSh.js";
+import { l as shouldGenerateRemote, n as getRemoteGenerationExplicitlyDisabledError, s as neverGenerateRemote, t as getRemoteGenerationDisabledError } from "./remoteGeneration-CoxtxLvB.js";
 import { a as createEmptyTokenUsage, n as accumulateResponseTokenUsage } from "./tokenUsageUtils-BjVkdk18.js";
-import { r as materializeInputVariablesWithMetadata } from "./inputVariables-B0qUChbV.js";
-import { a as extractPromptFromTags, r as extractInputVarsFromPrompt } from "./util-Df8YMvS1.js";
-import { t as PromptfooChatCompletionProvider } from "./promptfoo-BDrfT30-.js";
-import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-7pmVZLNO.js";
-import { n as checkExfilTracking } from "./indirectWebPwn-tNx9OZ35.js";
+import { r as materializeInputVariablesWithMetadata } from "./inputVariables-DpOsOnzU.js";
+import { a as extractPromptFromTags, r as extractInputVarsFromPrompt } from "./util-CKZReNsz.js";
+import { a as assertRemoteMaterializationHandled, o as buildRemoteMaterializationContextVars, s as buildRemoteMaterializedInputVariables, t as PromptfooChatCompletionProvider } from "./promptfoo-DVKqidd8.js";
+import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-yBQATkD5.js";
+import { n as checkExfilTracking } from "./indirectWebPwn-DRYpRTx6.js";
 import { n as renderPrompt, t as Strategies } from "./server/index.js";
-import { a as fetchTraceContext, i as extractTraceIdFromTraceparent, n as formatTraceForMetadata, r as formatTraceSummary, t as resolveTracingOptions } from "./tracingOptions-Chi74lOD.js";
-import { t as applyRuntimeTransforms } from "./runtimeTransform-BJOpL9Yc.js";
+import { a as fetchTraceContext, i as extractTraceIdFromTraceparent, n as formatTraceForMetadata, r as formatTraceSummary, t as resolveTracingOptions } from "./tracingOptions-PLePpCmo.js";
+import { t as applyRuntimeTransforms } from "./runtimeTransform-BmhEztlx.js";
 //#region src/redteam/providers/iterativeMeta.ts
 function getIterativeMetaGoalRubric(goal) {
 	if (!goal) return "";
@@ -46,6 +46,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 	let storedGraderResult = void 0;
 	let stopReason = "Max iterations reached";
 	let lastResponse = void 0;
+	let failClosedError;
 	let previousTraceSummary;
 	const redteamHistory = [];
 	let lastTransformDisplayVars;
@@ -70,6 +71,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 			goal,
 			purpose: test?.metadata?.purpose,
 			modifiers: test?.metadata?.modifiers,
+			inputs,
 			excludeTargetOutputFromAgenticAttackGeneration,
 			lastAttempt: i > 0 && lastResponse && redteamHistory[i - 1] ? {
 				prompt: redteamHistory[i - 1].prompt,
@@ -85,7 +87,13 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 				raw: JSON.stringify(cloudRequest),
 				label: "meta-agent"
 			},
-			vars: {}
+			vars: shouldGenerateRemote() ? buildRemoteMaterializationContextVars({
+				injectVar,
+				inputs,
+				materializationIndex: i,
+				pluginId: String(test?.metadata?.pluginId || "iterative-meta"),
+				purpose: test?.metadata?.purpose
+			}) : {}
 		}, options);
 		accumulateResponseTokenUsage(totalTokenUsage, agentResp, { countAsRequest: false });
 		if (agentProvider.delay) {
@@ -138,13 +146,25 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 		}
 		lastFinalAttackPrompt = finalAttackPrompt;
 		const escapedAttackPrompt = finalAttackPrompt.replace(/\{\{/g, "{ {").replace(/\}\}/g, "} }").replace(/\{%/g, "{ %").replace(/%\}/g, "% }");
+		if (inputs && shouldGenerateRemote()) assertRemoteMaterializationHandled(agentResp, "Iterative Meta multi-input generation");
 		const currentInputVars = extractInputVarsFromPrompt(attackPrompt, inputs);
-		const currentRenderInputVars = (currentInputVars && inputs ? await materializeInputVariablesWithMetadata(currentInputVars, inputs, {
+		let materializedInputVars;
+		if (inputs && shouldGenerateRemote() && !currentInputVars && !agentResp.materializedVars) {
+			failClosedError = "Iterative Meta remote multi-input generation returned an invalid prompt format";
+			logger.warn("[IterativeMeta] Remote multi-input generation returned an invalid prompt format", {
+				iteration: i + 1,
+				attackPromptPreview: attackPrompt.slice(0, 200)
+			});
+			break;
+		}
+		if ((currentInputVars || agentResp.materializedVars) && inputs) if (shouldGenerateRemote()) materializedInputVars = buildRemoteMaterializedInputVariables(agentResp, currentInputVars ?? {}, inputs);
+		else materializedInputVars = await materializeInputVariablesWithMetadata(currentInputVars, inputs, {
 			materializationIndex: i,
 			pluginId: String(test?.metadata?.pluginId || "iterative-meta"),
 			provider: agentProvider,
 			purpose: test?.metadata?.purpose
-		}) : void 0)?.vars ?? currentInputVars;
+		});
+		const currentRenderInputVars = materializedInputVars?.vars ?? currentInputVars;
 		const updatedVars = {
 			...iterationVars,
 			[injectVar]: escapedAttackPrompt,
@@ -210,7 +230,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 		previousTraceSummary = attackTraceSummary;
 		let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 		if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
-		const { getGraderById } = await import("./graders-C0nXU_ZP.js").then((n) => n.r);
+		const { getGraderById } = await import("./graders-k8qmhrPu.js").then((n) => n.r);
 		if (test && assertToUse) {
 			const grader = getGraderById(assertToUse.type);
 			if (grader) {
@@ -301,7 +321,7 @@ async function runMetaAgentRedteam({ context, filters, injectVar, numIterations,
 	return {
 		output: bestResponse || lastResponse?.output || "",
 		prompt: bestPrompt,
-		...lastResponse?.error ? { error: lastResponse.error } : {},
+		...failClosedError ? { error: failClosedError } : lastResponse?.error ? { error: lastResponse.error } : {},
 		metadata: {
 			finalIteration,
 			vulnerabilityAchieved,
@@ -381,4 +401,4 @@ var RedteamIterativeMetaProvider = class {
 //#endregion
 export { RedteamIterativeMetaProvider as default };
 
-//# sourceMappingURL=iterativeMeta-DgoQ7bLh.js.map
+//# sourceMappingURL=iterativeMeta-BcF8LsFk.js.map