promptfoo 0.121.7 → 0.121.9

package/dist/src/{iterativeTree-B5zxBBSW.js → iterativeTree-5TLHU9Kx.js}

@@ -1,17 +1,17 @@
-import { a as logger, m as extractFirstJsonObject } from "./logger-Ct2S6Yx-.js";
+import { a as logger, m as extractFirstJsonObject } from "./logger-Cs0I2v_y.js";
 import { t as invariant } from "./invariant-Ddh24eXh.js";
-import { l as sleep } from "./fetch-It34O8Ur.js";
-import { o as isLoggedIntoCloud } from "./accounts-Ca7WIoPY.js";
-import { o as getNunjucksEngine } from "./render-DFfDeYUK.js";
-import { l as shouldGenerateRemote } from "./remoteGeneration-DsaSwmG2.js";
+import { l as sleep } from "./fetch-CHJu2KON.js";
+import { o as isLoggedIntoCloud } from "./accounts-4Xa5fcHy.js";
+import { o as getNunjucksEngine } from "./render-CTZQAINJ.js";
+import { l as shouldGenerateRemote } from "./remoteGeneration-DvWEm3yi.js";
 import { a as createEmptyTokenUsage, n as accumulateResponseTokenUsage } from "./tokenUsageUtils-CmnQ0G2m.js";
-import { a as extractPromptFromTags, i as extractMaterializedVariablesFromJsonWithMetadata, o as getSessionId } from "./util-DNl96nNs.js";
-import { t as PromptfooChatCompletionProvider } from "./promptfoo-Cm4hiy1Y.js";
-import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, m as TokenUsageTracker, n as checkPenalizedPhrases, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-D6IjElRI.js";
-import { n as checkExfilTracking } from "./indirectWebPwn-CbjUG0rh.js";
-import { n as renderPrompt } from "./evaluatorHelpers-DuqFFfq7.js";
-import { t as Strategies } from "./strategies-CiSeroPH.js";
-import { t as applyRuntimeTransforms } from "./runtimeTransform-DigbjU1r.js";
+import { a as extractPromptFromTags, i as extractMaterializedVariablesFromJsonWithMetadata, o as getSessionId } from "./util-D1NKMz55.js";
+import { a as assertRemoteMaterializationHandled, o as buildRemoteMaterializationContextVars, s as buildRemoteMaterializedInputVariables, t as PromptfooChatCompletionProvider } from "./promptfoo-CEsoPlBa.js";
+import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, m as TokenUsageTracker, n as checkPenalizedPhrases, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-BF25a7ms.js";
+import { n as checkExfilTracking } from "./indirectWebPwn-1gHqaL91.js";
+import { n as renderPrompt } from "./evaluatorHelpers-C8C8WQTv.js";
+import { t as Strategies } from "./strategies-4Nnr_9xt.js";
+import { t as applyRuntimeTransforms } from "./runtimeTransform-Bw9Tttpp.js";
 import { n as CLOUD_ATTACKER_SYSTEM_PROMPT, r as JUDGE_SYSTEM_PROMPT, t as ATTACKER_SYSTEM_PROMPT } from "./prompts-DHhQsANy.js";
 import dedent from "dedent";
 //#region src/redteam/providers/iterativeTree.ts
@@ -155,14 +155,20 @@ async function evaluateResponse(provider, judgeSystemPrompt, targetResponse, pre
 * @param redteamHistory - The conversation history of the red team.
 * @returns A promise that resolves to an object containing the improvement and new prompt.
 */
-async function getNewPrompt(redteamProvider, redteamHistory) {
+async function getNewPrompt(redteamProvider, redteamHistory, materializationContext) {
 	const redteamBody = JSON.stringify(redteamHistory);
 	const redteamResp = await redteamProvider.callApi(redteamBody, {
 		prompt: {
 			raw: redteamBody,
 			label: "history"
 		},
-		vars: {}
+		vars: materializationContext ? buildRemoteMaterializationContextVars({
+			injectVar: void 0,
+			inputs: materializationContext.inputs,
+			materializationIndex: materializationContext.materializationIndex,
+			pluginId: materializationContext.pluginId,
+			purpose: materializationContext.purpose
+		}) : {}
 	});
 	if (redteamProvider.delay) {
 		logger.debug(`[IterativeTree] Sleeping for ${redteamProvider.delay}ms`);
@@ -185,6 +191,9 @@ async function getNewPrompt(redteamProvider, redteamHistory) {
 			logger.info(`[IterativeTree] Failed to parse attacker response as JSON (primary and fallback). Skipping this turn. primary=${String(primaryErr)} fallback=${String(fallbackErr)} outputPreview="${redteamResp.output.slice(0, 200)}"`);
 			return {
 				improvement: "parse failure – skipping turn",
+				inputMaterialization: redteamResp.inputMaterialization,
+				materializationHandled: redteamResp.materializationHandled,
+				materializedVars: redteamResp.materializedVars,
 				prompt: "",
 				tokenUsage: redteamResp.tokenUsage
 			};
@@ -193,6 +202,9 @@ async function getNewPrompt(redteamProvider, redteamHistory) {
 	else retObj = redteamResp.output;
 	return {
 		...retObj,
+		inputMaterialization: redteamResp.inputMaterialization,
+		materializationHandled: redteamResp.materializationHandled,
+		materializedVars: redteamResp.materializedVars,
 		tokenUsage: redteamResp.tokenUsage
 	};
 }
@@ -231,13 +243,16 @@ function updateRedteamHistory(targetResponse, goal, score, containsPenalizedPhra
 * @param id - Optional custom UUID for the node. If not provided, a new UUID will be generated.
 * @returns A new TreeNode object.
 */
-function createTreeNode(prompt, score, depth, id) {
+function createTreeNode(prompt, score, depth, id, options) {
 	return {
 		id: id || crypto.randomUUID(),
 		prompt,
 		score,
 		children: [],
-		depth
+		depth,
+		inputMaterialization: options?.inputMaterialization,
+		materializationHandled: options?.materializationHandled,
+		materializedVars: options?.materializedVars
 	};
 }
 /**
@@ -314,10 +329,20 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 					loggerTag: "[IterativeTree]"
 				});
 				const iterationVars = iterationContext?.vars || {};
-				let { improvement, prompt: newInjectVar } = await getNewPrompt(redteamProvider, [...redteamHistory, {
+				let { improvement, inputMaterialization, materializationHandled, materializedVars, prompt: newInjectVar } = await getNewPrompt(redteamProvider, [...redteamHistory, {
 					role: "assistant",
 					content: node.prompt
-				}]);
+				}], shouldGenerateRemote() ? {
+					inputs,
+					materializationIndex: attempts,
+					pluginId: String(test?.metadata?.pluginId || "unknown-plugin"),
+					purpose: test?.metadata?.purpose
+				} : void 0);
+				if (inputs && shouldGenerateRemote()) assertRemoteMaterializationHandled({
+					inputMaterialization,
+					materializationHandled,
+					materializedVars
+				}, "Iterative Tree multi-input generation");
 				attempts++;
 				const extractedPrompt = extractPromptFromTags(newInjectVar);
 				if (extractedPrompt) newInjectVar = extractedPrompt;
@@ -360,14 +385,22 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 					...iterationVars,
 					[injectVar]: finalInjectVar
 				};
-				if (inputs && Object.keys(inputs).length > 0) try {
-					const { vars: materializedVars } = await extractMaterializedVariablesFromJsonWithMetadata(JSON.parse(newInjectVar), inputs, {
+				if (inputs && Object.keys(inputs).length > 0) if (shouldGenerateRemote()) try {
+					const parsed = JSON.parse(newInjectVar);
+					Object.assign(updatedVars, buildRemoteMaterializedInputVariables({
+						inputMaterialization,
+						materializationHandled,
+						materializedVars
+					}, parsed, inputs).vars);
+				} catch {}
+				else try {
+					const { vars: localMaterializedVars } = await extractMaterializedVariablesFromJsonWithMetadata(JSON.parse(newInjectVar), inputs, {
 						materializationIndex: attempts - 1,
 						pluginId: String(test?.metadata?.pluginId || "unknown-plugin"),
 						provider: redteamProvider,
 						purpose: test?.metadata?.purpose
 					});
-					Object.assign(updatedVars, materializedVars);
+					Object.assign(updatedVars, localMaterializedVars);
 				} catch {}
 				const targetPrompt = await renderPrompt(prompt, updatedVars, filters, targetProvider, [injectVar]);
 				let targetResponse = await getTargetResponse(targetProvider, targetPrompt, iterationContext, options);
@@ -404,11 +437,18 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 				const containsPenalizedPhrase = checkPenalizedPhrases(targetResponse.output);
 				const { score, explanation } = await evaluateResponse(gradingProvider, judgeSystemPrompt, targetResponse.output, bestResponse, containsPenalizedPhrase);
 				logger.debug(`[Depth ${depth}, Attempt ${attempts}] Evaluation: score=${score}, penalized=${containsPenalizedPhrase}. Max score so far: ${maxScore}`);
-				nextLevelNodes.push(createTreeNode(newInjectVar, score, depth + 1));
+				nextLevelNodes.push(createTreeNode(newInjectVar, score, depth + 1, void 0, {
+					inputMaterialization,
+					materializationHandled,
+					materializedVars
+				}));
 				if (score > maxScore) {
 					maxScore = score;
 					bestResponse = targetResponse.output;
 					bestNode.prompt = newInjectVar;
+					bestNode.inputMaterialization = inputMaterialization;
+					bestNode.materializationHandled = materializationHandled;
+					bestNode.materializedVars = materializedVars;
 					bestFinalAttackPrompt = finalInjectVar;
 					bestTransformDisplayVars = lastTransformDisplayVars;
 					logger.debug(`[Depth ${depth}, Attempt ${attempts}] New max score: ${maxScore}`);
@@ -420,7 +460,7 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 					noImprovementCount++;
 					if (noImprovementCount % 5 === 0) logger.debug(`[Depth ${depth}, Attempt ${attempts}] No improvement for ${noImprovementCount} consecutive iterations. Max score: ${maxScore}`);
 				}
-				const { getGraderById } = await import("./graders-BX0f2tvS.js").then((n) => n.r);
+				const { getGraderById } = await import("./graders-GNRQ1357.js").then((n) => n.r);
 				let graderPassed;
 				let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 				if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
@@ -619,13 +659,23 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 		[injectVar]: bestPrompt
 	};
 	if (inputs && Object.keys(inputs).length > 0) try {
-		const { vars: materializedVars } = await extractMaterializedVariablesFromJsonWithMetadata(JSON.parse(bestPrompt), inputs, {
-			materializationIndex: attempts,
-			pluginId: String(test?.metadata?.pluginId || "unknown-plugin"),
-			provider: redteamProvider,
-			purpose: test?.metadata?.purpose
-		});
-		Object.assign(finalUpdatedVars, materializedVars);
+		const parsed = JSON.parse(bestPrompt);
+		if (shouldGenerateRemote()) {
+			const remoteBestNodeMaterialization = {
+				inputMaterialization: bestNode.inputMaterialization,
+				materializationHandled: bestNode.materializationHandled,
+				materializedVars: bestNode.materializedVars
+			};
+			if (remoteBestNodeMaterialization.materializationHandled) Object.assign(finalUpdatedVars, buildRemoteMaterializedInputVariables(remoteBestNodeMaterialization, parsed, inputs).vars);
+		} else {
+			const { vars: materializedVars } = await extractMaterializedVariablesFromJsonWithMetadata(parsed, inputs, {
+				materializationIndex: attempts,
+				pluginId: String(test?.metadata?.pluginId || "unknown-plugin"),
+				provider: redteamProvider,
+				purpose: test?.metadata?.purpose
+			});
+			Object.assign(finalUpdatedVars, materializedVars);
+		}
 	} catch {}
 	const finalTargetPrompt = await renderPrompt(prompt, finalUpdatedVars, filters, targetProvider, [injectVar]);
 	const finalTargetResponse = await getTargetResponse(targetProvider, finalTargetPrompt, context, options);
@@ -766,4 +816,4 @@ var RedteamIterativeTreeProvider = class {
 //#endregion
 export { RedteamIterativeTreeProvider as default };
 
-//# sourceMappingURL=iterativeTree-B5zxBBSW.js.map
+//# sourceMappingURL=iterativeTree-5TLHU9Kx.js.map

package/dist/src/{iterativeTree-CPMF10ve.cjs → iterativeTree-7XyY_zdo.cjs}

@@ -1,18 +1,18 @@
 const require_rolldown_runtime = require("./rolldown-runtime-D_mwlA32.cjs");
-const require_logger = require("./logger-cfNpzI4o.cjs");
+const require_logger = require("./logger-Cm0Nb8YX.cjs");
 const require_invariant = require("./invariant-QtnLD03y.cjs");
-const require_fetch = require("./fetch-Dw4XZHjj.cjs");
-const require_accounts = require("./accounts-CmWzeD2d.cjs");
-const require_render = require("./render-BNTrbmBw.cjs");
-const require_remoteGeneration = require("./remoteGeneration-DS9N3pgB.cjs");
+const require_fetch = require("./fetch-B2HvaVUc.cjs");
+const require_accounts = require("./accounts-DAcQXPwE.cjs");
+const require_render = require("./render-DJ4yipCD.cjs");
+const require_remoteGeneration = require("./remoteGeneration-CD3c_rzc.cjs");
 const require_tokenUsageUtils = require("./tokenUsageUtils-_B-P8IAi.cjs");
-const require_util = require("./util-CN8om2rz.cjs");
-const require_promptfoo = require("./promptfoo-b-baRMj-.cjs");
-const require_shared = require("./shared-WkgnDkcg.cjs");
-const require_indirectWebPwn = require("./indirectWebPwn-BJ22AbQa.cjs");
-const require_evaluatorHelpers = require("./evaluatorHelpers-CRqTvSux.cjs");
-const require_strategies = require("./strategies-7CS3Alao.cjs");
-const require_runtimeTransform = require("./runtimeTransform-ON3YYILw.cjs");
+const require_util = require("./util-3BRss2KA.cjs");
+const require_promptfoo = require("./promptfoo-DAXBmrE6.cjs");
+const require_shared = require("./shared-DlmtkptR.cjs");
+const require_indirectWebPwn = require("./indirectWebPwn-04ziKbly.cjs");
+const require_evaluatorHelpers = require("./evaluatorHelpers-2gpZ9Q_f.cjs");
+const require_strategies = require("./strategies-BD7US9WB.cjs");
+const require_runtimeTransform = require("./runtimeTransform-DJEknTZQ.cjs");
 const require_prompts = require("./prompts-hNvWBD3z.cjs");
 let dedent = require("dedent");
 dedent = require_rolldown_runtime.__toESM(dedent, 1);
@@ -157,14 +157,20 @@ async function evaluateResponse(provider, judgeSystemPrompt, targetResponse, pre
 * @param redteamHistory - The conversation history of the red team.
 * @returns A promise that resolves to an object containing the improvement and new prompt.
 */
-async function getNewPrompt(redteamProvider, redteamHistory) {
+async function getNewPrompt(redteamProvider, redteamHistory, materializationContext) {
 	const redteamBody = JSON.stringify(redteamHistory);
 	const redteamResp = await redteamProvider.callApi(redteamBody, {
 		prompt: {
 			raw: redteamBody,
 			label: "history"
 		},
-		vars: {}
+		vars: materializationContext ? require_promptfoo.buildRemoteMaterializationContextVars({
+			injectVar: void 0,
+			inputs: materializationContext.inputs,
+			materializationIndex: materializationContext.materializationIndex,
+			pluginId: materializationContext.pluginId,
+			purpose: materializationContext.purpose
+		}) : {}
 	});
 	if (redteamProvider.delay) {
 		require_logger.logger.debug(`[IterativeTree] Sleeping for ${redteamProvider.delay}ms`);
@@ -187,6 +193,9 @@ async function getNewPrompt(redteamProvider, redteamHistory) {
 			require_logger.logger.info(`[IterativeTree] Failed to parse attacker response as JSON (primary and fallback). Skipping this turn. primary=${String(primaryErr)} fallback=${String(fallbackErr)} outputPreview="${redteamResp.output.slice(0, 200)}"`);
 			return {
 				improvement: "parse failure – skipping turn",
+				inputMaterialization: redteamResp.inputMaterialization,
+				materializationHandled: redteamResp.materializationHandled,
+				materializedVars: redteamResp.materializedVars,
 				prompt: "",
 				tokenUsage: redteamResp.tokenUsage
 			};
@@ -195,6 +204,9 @@ async function getNewPrompt(redteamProvider, redteamHistory) {
 	else retObj = redteamResp.output;
 	return {
 		...retObj,
+		inputMaterialization: redteamResp.inputMaterialization,
+		materializationHandled: redteamResp.materializationHandled,
+		materializedVars: redteamResp.materializedVars,
 		tokenUsage: redteamResp.tokenUsage
 	};
 }
@@ -233,13 +245,16 @@ function updateRedteamHistory(targetResponse, goal, score, containsPenalizedPhra
 * @param id - Optional custom UUID for the node. If not provided, a new UUID will be generated.
 * @returns A new TreeNode object.
 */
-function createTreeNode(prompt, score, depth, id) {
+function createTreeNode(prompt, score, depth, id, options) {
 	return {
 		id: id || crypto.randomUUID(),
 		prompt,
 		score,
 		children: [],
-		depth
+		depth,
+		inputMaterialization: options?.inputMaterialization,
+		materializationHandled: options?.materializationHandled,
+		materializedVars: options?.materializedVars
 	};
 }
 /**
@@ -316,10 +331,20 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 					loggerTag: "[IterativeTree]"
 				});
 				const iterationVars = iterationContext?.vars || {};
-				let { improvement, prompt: newInjectVar } = await getNewPrompt(redteamProvider, [...redteamHistory, {
+				let { improvement, inputMaterialization, materializationHandled, materializedVars, prompt: newInjectVar } = await getNewPrompt(redteamProvider, [...redteamHistory, {
 					role: "assistant",
 					content: node.prompt
-				}]);
+				}], require_remoteGeneration.shouldGenerateRemote() ? {
+					inputs,
+					materializationIndex: attempts,
+					pluginId: String(test?.metadata?.pluginId || "unknown-plugin"),
+					purpose: test?.metadata?.purpose
+				} : void 0);
+				if (inputs && require_remoteGeneration.shouldGenerateRemote()) require_promptfoo.assertRemoteMaterializationHandled({
+					inputMaterialization,
+					materializationHandled,
+					materializedVars
+				}, "Iterative Tree multi-input generation");
 				attempts++;
 				const extractedPrompt = require_util.extractPromptFromTags(newInjectVar);
 				if (extractedPrompt) newInjectVar = extractedPrompt;
@@ -362,14 +387,22 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 					...iterationVars,
 					[injectVar]: finalInjectVar
 				};
-				if (inputs && Object.keys(inputs).length > 0) try {
-					const { vars: materializedVars } = await require_util.extractMaterializedVariablesFromJsonWithMetadata(JSON.parse(newInjectVar), inputs, {
+				if (inputs && Object.keys(inputs).length > 0) if (require_remoteGeneration.shouldGenerateRemote()) try {
+					const parsed = JSON.parse(newInjectVar);
+					Object.assign(updatedVars, require_promptfoo.buildRemoteMaterializedInputVariables({
+						inputMaterialization,
+						materializationHandled,
+						materializedVars
+					}, parsed, inputs).vars);
+				} catch {}
+				else try {
+					const { vars: localMaterializedVars } = await require_util.extractMaterializedVariablesFromJsonWithMetadata(JSON.parse(newInjectVar), inputs, {
 						materializationIndex: attempts - 1,
 						pluginId: String(test?.metadata?.pluginId || "unknown-plugin"),
 						provider: redteamProvider,
 						purpose: test?.metadata?.purpose
 					});
-					Object.assign(updatedVars, materializedVars);
+					Object.assign(updatedVars, localMaterializedVars);
 				} catch {}
 				const targetPrompt = await require_evaluatorHelpers.renderPrompt(prompt, updatedVars, filters, targetProvider, [injectVar]);
 				let targetResponse = await require_shared.getTargetResponse(targetProvider, targetPrompt, iterationContext, options);
@@ -406,11 +439,18 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 				const containsPenalizedPhrase = require_shared.checkPenalizedPhrases(targetResponse.output);
 				const { score, explanation } = await evaluateResponse(gradingProvider, judgeSystemPrompt, targetResponse.output, bestResponse, containsPenalizedPhrase);
 				require_logger.logger.debug(`[Depth ${depth}, Attempt ${attempts}] Evaluation: score=${score}, penalized=${containsPenalizedPhrase}. Max score so far: ${maxScore}`);
-				nextLevelNodes.push(createTreeNode(newInjectVar, score, depth + 1));
+				nextLevelNodes.push(createTreeNode(newInjectVar, score, depth + 1, void 0, {
+					inputMaterialization,
+					materializationHandled,
+					materializedVars
+				}));
 				if (score > maxScore) {
 					maxScore = score;
 					bestResponse = targetResponse.output;
 					bestNode.prompt = newInjectVar;
+					bestNode.inputMaterialization = inputMaterialization;
+					bestNode.materializationHandled = materializationHandled;
+					bestNode.materializedVars = materializedVars;
 					bestFinalAttackPrompt = finalInjectVar;
 					bestTransformDisplayVars = lastTransformDisplayVars;
 					require_logger.logger.debug(`[Depth ${depth}, Attempt ${attempts}] New max score: ${maxScore}`);
@@ -422,7 +462,7 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 					noImprovementCount++;
 					if (noImprovementCount % 5 === 0) require_logger.logger.debug(`[Depth ${depth}, Attempt ${attempts}] No improvement for ${noImprovementCount} consecutive iterations. Max score: ${maxScore}`);
 				}
-				const { getGraderById } = await Promise.resolve().then(() => require("./graders-ClrU2fnd.cjs")).then((n) => n.graders_exports);
+				const { getGraderById } = await Promise.resolve().then(() => require("./graders-CQv1GT5Q.cjs")).then((n) => n.graders_exports);
 				let graderPassed;
 				let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 				if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
@@ -621,13 +661,23 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 		[injectVar]: bestPrompt
 	};
 	if (inputs && Object.keys(inputs).length > 0) try {
-		const { vars: materializedVars } = await require_util.extractMaterializedVariablesFromJsonWithMetadata(JSON.parse(bestPrompt), inputs, {
-			materializationIndex: attempts,
-			pluginId: String(test?.metadata?.pluginId || "unknown-plugin"),
-			provider: redteamProvider,
-			purpose: test?.metadata?.purpose
-		});
-		Object.assign(finalUpdatedVars, materializedVars);
+		const parsed = JSON.parse(bestPrompt);
+		if (require_remoteGeneration.shouldGenerateRemote()) {
+			const remoteBestNodeMaterialization = {
+				inputMaterialization: bestNode.inputMaterialization,
+				materializationHandled: bestNode.materializationHandled,
+				materializedVars: bestNode.materializedVars
+			};
+			if (remoteBestNodeMaterialization.materializationHandled) Object.assign(finalUpdatedVars, require_promptfoo.buildRemoteMaterializedInputVariables(remoteBestNodeMaterialization, parsed, inputs).vars);
+		} else {
+			const { vars: materializedVars } = await require_util.extractMaterializedVariablesFromJsonWithMetadata(parsed, inputs, {
+				materializationIndex: attempts,
+				pluginId: String(test?.metadata?.pluginId || "unknown-plugin"),
+				provider: redteamProvider,
+				purpose: test?.metadata?.purpose
+			});
+			Object.assign(finalUpdatedVars, materializedVars);
+		}
 	} catch {}
 	const finalTargetPrompt = await require_evaluatorHelpers.renderPrompt(prompt, finalUpdatedVars, filters, targetProvider, [injectVar]);
 	const finalTargetResponse = await require_shared.getTargetResponse(targetProvider, finalTargetPrompt, context, options);
@@ -768,4 +818,4 @@ var RedteamIterativeTreeProvider = class {
 //#endregion
 exports.default = RedteamIterativeTreeProvider;
 
-//# sourceMappingURL=iterativeTree-CPMF10ve.cjs.map
+//# sourceMappingURL=iterativeTree-7XyY_zdo.cjs.map

package/dist/src/{iterativeTree-DvZ7GBwt.js → iterativeTree-CnHx_kPu.js}

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
-import { g as extractFirstJsonObject, s as logger } from "./logger-BbY6ypFL.js";
-import { f as sleep } from "./fetch-DXUnXkVU.js";
+import { g as extractFirstJsonObject, s as logger } from "./logger-h-eiS4iv.js";
+import { f as sleep } from "./fetch-C59QM4cf.js";
 import { t as invariant } from "./invariant-B2Rf6avk.js";
-import { c as isLoggedIntoCloud } from "./accounts-CjFnOPmb.js";
-import { o as getNunjucksEngine } from "./render-CSP99NLm.js";
-import { l as shouldGenerateRemote } from "./remoteGeneration-B1_XsKXU.js";
+import { c as isLoggedIntoCloud } from "./accounts-Bw2qPqE-.js";
+import { o as getNunjucksEngine } from "./render-jE6RKVgk.js";
+import { l as shouldGenerateRemote } from "./remoteGeneration-DW6mPZnO.js";
 import { a as createEmptyTokenUsage, n as accumulateResponseTokenUsage } from "./tokenUsageUtils-CDet74yk.js";
-import { a as extractPromptFromTags, i as extractMaterializedVariablesFromJsonWithMetadata, o as getSessionId } from "./util-kDURhgJW.js";
-import { t as PromptfooChatCompletionProvider } from "./promptfoo-Rjp-MeBb.js";
-import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, m as TokenUsageTracker, n as checkPenalizedPhrases, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-9WHQ1oNE.js";
-import { n as checkExfilTracking } from "./indirectWebPwn-uyWdHx04.js";
-import { n as renderPrompt } from "./evaluatorHelpers-BsYP_muT.js";
-import { t as Strategies } from "./strategies-DRJjGTIY.js";
-import { t as applyRuntimeTransforms } from "./runtimeTransform-Dgh_D7DU.js";
+import { a as extractPromptFromTags, i as extractMaterializedVariablesFromJsonWithMetadata, o as getSessionId } from "./util-D9grslJP.js";
+import { a as assertRemoteMaterializationHandled, o as buildRemoteMaterializationContextVars, s as buildRemoteMaterializedInputVariables, t as PromptfooChatCompletionProvider } from "./promptfoo-wxe28-q9.js";
+import { c as getTargetResponse, f as redteamProviderManager, i as externalizeResponseForRedteamHistory, m as TokenUsageTracker, n as checkPenalizedPhrases, o as getGraderAssertionValue, r as createIterationContext, t as buildGraderResultAssertion } from "./shared-DsbObxvy.js";
+import { n as checkExfilTracking } from "./indirectWebPwn-BXUoJl4I.js";
+import { n as renderPrompt } from "./evaluatorHelpers-DDG44JeI.js";
+import { t as Strategies } from "./strategies-Ptz_P4P4.js";
+import { t as applyRuntimeTransforms } from "./runtimeTransform-s14J7yxm.js";
 import { n as CLOUD_ATTACKER_SYSTEM_PROMPT, r as JUDGE_SYSTEM_PROMPT, t as ATTACKER_SYSTEM_PROMPT } from "./prompts-C-bqE1Yp.js";
 import dedent from "dedent";
 //#region src/redteam/providers/iterativeTree.ts
@@ -156,14 +156,20 @@ async function evaluateResponse(provider, judgeSystemPrompt, targetResponse, pre
 * @param redteamHistory - The conversation history of the red team.
 * @returns A promise that resolves to an object containing the improvement and new prompt.
 */
-async function getNewPrompt(redteamProvider, redteamHistory) {
+async function getNewPrompt(redteamProvider, redteamHistory, materializationContext) {
 	const redteamBody = JSON.stringify(redteamHistory);
 	const redteamResp = await redteamProvider.callApi(redteamBody, {
 		prompt: {
 			raw: redteamBody,
 			label: "history"
 		},
-		vars: {}
+		vars: materializationContext ? buildRemoteMaterializationContextVars({
+			injectVar: void 0,
+			inputs: materializationContext.inputs,
+			materializationIndex: materializationContext.materializationIndex,
+			pluginId: materializationContext.pluginId,
+			purpose: materializationContext.purpose
+		}) : {}
 	});
 	if (redteamProvider.delay) {
 		logger.debug(`[IterativeTree] Sleeping for ${redteamProvider.delay}ms`);
@@ -186,6 +192,9 @@ async function getNewPrompt(redteamProvider, redteamHistory) {
 			logger.info(`[IterativeTree] Failed to parse attacker response as JSON (primary and fallback). Skipping this turn. primary=${String(primaryErr)} fallback=${String(fallbackErr)} outputPreview="${redteamResp.output.slice(0, 200)}"`);
 			return {
 				improvement: "parse failure – skipping turn",
+				inputMaterialization: redteamResp.inputMaterialization,
+				materializationHandled: redteamResp.materializationHandled,
+				materializedVars: redteamResp.materializedVars,
 				prompt: "",
 				tokenUsage: redteamResp.tokenUsage
 			};
@@ -194,6 +203,9 @@ async function getNewPrompt(redteamProvider, redteamHistory) {
 	else retObj = redteamResp.output;
 	return {
 		...retObj,
+		inputMaterialization: redteamResp.inputMaterialization,
+		materializationHandled: redteamResp.materializationHandled,
+		materializedVars: redteamResp.materializedVars,
 		tokenUsage: redteamResp.tokenUsage
 	};
 }
@@ -232,13 +244,16 @@ function updateRedteamHistory(targetResponse, goal, score, containsPenalizedPhra
 * @param id - Optional custom UUID for the node. If not provided, a new UUID will be generated.
 * @returns A new TreeNode object.
 */
-function createTreeNode(prompt, score, depth, id) {
+function createTreeNode(prompt, score, depth, id, options) {
 	return {
 		id: id || crypto.randomUUID(),
 		prompt,
 		score,
 		children: [],
-		depth
+		depth,
+		inputMaterialization: options?.inputMaterialization,
+		materializationHandled: options?.materializationHandled,
+		materializedVars: options?.materializedVars
 	};
 }
 /**
@@ -315,10 +330,20 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 					loggerTag: "[IterativeTree]"
 				});
 				const iterationVars = iterationContext?.vars || {};
-				let { improvement, prompt: newInjectVar } = await getNewPrompt(redteamProvider, [...redteamHistory, {
+				let { improvement, inputMaterialization, materializationHandled, materializedVars, prompt: newInjectVar } = await getNewPrompt(redteamProvider, [...redteamHistory, {
 					role: "assistant",
 					content: node.prompt
-				}]);
+				}], shouldGenerateRemote() ? {
+					inputs,
+					materializationIndex: attempts,
+					pluginId: String(test?.metadata?.pluginId || "unknown-plugin"),
+					purpose: test?.metadata?.purpose
+				} : void 0);
+				if (inputs && shouldGenerateRemote()) assertRemoteMaterializationHandled({
+					inputMaterialization,
+					materializationHandled,
+					materializedVars
+				}, "Iterative Tree multi-input generation");
 				attempts++;
 				const extractedPrompt = extractPromptFromTags(newInjectVar);
 				if (extractedPrompt) newInjectVar = extractedPrompt;
@@ -361,14 +386,22 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 					...iterationVars,
 					[injectVar]: finalInjectVar
 				};
-				if (inputs && Object.keys(inputs).length > 0) try {
-					const { vars: materializedVars } = await extractMaterializedVariablesFromJsonWithMetadata(JSON.parse(newInjectVar), inputs, {
+				if (inputs && Object.keys(inputs).length > 0) if (shouldGenerateRemote()) try {
+					const parsed = JSON.parse(newInjectVar);
+					Object.assign(updatedVars, buildRemoteMaterializedInputVariables({
+						inputMaterialization,
+						materializationHandled,
+						materializedVars
+					}, parsed, inputs).vars);
+				} catch {}
+				else try {
+					const { vars: localMaterializedVars } = await extractMaterializedVariablesFromJsonWithMetadata(JSON.parse(newInjectVar), inputs, {
 						materializationIndex: attempts - 1,
 						pluginId: String(test?.metadata?.pluginId || "unknown-plugin"),
 						provider: redteamProvider,
 						purpose: test?.metadata?.purpose
 					});
-					Object.assign(updatedVars, materializedVars);
+					Object.assign(updatedVars, localMaterializedVars);
 				} catch {}
 				const targetPrompt = await renderPrompt(prompt, updatedVars, filters, targetProvider, [injectVar]);
 				let targetResponse = await getTargetResponse(targetProvider, targetPrompt, iterationContext, options);
@@ -405,11 +438,18 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 				const containsPenalizedPhrase = checkPenalizedPhrases(targetResponse.output);
 				const { score, explanation } = await evaluateResponse(gradingProvider, judgeSystemPrompt, targetResponse.output, bestResponse, containsPenalizedPhrase);
 				logger.debug(`[Depth ${depth}, Attempt ${attempts}] Evaluation: score=${score}, penalized=${containsPenalizedPhrase}. Max score so far: ${maxScore}`);
-				nextLevelNodes.push(createTreeNode(newInjectVar, score, depth + 1));
+				nextLevelNodes.push(createTreeNode(newInjectVar, score, depth + 1, void 0, {
+					inputMaterialization,
+					materializationHandled,
+					materializedVars
+				}));
 				if (score > maxScore) {
 					maxScore = score;
 					bestResponse = targetResponse.output;
 					bestNode.prompt = newInjectVar;
+					bestNode.inputMaterialization = inputMaterialization;
+					bestNode.materializationHandled = materializationHandled;
+					bestNode.materializedVars = materializedVars;
 					bestFinalAttackPrompt = finalInjectVar;
 					bestTransformDisplayVars = lastTransformDisplayVars;
 					logger.debug(`[Depth ${depth}, Attempt ${attempts}] New max score: ${maxScore}`);
@@ -421,7 +461,7 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 					noImprovementCount++;
 					if (noImprovementCount % 5 === 0) logger.debug(`[Depth ${depth}, Attempt ${attempts}] No improvement for ${noImprovementCount} consecutive iterations. Max score: ${maxScore}`);
 				}
-				const { getGraderById } = await import("./graders-BDT7dif6.js");
+				const { getGraderById } = await import("./graders-D4vc1PFi.js");
 				let graderPassed;
 				let assertToUse = test?.assert?.find((a) => a.type && a.type.includes(test.metadata?.pluginId));
 				if (!assertToUse) assertToUse = test?.assert?.find((a) => a.type);
@@ -620,13 +660,23 @@ async function runRedteamConversation({ context, filters, injectVar, options, pr
 		[injectVar]: bestPrompt
 	};
 	if (inputs && Object.keys(inputs).length > 0) try {
-		const { vars: materializedVars } = await extractMaterializedVariablesFromJsonWithMetadata(JSON.parse(bestPrompt), inputs, {
-			materializationIndex: attempts,
-			pluginId: String(test?.metadata?.pluginId || "unknown-plugin"),
-			provider: redteamProvider,
-			purpose: test?.metadata?.purpose
-		});
-		Object.assign(finalUpdatedVars, materializedVars);
+		const parsed = JSON.parse(bestPrompt);
+		if (shouldGenerateRemote()) {
+			const remoteBestNodeMaterialization = {
+				inputMaterialization: bestNode.inputMaterialization,
+				materializationHandled: bestNode.materializationHandled,
+				materializedVars: bestNode.materializedVars
+			};
+			if (remoteBestNodeMaterialization.materializationHandled) Object.assign(finalUpdatedVars, buildRemoteMaterializedInputVariables(remoteBestNodeMaterialization, parsed, inputs).vars);
+		} else {
+			const { vars: materializedVars } = await extractMaterializedVariablesFromJsonWithMetadata(parsed, inputs, {
+				materializationIndex: attempts,
+				pluginId: String(test?.metadata?.pluginId || "unknown-plugin"),
+				provider: redteamProvider,
+				purpose: test?.metadata?.purpose
+			});
+			Object.assign(finalUpdatedVars, materializedVars);
+		}
 	} catch {}
 	const finalTargetPrompt = await renderPrompt(prompt, finalUpdatedVars, filters, targetProvider, [injectVar]);
 	const finalTargetResponse = await getTargetResponse(targetProvider, finalTargetPrompt, context, options);
@@ -767,4 +817,4 @@ var RedteamIterativeTreeProvider = class {
 //#endregion
 export { RedteamIterativeTreeProvider as default };
 
-//# sourceMappingURL=iterativeTree-DvZ7GBwt.js.map
+//# sourceMappingURL=iterativeTree-CnHx_kPu.js.map