promptfoo 0.122.1 → 0.122.2

package/dist/src/index.cjs

@@ -7,45 +7,46 @@ const require_prompts = require("./prompts-BQkIeVdz.cjs");
 const require_transform = require("./transform-C8GdlKIz.cjs");
 const require_shared = require("./shared-BsORdj8L.cjs");
 const require_invariant = require("./invariant-C2JOzzO2.cjs");
-const require_util = require("./util-L5T81aJ0.cjs");
-const require_fetch = require("./fetch-DTnUr1aF.cjs");
+const require_util = require("./util-BPkxeLuk.cjs");
+const require_fetch = require("./fetch-D54lzFcD.cjs");
 const require_tables = require("./tables-BaWJhXDV.cjs");
 const require_fileExtensions = require("./fileExtensions-BQZEFw03.cjs");
 const require_time = require("./time-B7AqDy5g.cjs");
-const require_accounts = require("./accounts-CZFxG3Og.cjs");
+const require_accounts = require("./accounts-DosZWKJy.cjs");
 const require_esm = require("./esm-DQhzWczC.cjs");
 const require_providerRegistry = require("./providerRegistry-DwoDhx6H.cjs");
 const require_spanRoles = require("./spanRoles-B06DAUjz.cjs");
 const require_genaiTracer = require("./genaiTracer-D_3mCxrD.cjs");
 const require_createHash = require("./createHash-sm6Q6LWg.cjs");
-const require_cache = require("./cache-DU82DyKI.cjs");
-const require_agentic_utils = require("./agentic-utils-B3r4NpU-.cjs");
+const require_cache = require("./cache-g3VTrtsd.cjs");
+const require_agentic_utils = require("./agentic-utils-CMewaQ09.cjs");
 const require_secureTempFiles = require("./secureTempFiles-B1X1YV1K.cjs");
 const require_pythonUtils = require("./pythonUtils-CqlMEmzG.cjs");
+const require_render = require("./render-C1VJjFT2.cjs");
 const require_blobs = require("./blobs-DsXWJXf6.cjs");
 const require_extractor = require("./extractor-C6JkPnKn.cjs");
 const require_tokenUsageUtils = require("./tokenUsageUtils-BbqyaBi4.cjs");
-const require_util$1 = require("./util-CeP1x2P-.cjs");
+const require_util$1 = require("./util-Cadd9fGT.cjs");
 const require_tracing = require("./tracing-DFewlCzC.cjs");
 const require_store = require("./store-BYkv00xz.cjs");
-const require_remoteGeneration = require("./remoteGeneration-PxK1EefI.cjs");
-const require_graders = require("./graders-D7xtBg2s.cjs");
-const require_storage = require("./storage-BFmq8CKG.cjs");
-const require_providers = require("./providers-ASKoKjG0.cjs");
+const require_remoteGeneration = require("./remoteGeneration-C0Ev99MO.cjs");
+const require_graders = require("./graders-DpPGnz8u.cjs");
+const require_storage = require("./storage-BX5ws4jD.cjs");
+const require_providers = require("./providers-CRCoPqQH.cjs");
 const require_processShim = require("./processShim-DkKQ-mhc.cjs");
 const require_text = require("./text-513KmH8t.cjs");
 const require_packageParser = require("./packageParser-DpmHM-J_.cjs");
 const require_rubyUtils = require("./rubyUtils-Dkk6DAIR.cjs");
-const require_util$2 = require("./util-COyt9Xaf.cjs");
+const require_util$2 = require("./util-BuKoPAn3.cjs");
 const require_inputVariables = require("./inputVariables-CQ7Ian4x.cjs");
-const require_promptfoo = require("./promptfoo-BzTq3CZR.cjs");
-const require_shared$1 = require("./shared-IP25vMkJ.cjs");
+const require_promptfoo = require("./promptfoo-B3EDkr9n.cjs");
+const require_shared$1 = require("./shared-Bl84k1Oo.cjs");
 const require_transform$1 = require("./transform-Bz311bXX.cjs");
-const require_telemetry = require("./telemetry-DVYPYBQH.cjs");
-const require_indirectWebPwn = require("./indirectWebPwn-Ch0EQWKt.cjs");
-const require_evaluatorHelpers = require("./evaluatorHelpers-D2ObFR8i.cjs");
-const require_traceContext = require("./traceContext-BuXw2Yxu.cjs");
-const require_strategies = require("./strategies-Bn1z2exW.cjs");
+const require_telemetry = require("./telemetry-cZi2RTrN.cjs");
+const require_indirectWebPwn = require("./indirectWebPwn-CwSQCQGM.cjs");
+const require_evaluatorHelpers = require("./evaluatorHelpers-B2c1yYV4.cjs");
+const require_traceContext = require("./traceContext-achbslCl.cjs");
+const require_strategies = require("./strategies-DJfqHuoT.cjs");
 let zod = require("zod");
 let fs_promises = require("fs/promises");
 fs_promises = require_logger.__toESM(fs_promises, 1);
@@ -227,7 +228,7 @@ JSON:`;
 };
 //#endregion
 //#region src/external/matchers/deepeval.ts
-const nunjucks$1 = require_util.getNunjucksEngine(void 0, false, true);
+const nunjucks$1 = require_render.getNunjucksEngine(void 0, false, true);
 async function matchesConversationRelevance(messages, threshold, vars, grading, providerCallContext) {
 	const textProvider = await require_graders.getAndCheckProvider("text", grading?.provider, (await require_graders.getDefaultProviders()).gradingProvider, "conversation relevancy check");
 	const messageRoles = [];
@@ -1195,7 +1196,7 @@ async function generateTraceContextIfNeeded(test, evaluateOptions, testIdx, prom
 async function matchesAgentRubric(rubric, llmOutput, grading, vars, assertion, providerCallContext) {
 	if (!grading) throw new Error("Cannot grade output without grading config. Specify --grader option or grading config.");
 	const agentProvider = (grading.provider ? await require_graders.getGradingProvider("text", grading.provider, null) : null) || require_remoteGeneration.getCodexDefaultProviders().llmRubricProvider;
-	if (!agentProvider || !require_agentic_utils.isAgenticProvider(agentProvider)) throw new Error("agent-rubric assertion requires an agentic grading provider. Use openai:codex-sdk, openai:codex-app-server, anthropic:claude-agent-sdk, openinterpreter, or opencode:sdk.");
+	if (!agentProvider || !require_agentic_utils.isAgenticGradingProvider(agentProvider)) throw new Error("agent-rubric assertion requires an agentic grading provider. Use openai:codex-sdk, openai:codex-app-server, anthropic:claude-agent-sdk, openinterpreter, or opencode:sdk.");
 	const result = await require_graders.runJsonGradingPrompt({
 		assertion,
 		checkName: "agent-rubric check",
@@ -5448,7 +5449,7 @@ const ASSERTION_HANDLERS = {
 	webhook: handleWebhook,
 	"word-count": handleWordCount
 };
-const nunjucks = require_util.getNunjucksEngine();
+const nunjucks = require_render.getNunjucksEngine();
 /**
 * Renders a metric name template with test variables.
 * @param metric - The metric name, possibly containing Nunjucks template syntax
@@ -5837,8 +5838,7 @@ function resolveGuardrailsApi() {
 	if (override) base = override;
 	else if (require_fetch.cloudConfig.isEnabled()) {
 		base = require_fetch.cloudConfig.getApiHost();
-		const apiKey = require_fetch.cloudConfig.getApiKey();
-		if (apiKey) headers.Authorization = `Bearer ${apiKey}`;
+		Object.assign(headers, require_fetch.cloudConfig.getAuthHeaders() ?? {});
 	} else base = require_fetch.getShareApiBaseUrl();
 	return {
 		baseUrl: `${base.replace(/\/+$/, "")}/v1`,
@@ -6039,7 +6039,7 @@ const nodeEvaluatorRuntime = {
 			const maxPasses = Object.keys(renderedEnv).length;
 			for (let pass = 0; pass < maxPasses; pass++) {
 				const previousEnv = renderedEnv;
-				const nextEnv = require_util.renderEnvOnlyInObject(previousEnv, {
+				const nextEnv = require_render.renderEnvOnlyInObject(previousEnv, {
 					...processEnvironment,
 					...previousEnv
 				}, true);
@@ -6053,7 +6053,7 @@ const nodeEvaluatorRuntime = {
 		const runtimeTestSuite = {
 			...testSuite,
 			...renderedEnv && { env: renderedEnv },
-			tracing: require_util.renderEnvOnlyInObject(testSuite.tracing, {
+			tracing: require_render.renderEnvOnlyInObject(testSuite.tracing, {
 				...processEnvironment,
 				...renderedEnv
 			}, true)
@@ -7229,7 +7229,7 @@ const promptUsesConversationVariableCache = new lru_cache.LRUCache({ max: PROMPT
 function promptUsesConversationVariable(prompt) {
 	const cached = promptUsesConversationVariableCache.get(prompt.raw);
 	if (cached !== void 0) return cached;
-	const { referenced, parsed } = require_util.analyzeTemplateReference(prompt.raw, CONVERSATION_VAR_NAME);
+	const { referenced, parsed } = require_render.analyzeTemplateReference(prompt.raw, CONVERSATION_VAR_NAME);
 	if (parsed) promptUsesConversationVariableCache.set(prompt.raw, referenced);
 	return referenced;
 }
@@ -7427,7 +7427,7 @@ function shouldSkipRedteamInjectVar(test, testSuite, isRedteam) {
 function getRedteamInjectVar(test, prompt, testSuite) {
 	if (testSuite?.redteam?.injectVar) return testSuite.redteam.injectVar;
 	const promptTemplate = prompt.template ?? prompt.raw;
-	const promptVars = require_util.extractVariablesFromTemplate(promptTemplate);
+	const promptVars = require_render.extractVariablesFromTemplate(promptTemplate);
 	if (testSuite?.redteam && promptVars.includes("prompt") && Object.prototype.hasOwnProperty.call(test.vars ?? {}, "prompt")) return "prompt";
 	return promptVars.filter((variableName) => Object.prototype.hasOwnProperty.call(test.vars ?? {}, variableName)).at(-1) ?? promptVars.at(-1) ?? "prompt";
 }
@@ -8548,7 +8548,7 @@ async function resolveDefaultTestProvider(defaultTest, testCase) {
 	const defaultProvider = defaultTest.provider;
 	if (require_util.isApiProvider(defaultProvider)) return defaultProvider;
 	if (typeof defaultProvider === "object" && defaultProvider.id) {
-		const { loadApiProvider } = await Promise.resolve().then(() => require("./providers-ASKoKjG0.cjs")).then((n) => n.providers_exports);
+		const { loadApiProvider } = await Promise.resolve().then(() => require("./providers-CRCoPqQH.cjs")).then((n) => n.providers_exports);
 		return loadApiProvider(typeof defaultProvider.id === "function" ? defaultProvider.id() : defaultProvider.id, { options: defaultProvider });
 	}
 	return defaultProvider;
@@ -12015,8 +12015,10 @@ async function sendChunkedResults(evalRecord, url$5, options = {}) {
 		maxResultsPerChunk: resultsPerChunk
 	};
 	require_logger.logger.debug(`Chunk config: ${JSON.stringify(chunkConfig)}`);
-	const headers = { "Content-Type": "application/json" };
-	if (require_fetch.cloudConfig.isEnabled()) headers["Authorization"] = `Bearer ${require_fetch.cloudConfig.getApiKey()}`;
+	const headers = {
+		"Content-Type": "application/json",
+		...require_fetch.cloudConfig.isEnabled() ? require_fetch.cloudConfig.getAuthHeaders() ?? {} : {}
+	};
 	const totalResults = await evalRecord.getTotalResultRowCount();
 	require_logger.logger.debug(`Total results to share: ${totalResults}`);
 	let progressBar = null;
@@ -14034,9 +14036,9 @@ async function dereferenceConfig(rawConfig) {
 function renderConfigEnvTemplates(config) {
 	const baseEnvForFirstPass = require_logger.getEnvBool("PROMPTFOO_DISABLE_TEMPLATE_ENV_VARS", require_logger.getEnvBool("PROMPTFOO_SELF_HOSTED", false)) ? {} : process$1.default.env;
 	const rawConfigEnv = config.env;
-	const renderedConfigEnv = rawConfigEnv ? require_util.renderEnvOnlyInObject(rawConfigEnv, baseEnvForFirstPass, true) : void 0;
+	const renderedConfigEnv = rawConfigEnv ? require_render.renderEnvOnlyInObject(rawConfigEnv, baseEnvForFirstPass, true) : void 0;
 	const filteredConfigEnv = renderedConfigEnv ? Object.fromEntries(Object.entries(renderedConfigEnv).filter(([, v]) => v !== void 0)) : void 0;
-	const renderedConfig = require_util.renderEnvOnlyInObject(config, filteredConfigEnv);
+	const renderedConfig = require_render.renderEnvOnlyInObject(config, filteredConfigEnv);
 	require_logger.preserveTracingCredentialReferences(config, renderedConfig);
 	return renderedConfig;
 }
@@ -14861,7 +14863,7 @@ var CustomPlugin = class extends require_graders.RedteamPluginBase {
 	getAssertions(_prompt) {
 		const assertion = {
 			type: "llm-rubric",
-			value: require_util.getNunjucksEngine().renderString(this.definition.grader, { purpose: this.purpose }),
+			value: require_render.getNunjucksEngine().renderString(this.definition.grader, { purpose: this.purpose }),
 			metric: this.getMetricName()
 		};
 		if (this.definition.threshold !== void 0) assertion.threshold = this.definition.threshold;
@@ -16637,7 +16639,7 @@ async function synthesize({ abortSignal, cloudTargetDatabaseId: explicitCloudTar
 		if (removedPlugins.length > 0) require_logger.logger.info(`Skipping ${removedPlugins.length} plugin${removedPlugins.length > 1 ? "s" : ""} in multi-input mode: ${removedPlugins.map((p) => p.id).join(", ")}`);
 	}
 	if (typeof injectVar !== "string") {
-		const parsedVars = require_util.extractVariablesFromTemplates(prompts);
+		const parsedVars = require_render.extractVariablesFromTemplates(prompts);
 		if (parsedVars.length > 1) require_logger.logger.warn(`\nMultiple variables found in prompts: ${parsedVars.join(", ")}. Using the last one "${parsedVars[parsedVars.length - 1]}". Override this selection with --injectVar`);
 		else if (parsedVars.length === 0) require_logger.logger.warn("No variables found in prompts. Using \"query\" as the inject variable.");
 		injectVar = parsedVars[parsedVars.length - 1] || "query";
@@ -16995,7 +16997,7 @@ function getDefaultPurposeVars(testSuite) {
 }
 function renderPurposeTemplate(purpose, vars) {
 	if (!purpose?.trim()) return "";
-	return require_util.renderVarsInObject(purpose, vars);
+	return require_render.renderVarsInObject(purpose, vars);
 }
 function appendPurposeDetails(purpose, extraDetails) {
 	if (!extraDetails) return purpose;

package/dist/src/index.d.cts

@@ -24856,7 +24856,7 @@ type CacheOptions = {
   cacheKey?: string;
 };
 declare namespace cache_d_exports {
-  export { FetchWithCacheResult, claimCacheKeyOnce, clearCache, disableCache, enableCache, fetchWithCache, getCache, getCacheClearGeneration, getCacheTtlMs, getScopedCacheKey, isCacheEnabled, withCacheEnabled, withCacheNamespace };
+  export { FetchWithCacheResult, claimCacheKeyOnce, clearCache, disableCache, enableCache, fetchWithCache, getCache, getCacheClearGeneration, getCacheTtlMs, getHeadersForCacheKey, getScopedCacheKey, isCacheEnabled, withCacheEnabled, withCacheNamespace };
 }
 /**
  * Get the cache TTL in milliseconds.
@@ -24918,6 +24918,7 @@ type FetchWithCacheResult<T> = {
   deleteFromCache?: () => Promise<void>;
   updateCache?: (data: unknown, status: number, statusText: string, headers?: Record<string, string>) => Promise<void>;
 };
+declare function getHeadersForCacheKey(url: RequestInfo, options: RequestInit): unknown[][];
 /**
  * Atomically claim a cache-scoped one-time action. Disk-backed claims use an exclusive file so
  * separate eval processes cannot both attribute the same background response's usage.

package/dist/src/index.d.ts

@@ -24856,7 +24856,7 @@ type CacheOptions = {
   cacheKey?: string;
 };
 declare namespace cache_d_exports {
-  export { FetchWithCacheResult, claimCacheKeyOnce, clearCache, disableCache, enableCache, fetchWithCache, getCache, getCacheClearGeneration, getCacheTtlMs, getScopedCacheKey, isCacheEnabled, withCacheEnabled, withCacheNamespace };
+  export { FetchWithCacheResult, claimCacheKeyOnce, clearCache, disableCache, enableCache, fetchWithCache, getCache, getCacheClearGeneration, getCacheTtlMs, getHeadersForCacheKey, getScopedCacheKey, isCacheEnabled, withCacheEnabled, withCacheNamespace };
 }
 /**
  * Get the cache TTL in milliseconds.
@@ -24918,6 +24918,7 @@ type FetchWithCacheResult<T> = {
   deleteFromCache?: () => Promise<void>;
   updateCache?: (data: unknown, status: number, statusText: string, headers?: Record<string, string>) => Promise<void>;
 };
+declare function getHeadersForCacheKey(url: RequestInfo, options: RequestInit): unknown[][];
 /**
  * Atomically claim a cache-scoped one-time action. Disk-backed claims use an exclusive file so
  * separate eval processes cannot both attribute the same background response's usage.

package/dist/src/index.js

@@ -3,45 +3,46 @@ import { n as hasFunctionToolCallValidator, t as isTransformFunction } from "./t
 import { _ as normalizeInputs, a as DocxInjectionPlacementSchema, c as InputDefinitionObjectSchema, d as InputTypeValues, f as InputsSchema, g as normalizeInputDefinition, h as getInputType, i as DocumentMediaInjectionPlacementValues, l as InputDefinitionSchema, m as getInputDescription, n as CompletionTokenDetailsSchema, o as DocxInjectionPlacementValues, p as buildInputPromptDescription, r as DocumentMediaInjectionPlacementSchema, s as InputConfigSchema, t as BaseTokenUsageSchema, u as InputTypeSchema } from "./shared-Brt7w4oU.js";
 import { C as getAjv, D as summarizeEvaluateResultForLogging, E as safeJsonStringify, F as getEvalTimeoutMs, I as getMaxEvalTimeMs, L as isCI, M as getEnvFloat, N as getEnvInt, O as loadYaml, P as getEnvString, R as state, S as extractJsonObjects, T as orderKeys, _ as sanitizeTracingConfigForPersistence, c as setLogLevel, g as sanitizeRuntimeOptions, i as isDebugEnabled, j as getEnvBool, m as redactAzureBlobSasTokens, n as getLogLevel, o as logger, p as preserveTracingCredentialReferences, r as globalLogCallback, s as setLogCallback, t as clearLogCallbackIfOwned, x as extractFirstJsonObject } from "./logger-BKiOczgq.js";
 import { t as invariant } from "./invariant-CHP0zrix.js";
-import { $ as pathExists, A as getTestCaseDeduplicationKey, B as sanitizeProviderIdForLog, C as generateIdFromPrompt, D as deduplicateTestCases, E as setupEnv, F as getProviderIdentifier, I as isAnthropicProvider, J as maybeLoadFromExternalFile, L as isGoogleProvider, M as checkProviderApiKeys, N as doesProviderRefMatch, O as extractRuntimeVars, P as getProviderDescription, R as isOpenAiProvider, U as normalizeProviderRef, Z as maybeLoadToolsFromExternalFile, _ as getTotalResultRowCount, a as EvalResult, at as parseFileUrl, c as getResultIndexKey, ct as renderVarsInObject, d as sanitizeResultForJsonlArtifact, dt as extractVariablesFromTemplates, et as readFilters, f as stripTraceLinkageFromMetadata, ft as getNunjucksEngine, g as getCachedResultsCount, gt as isProviderOptions, h as notifyEvaluationsDeleted, ht as isApiProvider, i as getOutputFileFormat, it as loadFunction, j as resultIsForTestCase, k as filterRuntimeVars, l as persistTraceMetadata, lt as analyzeTemplateReference, m as notifyEvaluationChanged, mt as HUMAN_ASSERTION_TYPE, n as warnOnDegradedJsonlRecovery, o as PROMPTFOO_METADATA_KEY, p as invalidateEvaluationCache, pt as FILE_METADATA_KEY, q as maybeLoadConfigFromExternalFile, r as writeMultipleOutputs, s as asEvaluateResult, st as renderEnvOnlyInObject, t as printBorder, tt as readOutput, u as sanitizeProvider, ut as extractVariablesFromTemplate, v as queryTestIndicesOptimized, w as fetchCsvFromGoogleSheet, y as hashPrompt, z as isProviderAllowed } from "./util-DdGIEAK_.js";
-import { F as CloudConfig, G as getDefaultShareViewBaseUrl, I as cloudConfig, K as getShareApiBaseUrl, O as isPromptfooSampleTarget, T as getRequestTimeoutMs, W as TERMINAL_MAX_WIDTH, Y as VERSION, g as isAbortError, j as parseChatPrompt, n as fetchWithRetries, p as NON_TRANSIENT_HTTP_STATUSES, q as getShareViewBaseUrl, r as fetchWithTimeout, t as fetchWithProxy, v as isNonTransientHttpStatus } from "./fetch-BjXG13jC.js";
+import { $ as pathExists, A as getTestCaseDeduplicationKey, B as sanitizeProviderIdForLog, C as generateIdFromPrompt, D as deduplicateTestCases, E as setupEnv, F as getProviderIdentifier, I as isAnthropicProvider, J as maybeLoadFromExternalFile, L as isGoogleProvider, M as checkProviderApiKeys, N as doesProviderRefMatch, O as extractRuntimeVars, P as getProviderDescription, R as isOpenAiProvider, U as normalizeProviderRef, Z as maybeLoadToolsFromExternalFile, _ as getTotalResultRowCount, a as EvalResult, at as parseFileUrl, c as getResultIndexKey, ct as HUMAN_ASSERTION_TYPE, d as sanitizeResultForJsonlArtifact, et as readFilters, f as stripTraceLinkageFromMetadata, g as getCachedResultsCount, h as notifyEvaluationsDeleted, i as getOutputFileFormat, it as loadFunction, j as resultIsForTestCase, k as filterRuntimeVars, l as persistTraceMetadata, lt as isApiProvider, m as notifyEvaluationChanged, n as warnOnDegradedJsonlRecovery, o as PROMPTFOO_METADATA_KEY, p as invalidateEvaluationCache, q as maybeLoadConfigFromExternalFile, r as writeMultipleOutputs, s as asEvaluateResult, st as FILE_METADATA_KEY, t as printBorder, tt as readOutput, u as sanitizeProvider, ut as isProviderOptions, v as queryTestIndicesOptimized, w as fetchCsvFromGoogleSheet, y as hashPrompt, z as isProviderAllowed } from "./util-BnytsHEr.js";
+import { E as getRequestTimeoutMs, G as TERMINAL_MAX_WIDTH, I as CloudConfig, J as getShareViewBaseUrl, K as getDefaultShareViewBaseUrl, L as cloudConfig, M as parseChatPrompt, X as VERSION, _ as isAbortError, k as isPromptfooSampleTarget, m as NON_TRANSIENT_HTTP_STATUSES, n as fetchWithRetries, q as getShareApiBaseUrl, r as fetchWithTimeout, t as fetchWithProxy, y as isNonTransientHttpStatus } from "./fetch-tOnj-VPG.js";
 import { $ as ProvidersSchema, A as OutputConfigSchema, At as LLAMA_GUARD_ENABLED_CATEGORIES, B as TestSuiteConfigSchema, C as CompletedPromptSchema, Ct as CANARY_BREAKING_STRATEGY_IDS, D as GradingConfigSchema, Dt as FOUNDATION_PLUGINS, E as EvaluateOptionsSchema, Et as FINANCIAL_PLUGINS, F as TestCaseSchema, Ft as PHARMACY_PLUGINS, G as isResultFailureReason, Gt as CODING_AGENT_PLUGINS, H as UnifiedConfigSchema, Ht as TELECOM_PLUGINS, I as TestCaseWithVarsFileSchema, It as PII_PLUGINS, J as isCliEventSource, K as EVENT_SOURCES, L as TestCasesWithMetadataPromptSchema, Lt as PLUGIN_CATEGORIES, M as ResultFailureReason, Mt as MEDICAL_PLUGINS, N as ScenarioSchema, Nt as MULTI_INPUT_EXCLUDED_PLUGINS, O as MAX_SUGGESTIONS_COUNT, Ot as HARM_PLUGINS, P as SpecialAssertionTypesSchema, Pt as MULTI_INPUT_VAR, R as TestCasesWithMetadataSchema, Rt as REDTEAM_PROVIDER_HARM_PLUGINS, S as CommandLineOptionsSchema, St as BIAS_PLUGINS, T as EvalResultsFilterMode, Tt as DEFAULT_PLUGINS, U as VarsSchema, Ut as UNALIGNED_PROVIDER_HARM_PLUGINS, V as TestSuiteSchema, Vt as TEEN_SAFETY_PLUGINS, W as isGradingResult, Wt as CODING_AGENT_CORE_PLUGINS, X as filterByRange, Y as RedteamConfigSchema, _ as AssertionSchema, _t as Severity, a as evalsTable, at as StrategyConfigSchema, b as AtomicTestCaseSchema, bt as riskCategorySeverityMap, c as evalsToTagsTable, d as tagsTable, et as ConversationMessageSchema, f as tracesTable, ft as STRATEGY_COLLECTIONS, g as AssertionOrSetSchema, gt as isFanoutStrategy, i as evalResultsTable, it as ProbeLimitExceededError, j as OutputFileExtension, jt as LLAMA_GUARD_REPLICATE_PROVIDER, k as NotPrefixedAssertionTypesSchema, kt as INSURANCE_PLUGINS, l as promptsTable, m as getDb, mt as getDefaultNFanout, nt as PluginConfigSchema, o as evalsToDatasetsTable, p as closeDbIfOpen, pt as STRATEGY_COLLECTION_MAPPINGS, q as EventSourceSchema, r as datasetsTable, rt as PolicyObjectSchema, s as evalsToPromptsTable, st as isUuid, tt as PartialGenerationError, u as spansTable, ut as DEFAULT_STRATEGIES, v as AssertionSetSchema, vt as categoryAliases, w as DerivedMetricSchema, wt as DATASET_EXEMPT_PLUGINS, x as BaseAssertionTypesSchema, xt as ALIASED_PLUGIN_MAPPINGS, y as AssertionTypeSchema, z as TestGeneratorConfigSchema, zt as REMOTE_ONLY_PLUGIN_IDS } from "./tables-BMHjeqVY.js";
 import { i as isJavascriptFile } from "./fileExtensions-ISrPd1Hs.js";
 import { n as sleep, t as getCurrentTimestamp } from "./time-BPNW8jwJ.js";
-import { a as getUserEmail, c as promptForEmailUnverified, l as setUserEmail, n as checkEmailStatusAndMaybeExit, r as getAuthor, s as isLoggedIntoCloud, t as EmailValidationError } from "./accounts-Jug2Ciel.js";
+import { a as getUserEmail, c as promptForEmailUnverified, l as setUserEmail, n as checkEmailStatusAndMaybeExit, r as getAuthor, s as isLoggedIntoCloud, t as EmailValidationError } from "./accounts-B8CVRmIl.js";
 import { r as importModule, t as getDirectory } from "./esm-RDYwXiu5.js";
 import { t as providerRegistry } from "./providerRegistry-DVHtat9n.js";
 import { i as withSpanRole, r as getActiveTraceparent, t as SPAN_ROLE_ATTRIBUTE } from "./spanRoles-Drw6abNG.js";
 import { c as getGenAITracer, d as sanitizeBody, f as withGenAISpan, n as PromptfooAttributes, t as GenAIAttributes } from "./genaiTracer-Ch7k9W3C.js";
 import { n as sha256, t as randomSequence } from "./createHash-D7vud8fe.js";
-import { a as getCache, d as withCacheNamespace, i as fetchWithCache, r as disableCache, t as cache_exports, u as withCacheEnabled } from "./cache-Bwj_lNIo.js";
-import { a as isAgenticProvider } from "./agentic-utils-CAL6OL48.js";
+import { a as getCache, d as withCacheNamespace, i as fetchWithCache, r as disableCache, t as cache_exports, u as withCacheEnabled } from "./cache-DTOVFNqA.js";
+import { a as isAgenticGradingProvider } from "./agentic-utils-B94-_ExD.js";
 import { n as removeSecureTempDirectory, r as writeSecureTempFile, t as createSecureTempDirectory } from "./secureTempFiles-C-ttZXR4.js";
 import { r as runPython } from "./pythonUtils-BwS-exKo.js";
+import { a as extractVariablesFromTemplates, i as extractVariablesFromTemplate, n as renderVarsInObject, o as getNunjucksEngine, r as analyzeTemplateReference, t as renderEnvOnlyInObject } from "./render-zarxdXS7.js";
 import { n as getShareAuthorizedBlob } from "./blobs-DK-ZLI3K.js";
 import { a as collectBlobHashes, i as BLOB_URI_REGEX, n as isBlobStorageEnabled, o as extractBlobHashesFromValue, r as BLOB_SCAN_MAX_STRING_LENGTH, s as normalizeBlobHash, t as extractAndStoreBinaryData } from "./extractor-BzMT8mfJ.js";
 import { c as accumulateTokenUsage, d as createEmptyTokenUsage, f as getErrorTokenUsage, i as accumulateGradingRequest, l as cloneTokenUsageBreakdown, n as accumulateAttackerTokenUsage, o as accumulateGradingTokenUsage, p as normalizeTokenUsage, r as accumulateGenerationTokenUsage, s as accumulateResponseTokenUsage, t as accumulateAssertionTokenUsage, u as createEmptyAssertions } from "./tokenUsageUtils-BCYRro5h.js";
-import { v as validateFunctionCall } from "./util-CVbeMrg1.js";
+import { v as validateFunctionCall } from "./util-DHtnWbEL.js";
 import { s as getDefaultOtelConfig } from "./tracing-Dq2SYDNR.js";
 import { a as TOOL_ARGUMENT_ATTRIBUTE_KEYS, c as getToolNameFromAttributes, i as SEARCH_ATTRIBUTE_KEYS, o as getFirstStringAttribute, r as COMMAND_ATTRIBUTE_KEYS, t as getTraceStore } from "./store-o7uQjTu0.js";
-import { c as neverGenerateRemote, d as shouldGenerateRemote, h as getCodexDefaultProviders, i as getRemoteGenerationUrl, m as resolveRedteamGenerationContext, n as getRemoteGenerationExplicitlyDisabledError, o as getRemoteHealthUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-CopIeiNI.js";
-import { $ as readProviderPromptMap, A as ExcessiveAgencyPlugin, B as retryWithDeduplication, C as PlinyPlugin, Ct as callProviderWithContext, D as ImitationPlugin, Dt as shouldUseRemoteGrading, E as IntentPlugin, Et as getRemoteGradingContext, F as BeavertailsPlugin, G as matchesFactuality, H as fetchHuggingFaceDataset, I as AegisPlugin, J as matchesPiScore, K as matchesGEval, L as RedteamGraderBase, M as DebugAccessPlugin, N as CrossSessionLeakPlugin, O as HarmbenchPlugin, Ot as getCloudTargetIdFromProviders, P as ContractPlugin, Q as readPrompts, R as RedteamPluginBase, S as makeInlinePolicyIdSync, St as callGradingProvider, T as OverreliancePlugin, Tt as getGradingProvider, U as isGraderFailure, V as sampleArray, W as matchesClosedQa, X as doRemoteGrading, Y as matchesTrajectoryGoalSuccess, Z as processPrompts, _ as PromptExtractionPlugin, _t as getFinalTest, a as VLGuardPlugin, at as renderLlmRubricPrompt, b as determinePolicyTypeFromId, bt as getDefaultProviders, c as ToxicChatPlugin, ct as dotProduct, d as TeenSafetyDangerousRoleplayPlugin, dt as graderFail, et as DEFAULT_AGENT_GRADING_PROMPT, f as TeenSafetyDangerousContentPlugin, ft as normalizeMatcherTokenUsage, g as RbacPlugin, gt as coerceString, h as ShellInjectionPlugin, ht as tryParse, i as VLSUPlugin, it as loadRubricPrompt, j as DivergentRepetitionPlugin, k as HallucinationPlugin, kt as getRedteamGenerationContextFromProviders, l as ToolDiscoveryPlugin, lt as euclideanDistance, m as SqlInjectionPlugin, mt as splitTextIntoSentences, n as getGraderById, nt as SELECT_BEST_PROMPT, o as UnverifiableClaimsPlugin, ot as runJsonGradingPrompt, p as TeenSafetyAgeRestrictedGoodsAndServicesPlugin, pt as splitIntoSentences, q as matchesLlmRubric, rt as SUGGEST_PROMPTS_SYSTEM_MESSAGE, s as UnsafeBenchPlugin, st as cosineSimilarity, t as GRADERS, tt as DEFAULT_WEB_SEARCH_PROMPT, u as TeenSafetyHarmfulBodyIdealsPlugin, ut as fail, v as PoliticsPlugin, vt as loadFromJavaScriptFile, w as getPiiLeakTestsForCategory, wt as getAndCheckProvider, x as isValidPolicyObject, xt as DEFAULT_ANTHROPIC_MODEL, y as PolicyPlugin, yt as processFileReference, z as getCustomPolicies } from "./graders-vHzBsfHT.js";
-import { a as getCloudDatabaseId, c as getPluginSeverityOverridesFromCloud, d as isCloudProvider, i as checkCloudPermissions, o as getEvalConfigFromCloud, p as resolveTeamId, s as getOrgContext } from "./storage-BC3GVwPL.js";
-import { a as resolveProvider, m as MCPProvider, n as loadApiProvider, o as resolveProviderConfigs, r as loadApiProviders, t as getProviderIds, v as A2AProvider } from "./providers-YJTtc38R.js";
+import { c as neverGenerateRemote, d as shouldGenerateRemote, h as getCodexDefaultProviders, i as getRemoteGenerationUrl, m as resolveRedteamGenerationContext, n as getRemoteGenerationExplicitlyDisabledError, o as getRemoteHealthUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-DnSGqkoH.js";
+import { $ as readProviderPromptMap, A as ExcessiveAgencyPlugin, B as retryWithDeduplication, C as PlinyPlugin, Ct as callProviderWithContext, D as ImitationPlugin, Dt as shouldUseRemoteGrading, E as IntentPlugin, Et as getRemoteGradingContext, F as BeavertailsPlugin, G as matchesFactuality, H as fetchHuggingFaceDataset, I as AegisPlugin, J as matchesPiScore, K as matchesGEval, L as RedteamGraderBase, M as DebugAccessPlugin, N as CrossSessionLeakPlugin, O as HarmbenchPlugin, Ot as getCloudTargetIdFromProviders, P as ContractPlugin, Q as readPrompts, R as RedteamPluginBase, S as makeInlinePolicyIdSync, St as callGradingProvider, T as OverreliancePlugin, Tt as getGradingProvider, U as isGraderFailure, V as sampleArray, W as matchesClosedQa, X as doRemoteGrading, Y as matchesTrajectoryGoalSuccess, Z as processPrompts, _ as PromptExtractionPlugin, _t as getFinalTest, a as VLGuardPlugin, at as renderLlmRubricPrompt, b as determinePolicyTypeFromId, bt as getDefaultProviders, c as ToxicChatPlugin, ct as dotProduct, d as TeenSafetyDangerousRoleplayPlugin, dt as graderFail, et as DEFAULT_AGENT_GRADING_PROMPT, f as TeenSafetyDangerousContentPlugin, ft as normalizeMatcherTokenUsage, g as RbacPlugin, gt as coerceString, h as ShellInjectionPlugin, ht as tryParse, i as VLSUPlugin, it as loadRubricPrompt, j as DivergentRepetitionPlugin, k as HallucinationPlugin, kt as getRedteamGenerationContextFromProviders, l as ToolDiscoveryPlugin, lt as euclideanDistance, m as SqlInjectionPlugin, mt as splitTextIntoSentences, n as getGraderById, nt as SELECT_BEST_PROMPT, o as UnverifiableClaimsPlugin, ot as runJsonGradingPrompt, p as TeenSafetyAgeRestrictedGoodsAndServicesPlugin, pt as splitIntoSentences, q as matchesLlmRubric, rt as SUGGEST_PROMPTS_SYSTEM_MESSAGE, s as UnsafeBenchPlugin, st as cosineSimilarity, t as GRADERS, tt as DEFAULT_WEB_SEARCH_PROMPT, u as TeenSafetyHarmfulBodyIdealsPlugin, ut as fail, v as PoliticsPlugin, vt as loadFromJavaScriptFile, w as getPiiLeakTestsForCategory, wt as getAndCheckProvider, x as isValidPolicyObject, xt as DEFAULT_ANTHROPIC_MODEL, y as PolicyPlugin, yt as processFileReference, z as getCustomPolicies } from "./graders-BPmH2YVm.js";
+import { a as getCloudDatabaseId, c as getPluginSeverityOverridesFromCloud, d as isCloudProvider, i as checkCloudPermissions, o as getEvalConfigFromCloud, p as resolveTeamId, s as getOrgContext } from "./storage-CVVbTVYC.js";
+import { a as resolveProvider, m as MCPProvider, n as loadApiProvider, o as resolveProviderConfigs, r as loadApiProviders, t as getProviderIds, v as A2AProvider } from "./providers-BbgOo13t.js";
 import { t as getProcessShim } from "./processShim-Y-eJ2aeK.js";
 import { t as ellipsize } from "./text-Fd7EOhdv.js";
 import { n as loadFromPackage, t as isPackagePath } from "./packageParser-wE41TUog.js";
 import { n as runRuby } from "./rubyUtils-vVM3D6we.js";
-import { a as extractPromptFromTags, c as isBasicRefusal, f as recordGenerationTokenUsage, i as extractMaterializedVariablesFromJsonWithMetadata, m as trackGenerationTokenUsage, n as extractGoalFromPrompt, o as getSessionId, p as trackAdditionalGenerationProvider, s as getShortPluginId } from "./util-BoTwsVvn.js";
+import { a as extractPromptFromTags, c as isBasicRefusal, f as recordGenerationTokenUsage, i as extractMaterializedVariablesFromJsonWithMetadata, m as trackGenerationTokenUsage, n as extractGoalFromPrompt, o as getSessionId, p as trackAdditionalGenerationProvider, s as getShortPluginId } from "./util-BKfPcBQN.js";
 import { t as buildPromptInputDescriptions } from "./inputVariables-Drxwikgi.js";
-import { a as assertRemoteMaterializationHandled, l as requiresRemoteMaterialization, n as PromptfooHarmfulCompletionProvider } from "./promptfoo-BnRYCHWo.js";
-import { A as getProviderCallTracingContext, C as TokenUsageTracker, D as createProviderRateLimitOptions, E as uploadBlobRemote, M as withProviderCallTracingContext, S as throwIfTargetPromptExceedsMaxChars, b as getGeneratedPromptOverLimit, g as redteamProviderManager, j as withProviderCallExecutionContext, k as getProviderCallExecutionContext, w as createRateLimitRegistry, x as getMaxCharsPerMessageModifierValue, y as MAX_CHARS_PER_MESSAGE_MODIFIER_KEY } from "./shared-Dk1AVE9w.js";
+import { a as assertRemoteMaterializationHandled, l as requiresRemoteMaterialization, n as PromptfooHarmfulCompletionProvider } from "./promptfoo-BeCm2WDJ.js";
+import { A as getProviderCallTracingContext, C as TokenUsageTracker, D as createProviderRateLimitOptions, E as uploadBlobRemote, M as withProviderCallTracingContext, S as throwIfTargetPromptExceedsMaxChars, b as getGeneratedPromptOverLimit, g as redteamProviderManager, j as withProviderCallExecutionContext, k as getProviderCallExecutionContext, w as createRateLimitRegistry, x as getMaxCharsPerMessageModifierValue, y as MAX_CHARS_PER_MESSAGE_MODIFIER_KEY } from "./shared-CkERSpeg.js";
 import { a as getTransformLabel, i as getTransformErrorMessage, n as TRANSFORM_KEYS, o as transform, r as TransformInputType, t as INLINE_FUNCTION_LABEL } from "./transform-Ccf_EBqd.js";
-import { t as telemetry } from "./telemetry-CIaL2pmn.js";
-import { n as checkExfilTracking } from "./indirectWebPwn-Dg4gS14o.js";
-import { i as filterFiniteScores, n as renderPrompt, r as runExtensionHook, t as collectFileMetadata } from "./evaluatorHelpers-C60uhMf4.js";
-import { n as fetchTraceContext, r as isExternalTraceProvider } from "./traceContext-D7liCnkq.js";
-import { i as pluginMatchesStrategyTargets, n as loadStrategy, r as validateStrategies, t as Strategies } from "./strategies-BMxIs2Jx.js";
+import { t as telemetry } from "./telemetry-CJdYAcRk.js";
+import { n as checkExfilTracking } from "./indirectWebPwn-BeNTvIGX.js";
+import { i as filterFiniteScores, n as renderPrompt, r as runExtensionHook, t as collectFileMetadata } from "./evaluatorHelpers-Bd8xun4J.js";
+import { n as fetchTraceContext, r as isExternalTraceProvider } from "./traceContext-B3qWxoa7.js";
+import { i as pluginMatchesStrategyTargets, n as loadStrategy, r as validateStrategies, t as Strategies } from "./strategies-DVRYSzm8.js";
 import { z as z$1 } from "zod";
 import * as fsPromises from "fs/promises";
 import fs from "fs/promises";
@@ -1173,7 +1174,7 @@ async function generateTraceContextIfNeeded(test, evaluateOptions, testIdx, prom
 async function matchesAgentRubric(rubric, llmOutput, grading, vars, assertion, providerCallContext) {
 	if (!grading) throw new Error("Cannot grade output without grading config. Specify --grader option or grading config.");
 	const agentProvider = (grading.provider ? await getGradingProvider("text", grading.provider, null) : null) || getCodexDefaultProviders().llmRubricProvider;
-	if (!agentProvider || !isAgenticProvider(agentProvider)) throw new Error("agent-rubric assertion requires an agentic grading provider. Use openai:codex-sdk, openai:codex-app-server, anthropic:claude-agent-sdk, openinterpreter, or opencode:sdk.");
+	if (!agentProvider || !isAgenticGradingProvider(agentProvider)) throw new Error("agent-rubric assertion requires an agentic grading provider. Use openai:codex-sdk, openai:codex-app-server, anthropic:claude-agent-sdk, openinterpreter, or opencode:sdk.");
 	const result = await runJsonGradingPrompt({
 		assertion,
 		checkName: "agent-rubric check",
@@ -5815,8 +5816,7 @@ function resolveGuardrailsApi() {
 	if (override) base = override;
 	else if (cloudConfig.isEnabled()) {
 		base = cloudConfig.getApiHost();
-		const apiKey = cloudConfig.getApiKey();
-		if (apiKey) headers.Authorization = `Bearer ${apiKey}`;
+		Object.assign(headers, cloudConfig.getAuthHeaders() ?? {});
 	} else base = getShareApiBaseUrl();
 	return {
 		baseUrl: `${base.replace(/\/+$/, "")}/v1`,
@@ -8526,7 +8526,7 @@ async function resolveDefaultTestProvider(defaultTest, testCase) {
 	const defaultProvider = defaultTest.provider;
 	if (isApiProvider(defaultProvider)) return defaultProvider;
 	if (typeof defaultProvider === "object" && defaultProvider.id) {
-		const { loadApiProvider } = await import("./providers-YJTtc38R.js").then((n) => n.i);
+		const { loadApiProvider } = await import("./providers-BbgOo13t.js").then((n) => n.i);
 		return loadApiProvider(typeof defaultProvider.id === "function" ? defaultProvider.id() : defaultProvider.id, { options: defaultProvider });
 	}
 	return defaultProvider;
@@ -12032,8 +12032,10 @@ async function sendChunkedResults(evalRecord, url, options = {}) {
 		maxResultsPerChunk: resultsPerChunk
 	};
 	logger.debug(`Chunk config: ${JSON.stringify(chunkConfig)}`);
-	const headers = { "Content-Type": "application/json" };
-	if (cloudConfig.isEnabled()) headers["Authorization"] = `Bearer ${cloudConfig.getApiKey()}`;
+	const headers = {
+		"Content-Type": "application/json",
+		...cloudConfig.isEnabled() ? cloudConfig.getAuthHeaders() ?? {} : {}
+	};
 	const totalResults = await evalRecord.getTotalResultRowCount();
 	logger.debug(`Total results to share: ${totalResults}`);
 	let progressBar = null;

package/dist/src/{indirectWebPwn-g-F3__Gp.js → indirectWebPwn-BFdbbs6S.js}

@@ -1,10 +1,10 @@
 import { o as logger } from "./logger-D4ion89i.js";
-import { n as fetchWithRetries } from "./fetch-BdWQKDMj.js";
+import { n as fetchWithRetries } from "./fetch-DnDg-Ics.js";
 import { t as invariant } from "./invariant-CHP0zrix.js";
-import { s as getUserEmail } from "./accounts-mch0qw47.js";
+import { s as getUserEmail } from "./accounts-BDud3p32.js";
 import { d as createEmptyTokenUsage, n as accumulateAttackerTokenUsage, s as accumulateResponseTokenUsage } from "./tokenUsageUtils-T-dUB6UI.js";
-import { i as getRemoteGenerationUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-CwQ0KBdC.js";
-import { f as getTargetResponse } from "./shared-D5rN2VlH.js";
+import { i as getRemoteGenerationUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-DGJxSMYI.js";
+import { f as getTargetResponse } from "./shared-BkcgE6vB.js";
 import { randomUUID } from "node:crypto";
 //#region src/redteam/providers/indirectWebPwn.ts
 /**
@@ -261,4 +261,4 @@ var IndirectWebPwnProvider = class {
 //#endregion
 export { IndirectWebPwnProvider as default };
 
-//# sourceMappingURL=indirectWebPwn-g-F3__Gp.js.map
+//# sourceMappingURL=indirectWebPwn-BFdbbs6S.js.map

package/dist/src/{indirectWebPwn-Dg4gS14o.js → indirectWebPwn-BeNTvIGX.js}

@@ -1,7 +1,7 @@
 import { o as logger } from "./logger-BKiOczgq.js";
-import { n as fetchWithRetries } from "./fetch-BjXG13jC.js";
-import { a as getUserEmail } from "./accounts-Jug2Ciel.js";
-import { i as getRemoteGenerationUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-CopIeiNI.js";
+import { n as fetchWithRetries } from "./fetch-tOnj-VPG.js";
+import { a as getUserEmail } from "./accounts-B8CVRmIl.js";
+import { i as getRemoteGenerationUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-DnSGqkoH.js";
 import { createHash, randomUUID } from "node:crypto";
 //#region src/redteam/strategies/indirectWebPwn.ts
 /**
@@ -389,4 +389,4 @@ async function transformForPerTurnLayer(testCases, injectVar, config) {
 //#endregion
 export { checkExfilTracking as n, addIndirectWebPwnTestCases as t };
 
-//# sourceMappingURL=indirectWebPwn-Dg4gS14o.js.map
+//# sourceMappingURL=indirectWebPwn-BeNTvIGX.js.map

package/dist/src/{indirectWebPwn-BVsvAUZv.js → indirectWebPwn-BhuZ26Yd.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { c as logger } from "./logger-YzVIwMVq.js";
-import { i as fetchWithRetries } from "./fetch-Bnj1JCJi.js";
-import { s as getUserEmail } from "./accounts-CAjSMkuH.js";
-import { i as getRemoteGenerationUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-B0eQSIHo.js";
+import { i as fetchWithRetries } from "./fetch-KD8O9oZZ.js";
+import { s as getUserEmail } from "./accounts-DApS8Gpe.js";
+import { i as getRemoteGenerationUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-Cc78LDjQ.js";
 import { createHash, randomUUID } from "node:crypto";
 //#region src/redteam/strategies/indirectWebPwn.ts
 /**
@@ -390,4 +390,4 @@ async function transformForPerTurnLayer(testCases, injectVar, config) {
 //#endregion
 export { checkExfilTracking as n, addIndirectWebPwnTestCases as t };
 
-//# sourceMappingURL=indirectWebPwn-BVsvAUZv.js.map
+//# sourceMappingURL=indirectWebPwn-BhuZ26Yd.js.map

package/dist/src/{indirectWebPwn-DmNLSb0J.js → indirectWebPwn-C-pe6OEr.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { c as logger } from "./logger-YzVIwMVq.js";
-import { i as fetchWithRetries } from "./fetch-Bnj1JCJi.js";
+import { i as fetchWithRetries } from "./fetch-KD8O9oZZ.js";
 import { t as invariant } from "./invariant-CbHB1xyx.js";
-import { s as getUserEmail } from "./accounts-CAjSMkuH.js";
+import { s as getUserEmail } from "./accounts-DApS8Gpe.js";
 import { d as createEmptyTokenUsage, n as accumulateAttackerTokenUsage, s as accumulateResponseTokenUsage } from "./tokenUsageUtils-Cf6nFV6z.js";
-import { i as getRemoteGenerationUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-B0eQSIHo.js";
-import { f as getTargetResponse } from "./shared-yyb3qFQd.js";
+import { i as getRemoteGenerationUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-Cc78LDjQ.js";
+import { f as getTargetResponse } from "./shared-jcnXW0lA.js";
 import { randomUUID } from "node:crypto";
 //#region src/redteam/providers/indirectWebPwn.ts
 /**
@@ -262,4 +262,4 @@ var IndirectWebPwnProvider = class {
 //#endregion
 export { IndirectWebPwnProvider as default };
 
-//# sourceMappingURL=indirectWebPwn-DmNLSb0J.js.map
+//# sourceMappingURL=indirectWebPwn-C-pe6OEr.js.map

package/dist/src/{indirectWebPwn-Ch0EQWKt.cjs → indirectWebPwn-CwSQCQGM.cjs}

@@ -1,7 +1,7 @@
 const require_logger = require("./logger-BN3n9c1R.cjs");
-const require_fetch = require("./fetch-DTnUr1aF.cjs");
-const require_accounts = require("./accounts-CZFxG3Og.cjs");
-const require_remoteGeneration = require("./remoteGeneration-PxK1EefI.cjs");
+const require_fetch = require("./fetch-D54lzFcD.cjs");
+const require_accounts = require("./accounts-DosZWKJy.cjs");
+const require_remoteGeneration = require("./remoteGeneration-C0Ev99MO.cjs");
 let node_crypto = require("node:crypto");
 //#region src/redteam/strategies/indirectWebPwn.ts
 /**
@@ -400,4 +400,4 @@ Object.defineProperty(exports, "checkExfilTracking", {
 	}
 });
 
-//# sourceMappingURL=indirectWebPwn-Ch0EQWKt.cjs.map
+//# sourceMappingURL=indirectWebPwn-CwSQCQGM.cjs.map

package/dist/src/{indirectWebPwn-2HDLyS-4.js → indirectWebPwn-DahWlbTc.js}

@@ -1,7 +1,7 @@
 import { o as logger } from "./logger-D4ion89i.js";
-import { n as fetchWithRetries } from "./fetch-BdWQKDMj.js";
-import { s as getUserEmail } from "./accounts-mch0qw47.js";
-import { i as getRemoteGenerationUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-CwQ0KBdC.js";
+import { n as fetchWithRetries } from "./fetch-DnDg-Ics.js";
+import { s as getUserEmail } from "./accounts-BDud3p32.js";
+import { i as getRemoteGenerationUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-DGJxSMYI.js";
 import { createHash, randomUUID } from "node:crypto";
 //#region src/redteam/strategies/indirectWebPwn.ts
 /**
@@ -389,4 +389,4 @@ async function transformForPerTurnLayer(testCases, injectVar, config) {
 //#endregion
 export { checkExfilTracking as n, addIndirectWebPwnTestCases as t };
 
-//# sourceMappingURL=indirectWebPwn-2HDLyS-4.js.map
+//# sourceMappingURL=indirectWebPwn-DahWlbTc.js.map

package/dist/src/{indirectWebPwn-lUx8flGh.cjs → indirectWebPwn-Dcc2nw9e.cjs}

@@ -1,10 +1,10 @@
 const require_logger = require("./logger-BN3n9c1R.cjs");
 const require_invariant = require("./invariant-C2JOzzO2.cjs");
-const require_fetch = require("./fetch-DTnUr1aF.cjs");
-const require_accounts = require("./accounts-CZFxG3Og.cjs");
+const require_fetch = require("./fetch-D54lzFcD.cjs");
+const require_accounts = require("./accounts-DosZWKJy.cjs");
 const require_tokenUsageUtils = require("./tokenUsageUtils-BbqyaBi4.cjs");
-const require_remoteGeneration = require("./remoteGeneration-PxK1EefI.cjs");
-const require_shared = require("./shared-IP25vMkJ.cjs");
+const require_remoteGeneration = require("./remoteGeneration-C0Ev99MO.cjs");
+const require_shared = require("./shared-Bl84k1Oo.cjs");
 let node_crypto = require("node:crypto");
 //#region src/redteam/providers/indirectWebPwn.ts
 /**
@@ -261,4 +261,4 @@ var IndirectWebPwnProvider = class {
 //#endregion
 exports.default = IndirectWebPwnProvider;
 
-//# sourceMappingURL=indirectWebPwn-lUx8flGh.cjs.map
+//# sourceMappingURL=indirectWebPwn-Dcc2nw9e.cjs.map

package/dist/src/{indirectWebPwn-P3GLMBT7.js → indirectWebPwn-Dcn8pufK.js}

@@ -1,10 +1,10 @@
 import { o as logger } from "./logger-BKiOczgq.js";
 import { t as invariant } from "./invariant-CHP0zrix.js";
-import { n as fetchWithRetries } from "./fetch-BjXG13jC.js";
-import { a as getUserEmail } from "./accounts-Jug2Ciel.js";
+import { n as fetchWithRetries } from "./fetch-tOnj-VPG.js";
+import { a as getUserEmail } from "./accounts-B8CVRmIl.js";
 import { d as createEmptyTokenUsage, n as accumulateAttackerTokenUsage, s as accumulateResponseTokenUsage } from "./tokenUsageUtils-BCYRro5h.js";
-import { i as getRemoteGenerationUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-CopIeiNI.js";
-import { f as getTargetResponse } from "./shared-Dk1AVE9w.js";
+import { i as getRemoteGenerationUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-DnSGqkoH.js";
+import { f as getTargetResponse } from "./shared-CkERSpeg.js";
 import { randomUUID } from "node:crypto";
 //#region src/redteam/providers/indirectWebPwn.ts
 /**
@@ -261,4 +261,4 @@ var IndirectWebPwnProvider = class {
 //#endregion
 export { IndirectWebPwnProvider as default };
 
-//# sourceMappingURL=indirectWebPwn-P3GLMBT7.js.map
+//# sourceMappingURL=indirectWebPwn-Dcn8pufK.js.map

package/dist/src/{interactions-CqITU8xN.js → interactions-BC_LipMV.js}

@@ -1,10 +1,10 @@
 import { P as getEnvString, o as logger } from "./logger-BKiOczgq.js";
-import { ft as getNunjucksEngine } from "./util-DdGIEAK_.js";
-import { T as getRequestTimeoutMs, r as fetchWithTimeout } from "./fetch-BjXG13jC.js";
+import { E as getRequestTimeoutMs, r as fetchWithTimeout } from "./fetch-tOnj-VPG.js";
 import { n as sleep } from "./time-BPNW8jwJ.js";
-import { i as fetchWithCache } from "./cache-Bwj_lNIo.js";
+import { i as fetchWithCache } from "./cache-DTOVFNqA.js";
+import { o as getNunjucksEngine } from "./render-zarxdXS7.js";
 import { i as storeBlob } from "./blobs-DK-ZLI3K.js";
-import { E as GoogleAuthManager, d as mergeGoogleCompletionOptions, t as calculateGoogleCost } from "./util-BxmNax2U.js";
+import { E as GoogleAuthManager, d as mergeGoogleCompletionOptions, t as calculateGoogleCost } from "./util-BdN7DdPq.js";
 //#region src/providers/google/interactions.ts
 function normalizeAudioMimeType(format) {
 	if (format?.startsWith("audio/")) return format;
@@ -393,4 +393,4 @@ var GoogleInteractionsProvider = class {
 //#endregion
 export { GoogleInteractionsProvider };
 
-//# sourceMappingURL=interactions-CqITU8xN.js.map
+//# sourceMappingURL=interactions-BC_LipMV.js.map

package/dist/src/{interactions-vSEfKNox.js → interactions-BUojcIo3.js}

@@ -1,10 +1,10 @@
 import { I as getEnvString, o as logger } from "./logger-D4ion89i.js";
-import { At as getNunjucksEngine } from "./util-uYYKYi7_.js";
-import { A as getRequestTimeoutMs, r as fetchWithTimeout } from "./fetch-BdWQKDMj.js";
+import { j as getRequestTimeoutMs, r as fetchWithTimeout } from "./fetch-DnDg-Ics.js";
 import { n as sleep } from "./time-BPNW8jwJ.js";
-import { i as fetchWithCache } from "./cache-C41JuZ74.js";
+import { i as fetchWithCache } from "./cache-ePPAC5hy.js";
+import { o as getNunjucksEngine } from "./render-DIhuKgcQ.js";
 import { o as storeBlob } from "./blobs-CTgrjifI.js";
-import { E as GoogleAuthManager, d as mergeGoogleCompletionOptions, t as calculateGoogleCost } from "./util-CmRx53hM.js";
+import { E as GoogleAuthManager, d as mergeGoogleCompletionOptions, t as calculateGoogleCost } from "./util-DiVs2Kf-.js";
 //#region src/providers/google/interactions.ts
 function normalizeAudioMimeType(format) {
 	if (format?.startsWith("audio/")) return format;
@@ -393,4 +393,4 @@ var GoogleInteractionsProvider = class {
 //#endregion
 export { GoogleInteractionsProvider };
 
-//# sourceMappingURL=interactions-vSEfKNox.js.map
+//# sourceMappingURL=interactions-BUojcIo3.js.map