promptfoo 0.122.1 → 0.122.2

package/dist/src/{providers-ASKoKjG0.cjs → providers-CRCoPqQH.cjs}

@@ -1,40 +1,41 @@
 const require_logger = require("./logger-BN3n9c1R.cjs");
 const require_invariant = require("./invariant-C2JOzzO2.cjs");
-const require_util = require("./util-L5T81aJ0.cjs");
-const require_fetch = require("./fetch-DTnUr1aF.cjs");
+const require_util = require("./util-BPkxeLuk.cjs");
+const require_fetch = require("./fetch-D54lzFcD.cjs");
 const require_fileExtensions = require("./fileExtensions-BQZEFw03.cjs");
 const require_time = require("./time-B7AqDy5g.cjs");
 const require_esm = require("./esm-DQhzWczC.cjs");
 const require_providerRegistry = require("./providerRegistry-DwoDhx6H.cjs");
 const require_genaiTracer = require("./genaiTracer-D_3mCxrD.cjs");
 const require_createHash = require("./createHash-sm6Q6LWg.cjs");
-const require_cache = require("./cache-DU82DyKI.cjs");
+const require_cache = require("./cache-g3VTrtsd.cjs");
 const require_secureTempFiles = require("./secureTempFiles-B1X1YV1K.cjs");
 const require_pythonUtils = require("./pythonUtils-CqlMEmzG.cjs");
+const require_render = require("./render-C1VJjFT2.cjs");
 const require_tokenUsageUtils = require("./tokenUsageUtils-BbqyaBi4.cjs");
-const require_util$1 = require("./util-CeP1x2P-.cjs");
-const require_billing = require("./billing-K5i9I9vT.cjs");
+const require_util$1 = require("./util-Cadd9fGT.cjs");
+const require_billing = require("./billing-Q1c9C5Or.cjs");
 const require_tracing = require("./tracing-DFewlCzC.cjs");
-const require_storage = require("./storage-BFmq8CKG.cjs");
-const require_util$2 = require("./util-BNvjVvcH.cjs");
+const require_storage = require("./storage-BX5ws4jD.cjs");
+const require_util$2 = require("./util-DhtW6BNS.cjs");
 const require_processShim = require("./processShim-DkKQ-mhc.cjs");
 const require_finishReason = require("./finishReason-Db2CSQem.cjs");
-const require_functionCallbackUtils = require("./functionCallbackUtils-VbcI1Aub.cjs");
-const require_client = require("./client-DvRyvBRs.cjs");
-const require_transform = require("./transform-CCHDyuc8.cjs");
+const require_functionCallbackUtils = require("./functionCallbackUtils-BDroEgNs.cjs");
+const require_client = require("./client-B8cIFzy1.cjs");
+const require_transform = require("./transform-DS2y12jo.cjs");
 const require_openai = require("./openai-D6d29SL8.cjs");
-const require_chat = require("./chat-g28uolEO.cjs");
-const require_embedding = require("./embedding-cJ7sWqTp.cjs");
-const require_messages = require("./messages-B5cYbsZJ.cjs");
-const require_util$3 = require("./util-ChbabPn9.cjs");
-const require_responses = require("./responses-Doa5xhY1.cjs");
+const require_chat = require("./chat-BuHuQ8dN.cjs");
+const require_embedding = require("./embedding-C2BHs7bs.cjs");
+const require_messages = require("./messages-BDbtGaqI.cjs");
+const require_util$3 = require("./util-Bd8_MhVm.cjs");
+const require_responses = require("./responses-DiZCcd1S.cjs");
 const require_text = require("./text-513KmH8t.cjs");
-const require_completion = require("./completion-Ch4qZHiN.cjs");
-const require_image = require("./image-DD9l6-Hi.cjs");
+const require_completion = require("./completion-fjqwBQIQ.cjs");
+const require_image = require("./image-ChCkFmER.cjs");
 const require_packageParser = require("./packageParser-DpmHM-J_.cjs");
-const require_fetch$1 = require("./fetch-DxQ9oCzS.cjs");
+const require_fetch$1 = require("./fetch-CQfF18HC.cjs");
 const require_rubyUtils = require("./rubyUtils-Dkk6DAIR.cjs");
-const require_simulatedUser = require("./simulatedUser-BQghw48z.cjs");
+const require_simulatedUser = require("./simulatedUser-ByVb7gXp.cjs");
 let zod = require("zod");
 let fs_promises = require("fs/promises");
 fs_promises = require_logger.__toESM(fs_promises, 1);
@@ -393,7 +394,7 @@ function isAgentMessage(message) {
 	return message?.role ? AGENT_ROLES.has(message.role.toLowerCase()) : false;
 }
 function renderString(value, vars, context) {
-	return require_util.getNunjucksEngine(context?.filters).renderString(value, vars);
+	return require_render.getNunjucksEngine(context?.filters).renderString(value, vars);
 }
 function renderTemplate$1(value, vars, context) {
 	if (typeof value === "string") return renderString(value, vars, context);
@@ -3953,7 +3954,7 @@ var AzureChatCompletionProvider = class extends AzureGenericProvider {
 				model: this.deploymentName,
 				messages,
 				...isReasoningModel ? {
-					...reasoningEffort === void 0 ? {} : { reasoning_effort: require_util.renderVarsInObject(reasoningEffort, context?.vars) },
+					...reasoningEffort === void 0 ? {} : { reasoning_effort: require_render.renderVarsInObject(reasoningEffort, context?.vars) },
 					...maxCompletionTokens === void 0 ? {} : { max_completion_tokens: maxCompletionTokens }
 				} : {
 					...maxTokens === void 0 ? {} : { max_tokens: maxTokens },
@@ -4457,7 +4458,7 @@ var AzureFoundryAgentProvider = class extends AzureGenericProvider {
 		this.warnForUnsupportedConfig(config);
 		const responseFormat = require_util.maybeLoadResponseFormatFromExternalFile(config.response_format, context?.vars);
 		const loadedTools = config.tools ? await require_util.maybeLoadToolsFromExternalFile(config.tools, context?.vars) : void 0;
-		const reasoningEffort = config.reasoning_effort ? require_util.renderVarsInObject(config.reasoning_effort, context?.vars) : void 0;
+		const reasoningEffort = config.reasoning_effort ? require_render.renderVarsInObject(config.reasoning_effort, context?.vars) : void 0;
 		const maxOutputTokens = config.max_output_tokens ?? config.max_completion_tokens ?? config.max_tokens;
 		let text;
 		if (responseFormat?.type === "json_object") text = { format: { type: "json_object" } };
@@ -6672,7 +6673,7 @@ var AzureResponsesProvider = class extends AzureGenericProvider {
 		const maxOutputTokens = config.max_output_tokens ?? (isReasoningModel ? reasoningMaxOutputTokensDefault : maxOutputTokensDefault);
 		const temperatureDefault = config.omitDefaults ? require_logger.getEnvString("OPENAI_TEMPERATURE") === void 0 ? void 0 : require_logger.getEnvFloat("OPENAI_TEMPERATURE") : require_logger.getEnvFloat("OPENAI_TEMPERATURE", 0);
 		const temperature = this.supportsTemperature() ? config.temperature ?? temperatureDefault : void 0;
-		const reasoningEffort = isReasoningModel ? require_util.renderVarsInObject(config.reasoning_effort, context?.vars) : void 0;
+		const reasoningEffort = isReasoningModel ? require_render.renderVarsInObject(config.reasoning_effort, context?.vars) : void 0;
 		const instructions = config.instructions;
 		const responseFormat = require_util.maybeLoadResponseFormatFromExternalFile(config.response_format, context?.vars);
 		let textFormat;
@@ -7208,7 +7209,7 @@ var AzureVideoProvider = class extends AzureGenericProvider {
 };
 //#endregion
 //#region src/providers/browser.ts
-const nunjucks = require_util.getNunjucksEngine();
+const nunjucks = require_render.getNunjucksEngine();
 const DEFAULT_DEBUGGING_PORT = 9222;
 const DEFAULT_FETCH_TIMEOUT_MS = 5e3;
 function createTransformResponse$3(parser) {
@@ -10896,7 +10897,7 @@ const MultipartFilePartSchema = zod.z.object({
 });
 const HttpMultipartConfigSchema = zod.z.object({ parts: zod.z.array(zod.z.union([MultipartFieldPartSchema, MultipartFilePartSchema])).min(1) });
 function renderTemplate(value, vars) {
-	return require_util.getNunjucksEngine().renderString(value, vars);
+	return require_render.getNunjucksEngine().renderString(value, vars);
 }
 function getMimeTypeForGeneratedFormat(format) {
 	switch (format) {
@@ -11191,12 +11192,12 @@ function preprocessSignatureAuthConfig(signatureAuth) {
 * @throws Error if the template cannot be rendered as valid JSON
 */
 function renderJsonTemplate(template, vars) {
-	const rendered = require_util.renderVarsInObject(template, vars);
+	const rendered = require_render.renderVarsInObject(template, vars);
 	try {
 		return JSON.parse(rendered);
 	} catch {
 		const escapedVars = escapeJsonVariables(vars);
-		const reRendered = require_util.renderVarsInObject(template, escapedVars);
+		const reRendered = require_render.renderVarsInObject(template, escapedVars);
 		return JSON.parse(reRendered);
 	}
 }
@@ -11216,7 +11217,7 @@ function renderRawRequestWithNunjucks(template, vars) {
 	working = working.replace(new RegExp(`${VAR_TOKEN}(\\d+)__`, "g"), (_m, g1) => {
 		return `{% endraw %}${placeholders[Number(g1)]}{% raw %}`;
 	});
-	return require_util.getNunjucksEngine().renderString(working, vars);
+	return require_render.getNunjucksEngine().renderString(working, vars);
 }
 function urlEncodeRawRequestPath(rawRequest) {
 	const firstLine = rawRequest.split("\n")[0];
@@ -11393,7 +11394,7 @@ async function generateSignature(signatureAuth, signatureTimestamp) {
 			}
 			default: throw new Error(`Unsupported signature auth type: ${signatureAuth.type}`);
 		}
-		const data = require_util.getNunjucksEngine().renderString(signatureAuth.signatureDataTemplate, { signatureTimestamp }).replace(/\\n/g, "\n");
+		const data = require_render.getNunjucksEngine().renderString(signatureAuth.signatureDataTemplate, { signatureTimestamp }).replace(/\\n/g, "\n");
 		require_logger.logger.debug(`[Signature Auth] Preparing to sign with algorithm=${signatureAuth.signatureAlgorithm}, dataLength=${data.length}, keyProvided=${Boolean(privateKey)}`);
 		const sign = crypto.default.createSign(signatureAuth.signatureAlgorithm);
 		sign.update(data);
@@ -11776,7 +11777,7 @@ async function createSessionParser(parser) {
 * @returns A new object or array with all template expressions replaced
 */
 function processJsonBody(body, vars) {
-	const rendered = require_util.renderVarsInObject(body, vars);
+	const rendered = require_render.renderVarsInObject(body, vars);
 	if (typeof rendered === "object" && rendered !== null) {
 		const processNestedValues = (obj) => {
 			if (Array.isArray(obj)) return obj.map(processNestedValues);
@@ -11831,7 +11832,7 @@ function processTextBody(body, vars) {
 	if (body == null) return body;
 	require_invariant.invariant(typeof body !== "object", "Expected body to be a string when content type is not application/json");
 	try {
-		return require_util.renderVarsInObject(body, vars);
+		return require_render.renderVarsInObject(body, vars);
 	} catch (err) {
 		require_logger.logger.warn(`Error rendering body template: ${err}`);
 		return body;
@@ -12209,7 +12210,7 @@ var HttpProvider = class {
 			require_logger.logger.debug("[HTTP Provider Auth]: No OAuth auth configured");
 			throw new Error("OAuth auth is not configured");
 		}
-		const nunjucks = require_util.getNunjucksEngine();
+		const nunjucks = require_render.getNunjucksEngine();
 		const baseConfig = {
 			...this.config.auth,
 			clientId: this.config.auth.clientId ? nunjucks.renderString(this.config.auth.clientId, vars) : void 0,
@@ -12373,7 +12374,7 @@ var HttpProvider = class {
 		if (!this.lastSignatureTimestamp || !this.lastSignature || needsSignatureRefresh(this.lastSignatureTimestamp, signatureAuth.signatureValidityMs, signatureAuth.signatureRefreshBufferMs)) {
 			require_logger.logger.debug("[HTTP Provider Auth]: Generating new signature");
 			this.lastSignatureTimestamp = Date.now();
-			const nunjucks = require_util.getNunjucksEngine();
+			const nunjucks = require_render.getNunjucksEngine();
 			const renderedConfig = {
 				...signatureAuth,
 				privateKey: signatureAuth.privateKey ? nunjucks.renderString(signatureAuth.privateKey, vars) : void 0
@@ -12424,14 +12425,14 @@ var HttpProvider = class {
 		require_invariant.invariant(this.config.session, "Session config should be defined");
 		require_invariant.invariant(this.sessionEndpointParser, "Session endpoint parser should be defined");
 		const sessionConfig = this.config.session;
-		const nunjucks = require_util.getNunjucksEngine();
+		const nunjucks = require_render.getNunjucksEngine();
 		const url = nunjucks.renderString(sessionConfig.url, vars);
 		const headers = {};
 		if (sessionConfig.headers) for (const [key, value] of Object.entries(sessionConfig.headers)) headers[key.toLowerCase()] = nunjucks.renderString(value, vars);
 		let body;
 		if (sessionConfig.body && sessionConfig.method !== "GET") if (typeof sessionConfig.body === "string") body = nunjucks.renderString(sessionConfig.body, vars);
 		else {
-			const renderedBody = require_util.renderVarsInObject(sessionConfig.body, vars);
+			const renderedBody = require_render.renderVarsInObject(sessionConfig.body, vars);
 			body = JSON.stringify(renderedBody);
 			if (!headers["content-type"]) headers["content-type"] = "application/json";
 		}
@@ -12494,21 +12495,21 @@ var HttpProvider = class {
 	async getHeaders(defaultHeaders, vars) {
 		const configHeaders = this.config.headers || {};
 		const headers = Object.fromEntries(Object.entries(configHeaders).map(([key, value]) => [key.toLowerCase(), value]));
-		const nunjucks = require_util.getNunjucksEngine();
+		const nunjucks = require_render.getNunjucksEngine();
 		const allHeaders = Object.fromEntries(Object.entries({
 			...defaultHeaders,
 			...headers
 		}).map(([key, value]) => [key, nunjucks.renderString(value, vars)]));
 		if (this.config.auth?.type === "oauth" && typeof vars.token === "string") allHeaders.authorization = `Bearer ${vars.token}`;
-		if (this.config.auth?.type === "bearer") allHeaders.authorization = `Bearer ${require_util.getNunjucksEngine().renderString(this.config.auth.token, vars)}`;
+		if (this.config.auth?.type === "bearer") allHeaders.authorization = `Bearer ${require_render.getNunjucksEngine().renderString(this.config.auth.token, vars)}`;
 		if (this.config.auth?.type === "basic") {
-			const renderedUsername = require_util.getNunjucksEngine().renderString(this.config.auth.username, vars);
-			const renderedPassword = require_util.getNunjucksEngine().renderString(this.config.auth.password, vars);
+			const renderedUsername = require_render.getNunjucksEngine().renderString(this.config.auth.username, vars);
+			const renderedPassword = require_render.getNunjucksEngine().renderString(this.config.auth.password, vars);
 			allHeaders.authorization = `Basic ${Buffer.from(`${renderedUsername}:${renderedPassword}`).toString("base64")}`;
 		}
 		if (this.config.auth?.type === "api_key" && this.config.auth.placement === "header") {
-			const renderedKeyName = require_util.getNunjucksEngine().renderString(this.config.auth.keyName, vars);
-			const renderedValue = require_util.getNunjucksEngine().renderString(this.config.auth.value, vars);
+			const renderedKeyName = require_render.getNunjucksEngine().renderString(this.config.auth.keyName, vars);
+			const renderedValue = require_render.getNunjucksEngine().renderString(this.config.auth.value, vars);
 			allHeaders[renderedKeyName.toLowerCase()] = renderedValue;
 		}
 		return allHeaders;
@@ -12568,15 +12569,15 @@ var HttpProvider = class {
 		const transformedPrompt = await (await this.transformRequest)(prompt, vars, context);
 		logTransformedPrompt(transformedPrompt, prompt, headers);
 		const renderedConfig = {
-			url: require_util.getNunjucksEngine().renderString(this.url, vars),
-			method: require_util.getNunjucksEngine().renderString(this.config.method || (this.config.multipart ? "POST" : "GET"), vars),
+			url: require_render.getNunjucksEngine().renderString(this.url, vars),
+			method: require_render.getNunjucksEngine().renderString(this.config.method || (this.config.multipart ? "POST" : "GET"), vars),
 			headers,
 			body: this.config.multipart ? void 0 : determineRequestBody(contentTypeIsJson(headers), transformedPrompt, this.config.body, vars),
 			queryParams: (() => {
-				const baseQueryParams = this.config.queryParams ? Object.fromEntries(Object.entries(this.config.queryParams).map(([key, value]) => [key, require_util.getNunjucksEngine().renderString(value, vars)])) : {};
+				const baseQueryParams = this.config.queryParams ? Object.fromEntries(Object.entries(this.config.queryParams).map(([key, value]) => [key, require_render.getNunjucksEngine().renderString(value, vars)])) : {};
 				if (this.config.auth?.type === "api_key" && this.config.auth.placement === "query") {
-					const renderedKeyName = require_util.getNunjucksEngine().renderString(this.config.auth.keyName, vars);
-					baseQueryParams[renderedKeyName] = require_util.getNunjucksEngine().renderString(this.config.auth.value, vars);
+					const renderedKeyName = require_render.getNunjucksEngine().renderString(this.config.auth.keyName, vars);
+					baseQueryParams[renderedKeyName] = require_render.getNunjucksEngine().renderString(this.config.auth.value, vars);
 				}
 				return Object.keys(baseQueryParams).length > 0 ? baseQueryParams : void 0;
 			})(),
@@ -12695,23 +12696,23 @@ var HttpProvider = class {
 		if (context?.tracestate) parsedRequest.headers.tracestate = context.tracestate;
 		if (this.config.auth?.type === "oauth" && typeof vars.token === "string") parsedRequest.headers.authorization = `Bearer ${vars.token}`;
 		if (this.config.auth?.type === "bearer") {
-			const renderedToken = require_util.getNunjucksEngine().renderString(this.config.auth.token, vars);
+			const renderedToken = require_render.getNunjucksEngine().renderString(this.config.auth.token, vars);
 			parsedRequest.headers.authorization = `Bearer ${renderedToken}`;
 		}
 		if (this.config.auth?.type === "basic") {
-			const renderedUsername = require_util.getNunjucksEngine().renderString(this.config.auth.username, vars);
-			const renderedPassword = require_util.getNunjucksEngine().renderString(this.config.auth.password, vars);
+			const renderedUsername = require_render.getNunjucksEngine().renderString(this.config.auth.username, vars);
+			const renderedPassword = require_render.getNunjucksEngine().renderString(this.config.auth.password, vars);
 			const credentials = Buffer.from(`${renderedUsername}:${renderedPassword}`).toString("base64");
 			parsedRequest.headers.authorization = `Basic ${credentials}`;
 		}
 		if (this.config.auth?.type === "api_key" && this.config.auth.placement === "header") {
-			const renderedKeyName = require_util.getNunjucksEngine().renderString(this.config.auth.keyName, vars);
-			const renderedValue = require_util.getNunjucksEngine().renderString(this.config.auth.value, vars);
+			const renderedKeyName = require_render.getNunjucksEngine().renderString(this.config.auth.keyName, vars);
+			const renderedValue = require_render.getNunjucksEngine().renderString(this.config.auth.value, vars);
 			parsedRequest.headers[renderedKeyName.toLowerCase()] = renderedValue;
 		}
 		if (this.config.auth?.type === "api_key" && this.config.auth.placement === "query") try {
-			const renderedKeyName = require_util.getNunjucksEngine().renderString(this.config.auth.keyName, vars);
-			const renderedValue = require_util.getNunjucksEngine().renderString(this.config.auth.value, vars);
+			const renderedKeyName = require_render.getNunjucksEngine().renderString(this.config.auth.keyName, vars);
+			const renderedValue = require_render.getNunjucksEngine().renderString(this.config.auth.value, vars);
 			const urlObj = new URL(url);
 			urlObj.searchParams.append(renderedKeyName, renderedValue);
 			url = urlObj.toString();
@@ -14916,7 +14917,7 @@ var MoonshotProvider = class extends require_chat.OpenAiChatCompletionProvider {
 		const result = await super.getOpenAiBody(prompt, context, callApiOptions);
 		if (result.config.reasoning_effort !== void 0) {
 			if (!/^kimi-k3/i.test(this.modelName)) throw new Error(`Moonshot model ${this.modelName} does not support reasoning_effort (kimi-k3 family only). Remove it, use \`passthrough: { thinking: ... }\` on K2.x, or force-send it via \`passthrough: { reasoning_effort: ... }\`.`);
-			result.body.reasoning_effort = require_util.renderVarsInObject(result.config.reasoning_effort, context?.vars);
+			result.body.reasoning_effort = require_render.renderVarsInObject(result.config.reasoning_effort, context?.vars);
 		}
 		if (!pinsSamplingParams(this.modelName)) return result;
 		const { body, config } = result;
@@ -15133,7 +15134,7 @@ var N8nProvider = class {
 	}
 	buildRequestBody(prompt, context) {
 		const templateVars = this.getTemplateVars(prompt, context);
-		const nunjucks = require_util.getNunjucksEngine();
+		const nunjucks = require_render.getNunjucksEngine();
 		const renderValue = (value) => {
 			if (typeof value === "string") return nunjucks.renderString(value, templateVars);
 			if (Array.isArray(value)) return value.map(renderValue);
@@ -15169,7 +15170,7 @@ var N8nProvider = class {
 	}
 	buildHeaders(prompt, context) {
 		const templateVars = this.getTemplateVars(prompt, context);
-		const nunjucks = require_util.getNunjucksEngine();
+		const nunjucks = require_render.getNunjucksEngine();
 		const headers = { "Content-Type": "application/json" };
 		for (const [key, value] of Object.entries(this.config.headers ?? {})) headers[key] = nunjucks.renderString(value, templateVars);
 		const sessionId = this.getRequestSessionId(context);
@@ -17225,10 +17226,10 @@ var OrcaRouterProvider = class extends require_chat.OpenAiChatCompletionProvider
 		const config = result.config;
 		const body = result.body;
 		const models = promptConfig?.models ?? config.models ?? config.passthrough?.models;
-		if (models !== void 0) body.models = require_util.renderVarsInObject(models, context?.vars);
+		if (models !== void 0) body.models = require_render.renderVarsInObject(models, context?.vars);
 		const route = promptConfig?.route ?? config.route ?? config.passthrough?.route;
-		if (route !== void 0) body.route = require_util.renderVarsInObject(route, context?.vars);
-		if (config.reasoning_effort !== void 0) body.reasoning_effort = require_util.renderVarsInObject(config.reasoning_effort, context?.vars);
+		if (route !== void 0) body.route = require_render.renderVarsInObject(route, context?.vars);
+		if (config.reasoning_effort !== void 0) body.reasoning_effort = require_render.renderVarsInObject(config.reasoning_effort, context?.vars);
 		const anyFallbackRejectsTemperature = Array.isArray(body.models) && body.models.some((m) => typeof m === "string" && reasoningUpstreamRejectsTemperature(m));
 		if ("temperature" in body && (!this.supportsTemperature() || anyFallbackRejectsTemperature)) delete body.temperature;
 		return result;
@@ -17445,8 +17446,8 @@ var PromptfooModelProvider = class {
 				config: this.config
 			};
 			const url = `${require_fetch.cloudConfig.getApiHost()}/api/v1/task`;
-			const token = require_fetch.cloudConfig.getApiKey();
-			if (!token) throw new Error("No Promptfoo auth token available. Please log in with `promptfoo auth login`");
+			const authHeaders = require_fetch.cloudConfig.getAuthHeaders();
+			if (!authHeaders) throw new Error("No Promptfoo auth token available. Please log in with `promptfoo auth login`");
 			const body = JSON.stringify(payload);
 			require_logger.logger.debug("[PromptfooModel] Sending request", {
 				url,
@@ -17456,7 +17457,7 @@ var PromptfooModelProvider = class {
 				method: "POST",
 				headers: {
 					"Content-Type": "application/json",
-					Authorization: `Bearer ${token}`
+					...authHeaders
 				},
 				body
 			});
@@ -18745,7 +18746,7 @@ var SequenceProvider = class {
 	}
 	async callApi(prompt, context, options) {
 		require_invariant.invariant(context?.originalProvider, "Expected originalProvider to be set");
-		const nunjucks = require_util.getNunjucksEngine();
+		const nunjucks = require_render.getNunjucksEngine();
 		const responses = [];
 		const accumulatedTokenUsage = require_tokenUsageUtils.createEmptyTokenUsage();
 		for (const input of this.sequenceInputs) {
@@ -20454,7 +20455,7 @@ var WebSocketProvider = class {
 			...context?.vars || {},
 			prompt
 		};
-		const nunjucks = require_util.getNunjucksEngine(context?.filters);
+		const nunjucks = require_render.getNunjucksEngine(context?.filters);
 		const url = nunjucks.renderString(this.url, vars);
 		const message = nunjucks.renderString(this.config.messageTemplate, vars);
 		const streamResponse = this.streamResponse == null ? void 0 : await this.streamResponse;
@@ -20976,7 +20977,7 @@ var XAIProvider = class extends require_chat.OpenAiChatCompletionProvider {
 		].includes(reasoningEffort)) throw new Error(`xAI model ${this.modelName} does not support reasoning_effort ${JSON.stringify(reasoningEffort)}. Use "low", "medium", or "high", or omit reasoning_effort to use the default "high".`);
 		if (!this.supportsReasoningEffort() && result.body.reasoning_effort) delete result.body.reasoning_effort;
 		const searchParams = this.originalConfig?.search_parameters;
-		if (searchParams) result.body.search_parameters = require_util.renderVarsInObject(searchParams, context?.vars);
+		if (searchParams) result.body.search_parameters = require_render.renderVarsInObject(searchParams, context?.vars);
 		return result;
 	}
 	constructor(modelName, providerOptions) {
@@ -21274,7 +21275,7 @@ var XAIResponsesProvider = class {
 			...config.user ? { user: config.user } : {},
 			...config.passthrough || {}
 		};
-		if (body.reasoning !== void 0) body.reasoning = require_util.renderVarsInObject(body.reasoning, context?.vars);
+		if (body.reasoning !== void 0) body.reasoning = require_render.renderVarsInObject(body.reasoning, context?.vars);
 		if (GROK_4_MODELS.includes(this.modelName)) {
 			delete body.presence_penalty;
 			delete body.frequency_penalty;
@@ -22185,7 +22186,7 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath.startsWith("opencode:") || providerPath === "opencode",
 		create: async (providerPath, providerOptions, context) => {
-			const { OpenCodeSDKProvider } = await Promise.resolve().then(() => require("./opencode-sdk-Cid8t6m7.cjs"));
+			const { OpenCodeSDKProvider } = await Promise.resolve().then(() => require("./opencode-sdk-B9Dcws4x.cjs"));
 			return new OpenCodeSDKProvider({
 				...providerOptions,
 				id: providerPath,
@@ -22197,7 +22198,7 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath === "openinterpreter" || providerPath.startsWith("openinterpreter:"),
 		create: async (providerPath, providerOptions, context) => {
-			const { OpenInterpreterProvider } = await Promise.resolve().then(() => require("./openinterpreter-DmCcocbX.cjs"));
+			const { OpenInterpreterProvider } = await Promise.resolve().then(() => require("./openinterpreter-CjvjRmfR.cjs"));
 			const model = providerPath.split(":").slice(1).join(":");
 			return new OpenInterpreterProvider({
 				...providerOptions,
@@ -22216,14 +22217,14 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath.startsWith("openclaw:") || providerPath === "openclaw",
 		create: async (providerPath, providerOptions, context) => {
-			const { createOpenClawProvider } = await Promise.resolve().then(() => require("./openclaw-XMg8C92z.cjs"));
+			const { createOpenClawProvider } = await Promise.resolve().then(() => require("./openclaw-CSWfAv7N.cjs"));
 			return createOpenClawProvider(providerPath, providerOptions, context.env);
 		}
 	},
 	{
 		test: (providerPath) => providerPath.startsWith("anthropic:claude-agent-sdk") || providerPath.startsWith("anthropic:claude-code"),
 		create: async (_providerPath, providerOptions, _context) => {
-			const { ClaudeCodeSDKProvider } = await Promise.resolve().then(() => require("./claude-agent-sdk-BbO4g2C3.cjs"));
+			const { ClaudeCodeSDKProvider } = await Promise.resolve().then(() => require("./claude-agent-sdk-CXAxCt84.cjs"));
 			return new ClaudeCodeSDKProvider({ ...providerOptions });
 		}
 	},
@@ -22336,7 +22337,7 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath.startsWith("cloudflare-ai:"),
 		create: async (providerPath, providerOptions, context) => {
-			const { createCloudflareAiProvider } = await Promise.resolve().then(() => require("./cloudflare-ai-BEu-xQ5J.cjs"));
+			const { createCloudflareAiProvider } = await Promise.resolve().then(() => require("./cloudflare-ai-C0cr71_N.cjs"));
 			return createCloudflareAiProvider(providerPath, {
 				...providerOptions,
 				env: context.env
@@ -22346,7 +22347,7 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath.startsWith("cloudflare-gateway:"),
 		create: async (providerPath, providerOptions, context) => {
-			const { createCloudflareGatewayProvider } = await Promise.resolve().then(() => require("./cloudflare-gateway-D_M6cCM_.cjs"));
+			const { createCloudflareGatewayProvider } = await Promise.resolve().then(() => require("./cloudflare-gateway-CNwgkjWa.cjs"));
 			return createCloudflareGatewayProvider(providerPath, {
 				...providerOptions,
 				env: context.env
@@ -22467,7 +22468,7 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath.startsWith("fireworks:"),
 		create: async (providerPath, providerOptions, context) => {
-			const { createFireworksProvider } = await Promise.resolve().then(() => require("./chat-D9DdQU09.cjs"));
+			const { createFireworksProvider } = await Promise.resolve().then(() => require("./chat-psXx3S3c.cjs"));
 			return createFireworksProvider(providerPath, {
 				config: providerOptions,
 				env: {
@@ -22507,27 +22508,27 @@ const providerMap = [
 		create: async (providerPath, providerOptions, context) => {
 			const modelType = providerPath.split(":")[1];
 			if (modelType === "image") {
-				const { createHyperbolicImageProvider } = await Promise.resolve().then(() => require("./image-CLljmxcq.cjs"));
+				const { createHyperbolicImageProvider } = await Promise.resolve().then(() => require("./image-Bkns4wpz.cjs"));
 				return createHyperbolicImageProvider(providerPath, {
 					...providerOptions,
 					env: context.env
 				});
 			}
 			if (modelType === "audio") {
-				const { createHyperbolicAudioProvider } = await Promise.resolve().then(() => require("./audio-DJSX3nfH.cjs"));
+				const { createHyperbolicAudioProvider } = await Promise.resolve().then(() => require("./audio-CT31dzi3.cjs"));
 				return createHyperbolicAudioProvider(providerPath, {
 					...providerOptions,
 					env: context.env
 				});
 			}
-			const { createHyperbolicProvider } = await Promise.resolve().then(() => require("./chat-B43K4ZEW.cjs"));
+			const { createHyperbolicProvider } = await Promise.resolve().then(() => require("./chat-B5hzLi-1.cjs"));
 			return createHyperbolicProvider(providerPath, providerOptions);
 		}
 	},
 	{
 		test: (providerPath) => providerPath.startsWith("litellm:"),
 		create: async (providerPath, providerOptions, context) => {
-			const { createLiteLLMProvider } = await Promise.resolve().then(() => require("./litellm-CCNfY67w.cjs"));
+			const { createLiteLLMProvider } = await Promise.resolve().then(() => require("./litellm-BX6YVwnT.cjs"));
 			return createLiteLLMProvider(providerPath, {
 				config: providerOptions,
 				env: context.env
@@ -22598,7 +22599,7 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath.startsWith("nvidia:"),
 		create: async (providerPath, providerOptions, context) => {
-			const { createNvidiaProvider } = await Promise.resolve().then(() => require("./chat-BJT_S-0-.cjs"));
+			const { createNvidiaProvider } = await Promise.resolve().then(() => require("./chat-DQfpTnnW.cjs"));
 			return createNvidiaProvider(providerPath, {
 				config: providerOptions,
 				env: context.env
@@ -22616,6 +22617,25 @@ const providerMap = [
 			return new OllamaCompletionProvider(splits.slice(1).join(":"), providerOptions);
 		}
 	},
+	{
+		test: (providerPath) => providerPath === "openai:codex-security" || providerPath.startsWith("openai:codex-security:"),
+		create: async (providerPath, providerOptions, context) => {
+			const { OpenAICodexSecurityProvider } = await Promise.resolve().then(() => require("./codex-security-A8dTt6Ov.cjs"));
+			const codexModel = providerPath.split(":").slice(2).join(":") || getConfiguredOpenAiModel(providerOptions);
+			return new OpenAICodexSecurityProvider({
+				...providerOptions,
+				id: providerOptions.id ?? providerPath,
+				config: codexModel ? {
+					...providerOptions.config,
+					model: codexModel
+				} : providerOptions.config,
+				env: {
+					...context.env,
+					...providerOptions.env
+				}
+			});
+		}
+	},
 	{
 		test: (providerPath) => providerPath.startsWith("openai:"),
 		create: async (providerPath, providerOptions, context) => {
@@ -22624,7 +22644,7 @@ const providerMap = [
 			const modelName = splits.slice(2).join(":");
 			const configuredModel = getConfiguredOpenAiModel(providerOptions);
 			if (modelType === "codex-app-server" || modelType === "codex-desktop") {
-				const { OpenAICodexAppServerProvider } = await Promise.resolve().then(() => require("./codex-app-server-CwK6Xbfe.cjs"));
+				const { OpenAICodexAppServerProvider } = await Promise.resolve().then(() => require("./codex-app-server-CeT18Dkz.cjs"));
 				const codexModel = modelName || configuredModel;
 				const codexProviderId = providerOptions.id ?? providerPath;
 				return new OpenAICodexAppServerProvider({
@@ -22641,7 +22661,7 @@ const providerMap = [
 				});
 			}
 			if (modelType === "codex-sdk" || modelType === "codex") {
-				const { OpenAICodexSDKProvider } = await Promise.resolve().then(() => require("./codex-sdk-Bxihv7gJ.cjs")).then((n) => n.codex_sdk_exports);
+				const { OpenAICodexSDKProvider } = await Promise.resolve().then(() => require("./codex-sdk-BrhzHGrr.cjs")).then((n) => n.codex_sdk_exports);
 				const codexModel = modelName || configuredModel;
 				const codexProviderId = providerOptions.id ?? providerPath;
 				return new OpenAICodexSDKProvider({
@@ -22676,7 +22696,7 @@ const providerMap = [
 			if (modelType === "realtime") return new OpenAiRealtimeProvider(modelName || configuredModel || "gpt-realtime-1.5", providerOptions);
 			if (modelType === "responses") return new require_responses.OpenAiResponsesProvider(modelName || configuredModel || "gpt-4.1-2025-04-14", providerOptions);
 			if (modelType === "transcription") {
-				const { OpenAiTranscriptionProvider } = await Promise.resolve().then(() => require("./transcription-BQg4-zD7.cjs"));
+				const { OpenAiTranscriptionProvider } = await Promise.resolve().then(() => require("./transcription-CuNQgPv9.cjs"));
 				return new OpenAiTranscriptionProvider(modelName || configuredModel || "gpt-4o-transcribe-diarize", providerOptions);
 			}
 			if (modelType === "tts" || modelType === "speech") return new OpenAiTtsProvider(modelName || configuredModel || "gpt-4o-mini-tts", providerOptions);
@@ -22687,7 +22707,7 @@ const providerMap = [
 			if (OpenAiRealtimeProvider.OPENAI_REALTIME_MODEL_NAMES.includes(modelType)) return new OpenAiRealtimeProvider(modelType, providerOptions);
 			if (require_responses.OpenAiResponsesProvider.OPENAI_RESPONSES_MODEL_NAMES.includes(modelType)) return new require_responses.OpenAiResponsesProvider(modelType, providerOptions);
 			if (modelType === "agents") try {
-				const { OpenAiAgentsProvider } = await Promise.resolve().then(() => require("./agents-CfaaStfu.cjs"));
+				const { OpenAiAgentsProvider } = await Promise.resolve().then(() => require("./agents-BXDQ1xw_.cjs"));
 				return new OpenAiAgentsProvider(modelName || "default-agent", providerOptions);
 			} catch (error) {
 				if (require_util.isMissingPackageImportError(error, "@openai/agents")) throw new Error("The @openai/agents package is required for OpenAI Agents providers. Install it with: npm install @openai/agents");
@@ -22746,7 +22766,7 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath.startsWith("quiverai:"),
 		create: async (providerPath, providerOptions, context) => {
-			const { createQuiverAiProvider } = await Promise.resolve().then(() => require("./quiverai-dEV-iH9x.cjs"));
+			const { createQuiverAiProvider } = await Promise.resolve().then(() => require("./quiverai-CPa-eT-O.cjs"));
 			return createQuiverAiProvider(providerPath, providerOptions, context.env);
 		}
 	},
@@ -22764,7 +22784,7 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath.startsWith("modelslab:"),
 		create: async (providerPath, providerOptions, context) => {
-			const { ModelsLabImageProvider } = await Promise.resolve().then(() => require("./modelslab-9k-zzEfW.cjs"));
+			const { ModelsLabImageProvider } = await Promise.resolve().then(() => require("./modelslab-CLDbPmPX.cjs"));
 			const splits = providerPath.split(":");
 			const modelType = splits[1];
 			const modelName = splits.slice(2).join(":");
@@ -22808,7 +22828,7 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath.startsWith("aimlapi:"),
 		create: async (providerPath, providerOptions, context) => {
-			const { createAimlApiProvider } = await Promise.resolve().then(() => require("./aimlapi-agQErPC7.cjs"));
+			const { createAimlApiProvider } = await Promise.resolve().then(() => require("./aimlapi-BPLx5bkN.cjs"));
 			return createAimlApiProvider(providerPath, {
 				...providerOptions,
 				env: context.env
@@ -22818,7 +22838,7 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath.startsWith("cometapi:"),
 		create: async (providerPath, providerOptions, context) => {
-			const { createCometApiProvider } = await Promise.resolve().then(() => require("./cometapi-DEVvRD5z.cjs"));
+			const { createCometApiProvider } = await Promise.resolve().then(() => require("./cometapi-CPjQpopA.cjs"));
 			return createCometApiProvider(providerPath, {
 				...providerOptions,
 				env: context.env
@@ -22828,7 +22848,7 @@ const providerMap = [
 	{
 		test: (providerPath) => providerPath.startsWith("docker:"),
 		create: async (providerPath, providerOptions, context) => {
-			const { createDockerProvider } = await Promise.resolve().then(() => require("./docker-Bhb-hDqU.cjs"));
+			const { createDockerProvider } = await Promise.resolve().then(() => require("./docker-5g1NcdAE.cjs"));
 			return createDockerProvider(providerPath, {
 				...providerOptions,
 				env: context.env
@@ -23024,7 +23044,7 @@ Example: transformers:feature-extraction:Xenova/all-MiniLM-L6-v2`);
 		test: (providerPath) => providerPath === "slack" || providerPath.startsWith("slack:"),
 		create: async (providerPath, providerOptions, _context) => {
 			try {
-				const { SlackProvider } = await Promise.resolve().then(() => require("./slack-6c3iW1pP.cjs"));
+				const { SlackProvider } = await Promise.resolve().then(() => require("./slack-DqFNyAEf.cjs"));
 				if (providerPath === "slack") return new SlackProvider(providerOptions);
 				const splits = providerPath.split(":");
 				if (splits.length < 2) throw new Error("Invalid Slack provider path. Use slack:<channel_id> or slack:channel:<channel_id>");
@@ -23074,21 +23094,21 @@ const providerFamilies = [
 	{
 		canHandle: isAwsProviderPath,
 		factories: async () => {
-			const { awsProviderFactories } = await Promise.resolve().then(() => require("./aws-BHmi7gOy.cjs"));
+			const { awsProviderFactories } = await Promise.resolve().then(() => require("./aws-DhQCXH3c.cjs"));
 			return awsProviderFactories;
 		}
 	},
 	{
 		canHandle: isGoogleProviderPath,
 		factories: async () => {
-			const { googleProviderFactories } = await Promise.resolve().then(() => require("./google-CC83MIsJ.cjs"));
+			const { googleProviderFactories } = await Promise.resolve().then(() => require("./google-8szBGwzV.cjs"));
 			return googleProviderFactories;
 		}
 	},
 	{
 		canHandle: isRedteamProviderPath,
 		factories: async () => {
-			const { redteamProviderFactories } = await Promise.resolve().then(() => require("./registry-QpHnWcMr.cjs"));
+			const { redteamProviderFactories } = await Promise.resolve().then(() => require("./registry-3k9Gai1o.cjs"));
 			return redteamProviderFactories;
 		}
 	}
@@ -23153,9 +23173,9 @@ async function loadApiProvider(providerPath, context = {}) {
 		...env,
 		...options.env
 	} : void 0;
-	const renderedConfig = options.config ? require_util.renderEnvOnlyInObject(options.config, mergedEnv) : void 0;
+	const renderedConfig = options.config ? require_render.renderEnvOnlyInObject(options.config, mergedEnv) : void 0;
 	const providerOptions = {
-		id: options.id ? require_util.renderEnvOnlyInObject(options.id, mergedEnv) : void 0,
+		id: options.id ? require_render.renderEnvOnlyInObject(options.id, mergedEnv) : void 0,
 		config: {
 			...renderedConfig,
 			basePath
@@ -23163,7 +23183,7 @@ async function loadApiProvider(providerPath, context = {}) {
 		env: mergedEnv
 	};
 	if (providerOptions.config?.linkedTargetId) await require_storage.validateLinkedTargetId(providerOptions.config.linkedTargetId);
-	const renderedProviderPath = require_util.renderEnvOnlyInObject(providerPath, mergedEnv);
+	const renderedProviderPath = require_render.renderEnvOnlyInObject(providerPath, mergedEnv);
 	if (require_storage.isCloudProvider(renderedProviderPath)) {
 		const cloudDatabaseId = require_storage.getCloudDatabaseId(renderedProviderPath);
 		const cloudProvider = await require_storage.getProviderFromCloud(cloudDatabaseId);
@@ -23220,7 +23240,7 @@ async function loadApiProvider(providerPath, context = {}) {
 		ret.transform = options.transform;
 		ret.delay = options.delay;
 		ret.inputs = options.inputs;
-		ret.label ||= require_util.renderEnvOnlyInObject(options.label || "", mergedEnv);
+		ret.label ||= require_render.renderEnvOnlyInObject(options.label || "", mergedEnv);
 		return ret;
 	}
 	const errorMessage = dedent.default`
@@ -23477,4 +23497,4 @@ Object.defineProperty(exports, "resolveProviderConfigs", {
 	}
 });
 
-//# sourceMappingURL=providers-ASKoKjG0.cjs.map
+//# sourceMappingURL=providers-CRCoPqQH.cjs.map