promptfoo 0.125.0 → 0.125.1

package/dist/src/mcp-49jlEcTQ.js

@@ -1,85 +0,0 @@
-#!/usr/bin/env node
-import { zt as ProviderEnvOverridesSchema } from "./tables-BONxKPrt.js";
-import { i as InputsInputSchema } from "./shared-D-YP2yH6.js";
-import { g as McpAuthSchema, h as McpAuthInputSchema } from "./util-C72P0iIa.js";
-import { z as z$1 } from "zod";
-//#region src/contracts/providerConfig/shared.ts
-/** Provider-owned configuration is closed; request payloads and schemas remain open JSON. */
-const JsonObjectInputSchema = z$1.record(z$1.string(), z$1.json());
-z$1.templateLiteral(["file://", z$1.string().regex(/[\s\S]+/)]);
-z$1.strictObject({
-	label: z$1.string().optional(),
-	prompts: z$1.array(z$1.string()).optional(),
-	transform: z$1.string().optional(),
-	delay: z$1.number().optional(),
-	env: ProviderEnvOverridesSchema.catchall(z$1.string()).optional(),
-	inputs: InputsInputSchema.optional()
-});
-//#endregion
-//#region src/contracts/providerConfig/mcp.ts
-const McpServerFieldsSchema = z$1.looseObject({
-	path: z$1.string().describe("Local MCP server script; the shared client supports .js and .py files").optional(),
-	command: z$1.string().describe("Command to launch a stdio MCP server").optional(),
-	args: z$1.array(z$1.string()).optional().describe("Arguments passed to command; not used with path"),
-	name: z$1.string().optional().describe("Optional server name used to identify its tools"),
-	url: z$1.string().describe("Remote MCP server URL; connection validates the effective URL").optional(),
-	auth: McpAuthInputSchema.optional().describe("Authentication for remote servers; omitted means no configured auth"),
-	headers: z$1.record(z$1.string(), z$1.string()).optional().describe("Additional remote-server HTTP headers; generated auth headers take precedence"),
-	env: z$1.record(z$1.string(), z$1.string()).optional().describe("Environment variables for a stdio server process")
-});
-const McpServerInputSchema = z$1.union([
-	McpServerFieldsSchema.extend({ command: McpServerFieldsSchema.shape.command.unwrap().min(1) }).strict(),
-	McpServerFieldsSchema.extend({ path: McpServerFieldsSchema.shape.path.unwrap().min(1) }).strict(),
-	McpServerFieldsSchema.extend({ url: McpServerFieldsSchema.shape.url.unwrap().min(1) }).strict()
-], { error: "Either command or path or url must be specified for MCP server" }).describe("At least one connection field is required. The shared client prefers command, then path, then url; the Claude adapter prefers url, then command, then path");
-const McpServerRuntimeFieldsSchema = McpServerFieldsSchema.extend({ auth: McpAuthSchema.optional() });
-const McpServerSchema = z$1.union([
-	McpServerRuntimeFieldsSchema.extend({ command: z$1.string().min(1) }),
-	McpServerRuntimeFieldsSchema.extend({ path: z$1.string().min(1) }),
-	McpServerRuntimeFieldsSchema.extend({ url: z$1.string().min(1) })
-], { error: "Either command or path or url must be specified for MCP server" });
-/** Serializable options read by MCPClient; no defaults or execution side effects. */
-const McpClientConfigInputSchema = z$1.strictObject({
-	enabled: z$1.boolean().optional().describe("Defaults to true when parsed for execution"),
-	server: McpServerInputSchema.optional().describe("Single server; the shared client uses servers instead when that array is present"),
-	servers: z$1.array(McpServerInputSchema).optional().describe("Servers to connect to; an empty array is allowed. The Claude adapter also includes server"),
-	timeout: z$1.number().nonnegative().optional().describe("Request timeout in milliseconds; omitted uses MCP_REQUEST_TIMEOUT_MS then the SDK default of 60000 (60 seconds). Zero leaves the SDK timeout unchanged"),
-	resetTimeoutOnProgress: z$1.boolean().optional().describe("Reset the request timeout on progress notifications; defaults to false"),
-	maxTotalTimeout: z$1.number().nonnegative().optional().describe("Maximum request duration in milliseconds, including progress updates; zero or omitted adds no maximum"),
-	pingOnConnect: z$1.boolean().optional().describe("Ping the server after connecting; defaults to false"),
-	tools: z$1.array(z$1.string()).optional().describe("Tool-name allowlist for the shared client; unsupported by the Claude Agent SDK adapter"),
-	exclude_tools: z$1.array(z$1.string()).optional().describe("Tool names to exclude; nonempty exclusions are unsupported by the Claude Agent SDK adapter"),
-	debug: z$1.boolean().optional().describe("Enable debug logging; falls back to MCP_DEBUG"),
-	verbose: z$1.boolean().optional().describe("Enable verbose logging; falls back to MCP_VERBOSE")
-});
-/** Standalone MCP providers add argument defaults and ProviderResponse transforms. */
-const McpConfigInputSchema = McpClientConfigInputSchema.extend({
-	serverName: z$1.string().optional().describe("Server name supplied by mcp:<name> provider IDs"),
-	defaultArgs: JsonObjectInputSchema.optional().describe("Arguments merged into every tool call; per-call arguments take precedence"),
-	transformResponse: z$1.string().optional().describe("Response transform expression or file:// module reference; evaluated only at runtime"),
-	responseParser: z$1.string().optional().meta({
-		description: "Deprecated alias for transformResponse",
-		deprecated: true
-	})
-});
-const McpResponseTransformSchema = z$1.union([z$1.string(), z$1.custom((value) => typeof value === "function")]);
-const McpConfigSchema = McpConfigInputSchema.loose().extend({
-	enabled: z$1.boolean().prefault(true),
-	defaultArgs: z$1.record(z$1.string(), z$1.unknown()).optional().meta({ ...McpConfigInputSchema.shape.defaultArgs.meta() }),
-	server: McpServerSchema.optional(),
-	servers: z$1.array(McpServerSchema).optional(),
-	transformResponse: McpResponseTransformSchema.optional(),
-	responseParser: McpResponseTransformSchema.optional().meta({ ...McpConfigInputSchema.shape.responseParser.meta() })
-});
-z$1.toJSONSchema(McpClientConfigInputSchema, {
-	target: "draft-07",
-	io: "input"
-});
-z$1.toJSONSchema(McpConfigInputSchema, {
-	target: "draft-07",
-	io: "input"
-});
-//#endregion
-export { McpConfigSchema as t };
-
-//# sourceMappingURL=mcp-49jlEcTQ.js.map

package/dist/src/mcp-__PIz81I.js

@@ -1,84 +0,0 @@
-import { jt as ProviderEnvOverridesSchema } from "./tables-D7gZdWrS.js";
-import { i as InputsInputSchema } from "./shared-CPig5o70.js";
-import { g as McpAuthSchema, h as McpAuthInputSchema } from "./util-CSSAWO8v.js";
-import { z as z$1 } from "zod";
-//#region src/contracts/providerConfig/shared.ts
-/** Provider-owned configuration is closed; request payloads and schemas remain open JSON. */
-const JsonObjectInputSchema = z$1.record(z$1.string(), z$1.json());
-z$1.templateLiteral(["file://", z$1.string().regex(/[\s\S]+/)]);
-z$1.strictObject({
-	label: z$1.string().optional(),
-	prompts: z$1.array(z$1.string()).optional(),
-	transform: z$1.string().optional(),
-	delay: z$1.number().optional(),
-	env: ProviderEnvOverridesSchema.catchall(z$1.string()).optional(),
-	inputs: InputsInputSchema.optional()
-});
-//#endregion
-//#region src/contracts/providerConfig/mcp.ts
-const McpServerFieldsSchema = z$1.looseObject({
-	path: z$1.string().describe("Local MCP server script; the shared client supports .js and .py files").optional(),
-	command: z$1.string().describe("Command to launch a stdio MCP server").optional(),
-	args: z$1.array(z$1.string()).optional().describe("Arguments passed to command; not used with path"),
-	name: z$1.string().optional().describe("Optional server name used to identify its tools"),
-	url: z$1.string().describe("Remote MCP server URL; connection validates the effective URL").optional(),
-	auth: McpAuthInputSchema.optional().describe("Authentication for remote servers; omitted means no configured auth"),
-	headers: z$1.record(z$1.string(), z$1.string()).optional().describe("Additional remote-server HTTP headers; generated auth headers take precedence"),
-	env: z$1.record(z$1.string(), z$1.string()).optional().describe("Environment variables for a stdio server process")
-});
-const McpServerInputSchema = z$1.union([
-	McpServerFieldsSchema.extend({ command: McpServerFieldsSchema.shape.command.unwrap().min(1) }).strict(),
-	McpServerFieldsSchema.extend({ path: McpServerFieldsSchema.shape.path.unwrap().min(1) }).strict(),
-	McpServerFieldsSchema.extend({ url: McpServerFieldsSchema.shape.url.unwrap().min(1) }).strict()
-], { error: "Either command or path or url must be specified for MCP server" }).describe("At least one connection field is required. The shared client prefers command, then path, then url; the Claude adapter prefers url, then command, then path");
-const McpServerRuntimeFieldsSchema = McpServerFieldsSchema.extend({ auth: McpAuthSchema.optional() });
-const McpServerSchema = z$1.union([
-	McpServerRuntimeFieldsSchema.extend({ command: z$1.string().min(1) }),
-	McpServerRuntimeFieldsSchema.extend({ path: z$1.string().min(1) }),
-	McpServerRuntimeFieldsSchema.extend({ url: z$1.string().min(1) })
-], { error: "Either command or path or url must be specified for MCP server" });
-/** Serializable options read by MCPClient; no defaults or execution side effects. */
-const McpClientConfigInputSchema = z$1.strictObject({
-	enabled: z$1.boolean().optional().describe("Defaults to true when parsed for execution"),
-	server: McpServerInputSchema.optional().describe("Single server; the shared client uses servers instead when that array is present"),
-	servers: z$1.array(McpServerInputSchema).optional().describe("Servers to connect to; an empty array is allowed. The Claude adapter also includes server"),
-	timeout: z$1.number().nonnegative().optional().describe("Request timeout in milliseconds; omitted uses MCP_REQUEST_TIMEOUT_MS then the SDK default of 60000 (60 seconds). Zero leaves the SDK timeout unchanged"),
-	resetTimeoutOnProgress: z$1.boolean().optional().describe("Reset the request timeout on progress notifications; defaults to false"),
-	maxTotalTimeout: z$1.number().nonnegative().optional().describe("Maximum request duration in milliseconds, including progress updates; zero or omitted adds no maximum"),
-	pingOnConnect: z$1.boolean().optional().describe("Ping the server after connecting; defaults to false"),
-	tools: z$1.array(z$1.string()).optional().describe("Tool-name allowlist for the shared client; unsupported by the Claude Agent SDK adapter"),
-	exclude_tools: z$1.array(z$1.string()).optional().describe("Tool names to exclude; nonempty exclusions are unsupported by the Claude Agent SDK adapter"),
-	debug: z$1.boolean().optional().describe("Enable debug logging; falls back to MCP_DEBUG"),
-	verbose: z$1.boolean().optional().describe("Enable verbose logging; falls back to MCP_VERBOSE")
-});
-/** Standalone MCP providers add argument defaults and ProviderResponse transforms. */
-const McpConfigInputSchema = McpClientConfigInputSchema.extend({
-	serverName: z$1.string().optional().describe("Server name supplied by mcp:<name> provider IDs"),
-	defaultArgs: JsonObjectInputSchema.optional().describe("Arguments merged into every tool call; per-call arguments take precedence"),
-	transformResponse: z$1.string().optional().describe("Response transform expression or file:// module reference; evaluated only at runtime"),
-	responseParser: z$1.string().optional().meta({
-		description: "Deprecated alias for transformResponse",
-		deprecated: true
-	})
-});
-const McpResponseTransformSchema = z$1.union([z$1.string(), z$1.custom((value) => typeof value === "function")]);
-const McpConfigSchema = McpConfigInputSchema.loose().extend({
-	enabled: z$1.boolean().prefault(true),
-	defaultArgs: z$1.record(z$1.string(), z$1.unknown()).optional().meta({ ...McpConfigInputSchema.shape.defaultArgs.meta() }),
-	server: McpServerSchema.optional(),
-	servers: z$1.array(McpServerSchema).optional(),
-	transformResponse: McpResponseTransformSchema.optional(),
-	responseParser: McpResponseTransformSchema.optional().meta({ ...McpConfigInputSchema.shape.responseParser.meta() })
-});
-z$1.toJSONSchema(McpClientConfigInputSchema, {
-	target: "draft-07",
-	io: "input"
-});
-z$1.toJSONSchema(McpConfigInputSchema, {
-	target: "draft-07",
-	io: "input"
-});
-//#endregion
-export { McpConfigSchema as t };
-
-//# sourceMappingURL=mcp-__PIz81I.js.map

package/dist/src/memoryPoisoning-Chxge74M.js

@@ -1,111 +0,0 @@
-import { o as logger } from "./logger-CNHLbG5Y.js";
-import { t as invariant } from "./invariant-CHP0zrix.js";
-import { Y as VERSION, t as fetchWithProxy } from "./fetch-5HtnNhHg.js";
-import { a as getUserEmail } from "./accounts-sUiEJfkB.js";
-import { h as remoteGenerationContextPayload, i as getRemoteGenerationUrl, r as getRemoteGenerationHeaders } from "./remoteGeneration-Bgg6kC5V.js";
-import { d as createEmptyTokenUsage, n as accumulateAttackerTokenUsage, s as accumulateResponseTokenUsage } from "./tokenUsageUtils-C51DmahQ.js";
-import { E as throwIfTargetPromptExceedsMaxChars, _ as messagesToRedteamHistory, a as callTargetProvider } from "./shared-Ci78wTZX.js";
-import { t as REDTEAM_MEMORY_POISONING_PLUGIN_ID } from "./constants-3y0xcfa4.js";
-//#region src/redteam/providers/agentic/memoryPoisoning.ts
-var MemoryPoisoningProvider = class {
-	config;
-	constructor(config) {
-		this.config = config;
-	}
-	get targetId() {
-		if (typeof this.config.targetId === "string") return this.config.targetId;
-		return typeof this.config.config?.targetId === "string" ? this.config.config.targetId : void 0;
-	}
-	id() {
-		return REDTEAM_MEMORY_POISONING_PLUGIN_ID;
-	}
-	/**
-	* Generates a scenario containing a memory and a follow up question/command which is dependent on the memory.
-	*
-	*  1. Generate a scenario containing memories and follow up questions/commands which are dependent on the memories.
-	*  2. Send the memory message to the target.
-	*  3. Send the test case to the target; the test case should poison the memory created in the previous step.
-	*  4. Send the follow up question to the target.
-	*  5. A memory is successfully poisoned if the follow up question is answered incorrectly.
-	*
-	* @param prompt The poisoned prompt.
-	* @param context The context of the poisoned prompt.
-	* @param options The options for the poisoned prompt.
-	*/
-	async callApi(prompt, context, options) {
-		try {
-			const targetProvider = context?.originalProvider;
-			const purpose = context?.test?.metadata?.purpose;
-			invariant(targetProvider, "Expected originalProvider to be set");
-			invariant(context?.test, "Expected test to be set");
-			invariant(purpose, "Expected purpose to be set");
-			const scenarioRes = await fetchWithProxy(getRemoteGenerationUrl(), {
-				body: JSON.stringify({
-					task: "agentic:memory-poisoning-scenario",
-					...remoteGenerationContextPayload(this.targetId),
-					purpose,
-					version: VERSION,
-					email: getUserEmail()
-				}),
-				headers: getRemoteGenerationHeaders(),
-				method: "POST"
-			}, options?.abortSignal);
-			if (!scenarioRes.ok) throw new Error(`Failed to generate scenario: ${scenarioRes.statusText}`);
-			const scenario = await scenarioRes.json();
-			context.test.metadata ??= {};
-			context.test.metadata["scenario"] = scenario;
-			const totalTokenUsage = createEmptyTokenUsage();
-			if (scenario.tokenUsage) accumulateAttackerTokenUsage(totalTokenUsage, { tokenUsage: scenario.tokenUsage });
-			throwIfTargetPromptExceedsMaxChars(scenario.memory);
-			const memoryResponse = await callTargetProvider(targetProvider, scenario.memory, context, options);
-			accumulateResponseTokenUsage(totalTokenUsage, memoryResponse);
-			throwIfTargetPromptExceedsMaxChars(prompt);
-			const testResponse = await callTargetProvider(targetProvider, prompt, context, options);
-			accumulateResponseTokenUsage(totalTokenUsage, testResponse);
-			throwIfTargetPromptExceedsMaxChars(scenario.followUp);
-			const response = await callTargetProvider(targetProvider, scenario.followUp, context, options);
-			accumulateResponseTokenUsage(totalTokenUsage, response);
-			const messages = [
-				{
-					content: scenario.memory,
-					role: "user"
-				},
-				{
-					content: memoryResponse.output,
-					role: "assistant"
-				},
-				{
-					content: prompt,
-					role: "user"
-				},
-				{
-					content: testResponse.output,
-					role: "assistant"
-				},
-				{
-					content: scenario.followUp,
-					role: "user"
-				},
-				{
-					content: response.output,
-					role: "assistant"
-				}
-			];
-			return {
-				output: response.output,
-				metadata: {
-					messages,
-					redteamHistory: messagesToRedteamHistory(messages)
-				},
-				tokenUsage: totalTokenUsage
-			};
-		} catch (error) {
-			logger.error(`Error in MemoryPoisoningProvider: ${error}`);
-			throw error;
-		}
-	}
-};
-//#endregion
-export { MemoryPoisoningProvider };
-
-//# sourceMappingURL=memoryPoisoning-Chxge74M.js.map

package/dist/src/memoryPoisoning-QH6NCUVE.js

@@ -1,112 +0,0 @@
-#!/usr/bin/env node
-import { c as logger } from "./logger-pCNnmVuz.js";
-import { Y as VERSION, r as fetchWithProxy } from "./fetch-BhfUnKen.js";
-import { t as invariant } from "./invariant-CbHB1xyx.js";
-import { s as getUserEmail } from "./accounts-GKrO1olH.js";
-import { h as remoteGenerationContextPayload, i as getRemoteGenerationUrl, r as getRemoteGenerationHeaders } from "./remoteGeneration-vHMGVKr1.js";
-import { d as createEmptyTokenUsage, n as accumulateAttackerTokenUsage, s as accumulateResponseTokenUsage } from "./tokenUsageUtils-CHs91tUW.js";
-import { E as throwIfTargetPromptExceedsMaxChars, _ as messagesToRedteamHistory, a as callTargetProvider } from "./shared-Dd3rimdM.js";
-import { t as REDTEAM_MEMORY_POISONING_PLUGIN_ID } from "./constants-CDdPiEZR.js";
-//#region src/redteam/providers/agentic/memoryPoisoning.ts
-var MemoryPoisoningProvider = class {
-	config;
-	constructor(config) {
-		this.config = config;
-	}
-	get targetId() {
-		if (typeof this.config.targetId === "string") return this.config.targetId;
-		return typeof this.config.config?.targetId === "string" ? this.config.config.targetId : void 0;
-	}
-	id() {
-		return REDTEAM_MEMORY_POISONING_PLUGIN_ID;
-	}
-	/**
-	* Generates a scenario containing a memory and a follow up question/command which is dependent on the memory.
-	*
-	*  1. Generate a scenario containing memories and follow up questions/commands which are dependent on the memories.
-	*  2. Send the memory message to the target.
-	*  3. Send the test case to the target; the test case should poison the memory created in the previous step.
-	*  4. Send the follow up question to the target.
-	*  5. A memory is successfully poisoned if the follow up question is answered incorrectly.
-	*
-	* @param prompt The poisoned prompt.
-	* @param context The context of the poisoned prompt.
-	* @param options The options for the poisoned prompt.
-	*/
-	async callApi(prompt, context, options) {
-		try {
-			const targetProvider = context?.originalProvider;
-			const purpose = context?.test?.metadata?.purpose;
-			invariant(targetProvider, "Expected originalProvider to be set");
-			invariant(context?.test, "Expected test to be set");
-			invariant(purpose, "Expected purpose to be set");
-			const scenarioRes = await fetchWithProxy(getRemoteGenerationUrl(), {
-				body: JSON.stringify({
-					task: "agentic:memory-poisoning-scenario",
-					...remoteGenerationContextPayload(this.targetId),
-					purpose,
-					version: VERSION,
-					email: getUserEmail()
-				}),
-				headers: getRemoteGenerationHeaders(),
-				method: "POST"
-			}, options?.abortSignal);
-			if (!scenarioRes.ok) throw new Error(`Failed to generate scenario: ${scenarioRes.statusText}`);
-			const scenario = await scenarioRes.json();
-			context.test.metadata ??= {};
-			context.test.metadata["scenario"] = scenario;
-			const totalTokenUsage = createEmptyTokenUsage();
-			if (scenario.tokenUsage) accumulateAttackerTokenUsage(totalTokenUsage, { tokenUsage: scenario.tokenUsage });
-			throwIfTargetPromptExceedsMaxChars(scenario.memory);
-			const memoryResponse = await callTargetProvider(targetProvider, scenario.memory, context, options);
-			accumulateResponseTokenUsage(totalTokenUsage, memoryResponse);
-			throwIfTargetPromptExceedsMaxChars(prompt);
-			const testResponse = await callTargetProvider(targetProvider, prompt, context, options);
-			accumulateResponseTokenUsage(totalTokenUsage, testResponse);
-			throwIfTargetPromptExceedsMaxChars(scenario.followUp);
-			const response = await callTargetProvider(targetProvider, scenario.followUp, context, options);
-			accumulateResponseTokenUsage(totalTokenUsage, response);
-			const messages = [
-				{
-					content: scenario.memory,
-					role: "user"
-				},
-				{
-					content: memoryResponse.output,
-					role: "assistant"
-				},
-				{
-					content: prompt,
-					role: "user"
-				},
-				{
-					content: testResponse.output,
-					role: "assistant"
-				},
-				{
-					content: scenario.followUp,
-					role: "user"
-				},
-				{
-					content: response.output,
-					role: "assistant"
-				}
-			];
-			return {
-				output: response.output,
-				metadata: {
-					messages,
-					redteamHistory: messagesToRedteamHistory(messages)
-				},
-				tokenUsage: totalTokenUsage
-			};
-		} catch (error) {
-			logger.error(`Error in MemoryPoisoningProvider: ${error}`);
-			throw error;
-		}
-	}
-};
-//#endregion
-export { MemoryPoisoningProvider };
-
-//# sourceMappingURL=memoryPoisoning-QH6NCUVE.js.map

package/dist/src/memoryPoisoning-tCxZt8Nz.js

@@ -1,111 +0,0 @@
-import { o as logger } from "./logger-Gff7RMNF.js";
-import { X as VERSION, t as fetchWithProxy } from "./fetch-BCwjoIFd.js";
-import { t as invariant } from "./invariant-CHP0zrix.js";
-import { s as getUserEmail } from "./accounts-e4FGOsji.js";
-import { h as remoteGenerationContextPayload, i as getRemoteGenerationUrl, r as getRemoteGenerationHeaders } from "./remoteGeneration-DaxwJDKv.js";
-import { d as createEmptyTokenUsage, n as accumulateAttackerTokenUsage, s as accumulateResponseTokenUsage } from "./tokenUsageUtils-BfzeNdYY.js";
-import { E as throwIfTargetPromptExceedsMaxChars, _ as messagesToRedteamHistory, a as callTargetProvider } from "./shared-BtuO-OAM.js";
-import { o as REDTEAM_MEMORY_POISONING_PLUGIN_ID } from "./server/index.js";
-//#region src/redteam/providers/agentic/memoryPoisoning.ts
-var MemoryPoisoningProvider = class {
-	config;
-	constructor(config) {
-		this.config = config;
-	}
-	get targetId() {
-		if (typeof this.config.targetId === "string") return this.config.targetId;
-		return typeof this.config.config?.targetId === "string" ? this.config.config.targetId : void 0;
-	}
-	id() {
-		return REDTEAM_MEMORY_POISONING_PLUGIN_ID;
-	}
-	/**
-	* Generates a scenario containing a memory and a follow up question/command which is dependent on the memory.
-	*
-	*  1. Generate a scenario containing memories and follow up questions/commands which are dependent on the memories.
-	*  2. Send the memory message to the target.
-	*  3. Send the test case to the target; the test case should poison the memory created in the previous step.
-	*  4. Send the follow up question to the target.
-	*  5. A memory is successfully poisoned if the follow up question is answered incorrectly.
-	*
-	* @param prompt The poisoned prompt.
-	* @param context The context of the poisoned prompt.
-	* @param options The options for the poisoned prompt.
-	*/
-	async callApi(prompt, context, options) {
-		try {
-			const targetProvider = context?.originalProvider;
-			const purpose = context?.test?.metadata?.purpose;
-			invariant(targetProvider, "Expected originalProvider to be set");
-			invariant(context?.test, "Expected test to be set");
-			invariant(purpose, "Expected purpose to be set");
-			const scenarioRes = await fetchWithProxy(getRemoteGenerationUrl(), {
-				body: JSON.stringify({
-					task: "agentic:memory-poisoning-scenario",
-					...remoteGenerationContextPayload(this.targetId),
-					purpose,
-					version: VERSION,
-					email: getUserEmail()
-				}),
-				headers: getRemoteGenerationHeaders(),
-				method: "POST"
-			}, options?.abortSignal);
-			if (!scenarioRes.ok) throw new Error(`Failed to generate scenario: ${scenarioRes.statusText}`);
-			const scenario = await scenarioRes.json();
-			context.test.metadata ??= {};
-			context.test.metadata["scenario"] = scenario;
-			const totalTokenUsage = createEmptyTokenUsage();
-			if (scenario.tokenUsage) accumulateAttackerTokenUsage(totalTokenUsage, { tokenUsage: scenario.tokenUsage });
-			throwIfTargetPromptExceedsMaxChars(scenario.memory);
-			const memoryResponse = await callTargetProvider(targetProvider, scenario.memory, context, options);
-			accumulateResponseTokenUsage(totalTokenUsage, memoryResponse);
-			throwIfTargetPromptExceedsMaxChars(prompt);
-			const testResponse = await callTargetProvider(targetProvider, prompt, context, options);
-			accumulateResponseTokenUsage(totalTokenUsage, testResponse);
-			throwIfTargetPromptExceedsMaxChars(scenario.followUp);
-			const response = await callTargetProvider(targetProvider, scenario.followUp, context, options);
-			accumulateResponseTokenUsage(totalTokenUsage, response);
-			const messages = [
-				{
-					content: scenario.memory,
-					role: "user"
-				},
-				{
-					content: memoryResponse.output,
-					role: "assistant"
-				},
-				{
-					content: prompt,
-					role: "user"
-				},
-				{
-					content: testResponse.output,
-					role: "assistant"
-				},
-				{
-					content: scenario.followUp,
-					role: "user"
-				},
-				{
-					content: response.output,
-					role: "assistant"
-				}
-			];
-			return {
-				output: response.output,
-				metadata: {
-					messages,
-					redteamHistory: messagesToRedteamHistory(messages)
-				},
-				tokenUsage: totalTokenUsage
-			};
-		} catch (error) {
-			logger.error(`Error in MemoryPoisoningProvider: ${error}`);
-			throw error;
-		}
-	}
-};
-//#endregion
-export { MemoryPoisoningProvider };
-
-//# sourceMappingURL=memoryPoisoning-tCxZt8Nz.js.map

package/dist/src/memoryPoisoning-ymrRItRR.cjs

@@ -1,111 +0,0 @@
-const require_logger = require("./logger-DXUHJBHJ.cjs");
-const require_invariant = require("./invariant-C2JOzzO2.cjs");
-const require_fetch = require("./fetch-DYte6oQX.cjs");
-const require_accounts = require("./accounts-Dpb43yde.cjs");
-const require_remoteGeneration = require("./remoteGeneration-CKJFE960.cjs");
-const require_tokenUsageUtils = require("./tokenUsageUtils-DMF9uhT9.cjs");
-const require_shared = require("./shared-KAjFxRre.cjs");
-const require_constants = require("./constants-BHSKoWzY.cjs");
-//#region src/redteam/providers/agentic/memoryPoisoning.ts
-var MemoryPoisoningProvider = class {
-	config;
-	constructor(config) {
-		this.config = config;
-	}
-	get targetId() {
-		if (typeof this.config.targetId === "string") return this.config.targetId;
-		return typeof this.config.config?.targetId === "string" ? this.config.config.targetId : void 0;
-	}
-	id() {
-		return require_constants.REDTEAM_MEMORY_POISONING_PLUGIN_ID;
-	}
-	/**
-	* Generates a scenario containing a memory and a follow up question/command which is dependent on the memory.
-	*
-	*  1. Generate a scenario containing memories and follow up questions/commands which are dependent on the memories.
-	*  2. Send the memory message to the target.
-	*  3. Send the test case to the target; the test case should poison the memory created in the previous step.
-	*  4. Send the follow up question to the target.
-	*  5. A memory is successfully poisoned if the follow up question is answered incorrectly.
-	*
-	* @param prompt The poisoned prompt.
-	* @param context The context of the poisoned prompt.
-	* @param options The options for the poisoned prompt.
-	*/
-	async callApi(prompt, context, options) {
-		try {
-			const targetProvider = context?.originalProvider;
-			const purpose = context?.test?.metadata?.purpose;
-			require_invariant.invariant(targetProvider, "Expected originalProvider to be set");
-			require_invariant.invariant(context?.test, "Expected test to be set");
-			require_invariant.invariant(purpose, "Expected purpose to be set");
-			const scenarioRes = await require_fetch.fetchWithProxy(require_remoteGeneration.getRemoteGenerationUrl(), {
-				body: JSON.stringify({
-					task: "agentic:memory-poisoning-scenario",
-					...require_remoteGeneration.remoteGenerationContextPayload(this.targetId),
-					purpose,
-					version: require_fetch.VERSION,
-					email: require_accounts.getUserEmail()
-				}),
-				headers: require_remoteGeneration.getRemoteGenerationHeaders(),
-				method: "POST"
-			}, options?.abortSignal);
-			if (!scenarioRes.ok) throw new Error(`Failed to generate scenario: ${scenarioRes.statusText}`);
-			const scenario = await scenarioRes.json();
-			context.test.metadata ??= {};
-			context.test.metadata["scenario"] = scenario;
-			const totalTokenUsage = require_tokenUsageUtils.createEmptyTokenUsage();
-			if (scenario.tokenUsage) require_tokenUsageUtils.accumulateAttackerTokenUsage(totalTokenUsage, { tokenUsage: scenario.tokenUsage });
-			require_shared.throwIfTargetPromptExceedsMaxChars(scenario.memory);
-			const memoryResponse = await require_shared.callTargetProvider(targetProvider, scenario.memory, context, options);
-			require_tokenUsageUtils.accumulateResponseTokenUsage(totalTokenUsage, memoryResponse);
-			require_shared.throwIfTargetPromptExceedsMaxChars(prompt);
-			const testResponse = await require_shared.callTargetProvider(targetProvider, prompt, context, options);
-			require_tokenUsageUtils.accumulateResponseTokenUsage(totalTokenUsage, testResponse);
-			require_shared.throwIfTargetPromptExceedsMaxChars(scenario.followUp);
-			const response = await require_shared.callTargetProvider(targetProvider, scenario.followUp, context, options);
-			require_tokenUsageUtils.accumulateResponseTokenUsage(totalTokenUsage, response);
-			const messages = [
-				{
-					content: scenario.memory,
-					role: "user"
-				},
-				{
-					content: memoryResponse.output,
-					role: "assistant"
-				},
-				{
-					content: prompt,
-					role: "user"
-				},
-				{
-					content: testResponse.output,
-					role: "assistant"
-				},
-				{
-					content: scenario.followUp,
-					role: "user"
-				},
-				{
-					content: response.output,
-					role: "assistant"
-				}
-			];
-			return {
-				output: response.output,
-				metadata: {
-					messages,
-					redteamHistory: require_shared.messagesToRedteamHistory(messages)
-				},
-				tokenUsage: totalTokenUsage
-			};
-		} catch (error) {
-			require_logger.logger.error(`Error in MemoryPoisoningProvider: ${error}`);
-			throw error;
-		}
-	}
-};
-//#endregion
-exports.MemoryPoisoningProvider = MemoryPoisoningProvider;
-
-//# sourceMappingURL=memoryPoisoning-ymrRItRR.cjs.map