…rgets

- Add supports_multi_turn property to PromptTarget (False) and PromptChatTarget (True)
- Override to True for stateful non-chat targets (Realtime, Playwright, WebSocket)
- Override to False for single-turn OpenAI targets (Image, Video) with _validate_request checks
- Add _rotate_conversation_for_single_turn_target helper in MultiTurnAttackStrategy
- Integrate rotation in RedTeamingAttack before sending to objective target
- Adapt TAP duplicate() to skip history duplication for single-turn targets
- Add ValueError guards in Crescendo, ChunkedRequest, MultiPromptSending for single-turn targets
- Add unit tests for property values and attack behaviors

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

…rgets

- Add supports_multi_turn property to PromptTarget (False) and PromptChatTarget (True)
- Override to True for stateful non-chat targets (Realtime, Playwright, WebSocket)
- Override to False for single-turn OpenAI targets (Image, Video) with _validate_request checks
- Add _rotate_conversation_for_single_turn_target helper in MultiTurnAttackStrategy
- Integrate rotation in RedTeamingAttack before sending to objective target
- Adapt TAP duplicate() to skip history duplication for single-turn targets
- Add ValueError guards in Crescendo, ChunkedRequest, MultiPromptSending for single-turn targets
- Add unit tests for property values and attack behaviors

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

…otation in ChunkedRequest

- Replace property overrides with _DEFAULT_SUPPORTS_MULTI_TURN class constants
  on all target subclasses (image, video, tts, completion, realtime, playwright,
  playwright_copilot, websocket_copilot)
- Make supports_multi_turn settable per-instance via constructor parameter,
  propagated through PromptChatTarget and OpenAITarget init chains
- Add supports_multi_turn to _create_identifier() params
- Use self._logger instead of module logger in rotation helper
- Fix video target _validate_request to use text_piece.conversation_id
- ChunkedRequest: replace ValueError guard with rotation (Crucible CTF use case)
- Update tests: add constructor override tests, remove ChunkedRequest ValueError
  test, fix PromptTarget default test

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Implement rlundeen2's design feedback (comment 7) to use a TargetCapabilities
dataclass instead of individual class constants/properties:

- Add TargetCapabilities frozen dataclass in prompt_target/common/target_capabilities.py
  with supports_multi_turn field (extensible for future capabilities like
  editable_history, json_schema_support, system_message_support, etc.)
- PromptTarget: replace _DEFAULT_SUPPORTS_MULTI_TURN with _DEFAULT_CAPABILITIES,
  build per-instance capabilities from class defaults + constructor overrides
  using dataclasses.replace()
- Add capabilities property for full TargetCapabilities access
- Keep supports_multi_turn as convenience property delegating to capabilities
- Update all subclasses to use _DEFAULT_CAPABILITIES pattern
- Export TargetCapabilities from pyrit.prompt_target
- Add tests for capabilities property and constructor overrides

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

…cendo error

- TAP duplicate(): duplicate system messages into new conversation for single-turn
  targets so prepended conversation system prompts are preserved
- Rotation helper: same fix - duplicate system messages when rotating conversation_id
  for single-turn targets instead of using bare uuid4()
- Crescendo: update error message to reflect permanent incompatibility with
  single-turn targets (not 'does not yet support')
- Update test to match new Crescendo error message

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

- Add TestSystemPromptCarryoverOnRotation: verifies system messages are
  duplicated into new conversations on rotation, preserved across multiple
  rotations, and that user/assistant messages are not carried over
- Add TestTAPNodeDuplicateSystemMessages: verifies TAP's duplicate() method
  copies only system messages for single-turn targets, full conversation for
  multi-turn targets, and always fully duplicates adversarial chat
- Add ChunkedRequestAttack ValueError guard test for single-turn targets
- Remove dead _rotate_conversation call in chunked_request.py (guarded by
  ValueError in _setup_async)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

- Multi-piece system message (same sequence) fully duplicated
- Old/original conversation untouched after rotation/duplication
- Tests for both rotation helper and TAP duplicate()

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

- Test single-turn target: system prompt survives across 3 depth levels
  of branching (duplicate → add turn → duplicate again)
- Test multi-turn target: full conversation history preserved across
  branching with accumulated turns
- Uses real in-memory SQLite database for end-to-end verification

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Test _ensure_async_token_provider function (5 tests) and
OpenAITarget.__init__ API key resolution (8 tests) covering:
- Explicit string key, env var fallback, param precedence
- Non-Azure endpoint without key raises ValueError
- Azure endpoint falls back to Entra (get_azure_openai_auth)
- Sync callable wrapped in async, async callable passed through

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

…erScorer

Add inspect.isawaitable check on the return value of callable api_key
providers to catch cases like lambda: async_fn() that bypass
asyncio.iscoroutinefunction. Closes the coroutine to prevent warnings
and raises ValueError with a clear message.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Re-run to pick up error data type fix, removing the
'Multimodal data type error is not yet supported' traceback.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

get_info_async() internally re-runs initialize_async() in a sandbox,
which creates real Azure targets. The auth mocks must still be active
when get_info_async is called, otherwise the test makes real network
calls and fails without az login.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>