@hasna/evals 0.1.27 → 0.1.29

package/dist/cli/index.js

@@ -1019,7 +1019,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
         this._exitCallback = (err) => {
           if (err.code !== "commander.executeSubCommandAsync") {
             throw err;
-          }
+          } else {}
         };
       }
       return this;
@@ -5275,9 +5275,6 @@ var require_data = __commonJS((exports, module) => {
 var require_utils = __commonJS((exports, module) => {
   var isUUID = RegExp.prototype.test.bind(/^[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}$/iu);
   var isIPv4 = RegExp.prototype.test.bind(/^(?:(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)$/u);
-  var isHexPair = RegExp.prototype.test.bind(/^[\da-f]{2}$/iu);
-  var isUnreserved = RegExp.prototype.test.bind(/^[\da-z\-._~]$/iu);
-  var isPathCharacter = RegExp.prototype.test.bind(/^[\da-z\-._~!$&'()*+,;=:@/]$/iu);
   function stringArrayToHexStripped(input) {
     let acc = "";
     let code = 0;
@@ -5471,77 +5468,27 @@ var require_utils = __commonJS((exports, module) => {
     }
     return output.join("");
   }
-  var HOST_DELIMS = { "@": "%40", "/": "%2F", "?": "%3F", "#": "%23", ":": "%3A" };
-  var HOST_DELIM_RE = /[@/?#:]/g;
-  var HOST_DELIM_NO_COLON_RE = /[@/?#]/g;
-  function reescapeHostDelimiters(host, isIP) {
-    const re = isIP ? HOST_DELIM_NO_COLON_RE : HOST_DELIM_RE;
-    re.lastIndex = 0;
-    return host.replace(re, (ch) => HOST_DELIMS[ch]);
-  }
-  function normalizePercentEncoding(input, decodeUnreserved = false) {
-    if (input.indexOf("%") === -1) {
-      return input;
+  function normalizeComponentEncoding(component, esc) {
+    const func = esc !== true ? escape : unescape;
+    if (component.scheme !== undefined) {
+      component.scheme = func(component.scheme);
     }
-    let output = "";
-    for (let i = 0;i < input.length; i++) {
-      if (input[i] === "%" && i + 2 < input.length) {
-        const hex = input.slice(i + 1, i + 3);
-        if (isHexPair(hex)) {
-          const normalizedHex = hex.toUpperCase();
-          const decoded = String.fromCharCode(parseInt(normalizedHex, 16));
-          if (decodeUnreserved && isUnreserved(decoded)) {
-            output += decoded;
-          } else {
-            output += "%" + normalizedHex;
-          }
-          i += 2;
-          continue;
-        }
-      }
-      output += input[i];
+    if (component.userinfo !== undefined) {
+      component.userinfo = func(component.userinfo);
     }
-    return output;
-  }
-  function normalizePathEncoding(input) {
-    let output = "";
-    for (let i = 0;i < input.length; i++) {
-      if (input[i] === "%" && i + 2 < input.length) {
-        const hex = input.slice(i + 1, i + 3);
-        if (isHexPair(hex)) {
-          const normalizedHex = hex.toUpperCase();
-          const decoded = String.fromCharCode(parseInt(normalizedHex, 16));
-          if (decoded !== "." && isUnreserved(decoded)) {
-            output += decoded;
-          } else {
-            output += "%" + normalizedHex;
-          }
-          i += 2;
-          continue;
-        }
-      }
-      if (isPathCharacter(input[i])) {
-        output += input[i];
-      } else {
-        output += escape(input[i]);
-      }
+    if (component.host !== undefined) {
+      component.host = func(component.host);
     }
-    return output;
-  }
-  function escapePreservingEscapes(input) {
-    let output = "";
-    for (let i = 0;i < input.length; i++) {
-      if (input[i] === "%" && i + 2 < input.length) {
-        const hex = input.slice(i + 1, i + 3);
-        if (isHexPair(hex)) {
-          output += "%" + hex.toUpperCase();
-          i += 2;
-          continue;
-        }
-      }
-      output += escape(input[i]);
+    if (component.path !== undefined) {
+      component.path = func(component.path);
     }
-    return output;
+    if (component.query !== undefined) {
+      component.query = func(component.query);
+    }
+    if (component.fragment !== undefined) {
+      component.fragment = func(component.fragment);
+    }
+    return component;
   }
   function recomposeAuthority(component) {
     const uriTokens = [];
@@ -5556,7 +5503,7 @@ var require_utils = __commonJS((exports, module) => {
         if (ipV6res.isIPV6 === true) {
           host = `[${ipV6res.escapedHost}]`;
         } else {
-          host = reescapeHostDelimiters(host, false);
+          host = component.host;
         }
       }
       uriTokens.push(host);
@@ -5570,10 +5517,7 @@ var require_utils = __commonJS((exports, module) => {
   module.exports = {
     nonSimpleDomain,
     recomposeAuthority,
-    reescapeHostDelimiters,
-    normalizePercentEncoding,
-    normalizePathEncoding,
-    escapePreservingEscapes,
+    normalizeComponentEncoding,
     removeDotSegments,
     isIPv4,
     isUUID,
@@ -5758,11 +5702,11 @@ var require_schemes = __commonJS((exports, module) => {
 
 // node_modules/fast-uri/index.js
 var require_fast_uri = __commonJS((exports, module) => {
-  var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, escapePreservingEscapes, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
+  var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizeComponentEncoding, isIPv4, nonSimpleDomain } = require_utils();
   var { SCHEMES, getSchemeHandler } = require_schemes();
   function normalize(uri, options) {
     if (typeof uri === "string") {
-      uri = normalizeString(uri, options);
+      uri = serialize(parse(uri, options), options);
     } else if (typeof uri === "object") {
       uri = parse(serialize(uri, options), options);
     }
@@ -5828,9 +5772,19 @@ var require_fast_uri = __commonJS((exports, module) => {
     return target;
   }
   function equal(uriA, uriB, options) {
-    const normalizedA = normalizeComparableURI(uriA, options);
-    const normalizedB = normalizeComparableURI(uriB, options);
-    return normalizedA !== undefined && normalizedB !== undefined && normalizedA.toLowerCase() === normalizedB.toLowerCase();
+    if (typeof uriA === "string") {
+      uriA = unescape(uriA);
+      uriA = serialize(normalizeComponentEncoding(parse(uriA, options), true), { ...options, skipEscape: true });
+    } else if (typeof uriA === "object") {
+      uriA = serialize(normalizeComponentEncoding(uriA, true), { ...options, skipEscape: true });
+    }
+    if (typeof uriB === "string") {
+      uriB = unescape(uriB);
+      uriB = serialize(normalizeComponentEncoding(parse(uriB, options), true), { ...options, skipEscape: true });
+    } else if (typeof uriB === "object") {
+      uriB = serialize(normalizeComponentEncoding(uriB, true), { ...options, skipEscape: true });
+    }
+    return uriA.toLowerCase() === uriB.toLowerCase();
   }
   function serialize(cmpts, opts) {
     const component = {
@@ -5856,12 +5810,12 @@ var require_fast_uri = __commonJS((exports, module) => {
       schemeHandler.serialize(component, options);
     if (component.path !== undefined) {
       if (!options.skipEscape) {
-        component.path = escapePreservingEscapes(component.path);
+        component.path = escape(component.path);
         if (component.scheme !== undefined) {
           component.path = component.path.split("%3A").join(":");
         }
       } else {
-        component.path = normalizePercentEncoding(component.path);
+        component.path = unescape(component.path);
       }
     }
     if (options.reference !== "suffix" && component.scheme) {
@@ -5896,16 +5850,7 @@ var require_fast_uri = __commonJS((exports, module) => {
     return uriTokens.join("");
   }
   var URI_PARSE = /^(?:([^#/:?]+):)?(?:\/\/((?:([^#/?@]*)@)?(\[[^#/?\]]+\]|[^#/:?]*)(?::(\d*))?))?([^#?]*)(?:\?([^#]*))?(?:#((?:.|[\n\r])*))?/u;
-  function getParseError(parsed, matches) {
-    if (matches[2] !== undefined && parsed.path && parsed.path[0] !== "/") {
-      return 'URI path must start with "/" when authority is present.';
-    }
-    if (typeof parsed.port === "number" && (parsed.port < 0 || parsed.port > 65535)) {
-      return "URI port is malformed.";
-    }
-    return;
-  }
-  function parseWithStatus(uri, opts) {
+  function parse(uri, opts) {
     const options = Object.assign({}, opts);
     const parsed = {
       scheme: undefined,
@@ -5916,7 +5861,6 @@ var require_fast_uri = __commonJS((exports, module) => {
       query: undefined,
       fragment: undefined
     };
-    let malformedAuthorityOrPort = false;
     let isIP = false;
     if (options.reference === "suffix") {
       if (options.scheme) {
@@ -5937,11 +5881,6 @@ var require_fast_uri = __commonJS((exports, module) => {
       if (isNaN(parsed.port)) {
         parsed.port = matches[5];
       }
-      const parseError = getParseError(parsed, matches);
-      if (parseError !== undefined) {
-        parsed.error = parsed.error || parseError;
-        malformedAuthorityOrPort = true;
-      }
       if (parsed.host) {
         const ipv4result = isIPv4(parsed.host);
         if (ipv4result === false) {
@@ -5980,18 +5919,14 @@ var require_fast_uri = __commonJS((exports, module) => {
             parsed.scheme = unescape(parsed.scheme);
           }
           if (parsed.host !== undefined) {
-            parsed.host = reescapeHostDelimiters(unescape(parsed.host), isIP);
+            parsed.host = unescape(parsed.host);
           }
         }
         if (parsed.path) {
-          parsed.path = normalizePathEncoding(parsed.path);
+          parsed.path = escape(unescape(parsed.path));
         }
         if (parsed.fragment) {
-          try {
-            parsed.fragment = encodeURI(decodeURIComponent(parsed.fragment));
-          } catch {
-            parsed.error = parsed.error || "URI malformed";
-          }
+          parsed.fragment = encodeURI(decodeURIComponent(parsed.fragment));
         }
       }
       if (schemeHandler && schemeHandler.parse) {
@@ -6000,29 +5935,7 @@ var require_fast_uri = __commonJS((exports, module) => {
     } else {
       parsed.error = parsed.error || "URI can not be parsed.";
     }
-    return { parsed, malformedAuthorityOrPort };
-  }
-  function parse(uri, opts) {
-    return parseWithStatus(uri, opts).parsed;
-  }
-  function normalizeString(uri, opts) {
-    return normalizeStringWithStatus(uri, opts).normalized;
-  }
-  function normalizeStringWithStatus(uri, opts) {
-    const { parsed, malformedAuthorityOrPort } = parseWithStatus(uri, opts);
-    return {
-      normalized: malformedAuthorityOrPort ? uri : serialize(parsed, opts),
-      malformedAuthorityOrPort
-    };
-  }
-  function normalizeComparableURI(uri, opts) {
-    if (typeof uri === "string") {
-      const { normalized, malformedAuthorityOrPort } = normalizeStringWithStatus(uri, opts);
-      return malformedAuthorityOrPort ? undefined : normalized;
-    }
-    if (typeof uri === "object") {
-      return serialize(uri, opts);
-    }
+    return parsed;
   }
   var fastUri = {
     SCHEMES,
@@ -6157,7 +6070,7 @@ var require_core = __commonJS((exports) => {
     constructor(opts = {}) {
       this.schemas = {};
       this.refs = {};
-      this.formats = Object.create(null);
+      this.formats = {};
       this._compilations = new Set;
       this._loading = {};
       this._cache = new Map;
@@ -8543,6 +8456,20 @@ var require_ajv = __commonJS((exports, module) => {
   } });
 });
 
+// src/core/redaction.ts
+function redactAdapterConfig(config) {
+  if (!config || !("apiKey" in config))
+    return config;
+  const { apiKey: _apiKey, ...safeConfig } = config;
+  return safeConfig;
+}
+function redactRunSecrets(run) {
+  return {
+    ...run,
+    adapterConfig: redactAdapterConfig(run.adapterConfig)
+  };
+}
+
 // src/db/store.ts
 var exports_store = {};
 __export(exports_store, {
@@ -8558,11 +8485,33 @@ __export(exports_store, {
   clearBaseline: () => clearBaseline
 });
 import { Database } from "bun:sqlite";
-import { mkdirSync } from "fs";
+import { copyFileSync, existsSync as existsSync3, mkdirSync, readdirSync, statSync } from "fs";
 import { homedir as homedir3 } from "os";
 import { join as join3 } from "path";
+function homeDir() {
+  return process.env["HOME"] || process.env["USERPROFILE"] || homedir3();
+}
+function defaultDbPath() {
+  const home = homeDir();
+  const newDir = join3(home, ".hasna", "evals");
+  const oldDir = join3(home, ".evals");
+  if (existsSync3(oldDir) && !existsSync3(newDir)) {
+    mkdirSync(newDir, { recursive: true });
+    try {
+      for (const file of readdirSync(oldDir)) {
+        const oldPath = join3(oldDir, file);
+        const newPath = join3(newDir, file);
+        try {
+          if (statSync(oldPath).isFile())
+            copyFileSync(oldPath, newPath);
+        } catch {}
+      }
+    } catch {}
+  }
+  return join3(newDir, "evals.db");
+}
 function getDbPath() {
-  return process.env["EVALS_DB_PATH"] ?? join3(homedir3(), ".hasna", "evals", "evals.db");
+  return process.env["EVALS_DB_PATH"] ?? defaultDbPath();
 }
 function getDatabase() {
   if (_db)
@@ -8604,10 +8553,11 @@ function migrate(db) {
 }
 function saveRun(run) {
   const db = getDatabase();
+  const safeRun = redactRunSecrets(run);
   db.prepare(`
     INSERT OR REPLACE INTO runs (id, created_at, dataset, stats, adapter, data)
     VALUES (?, ?, ?, ?, ?, ?)
-  `).run(run.id, run.createdAt, run.dataset, JSON.stringify(run.stats), run.adapterConfig ? JSON.stringify(run.adapterConfig) : null, JSON.stringify(run));
+  `).run(safeRun.id, safeRun.createdAt, safeRun.dataset, JSON.stringify(safeRun.stats), safeRun.adapterConfig ? JSON.stringify(safeRun.adapterConfig) : null, JSON.stringify(safeRun));
 }
 function getRun(id) {
   const db = getDatabase();
@@ -8717,24 +8667,24 @@ __export(exports_dist, {
 import { createRequire } from "module";
 import { Database as Database2 } from "bun:sqlite";
 import {
-  existsSync as existsSync5,
+  existsSync as existsSync6,
   mkdirSync as mkdirSync2,
-  readdirSync,
-  copyFileSync
+  readdirSync as readdirSync2,
+  copyFileSync as copyFileSync2
 } from "fs";
 import { homedir as homedir6 } from "os";
 import { join as join6, relative } from "path";
 import { existsSync as existsSync22, mkdirSync as mkdirSync22, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
 import { homedir as homedir22 } from "os";
 import { join as join22 } from "path";
-import { readdirSync as readdirSync3, existsSync as existsSync6 } from "fs";
+import { readdirSync as readdirSync3, existsSync as existsSync62 } from "fs";
 import { join as join62 } from "path";
 import { homedir as homedir52 } from "os";
 import { hostname } from "os";
 import { existsSync as existsSync32, readFileSync as readFileSync22 } from "fs";
 import { homedir as homedir32 } from "os";
 import { join as join32 } from "path";
-import { existsSync as existsSync42, readdirSync as readdirSync2 } from "fs";
+import { existsSync as existsSync42, readdirSync as readdirSync22 } from "fs";
 import { join as join42 } from "path";
 import { join as join52, dirname } from "path";
 import { existsSync as existsSync52, writeFileSync as writeFileSync22, unlinkSync, mkdirSync as mkdirSync3 } from "fs";
@@ -9631,9 +9581,9 @@ function getDbPath2(serviceName) {
 function migrateDotfile(serviceName) {
   const legacyDir = join6(homedir6(), `.${serviceName}`);
   const newDir = join6(HASNA_DIR, serviceName);
-  if (!existsSync5(legacyDir))
+  if (!existsSync6(legacyDir))
     return [];
-  if (existsSync5(newDir))
+  if (existsSync6(newDir))
     return [];
   mkdirSync2(newDir, { recursive: true });
   const migrated = [];
@@ -9641,7 +9591,7 @@ function migrateDotfile(serviceName) {
   return migrated;
 }
 function copyDirRecursive(src, dest, root, migrated) {
-  const entries = readdirSync(src, { withFileTypes: true });
+  const entries = readdirSync2(src, { withFileTypes: true });
   for (const entry of entries) {
     const srcPath = join6(src, entry.name);
     const destPath = join6(dest, entry.name);
@@ -9649,13 +9599,13 @@ function copyDirRecursive(src, dest, root, migrated) {
       mkdirSync2(destPath, { recursive: true });
       copyDirRecursive(srcPath, destPath, root, migrated);
     } else {
-      copyFileSync(srcPath, destPath);
+      copyFileSync2(srcPath, destPath);
       migrated.push(relative(root, srcPath));
     }
   }
 }
 function hasLegacyDotfile(serviceName) {
-  return existsSync5(join6(homedir6(), `.${serviceName}`));
+  return existsSync6(join6(homedir6(), `.${serviceName}`));
 }
 function getHasnaDir() {
   mkdirSync2(HASNA_DIR, { recursive: true });
@@ -9711,7 +9661,7 @@ function isSyncExcludedTable(table) {
 }
 function discoverServices() {
   const dataDir = join62(homedir52(), ".hasna");
-  if (!existsSync6(dataDir))
+  if (!existsSync62(dataDir))
     return [];
   try {
     const entries = readdirSync3(dataDir, { withFileTypes: true });
@@ -9733,7 +9683,7 @@ function discoverSyncableServices2() {
 }
 function getServiceDbPath(service) {
   const dataDir = join62(homedir52(), ".hasna", service);
-  if (!existsSync6(dataDir))
+  if (!existsSync62(dataDir))
     return null;
   const candidates = [
     join62(dataDir, `${service}.db`),
@@ -9749,7 +9699,7 @@ function getServiceDbPath(service) {
     }
   } catch {}
   for (const p of candidates) {
-    if (existsSync6(p))
+    if (existsSync62(p))
       return p;
   }
   return null;
@@ -10777,7 +10727,7 @@ function discoverSyncableServices() {
   const hasnaDir = getHasnaDir();
   const services = [];
   try {
-    const entries = readdirSync2(hasnaDir, { withFileTypes: true });
+    const entries = readdirSync22(hasnaDir, { withFileTypes: true });
     for (const entry of entries) {
       if (!entry.isDirectory())
         continue;
@@ -19769,7 +19719,6 @@ var HASNA_EVENTS_HOME_ENV = "HASNA_EVENTS_HOME";
 function getEventsDataDir(override) {
   return override || process.env[HASNA_EVENTS_DIR_ENV] || process.env[HASNA_EVENTS_HOME_ENV] || join(homedir(), ".hasna", "events");
 }
-
 class JsonEventsStore {
   dataDir;
   channelsPath;
@@ -24948,33 +24897,6 @@ class InvalidWebhookSignatureError extends Error {
   }
 }
 
-class OAuthError extends APIError2 {
-  constructor(status, error2, headers) {
-    let finalMessage = "OAuth2 authentication error";
-    let error_code = undefined;
-    if (error2 && typeof error2 === "object") {
-      const errorData = error2;
-      error_code = errorData["error"];
-      const description = errorData["error_description"];
-      if (description && typeof description === "string") {
-        finalMessage = description;
-      } else if (error_code) {
-        finalMessage = error_code;
-      }
-    }
-    super(status, error2, finalMessage, headers);
-    this.error_code = error_code;
-  }
-}
-
-class SubjectTokenProviderError extends OpenAIError {
-  constructor(message, provider, cause) {
-    super(message);
-    this.provider = provider;
-    this.cause = cause;
-  }
-}
-
 // node_modules/openai/internal/utils/values.mjs
 var startsWithSchemeRegexp2 = /^[a-z][a-z0-9+.-]*:/i;
 var isAbsoluteURL2 = (url) => {
@@ -25022,7 +24944,7 @@ var safeJSON2 = (text) => {
 var sleep2 = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 
 // node_modules/openai/version.mjs
-var VERSION2 = "6.42.0";
+var VERSION2 = "6.33.0";
 
 // node_modules/openai/internal/detect-platform.mjs
 var isRunningInBrowser2 = () => {
@@ -25713,7 +25635,7 @@ var formatRequestDetails2 = (details) => {
   if (details.headers) {
     details.headers = Object.fromEntries((details.headers instanceof Headers ? [...details.headers] : Object.entries(details.headers)).map(([name, value]) => [
       name,
-      name.toLowerCase() === "authorization" || name.toLowerCase() === "api-key" || name.toLowerCase() === "x-api-key" || name.toLowerCase() === "cookie" || name.toLowerCase() === "set-cookie" ? "***" : value
+      name.toLowerCase() === "authorization" || name.toLowerCase() === "cookie" || name.toLowerCase() === "set-cookie" ? "***" : value
     ]));
   }
   if ("retryOfRequestLogID" in details) {
@@ -26194,125 +26116,6 @@ class ConversationCursorPage extends AbstractPage2 {
   }
 }
 
-class NextCursorPage extends AbstractPage2 {
-  constructor(client, response, body, options) {
-    super(client, response, body, options);
-    this.data = body.data || [];
-    this.has_more = body.has_more || false;
-    this.next = body.next || null;
-  }
-  getPaginatedItems() {
-    return this.data ?? [];
-  }
-  hasNextPage() {
-    if (this.has_more === false) {
-      return false;
-    }
-    return super.hasNextPage();
-  }
-  nextPageRequestOptions() {
-    const cursor = this.next;
-    if (!cursor) {
-      return null;
-    }
-    return {
-      ...this.options,
-      query: {
-        ...maybeObj2(this.options.query),
-        after: cursor
-      }
-    };
-  }
-}
-
-// node_modules/openai/auth/workload-identity-auth.mjs
-var SUBJECT_TOKEN_TYPES = {
-  jwt: "urn:ietf:params:oauth:token-type:jwt",
-  id: "urn:ietf:params:oauth:token-type:id_token"
-};
-var TOKEN_EXCHANGE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:token-exchange";
-
-class WorkloadIdentityAuth {
-  constructor(config, fetch2) {
-    this.cachedToken = null;
-    this.refreshPromise = null;
-    this.tokenExchangeUrl = "https://auth.openai.com/oauth/token";
-    this.config = config;
-    this.fetch = fetch2 ?? getDefaultFetch2();
-  }
-  async getToken() {
-    if (!this.cachedToken || this.isTokenExpired(this.cachedToken)) {
-      if (this.refreshPromise) {
-        return await this.refreshPromise;
-      }
-      this.refreshPromise = this.refreshToken();
-      try {
-        const token = await this.refreshPromise;
-        return token;
-      } finally {
-        this.refreshPromise = null;
-      }
-    }
-    if (this.needsRefresh(this.cachedToken) && !this.refreshPromise) {
-      this.refreshPromise = this.refreshToken().finally(() => {
-        this.refreshPromise = null;
-      });
-    }
-    return this.cachedToken.token;
-  }
-  async refreshToken() {
-    const subjectToken = await this.config.provider.getToken();
-    const body = {
-      grant_type: TOKEN_EXCHANGE_GRANT_TYPE,
-      subject_token: subjectToken,
-      subject_token_type: SUBJECT_TOKEN_TYPES[this.config.provider.tokenType],
-      identity_provider_id: this.config.identityProviderId,
-      service_account_id: this.config.serviceAccountId
-    };
-    if (this.config.clientId) {
-      body["client_id"] = this.config.clientId;
-    }
-    const response = await this.fetch(this.tokenExchangeUrl, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json"
-      },
-      body: JSON.stringify(body)
-    });
-    if (!response.ok) {
-      const errorText = await response.text();
-      let body2 = undefined;
-      try {
-        body2 = JSON.parse(errorText);
-      } catch {}
-      if (response.status === 400 || response.status === 401 || response.status === 403) {
-        throw new OAuthError(response.status, body2, response.headers);
-      }
-      throw APIError2.generate(response.status, body2, `Token exchange failed with status ${response.status}`, response.headers);
-    }
-    const tokenResponse = await response.json();
-    const expiresIn = tokenResponse.expires_in || 3600;
-    const expiresAt = Date.now() + expiresIn * 1000;
-    this.cachedToken = {
-      token: tokenResponse.access_token,
-      expiresAt
-    };
-    return tokenResponse.access_token;
-  }
-  isTokenExpired(cachedToken) {
-    return Date.now() >= cachedToken.expiresAt;
-  }
-  needsRefresh(cachedToken) {
-    const bufferSeconds = this.config.refreshBufferSeconds ?? 1200;
-    const bufferMs = bufferSeconds * 1000;
-    return Date.now() >= cachedToken.expiresAt - bufferMs;
-  }
-  invalidateToken() {
-    this.cachedToken = null;
-    this.refreshPromise = null;
-  }
-}
-
 // node_modules/openai/internal/uploads.mjs
 var checkFileSupport2 = () => {
   if (typeof File === "undefined") {
@@ -26519,7 +26322,7 @@ var path2 = /* @__PURE__ */ createPathTagFunction2(encodeURIPath2);
 // node_modules/openai/resources/chat/completions/messages.mjs
 class Messages3 extends APIResource2 {
   list(completionID, query = {}, options) {
-    return this._client.getAPIList(path2`/chat/completions/${completionID}/messages`, CursorPage, { query, ...options, __security: { bearerAuth: true } });
+    return this._client.getAPIList(path2`/chat/completions/${completionID}/messages`, CursorPage, { query, ...options });
   }
 }
 // node_modules/openai/lib/parser.mjs
@@ -27780,38 +27583,19 @@ class Completions2 extends APIResource2 {
     this.messages = new Messages3(this._client);
   }
   create(body, options) {
-    return this._client.post("/chat/completions", {
-      body,
-      ...options,
-      stream: body.stream ?? false,
-      __security: { bearerAuth: true }
-    });
+    return this._client.post("/chat/completions", { body, ...options, stream: body.stream ?? false });
   }
   retrieve(completionID, options) {
-    return this._client.get(path2`/chat/completions/${completionID}`, {
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.get(path2`/chat/completions/${completionID}`, options);
   }
   update(completionID, body, options) {
-    return this._client.post(path2`/chat/completions/${completionID}`, {
-      body,
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.post(path2`/chat/completions/${completionID}`, { body, ...options });
   }
   list(query = {}, options) {
-    return this._client.getAPIList("/chat/completions", CursorPage, {
-      query,
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.getAPIList("/chat/completions", CursorPage, { query, ...options });
   }
   delete(completionID, options) {
-    return this._client.delete(path2`/chat/completions/${completionID}`, {
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.delete(path2`/chat/completions/${completionID}`, options);
   }
   parse(body, options) {
     validateInputTools(body.tools);
@@ -27843,978 +27627,97 @@ class Chat extends APIResource2 {
   }
 }
 Chat.Completions = Completions2;
-// node_modules/openai/resources/admin/organization/admin-api-keys.mjs
-class AdminAPIKeys extends APIResource2 {
-  create(body, options) {
-    return this._client.post("/organization/admin_api_keys", {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  retrieve(keyID, options) {
-    return this._client.get(path2`/organization/admin_api_keys/${keyID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
+// node_modules/openai/internal/headers.mjs
+var brand_privateNullableHeaders2 = /* @__PURE__ */ Symbol("brand.privateNullableHeaders");
+function* iterateHeaders2(headers) {
+  if (!headers)
+    return;
+  if (brand_privateNullableHeaders2 in headers) {
+    const { values, nulls } = headers;
+    yield* values.entries();
+    for (const name of nulls) {
+      yield [name, null];
+    }
+    return;
   }
-  list(query = {}, options) {
-    return this._client.getAPIList("/organization/admin_api_keys", CursorPage, {
-      query,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
+  let shouldClear = false;
+  let iter;
+  if (headers instanceof Headers) {
+    iter = headers.entries();
+  } else if (isReadonlyArray2(headers)) {
+    iter = headers;
+  } else {
+    shouldClear = true;
+    iter = Object.entries(headers ?? {});
   }
-  delete(keyID, options) {
-    return this._client.delete(path2`/organization/admin_api_keys/${keyID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
+  for (let row of iter) {
+    const name = row[0];
+    if (typeof name !== "string")
+      throw new TypeError("expected header name to be a string");
+    const values = isReadonlyArray2(row[1]) ? row[1] : [row[1]];
+    let didClear = false;
+    for (const value of values) {
+      if (value === undefined)
+        continue;
+      if (shouldClear && !didClear) {
+        didClear = true;
+        yield [name, null];
+      }
+      yield [name, value];
+    }
   }
 }
-
-// node_modules/openai/resources/admin/organization/audit-logs.mjs
-class AuditLogs extends APIResource2 {
-  list(query = {}, options) {
-    return this._client.getAPIList("/organization/audit_logs", ConversationCursorPage, {
-      query,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
+var buildHeaders2 = (newHeaders) => {
+  const targetHeaders = new Headers;
+  const nullHeaders = new Set;
+  for (const headers of newHeaders) {
+    const seenHeaders = new Set;
+    for (const [name, value] of iterateHeaders2(headers)) {
+      const lowerName = name.toLowerCase();
+      if (!seenHeaders.has(lowerName)) {
+        targetHeaders.delete(name);
+        seenHeaders.add(lowerName);
+      }
+      if (value === null) {
+        targetHeaders.delete(name);
+        nullHeaders.add(lowerName);
+      } else {
+        targetHeaders.append(name, value);
+        nullHeaders.delete(lowerName);
+      }
+    }
   }
-}
+  return { [brand_privateNullableHeaders2]: true, values: targetHeaders, nulls: nullHeaders };
+};
 
-// node_modules/openai/resources/admin/organization/certificates.mjs
-class Certificates extends APIResource2 {
+// node_modules/openai/resources/audio/speech.mjs
+class Speech extends APIResource2 {
   create(body, options) {
-    return this._client.post("/organization/certificates", {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  retrieve(certificateID, query = {}, options) {
-    return this._client.get(path2`/organization/certificates/${certificateID}`, {
-      query,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  update(certificateID, body, options) {
-    return this._client.post(path2`/organization/certificates/${certificateID}`, {
+    return this._client.post("/audio/speech", {
       body,
       ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  list(query = {}, options) {
-    return this._client.getAPIList("/organization/certificates", ConversationCursorPage, { query, ...options, __security: { adminAPIKeyAuth: true } });
-  }
-  delete(certificateID, options) {
-    return this._client.delete(path2`/organization/certificates/${certificateID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
+      headers: buildHeaders2([{ Accept: "application/octet-stream" }, options?.headers]),
+      __binaryResponse: true
     });
   }
-  activate(body, options) {
-    return this._client.getAPIList("/organization/certificates/activate", Page2, {
+}
+
+// node_modules/openai/resources/audio/transcriptions.mjs
+class Transcriptions extends APIResource2 {
+  create(body, options) {
+    return this._client.post("/audio/transcriptions", multipartFormRequestOptions2({
       body,
-      method: "post",
       ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
+      stream: body.stream ?? false,
+      __metadata: { model: body.model }
+    }, this._client));
   }
-  deactivate(body, options) {
-    return this._client.getAPIList("/organization/certificates/deactivate", Page2, { body, method: "post", ...options, __security: { adminAPIKeyAuth: true } });
-  }
-}
-
-// node_modules/openai/resources/admin/organization/data-retention.mjs
-class DataRetention extends APIResource2 {
-  retrieve(options) {
-    return this._client.get("/organization/data_retention", {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  update(body, options) {
-    return this._client.post("/organization/data_retention", {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-
-// node_modules/openai/resources/admin/organization/invites.mjs
-class Invites extends APIResource2 {
-  create(body, options) {
-    return this._client.post("/organization/invites", {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  retrieve(inviteID, options) {
-    return this._client.get(path2`/organization/invites/${inviteID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  list(query = {}, options) {
-    return this._client.getAPIList("/organization/invites", ConversationCursorPage, {
-      query,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  delete(inviteID, options) {
-    return this._client.delete(path2`/organization/invites/${inviteID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-
-// node_modules/openai/resources/admin/organization/roles.mjs
-class Roles extends APIResource2 {
-  create(body, options) {
-    return this._client.post("/organization/roles", {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  retrieve(roleID, options) {
-    return this._client.get(path2`/organization/roles/${roleID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  update(roleID, body, options) {
-    return this._client.post(path2`/organization/roles/${roleID}`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  list(query = {}, options) {
-    return this._client.getAPIList("/organization/roles", NextCursorPage, {
-      query,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  delete(roleID, options) {
-    return this._client.delete(path2`/organization/roles/${roleID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-
-// node_modules/openai/resources/admin/organization/spend-alerts.mjs
-class SpendAlerts extends APIResource2 {
-  create(body, options) {
-    return this._client.post("/organization/spend_alerts", {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  update(alertID, body, options) {
-    return this._client.post(path2`/organization/spend_alerts/${alertID}`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  list(query = {}, options) {
-    return this._client.getAPIList("/organization/spend_alerts", ConversationCursorPage, { query, ...options, __security: { adminAPIKeyAuth: true } });
-  }
-  delete(alertID, options) {
-    return this._client.delete(path2`/organization/spend_alerts/${alertID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-
-// node_modules/openai/resources/admin/organization/usage.mjs
-class Usage extends APIResource2 {
-  audioSpeeches(query, options) {
-    return this._client.get("/organization/usage/audio_speeches", {
-      query,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  audioTranscriptions(query, options) {
-    return this._client.get("/organization/usage/audio_transcriptions", {
-      query,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  codeInterpreterSessions(query, options) {
-    return this._client.get("/organization/usage/code_interpreter_sessions", {
-      query,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  completions(query, options) {
-    return this._client.get("/organization/usage/completions", {
-      query,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  costs(query, options) {
-    return this._client.get("/organization/costs", {
-      query,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  embeddings(query, options) {
-    return this._client.get("/organization/usage/embeddings", {
-      query,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  fileSearchCalls(query, options) {
-    return this._client.get("/organization/usage/file_search_calls", {
-      query,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  images(query, options) {
-    return this._client.get("/organization/usage/images", {
-      query,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  moderations(query, options) {
-    return this._client.get("/organization/usage/moderations", {
-      query,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  vectorStores(query, options) {
-    return this._client.get("/organization/usage/vector_stores", {
-      query,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  webSearchCalls(query, options) {
-    return this._client.get("/organization/usage/web_search_calls", {
-      query,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-
-// node_modules/openai/resources/admin/organization/groups/roles.mjs
-class Roles2 extends APIResource2 {
-  create(groupID, body, options) {
-    return this._client.post(path2`/organization/groups/${groupID}/roles`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  retrieve(roleID, params, options) {
-    const { group_id } = params;
-    return this._client.get(path2`/organization/groups/${group_id}/roles/${roleID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  list(groupID, query = {}, options) {
-    return this._client.getAPIList(path2`/organization/groups/${groupID}/roles`, NextCursorPage, { query, ...options, __security: { adminAPIKeyAuth: true } });
-  }
-  delete(roleID, params, options) {
-    const { group_id } = params;
-    return this._client.delete(path2`/organization/groups/${group_id}/roles/${roleID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-
-// node_modules/openai/resources/admin/organization/groups/users.mjs
-class Users extends APIResource2 {
-  create(groupID, body, options) {
-    return this._client.post(path2`/organization/groups/${groupID}/users`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  retrieve(userID, params, options) {
-    const { group_id } = params;
-    return this._client.get(path2`/organization/groups/${group_id}/users/${userID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  list(groupID, query = {}, options) {
-    return this._client.getAPIList(path2`/organization/groups/${groupID}/users`, NextCursorPage, { query, ...options, __security: { adminAPIKeyAuth: true } });
-  }
-  delete(userID, params, options) {
-    const { group_id } = params;
-    return this._client.delete(path2`/organization/groups/${group_id}/users/${userID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-
-// node_modules/openai/resources/admin/organization/groups/groups.mjs
-class Groups extends APIResource2 {
-  constructor() {
-    super(...arguments);
-    this.users = new Users(this._client);
-    this.roles = new Roles2(this._client);
-  }
-  create(body, options) {
-    return this._client.post("/organization/groups", {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  retrieve(groupID, options) {
-    return this._client.get(path2`/organization/groups/${groupID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  update(groupID, body, options) {
-    return this._client.post(path2`/organization/groups/${groupID}`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  list(query = {}, options) {
-    return this._client.getAPIList("/organization/groups", NextCursorPage, {
-      query,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  delete(groupID, options) {
-    return this._client.delete(path2`/organization/groups/${groupID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-Groups.Users = Users;
-Groups.Roles = Roles2;
-
-// node_modules/openai/resources/admin/organization/projects/api-keys.mjs
-class APIKeys extends APIResource2 {
-  retrieve(apiKeyID, params, options) {
-    const { project_id } = params;
-    return this._client.get(path2`/organization/projects/${project_id}/api_keys/${apiKeyID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  list(projectID, query = {}, options) {
-    return this._client.getAPIList(path2`/organization/projects/${projectID}/api_keys`, ConversationCursorPage, { query, ...options, __security: { adminAPIKeyAuth: true } });
-  }
-  delete(apiKeyID, params, options) {
-    const { project_id } = params;
-    return this._client.delete(path2`/organization/projects/${project_id}/api_keys/${apiKeyID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-
-// node_modules/openai/resources/admin/organization/projects/certificates.mjs
-class Certificates2 extends APIResource2 {
-  list(projectID, query = {}, options) {
-    return this._client.getAPIList(path2`/organization/projects/${projectID}/certificates`, ConversationCursorPage, { query, ...options, __security: { adminAPIKeyAuth: true } });
-  }
-  activate(projectID, body, options) {
-    return this._client.getAPIList(path2`/organization/projects/${projectID}/certificates/activate`, Page2, { body, method: "post", ...options, __security: { adminAPIKeyAuth: true } });
-  }
-  deactivate(projectID, body, options) {
-    return this._client.getAPIList(path2`/organization/projects/${projectID}/certificates/deactivate`, Page2, { body, method: "post", ...options, __security: { adminAPIKeyAuth: true } });
-  }
-}
-
-// node_modules/openai/resources/admin/organization/projects/data-retention.mjs
-class DataRetention2 extends APIResource2 {
-  retrieve(projectID, options) {
-    return this._client.get(path2`/organization/projects/${projectID}/data_retention`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  update(projectID, body, options) {
-    return this._client.post(path2`/organization/projects/${projectID}/data_retention`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-
-// node_modules/openai/resources/admin/organization/projects/hosted-tool-permissions.mjs
-class HostedToolPermissions extends APIResource2 {
-  retrieve(projectID, options) {
-    return this._client.get(path2`/organization/projects/${projectID}/hosted_tool_permissions`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  update(projectID, body, options) {
-    return this._client.post(path2`/organization/projects/${projectID}/hosted_tool_permissions`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-
-// node_modules/openai/resources/admin/organization/projects/model-permissions.mjs
-class ModelPermissions extends APIResource2 {
-  retrieve(projectID, options) {
-    return this._client.get(path2`/organization/projects/${projectID}/model_permissions`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  update(projectID, body, options) {
-    return this._client.post(path2`/organization/projects/${projectID}/model_permissions`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  delete(projectID, options) {
-    return this._client.delete(path2`/organization/projects/${projectID}/model_permissions`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-
-// node_modules/openai/resources/admin/organization/projects/rate-limits.mjs
-class RateLimits extends APIResource2 {
-  listRateLimits(projectID, query = {}, options) {
-    return this._client.getAPIList(path2`/organization/projects/${projectID}/rate_limits`, ConversationCursorPage, { query, ...options, __security: { adminAPIKeyAuth: true } });
-  }
-  updateRateLimit(rateLimitID, params, options) {
-    const { project_id, ...body } = params;
-    return this._client.post(path2`/organization/projects/${project_id}/rate_limits/${rateLimitID}`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-
-// node_modules/openai/resources/admin/organization/projects/roles.mjs
-class Roles3 extends APIResource2 {
-  create(projectID, body, options) {
-    return this._client.post(path2`/projects/${projectID}/roles`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  retrieve(roleID, params, options) {
-    const { project_id } = params;
-    return this._client.get(path2`/projects/${project_id}/roles/${roleID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  update(roleID, params, options) {
-    const { project_id, ...body } = params;
-    return this._client.post(path2`/projects/${project_id}/roles/${roleID}`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  list(projectID, query = {}, options) {
-    return this._client.getAPIList(path2`/projects/${projectID}/roles`, NextCursorPage, {
-      query,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  delete(roleID, params, options) {
-    const { project_id } = params;
-    return this._client.delete(path2`/projects/${project_id}/roles/${roleID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-
-// node_modules/openai/resources/admin/organization/projects/service-accounts.mjs
-class ServiceAccounts extends APIResource2 {
-  create(projectID, body, options) {
-    return this._client.post(path2`/organization/projects/${projectID}/service_accounts`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  retrieve(serviceAccountID, params, options) {
-    const { project_id } = params;
-    return this._client.get(path2`/organization/projects/${project_id}/service_accounts/${serviceAccountID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  update(serviceAccountID, params, options) {
-    const { project_id, ...body } = params;
-    return this._client.post(path2`/organization/projects/${project_id}/service_accounts/${serviceAccountID}`, { body, ...options, __security: { adminAPIKeyAuth: true } });
-  }
-  list(projectID, query = {}, options) {
-    return this._client.getAPIList(path2`/organization/projects/${projectID}/service_accounts`, ConversationCursorPage, { query, ...options, __security: { adminAPIKeyAuth: true } });
-  }
-  delete(serviceAccountID, params, options) {
-    const { project_id } = params;
-    return this._client.delete(path2`/organization/projects/${project_id}/service_accounts/${serviceAccountID}`, { ...options, __security: { adminAPIKeyAuth: true } });
-  }
-}
-
-// node_modules/openai/resources/admin/organization/projects/spend-alerts.mjs
-class SpendAlerts2 extends APIResource2 {
-  create(projectID, body, options) {
-    return this._client.post(path2`/organization/projects/${projectID}/spend_alerts`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  update(alertID, params, options) {
-    const { project_id, ...body } = params;
-    return this._client.post(path2`/organization/projects/${project_id}/spend_alerts/${alertID}`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  list(projectID, query = {}, options) {
-    return this._client.getAPIList(path2`/organization/projects/${projectID}/spend_alerts`, ConversationCursorPage, { query, ...options, __security: { adminAPIKeyAuth: true } });
-  }
-  delete(alertID, params, options) {
-    const { project_id } = params;
-    return this._client.delete(path2`/organization/projects/${project_id}/spend_alerts/${alertID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-
-// node_modules/openai/resources/admin/organization/projects/groups/roles.mjs
-class Roles4 extends APIResource2 {
-  create(groupID, params, options) {
-    const { project_id, ...body } = params;
-    return this._client.post(path2`/projects/${project_id}/groups/${groupID}/roles`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  retrieve(roleID, params, options) {
-    const { project_id, group_id } = params;
-    return this._client.get(path2`/projects/${project_id}/groups/${group_id}/roles/${roleID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  list(groupID, params, options) {
-    const { project_id, ...query } = params;
-    return this._client.getAPIList(path2`/projects/${project_id}/groups/${groupID}/roles`, NextCursorPage, { query, ...options, __security: { adminAPIKeyAuth: true } });
-  }
-  delete(roleID, params, options) {
-    const { project_id, group_id } = params;
-    return this._client.delete(path2`/projects/${project_id}/groups/${group_id}/roles/${roleID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-
-// node_modules/openai/resources/admin/organization/projects/groups/groups.mjs
-class Groups2 extends APIResource2 {
-  constructor() {
-    super(...arguments);
-    this.roles = new Roles4(this._client);
-  }
-  create(projectID, body, options) {
-    return this._client.post(path2`/organization/projects/${projectID}/groups`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  retrieve(groupID, params, options) {
-    const { project_id, ...query } = params;
-    return this._client.get(path2`/organization/projects/${project_id}/groups/${groupID}`, {
-      query,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  list(projectID, query = {}, options) {
-    return this._client.getAPIList(path2`/organization/projects/${projectID}/groups`, NextCursorPage, { query, ...options, __security: { adminAPIKeyAuth: true } });
-  }
-  delete(groupID, params, options) {
-    const { project_id } = params;
-    return this._client.delete(path2`/organization/projects/${project_id}/groups/${groupID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-Groups2.Roles = Roles4;
-
-// node_modules/openai/resources/admin/organization/projects/users/roles.mjs
-class Roles5 extends APIResource2 {
-  create(userID, params, options) {
-    const { project_id, ...body } = params;
-    return this._client.post(path2`/projects/${project_id}/users/${userID}/roles`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  retrieve(roleID, params, options) {
-    const { project_id, user_id } = params;
-    return this._client.get(path2`/projects/${project_id}/users/${user_id}/roles/${roleID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  list(userID, params, options) {
-    const { project_id, ...query } = params;
-    return this._client.getAPIList(path2`/projects/${project_id}/users/${userID}/roles`, NextCursorPage, { query, ...options, __security: { adminAPIKeyAuth: true } });
-  }
-  delete(roleID, params, options) {
-    const { project_id, user_id } = params;
-    return this._client.delete(path2`/projects/${project_id}/users/${user_id}/roles/${roleID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-
-// node_modules/openai/resources/admin/organization/projects/users/users.mjs
-class Users2 extends APIResource2 {
-  constructor() {
-    super(...arguments);
-    this.roles = new Roles5(this._client);
-  }
-  create(projectID, body, options) {
-    return this._client.post(path2`/organization/projects/${projectID}/users`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  retrieve(userID, params, options) {
-    const { project_id } = params;
-    return this._client.get(path2`/organization/projects/${project_id}/users/${userID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  update(userID, params, options) {
-    const { project_id, ...body } = params;
-    return this._client.post(path2`/organization/projects/${project_id}/users/${userID}`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  list(projectID, query = {}, options) {
-    return this._client.getAPIList(path2`/organization/projects/${projectID}/users`, ConversationCursorPage, { query, ...options, __security: { adminAPIKeyAuth: true } });
-  }
-  delete(userID, params, options) {
-    const { project_id } = params;
-    return this._client.delete(path2`/organization/projects/${project_id}/users/${userID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-Users2.Roles = Roles5;
-
-// node_modules/openai/resources/admin/organization/projects/projects.mjs
-class Projects extends APIResource2 {
-  constructor() {
-    super(...arguments);
-    this.users = new Users2(this._client);
-    this.serviceAccounts = new ServiceAccounts(this._client);
-    this.apiKeys = new APIKeys(this._client);
-    this.rateLimits = new RateLimits(this._client);
-    this.modelPermissions = new ModelPermissions(this._client);
-    this.hostedToolPermissions = new HostedToolPermissions(this._client);
-    this.groups = new Groups2(this._client);
-    this.roles = new Roles3(this._client);
-    this.dataRetention = new DataRetention2(this._client);
-    this.spendAlerts = new SpendAlerts2(this._client);
-    this.certificates = new Certificates2(this._client);
-  }
-  create(body, options) {
-    return this._client.post("/organization/projects", {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  retrieve(projectID, options) {
-    return this._client.get(path2`/organization/projects/${projectID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  update(projectID, body, options) {
-    return this._client.post(path2`/organization/projects/${projectID}`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  list(query = {}, options) {
-    return this._client.getAPIList("/organization/projects", ConversationCursorPage, {
-      query,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  archive(projectID, options) {
-    return this._client.post(path2`/organization/projects/${projectID}/archive`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-Projects.Users = Users2;
-Projects.ServiceAccounts = ServiceAccounts;
-Projects.APIKeys = APIKeys;
-Projects.RateLimits = RateLimits;
-Projects.ModelPermissions = ModelPermissions;
-Projects.HostedToolPermissions = HostedToolPermissions;
-Projects.Groups = Groups2;
-Projects.Roles = Roles3;
-Projects.DataRetention = DataRetention2;
-Projects.SpendAlerts = SpendAlerts2;
-Projects.Certificates = Certificates2;
-
-// node_modules/openai/resources/admin/organization/users/roles.mjs
-class Roles6 extends APIResource2 {
-  create(userID, body, options) {
-    return this._client.post(path2`/organization/users/${userID}/roles`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  retrieve(roleID, params, options) {
-    const { user_id } = params;
-    return this._client.get(path2`/organization/users/${user_id}/roles/${roleID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  list(userID, query = {}, options) {
-    return this._client.getAPIList(path2`/organization/users/${userID}/roles`, NextCursorPage, { query, ...options, __security: { adminAPIKeyAuth: true } });
-  }
-  delete(roleID, params, options) {
-    const { user_id } = params;
-    return this._client.delete(path2`/organization/users/${user_id}/roles/${roleID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-
-// node_modules/openai/resources/admin/organization/users/users.mjs
-class Users3 extends APIResource2 {
-  constructor() {
-    super(...arguments);
-    this.roles = new Roles6(this._client);
-  }
-  retrieve(userID, options) {
-    return this._client.get(path2`/organization/users/${userID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  update(userID, body, options) {
-    return this._client.post(path2`/organization/users/${userID}`, {
-      body,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  list(query = {}, options) {
-    return this._client.getAPIList("/organization/users", ConversationCursorPage, {
-      query,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-  delete(userID, options) {
-    return this._client.delete(path2`/organization/users/${userID}`, {
-      ...options,
-      __security: { adminAPIKeyAuth: true }
-    });
-  }
-}
-Users3.Roles = Roles6;
-
-// node_modules/openai/resources/admin/organization/organization.mjs
-class Organization extends APIResource2 {
-  constructor() {
-    super(...arguments);
-    this.auditLogs = new AuditLogs(this._client);
-    this.adminAPIKeys = new AdminAPIKeys(this._client);
-    this.usage = new Usage(this._client);
-    this.invites = new Invites(this._client);
-    this.users = new Users3(this._client);
-    this.groups = new Groups(this._client);
-    this.roles = new Roles(this._client);
-    this.dataRetention = new DataRetention(this._client);
-    this.spendAlerts = new SpendAlerts(this._client);
-    this.certificates = new Certificates(this._client);
-    this.projects = new Projects(this._client);
-  }
-}
-Organization.AuditLogs = AuditLogs;
-Organization.AdminAPIKeys = AdminAPIKeys;
-Organization.Usage = Usage;
-Organization.Invites = Invites;
-Organization.Users = Users3;
-Organization.Groups = Groups;
-Organization.Roles = Roles;
-Organization.DataRetention = DataRetention;
-Organization.SpendAlerts = SpendAlerts;
-Organization.Certificates = Certificates;
-Organization.Projects = Projects;
-
-// node_modules/openai/resources/admin/admin.mjs
-class Admin extends APIResource2 {
-  constructor() {
-    super(...arguments);
-    this.organization = new Organization(this._client);
-  }
-}
-Admin.Organization = Organization;
-// node_modules/openai/internal/headers.mjs
-var brand_privateNullableHeaders2 = /* @__PURE__ */ Symbol("brand.privateNullableHeaders");
-function* iterateHeaders2(headers) {
-  if (!headers)
-    return;
-  if (brand_privateNullableHeaders2 in headers) {
-    const { values, nulls } = headers;
-    yield* values.entries();
-    for (const name of nulls) {
-      yield [name, null];
-    }
-    return;
-  }
-  let shouldClear = false;
-  let iter;
-  if (headers instanceof Headers) {
-    iter = headers.entries();
-  } else if (isReadonlyArray2(headers)) {
-    iter = headers;
-  } else {
-    shouldClear = true;
-    iter = Object.entries(headers ?? {});
-  }
-  for (let row of iter) {
-    const name = row[0];
-    if (typeof name !== "string")
-      throw new TypeError("expected header name to be a string");
-    const values = isReadonlyArray2(row[1]) ? row[1] : [row[1]];
-    let didClear = false;
-    for (const value of values) {
-      if (value === undefined)
-        continue;
-      if (shouldClear && !didClear) {
-        didClear = true;
-        yield [name, null];
-      }
-      yield [name, value];
-    }
-  }
-}
-var buildHeaders2 = (newHeaders) => {
-  const targetHeaders = new Headers;
-  const nullHeaders = new Set;
-  for (const headers of newHeaders) {
-    const seenHeaders = new Set;
-    for (const [name, value] of iterateHeaders2(headers)) {
-      const lowerName = name.toLowerCase();
-      if (!seenHeaders.has(lowerName)) {
-        targetHeaders.delete(name);
-        seenHeaders.add(lowerName);
-      }
-      if (value === null) {
-        targetHeaders.delete(name);
-        nullHeaders.add(lowerName);
-      } else {
-        targetHeaders.append(name, value);
-        nullHeaders.delete(lowerName);
-      }
-    }
-  }
-  return { [brand_privateNullableHeaders2]: true, values: targetHeaders, nulls: nullHeaders };
-};
-
-// node_modules/openai/resources/audio/speech.mjs
-class Speech extends APIResource2 {
-  create(body, options) {
-    return this._client.post("/audio/speech", {
-      body,
-      ...options,
-      headers: buildHeaders2([{ Accept: "application/octet-stream" }, options?.headers]),
-      __security: { bearerAuth: true },
-      __binaryResponse: true
-    });
-  }
-}
-
-// node_modules/openai/resources/audio/transcriptions.mjs
-class Transcriptions extends APIResource2 {
-  create(body, options) {
-    return this._client.post("/audio/transcriptions", multipartFormRequestOptions2({
-      body,
-      ...options,
-      stream: body.stream ?? false,
-      __metadata: { model: body.model },
-      __security: { bearerAuth: true }
-    }, this._client));
-  }
-}
-
-// node_modules/openai/resources/audio/translations.mjs
-class Translations extends APIResource2 {
-  create(body, options) {
-    return this._client.post("/audio/translations", multipartFormRequestOptions2({ body, ...options, __metadata: { model: body.model }, __security: { bearerAuth: true } }, this._client));
+}
+
+// node_modules/openai/resources/audio/translations.mjs
+class Translations extends APIResource2 {
+  create(body, options) {
+    return this._client.post("/audio/translations", multipartFormRequestOptions2({ body, ...options, __metadata: { model: body.model } }, this._client));
   }
 }
 
@@ -28833,23 +27736,16 @@ Audio.Speech = Speech;
 // node_modules/openai/resources/batches.mjs
 class Batches3 extends APIResource2 {
   create(body, options) {
-    return this._client.post("/batches", { body, ...options, __security: { bearerAuth: true } });
+    return this._client.post("/batches", { body, ...options });
   }
   retrieve(batchID, options) {
-    return this._client.get(path2`/batches/${batchID}`, { ...options, __security: { bearerAuth: true } });
+    return this._client.get(path2`/batches/${batchID}`, options);
   }
   list(query = {}, options) {
-    return this._client.getAPIList("/batches", CursorPage, {
-      query,
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.getAPIList("/batches", CursorPage, { query, ...options });
   }
   cancel(batchID, options) {
-    return this._client.post(path2`/batches/${batchID}/cancel`, {
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.post(path2`/batches/${batchID}/cancel`, options);
   }
 }
 // node_modules/openai/resources/beta/assistants.mjs
@@ -28858,38 +27754,33 @@ class Assistants extends APIResource2 {
     return this._client.post("/assistants", {
       body,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   retrieve(assistantID, options) {
     return this._client.get(path2`/assistants/${assistantID}`, {
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   update(assistantID, body, options) {
     return this._client.post(path2`/assistants/${assistantID}`, {
       body,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   list(query = {}, options) {
     return this._client.getAPIList("/assistants", CursorPage, {
       query,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   delete(assistantID, options) {
     return this._client.delete(path2`/assistants/${assistantID}`, {
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
 }
@@ -28900,8 +27791,7 @@ class Sessions extends APIResource2 {
     return this._client.post("/realtime/sessions", {
       body,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
 }
@@ -28912,8 +27802,7 @@ class TranscriptionSessions extends APIResource2 {
     return this._client.post("/realtime/transcription_sessions", {
       body,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
 }
@@ -28935,15 +27824,13 @@ class Sessions2 extends APIResource2 {
     return this._client.post("/chatkit/sessions", {
       body,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "chatkit_beta=v1" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "chatkit_beta=v1" }, options?.headers])
     });
   }
   cancel(sessionID, options) {
     return this._client.post(path2`/chatkit/sessions/${sessionID}/cancel`, {
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "chatkit_beta=v1" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "chatkit_beta=v1" }, options?.headers])
     });
   }
 }
@@ -28953,32 +27840,24 @@ class Threads extends APIResource2 {
   retrieve(threadID, options) {
     return this._client.get(path2`/chatkit/threads/${threadID}`, {
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "chatkit_beta=v1" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "chatkit_beta=v1" }, options?.headers])
     });
   }
   list(query = {}, options) {
     return this._client.getAPIList("/chatkit/threads", ConversationCursorPage, {
       query,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "chatkit_beta=v1" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "chatkit_beta=v1" }, options?.headers])
     });
   }
   delete(threadID, options) {
     return this._client.delete(path2`/chatkit/threads/${threadID}`, {
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "chatkit_beta=v1" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "chatkit_beta=v1" }, options?.headers])
     });
   }
   listItems(threadID, query = {}, options) {
-    return this._client.getAPIList(path2`/chatkit/threads/${threadID}/items`, ConversationCursorPage, {
-      query,
-      ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "chatkit_beta=v1" }, options?.headers]),
-      __security: { bearerAuth: true }
-    });
+    return this._client.getAPIList(path2`/chatkit/threads/${threadID}/items`, ConversationCursorPage, { query, ...options, headers: buildHeaders2([{ "OpenAI-Beta": "chatkit_beta=v1" }, options?.headers]) });
   }
 }
 
@@ -28999,16 +27878,14 @@ class Messages4 extends APIResource2 {
     return this._client.post(path2`/threads/${threadID}/messages`, {
       body,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   retrieve(messageID, params, options) {
     const { thread_id } = params;
     return this._client.get(path2`/threads/${thread_id}/messages/${messageID}`, {
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   update(messageID, params, options) {
@@ -29016,24 +27893,21 @@ class Messages4 extends APIResource2 {
     return this._client.post(path2`/threads/${thread_id}/messages/${messageID}`, {
       body,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   list(threadID, query = {}, options) {
     return this._client.getAPIList(path2`/threads/${threadID}/messages`, CursorPage, {
       query,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   delete(messageID, params, options) {
     const { thread_id } = params;
     return this._client.delete(path2`/threads/${thread_id}/messages/${messageID}`, {
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
 }
@@ -29045,8 +27919,7 @@ class Steps extends APIResource2 {
     return this._client.get(path2`/threads/${thread_id}/runs/${run_id}/steps/${stepID}`, {
       query,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   list(runID, params, options) {
@@ -29054,8 +27927,7 @@ class Steps extends APIResource2 {
     return this._client.getAPIList(path2`/threads/${thread_id}/runs/${runID}/steps`, CursorPage, {
       query,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
 }
@@ -29077,10 +27949,10 @@ var toFloat32Array = (base64Str) => {
 // node_modules/openai/internal/utils/env.mjs
 var readEnv2 = (env) => {
   if (typeof globalThis.process !== "undefined") {
-    return globalThis.process.env?.[env]?.trim() || undefined;
+    return globalThis.process.env?.[env]?.trim() ?? undefined;
   }
   if (typeof globalThis.Deno !== "undefined") {
-    return globalThis.Deno.env?.get?.(env)?.trim() || undefined;
+    return globalThis.Deno.env?.get?.(env)?.trim();
   }
   return;
 };
@@ -29637,16 +28509,14 @@ class Runs extends APIResource2 {
       ...options,
       headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
       stream: params.stream ?? false,
-      __synthesizeEventData: true,
-      __security: { bearerAuth: true }
+      __synthesizeEventData: true
     });
   }
   retrieve(runID, params, options) {
     const { thread_id } = params;
     return this._client.get(path2`/threads/${thread_id}/runs/${runID}`, {
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   update(runID, params, options) {
@@ -29654,24 +28524,21 @@ class Runs extends APIResource2 {
     return this._client.post(path2`/threads/${thread_id}/runs/${runID}`, {
       body,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   list(threadID, query2 = {}, options) {
     return this._client.getAPIList(path2`/threads/${threadID}/runs`, CursorPage, {
       query: query2,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   cancel(runID, params, options) {
     const { thread_id } = params;
     return this._client.post(path2`/threads/${thread_id}/runs/${runID}/cancel`, {
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   async createAndPoll(threadId, body, options) {
@@ -29732,8 +28599,7 @@ class Runs extends APIResource2 {
       ...options,
       headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
       stream: params.stream ?? false,
-      __synthesizeEventData: true,
-      __security: { bearerAuth: true }
+      __synthesizeEventData: true
     });
   }
   async submitToolOutputsAndPoll(runId, params, options) {
@@ -29757,30 +28623,26 @@ class Threads2 extends APIResource2 {
     return this._client.post("/threads", {
       body,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   retrieve(threadID, options) {
     return this._client.get(path2`/threads/${threadID}`, {
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   update(threadID, body, options) {
     return this._client.post(path2`/threads/${threadID}`, {
       body,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   delete(threadID, options) {
     return this._client.delete(path2`/threads/${threadID}`, {
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   createAndRun(body, options) {
@@ -29789,8 +28651,7 @@ class Threads2 extends APIResource2 {
       ...options,
       headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
       stream: body.stream ?? false,
-      __synthesizeEventData: true,
-      __security: { bearerAuth: true }
+      __synthesizeEventData: true
     });
   }
   async createAndRunPoll(body, options) {
@@ -29821,12 +28682,7 @@ Beta2.Threads = Threads2;
 // node_modules/openai/resources/completions.mjs
 class Completions3 extends APIResource2 {
   create(body, options) {
-    return this._client.post("/completions", {
-      body,
-      ...options,
-      stream: body.stream ?? false,
-      __security: { bearerAuth: true }
-    });
+    return this._client.post("/completions", { body, ...options, stream: body.stream ?? false });
   }
 }
 // node_modules/openai/resources/containers/files/content.mjs
@@ -29836,7 +28692,6 @@ class Content extends APIResource2 {
     return this._client.get(path2`/containers/${container_id}/files/${fileID}/content`, {
       ...options,
       headers: buildHeaders2([{ Accept: "application/binary" }, options?.headers]),
-      __security: { bearerAuth: true },
       __binaryResponse: true
     });
   }
@@ -29849,28 +28704,23 @@ class Files2 extends APIResource2 {
     this.content = new Content(this._client);
   }
   create(containerID, body, options) {
-    return this._client.post(path2`/containers/${containerID}/files`, maybeMultipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client));
+    return this._client.post(path2`/containers/${containerID}/files`, maybeMultipartFormRequestOptions({ body, ...options }, this._client));
   }
   retrieve(fileID, params, options) {
     const { container_id } = params;
-    return this._client.get(path2`/containers/${container_id}/files/${fileID}`, {
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.get(path2`/containers/${container_id}/files/${fileID}`, options);
   }
   list(containerID, query2 = {}, options) {
     return this._client.getAPIList(path2`/containers/${containerID}/files`, CursorPage, {
       query: query2,
-      ...options,
-      __security: { bearerAuth: true }
+      ...options
     });
   }
   delete(fileID, params, options) {
     const { container_id } = params;
     return this._client.delete(path2`/containers/${container_id}/files/${fileID}`, {
       ...options,
-      headers: buildHeaders2([{ Accept: "*/*" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ Accept: "*/*" }, options?.headers])
     });
   }
 }
@@ -29883,26 +28733,18 @@ class Containers extends APIResource2 {
     this.files = new Files2(this._client);
   }
   create(body, options) {
-    return this._client.post("/containers", { body, ...options, __security: { bearerAuth: true } });
+    return this._client.post("/containers", { body, ...options });
   }
   retrieve(containerID, options) {
-    return this._client.get(path2`/containers/${containerID}`, {
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.get(path2`/containers/${containerID}`, options);
   }
   list(query2 = {}, options) {
-    return this._client.getAPIList("/containers", CursorPage, {
-      query: query2,
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.getAPIList("/containers", CursorPage, { query: query2, ...options });
   }
   delete(containerID, options) {
     return this._client.delete(path2`/containers/${containerID}`, {
       ...options,
-      headers: buildHeaders2([{ Accept: "*/*" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ Accept: "*/*" }, options?.headers])
     });
   }
 }
@@ -29914,27 +28756,19 @@ class Items extends APIResource2 {
     return this._client.post(path2`/conversations/${conversationID}/items`, {
       query: { include },
       body,
-      ...options,
-      __security: { bearerAuth: true }
+      ...options
     });
   }
   retrieve(itemID, params, options) {
     const { conversation_id, ...query2 } = params;
-    return this._client.get(path2`/conversations/${conversation_id}/items/${itemID}`, {
-      query: query2,
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.get(path2`/conversations/${conversation_id}/items/${itemID}`, { query: query2, ...options });
   }
   list(conversationID, query2 = {}, options) {
-    return this._client.getAPIList(path2`/conversations/${conversationID}/items`, ConversationCursorPage, { query: query2, ...options, __security: { bearerAuth: true } });
+    return this._client.getAPIList(path2`/conversations/${conversationID}/items`, ConversationCursorPage, { query: query2, ...options });
   }
   delete(itemID, params, options) {
     const { conversation_id } = params;
-    return this._client.delete(path2`/conversations/${conversation_id}/items/${itemID}`, {
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.delete(path2`/conversations/${conversation_id}/items/${itemID}`, options);
   }
 }
 
@@ -29945,26 +28779,16 @@ class Conversations extends APIResource2 {
     this.items = new Items(this._client);
   }
   create(body = {}, options) {
-    return this._client.post("/conversations", { body, ...options, __security: { bearerAuth: true } });
+    return this._client.post("/conversations", { body, ...options });
   }
   retrieve(conversationID, options) {
-    return this._client.get(path2`/conversations/${conversationID}`, {
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.get(path2`/conversations/${conversationID}`, options);
   }
   update(conversationID, body, options) {
-    return this._client.post(path2`/conversations/${conversationID}`, {
-      body,
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.post(path2`/conversations/${conversationID}`, { body, ...options });
   }
   delete(conversationID, options) {
-    return this._client.delete(path2`/conversations/${conversationID}`, {
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.delete(path2`/conversations/${conversationID}`, options);
   }
 }
 Conversations.Items = Items;
@@ -29981,8 +28805,7 @@ class Embeddings extends APIResource2 {
         ...body,
         encoding_format
       },
-      ...options,
-      __security: { bearerAuth: true }
+      ...options
     });
     if (hasUserProvidedEncodingFormat) {
       return response;
@@ -30003,14 +28826,11 @@ class Embeddings extends APIResource2 {
 class OutputItems extends APIResource2 {
   retrieve(outputItemID, params, options) {
     const { eval_id, run_id } = params;
-    return this._client.get(path2`/evals/${eval_id}/runs/${run_id}/output_items/${outputItemID}`, {
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.get(path2`/evals/${eval_id}/runs/${run_id}/output_items/${outputItemID}`, options);
   }
   list(runID, params, options) {
     const { eval_id, ...query2 } = params;
-    return this._client.getAPIList(path2`/evals/${eval_id}/runs/${runID}/output_items`, CursorPage, { query: query2, ...options, __security: { bearerAuth: true } });
+    return this._client.getAPIList(path2`/evals/${eval_id}/runs/${runID}/output_items`, CursorPage, { query: query2, ...options });
   }
 }
 
@@ -30021,39 +28841,25 @@ class Runs2 extends APIResource2 {
     this.outputItems = new OutputItems(this._client);
   }
   create(evalID, body, options) {
-    return this._client.post(path2`/evals/${evalID}/runs`, {
-      body,
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.post(path2`/evals/${evalID}/runs`, { body, ...options });
   }
   retrieve(runID, params, options) {
     const { eval_id } = params;
-    return this._client.get(path2`/evals/${eval_id}/runs/${runID}`, {
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.get(path2`/evals/${eval_id}/runs/${runID}`, options);
   }
   list(evalID, query2 = {}, options) {
     return this._client.getAPIList(path2`/evals/${evalID}/runs`, CursorPage, {
       query: query2,
-      ...options,
-      __security: { bearerAuth: true }
+      ...options
     });
   }
   delete(runID, params, options) {
     const { eval_id } = params;
-    return this._client.delete(path2`/evals/${eval_id}/runs/${runID}`, {
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.delete(path2`/evals/${eval_id}/runs/${runID}`, options);
   }
   cancel(runID, params, options) {
     const { eval_id } = params;
-    return this._client.post(path2`/evals/${eval_id}/runs/${runID}`, {
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.post(path2`/evals/${eval_id}/runs/${runID}`, options);
   }
 }
 Runs2.OutputItems = OutputItems;
@@ -30065,49 +28871,40 @@ class Evals extends APIResource2 {
     this.runs = new Runs2(this._client);
   }
   create(body, options) {
-    return this._client.post("/evals", { body, ...options, __security: { bearerAuth: true } });
+    return this._client.post("/evals", { body, ...options });
   }
   retrieve(evalID, options) {
-    return this._client.get(path2`/evals/${evalID}`, { ...options, __security: { bearerAuth: true } });
+    return this._client.get(path2`/evals/${evalID}`, options);
   }
   update(evalID, body, options) {
-    return this._client.post(path2`/evals/${evalID}`, { body, ...options, __security: { bearerAuth: true } });
+    return this._client.post(path2`/evals/${evalID}`, { body, ...options });
   }
   list(query2 = {}, options) {
-    return this._client.getAPIList("/evals", CursorPage, {
-      query: query2,
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.getAPIList("/evals", CursorPage, { query: query2, ...options });
   }
   delete(evalID, options) {
-    return this._client.delete(path2`/evals/${evalID}`, { ...options, __security: { bearerAuth: true } });
+    return this._client.delete(path2`/evals/${evalID}`, options);
   }
 }
 Evals.Runs = Runs2;
 // node_modules/openai/resources/files.mjs
 class Files3 extends APIResource2 {
   create(body, options) {
-    return this._client.post("/files", multipartFormRequestOptions2({ body, ...options, __security: { bearerAuth: true } }, this._client));
+    return this._client.post("/files", multipartFormRequestOptions2({ body, ...options }, this._client));
   }
   retrieve(fileID, options) {
-    return this._client.get(path2`/files/${fileID}`, { ...options, __security: { bearerAuth: true } });
+    return this._client.get(path2`/files/${fileID}`, options);
   }
   list(query2 = {}, options) {
-    return this._client.getAPIList("/files", CursorPage, {
-      query: query2,
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.getAPIList("/files", CursorPage, { query: query2, ...options });
   }
   delete(fileID, options) {
-    return this._client.delete(path2`/files/${fileID}`, { ...options, __security: { bearerAuth: true } });
+    return this._client.delete(path2`/files/${fileID}`, options);
   }
   content(fileID, options) {
     return this._client.get(path2`/files/${fileID}/content`, {
       ...options,
       headers: buildHeaders2([{ Accept: "application/binary" }, options?.headers]),
-      __security: { bearerAuth: true },
       __binaryResponse: true
     });
   }
@@ -30134,18 +28931,10 @@ class Methods extends APIResource2 {
 // node_modules/openai/resources/fine-tuning/alpha/graders.mjs
 class Graders extends APIResource2 {
   run(body, options) {
-    return this._client.post("/fine_tuning/alpha/graders/run", {
-      body,
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.post("/fine_tuning/alpha/graders/run", { body, ...options });
   }
   validate(body, options) {
-    return this._client.post("/fine_tuning/alpha/graders/validate", {
-      body,
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.post("/fine_tuning/alpha/graders/validate", { body, ...options });
   }
 }
 
@@ -30161,21 +28950,20 @@ Alpha.Graders = Graders;
 // node_modules/openai/resources/fine-tuning/checkpoints/permissions.mjs
 class Permissions extends APIResource2 {
   create(fineTunedModelCheckpoint, body, options) {
-    return this._client.getAPIList(path2`/fine_tuning/checkpoints/${fineTunedModelCheckpoint}/permissions`, Page2, { body, method: "post", ...options, __security: { adminAPIKeyAuth: true } });
+    return this._client.getAPIList(path2`/fine_tuning/checkpoints/${fineTunedModelCheckpoint}/permissions`, Page2, { body, method: "post", ...options });
   }
   retrieve(fineTunedModelCheckpoint, query2 = {}, options) {
     return this._client.get(path2`/fine_tuning/checkpoints/${fineTunedModelCheckpoint}/permissions`, {
       query: query2,
-      ...options,
-      __security: { adminAPIKeyAuth: true }
+      ...options
     });
   }
   list(fineTunedModelCheckpoint, query2 = {}, options) {
-    return this._client.getAPIList(path2`/fine_tuning/checkpoints/${fineTunedModelCheckpoint}/permissions`, ConversationCursorPage, { query: query2, ...options, __security: { adminAPIKeyAuth: true } });
+    return this._client.getAPIList(path2`/fine_tuning/checkpoints/${fineTunedModelCheckpoint}/permissions`, ConversationCursorPage, { query: query2, ...options });
   }
   delete(permissionID, params, options) {
     const { fine_tuned_model_checkpoint } = params;
-    return this._client.delete(path2`/fine_tuning/checkpoints/${fine_tuned_model_checkpoint}/permissions/${permissionID}`, { ...options, __security: { adminAPIKeyAuth: true } });
+    return this._client.delete(path2`/fine_tuning/checkpoints/${fine_tuned_model_checkpoint}/permissions/${permissionID}`, options);
   }
 }
 
@@ -30191,7 +28979,7 @@ Checkpoints.Permissions = Permissions;
 // node_modules/openai/resources/fine-tuning/jobs/checkpoints.mjs
 class Checkpoints2 extends APIResource2 {
   list(fineTuningJobID, query2 = {}, options) {
-    return this._client.getAPIList(path2`/fine_tuning/jobs/${fineTuningJobID}/checkpoints`, CursorPage, { query: query2, ...options, __security: { bearerAuth: true } });
+    return this._client.getAPIList(path2`/fine_tuning/jobs/${fineTuningJobID}/checkpoints`, CursorPage, { query: query2, ...options });
   }
 }
 
@@ -30202,41 +28990,25 @@ class Jobs extends APIResource2 {
     this.checkpoints = new Checkpoints2(this._client);
   }
   create(body, options) {
-    return this._client.post("/fine_tuning/jobs", { body, ...options, __security: { bearerAuth: true } });
+    return this._client.post("/fine_tuning/jobs", { body, ...options });
   }
   retrieve(fineTuningJobID, options) {
-    return this._client.get(path2`/fine_tuning/jobs/${fineTuningJobID}`, {
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.get(path2`/fine_tuning/jobs/${fineTuningJobID}`, options);
   }
   list(query2 = {}, options) {
-    return this._client.getAPIList("/fine_tuning/jobs", CursorPage, {
-      query: query2,
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.getAPIList("/fine_tuning/jobs", CursorPage, { query: query2, ...options });
   }
   cancel(fineTuningJobID, options) {
-    return this._client.post(path2`/fine_tuning/jobs/${fineTuningJobID}/cancel`, {
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.post(path2`/fine_tuning/jobs/${fineTuningJobID}/cancel`, options);
   }
   listEvents(fineTuningJobID, query2 = {}, options) {
-    return this._client.getAPIList(path2`/fine_tuning/jobs/${fineTuningJobID}/events`, CursorPage, { query: query2, ...options, __security: { bearerAuth: true } });
+    return this._client.getAPIList(path2`/fine_tuning/jobs/${fineTuningJobID}/events`, CursorPage, { query: query2, ...options });
   }
   pause(fineTuningJobID, options) {
-    return this._client.post(path2`/fine_tuning/jobs/${fineTuningJobID}/pause`, {
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.post(path2`/fine_tuning/jobs/${fineTuningJobID}/pause`, options);
   }
   resume(fineTuningJobID, options) {
-    return this._client.post(path2`/fine_tuning/jobs/${fineTuningJobID}/resume`, {
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.post(path2`/fine_tuning/jobs/${fineTuningJobID}/resume`, options);
   }
 }
 Jobs.Checkpoints = Checkpoints2;
@@ -30270,36 +29042,31 @@ Graders2.GraderModels = GraderModels;
 // node_modules/openai/resources/images.mjs
 class Images extends APIResource2 {
   createVariation(body, options) {
-    return this._client.post("/images/variations", multipartFormRequestOptions2({ body, ...options, __security: { bearerAuth: true } }, this._client));
+    return this._client.post("/images/variations", multipartFormRequestOptions2({ body, ...options }, this._client));
   }
   edit(body, options) {
-    return this._client.post("/images/edits", multipartFormRequestOptions2({ body, ...options, stream: body.stream ?? false, __security: { bearerAuth: true } }, this._client));
+    return this._client.post("/images/edits", multipartFormRequestOptions2({ body, ...options, stream: body.stream ?? false }, this._client));
   }
   generate(body, options) {
-    return this._client.post("/images/generations", {
-      body,
-      ...options,
-      stream: body.stream ?? false,
-      __security: { bearerAuth: true }
-    });
+    return this._client.post("/images/generations", { body, ...options, stream: body.stream ?? false });
   }
 }
 // node_modules/openai/resources/models.mjs
 class Models3 extends APIResource2 {
   retrieve(model, options) {
-    return this._client.get(path2`/models/${model}`, { ...options, __security: { bearerAuth: true } });
+    return this._client.get(path2`/models/${model}`, options);
   }
   list(options) {
-    return this._client.getAPIList("/models", Page2, { ...options, __security: { bearerAuth: true } });
+    return this._client.getAPIList("/models", Page2, options);
   }
   delete(model, options) {
-    return this._client.delete(path2`/models/${model}`, { ...options, __security: { bearerAuth: true } });
+    return this._client.delete(path2`/models/${model}`, options);
   }
 }
 // node_modules/openai/resources/moderations.mjs
 class Moderations extends APIResource2 {
   create(body, options) {
-    return this._client.post("/moderations", { body, ...options, __security: { bearerAuth: true } });
+    return this._client.post("/moderations", { body, ...options });
   }
 }
 // node_modules/openai/resources/realtime/calls.mjs
@@ -30308,31 +29075,27 @@ class Calls extends APIResource2 {
     return this._client.post(path2`/realtime/calls/${callID}/accept`, {
       body,
       ...options,
-      headers: buildHeaders2([{ Accept: "*/*" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ Accept: "*/*" }, options?.headers])
     });
   }
   hangup(callID, options) {
     return this._client.post(path2`/realtime/calls/${callID}/hangup`, {
       ...options,
-      headers: buildHeaders2([{ Accept: "*/*" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ Accept: "*/*" }, options?.headers])
     });
   }
   refer(callID, body, options) {
     return this._client.post(path2`/realtime/calls/${callID}/refer`, {
       body,
       ...options,
-      headers: buildHeaders2([{ Accept: "*/*" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ Accept: "*/*" }, options?.headers])
     });
   }
   reject(callID, body = {}, options) {
     return this._client.post(path2`/realtime/calls/${callID}/reject`, {
       body,
       ...options,
-      headers: buildHeaders2([{ Accept: "*/*" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ Accept: "*/*" }, options?.headers])
     });
   }
 }
@@ -30340,11 +29103,7 @@ class Calls extends APIResource2 {
 // node_modules/openai/resources/realtime/client-secrets.mjs
 class ClientSecrets extends APIResource2 {
   create(body, options) {
-    return this._client.post("/realtime/client_secrets", {
-      body,
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.post("/realtime/client_secrets", { body, ...options });
   }
 }
 
@@ -30741,18 +29500,14 @@ function finalizeResponse(snapshot, params) {
 // node_modules/openai/resources/responses/input-items.mjs
 class InputItems extends APIResource2 {
   list(responseID, query2 = {}, options) {
-    return this._client.getAPIList(path2`/responses/${responseID}/input_items`, CursorPage, { query: query2, ...options, __security: { bearerAuth: true } });
+    return this._client.getAPIList(path2`/responses/${responseID}/input_items`, CursorPage, { query: query2, ...options });
   }
 }
 
 // node_modules/openai/resources/responses/input-tokens.mjs
 class InputTokens extends APIResource2 {
   count(body = {}, options) {
-    return this._client.post("/responses/input_tokens", {
-      body,
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.post("/responses/input_tokens", { body, ...options });
   }
 }
 
@@ -30764,12 +29519,7 @@ class Responses extends APIResource2 {
     this.inputTokens = new InputTokens(this._client);
   }
   create(body, options) {
-    return this._client.post("/responses", {
-      body,
-      ...options,
-      stream: body.stream ?? false,
-      __security: { bearerAuth: true }
-    })._thenUnwrap((rsp) => {
+    return this._client.post("/responses", { body, ...options, stream: body.stream ?? false })._thenUnwrap((rsp) => {
       if ("object" in rsp && rsp.object === "response") {
         addOutputText(rsp);
       }
@@ -30780,8 +29530,7 @@ class Responses extends APIResource2 {
     return this._client.get(path2`/responses/${responseID}`, {
       query: query2,
       ...options,
-      stream: query2?.stream ?? false,
-      __security: { bearerAuth: true }
+      stream: query2?.stream ?? false
     })._thenUnwrap((rsp) => {
       if ("object" in rsp && rsp.object === "response") {
         addOutputText(rsp);
@@ -30792,8 +29541,7 @@ class Responses extends APIResource2 {
   delete(responseID, options) {
     return this._client.delete(path2`/responses/${responseID}`, {
       ...options,
-      headers: buildHeaders2([{ Accept: "*/*" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ Accept: "*/*" }, options?.headers])
     });
   }
   parse(body, options) {
@@ -30803,13 +29551,10 @@ class Responses extends APIResource2 {
     return ResponseStream.createResponse(this._client, body, options);
   }
   cancel(responseID, options) {
-    return this._client.post(path2`/responses/${responseID}/cancel`, {
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.post(path2`/responses/${responseID}/cancel`, options);
   }
   compact(body, options) {
-    return this._client.post("/responses/compact", { body, ...options, __security: { bearerAuth: true } });
+    return this._client.post("/responses/compact", { body, ...options });
   }
 }
 Responses.InputItems = InputItems;
@@ -30820,7 +29565,6 @@ class Content2 extends APIResource2 {
     return this._client.get(path2`/skills/${skillID}/content`, {
       ...options,
       headers: buildHeaders2([{ Accept: "application/binary" }, options?.headers]),
-      __security: { bearerAuth: true },
       __binaryResponse: true
     });
   }
@@ -30833,7 +29577,6 @@ class Content3 extends APIResource2 {
     return this._client.get(path2`/skills/${skill_id}/versions/${version}/content`, {
       ...options,
       headers: buildHeaders2([{ Accept: "application/binary" }, options?.headers]),
-      __security: { bearerAuth: true },
       __binaryResponse: true
     });
   }
@@ -30846,28 +29589,21 @@ class Versions2 extends APIResource2 {
     this.content = new Content3(this._client);
   }
   create(skillID, body = {}, options) {
-    return this._client.post(path2`/skills/${skillID}/versions`, maybeMultipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client));
+    return this._client.post(path2`/skills/${skillID}/versions`, maybeMultipartFormRequestOptions({ body, ...options }, this._client));
   }
   retrieve(version, params, options) {
     const { skill_id } = params;
-    return this._client.get(path2`/skills/${skill_id}/versions/${version}`, {
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.get(path2`/skills/${skill_id}/versions/${version}`, options);
   }
   list(skillID, query2 = {}, options) {
     return this._client.getAPIList(path2`/skills/${skillID}/versions`, CursorPage, {
       query: query2,
-      ...options,
-      __security: { bearerAuth: true }
+      ...options
     });
   }
   delete(version, params, options) {
     const { skill_id } = params;
-    return this._client.delete(path2`/skills/${skill_id}/versions/${version}`, {
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.delete(path2`/skills/${skill_id}/versions/${version}`, options);
   }
 }
 Versions2.Content = Content3;
@@ -30880,27 +29616,19 @@ class Skills2 extends APIResource2 {
     this.versions = new Versions2(this._client);
   }
   create(body = {}, options) {
-    return this._client.post("/skills", maybeMultipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client));
+    return this._client.post("/skills", maybeMultipartFormRequestOptions({ body, ...options }, this._client));
   }
   retrieve(skillID, options) {
-    return this._client.get(path2`/skills/${skillID}`, { ...options, __security: { bearerAuth: true } });
+    return this._client.get(path2`/skills/${skillID}`, options);
   }
   update(skillID, body, options) {
-    return this._client.post(path2`/skills/${skillID}`, {
-      body,
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.post(path2`/skills/${skillID}`, { body, ...options });
   }
   list(query2 = {}, options) {
-    return this._client.getAPIList("/skills", CursorPage, {
-      query: query2,
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.getAPIList("/skills", CursorPage, { query: query2, ...options });
   }
   delete(skillID, options) {
-    return this._client.delete(path2`/skills/${skillID}`, { ...options, __security: { bearerAuth: true } });
+    return this._client.delete(path2`/skills/${skillID}`, options);
   }
 }
 Skills2.Content = Content2;
@@ -30908,7 +29636,7 @@ Skills2.Versions = Versions2;
 // node_modules/openai/resources/uploads/parts.mjs
 class Parts extends APIResource2 {
   create(uploadID, body, options) {
-    return this._client.post(path2`/uploads/${uploadID}/parts`, multipartFormRequestOptions2({ body, ...options, __security: { bearerAuth: true } }, this._client));
+    return this._client.post(path2`/uploads/${uploadID}/parts`, multipartFormRequestOptions2({ body, ...options }, this._client));
   }
 }
 
@@ -30919,20 +29647,13 @@ class Uploads extends APIResource2 {
     this.parts = new Parts(this._client);
   }
   create(body, options) {
-    return this._client.post("/uploads", { body, ...options, __security: { bearerAuth: true } });
+    return this._client.post("/uploads", { body, ...options });
   }
   cancel(uploadID, options) {
-    return this._client.post(path2`/uploads/${uploadID}/cancel`, {
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.post(path2`/uploads/${uploadID}/cancel`, options);
   }
   complete(uploadID, body, options) {
-    return this._client.post(path2`/uploads/${uploadID}/complete`, {
-      body,
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.post(path2`/uploads/${uploadID}/complete`, { body, ...options });
   }
 }
 Uploads.Parts = Parts;
@@ -30961,24 +29682,21 @@ class FileBatches extends APIResource2 {
     return this._client.post(path2`/vector_stores/${vectorStoreID}/file_batches`, {
       body,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   retrieve(batchID, params, options) {
     const { vector_store_id } = params;
     return this._client.get(path2`/vector_stores/${vector_store_id}/file_batches/${batchID}`, {
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   cancel(batchID, params, options) {
     const { vector_store_id } = params;
     return this._client.post(path2`/vector_stores/${vector_store_id}/file_batches/${batchID}/cancel`, {
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   async createAndPoll(vectorStoreId, body, options) {
@@ -30987,12 +29705,7 @@ class FileBatches extends APIResource2 {
   }
   listFiles(batchID, params, options) {
     const { vector_store_id, ...query2 } = params;
-    return this._client.getAPIList(path2`/vector_stores/${vector_store_id}/file_batches/${batchID}/files`, CursorPage, {
-      query: query2,
-      ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
-    });
+    return this._client.getAPIList(path2`/vector_stores/${vector_store_id}/file_batches/${batchID}/files`, CursorPage, { query: query2, ...options, headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]) });
   }
   async poll(vectorStoreID, batchID, options) {
     const headers = buildHeaders2([
@@ -31059,16 +29772,14 @@ class Files4 extends APIResource2 {
     return this._client.post(path2`/vector_stores/${vectorStoreID}/files`, {
       body,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   retrieve(fileID, params, options) {
     const { vector_store_id } = params;
     return this._client.get(path2`/vector_stores/${vector_store_id}/files/${fileID}`, {
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   update(fileID, params, options) {
@@ -31076,24 +29787,21 @@ class Files4 extends APIResource2 {
     return this._client.post(path2`/vector_stores/${vector_store_id}/files/${fileID}`, {
       body,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   list(vectorStoreID, query2 = {}, options) {
     return this._client.getAPIList(path2`/vector_stores/${vectorStoreID}/files`, CursorPage, {
       query: query2,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   delete(fileID, params, options) {
     const { vector_store_id } = params;
     return this._client.delete(path2`/vector_stores/${vector_store_id}/files/${fileID}`, {
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   async createAndPoll(vectorStoreId, body, options) {
@@ -31145,11 +29853,7 @@ class Files4 extends APIResource2 {
   }
   content(fileID, params, options) {
     const { vector_store_id } = params;
-    return this._client.getAPIList(path2`/vector_stores/${vector_store_id}/files/${fileID}/content`, Page2, {
-      ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
-    });
+    return this._client.getAPIList(path2`/vector_stores/${vector_store_id}/files/${fileID}/content`, Page2, { ...options, headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]) });
   }
 }
 
@@ -31164,38 +29868,33 @@ class VectorStores extends APIResource2 {
     return this._client.post("/vector_stores", {
       body,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   retrieve(vectorStoreID, options) {
     return this._client.get(path2`/vector_stores/${vectorStoreID}`, {
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   update(vectorStoreID, body, options) {
     return this._client.post(path2`/vector_stores/${vectorStoreID}`, {
       body,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   list(query2 = {}, options) {
     return this._client.getAPIList("/vector_stores", CursorPage, {
       query: query2,
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   delete(vectorStoreID, options) {
     return this._client.delete(path2`/vector_stores/${vectorStoreID}`, {
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
   search(vectorStoreID, body, options) {
@@ -31203,8 +29902,7 @@ class VectorStores extends APIResource2 {
       body,
       method: "post",
       ...options,
-      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers]),
-      __security: { bearerAuth: true }
+      headers: buildHeaders2([{ "OpenAI-Beta": "assistants=v2" }, options?.headers])
     });
   }
 }
@@ -31213,47 +29911,39 @@ VectorStores.FileBatches = FileBatches;
 // node_modules/openai/resources/videos.mjs
 class Videos extends APIResource2 {
   create(body, options) {
-    return this._client.post("/videos", multipartFormRequestOptions2({ body, ...options, __security: { bearerAuth: true } }, this._client));
+    return this._client.post("/videos", multipartFormRequestOptions2({ body, ...options }, this._client));
   }
   retrieve(videoID, options) {
-    return this._client.get(path2`/videos/${videoID}`, { ...options, __security: { bearerAuth: true } });
+    return this._client.get(path2`/videos/${videoID}`, options);
   }
   list(query2 = {}, options) {
-    return this._client.getAPIList("/videos", ConversationCursorPage, {
-      query: query2,
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.getAPIList("/videos", ConversationCursorPage, { query: query2, ...options });
   }
   delete(videoID, options) {
-    return this._client.delete(path2`/videos/${videoID}`, { ...options, __security: { bearerAuth: true } });
+    return this._client.delete(path2`/videos/${videoID}`, options);
   }
   createCharacter(body, options) {
-    return this._client.post("/videos/characters", multipartFormRequestOptions2({ body, ...options, __security: { bearerAuth: true } }, this._client));
+    return this._client.post("/videos/characters", multipartFormRequestOptions2({ body, ...options }, this._client));
   }
   downloadContent(videoID, query2 = {}, options) {
     return this._client.get(path2`/videos/${videoID}/content`, {
       query: query2,
       ...options,
       headers: buildHeaders2([{ Accept: "application/binary" }, options?.headers]),
-      __security: { bearerAuth: true },
       __binaryResponse: true
     });
   }
   edit(body, options) {
-    return this._client.post("/videos/edits", multipartFormRequestOptions2({ body, ...options, __security: { bearerAuth: true } }, this._client));
+    return this._client.post("/videos/edits", multipartFormRequestOptions2({ body, ...options }, this._client));
   }
   extend(body, options) {
-    return this._client.post("/videos/extensions", multipartFormRequestOptions2({ body, ...options, __security: { bearerAuth: true } }, this._client));
+    return this._client.post("/videos/extensions", multipartFormRequestOptions2({ body, ...options }, this._client));
   }
   getCharacter(characterID, options) {
-    return this._client.get(path2`/videos/characters/${characterID}`, {
-      ...options,
-      __security: { bearerAuth: true }
-    });
+    return this._client.get(path2`/videos/characters/${characterID}`, options);
   }
   remix(videoID, body, options) {
-    return this._client.post(path2`/videos/${videoID}/remix`, maybeMultipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client));
+    return this._client.post(path2`/videos/${videoID}/remix`, maybeMultipartFormRequestOptions({ body, ...options }, this._client));
   }
 }
 // node_modules/openai/resources/webhooks/webhooks.mjs
@@ -31327,10 +30017,9 @@ var _OpenAI_instances;
 var _a3;
 var _OpenAI_encoder;
 var _OpenAI_baseURLOverridden;
-var WORKLOAD_IDENTITY_API_KEY_PLACEHOLDER = "workload-identity-auth";
 
 class OpenAI {
-  constructor({ baseURL = readEnv2("OPENAI_BASE_URL"), apiKey = readEnv2("OPENAI_API_KEY") ?? null, adminAPIKey = readEnv2("OPENAI_ADMIN_KEY") ?? null, organization = readEnv2("OPENAI_ORG_ID") ?? null, project = readEnv2("OPENAI_PROJECT_ID") ?? null, webhookSecret = readEnv2("OPENAI_WEBHOOK_SECRET") ?? null, workloadIdentity, ...opts } = {}) {
+  constructor({ baseURL = readEnv2("OPENAI_BASE_URL"), apiKey = readEnv2("OPENAI_API_KEY"), organization = readEnv2("OPENAI_ORG_ID") ?? null, project = readEnv2("OPENAI_PROJECT_ID") ?? null, webhookSecret = readEnv2("OPENAI_WEBHOOK_SECRET") ?? null, ...opts } = {}) {
     _OpenAI_instances.add(this);
     _OpenAI_encoder.set(this, undefined);
     this.completions = new Completions3(this);
@@ -31348,7 +30037,6 @@ class OpenAI {
     this.beta = new Beta2(this);
     this.batches = new Batches3(this);
     this.uploads = new Uploads(this);
-    this.admin = new Admin(this);
     this.responses = new Responses(this);
     this.realtime = new Realtime2(this);
     this.conversations = new Conversations(this);
@@ -31356,22 +30044,17 @@ class OpenAI {
     this.containers = new Containers(this);
     this.skills = new Skills2(this);
     this.videos = new Videos(this);
+    if (apiKey === undefined) {
+      throw new OpenAIError("Missing credentials. Please pass an `apiKey`, or set the `OPENAI_API_KEY` environment variable.");
+    }
     const options = {
       apiKey,
-      adminAPIKey,
       organization,
       project,
       webhookSecret,
-      workloadIdentity,
       ...opts,
       baseURL: baseURL || `https://api.openai.com/v1`
     };
-    if (apiKey && workloadIdentity) {
-      throw new OpenAIError("The `apiKey` and `workloadIdentity` options are mutually exclusive");
-    }
-    if (!apiKey && !adminAPIKey && !workloadIdentity) {
-      throw new OpenAIError("Missing credentials. Please pass an `apiKey`, `workloadIdentity`, `adminAPIKey`, or set the `OPENAI_API_KEY` or `OPENAI_ADMIN_KEY` environment variable.");
-    }
     if (!options.dangerouslyAllowBrowser && isRunningInBrowser2()) {
       throw new OpenAIError(`It looks like you're running in a browser-like environment.
 
@@ -31394,24 +30077,8 @@ https://help.openai.com/en/articles/5112595-best-practices-for-api-key-safety
     this.maxRetries = options.maxRetries ?? 2;
     this.fetch = options.fetch ?? getDefaultFetch2();
     __classPrivateFieldSet2(this, _OpenAI_encoder, FallbackEncoder2, "f");
-    const customHeadersEnv = readEnv2("OPENAI_CUSTOM_HEADERS");
-    if (customHeadersEnv) {
-      const parsed = {};
-      for (const line of customHeadersEnv.split(`
-`)) {
-        const colon = line.indexOf(":");
-        if (colon >= 0) {
-          parsed[line.substring(0, colon).trim()] = line.substring(colon + 1).trim();
-        }
-      }
-      options.defaultHeaders = buildHeaders2([parsed, options.defaultHeaders]);
-    }
     this._options = options;
-    if (workloadIdentity) {
-      this._workloadIdentityAuth = new WorkloadIdentityAuth(workloadIdentity, this.fetch);
-    }
-    this.apiKey = typeof apiKey === "string" ? apiKey : null;
-    this.adminAPIKey = adminAPIKey;
+    this.apiKey = typeof apiKey === "string" ? apiKey : "Missing Key";
     this.organization = organization;
     this.project = project;
     this.webhookSecret = webhookSecret;
@@ -31426,9 +30093,7 @@ https://help.openai.com/en/articles/5112595-best-practices-for-api-key-safety
       logLevel: this.logLevel,
       fetch: this.fetch,
       fetchOptions: this.fetchOptions,
-      apiKey: this._options.apiKey,
-      adminAPIKey: this.adminAPIKey,
-      workloadIdentity: this._options.workloadIdentity,
+      apiKey: this.apiKey,
       organization: this.organization,
       project: this.project,
       webhookSecret: this.webhookSecret,
@@ -31439,45 +30104,12 @@ https://help.openai.com/en/articles/5112595-best-practices-for-api-key-safety
   defaultQuery() {
     return this._options.defaultQuery;
   }
-  validateHeaders({ values: values2, nulls }, schemes = {
-    bearerAuth: true,
-    adminAPIKeyAuth: true
-  }) {
-    if (values2.get("authorization") || values2.get("api-key")) {
-      return;
-    }
-    if (nulls.has("authorization") || nulls.has("api-key")) {
-      return;
-    }
-    if (this._workloadIdentityAuth && schemes.bearerAuth) {
-      return;
-    }
-    throw new Error('Could not resolve authentication method. Expected either apiKey or adminAPIKey to be set. Or for one of the "Authorization" or "api-key" headers to be explicitly omitted');
-  }
-  async authHeaders(opts, schemes = {
-    bearerAuth: true,
-    adminAPIKeyAuth: true
-  }) {
-    return buildHeaders2([
-      schemes.bearerAuth ? await this.bearerAuth(opts) : null,
-      schemes.adminAPIKeyAuth ? await this.adminAPIKeyAuth(opts) : null
-    ]);
+  validateHeaders({ values: values2, nulls }) {
+    return;
   }
-  async bearerAuth(opts) {
-    if (this._workloadIdentityAuth) {
-      return buildHeaders2([{ Authorization: `Bearer ${await this._workloadIdentityAuth.getToken()}` }]);
-    }
-    if (this.apiKey == null) {
-      return;
-    }
+  async authHeaders(opts) {
     return buildHeaders2([{ Authorization: `Bearer ${this.apiKey}` }]);
   }
-  async adminAPIKeyAuth(opts) {
-    if (this.adminAPIKey == null) {
-      return;
-    }
-    return buildHeaders2([{ Authorization: `Bearer ${this.adminAPIKey}` }]);
-  }
   stringifyQuery(query2) {
     return stringifyQuery2(query2);
   }
@@ -31522,10 +30154,7 @@ https://help.openai.com/en/articles/5112595-best-practices-for-api-key-safety
     return url.toString();
   }
   async prepareOptions(options) {
-    const security = options.__security ?? { bearerAuth: true };
-    if (security.bearerAuth) {
-      await this._callApiKey();
-    }
+    await this._callApiKey();
   }
   async prepareRequest(request, { url, options }) {}
   get(path3, opts) {
@@ -31575,9 +30204,8 @@ https://help.openai.com/en/articles/5112595-best-practices-for-api-key-safety
     if (options.signal?.aborted) {
       throw new APIUserAbortError2;
     }
-    const security = options.__security ?? { bearerAuth: true };
     const controller = new AbortController;
-    const response = await this.fetchWithAuth(url, req, timeout, controller, security).catch(castToError2);
+    const response = await this.fetchWithTimeout(url, req, timeout, controller).catch(castToError2);
     const headersTime = Date.now();
     if (response instanceof globalThis.Error) {
       const retryMessage = `retrying, ${retriesRemaining} attempts remaining`;
@@ -31602,31 +30230,14 @@ https://help.openai.com/en/articles/5112595-best-practices-for-api-key-safety
         durationMs: headersTime - startTime,
         message: response.message
       }));
-      if (response instanceof OAuthError || response instanceof SubjectTokenProviderError) {
-        throw response;
-      }
       if (isTimeout) {
         throw new APIConnectionTimeoutError2;
       }
-      throw new APIConnectionError2({
-        message: getConnectionErrorMessage(response),
-        cause: response
-      });
+      throw new APIConnectionError2({ cause: response });
     }
     const specialHeaders = [...response.headers.entries()].filter(([name]) => name === "x-request-id").map(([name, value]) => ", " + name + ": " + JSON.stringify(value)).join("");
     const responseInfo = `[${requestLogID}${retryLogStr}${specialHeaders}] ${req.method} ${url} ${response.ok ? "succeeded" : "failed"} with status ${response.status} in ${headersTime - startTime}ms`;
     if (!response.ok) {
-      if (response.status === 401 && this._workloadIdentityAuth && security.bearerAuth && !options.__metadata?.["hasStreamingBody"] && !options.__metadata?.["workloadIdentityTokenRefreshed"]) {
-        await CancelReadableStream2(response.body);
-        this._workloadIdentityAuth.invalidateToken();
-        return this.makeRequest({
-          ...options,
-          __metadata: {
-            ...options.__metadata,
-            workloadIdentityTokenRefreshed: true
-          }
-        }, retriesRemaining, retryOfRequestLogID ?? requestLogID);
-      }
       const shouldRetry = await this.shouldRetry(response);
       if (retriesRemaining && shouldRetry) {
         const retryMessage2 = `retrying, ${retriesRemaining} attempts remaining`;
@@ -31674,21 +30285,6 @@ https://help.openai.com/en/articles/5112595-best-practices-for-api-key-safety
     const request = this.makeRequest(options, null, undefined);
     return new PagePromise2(this, request, Page3);
   }
-  async fetchWithAuth(url, init, timeout, controller, schemes = {
-    bearerAuth: true,
-    adminAPIKeyAuth: true
-  }) {
-    if (this._workloadIdentityAuth && schemes.bearerAuth) {
-      const headers = init.headers;
-      const authHeader = headers.get("Authorization");
-      if (!authHeader || authHeader === `Bearer ${WORKLOAD_IDENTITY_API_KEY_PLACEHOLDER}`) {
-        const token = await this._workloadIdentityAuth.getToken();
-        headers.set("Authorization", `Bearer ${token}`);
-      }
-    }
-    const response = await this.fetchWithTimeout(url, init, timeout, controller);
-    return response;
-  }
   async fetchWithTimeout(url, init, ms, controller) {
     const { signal, method, ...options } = init || {};
     const abort = this._makeAbort(controller);
@@ -31767,13 +30363,7 @@ https://help.openai.com/en/articles/5112595-best-practices-for-api-key-safety
     if ("timeout" in options)
       validatePositiveInteger2("timeout", options.timeout);
     options.timeout = options.timeout ?? this.timeout;
-    const { bodyHeaders, body, isStreamingBody } = this.buildBody({ options });
-    if (isStreamingBody) {
-      inputOptions.__metadata = {
-        ...inputOptions.__metadata,
-        hasStreamingBody: true
-      };
-    }
+    const { bodyHeaders, body } = this.buildBody({ options });
     const reqHeaders = await this.buildHeaders({ options: inputOptions, method, bodyHeaders, retryCount });
     const req = {
       method,
@@ -31804,12 +30394,12 @@ https://help.openai.com/en/articles/5112595-best-practices-for-api-key-safety
         "OpenAI-Organization": this.organization,
         "OpenAI-Project": this.project
       },
-      await this.authHeaders(options, options.__security ?? { bearerAuth: true }),
+      await this.authHeaders(options),
       this._options.defaultHeaders,
       bodyHeaders,
       options.headers
     ]);
-    this.validateHeaders(headers, options.__security ?? { bearerAuth: true });
+    this.validateHeaders(headers);
     return headers.values;
   }
   _makeAbort(controller) {
@@ -31817,27 +30407,20 @@ https://help.openai.com/en/articles/5112595-best-practices-for-api-key-safety
   }
   buildBody({ options: { body, headers: rawHeaders } }) {
     if (!body) {
-      return { bodyHeaders: undefined, body: undefined, isStreamingBody: false };
+      return { bodyHeaders: undefined, body: undefined };
     }
     const headers = buildHeaders2([rawHeaders]);
-    const isReadableStream = typeof globalThis.ReadableStream !== "undefined" && body instanceof globalThis.ReadableStream;
-    const isRetryableBody = !isReadableStream && (typeof body === "string" || body instanceof ArrayBuffer || ArrayBuffer.isView(body) || typeof globalThis.Blob !== "undefined" && body instanceof globalThis.Blob || body instanceof URLSearchParams || body instanceof FormData);
-    if (ArrayBuffer.isView(body) || body instanceof ArrayBuffer || body instanceof DataView || typeof body === "string" && headers.values.has("content-type") || globalThis.Blob && body instanceof globalThis.Blob || body instanceof FormData || body instanceof URLSearchParams || isReadableStream) {
-      return { bodyHeaders: undefined, body, isStreamingBody: !isRetryableBody };
+    if (ArrayBuffer.isView(body) || body instanceof ArrayBuffer || body instanceof DataView || typeof body === "string" && headers.values.has("content-type") || globalThis.Blob && body instanceof globalThis.Blob || body instanceof FormData || body instanceof URLSearchParams || globalThis.ReadableStream && body instanceof globalThis.ReadableStream) {
+      return { bodyHeaders: undefined, body };
     } else if (typeof body === "object" && ((Symbol.asyncIterator in body) || (Symbol.iterator in body) && ("next" in body) && typeof body.next === "function")) {
-      return {
-        bodyHeaders: undefined,
-        body: ReadableStreamFrom2(body),
-        isStreamingBody: true
-      };
+      return { bodyHeaders: undefined, body: ReadableStreamFrom2(body) };
     } else if (typeof body === "object" && headers.values.get("content-type") === "application/x-www-form-urlencoded") {
       return {
         bodyHeaders: { "content-type": "application/x-www-form-urlencoded" },
-        body: this.stringifyQuery(body),
-        isStreamingBody: false
+        body: this.stringifyQuery(body)
       };
     } else {
-      return { ...__classPrivateFieldGet2(this, _OpenAI_encoder, "f").call(this, { body, headers }), isStreamingBody: false };
+      return __classPrivateFieldGet2(this, _OpenAI_encoder, "f").call(this, { body, headers });
     }
   }
 }
@@ -31876,7 +30459,6 @@ OpenAI.Webhooks = Webhooks;
 OpenAI.Beta = Beta2;
 OpenAI.Batches = Batches3;
 OpenAI.Uploads = Uploads;
-OpenAI.Admin = Admin;
 OpenAI.Responses = Responses;
 OpenAI.Realtime = Realtime2;
 OpenAI.Conversations = Conversations;
@@ -31884,23 +30466,6 @@ OpenAI.Evals = Evals;
 OpenAI.Containers = Containers;
 OpenAI.Skills = Skills2;
 OpenAI.Videos = Videos;
-function getConnectionErrorMessage(error3) {
-  if (isUndiciDispatcherVersionMismatchError(error3)) {
-    return `Connection error. This may be caused by passing an undici dispatcher, such as ProxyAgent, that is incompatible with the fetch implementation. If you are using undici's ProxyAgent, pass the fetch implementation from the same undici package: import { fetch, ProxyAgent } from 'undici'; new OpenAI({ fetch, fetchOptions: { dispatcher: new ProxyAgent(...) } });`;
-  }
-  return;
-}
-function isUndiciDispatcherVersionMismatchError(error3) {
-  let current = error3;
-  for (let i = 0;i < 8 && current && typeof current === "object"; i++) {
-    const err = current;
-    if (err.code === "UND_ERR_INVALID_ARG" && typeof err.message === "string" && err.message.includes("invalid onRequestStart method")) {
-      return true;
-    }
-    current = err.cause;
-  }
-  return false;
-}
 // node_modules/openai/azure.mjs
 var _deployments_endpoints = new Set([
   "/completions",
@@ -32088,6 +30653,50 @@ function setNestedValue(obj, path3, value) {
   const last = parts[parts.length - 1] ?? "";
   cur[last] = value;
 }
+function parseToolArguments(value) {
+  if (!value)
+    return;
+  if (typeof value === "object" && !Array.isArray(value)) {
+    return value;
+  }
+  if (typeof value === "string") {
+    try {
+      const parsed = JSON.parse(value);
+      return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : undefined;
+    } catch {
+      return;
+    }
+  }
+  return;
+}
+function normalizeToolCalls(value) {
+  if (!Array.isArray(value))
+    return;
+  const calls = value.flatMap((item) => {
+    if (!item || typeof item !== "object")
+      return [];
+    const record = item;
+    const fn = record["function"];
+    if (fn && typeof fn === "object") {
+      const functionRecord = fn;
+      const name2 = functionRecord["name"];
+      if (typeof name2 !== "string" || !name2)
+        return [];
+      return [{
+        name: name2,
+        arguments: parseToolArguments(functionRecord["arguments"])
+      }];
+    }
+    const name = record["name"] ?? record["toolName"];
+    if (typeof name !== "string" || !name)
+      return [];
+    return [{
+      name,
+      arguments: parseToolArguments(record["arguments"] ?? record["args"])
+    }];
+  });
+  return calls.length > 0 ? calls : undefined;
+}
 async function callHttpAdapter(config, input, turns) {
   const start = Date.now();
   try {
@@ -32114,6 +30723,22 @@ async function callHttpAdapter(config, input, turns) {
       signal: config.timeoutMs ? AbortSignal.timeout(config.timeoutMs) : undefined
     });
     const durationMs = Date.now() - start;
+    if (!response.ok) {
+      const text = await response.text().catch(() => response.statusText);
+      return {
+        output: "",
+        durationMs,
+        statusCode: response.status,
+        error: `HTTP ${response.status}: ${text.slice(0, 500)}`
+      };
+    }
+    if (config.responseMode === "text") {
+      return {
+        output: await response.text(),
+        durationMs,
+        statusCode: response.status
+      };
+    }
     const data = await response.json();
     let output;
     if (config.outputPath) {
@@ -32124,11 +30749,13 @@ async function callHttpAdapter(config, input, turns) {
     const usage = getNestedValue(data, "usage");
     const inputTokens = Number(usage?.["prompt_tokens"] ?? usage?.["input_tokens"] ?? 0) || undefined;
     const outputTokens = Number(usage?.["completion_tokens"] ?? usage?.["output_tokens"] ?? 0) || undefined;
+    const toolCalls = normalizeToolCalls(getNestedValue(data, "choices.0.message.tool_calls")) ?? normalizeToolCalls(getNestedValue(data, "toolCalls")) ?? normalizeToolCalls(getNestedValue(data, "tool_calls"));
     return {
       output,
       durationMs,
       inputTokens,
       outputTokens,
+      toolCalls,
       statusCode: response.status
     };
   } catch (err) {
@@ -32179,13 +30806,34 @@ async function callAnthropicAdapter(config, input, turns) {
 }
 
 // src/adapters/openai.ts
+function normalizeBaseURL(baseURL) {
+  if (!baseURL)
+    return;
+  try {
+    const url = new URL(baseURL);
+    if (url.pathname === "" || url.pathname === "/") {
+      url.pathname = "/v1";
+      return url.toString();
+    }
+  } catch {
+    return baseURL;
+  }
+  return baseURL;
+}
+function resolveApiKey(config) {
+  if (config.apiKey)
+    return config.apiKey;
+  if (config.baseURL)
+    return "ollama";
+  return process.env["OPENAI_API_KEY"];
+}
 async function callOpenAIAdapter(config, input, turns) {
   const start = Date.now();
-  const client = new OpenAI({
-    apiKey: config.apiKey ?? process.env["OPENAI_API_KEY"],
-    baseURL: config.baseURL
-  });
   try {
+    const client = new OpenAI({
+      apiKey: resolveApiKey(config),
+      baseURL: normalizeBaseURL(config.baseURL)
+    });
     const messages = [];
     if (config.systemPrompt)
       messages.push({ role: "system", content: config.systemPrompt });
@@ -32443,7 +31091,7 @@ async function runEvals(cases, options) {
     id: randomUUID3(),
     createdAt: new Date().toISOString(),
     dataset: options.dataset,
-    adapterConfig: options.adapter,
+    adapterConfig: redactAdapterConfig(options.adapter),
     results,
     stats
   };
@@ -32512,7 +31160,7 @@ function printTerminalReport(run) {
   console.log();
 }
 function toJson(run) {
-  return JSON.stringify(run, null, 2);
+  return JSON.stringify(redactRunSecrets(run), null, 2);
 }
 function toMarkdown(run) {
   const { results, stats } = run;
@@ -32605,21 +31253,85 @@ function printDiffReport(diff) {
 init_store();
 
 // src/cli/adapter-parser.ts
+function parsePositiveInteger(value, flag) {
+  if (value === undefined)
+    return;
+  const parsed = Number(value);
+  if (!Number.isInteger(parsed) || parsed <= 0) {
+    throw new Error(`${flag} must be a positive integer`);
+  }
+  return parsed;
+}
+function parseHeaders2(value) {
+  if (!value)
+    return;
+  const parsed = JSON.parse(value);
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new Error("--headers must be a JSON object");
+  }
+  return Object.fromEntries(Object.entries(parsed).map(([key, headerValue]) => {
+    if (typeof headerValue !== "string") {
+      throw new Error("--headers values must be strings");
+    }
+    return [key, headerValue];
+  }));
+}
+function parseHttpMethod(value) {
+  if (!value)
+    return;
+  const method = value.toUpperCase();
+  if (method === "GET" || method === "POST" || method === "PUT" || method === "PATCH") {
+    return method;
+  }
+  throw new Error("--method must be GET, POST, PUT, or PATCH");
+}
+function parseResponseMode(value) {
+  if (!value)
+    return;
+  if (value === "json" || value === "text")
+    return value;
+  throw new Error("--response-mode must be json or text");
+}
 function parseAdapterConfig(opts) {
   const type = opts["adapter"] ?? "http";
+  const apiKey = opts["apiKey"] ?? (opts["apiKeyEnv"] ? process.env[opts["apiKeyEnv"]] : undefined);
   switch (type) {
     case "http":
       if (!opts["url"])
         throw new Error("--url is required for http adapter");
-      return { type: "http", url: opts["url"] };
+      return {
+        type: "http",
+        url: opts["url"],
+        method: parseHttpMethod(opts["method"]),
+        headers: parseHeaders2(opts["headers"]),
+        responseMode: parseResponseMode(opts["responseMode"]),
+        inputPath: opts["inputPath"],
+        outputPath: opts["outputPath"],
+        timeoutMs: parsePositiveInteger(opts["timeoutMs"], "--timeout-ms")
+      };
     case "anthropic":
       if (!opts["model"])
         throw new Error("--model is required for anthropic adapter");
-      return { type: "anthropic", model: opts["model"], systemPrompt: opts["system"] };
+      const anthropicMaxTokens = parsePositiveInteger(opts["maxTokens"], "--max-tokens");
+      return {
+        type: "anthropic",
+        model: opts["model"],
+        systemPrompt: opts["system"],
+        ...anthropicMaxTokens ? { maxTokens: anthropicMaxTokens } : {},
+        ...apiKey ? { apiKey } : {}
+      };
     case "openai":
       if (!opts["model"])
         throw new Error("--model is required for openai adapter");
-      return { type: "openai", model: opts["model"], systemPrompt: opts["system"] };
+      const openAIMaxTokens = parsePositiveInteger(opts["maxTokens"], "--max-tokens");
+      return {
+        type: "openai",
+        model: opts["model"],
+        systemPrompt: opts["system"],
+        ...openAIMaxTokens ? { maxTokens: openAIMaxTokens } : {},
+        baseURL: opts["baseUrl"] ?? opts["url"],
+        ...apiKey ? { apiKey } : {}
+      };
     case "function":
       if (!opts["module"])
         throw new Error("--module is required for function adapter");
@@ -32627,7 +31339,11 @@ function parseAdapterConfig(opts) {
     case "cli":
       if (!opts["command"])
         throw new Error("--command is required for cli adapter");
-      return { type: "cli", command: opts["command"] };
+      return {
+        type: "cli",
+        command: opts["command"],
+        timeoutMs: parsePositiveInteger(opts["timeoutMs"], "--timeout-ms")
+      };
     case "mcp":
       if (!opts["mcpCommand"])
         throw new Error("--mcp-command is required for mcp adapter");
@@ -32636,7 +31352,8 @@ function parseAdapterConfig(opts) {
       return {
         type: "mcp",
         command: opts["mcpCommand"].split(" "),
-        tool: opts["tool"]
+        tool: opts["tool"],
+        timeoutMs: parsePositiveInteger(opts["timeoutMs"], "--timeout-ms")
       };
     default:
       throw new Error(`Unknown adapter type: ${type}. Use: http|anthropic|openai|mcp|function|cli`);
@@ -32645,7 +31362,7 @@ function parseAdapterConfig(opts) {
 
 // src/cli/commands/run.ts
 function runCommand() {
-  return new Command("run").description("Run an eval dataset against your app").argument("<dataset>", "Path to JSONL/JSON dataset or glob pattern").option("--adapter <type>", "Adapter type: http|anthropic|openai|mcp|function|cli", "http").option("--url <url>", "App URL (for http adapter)").option("--model <model>", "Model name (for anthropic/openai adapter)").option("--system <prompt>", "System prompt (for anthropic/openai adapter)").option("--module <path>", "Module path (for function adapter)").option("--export <name>", "Export name (for function adapter, default: default)").option("--command <cmd>", "Shell command (for cli adapter, use {{input}} placeholder)").option("--mcp-command <cmd>", "MCP server command (for mcp adapter)").option("--tool <name>", "MCP tool name (for mcp adapter)").option("--concurrency <n>", "Parallel execution limit", "5").option("--repeat <n>", "Run each case N times (Pass^k metric)", "1").option("--tags <tags>", "Comma-separated tags to filter cases").option("--no-judge", "Skip LLM judge, run assertions only").option("--output <format>", "Output format: terminal|json|markdown", "terminal").option("--save", "Save run to database").option("-j, --json", "Alias for --output json").action(async (dataset, opts) => {
+  return new Command("run").description("Run an eval dataset against your app").argument("<dataset>", "Path to JSONL/JSON dataset or glob pattern").option("--adapter <type>", "Adapter type: http|anthropic|openai|mcp|function|cli", "http").option("--url <url>", "App URL (for http) or OpenAI-compatible base URL").option("--method <method>", "HTTP method: GET|POST|PUT|PATCH").option("--headers <json>", "HTTP headers as a JSON object").option("--response-mode <mode>", "HTTP response parser: json|text").option("--input-path <path>", "HTTP request path for input, e.g. data.query").option("--output-path <path>", "HTTP response path for output, e.g. result.text").option("--timeout-ms <n>", "Adapter timeout in milliseconds").option("--model <model>", "Model name (for anthropic/openai adapter)").option("--max-tokens <n>", "Max output tokens for model adapters").option("--api-key <key>", "Provider API key override").option("--base-url <url>", "OpenAI-compatible base URL").option("--system <prompt>", "System prompt (for anthropic/openai adapter)").option("--api-key-env <name>", "Env var containing provider API key").option("--module <path>", "Module path (for function adapter)").option("--export <name>", "Export name (for function adapter, default: default)").option("--command <cmd>", "Shell command (for cli adapter, use {{input}} placeholder)").option("--mcp-command <cmd>", "MCP server command (for mcp adapter)").option("--tool <name>", "MCP tool name (for mcp adapter)").option("--concurrency <n>", "Parallel execution limit", "5").option("--repeat <n>", "Run each case N times (Pass^k metric)", "1").option("--tags <tags>", "Comma-separated tags to filter cases").option("--no-judge", "Skip LLM judge, run assertions only").option("--output <format>", "Output format: terminal|json|markdown", "terminal").option("--save", "Save run to database").option("-j, --json", "Alias for --output json").action(async (dataset, opts) => {
     const { cases, warnings } = await loadDataset(dataset, {
       tags: opts["tags"] ? opts["tags"].split(",") : undefined
     });
@@ -32685,7 +31402,7 @@ init_loader();
 init_store();
 function ciCommand() {
   const cmd = new Command("ci").description("Run evals in CI mode \u2014 exit non-zero on regression");
-  cmd.command("run <dataset>").description("Run and compare to baseline").option("--adapter <type>", "Adapter type: http|anthropic|openai|mcp|function|cli", "http").option("--url <url>", "App URL (for http adapter)").option("--model <model>", "Model name (for anthropic/openai adapter)").option("--system <prompt>", "System prompt (for anthropic/openai adapter)").option("--module <path>", "Module path (for function adapter)").option("--export <name>", "Export name (for function adapter)").option("--command <cmd>", "Shell command (for cli adapter)").option("--mcp-command <cmd>", "MCP server command (for mcp adapter)").option("--tool <name>", "MCP tool name (for mcp adapter)").option("--no-judge", "Skip LLM judge, assertions only").option("--baseline <name>", "Baseline name to compare against", "main").option("--fail-if-regression <pct>", "Fail if score drops by more than N%", "0").option("--output <format>", "Output format: terminal|markdown", "terminal").option("-j, --json", "Output JSON").action(async (dataset, opts) => {
+  cmd.command("run <dataset>").description("Run and compare to baseline").option("--adapter <type>", "Adapter type: http|anthropic|openai|mcp|function|cli", "http").option("--url <url>", "App URL (for http) or OpenAI-compatible base URL").option("--method <method>", "HTTP method: GET|POST|PUT|PATCH").option("--headers <json>", "HTTP headers as a JSON object").option("--response-mode <mode>", "HTTP response parser: json|text").option("--input-path <path>", "HTTP request path for input, e.g. data.query").option("--output-path <path>", "HTTP response path for output, e.g. result.text").option("--timeout-ms <n>", "Adapter timeout in milliseconds").option("--model <model>", "Model name (for anthropic/openai adapter)").option("--max-tokens <n>", "Max output tokens for model adapters").option("--api-key <key>", "Provider API key override").option("--base-url <url>", "OpenAI-compatible base URL").option("--system <prompt>", "System prompt (for anthropic/openai adapter)").option("--api-key-env <name>", "Env var containing provider API key").option("--module <path>", "Module path (for function adapter)").option("--export <name>", "Export name (for function adapter)").option("--command <cmd>", "Shell command (for cli adapter)").option("--mcp-command <cmd>", "MCP server command (for mcp adapter)").option("--tool <name>", "MCP tool name (for mcp adapter)").option("--no-judge", "Skip LLM judge, assertions only").option("--baseline <name>", "Baseline name to compare against", "main").option("--fail-if-regression <pct>", "Fail if score drops by more than N%", "0").option("--output <format>", "Output format: terminal|markdown", "terminal").option("-j, --json", "Output JSON").action(async (dataset, opts) => {
     const { cases } = await loadDataset(dataset);
     const adapter = parseAdapterConfig(opts);
     const run = await runEvals(cases, { dataset, adapter, skipJudge: opts["judge"] === false || opts["noJudge"] === true });
@@ -32990,14 +31707,14 @@ function kappaLabel(k) {
 }
 
 // src/cli/commands/doctor.ts
-import { existsSync as existsSync3, readFileSync as readFileSync2 } from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync2 } from "fs";
 import { homedir as homedir4 } from "os";
 import { join as join4 } from "path";
-function resolveApiKey(envVar, secretsPath, secretsKey) {
+function resolveApiKey2(envVar, secretsPath, secretsKey) {
   if (process.env[envVar])
     return process.env[envVar];
   const fullPath = join4(homedir4(), ".secrets", secretsPath);
-  if (existsSync3(fullPath)) {
+  if (existsSync4(fullPath)) {
     try {
       const content = readFileSync2(fullPath, "utf8");
       for (const line of content.split(`
@@ -33018,13 +31735,13 @@ function resolveApiKey(envVar, secretsPath, secretsKey) {
 function doctorCommand() {
   return new Command("doctor").description("Health check \u2014 verify API keys, DB, and config").option("-j, --json", "Output JSON").action(async (opts) => {
     const checks = [];
-    const anthropicKey = resolveApiKey("ANTHROPIC_API_KEY", "hasnaxyz/anthropic/live.env", "HASNAXYZ_ANTHROPIC_LIVE_API_KEY");
+    const anthropicKey = resolveApiKey2("ANTHROPIC_API_KEY", "hasnaxyz/anthropic/live.env", "HASNAXYZ_ANTHROPIC_LIVE_API_KEY");
     checks.push({
       name: "ANTHROPIC_API_KEY",
       ok: !!anthropicKey,
       hint: "export ANTHROPIC_API_KEY=<your-key>  (or add to ~/.secrets/hasnaxyz/anthropic/live.env)"
     });
-    const openaiKey = resolveApiKey("OPENAI_API_KEY", "hasnaxyz/openai/live.env", "HASNAXYZ_OPENAI_LIVE_API_KEY");
+    const openaiKey = resolveApiKey2("OPENAI_API_KEY", "hasnaxyz/openai/live.env", "HASNAXYZ_OPENAI_LIVE_API_KEY");
     checks.push({
       name: "OPENAI_API_KEY (optional)",
       ok: !!openaiKey,
@@ -33042,7 +31759,7 @@ function doctorCommand() {
     }
     try {
       const { loadDataset: loadDataset2 } = await Promise.resolve().then(() => (init_loader(), exports_loader));
-      const { existsSync: existsSync4 } = await import("fs");
+      const { existsSync: existsSync5 } = await import("fs");
       const { join: join5 } = await import("path");
       const { homedir: homedir5 } = await import("os");
       const candidates = [
@@ -33052,7 +31769,7 @@ function doctorCommand() {
         join5(import.meta.dir, "../datasets/examples/smoke.jsonl"),
         join5(homedir5(), ".hasna", "evals", "examples", "smoke.jsonl")
       ];
-      const found = candidates.find((p) => existsSync4(p));
+      const found = candidates.find((p) => existsSync5(p));
       if (!found)
         throw new Error("not found");
       const { cases } = await loadDataset2(found);
@@ -33087,7 +31804,7 @@ function doctorCommand() {
 }
 
 // src/cli/commands/mcp.ts
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync2, existsSync as existsSync4 } from "fs";
+import { readFileSync as readFileSync3, writeFileSync as writeFileSync2, existsSync as existsSync5 } from "fs";
 import { homedir as homedir5 } from "os";
 import { join as join5 } from "path";
 function mcpCommand() {
@@ -33113,7 +31830,7 @@ var ENTRY = { command: "/home/hasna/.bun/bin/evals-mcp", args: [] };
 function registerClaude() {
   const mcpPath = join5(homedir5(), ".claude", "mcp.json");
   let config = {};
-  if (existsSync4(mcpPath)) {
+  if (existsSync5(mcpPath)) {
     config = JSON.parse(readFileSync3(mcpPath, "utf8"));
   }
   config.mcpServers = { ...config.mcpServers ?? {}, evals: ENTRY };
@@ -33125,7 +31842,7 @@ function registerClaude() {
 function registerCodex() {
   const cfgPath = join5(homedir5(), ".codex", "config.json");
   let config = {};
-  if (existsSync4(cfgPath)) {
+  if (existsSync5(cfgPath)) {
     config = JSON.parse(readFileSync3(cfgPath, "utf8"));
   }
   config.mcpServers = { ...config.mcpServers ?? {}, evals: { type: "stdio", ...ENTRY, env: {} } };
@@ -33136,7 +31853,7 @@ function registerCodex() {
 function registerGemini() {
   const cfgPath = join5(homedir5(), ".gemini", "settings.json");
   let config = {};
-  if (existsSync4(cfgPath)) {
+  if (existsSync5(cfgPath)) {
     config = JSON.parse(readFileSync3(cfgPath, "utf8"));
   }
   config.mcpServers = { ...config.mcpServers ?? {}, evals: ENTRY };
@@ -33148,14 +31865,62 @@ function registerGemini() {
 // src/cli/commands/capture.ts
 import { createServer } from "http";
 import { appendFileSync, writeFileSync as writeFileSync3 } from "fs";
+function readLatestMessageContent(messages) {
+  if (!Array.isArray(messages))
+    return;
+  const latest = messages.at(-1);
+  if (!latest || typeof latest !== "object")
+    return;
+  const content = latest["content"];
+  return typeof content === "string" ? content : undefined;
+}
+function readOpenAIContent(response) {
+  const choices = response["choices"];
+  if (!Array.isArray(choices))
+    return;
+  const first = choices[0];
+  if (!first || typeof first !== "object")
+    return;
+  const message = first["message"];
+  if (!message || typeof message !== "object")
+    return;
+  const content = message["content"];
+  return typeof content === "string" ? content : undefined;
+}
+function buildCapturedEvalCase(requestBody, responseBody, options = {}) {
+  try {
+    const reqJson = JSON.parse(requestBody);
+    const resJson = JSON.parse(responseBody);
+    const input = String(readLatestMessageContent(reqJson["messages"]) ?? reqJson["input"] ?? requestBody);
+    const responseText = String(readOpenAIContent(resJson) ?? resJson["content"] ?? responseBody);
+    const capturedAt = (options.now ?? new Date).toISOString();
+    const suffix = (options.random ?? Math.random)().toString(36).slice(2, 7);
+    return {
+      id: `captured-${Date.parse(capturedAt)}-${suffix}`,
+      input,
+      expected: "Review and add expected behavior before promoting to eval suite",
+      tags: ["captured", "needs-review"],
+      metadata: {
+        capturedAt,
+        responsePreview: responseText.slice(0, 200)
+      }
+    };
+  } catch {
+    return null;
+  }
+}
+function appendCapturedEvalCase(outputPath, evalCase) {
+  appendFileSync(outputPath, JSON.stringify(evalCase) + `
+`);
+}
 function captureCommand() {
   return new Command("capture").description("Capture production traffic and write to a staging dataset").requiredOption("--app <url>", "Upstream app URL to proxy to").option("--port <n>", "Proxy port", "19441").option("--rate <n>", "Sampling rate 0.0\u20131.0", "0.1").option("--output <path>", "Output JSONL file", "captured.jsonl").action((opts) => {
     const appUrl = opts["app"] ?? "";
     const port = parseInt(opts["port"] ?? "19441");
     const rate = parseFloat(opts["rate"] ?? "0.1");
-    const output = opts["output"] ?? "captured.jsonl";
+    const outputPath = opts["output"] ?? "captured.jsonl";
     let captured = 0;
-    writeFileSync3(output, "");
+    writeFileSync3(outputPath, "");
     const server = createServer(async (req, res) => {
       const body = await new Promise((resolve) => {
         let data = "";
@@ -33173,31 +31938,20 @@ function captureCommand() {
       res.writeHead(upstreamRes.status, Object.fromEntries(upstreamRes.headers));
       res.end(responseBody);
       if (Math.random() < rate) {
-        try {
-          const reqJson = JSON.parse(body);
-          const resJson = JSON.parse(responseBody);
-          const input = String(reqJson["messages"]?.at(-1)?.content ?? reqJson["input"] ?? body);
-          const output2 = String(resJson["choices"]?.[0]?.message?.content ?? resJson["content"] ?? responseBody);
-          const evalCase = {
-            id: `captured-${Date.now()}-${Math.random().toString(36).slice(2, 7)}`,
-            input,
-            expected: "Review and add expected behavior before promoting to eval suite",
-            tags: ["captured", "needs-review"],
-            metadata: { capturedAt: new Date().toISOString(), responsePreview: output2.slice(0, 200) }
-          };
-          appendFileSync(output2, JSON.stringify(evalCase) + `
-`);
+        const evalCase = buildCapturedEvalCase(body, responseBody);
+        if (evalCase) {
+          appendCapturedEvalCase(outputPath, evalCase);
           captured++;
           if (captured % 10 === 0)
-            console.log(`Captured ${captured} cases \u2192 ${output2}`);
-        } catch {}
+            console.log(`Captured ${captured} cases \u2192 ${outputPath}`);
+        }
       }
     });
     server.listen(port, () => {
       console.log(`\x1B[32m\u2713 Capture proxy running on http://localhost:${port}\x1B[0m`);
       console.log(`  Forwarding to: ${appUrl}`);
       console.log(`  Sampling rate: ${(rate * 100).toFixed(0)}%`);
-      console.log(`  Output: ${output}`);
+      console.log(`  Output: ${outputPath}`);
       console.log(`  Ctrl+C to stop
 `);
     });