promptfoo 0.121.8 → 0.121.9

package/dist/src/server/index.js

@@ -1,50 +1,50 @@
 import { t as __exportAll } from "../chunk-DEq-mXcV.js";
-import { C as getEnvFloat, D as getMaxEvalTimeMs, E as getEvalTimeoutMs, O as isCI, S as getEnvBool, T as getEnvString, a as logger, b as summarizeEvaluateResultForLogging, f as sanitizeObject, g as getAjv, h as extractJsonObjects, k as state, m as extractFirstJsonObject, n as globalLogCallback, o as setLogCallback, r as isDebugEnabled, s as setLogLevel, t as getLogLevel, v as orderKeys, w as getEnvInt, y as safeJsonStringify } from "../logger-KD8JjCRJ.js";
-import { F as getDefaultShareViewBaseUrl, I as getShareApiBaseUrl, L as getShareViewBaseUrl, N as TERMINAL_MAX_WIDTH, P as getDefaultPort, R as FILE_METADATA_KEY, S as isPromptfooSampleTarget, T as parseChatPrompt, c as CloudConfig, l as cloudConfig, m as sleep, n as fetchWithRetries, p as getCurrentTimestamp, r as fetchWithTimeout, t as fetchWithProxy, v as REQUEST_TIMEOUT_MS, z as HUMAN_ASSERTION_TYPE } from "../fetch-BSSAcMxf.js";
-import { n as VERSION } from "../version-CHR-EFec.js";
+import { C as getEnvBool, D as getEvalTimeoutMs, E as getEnvString, O as getMaxEvalTimeMs, S as state, T as getEnvInt, a as logger, b as summarizeEvaluateResultForLogging, f as sanitizeObject, g as getAjv, h as extractJsonObjects, k as isCI, m as extractFirstJsonObject, n as globalLogCallback, o as setLogCallback, r as isDebugEnabled, s as setLogLevel, t as getLogLevel, v as orderKeys, w as getEnvFloat, y as safeJsonStringify } from "../logger-BjYLHvGm.js";
+import { F as getDefaultShareViewBaseUrl, I as getShareApiBaseUrl, L as getShareViewBaseUrl, N as TERMINAL_MAX_WIDTH, P as getDefaultPort, R as FILE_METADATA_KEY, S as isPromptfooSampleTarget, T as parseChatPrompt, c as CloudConfig, l as cloudConfig, m as sleep, n as fetchWithRetries, p as getCurrentTimestamp, r as fetchWithTimeout, t as fetchWithProxy, y as getRequestTimeoutMs, z as HUMAN_ASSERTION_TYPE } from "../fetch-CBe8pU8Q.js";
+import { n as VERSION } from "../version-BGiEZvX0.js";
 import { t as invariant } from "../invariant-DIYf9sP1.js";
-import { a as getAuthor, c as isLoggedIntoCloud, l as promptForEmailUnverified, n as checkEmailStatusAndMaybeExit, o as getUserEmail, r as clearUserEmail, s as getUserId, t as checkEmailStatus, u as setUserEmail } from "../accounts-BWjqwsrf.js";
-import { a as safeJoin, r as importModule, t as getDirectory } from "../esm-B6whoAcf.js";
-import { a as extractVariablesFromTemplates, i as extractVariablesFromTemplate, n as renderVarsInObject, o as getNunjucksEngine, r as analyzeTemplateReference, t as renderEnvOnlyInObject } from "../render-_6ur1fhE.js";
-import { t as providerRegistry } from "../providerRegistry-1gB5vtzQ.js";
-import { a as getRemoteHealthUrl, l as shouldGenerateRemote, n as getRemoteGenerationExplicitlyDisabledError, r as getRemoteGenerationUrl, s as neverGenerateRemote } from "../remoteGeneration--D6WjzUm.js";
-import { a as openBrowser, i as checkServerRunning, n as BrowserBehaviorNames, s as promptYesNo, t as BrowserBehavior } from "../server-JQYD_Nws.js";
-import { a as evalResultsTable, c as evalsToPromptsTable, d as promptsTable, f as spansTable, g as getDbSignalPath, h as getDb, i as datasetsTable, l as evalsToTagsTable, m as tracesTable, n as blobReferencesTable, o as evalsTable, p as tagsTable, r as configsTable, s as evalsToDatasetsTable, t as blobAssetsTable, u as modelAuditsTable } from "../tables-CxjU7bBd.js";
-import { $ as MULTI_INPUT_EXCLUDED_PLUGINS, A as STRATEGY_COLLECTIONS, B as ALIASED_PLUGIN_MAPPINGS, E as ALL_STRATEGIES, F as isMultiTurnStrategy, G as DEFAULT_PLUGINS, H as BIAS_PLUGINS, I as Severity, J as HARM_PLUGINS, K as FINANCIAL_PLUGINS, L as categoryAliases, M as getDefaultNFanout, N as isCustomStrategy, O as DEFAULT_STRATEGIES, P as isFanoutStrategy, Q as MEDICAL_PLUGINS, S as StrategyConfigSchema, T as AGENTIC_STRATEGIES, U as CANARY_BREAKING_STRATEGY_IDS, V as ALL_PLUGINS, W as DATASET_EXEMPT_PLUGINS, X as LLAMA_GUARD_ENABLED_CATEGORIES, Y as INSURANCE_PLUGINS, Z as LLAMA_GUARD_REPLICATE_PROVIDER, _ as ProvidersSchema, a as EvaluateOptionsSchema, at as REDTEAM_PROVIDER_HARM_PLUGINS, b as PluginConfigSchema, c as TestSuiteConfigSchema, ct as TEEN_SAFETY_PLUGINS, d as isGradingResult, dt as CODING_AGENT_CORE_PLUGINS, et as MULTI_INPUT_VAR, f as isResultFailureReason, ft as CODING_AGENT_PLUGINS, g as ProviderOptionsSchema, h as RedteamConfigSchema, ht as PromptSchema, i as EvalResultsFilterMode, it as REDTEAM_MODEL, j as STRATEGY_COLLECTION_MAPPINGS, k as MULTI_TURN_STRATEGIES, l as TestSuiteSchema, lt as TELECOM_PLUGINS, m as isProviderOptions, n as BaseAssertionTypesSchema, nt as PII_PLUGINS, ot as REMOTE_ONLY_PLUGIN_IDS, p as isApiProvider, q as FOUNDATION_PLUGINS, r as CommandLineOptionsSchema, rt as PLUGIN_CATEGORIES, s as ResultFailureReason, st as STRATEGY_EXEMPT_PLUGINS, t as AssertionOrSetSchema, tt as PHARMACY_PLUGINS, u as UnifiedConfigSchema, ut as UNALIGNED_PROVIDER_HARM_PLUGINS, v as ConversationMessageSchema, w as isUuid, y as PartialGenerationError, z as riskCategorySeverityMap } from "../types-BJQBBPTP.js";
+import { c as isLoggedIntoCloud, i as getAuthor, l as promptForEmailUnverified, n as checkEmailStatusAndMaybeExit, o as getUserEmail, r as clearUserEmail, s as getUserId, t as checkEmailStatus, u as setUserEmail } from "../accounts-BAajbKSh.js";
+import { a as safeJoin, r as importModule, t as getDirectory } from "../esm-CGER3lko.js";
+import { a as extractVariablesFromTemplates, i as extractVariablesFromTemplate, n as renderVarsInObject, o as getNunjucksEngine, r as analyzeTemplateReference, t as renderEnvOnlyInObject } from "../render-BoxrvB84.js";
+import { t as providerRegistry } from "../providerRegistry-v8Wa3f9z.js";
+import { a as getRemoteHealthUrl, l as shouldGenerateRemote, n as getRemoteGenerationExplicitlyDisabledError, r as getRemoteGenerationUrl, s as neverGenerateRemote } from "../remoteGeneration-CoxtxLvB.js";
+import { a as openBrowser, i as checkServerRunning, n as BrowserBehaviorNames, s as promptYesNo, t as BrowserBehavior } from "../server-8in_Vrrf.js";
+import { a as evalResultsTable, c as evalsToPromptsTable, d as promptsTable, f as spansTable, g as getDbSignalPath, h as getDb, i as datasetsTable, l as evalsToTagsTable, m as tracesTable, n as blobReferencesTable, o as evalsTable, p as tagsTable, r as configsTable, s as evalsToDatasetsTable, t as blobAssetsTable, u as modelAuditsTable } from "../tables-PWOqfbI_.js";
+import { $ as MULTI_INPUT_EXCLUDED_PLUGINS, A as STRATEGY_COLLECTIONS, B as ALIASED_PLUGIN_MAPPINGS, E as ALL_STRATEGIES, F as isMultiTurnStrategy, G as DEFAULT_PLUGINS, H as BIAS_PLUGINS, I as Severity, J as HARM_PLUGINS, K as FINANCIAL_PLUGINS, L as categoryAliases, M as getDefaultNFanout, N as isCustomStrategy, O as DEFAULT_STRATEGIES, P as isFanoutStrategy, Q as MEDICAL_PLUGINS, S as StrategyConfigSchema, T as AGENTIC_STRATEGIES, U as CANARY_BREAKING_STRATEGY_IDS, V as ALL_PLUGINS, W as DATASET_EXEMPT_PLUGINS, X as LLAMA_GUARD_ENABLED_CATEGORIES, Y as INSURANCE_PLUGINS, Z as LLAMA_GUARD_REPLICATE_PROVIDER, _ as ProvidersSchema, a as EvaluateOptionsSchema, at as REDTEAM_PROVIDER_HARM_PLUGINS, b as PluginConfigSchema, c as TestSuiteConfigSchema, ct as TEEN_SAFETY_PLUGINS, d as isGradingResult, dt as CODING_AGENT_CORE_PLUGINS, et as MULTI_INPUT_VAR, f as isResultFailureReason, ft as CODING_AGENT_PLUGINS, g as ProviderOptionsSchema, h as RedteamConfigSchema, ht as PromptSchema, i as EvalResultsFilterMode, it as REDTEAM_MODEL, j as STRATEGY_COLLECTION_MAPPINGS, k as MULTI_TURN_STRATEGIES, l as TestSuiteSchema, lt as TELECOM_PLUGINS, m as isProviderOptions, n as BaseAssertionTypesSchema, nt as PII_PLUGINS, ot as REMOTE_ONLY_PLUGIN_IDS, p as isApiProvider, q as FOUNDATION_PLUGINS, r as CommandLineOptionsSchema, rt as PLUGIN_CATEGORIES, s as ResultFailureReason, st as STRATEGY_EXEMPT_PLUGINS, t as AssertionOrSetSchema, tt as PHARMACY_PLUGINS, u as UnifiedConfigSchema, ut as UNALIGNED_PROVIDER_HARM_PLUGINS, v as ConversationMessageSchema, w as isUuid, y as PartialGenerationError, z as riskCategorySeverityMap } from "../types-uLCKnRiK.js";
 import { a as isImageFile, i as isAudioFile, o as isJavascriptFile, s as isVideoFile } from "../shared-BoG7qLMv.js";
 import { n as sha256, t as randomSequence } from "../createHash-CGVzWdjj.js";
-import { a as generateIdFromPrompt, t as hashPrompt } from "../utils-B0lzitHZ.js";
-import { c as NON_TRANSIENT_HTTP_STATUSES, i as getCache, l as isNonTransientHttpStatus, n as disableCache, r as fetchWithCache, s as withCacheNamespace, t as cache_exports } from "../cache-CrioYnaa.js";
+import { a as generateIdFromPrompt, t as hashPrompt } from "../utils-DMWnIu_V.js";
+import { c as NON_TRANSIENT_HTTP_STATUSES, i as getCache, l as isNonTransientHttpStatus, n as disableCache, r as fetchWithCache, s as withCacheNamespace, t as cache_exports } from "../cache-x9llZxbx.js";
 import { a as createEmptyTokenUsage, i as createEmptyAssertions, n as accumulateResponseTokenUsage, o as normalizeTokenUsage, r as accumulateTokenUsage, t as accumulateAssertionTokenUsage } from "../tokenUsageUtils-BjVkdk18.js";
-import { n as getBlobUrl, t as getBlobByHash } from "../blobs-CeFdPn_T.js";
-import { n as isBlobStorageEnabled, t as extractAndStoreBinaryData } from "../extractor-Jp53vs-6.js";
-import { a as storeMedia, c as getEvalConfigFromCloud, h as resolveTeamId, i as retrieveMedia, l as getOrgContext, m as makeRequest$1, n as isMediaStorageEnabled, o as checkCloudPermissions, p as isCloudProvider, r as mediaExists, s as getCloudDatabaseId, t as getMediaStorage, u as getPluginSeverityOverridesFromCloud } from "../storage-95htjpLs.js";
-import { n as telemetry, t as TelemetryEventSchema } from "../telemetry-BbpmrenM.js";
-import { r as runPython } from "../pythonUtils-CLCgQ9tt.js";
-import { A as maybeLoadConfigFromExternalFile, C as isProviderAllowed, E as normalizeProviderRef, I as readFilters, L as readOutput, P as maybeLoadToolsFromExternalFile, R as loadFunction, S as isOpenAiProvider, _ as checkProviderApiKeys, a as evalTableToJson, b as isAnthropicProvider, c as getEvalTablePromptStrippedPayload, d as setupEnv, f as deduplicateTestCases, g as resultIsForTestCase, h as getTestCaseDeduplicationKey, i as ComparisonEvalNotFoundError, j as maybeLoadFromExternalFile, l as mergeComparisonTables, m as filterRuntimeVars, n as writeMultipleOutputs, o as generateEvalCsv, p as extractRuntimeVars, r as writeOutput, s as getEvalTableOutputPromptLocationsBySize, t as printBorder, u as fetchCsvFromGoogleSheet, v as doesProviderRefMatch, x as isGoogleProvider, y as getProviderDescription, z as parseFileUrl } from "../util-DwNJzqOV.js";
-import { t as OpenAiChatCompletionProvider } from "../chat-BSos6PvZ.js";
-import { h as validateFunctionCall } from "../transform-BufxPIQL.js";
-import { $ as SUGGEST_PROMPTS_SYSTEM_MESSAGE, A as ExcessiveAgencyPlugin, At as DEFAULT_ANTHROPIC_MODEL, B as isGraderFailure, C as PlinyPlugin, Ct as getGradingProvider, D as ImitationPlugin, Dt as retryWithDeduplication, E as IntentPlugin, Et as getCustomPolicies, F as BeavertailsPlugin, G as matchesPiScore, H as matchesFactuality, I as AegisPlugin, J as processPrompts, K as matchesTrajectoryGoalSuccess, L as RedteamGraderBase, M as DebugAccessPlugin, N as CrossSessionLeakPlugin, O as HarmbenchPlugin, Ot as sampleArray, P as ContractPlugin, Q as SELECT_BEST_PROMPT, R as RedteamPluginBase, S as makeInlinePolicyIdSync, St as getAndCheckProvider, T as OverreliancePlugin, Tt as withProviderCallExecutionContext, U as matchesGEval, V as matchesClosedQa, W as matchesLlmRubric, X as readProviderPromptMap, Y as readPrompts, Z as DEFAULT_WEB_SEARCH_PROMPT, _ as PromptExtractionPlugin, _t as coerceString, a as VLGuardPlugin, at as CONTEXT_RECALL_NOT_ATTRIBUTED_TOKEN, b as determinePolicyTypeFromId, bt as processFileReference, c as ToxicChatPlugin, ct as loadRubricPrompt, d as TeenSafetyDangerousRoleplayPlugin, dt as dotProduct, et as ANSWER_RELEVANCY_GENERATE, f as TeenSafetyDangerousContentPlugin, ft as euclideanDistance, g as RbacPlugin, gt as tryParse, h as ShellInjectionPlugin, ht as splitIntoSentences, i as VLSUPlugin, it as CONTEXT_RECALL_ATTRIBUTED_TOKEN, j as DivergentRepetitionPlugin, k as HallucinationPlugin, kt as getDefaultProviders, l as ToolDiscoveryPlugin, lt as renderLlmRubricPrompt, m as SqlInjectionPlugin, mt as normalizeMatcherTokenUsage, n as getGraderById, nt as CONTEXT_FAITHFULNESS_NLI_STATEMENTS, o as UnverifiableClaimsPlugin, ot as CONTEXT_RELEVANCE, p as TeenSafetyAgeRestrictedGoodsAndServicesPlugin, pt as fail, q as doRemoteGrading, rt as CONTEXT_RECALL, s as UnsafeBenchPlugin, st as CONTEXT_RELEVANCE_BAD, t as GRADERS, tt as CONTEXT_FAITHFULNESS_LONGFORM, u as TeenSafetyHarmfulBodyIdealsPlugin, ut as cosineSimilarity, v as PoliticsPlugin, vt as getFinalTest, w as getPiiLeakTestsForCategory, wt as getProviderCallExecutionContext, x as isValidPolicyObject, xt as callProviderWithContext, y as PolicyPlugin, yt as loadFromJavaScriptFile, z as fetchHuggingFaceDataset } from "../graders-DaRU98zs.js";
-import { a as resolveProvider, b as AIStudioChatProvider, d as createTransformRequest, f as createTransformResponse, l as MCPProvider, n as loadApiProvider, o as resolveProviderConfigs, p as GoogleLiveProvider, r as loadApiProviders, t as getProviderIds, u as HttpProvider, y as VertexChatProvider } from "../providers-iH3Sw1yo.js";
-import { l as validateFunctionCall$1 } from "../util-o2Qg5rZv.js";
+import { n as getBlobUrl, t as getBlobByHash } from "../blobs-ikh75MtF.js";
+import { n as isBlobStorageEnabled, t as extractAndStoreBinaryData } from "../extractor-DAnauX2V.js";
+import { a as storeMedia, c as getEvalConfigFromCloud, h as resolveTeamId, i as retrieveMedia, l as getOrgContext, m as makeRequest$1, n as isMediaStorageEnabled, o as checkCloudPermissions, p as isCloudProvider, r as mediaExists, s as getCloudDatabaseId, t as getMediaStorage, u as getPluginSeverityOverridesFromCloud } from "../storage-BC9TzmHh.js";
+import { n as telemetry, t as TelemetryEventSchema } from "../telemetry-D3yQCekN.js";
+import { r as runPython } from "../pythonUtils-CBe7VV6f.js";
+import { A as maybeLoadConfigFromExternalFile, C as isProviderAllowed, E as normalizeProviderRef, I as readFilters, L as readOutput, P as maybeLoadToolsFromExternalFile, R as loadFunction, S as isOpenAiProvider, _ as checkProviderApiKeys, a as evalTableToJson, b as isAnthropicProvider, c as getEvalTablePromptStrippedPayload, d as setupEnv, f as deduplicateTestCases, g as resultIsForTestCase, h as getTestCaseDeduplicationKey, i as ComparisonEvalNotFoundError, j as maybeLoadFromExternalFile, l as mergeComparisonTables, m as filterRuntimeVars, n as writeMultipleOutputs, o as generateEvalCsv, p as extractRuntimeVars, r as writeOutput, s as getEvalTableOutputPromptLocationsBySize, t as printBorder, u as fetchCsvFromGoogleSheet, v as doesProviderRefMatch, x as isGoogleProvider, y as getProviderDescription, z as parseFileUrl } from "../util-BGfk7zh7.js";
+import { t as OpenAiChatCompletionProvider } from "../chat-CvQMD-mp.js";
+import { h as validateFunctionCall } from "../transform-D7QlmswG.js";
+import { $ as SUGGEST_PROMPTS_SYSTEM_MESSAGE, A as ExcessiveAgencyPlugin, At as DEFAULT_ANTHROPIC_MODEL, B as isGraderFailure, C as PlinyPlugin, Ct as getGradingProvider, D as ImitationPlugin, Dt as retryWithDeduplication, E as IntentPlugin, Et as getCustomPolicies, F as BeavertailsPlugin, G as matchesPiScore, H as matchesFactuality, I as AegisPlugin, J as processPrompts, K as matchesTrajectoryGoalSuccess, L as RedteamGraderBase, M as DebugAccessPlugin, N as CrossSessionLeakPlugin, O as HarmbenchPlugin, Ot as sampleArray, P as ContractPlugin, Q as SELECT_BEST_PROMPT, R as RedteamPluginBase, S as makeInlinePolicyIdSync, St as getAndCheckProvider, T as OverreliancePlugin, Tt as withProviderCallExecutionContext, U as matchesGEval, V as matchesClosedQa, W as matchesLlmRubric, X as readProviderPromptMap, Y as readPrompts, Z as DEFAULT_WEB_SEARCH_PROMPT, _ as PromptExtractionPlugin, _t as coerceString, a as VLGuardPlugin, at as CONTEXT_RECALL_NOT_ATTRIBUTED_TOKEN, b as determinePolicyTypeFromId, bt as processFileReference, c as ToxicChatPlugin, ct as loadRubricPrompt, d as TeenSafetyDangerousRoleplayPlugin, dt as dotProduct, et as ANSWER_RELEVANCY_GENERATE, f as TeenSafetyDangerousContentPlugin, ft as euclideanDistance, g as RbacPlugin, gt as tryParse, h as ShellInjectionPlugin, ht as splitIntoSentences, i as VLSUPlugin, it as CONTEXT_RECALL_ATTRIBUTED_TOKEN, j as DivergentRepetitionPlugin, k as HallucinationPlugin, kt as getDefaultProviders, l as ToolDiscoveryPlugin, lt as renderLlmRubricPrompt, m as SqlInjectionPlugin, mt as normalizeMatcherTokenUsage, n as getGraderById, nt as CONTEXT_FAITHFULNESS_NLI_STATEMENTS, o as UnverifiableClaimsPlugin, ot as CONTEXT_RELEVANCE, p as TeenSafetyAgeRestrictedGoodsAndServicesPlugin, pt as fail, q as doRemoteGrading, rt as CONTEXT_RECALL, s as UnsafeBenchPlugin, st as CONTEXT_RELEVANCE_BAD, t as GRADERS, tt as CONTEXT_FAITHFULNESS_LONGFORM, u as TeenSafetyHarmfulBodyIdealsPlugin, ut as cosineSimilarity, v as PoliticsPlugin, vt as getFinalTest, w as getPiiLeakTestsForCategory, wt as getProviderCallExecutionContext, x as isValidPolicyObject, xt as callProviderWithContext, y as PolicyPlugin, yt as loadFromJavaScriptFile, z as fetchHuggingFaceDataset } from "../graders-k8qmhrPu.js";
+import { a as resolveProvider, b as AIStudioChatProvider, d as createTransformRequest, f as createTransformResponse, l as MCPProvider, n as loadApiProvider, o as resolveProviderConfigs, p as GoogleLiveProvider, r as loadApiProviders, t as getProviderIds, u as HttpProvider, y as VertexChatProvider } from "../providers-DDLQc0tl.js";
+import { l as validateFunctionCall$1 } from "../util-C6d3eV0A.js";
 import { t as ellipsize } from "../text-CZr46tp_.js";
 import { t as getProcessShim } from "../processShim-C_z3aRvF.js";
-import { n as loadFromPackage, t as isPackagePath } from "../packageParser-hwwSGnAZ.js";
-import { n as runRuby } from "../rubyUtils-DdGojpfv.js";
-import { n as createPlaceholderInputValue, t as buildPromptInputDescriptions } from "../inputVariables-B0qUChbV.js";
-import { a as extractPromptFromTags, c as isBasicRefusal, i as extractMaterializedVariablesFromJsonWithMetadata, n as extractGoalFromPrompt, o as getSessionId, s as getShortPluginId } from "../util-DGqkTb2-.js";
-import { a as assertRemoteMaterializationHandled, l as requiresRemoteMaterialization, n as PromptfooHarmfulCompletionProvider } from "../promptfoo-CReYAtfb.js";
-import { f as redteamProviderManager, g as createProviderRateLimitOptions, h as createRateLimitRegistry, m as TokenUsageTracker } from "../shared-CRq0gGVf.js";
-import { a as getTransformLabel, i as getTransformErrorMessage, n as TRANSFORM_KEYS, o as transform, r as TransformInputType, t as INLINE_FUNCTION_LABEL } from "../transform-CrPGTsij.js";
-import { i as throwIfTargetPromptExceedsMaxChars, n as getGeneratedPromptOverLimit, r as getMaxCharsPerMessageModifierValue, t as MAX_CHARS_PER_MESSAGE_MODIFIER_KEY } from "../promptLength-0qIHyhA5.js";
-import { n as checkExfilTracking, t as addIndirectWebPwnTestCases } from "../indirectWebPwn-BZFPV7Q9.js";
+import { n as loadFromPackage, t as isPackagePath } from "../packageParser-D7YWfcSe.js";
+import { n as runRuby } from "../rubyUtils-DFzPvVD4.js";
+import { n as createPlaceholderInputValue, t as buildPromptInputDescriptions } from "../inputVariables-DpOsOnzU.js";
+import { a as extractPromptFromTags, c as isBasicRefusal, i as extractMaterializedVariablesFromJsonWithMetadata, n as extractGoalFromPrompt, o as getSessionId, s as getShortPluginId } from "../util-CKZReNsz.js";
+import { a as assertRemoteMaterializationHandled, l as requiresRemoteMaterialization, n as PromptfooHarmfulCompletionProvider } from "../promptfoo-DVKqidd8.js";
+import { f as redteamProviderManager, g as createProviderRateLimitOptions, h as createRateLimitRegistry, m as TokenUsageTracker } from "../shared-yBQATkD5.js";
+import { a as getTransformLabel, i as getTransformErrorMessage, n as TRANSFORM_KEYS, o as transform, r as TransformInputType, t as INLINE_FUNCTION_LABEL } from "../transform-C5rpIuDz.js";
+import { i as throwIfTargetPromptExceedsMaxChars, n as getGeneratedPromptOverLimit, r as getMaxCharsPerMessageModifierValue, t as MAX_CHARS_PER_MESSAGE_MODIFIER_KEY } from "../promptLength-5B4_P93z.js";
+import { n as checkExfilTracking, t as addIndirectWebPwnTestCases } from "../indirectWebPwn-DRYpRTx6.js";
 import dotenv from "dotenv";
-import { AsyncResource } from "node:async_hooks";
 import * as fs$3 from "fs";
 import fs, { createWriteStream, existsSync, readFileSync } from "fs";
 import * as path$2 from "path";
 import path, { join, parse } from "path";
 import chalk from "chalk";
+import { AsyncResource } from "node:async_hooks";
 import * as os$1 from "os";
 import os, { homedir } from "os";
 import yaml from "js-yaml";
@@ -4691,7 +4691,7 @@ async function startOtlpReceiverIfNeeded(testSuite) {
 		telemetry.record("feature_used", { feature: "tracing" });
 		try {
 			logger.debug("[EvaluatorTracing] Tracing configuration detected, starting OTLP receiver");
-			const { startOTLPReceiver } = await import("../otlpReceiver-B2eaKC8C.js");
+			const { startOTLPReceiver } = await import("../otlpReceiver-BkB7tsTT.js");
 			const port = testSuite.tracing.otlp.http.port || 4318;
 			const host = testSuite.tracing.otlp.http.host || "127.0.0.1";
 			const acceptFormats = normalizeOtlpAcceptFormats(testSuite.tracing.otlp.http.acceptFormats);
@@ -4715,7 +4715,7 @@ async function startOtlpReceiverIfNeeded(testSuite) {
 async function stopOtlpReceiverIfNeeded() {
 	if (otlpReceiverStarted) try {
 		logger.debug("[EvaluatorTracing] Stopping OTLP receiver");
-		const { stopOTLPReceiver } = await import("../otlpReceiver-B2eaKC8C.js");
+		const { stopOTLPReceiver } = await import("../otlpReceiver-BkB7tsTT.js");
 		await stopOTLPReceiver();
 		otlpReceiverStarted = false;
 		logger.info("[EvaluatorTracing] OTLP receiver stopped successfully");
@@ -7045,7 +7045,7 @@ async function loadWebSearchProvider(preferAnthropic = false) {
 	};
 	const loadOpenAIWebSearch = async () => {
 		try {
-			return await loadApiProvider("openai:responses:gpt-5.4-2026-03-05", { options: { config: { tools: [{ type: "web_search_preview" }] } } });
+			return await loadApiProvider("openai:responses:gpt-5.5-2026-04-23", { options: { config: { tools: [{ type: "web_search_preview" }] } } });
 		} catch (err) {
 			logger.debug(`Failed to load OpenAI web search provider: ${err}`);
 			return null;
@@ -8396,7 +8396,7 @@ async function runAssertion({ prompt, provider, assertion, test, vars, latencyMs
 			};
 		}
 		else if (filePath.endsWith(".rb")) try {
-			const { runRuby } = await import("../rubyUtils-DdGojpfv.js").then((n) => n.t);
+			const { runRuby } = await import("../rubyUtils-DFzPvVD4.js").then((n) => n.t);
 			valueFromScript = await runRuby(filePath, functionName || "get_assert", [output, context]);
 			logger.debug(`Ruby script ${filePath} output: ${valueFromScript}`);
 		} catch (error) {
@@ -10722,7 +10722,7 @@ async function resolveDefaultTestProvider(defaultTest, testCase) {
 	const defaultProvider = defaultTest.provider;
 	if (isApiProvider(defaultProvider)) return defaultProvider;
 	if (typeof defaultProvider === "object" && defaultProvider.id) {
-		const { loadApiProvider } = await import("../providers-iH3Sw1yo.js").then((n) => n.i);
+		const { loadApiProvider } = await import("../providers-DDLQc0tl.js").then((n) => n.i);
 		return loadApiProvider(typeof defaultProvider.id === "function" ? defaultProvider.id() : defaultProvider.id, { options: defaultProvider });
 	}
 	return defaultProvider;
@@ -13813,7 +13813,7 @@ async function fetchRemoteGeneration(task, prompts) {
 			method: "POST",
 			headers: { "Content-Type": "application/json" },
 			body: JSON.stringify(body)
-		}, REQUEST_TIMEOUT_MS, "json");
+		}, getRequestTimeoutMs(), "json");
 		return RedTeamGenerationResponse.parse(response.data).result;
 	} catch (error) {
 		logger.warn(`Error using remote generation for task '${task}': ${error}`);
@@ -13986,7 +13986,7 @@ const DATASET_URL$2 = `https://raw.githubusercontent.com/promptfoo/promptfoo/ref
 const DATASET_URL_MULTILINGUAL = `https://raw.githubusercontent.com/promptfoo/promptfoo/refs/tags/${DATASET_VERSION}/examples/cyberseceval/prompt_injection_multilingual.json`;
 async function fetchDataset$2(limit, isMultilingual) {
 	try {
-		const response = await fetchWithTimeout(isMultilingual ? DATASET_URL_MULTILINGUAL : DATASET_URL$2, {}, REQUEST_TIMEOUT_MS);
+		const response = await fetchWithTimeout(isMultilingual ? DATASET_URL_MULTILINGUAL : DATASET_URL$2, {}, getRequestTimeoutMs());
 		if (!response.ok) throw new Error(`[CyberSecEval] HTTP status: ${response.status} ${response.statusText}`);
 		const data = await response.json();
 		if (!data || !Array.isArray(data)) throw new Error(`[CyberSecEval] Invalid response from ${DATASET_URL$2}`);
@@ -14054,7 +14054,7 @@ async function fetchDataset$1(limit) {
 		logger.debug(`[DoNotAnswer] Fetching dataset from ${DATASET_URL$1}`);
 		let csvData;
 		if (DATASET_URL$1.startsWith("http")) {
-			const response = await fetchWithTimeout(DATASET_URL$1, {}, REQUEST_TIMEOUT_MS);
+			const response = await fetchWithTimeout(DATASET_URL$1, {}, getRequestTimeoutMs());
 			if (!response.ok) throw new Error(`[DoNotAnswer] HTTP status: ${response.status} ${response.statusText}`);
 			csvData = await response.text();
 		} else try {
@@ -14589,7 +14589,7 @@ async function fetchDataset(limit) {
 		logger.debug(`[XSTest] Fetching dataset from ${DATASET_URL}`);
 		let csvData;
 		if (DATASET_URL.startsWith("http")) {
-			const response = await fetchWithTimeout(DATASET_URL, {}, REQUEST_TIMEOUT_MS);
+			const response = await fetchWithTimeout(DATASET_URL, {}, getRequestTimeoutMs());
 			if (!response.ok) throw new Error(`[XSTest] HTTP status: ${response.status} ${response.statusText}`);
 			csvData = await response.text();
 		} else try {
@@ -14867,7 +14867,7 @@ async function fetchRemoteTestCases(key, purpose, injectVar, n, config) {
 			method: "POST",
 			headers: { "Content-Type": "application/json" },
 			body
-		}, REQUEST_TIMEOUT_MS);
+		}, getRequestTimeoutMs());
 		if (status !== 200 || !data || !data.result || !Array.isArray(data.result)) {
 			logger.error(`Error generating test cases for ${key}: ${statusText} ${JSON.stringify(data)}`);
 			return [];
@@ -15212,7 +15212,7 @@ async function generateCitations(testCases, injectVar, config) {
 				method: "POST",
 				headers: { "Content-Type": "application/json" },
 				body: JSON.stringify(payload)
-			}, REQUEST_TIMEOUT_MS);
+			}, getRequestTimeoutMs());
 			logger.debug(`Got remote citation generation result for case ${Number(index) + 1}: ${JSON.stringify(data)}`);
 			if (data.error) {
 				logger.error(`[Citation] Error in citation generation: ${data.error}`);
@@ -15360,7 +15360,7 @@ async function generateGcgPrompts(testCases, injectVar, config) {
 					"x-promptfoo-silent": "true"
 				},
 				body: JSON.stringify(payload)
-			}, REQUEST_TIMEOUT_MS, "json", true);
+			}, getRequestTimeoutMs(), "json", true);
 			logger.debug("[GCG] Got generation result", {
 				caseNumber,
 				hasError: Boolean(data.error),
@@ -15922,7 +15922,7 @@ async function generateLikertPrompts(testCases, injectVar, config) {
 				method: "POST",
 				headers: { "Content-Type": "application/json" },
 				body: JSON.stringify(payload)
-			}, REQUEST_TIMEOUT_MS);
+			}, getRequestTimeoutMs());
 			logger.debug(`Got Likert jailbreak generation result for case ${Number(index) + 1}: ${JSON.stringify(data)}`);
 			if (data.error || !data.modifiedPrompts) {
 				logger.error(`[jailbreak:likert] Error in Likert generation: ${data.error}}`);
@@ -16007,7 +16007,7 @@ async function generateMathPrompt(testCases, injectVar, config) {
 				method: "POST",
 				headers: { "Content-Type": "application/json" },
 				body: JSON.stringify(payload)
-			}, REQUEST_TIMEOUT_MS);
+			}, getRequestTimeoutMs());
 			logger.debug(`Got remote MathPrompt generation result for batch ${Number(index) + 1}: ${JSON.stringify(data)}`);
 			allResults = allResults.concat(data.result);
 			processedBatches++;
@@ -16591,7 +16591,7 @@ async function textToAudio(text, language = "en", options) {
 			method: "POST",
 			headers: { "Content-Type": "application/json" },
 			body: JSON.stringify(payload)
-		}, REQUEST_TIMEOUT_MS);
+		}, getRequestTimeoutMs());
 		if (data.error || !data.audioBase64) throw new Error(`Error in remote audio generation: ${data.error || "No audio data returned"}`);
 		logger.debug(`Received audio base64 from remote API (${data.audioBase64.length} chars)`);
 		const base64Audio = data.audioBase64;
@@ -17021,7 +17021,7 @@ async function generateCompositePrompts(testCases, injectVar, config) {
 				method: "POST",
 				headers: { "Content-Type": "application/json" },
 				body: JSON.stringify(payload)
-			}, REQUEST_TIMEOUT_MS);
+			}, getRequestTimeoutMs());
 			logger.debug(`Got composite jailbreak generation result for case ${Number(index) + 1}: ${JSON.stringify(data)}`);
 			if (data.error || !data.modifiedPrompts) {
 				logger.error(`[jailbreak:composite] Error in composite generation: ${data.error}}`);
@@ -19790,7 +19790,7 @@ async function doEval(cmdObj, defaultConfig, defaultConfigPath, evaluateOptions)
 		const passRate = successes / totalTests * 100;
 		if (cmdObj.table && getLogLevel() !== "debug" && totalTests < 500) {
 			const table = await evalRecord.getTable();
-			const outputTable = generateTable(table);
+			const outputTable = generateTable(table, cmdObj.tableCellMaxLength ?? commandLineOptions?.tableCellMaxLength);
 			logger.info("\n" + outputTable.toString());
 			if (table.body.length > 25) {
 				const rowsLeft = table.body.length - 25;
@@ -23264,7 +23264,7 @@ async function handleGoatStrategy(ctx) {
 		method: "POST",
 		headers: { "Content-Type": "application/json" },
 		body: JSON.stringify(goatBody)
-	}, REQUEST_TIMEOUT_MS);
+	}, getRequestTimeoutMs());
 	if (!response.ok) throw new Error(`GOAT task failed with status ${response.status}: ${await response.text()}`);
 	const data = await response.json();
 	const attackerMessage = data?.message;
@@ -23295,7 +23295,7 @@ async function handleMischievousUserStrategy(ctx) {
 		method: "POST",
 		headers: { "Content-Type": "application/json" },
 		body: JSON.stringify(mischievousBody)
-	}, REQUEST_TIMEOUT_MS);
+	}, getRequestTimeoutMs());
 	if (!response.ok) throw new Error(`Mischievous User task failed with status ${response.status}: ${await response.text()}`);
 	const data = await response.json();
 	const result = data?.result;
@@ -23352,7 +23352,7 @@ async function handleHydraStrategy(ctx) {
 		method: "POST",
 		headers: { "Content-Type": "application/json" },
 		body: JSON.stringify(hydraBody)
-	}, REQUEST_TIMEOUT_MS);
+	}, getRequestTimeoutMs());
 	if (!response.ok) throw new Error(`Hydra task failed with status ${response.status}: ${await response.text()}`);
 	const data = await response.json();
 	const rawResult = data?.result;
@@ -23403,7 +23403,7 @@ async function handleCrescendoLikeStrategy(ctx) {
 		method: "POST",
 		headers: { "Content-Type": "application/json" },
 		body: JSON.stringify(providerRequest)
-	}, REQUEST_TIMEOUT_MS);
+	}, getRequestTimeoutMs());
 	if (!response.ok) throw new Error(`Crescendo task failed with status ${response.status}: ${await response.text()}`);
 	const data = await response.json();
 	const rawResult = data?.result;
@@ -24051,7 +24051,7 @@ router.get("/", async (_req, res) => {
 				};
 			} catch (error) {
 				logger.debug(`Failed to fetch latest version: ${error}`);
-				latestVersion = versionCache.latestVersion ?? "0.121.8";
+				latestVersion = versionCache.latestVersion ?? "0.121.9";
 			}
 		}
 		const selfHosted = getEnvBool("PROMPTFOO_SELF_HOSTED");
@@ -24060,7 +24060,7 @@ router.get("/", async (_req, res) => {
 			selfHosted,
 			isNpx
 		});
-		const resolvedLatestVersion = latestVersion ?? "0.121.8";
+		const resolvedLatestVersion = latestVersion ?? "0.121.9";
 		const response = {
 			currentVersion: VERSION,
 			latestVersion: resolvedLatestVersion,

package/dist/src/{server-DLYjSFm2.js → server-4wx571OM.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { s as logger } from "./logger-BbY6ypFL.js";
-import { N as getDefaultPort, n as fetchWithProxy } from "./fetch-Cpf1U1nO.js";
-import "./version-F0YDgb7J.js";
-import { o as getRemoteVersionUrl } from "./remoteGeneration-D6UjE2JT.js";
+import { s as logger } from "./logger-h-eiS4iv.js";
+import { N as getDefaultPort, n as fetchWithProxy } from "./fetch-C59QM4cf.js";
+import "./version-CnYqmWbz.js";
+import { o as getRemoteVersionUrl } from "./remoteGeneration-DW6mPZnO.js";
 import chalk from "chalk";
 import opener from "opener";
 import readline from "readline";
@@ -109,7 +109,7 @@ async function checkServerRunning(port = getDefaultPort()) {
 	logger.debug(`Checking for existing server on port ${port}...`);
 	try {
 		const data = await (await fetchWithProxy(`http://localhost:${port}/health`, { headers: { "x-promptfoo-silent": "true" } })).json();
-		return data.status === "OK" && data.version === "0.121.8";
+		return data.status === "OK" && data.version === "0.121.9";
 	} catch (err) {
 		logger.debug(`No existing server found - this is expected on first startup. ${String(err)}`);
 		return false;
@@ -179,4 +179,4 @@ async function openAuthBrowser(authUrl, welcomeUrl, browserBehavior) {
 //#endregion
 export { openAuthBrowser as a, promptYesNo as c, checkServerRunning as i, BrowserBehaviorNames as n, openBrowser as o, checkServerFeatureSupport as r, promptUser as s, BrowserBehavior as t };
 
-//# sourceMappingURL=server-DLYjSFm2.js.map
+//# sourceMappingURL=server-4wx571OM.js.map

package/dist/src/{server-JQYD_Nws.js → server-8in_Vrrf.js}

@@ -1,8 +1,8 @@
 import { t as __exportAll } from "./chunk-DEq-mXcV.js";
-import { a as logger } from "./logger-KD8JjCRJ.js";
-import { P as getDefaultPort, t as fetchWithProxy } from "./fetch-BSSAcMxf.js";
-import "./version-CHR-EFec.js";
-import { o as getRemoteVersionUrl } from "./remoteGeneration--D6WjzUm.js";
+import { a as logger } from "./logger-BjYLHvGm.js";
+import { P as getDefaultPort, t as fetchWithProxy } from "./fetch-CBe8pU8Q.js";
+import "./version-BGiEZvX0.js";
+import { o as getRemoteVersionUrl } from "./remoteGeneration-CoxtxLvB.js";
 import "chalk";
 import opener from "opener";
 import readline from "readline";
@@ -116,7 +116,7 @@ async function checkServerRunning(port = getDefaultPort()) {
 	logger.debug(`Checking for existing server on port ${port}...`);
 	try {
 		const data = await (await fetchWithProxy(`http://localhost:${port}/health`, { headers: { "x-promptfoo-silent": "true" } })).json();
-		return data.status === "OK" && data.version === "0.121.8";
+		return data.status === "OK" && data.version === "0.121.9";
 	} catch (err) {
 		logger.debug(`No existing server found - this is expected on first startup. ${String(err)}`);
 		return false;
@@ -143,4 +143,4 @@ async function openBrowser(browserBehavior, port = getDefaultPort()) {
 //#endregion
 export { openBrowser as a, checkServerRunning as i, BrowserBehaviorNames as n, server_exports as o, checkServerFeatureSupport as r, promptYesNo as s, BrowserBehavior as t };
 
-//# sourceMappingURL=server-JQYD_Nws.js.map
+//# sourceMappingURL=server-8in_Vrrf.js.map

package/dist/src/server-BHd6SQYX.js

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+import { r as checkServerFeatureSupport } from "./server-4wx571OM.js";
+export { checkServerFeatureSupport };

package/dist/src/{server-CbiJppij.js → server-pMTgWs3M.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./chunk-DEq-mXcV.js";
-import { a as logger } from "./logger-Ct2S6Yx-.js";
-import { t as fetchWithProxy } from "./fetch-Doks14zQ.js";
-import { o as getRemoteVersionUrl } from "./remoteGeneration-CJC3E0aW.js";
+import { a as logger } from "./logger-Cs0I2v_y.js";
+import { t as fetchWithProxy } from "./fetch-CHJu2KON.js";
+import { o as getRemoteVersionUrl } from "./remoteGeneration-DvWEm3yi.js";
 import "chalk";
 import "opener";
 import readline from "readline";
@@ -104,4 +104,4 @@ async function checkServerFeatureSupport(featureName, requiredBuildDate) {
 //#endregion
 export { server_exports as n, promptYesNo as r, checkServerFeatureSupport as t };
 
-//# sourceMappingURL=server-CbiJppij.js.map
+//# sourceMappingURL=server-pMTgWs3M.js.map

package/dist/src/{server-BHOEL8p8.cjs → server-yHhoBx98.cjs}

@@ -1,7 +1,7 @@
 const require_rolldown_runtime = require("./rolldown-runtime-D_mwlA32.cjs");
-const require_logger = require("./logger-cfNpzI4o.cjs");
-const require_fetch = require("./fetch-Cfm4EuOB.cjs");
-const require_remoteGeneration = require("./remoteGeneration-BpIYlb_O.cjs");
+const require_logger = require("./logger-Cm0Nb8YX.cjs");
+const require_fetch = require("./fetch-B2HvaVUc.cjs");
+const require_remoteGeneration = require("./remoteGeneration-CD3c_rzc.cjs");
 let chalk = require("chalk");
 chalk = require_rolldown_runtime.__toESM(chalk, 1);
 require("opener");
@@ -123,4 +123,4 @@ Object.defineProperty(exports, "server_exports", {
 	}
 });
 
-//# sourceMappingURL=server-BHOEL8p8.cjs.map
+//# sourceMappingURL=server-yHhoBx98.cjs.map

package/dist/src/{shared-CSIGeGLl.js → shared-BF25a7ms.js}

@@ -1,14 +1,14 @@
-import { C as getEnvFloat, S as getEnvBool, a as logger, k as state, p as sanitizeUrl, w as getEnvInt, y as safeJsonStringify } from "./logger-Ct2S6Yx-.js";
+import { C as getEnvFloat, S as getEnvBool, a as logger, k as state, p as sanitizeUrl, w as getEnvInt, y as safeJsonStringify } from "./logger-Cs0I2v_y.js";
 import { t as invariant } from "./invariant-Ddh24eXh.js";
 import { Gt as isProviderOptions, Wt as isApiProvider } from "./types-D6glLbdF.js";
-import { d as parseRetryAfter, l as sleep, o as withFetchRetryContext, u as parseRateLimitHeaders } from "./fetch-Doks14zQ.js";
-import { u as isTransientConnectionError } from "./cache-DdriHsNX.js";
-import { t as OpenAiChatCompletionProvider } from "./chat-BBEnnpQk.js";
+import { d as parseRetryAfter, l as sleep, o as withFetchRetryContext, u as parseRateLimitHeaders } from "./fetch-CHJu2KON.js";
+import { u as isTransientConnectionError } from "./cache-CT5D7d_A.js";
+import { t as OpenAiChatCompletionProvider } from "./chat-CCtIXezK.js";
 import { a as createEmptyTokenUsage, r as accumulateTokenUsage } from "./tokenUsageUtils-CmnQ0G2m.js";
-import { t as PromptfooChatCompletionProvider } from "./promptfoo-CqEpj6Sr.js";
-import { o as transform, r as TransformInputType } from "./transform-CGt7Kt3y2.js";
-import { n as isBlobStorageEnabled, r as shouldAttemptRemoteBlobUpload, t as extractAndStoreBinaryData } from "./extractor-D3Fv_Tdh.js";
-import { i as throwIfTargetPromptExceedsMaxChars } from "./promptLength-B9nZEfO6.js";
+import { t as PromptfooChatCompletionProvider } from "./promptfoo-CEsoPlBa.js";
+import { o as transform, r as TransformInputType } from "./transform-BDSnWRNv2.js";
+import { n as isBlobStorageEnabled, r as shouldAttemptRemoteBlobUpload, t as extractAndStoreBinaryData } from "./extractor-Bjz9sdTQ.js";
+import { i as throwIfTargetPromptExceedsMaxChars } from "./promptLength-ho3wbst6.js";
 import { createHash, randomUUID } from "crypto";
 import { EventEmitter } from "events";
 //#region src/scheduler/types.ts
@@ -936,11 +936,11 @@ var TokenUsageTracker = class TokenUsageTracker {
 };
 //#endregion
 //#region src/redteam/providers/constants.ts
-const ATTACKER_MODEL = "gpt-5.4-2026-03-05";
+const ATTACKER_MODEL = "gpt-5.5-2026-04-23";
 const ATTACKER_MODEL_SMALL = "gpt-5.4-mini-2026-03-17";
 const TEMPERATURE = getEnvFloat("PROMPTFOO_JAILBREAK_TEMPERATURE") ? getEnvFloat("PROMPTFOO_JAILBREAK_TEMPERATURE") : .7;
 const defaultRedteamProviderLoader = async (providers) => {
-	const { loadApiProviders } = await import("./providers-BGc7tDtQ.js").then((n) => n.i);
+	const { loadApiProviders } = await import("./providers-DTPwadhk.js").then((n) => n.i);
 	return loadApiProviders(providers);
 };
 let redteamProviderLoader = defaultRedteamProviderLoader;
@@ -1257,7 +1257,7 @@ async function tryUnblocking({ messages, lastResponse, goal, purpose }) {
 			logger.debug("[Unblocking] Disabled by default (set PROMPTFOO_ENABLE_UNBLOCKING=true to enable)");
 			return { success: false };
 		}
-		const { checkServerFeatureSupport } = await import("./server-CbiJppij.js").then((n) => n.n);
+		const { checkServerFeatureSupport } = await import("./server-pMTgWs3M.js").then((n) => n.n);
 		if (!await checkServerFeatureSupport("blocking-question-analysis", "2025-06-16T14:49:11-07:00")) {
 			logger.debug("[Unblocking] Server does not support unblocking, skipping gracefully");
 			return { success: false };
@@ -1331,4 +1331,4 @@ function getGraderAssertionValue(assertToUse) {
 //#endregion
 export { isRateLimitWrapped as _, formatRedteamHistoryAsTranscript as a, getTargetResponse as c, messagesToRedteamHistory as d, redteamProviderManager as f, createProviderRateLimitOptions as g, createRateLimitRegistry as h, externalizeResponseForRedteamHistory as i, isConversationEndedResponse as l, TokenUsageTracker as m, checkPenalizedPhrases as n, getGraderAssertionValue as o, tryUnblocking as p, createIterationContext as r, getLastMessageContent as s, buildGraderResultAssertion as t, isValidChatMessageArray as u };
 
-//# sourceMappingURL=shared-CSIGeGLl.js.map
+//# sourceMappingURL=shared-BF25a7ms.js.map

package/dist/src/{shared-aHWko3P1.cjs → shared-DlmtkptR.cjs}

@@ -1,15 +1,15 @@
 require("./rolldown-runtime-D_mwlA32.cjs");
-const require_logger = require("./logger-cfNpzI4o.cjs");
+const require_logger = require("./logger-Cm0Nb8YX.cjs");
 const require_invariant = require("./invariant-QtnLD03y.cjs");
 const require_types = require("./types-CxJvaY2S.cjs");
-const require_fetch = require("./fetch-Cfm4EuOB.cjs");
-const require_cache = require("./cache-h5MWOBZI.cjs");
-const require_chat = require("./chat-DSyYuTYT.cjs");
+const require_fetch = require("./fetch-B2HvaVUc.cjs");
+const require_cache = require("./cache-WuIsgzMA.cjs");
+const require_chat = require("./chat-DkitQHdt.cjs");
 const require_tokenUsageUtils = require("./tokenUsageUtils-_B-P8IAi.cjs");
-const require_promptfoo = require("./promptfoo-ClChwT74.cjs");
-const require_transform = require("./transform-BnSXWmU_2.cjs");
-const require_extractor = require("./extractor-bV_NOoaz.cjs");
-const require_promptLength = require("./promptLength-BbBbDHNj.cjs");
+const require_promptfoo = require("./promptfoo-DAXBmrE6.cjs");
+const require_transform = require("./transform-0wnBYYaL2.cjs");
+const require_extractor = require("./extractor-nyUwvU2U.cjs");
+const require_promptLength = require("./promptLength-CAcg7BmO.cjs");
 let crypto = require("crypto");
 let events = require("events");
 //#region src/scheduler/types.ts
@@ -937,11 +937,11 @@ var TokenUsageTracker = class TokenUsageTracker {
 };
 //#endregion
 //#region src/redteam/providers/constants.ts
-const ATTACKER_MODEL = "gpt-5.4-2026-03-05";
+const ATTACKER_MODEL = "gpt-5.5-2026-04-23";
 const ATTACKER_MODEL_SMALL = "gpt-5.4-mini-2026-03-17";
 const TEMPERATURE = require_logger.getEnvFloat("PROMPTFOO_JAILBREAK_TEMPERATURE") ? require_logger.getEnvFloat("PROMPTFOO_JAILBREAK_TEMPERATURE") : .7;
 const defaultRedteamProviderLoader = async (providers) => {
-	const { loadApiProviders } = await Promise.resolve().then(() => require("./providers-V6RBuieY.cjs")).then((n) => n.providers_exports);
+	const { loadApiProviders } = await Promise.resolve().then(() => require("./providers-DP1CDgd5.cjs")).then((n) => n.providers_exports);
 	return loadApiProviders(providers);
 };
 let redteamProviderLoader = defaultRedteamProviderLoader;
@@ -1258,7 +1258,7 @@ async function tryUnblocking({ messages, lastResponse, goal, purpose }) {
 			require_logger.logger.debug("[Unblocking] Disabled by default (set PROMPTFOO_ENABLE_UNBLOCKING=true to enable)");
 			return { success: false };
 		}
-		const { checkServerFeatureSupport } = await Promise.resolve().then(() => require("./server-BHOEL8p8.cjs")).then((n) => n.server_exports);
+		const { checkServerFeatureSupport } = await Promise.resolve().then(() => require("./server-yHhoBx98.cjs")).then((n) => n.server_exports);
 		if (!await checkServerFeatureSupport("blocking-question-analysis", "2025-06-16T14:49:11-07:00")) {
 			require_logger.logger.debug("[Unblocking] Server does not support unblocking, skipping gracefully");
 			return { success: false };
@@ -1433,4 +1433,4 @@ Object.defineProperty(exports, "tryUnblocking", {
 	}
 });
 
-//# sourceMappingURL=shared-aHWko3P1.cjs.map
+//# sourceMappingURL=shared-DlmtkptR.cjs.map

package/dist/src/{shared-DNvim54U.js → shared-DsbObxvy.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
-import { D as getEnvInt, E as getEnvFloat, N as state, T as getEnvBool, h as sanitizeUrl, s as logger, x as safeJsonStringify } from "./logger-BbY6ypFL.js";
-import { f as sleep, h as parseRetryAfter, l as withFetchRetryContext, m as parseRateLimitHeaders } from "./fetch-Cpf1U1nO.js";
+import { D as getEnvInt, E as getEnvFloat, N as state, T as getEnvBool, h as sanitizeUrl, s as logger, x as safeJsonStringify } from "./logger-h-eiS4iv.js";
+import { f as sleep, h as parseRetryAfter, l as withFetchRetryContext, m as parseRateLimitHeaders } from "./fetch-C59QM4cf.js";
 import { t as invariant } from "./invariant-B2Rf6avk.js";
-import { m as isProviderOptions, p as isApiProvider } from "./types-BFevViUY.js";
+import { m as isProviderOptions, p as isApiProvider } from "./types-C_e_SykX.js";
 import { r as isTransientConnectionError } from "./errors-9PcUL8BC.js";
-import { t as OpenAiChatCompletionProvider } from "./chat-DTdf-J5Q.js";
+import { t as OpenAiChatCompletionProvider } from "./chat-B8lsx0A0.js";
 import { a as createEmptyTokenUsage, r as accumulateTokenUsage } from "./tokenUsageUtils-CDet74yk.js";
-import { t as PromptfooChatCompletionProvider } from "./promptfoo-BU4_0J85.js";
-import { o as transform, r as TransformInputType } from "./transform-BnSTnFlp.js";
-import { n as isBlobStorageEnabled, r as shouldAttemptRemoteBlobUpload, t as extractAndStoreBinaryData } from "./extractor-BVkZtk4R.js";
-import { i as throwIfTargetPromptExceedsMaxChars } from "./promptLength-4X-Wd8PG.js";
+import { t as PromptfooChatCompletionProvider } from "./promptfoo-wxe28-q9.js";
+import { o as transform, r as TransformInputType } from "./transform-C5pxvKUV.js";
+import { n as isBlobStorageEnabled, r as shouldAttemptRemoteBlobUpload, t as extractAndStoreBinaryData } from "./extractor-CtadTcJm.js";
+import { i as throwIfTargetPromptExceedsMaxChars } from "./promptLength-PkjlYFx0.js";
 import { createHash, randomUUID } from "crypto";
 import { EventEmitter } from "events";
 //#region src/scheduler/types.ts
@@ -937,11 +937,11 @@ var TokenUsageTracker = class TokenUsageTracker {
 };
 //#endregion
 //#region src/redteam/providers/constants.ts
-const ATTACKER_MODEL = "gpt-5.4-2026-03-05";
+const ATTACKER_MODEL = "gpt-5.5-2026-04-23";
 const ATTACKER_MODEL_SMALL = "gpt-5.4-mini-2026-03-17";
 const TEMPERATURE = getEnvFloat("PROMPTFOO_JAILBREAK_TEMPERATURE") ? getEnvFloat("PROMPTFOO_JAILBREAK_TEMPERATURE") : .7;
 const defaultRedteamProviderLoader = async (providers) => {
-	const { loadApiProviders } = await import("./providers-CSOp-bCm.js");
+	const { loadApiProviders } = await import("./providers-DvBFcsXi.js");
 	return loadApiProviders(providers);
 };
 let redteamProviderLoader = defaultRedteamProviderLoader;
@@ -1258,7 +1258,7 @@ async function tryUnblocking({ messages, lastResponse, goal, purpose }) {
 			logger.debug("[Unblocking] Disabled by default (set PROMPTFOO_ENABLE_UNBLOCKING=true to enable)");
 			return { success: false };
 		}
-		const { checkServerFeatureSupport } = await import("./server-D18AAlAc.js");
+		const { checkServerFeatureSupport } = await import("./server-BHd6SQYX.js");
 		if (!await checkServerFeatureSupport("blocking-question-analysis", "2025-06-16T14:49:11-07:00")) {
 			logger.debug("[Unblocking] Server does not support unblocking, skipping gracefully");
 			return { success: false };
@@ -1332,4 +1332,4 @@ function getGraderAssertionValue(assertToUse) {
 //#endregion
 export { isRateLimitWrapped as _, formatRedteamHistoryAsTranscript as a, getTargetResponse as c, messagesToRedteamHistory as d, redteamProviderManager as f, createProviderRateLimitOptions as g, createRateLimitRegistry as h, externalizeResponseForRedteamHistory as i, isConversationEndedResponse as l, TokenUsageTracker as m, checkPenalizedPhrases as n, getGraderAssertionValue as o, tryUnblocking as p, createIterationContext as r, getLastMessageContent as s, buildGraderResultAssertion as t, isValidChatMessageArray as u };
 
-//# sourceMappingURL=shared-DNvim54U.js.map
+//# sourceMappingURL=shared-DsbObxvy.js.map