promptfoo 0.122.1 → 0.122.2

package/dist/src/main.js

@@ -1,42 +1,43 @@
 #!/usr/bin/env node
 import { t as requestsStructuredCodeScanOutput } from "./structuredOutputDetect-C7itnC-x.js";
 import { F as getEnvBool, H as isNonInteractive, I as getEnvFloat, L as getEnvInt, M as getConfigDirectoryPath, O as orderKeys, P as setConfigDirectoryPath, R as getEnvString, T as extractJsonObjects, U as state, V as isCI, _ as restoreAzureBlobSasTokens, a as initializeRunLogging, b as sanitizeTracingConfigForPersistence, c as logger, g as redactAzureBlobSasTokens, h as preserveTracingCredentialReferences, j as loadYaml, k as safeJsonStringify, l as setLogCallback, n as closeLogger, o as isDebugEnabled, r as getLogLevel, t as clearLogCallbackIfOwned, u as setLogLevel, v as sanitizeObject, w as extractFirstJsonObject } from "./logger-YzVIwMVq.js";
-import { A as isApiProvider, C as setupSignalWatcher, N as HUMAN_ASSERTION_TYPE, S as readSignalFile, T as hashPrompt, _ as getStandaloneEvalCacheKey, b as hasUnscopedUpdate, c as stripTraceLinkageFromMetadata, d as notifyEvaluationChanged, f as notifyEvaluationsDeleted, g as getCachedStandaloneEvals, k as generateIdFromPrompt, l as invalidateEvaluationCache, o as sanitizeProvider, t as EvalResult, u as invalidateEvaluationCaches, v as setCachedStandaloneEvals, w as updateEvalIds, x as isAllEvalsDeleted, y as hasDeleteComponent } from "./evalResult-CmUmgA2I.js";
-import { G as getDefaultShareViewBaseUrl, K as getShareApiBaseUrl, M as isPromptfooSampleTarget, U as TERMINAL_MAX_WIDTH, W as getDefaultPort, Y as VERSION, a as fetchWithTimeout, i as fetchWithRetries, k as getRequestTimeoutMs, q as getShareViewBaseUrl, r as fetchWithProxy, t as clearAgentCache, z as CLOUD_PROVIDER_PREFIX } from "./fetch-Bnj1JCJi.js";
+import { A as isApiProvider, C as setupSignalWatcher, N as HUMAN_ASSERTION_TYPE, S as readSignalFile, T as hashPrompt, _ as getStandaloneEvalCacheKey, b as hasUnscopedUpdate, c as stripTraceLinkageFromMetadata, d as notifyEvaluationChanged, f as notifyEvaluationsDeleted, g as getCachedStandaloneEvals, k as generateIdFromPrompt, l as invalidateEvaluationCache, o as sanitizeProvider, t as EvalResult, u as invalidateEvaluationCaches, v as setCachedStandaloneEvals, w as updateEvalIds, x as isAllEvalsDeleted, y as hasDeleteComponent } from "./evalResult-C9ntrv7r.js";
+import { A as getRequestTimeoutMs, B as CLOUD_PROVIDER_PREFIX, G as getDefaultPort, J as getShareViewBaseUrl, K as getDefaultShareViewBaseUrl, N as isPromptfooSampleTarget, W as TERMINAL_MAX_WIDTH, X as VERSION, a as fetchWithTimeout, i as fetchWithRetries, q as getShareApiBaseUrl, r as fetchWithProxy, t as clearAgentCache } from "./fetch-KD8O9oZZ.js";
 import { t as invariant } from "./invariant-CbHB1xyx.js";
-import { a as getAuthor, c as getUserId, d as setUserEmail, i as clearUserEmail, l as isLoggedIntoCloud, n as checkEmailStatus, r as checkEmailStatusAndMaybeExit, s as getUserEmail, t as EmailValidationError, u as promptForEmailUnverified } from "./accounts-CAjSMkuH.js";
+import { a as getAuthor, c as getUserId, d as setUserEmail, i as clearUserEmail, l as isLoggedIntoCloud, n as checkEmailStatus, r as checkEmailStatusAndMaybeExit, s as getUserEmail, t as EmailValidationError, u as promptForEmailUnverified } from "./accounts-DApS8Gpe.js";
 import { n as sleep } from "./time-Ct6CnABs.js";
-import { a as readGlobalConfig, i as cloudConfig, n as CloudConfig, s as writeGlobalConfigPartial } from "./cloud-D3FRkXX5.js";
-import { i as TelemetryEventSchema, n as telemetry } from "./telemetry-D64Cj0UR.js";
+import { a as readGlobalConfig, i as cloudConfig, n as CloudConfig, s as writeGlobalConfigPartial } from "./cloud-D9lRDzlx.js";
+import { i as TelemetryEventSchema, n as telemetry } from "./telemetry-BD4xF9d_.js";
 import { t as BaseTokenUsageSchema } from "./shared-D9YY4nYb.js";
 import { $ as STRATEGY_COLLECTION_MAPPINGS, A as isCliEventSource, At as REMOTE_ONLY_PLUGIN_IDS, B as PluginConfigSchema, Ct as MULTI_INPUT_EXCLUDED_PLUGINS, D as UnifiedConfigSchema, E as TestSuiteSchema, Et as PII_PLUGINS, Ft as CODING_AGENT_CORE_PLUGINS, G as isUuid, H as ProbeLimitExceededError, I as ProviderOptionsSchema, It as CODING_AGENT_PLUGINS, J as ALL_STRATEGIES, K as ADDITIONAL_STRATEGIES, L as ProvidersSchema, M as RedteamGenerateOptionsSchema, Mt as TEEN_SAFETY_PLUGINS, N as filterByRange, Nt as TELECOM_PLUGINS, Ot as REDTEAM_MODEL, P as PromptSchema, Pt as UNALIGNED_PROVIDER_HARM_PLUGINS, Q as STRATEGY_COLLECTIONS, R as ConversationMessageSchema, S as EvaluateOptionsSchema, St as MEDICAL_PLUGINS, T as TestSuiteConfigSchema, Tt as PHARMACY_PLUGINS, U as StrategyConfigSchema, X as DEFAULT_STRATEGIES, _t as FOUNDATION_PLUGINS, a as evalResultsTable, at as categoryAliases, b as CommandLineOptionsSchema, bt as LLAMA_GUARD_ENABLED_CATEGORIES, c as evalsToPromptsTable, ct as subCategoryDescriptions, d as promptsTable, dt as ALL_PLUGINS, et as getDefaultNFanout, f as spansTable, ft as BIAS_PLUGINS, g as getDb, gt as FINANCIAL_PLUGINS, h as closeDbIfOpen, ht as DEFAULT_PLUGINS, i as datasetsTable, it as Severity, j as RedteamConfigSchema, kt as REDTEAM_PROVIDER_HARM_PLUGINS, l as evalsToTagsTable, lt as ALIASED_PLUGIN_MAPPINGS, m as tracesTable, mt as DATASET_EXEMPT_PLUGINS, n as blobReferencesTable, nt as isFanoutStrategy, o as evalsTable, p as tagsTable, pt as CANARY_BREAKING_STRATEGY_IDS, r as configsTable, rt as isMultiTurnStrategy, s as evalsToDatasetsTable, st as riskCategorySeverityMap, t as blobAssetsTable, u as modelAuditsTable, ut as ADDITIONAL_PLUGINS, v as AssertionOrSetSchema, vt as HARM_PLUGINS, w as ResultFailureReason, wt as MULTI_INPUT_VAR, x as EvalResultsFilterMode, xt as LLAMA_GUARD_REPLICATE_PROVIDER, y as BaseAssertionTypesSchema, yt as INSURANCE_PLUGINS, z as PartialGenerationError } from "./tables-DpSgejqG.js";
 import { i as isJavascriptFile } from "./fileExtensions-CAc10_Jb.js";
 import { r as importModule, t as getDirectory } from "./esm-BK0NNGWz.js";
-import { C as doesProviderRefMatch, G as readOutput, L as maybeLoadConfigFromExternalFile, N as normalizeProviderRef, Q as renderVarsInObject, R as maybeLoadFromExternalFile, S as checkProviderApiKeys, U as pathExists$1, W as readFilters, Z as renderEnvOnlyInObject, _ as deduplicateTestCases, a as writeOutput, b as getTestCaseDeduplicationKey, c as ComparisonEvalNotFoundError, d as getEvalTableOutputPromptLocationsBySize, et as extractVariablesFromTemplate, f as getEvalTablePromptStrippedPayload, g as setupEnv, h as isMissingPackageImportError, i as writeMultipleOutputs, l as evalTableToJson, m as fetchCsvFromGoogleSheet, n as createOutputData, nt as getNunjucksEngine, o as SUPPORTED_OUTPUT_FILE_FORMATS, p as mergeComparisonTables, r as warnOnDegradedJsonlRecovery, s as getOutputFileFormat, t as printBorder, tt as extractVariablesFromTemplates, u as generateEvalCsv, v as extractRuntimeVars, w as getProviderDescription, x as resultIsForTestCase, y as filterRuntimeVars } from "./util-BdAsuWmv.js";
 import { n as sha256, t as randomSequence } from "./createHash-DqA6GWxE.js";
-import { i as fetchWithCache, n as clearCache, r as disableCache, u as withCacheEnabled } from "./cache-NhFSRGTI.js";
+import { d as withCacheEnabled, i as fetchWithCache, n as clearCache, r as disableCache } from "./cache-xL5UULpy.js";
 import { r as runPython } from "./pythonUtils-BKRucqaP.js";
+import { C as doesProviderRefMatch, G as readOutput, L as maybeLoadConfigFromExternalFile, N as normalizeProviderRef, R as maybeLoadFromExternalFile, S as checkProviderApiKeys, U as pathExists$1, W as readFilters, _ as deduplicateTestCases, a as writeOutput, b as getTestCaseDeduplicationKey, c as ComparisonEvalNotFoundError, d as getEvalTableOutputPromptLocationsBySize, f as getEvalTablePromptStrippedPayload, g as setupEnv, h as isMissingPackageImportError, i as writeMultipleOutputs, l as evalTableToJson, m as fetchCsvFromGoogleSheet, n as createOutputData, o as SUPPORTED_OUTPUT_FILE_FORMATS, p as mergeComparisonTables, r as warnOnDegradedJsonlRecovery, s as getOutputFileFormat, t as printBorder, u as generateEvalCsv, v as extractRuntimeVars, w as getProviderDescription, x as resultIsForTestCase, y as filterRuntimeVars } from "./util-CZyLhvIk.js";
+import { a as extractVariablesFromTemplates, i as extractVariablesFromTemplate, n as renderVarsInObject, o as getNunjucksEngine, t as renderEnvOnlyInObject } from "./render-BRIaR8VG.js";
 import { c as BLOB_MAX_SIZE, i as getShareAuthorizedBlob, o as recordBlobReference, r as getBlobUrl, s as storeBlob, t as getBlobByHash } from "./blobs-Dpyeuxru.js";
 import { a as BLOB_URI_REGEX, c as normalizeBlobHash, i as BLOB_SCAN_MAX_STRING_LENGTH, n as isBlobStorageEnabled, o as collectBlobHashes, r as BLOB_HASH_REGEX$1, s as extractBlobHashesFromValue } from "./extractor-8jl9p5Oy.js";
 import { c as accumulateTokenUsage, d as createEmptyTokenUsage, f as getErrorTokenUsage, o as accumulateGradingTokenUsage, s as accumulateResponseTokenUsage } from "./tokenUsageUtils-Cf6nFV6z.js";
 import { n as getTraceStore } from "./store-_fAGlpRg.js";
-import { c as neverGenerateRemote, d as shouldGenerateRemote, i as getRemoteGenerationUrl, m as resolveRedteamGenerationContext, n as getRemoteGenerationExplicitlyDisabledError, o as getRemoteHealthUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-B0eQSIHo.js";
-import { A as DivergentRepetitionPlugin, B as fetchHuggingFaceDataset, C as getPiiLeakTestsForCategory, D as HarmbenchPlugin, Dt as getCloudTargetIdFromProviders, E as ImitationPlugin, F as AegisPlugin, I as RedteamPluginBase, J as doRemoteGrading, L as getCustomPolicies, M as CrossSessionLeakPlugin, N as ContractPlugin, O as HallucinationPlugin, Ot as getRedteamGenerationContextFromProviders, P as BeavertailsPlugin, R as retryWithDeduplication, S as PlinyPlugin, T as IntentPlugin, X as readPrompts, Y as processPrompts, Z as readProviderPromptMap, _ as PoliticsPlugin, a as UnverifiableClaimsPlugin, b as isValidPolicyObject, c as ToolDiscoveryPlugin, d as TeenSafetyDangerousContentPlugin, et as OPTIMIZE_PROMPT_SYSTEM_MESSAGE, f as TeenSafetyAgeRestrictedGoodsAndServicesPlugin, g as PromptExtractionPlugin, h as RbacPlugin, i as VLGuardPlugin, j as DebugAccessPlugin, k as ExcessiveAgencyPlugin, l as TeenSafetyHarmfulBodyIdealsPlugin, m as ShellInjectionPlugin, o as UnsafeBenchPlugin, p as SqlInjectionPlugin, r as VLSUPlugin, s as ToxicChatPlugin, u as TeenSafetyDangerousRoleplayPlugin, v as PolicyPlugin, w as OverreliancePlugin, x as makeInlinePolicyIdSync, y as determinePolicyTypeFromId, yt as getDefaultProviders, z as sampleArray } from "./graders-43jk_163.js";
-import { a as openAuthBrowser, i as checkServerRunning, n as BrowserBehaviorNames, o as openBrowser, s as promptUser, t as BrowserBehavior } from "./server-MNuRsmJQ.js";
-import { _ as makeRequest, c as getCloudDatabaseId, d as getOrgContext, f as getPluginSeverityOverridesFromCloud, g as isCloudProvider, h as getUserTeams, i as retrieveMedia, l as getConfigFromCloud, m as getProviderFromCloud, o as canCreateTargets, r as mediaExists, s as checkCloudPermissions, t as getMediaStorage, u as getEvalConfigFromCloud, v as resolveTeamFromIdentifier, y as resolveTeamId } from "./storage-DGeXeJj0.js";
-import { a as resolveProviderConfigs, b as A2AProvider, g as createTransformResponse, h as createTransformRequest, i as resolveProvider, m as HttpProvider, n as loadApiProvider, p as MCPProvider, r as loadApiProviders, t as getProviderIds } from "./providers-Dbcg914T.js";
-import { w as GEMINI_FLASH_MODELS } from "./util-CwUz9jYN.js";
+import { c as neverGenerateRemote, d as shouldGenerateRemote, i as getRemoteGenerationUrl, m as resolveRedteamGenerationContext, n as getRemoteGenerationExplicitlyDisabledError, o as getRemoteHealthUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-Cc78LDjQ.js";
+import { A as DivergentRepetitionPlugin, B as fetchHuggingFaceDataset, C as getPiiLeakTestsForCategory, D as HarmbenchPlugin, Dt as getCloudTargetIdFromProviders, E as ImitationPlugin, F as AegisPlugin, I as RedteamPluginBase, J as doRemoteGrading, L as getCustomPolicies, M as CrossSessionLeakPlugin, N as ContractPlugin, O as HallucinationPlugin, Ot as getRedteamGenerationContextFromProviders, P as BeavertailsPlugin, R as retryWithDeduplication, S as PlinyPlugin, T as IntentPlugin, X as readPrompts, Y as processPrompts, Z as readProviderPromptMap, _ as PoliticsPlugin, a as UnverifiableClaimsPlugin, b as isValidPolicyObject, c as ToolDiscoveryPlugin, d as TeenSafetyDangerousContentPlugin, et as OPTIMIZE_PROMPT_SYSTEM_MESSAGE, f as TeenSafetyAgeRestrictedGoodsAndServicesPlugin, g as PromptExtractionPlugin, h as RbacPlugin, i as VLGuardPlugin, j as DebugAccessPlugin, k as ExcessiveAgencyPlugin, l as TeenSafetyHarmfulBodyIdealsPlugin, m as ShellInjectionPlugin, o as UnsafeBenchPlugin, p as SqlInjectionPlugin, r as VLSUPlugin, s as ToxicChatPlugin, u as TeenSafetyDangerousRoleplayPlugin, v as PolicyPlugin, w as OverreliancePlugin, x as makeInlinePolicyIdSync, y as determinePolicyTypeFromId, yt as getDefaultProviders, z as sampleArray } from "./graders-CS8YkOd5.js";
+import { a as openAuthBrowser, i as checkServerRunning, n as BrowserBehaviorNames, o as openBrowser, s as promptUser, t as BrowserBehavior } from "./server-BaM1Q5gD.js";
+import { _ as makeRequest, c as getCloudDatabaseId, d as getOrgContext, f as getPluginSeverityOverridesFromCloud, g as isCloudProvider, h as getUserTeams, i as retrieveMedia, l as getConfigFromCloud, m as getProviderFromCloud, o as canCreateTargets, r as mediaExists, s as checkCloudPermissions, t as getMediaStorage, u as getEvalConfigFromCloud, v as resolveTeamFromIdentifier, y as resolveTeamId } from "./storage-CrqPUKqY.js";
+import { a as resolveProviderConfigs, b as A2AProvider, g as createTransformResponse, h as createTransformRequest, i as resolveProvider, m as HttpProvider, n as loadApiProvider, p as MCPProvider, r as loadApiProviders, t as getProviderIds } from "./providers-BmppqfDI.js";
+import { w as GEMINI_FLASH_MODELS } from "./util-Rbl6Om9L2.js";
 import { n as escapeRegExp, t as ellipsize } from "./text-CV7MmVb_.js";
-import { a as extractPromptFromTags, f as recordGenerationTokenUsage, i as extractMaterializedVariablesFromJsonWithMetadata, m as trackGenerationTokenUsage, n as extractGoalFromPrompt, p as trackAdditionalGenerationProvider, s as getShortPluginId } from "./util-DxyypCZC.js";
+import { a as extractPromptFromTags, f as recordGenerationTokenUsage, i as extractMaterializedVariablesFromJsonWithMetadata, m as trackGenerationTokenUsage, n as extractGoalFromPrompt, p as trackAdditionalGenerationProvider, s as getShortPluginId } from "./util-DlFpV1xV.js";
 import { n as createPlaceholderInputValue, t as buildPromptInputDescriptions } from "./inputVariables-DpjKHmSc.js";
-import { a as assertRemoteMaterializationHandled, l as requiresRemoteMaterialization, n as PromptfooHarmfulCompletionProvider } from "./promptfoo-DFE6FPtn.js";
-import { C as TokenUsageTracker, E as uploadBlobRemote, b as getGeneratedPromptOverLimit, g as redteamProviderManager, x as getMaxCharsPerMessageModifierValue, y as MAX_CHARS_PER_MESSAGE_MODIFIER_KEY } from "./shared-yyb3qFQd.js";
-import { _ as isPromptAllowed, b as runAssertions, d as isProviderTypeMap, f as resolveConfiguredProviderReference, g as doesPromptRefMatch, h as formatPrompts, l as accumulateNamedMetric, m as fetchRemoteGeneration, n as PromptSuggestionsRejectedError, p as callExtraction, r as evaluate, u as buildConfiguredProviderMap, v as warnEmptyFilterRange, y as readAssertions } from "./evaluator-BNYv5Xws.js";
+import { a as assertRemoteMaterializationHandled, l as requiresRemoteMaterialization, n as PromptfooHarmfulCompletionProvider } from "./promptfoo-HD40ugrk.js";
+import { C as TokenUsageTracker, E as uploadBlobRemote, b as getGeneratedPromptOverLimit, g as redteamProviderManager, x as getMaxCharsPerMessageModifierValue, y as MAX_CHARS_PER_MESSAGE_MODIFIER_KEY } from "./shared-jcnXW0lA.js";
+import { _ as isPromptAllowed, b as runAssertions, d as isProviderTypeMap, f as resolveConfiguredProviderReference, g as doesPromptRefMatch, h as formatPrompts, l as accumulateNamedMetric, m as fetchRemoteGeneration, n as PromptSuggestionsRejectedError, p as callExtraction, r as evaluate, u as buildConfiguredProviderMap, v as warnEmptyFilterRange, y as readAssertions } from "./evaluator-BxDpurGf.js";
 import { n as TRANSFORM_KEYS, t as INLINE_FUNCTION_LABEL } from "./transform-BBv6X1Ag.js";
-import { a as createEvalId, c as deleteTraceRecordsForEvals, n as EvalQueries, s as getEvalSummaries, t as Eval } from "./eval-XZjM8PtE.js";
-import { n as renderPrompt } from "./evaluatorHelpers-G6saWD9g.js";
+import { a as createEvalId, c as deleteTraceRecordsForEvals, n as EvalQueries, s as getEvalSummaries, t as Eval } from "./eval-BB4Rvl3w.js";
+import { n as renderPrompt } from "./evaluatorHelpers-CgcFRjns.js";
 import { t as formatDuration } from "./formatDuration-22XOO9FJ.js";
-import { i as pluginMatchesStrategyTargets, n as loadStrategy, r as validateStrategies, t as Strategies } from "./strategies-cFTP9vSw.js";
+import { i as pluginMatchesStrategyTargets, n as loadStrategy, r as validateStrategies, t as Strategies } from "./strategies-DpZ1ydwx.js";
 import path, { resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { Command, InvalidArgumentError } from "commander";
@@ -109,7 +110,7 @@ function runCommand(program) {
 			hasGithubPr: !!cmdObj.githubPr,
 			hasGuidance: !!(cmdObj.guidance || cmdObj.guidanceFile)
 		});
-		const { executeScan } = await import("./scanner-Dt3oFdeb.js");
+		const { executeScan } = await import("./scanner-De5yM_DC.js");
 		await executeScan(repoPath, cmdObj);
 	});
 }
@@ -215,12 +216,13 @@ async function setupTeamContext(cmdObj, organizationId, teams) {
 	}
 }
 async function loginWithApiKey(cmdObj, apiHost) {
-	const { user, organization, app, hasActiveLicense } = await cloudConfig.validateApiToken(cmdObj.apiKey, apiHost);
+	const authHeaderName = cmdObj.authHeaderName || cloudConfig.getAuthHeaderName();
+	const { user, organization, app, hasActiveLicense } = await cloudConfig.validateApiToken(cmdObj.apiKey, apiHost, authHeaderName);
 	const existingEmail = getUserEmail();
 	let organizationId = organization.id;
 	let organizationTeams;
 	if (cmdObj.org || cmdObj.team) {
-		const allTeams = await getUserTeams(apiHost, cmdObj.apiKey);
+		const allTeams = await getUserTeams(apiHost, cmdObj.apiKey, authHeaderName);
 		const resolvedOrganizationTeams = getOrganizationTeams(allTeams, cmdObj.org, organization.id);
 		organizationId = resolvedOrganizationTeams.organizationId;
 		organizationTeams = resolvedOrganizationTeams.teams;
@@ -230,7 +232,7 @@ async function loginWithApiKey(cmdObj, apiHost) {
 		}
 		if (cmdObj.team) resolveTeamFromOrganizationTeams(organizationTeams, cmdObj.team, organizationId);
 	}
-	cloudConfig.saveValidatedApiToken(cmdObj.apiKey, apiHost, user, app, hasActiveLicense);
+	cloudConfig.saveValidatedApiToken(cmdObj.apiKey, apiHost, user, app, hasActiveLicense, authHeaderName);
 	if (existingEmail && existingEmail !== user.email) logger.info(chalk.yellow(`Updating local email configuration from ${existingEmail} to ${user.email}`));
 	setUserEmail(user.email);
 	cloudConfig.setCurrentOrganization(organizationId);
@@ -255,7 +257,7 @@ async function loginWithBrowser(cmdObj) {
 }
 function authCommand(program) {
 	const authCommand = program.command("auth").description("Manage authentication");
-	authCommand.command("login").description("Login").option("-o, --org <orgId>", "The organization id to login to.").option("-h, --host <host>", "The host of the promptfoo instance. This needs to be the url of the API if different from the app url.").option("-k, --api-key <apiKey>", "Login using an API key.").option("-t, --team <team>", "The team to use (name, slug, or ID). Required in CI when multiple teams exist.").action(async (cmdObj) => {
+	authCommand.command("login").description("Login").option("-o, --org <orgId>", "The organization id to login to.").option("-h, --host <host>", "The host of the promptfoo instance. This needs to be the url of the API if different from the app url.").option("-k, --api-key <apiKey>", "Login using an API key.").option("-t, --team <team>", "The team to use (name, slug, or ID). Required in CI when multiple teams exist.").option("--auth-header-name <name>", "The header name to use for Cloud API authentication (defaults to Authorization).").action(async (cmdObj) => {
 		const apiHost = (cmdObj.host || cloudConfig.getApiHost())?.replace(/\/+$/, "");
 		try {
 			if (cmdObj.apiKey) {
@@ -291,7 +293,7 @@ function authCommand(program) {
 				return;
 			}
 			const apiHost = cloudConfig.getApiHost();
-			const response = await fetchWithProxy(`${apiHost}/api/v1/users/me`, { headers: { Authorization: `Bearer ${apiKey}` } });
+			const response = await fetchWithProxy(`${apiHost}/api/v1/users/me`, { headers: { ...cloudConfig.getAuthHeaders() ?? {} } });
 			if (!response.ok) throw new Error("Failed to fetch user info: " + response.statusText);
 			const { user, organization } = await response.json();
 			try {
@@ -3499,8 +3501,10 @@ async function sendChunkedResults(evalRecord, url, options = {}) {
 		maxResultsPerChunk: resultsPerChunk
 	};
 	logger.debug(`Chunk config: ${JSON.stringify(chunkConfig)}`);
-	const headers = { "Content-Type": "application/json" };
-	if (cloudConfig.isEnabled()) headers["Authorization"] = `Bearer ${cloudConfig.getApiKey()}`;
+	const headers = {
+		"Content-Type": "application/json",
+		...cloudConfig.isEnabled() ? cloudConfig.getAuthHeaders() ?? {} : {}
+	};
 	const totalResults = await evalRecord.getTotalResultRowCount();
 	logger.debug(`Total results to share: ${totalResults}`);
 	let progressBar = null;
@@ -3694,7 +3698,7 @@ async function createShareableModelAuditUrl(auditRecord, showAuth = false) {
 	const apiBaseUrl = cloudConfig.isEnabled() ? cloudConfig.getApiHost() : getShareApiBaseUrl();
 	const headers = {
 		"Content-Type": "application/json",
-		...cloudConfig.isEnabled() && { Authorization: `Bearer ${cloudConfig.getApiKey()}` }
+		...cloudConfig.isEnabled() ? cloudConfig.getAuthHeaders() ?? {} : {}
 	};
 	const url = `${apiBaseUrl}/api/v1/model-audits/share`;
 	logger.debug(`Sharing model audit ${auditRecord.id} to ${url}`);
@@ -7948,7 +7952,7 @@ async function checkForUpdates() {
 	} catch {
 		return false;
 	}
-	if (semverGt(latestVersion, "0.122.1")) {
+	if (semverGt(latestVersion, "0.122.2")) {
 		const border = "=".repeat(TERMINAL_MAX_WIDTH);
 		const updateCommands = getUpdateCommands({
 			isContainer: getEnvBool("PROMPTFOO_RUNNING_IN_DOCKER"),
@@ -8605,14 +8609,13 @@ async function testProviderConnectivity({ provider, prompt = "Hello World!", inp
 			};
 		}
 		const HOST = cloudConfig.getApiHost();
-		const apiKey = cloudConfig.getApiKey();
 		try {
 			logger.debug("[testProviderConnectivity] Calling agent helper", { providerId: provider.id });
 			const testAnalyzerResponse = await fetchWithProxy(`${HOST}/api/v1/providers/test`, {
 				method: "POST",
 				headers: {
 					"Content-Type": "application/json",
-					Authorization: `Bearer ${apiKey}`
+					...cloudConfig.getAuthHeaders() ?? {}
 				},
 				body: JSON.stringify({
 					config: provider.config,
@@ -9711,7 +9714,7 @@ providersRouter.post("/http-generator", async (req, res) => {
 		return;
 	}
 	const HOST = (cloudConfig.isEnabled() ? cloudConfig.getApiHost() : getEnvString("PROMPTFOO_CLOUD_API_URL", "https://api.promptfoo.app")).replace(/\/+$/, "");
-	const apiKey = cloudConfig.isEnabled() ? cloudConfig.getApiKey() : void 0;
+	const authHeaders = cloudConfig.isEnabled() ? cloudConfig.getAuthHeaders() : void 0;
 	try {
 		logger.debug("[POST /providers/http-generator] Calling HTTP provider generator API", {
 			requestExamplePreview: requestExample?.substring(0, 200),
@@ -9721,7 +9724,7 @@ providersRouter.post("/http-generator", async (req, res) => {
 			method: "POST",
 			headers: {
 				"Content-Type": "application/json",
-				...apiKey ? { Authorization: `Bearer ${apiKey}` } : {}
+				...authHeaders ?? {}
 			},
 			body: JSON.stringify({
 				requestExample,
@@ -14131,10 +14134,10 @@ router.get("/", async (_req, res) => {
 				};
 			} catch (error) {
 				logger.debug(`Failed to fetch latest version: ${error}`);
-				latestVersion = versionCache.latestVersion ?? "0.122.1";
+				latestVersion = versionCache.latestVersion ?? "0.122.2";
 			}
 		}
-		const resolvedLatestVersion = latestVersion ?? "0.122.1";
+		const resolvedLatestVersion = latestVersion ?? "0.122.2";
 		const response = {
 			...buildBaseVersionFields(),
 			latestVersion: resolvedLatestVersion,
@@ -19802,8 +19805,8 @@ function registerRunEvaluationTool(server) {
 					}
 					filteredTestSuite.tests = filteredTests;
 				}
-				const { evaluate } = await import("./evaluator-CRrA6xHS.js");
-				const evalRecord = await (await import("./eval-yT4SKSzC.js")).default.create(config, filteredTestSuite.prompts, { id: `mcp-eval-${Date.now()}` });
+				const { evaluate } = await import("./evaluator-DxIVNCZm.js");
+				const evalRecord = await (await import("./eval-BFqlPFXm.js")).default.create(config, filteredTestSuite.prompts, { id: `mcp-eval-${Date.now()}` });
 				logger.debug(`Running filtered eval with ${filteredTestSuite.tests?.length || 0} test cases, ${filteredTestSuite.prompts.length} prompts, ${filteredTestSuite.providers.length} providers`);
 				const startTime = Date.now();
 				const result = await evaluate(filteredTestSuite, evalRecord, {

package/dist/src/{mantleChat-B9O0prU3.js → mantleChat-B7ZGnN3G.js}

@@ -1,4 +1,4 @@
-import { t as OpenAiChatCompletionProvider } from "./chat-DYIP7MZz.js";
+import { t as OpenAiChatCompletionProvider } from "./chat-DqUm2XRG.js";
 import { a as resolveBedrockMantleApiKey, i as isBedrockOpenAiResponsesModel, n as isBedrockGrokModel, o as resolveBedrockMantleRegion, t as getBedrockMantleOrigin } from "./mantle-Bdo9sH_V.js";
 //#region src/providers/bedrock/mantleChat.ts
 /**
@@ -99,4 +99,4 @@ function createBedrockMantleChatProvider(modelName, providerOptions = {}) {
 //#endregion
 export { createBedrockMantleChatProvider };
 
-//# sourceMappingURL=mantleChat-B9O0prU3.js.map
+//# sourceMappingURL=mantleChat-B7ZGnN3G.js.map

package/dist/src/{mantleChat-BRtCbGNb.js → mantleChat-BEwZSACi.js}

@@ -1,4 +1,4 @@
-import { t as OpenAiChatCompletionProvider } from "./chat-D6SUUPHc.js";
+import { t as OpenAiChatCompletionProvider } from "./chat-CQkXljIT.js";
 import { a as resolveBedrockMantleApiKey, i as isBedrockOpenAiResponsesModel, n as isBedrockGrokModel, o as resolveBedrockMantleRegion, t as getBedrockMantleOrigin } from "./mantle-DYK8PIFr.js";
 //#region src/providers/bedrock/mantleChat.ts
 /**
@@ -99,4 +99,4 @@ function createBedrockMantleChatProvider(modelName, providerOptions = {}) {
 //#endregion
 export { createBedrockMantleChatProvider };
 
-//# sourceMappingURL=mantleChat-BRtCbGNb.js.map
+//# sourceMappingURL=mantleChat-BEwZSACi.js.map

package/dist/src/{mantleChat-BNYodgnM.cjs → mantleChat-DRHEiiq7.cjs}

@@ -1,4 +1,4 @@
-const require_chat = require("./chat-g28uolEO.cjs");
+const require_chat = require("./chat-BuHuQ8dN.cjs");
 const require_mantle = require("./mantle-h3sulu4R.cjs");
 //#region src/providers/bedrock/mantleChat.ts
 /**
@@ -99,4 +99,4 @@ function createBedrockMantleChatProvider(modelName, providerOptions = {}) {
 //#endregion
 exports.createBedrockMantleChatProvider = createBedrockMantleChatProvider;
 
-//# sourceMappingURL=mantleChat-BNYodgnM.cjs.map
+//# sourceMappingURL=mantleChat-DRHEiiq7.cjs.map

package/dist/src/{mantleChat-aXRLgaar.js → mantleChat-bG3JUmId.js}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { t as OpenAiChatCompletionProvider } from "./chat-ByXWx4Jn.js";
+import { t as OpenAiChatCompletionProvider } from "./chat-WpIdBaCf.js";
 import { a as resolveBedrockMantleApiKey, i as isBedrockOpenAiResponsesModel, n as isBedrockGrokModel, o as resolveBedrockMantleRegion, t as getBedrockMantleOrigin } from "./mantle-BkQwOcE7.js";
 //#region src/providers/bedrock/mantleChat.ts
 /**
@@ -100,4 +100,4 @@ function createBedrockMantleChatProvider(modelName, providerOptions = {}) {
 //#endregion
 export { createBedrockMantleChatProvider };
 
-//# sourceMappingURL=mantleChat-aXRLgaar.js.map
+//# sourceMappingURL=mantleChat-bG3JUmId.js.map

package/dist/src/{memoryPoisoning-BP8lqzRR.js → memoryPoisoning-CRCeE8o0.js}

@@ -1,10 +1,10 @@
 import { o as logger } from "./logger-BKiOczgq.js";
 import { t as invariant } from "./invariant-CHP0zrix.js";
-import { Y as VERSION, t as fetchWithProxy } from "./fetch-BjXG13jC.js";
-import { a as getUserEmail } from "./accounts-Jug2Ciel.js";
+import { X as VERSION, t as fetchWithProxy } from "./fetch-tOnj-VPG.js";
+import { a as getUserEmail } from "./accounts-B8CVRmIl.js";
 import { d as createEmptyTokenUsage, n as accumulateAttackerTokenUsage, s as accumulateResponseTokenUsage } from "./tokenUsageUtils-BCYRro5h.js";
-import { i as getRemoteGenerationUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-CopIeiNI.js";
-import { S as throwIfTargetPromptExceedsMaxChars, a as callTargetProvider, h as messagesToRedteamHistory } from "./shared-Dk1AVE9w.js";
+import { i as getRemoteGenerationUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-DnSGqkoH.js";
+import { S as throwIfTargetPromptExceedsMaxChars, a as callTargetProvider, h as messagesToRedteamHistory } from "./shared-CkERSpeg.js";
 import { t as REDTEAM_MEMORY_POISONING_PLUGIN_ID } from "./constants-3y0xcfa4.js";
 //#region src/redteam/providers/agentic/memoryPoisoning.ts
 var MemoryPoisoningProvider = class {
@@ -108,4 +108,4 @@ var MemoryPoisoningProvider = class {
 //#endregion
 export { MemoryPoisoningProvider };
 
-//# sourceMappingURL=memoryPoisoning-BP8lqzRR.js.map
+//# sourceMappingURL=memoryPoisoning-CRCeE8o0.js.map

package/dist/src/{memoryPoisoning-CXlBD_-Y.js → memoryPoisoning-DPz_mF21.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { c as logger } from "./logger-YzVIwMVq.js";
-import { Y as VERSION, r as fetchWithProxy } from "./fetch-Bnj1JCJi.js";
+import { X as VERSION, r as fetchWithProxy } from "./fetch-KD8O9oZZ.js";
 import { t as invariant } from "./invariant-CbHB1xyx.js";
-import { s as getUserEmail } from "./accounts-CAjSMkuH.js";
+import { s as getUserEmail } from "./accounts-DApS8Gpe.js";
 import { d as createEmptyTokenUsage, n as accumulateAttackerTokenUsage, s as accumulateResponseTokenUsage } from "./tokenUsageUtils-Cf6nFV6z.js";
-import { i as getRemoteGenerationUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-B0eQSIHo.js";
-import { S as throwIfTargetPromptExceedsMaxChars, a as callTargetProvider, h as messagesToRedteamHistory } from "./shared-yyb3qFQd.js";
+import { i as getRemoteGenerationUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-Cc78LDjQ.js";
+import { S as throwIfTargetPromptExceedsMaxChars, a as callTargetProvider, h as messagesToRedteamHistory } from "./shared-jcnXW0lA.js";
 import { t as REDTEAM_MEMORY_POISONING_PLUGIN_ID } from "./constants-CDdPiEZR.js";
 //#region src/redteam/providers/agentic/memoryPoisoning.ts
 var MemoryPoisoningProvider = class {
@@ -109,4 +109,4 @@ var MemoryPoisoningProvider = class {
 //#endregion
 export { MemoryPoisoningProvider };
 
-//# sourceMappingURL=memoryPoisoning-CXlBD_-Y.js.map
+//# sourceMappingURL=memoryPoisoning-DPz_mF21.js.map

package/dist/src/{memoryPoisoning-B2dsdKye.cjs → memoryPoisoning-DRIrT0Zv.cjs}

@@ -1,10 +1,10 @@
 const require_logger = require("./logger-BN3n9c1R.cjs");
 const require_invariant = require("./invariant-C2JOzzO2.cjs");
-const require_fetch = require("./fetch-DTnUr1aF.cjs");
-const require_accounts = require("./accounts-CZFxG3Og.cjs");
+const require_fetch = require("./fetch-D54lzFcD.cjs");
+const require_accounts = require("./accounts-DosZWKJy.cjs");
 const require_tokenUsageUtils = require("./tokenUsageUtils-BbqyaBi4.cjs");
-const require_remoteGeneration = require("./remoteGeneration-PxK1EefI.cjs");
-const require_shared = require("./shared-IP25vMkJ.cjs");
+const require_remoteGeneration = require("./remoteGeneration-C0Ev99MO.cjs");
+const require_shared = require("./shared-Bl84k1Oo.cjs");
 const require_constants = require("./constants-BHSKoWzY.cjs");
 //#region src/redteam/providers/agentic/memoryPoisoning.ts
 var MemoryPoisoningProvider = class {
@@ -108,4 +108,4 @@ var MemoryPoisoningProvider = class {
 //#endregion
 exports.MemoryPoisoningProvider = MemoryPoisoningProvider;
 
-//# sourceMappingURL=memoryPoisoning-B2dsdKye.cjs.map
+//# sourceMappingURL=memoryPoisoning-DRIrT0Zv.cjs.map

package/dist/src/{memoryPoisoning-C2cyu0C-.js → memoryPoisoning-DUqPlY5F.js}

@@ -1,10 +1,10 @@
 import { o as logger } from "./logger-D4ion89i.js";
-import { X as VERSION, t as fetchWithProxy } from "./fetch-BdWQKDMj.js";
+import { Z as VERSION, t as fetchWithProxy } from "./fetch-DnDg-Ics.js";
 import { t as invariant } from "./invariant-CHP0zrix.js";
-import { s as getUserEmail } from "./accounts-mch0qw47.js";
+import { s as getUserEmail } from "./accounts-BDud3p32.js";
 import { d as createEmptyTokenUsage, n as accumulateAttackerTokenUsage, s as accumulateResponseTokenUsage } from "./tokenUsageUtils-T-dUB6UI.js";
-import { i as getRemoteGenerationUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-CwQ0KBdC.js";
-import { S as throwIfTargetPromptExceedsMaxChars, a as callTargetProvider, h as messagesToRedteamHistory } from "./shared-D5rN2VlH.js";
+import { i as getRemoteGenerationUrl, p as remoteGenerationContextPayload, r as getRemoteGenerationHeaders } from "./remoteGeneration-DGJxSMYI.js";
+import { S as throwIfTargetPromptExceedsMaxChars, a as callTargetProvider, h as messagesToRedteamHistory } from "./shared-BkcgE6vB.js";
 import { t as REDTEAM_MEMORY_POISONING_PLUGIN_ID } from "./constants-3y0xcfa4.js";
 //#region src/redteam/providers/agentic/memoryPoisoning.ts
 var MemoryPoisoningProvider = class {
@@ -108,4 +108,4 @@ var MemoryPoisoningProvider = class {
 //#endregion
 export { MemoryPoisoningProvider };
 
-//# sourceMappingURL=memoryPoisoning-C2cyu0C-.js.map
+//# sourceMappingURL=memoryPoisoning-DUqPlY5F.js.map

package/dist/src/{messages-B5cYbsZJ.cjs → messages-BDbtGaqI.cjs}

@@ -1,14 +1,14 @@
 const require_logger = require("./logger-BN3n9c1R.cjs");
-const require_util = require("./util-L5T81aJ0.cjs");
-const require_fetch = require("./fetch-DTnUr1aF.cjs");
+const require_util = require("./util-BPkxeLuk.cjs");
+const require_fetch = require("./fetch-D54lzFcD.cjs");
 const require_genaiTracer = require("./genaiTracer-D_3mCxrD.cjs");
-const require_cache = require("./cache-DU82DyKI.cjs");
+const require_cache = require("./cache-g3VTrtsd.cjs");
 const require_tokenUsageUtils = require("./tokenUsageUtils-BbqyaBi4.cjs");
-const require_util$1 = require("./util-BNvjVvcH.cjs");
+const require_util$1 = require("./util-DhtW6BNS.cjs");
 const require_finishReason = require("./finishReason-Db2CSQem.cjs");
-const require_client = require("./client-DvRyvBRs.cjs");
-const require_transform = require("./transform-CCHDyuc8.cjs");
-const require_util$2 = require("./util-ChbabPn9.cjs");
+const require_client = require("./client-B8cIFzy1.cjs");
+const require_transform = require("./transform-DS2y12jo.cjs");
+const require_util$2 = require("./util-Bd8_MhVm.cjs");
 let node_crypto = require("node:crypto");
 let node_fs = require("node:fs");
 node_fs = require_logger.__toESM(node_fs, 1);
@@ -1021,4 +1021,4 @@ Object.defineProperty(exports, "hashAnthropicCacheValue", {
 	}
 });
 
-//# sourceMappingURL=messages-B5cYbsZJ.cjs.map
+//# sourceMappingURL=messages-BDbtGaqI.cjs.map

package/dist/src/{messages-C1diy8zs.js → messages-C306BIuu.js}

@@ -1,14 +1,14 @@
 import { M as getEnvFloat, N as getEnvInt, P as getEnvString, o as logger, z as getEnvOverrides } from "./logger-BKiOczgq.js";
-import { X as maybeLoadResponseFormatFromExternalFile, Z as maybeLoadToolsFromExternalFile } from "./util-DdGIEAK_.js";
-import { N as transformToolChoice, P as transformTools } from "./fetch-BjXG13jC.js";
+import { X as maybeLoadResponseFormatFromExternalFile, Z as maybeLoadToolsFromExternalFile } from "./util-BnytsHEr.js";
+import { F as transformTools, P as transformToolChoice } from "./fetch-tOnj-VPG.js";
 import { f as withGenAISpan } from "./genaiTracer-Ch7k9W3C.js";
-import { a as getCache, c as getScopedCacheKey, l as isCacheEnabled, o as getCacheClearGeneration, s as getCacheTtlMs } from "./cache-Bwj_lNIo.js";
+import { a as getCache, c as getScopedCacheKey, l as isCacheEnabled, o as getCacheClearGeneration, s as getCacheTtlMs } from "./cache-DTOVFNqA.js";
 import { d as createEmptyTokenUsage } from "./tokenUsageUtils-BCYRro5h.js";
-import { i as getMcpErrorMessage, s as isMcpErrorResult } from "./util-PX9qBGnk.js";
+import { i as getMcpErrorMessage, s as isMcpErrorResult } from "./util-InmFNqSw.js";
 import { n as normalizeFinishReason } from "./finishReason-B-qIZdbG.js";
-import { t as MCPClient } from "./client-BpIjXLJ0.js";
-import { n as transformMCPToolsToAnthropic } from "./transform-D0QSXU95.js";
-import { C as parseMessages, S as outputFromMessage, _ as isSamplingParamsDeprecatedClaudeModel, b as normalizeAnthropicModelName, c as getClaudeModelWarningName, d as isAlwaysOnAdaptiveThinkingClaudeModel, g as isDisabledThinkingRejectedAtEffort, i as calculateAnthropicCost, l as getRefusalDetails, o as clampMaxTokensForThinkingBudget, s as claudeThinkingConsumesTokens, t as ANTHROPIC_MODELS, u as getTokenUsage, w as processAnthropicTools, x as normalizeClaudeThinkingConfig } from "./util-BJ42x4mo.js";
+import { t as MCPClient } from "./client-C8mYuoRi.js";
+import { n as transformMCPToolsToAnthropic } from "./transform-BesK7nGM.js";
+import { C as parseMessages, S as outputFromMessage, _ as isSamplingParamsDeprecatedClaudeModel, b as normalizeAnthropicModelName, c as getClaudeModelWarningName, d as isAlwaysOnAdaptiveThinkingClaudeModel, g as isDisabledThinkingRejectedAtEffort, i as calculateAnthropicCost, l as getRefusalDetails, o as clampMaxTokensForThinkingBudget, s as claudeThinkingConsumesTokens, t as ANTHROPIC_MODELS, u as getTokenUsage, w as processAnthropicTools, x as normalizeClaudeThinkingConfig } from "./util-Bac0h5Sr.js";
 import { createHash } from "node:crypto";
 import path from "node:path";
 import fs from "node:fs";
@@ -988,4 +988,4 @@ var AnthropicMessagesProvider = class AnthropicMessagesProvider extends Anthropi
 //#endregion
 export { hashAnthropicCacheValue as a, getAnthropicEnvHeaderSuppressions as i, AnthropicGenericProvider as n, buildIsolatedAnthropicClientOptions as r, AnthropicMessagesProvider as t };
 
-//# sourceMappingURL=messages-C1diy8zs.js.map
+//# sourceMappingURL=messages-C306BIuu.js.map

package/dist/src/{messages-C9rJcTgf.js → messages-Cqi4nZlY.js}

@@ -1,14 +1,14 @@
 import { B as getEnvOverrides, F as getEnvInt, I as getEnvString, P as getEnvFloat, o as logger } from "./logger-D4ion89i.js";
-import { ft as maybeLoadResponseFormatFromExternalFile, pt as maybeLoadToolsFromExternalFile } from "./util-uYYKYi7_.js";
-import { R as transformToolChoice, z as transformTools } from "./fetch-BdWQKDMj.js";
+import { ft as maybeLoadResponseFormatFromExternalFile, pt as maybeLoadToolsFromExternalFile } from "./util-BPtpPW4O.js";
+import { B as transformTools, z as transformToolChoice } from "./fetch-DnDg-Ics.js";
 import { f as withGenAISpan } from "./genaiTracer-Cp9O3qLz.js";
-import { a as getCache, c as getScopedCacheKey, l as isCacheEnabled, o as getCacheClearGeneration, s as getCacheTtlMs } from "./cache-C41JuZ74.js";
+import { a as getCache, c as getScopedCacheKey, l as isCacheEnabled, o as getCacheClearGeneration, s as getCacheTtlMs } from "./cache-ePPAC5hy.js";
 import { d as createEmptyTokenUsage } from "./tokenUsageUtils-T-dUB6UI.js";
 import { n as normalizeFinishReason } from "./finishReason-B-qIZdbG.js";
-import { i as getMcpErrorMessage, s as isMcpErrorResult } from "./util-Ur5TGF_w.js";
-import { t as MCPClient } from "./client-nl7Ghern.js";
-import { n as transformMCPToolsToAnthropic } from "./transform-BfiH9c1w.js";
-import { C as parseMessages, S as outputFromMessage, _ as isSamplingParamsDeprecatedClaudeModel, b as normalizeAnthropicModelName, c as getClaudeModelWarningName, d as isAlwaysOnAdaptiveThinkingClaudeModel, g as isDisabledThinkingRejectedAtEffort, i as calculateAnthropicCost, l as getRefusalDetails, o as clampMaxTokensForThinkingBudget, s as claudeThinkingConsumesTokens, t as ANTHROPIC_MODELS, u as getTokenUsage, w as processAnthropicTools, x as normalizeClaudeThinkingConfig } from "./util-EBjz-RBV.js";
+import { i as getMcpErrorMessage, s as isMcpErrorResult } from "./util-BPlSGvsQ.js";
+import { t as MCPClient } from "./client-4bErwdpG.js";
+import { n as transformMCPToolsToAnthropic } from "./transform-ciU2euIH.js";
+import { C as parseMessages, S as outputFromMessage, _ as isSamplingParamsDeprecatedClaudeModel, b as normalizeAnthropicModelName, c as getClaudeModelWarningName, d as isAlwaysOnAdaptiveThinkingClaudeModel, g as isDisabledThinkingRejectedAtEffort, i as calculateAnthropicCost, l as getRefusalDetails, o as clampMaxTokensForThinkingBudget, s as claudeThinkingConsumesTokens, t as ANTHROPIC_MODELS, u as getTokenUsage, w as processAnthropicTools, x as normalizeClaudeThinkingConfig } from "./util-BaGd-bCr.js";
 import { createHash } from "node:crypto";
 import path from "node:path";
 import fs from "node:fs";
@@ -988,4 +988,4 @@ var AnthropicMessagesProvider = class AnthropicMessagesProvider extends Anthropi
 //#endregion
 export { hashAnthropicCacheValue as a, getAnthropicEnvHeaderSuppressions as i, AnthropicGenericProvider as n, buildIsolatedAnthropicClientOptions as r, AnthropicMessagesProvider as t };
 
-//# sourceMappingURL=messages-C9rJcTgf.js.map
+//# sourceMappingURL=messages-Cqi4nZlY.js.map

package/dist/src/{messages-C3_Aa793.js → messages-W898zuCm.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { I as getEnvFloat, L as getEnvInt, R as getEnvString, W as getEnvOverrides, c as logger } from "./logger-YzVIwMVq.js";
-import { L as transformToolChoice, R as transformTools } from "./fetch-Bnj1JCJi.js";
+import { R as transformToolChoice, z as transformTools } from "./fetch-KD8O9oZZ.js";
 import { f as withGenAISpan } from "./genaiTracer-BRW5P2xD.js";
-import { B as maybeLoadResponseFormatFromExternalFile, V as maybeLoadToolsFromExternalFile } from "./util-BdAsuWmv.js";
-import { a as getCache, c as getScopedCacheKey, l as isCacheEnabled, o as getCacheClearGeneration, s as getCacheTtlMs } from "./cache-NhFSRGTI.js";
+import { a as getCache, l as getScopedCacheKey, o as getCacheClearGeneration, s as getCacheTtlMs, u as isCacheEnabled } from "./cache-xL5UULpy.js";
+import { B as maybeLoadResponseFormatFromExternalFile, V as maybeLoadToolsFromExternalFile } from "./util-CZyLhvIk.js";
 import { d as createEmptyTokenUsage } from "./tokenUsageUtils-Cf6nFV6z.js";
-import { i as getMcpErrorMessage, s as isMcpErrorResult } from "./util-DT7Jko3E.js";
+import { i as getMcpErrorMessage, s as isMcpErrorResult } from "./util-CzWbxb9R.js";
 import { n as normalizeFinishReason } from "./finishReason-CzSuX3nu.js";
-import { t as MCPClient } from "./client-QLK1dAIt.js";
-import { n as transformMCPToolsToAnthropic } from "./transform-CdcZMCo-.js";
-import { C as parseMessages, S as outputFromMessage, _ as isSamplingParamsDeprecatedClaudeModel, b as normalizeAnthropicModelName, c as getClaudeModelWarningName, d as isAlwaysOnAdaptiveThinkingClaudeModel, g as isDisabledThinkingRejectedAtEffort, i as calculateAnthropicCost, l as getRefusalDetails, o as clampMaxTokensForThinkingBudget, s as claudeThinkingConsumesTokens, t as ANTHROPIC_MODELS, u as getTokenUsage, w as processAnthropicTools, x as normalizeClaudeThinkingConfig } from "./util-tlprLsf4.js";
+import { t as MCPClient } from "./client-Bz_qkOt7.js";
+import { n as transformMCPToolsToAnthropic } from "./transform-2ldksCeN.js";
+import { C as parseMessages, S as outputFromMessage, _ as isSamplingParamsDeprecatedClaudeModel, b as normalizeAnthropicModelName, c as getClaudeModelWarningName, d as isAlwaysOnAdaptiveThinkingClaudeModel, g as isDisabledThinkingRejectedAtEffort, i as calculateAnthropicCost, l as getRefusalDetails, o as clampMaxTokensForThinkingBudget, s as claudeThinkingConsumesTokens, t as ANTHROPIC_MODELS, u as getTokenUsage, w as processAnthropicTools, x as normalizeClaudeThinkingConfig } from "./util-9K7THVcA2.js";
 import path from "node:path";
 import { createHash } from "node:crypto";
 import fs from "node:fs";
@@ -989,4 +989,4 @@ var AnthropicMessagesProvider = class AnthropicMessagesProvider extends Anthropi
 //#endregion
 export { hashAnthropicCacheValue as a, getAnthropicEnvHeaderSuppressions as i, AnthropicGenericProvider as n, buildIsolatedAnthropicClientOptions as r, AnthropicMessagesProvider as t };
 
-//# sourceMappingURL=messages-C3_Aa793.js.map
+//# sourceMappingURL=messages-W898zuCm.js.map

package/dist/src/{mischievousUser-BM8LRsDW.js → mischievousUser-4wlyqv76.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { t as invariant } from "./invariant-CbHB1xyx.js";
-import { l as isLoggedIntoCloud } from "./accounts-CAjSMkuH.js";
+import { l as isLoggedIntoCloud } from "./accounts-DApS8Gpe.js";
 import { n as accumulateAttackerTokenUsage } from "./tokenUsageUtils-Cf6nFV6z.js";
-import { i as REDTEAM_SIMULATED_USER_TASK_ID } from "./promptfoo-DFE6FPtn.js";
-import { t as SimulatedUser } from "./simulatedUser-6ys8hxx_.js";
-import { d as getLastMessageContent, h as messagesToRedteamHistory } from "./shared-yyb3qFQd.js";
+import { i as REDTEAM_SIMULATED_USER_TASK_ID } from "./promptfoo-HD40ugrk.js";
+import { t as SimulatedUser } from "./simulatedUser-BTox0iZp.js";
+import { d as getLastMessageContent, h as messagesToRedteamHistory } from "./shared-jcnXW0lA.js";
 //#region src/redteam/providers/mischievousUser.ts
 const PROVIDER_ID = "promptfoo:redteam:mischievous-user";
 var RedteamMischievousUserProvider = class extends SimulatedUser {
@@ -49,4 +49,4 @@ var RedteamMischievousUserProvider = class extends SimulatedUser {
 //#endregion
 export { RedteamMischievousUserProvider as default };
 
-//# sourceMappingURL=mischievousUser-BM8LRsDW.js.map
+//# sourceMappingURL=mischievousUser-4wlyqv76.js.map

package/dist/src/{mischievousUser-SPu0AbcD.js → mischievousUser-B1-HU9CD.js}

@@ -1,9 +1,9 @@
 import { t as invariant } from "./invariant-CHP0zrix.js";
-import { l as isLoggedIntoCloud } from "./accounts-mch0qw47.js";
+import { l as isLoggedIntoCloud } from "./accounts-BDud3p32.js";
 import { n as accumulateAttackerTokenUsage } from "./tokenUsageUtils-T-dUB6UI.js";
-import { d as getLastMessageContent, h as messagesToRedteamHistory } from "./shared-D5rN2VlH.js";
-import { i as REDTEAM_SIMULATED_USER_TASK_ID } from "./promptfoo-DmLIq1Fg.js";
-import { t as SimulatedUser } from "./simulatedUser-9Ru_f_dX.js";
+import { d as getLastMessageContent, h as messagesToRedteamHistory } from "./shared-BkcgE6vB.js";
+import { i as REDTEAM_SIMULATED_USER_TASK_ID } from "./promptfoo-ByMuyN2p.js";
+import { t as SimulatedUser } from "./simulatedUser-BK0F6Lub.js";
 //#region src/redteam/providers/mischievousUser.ts
 const PROVIDER_ID = "promptfoo:redteam:mischievous-user";
 var RedteamMischievousUserProvider = class extends SimulatedUser {
@@ -48,4 +48,4 @@ var RedteamMischievousUserProvider = class extends SimulatedUser {
 //#endregion
 export { RedteamMischievousUserProvider as default };
 
-//# sourceMappingURL=mischievousUser-SPu0AbcD.js.map
+//# sourceMappingURL=mischievousUser-B1-HU9CD.js.map

package/dist/src/{mischievousUser-BVr9ULj0.js → mischievousUser-BJQRmmfP.js}

@@ -1,9 +1,9 @@
 import { t as invariant } from "./invariant-CHP0zrix.js";
-import { s as isLoggedIntoCloud } from "./accounts-Jug2Ciel.js";
+import { s as isLoggedIntoCloud } from "./accounts-B8CVRmIl.js";
 import { n as accumulateAttackerTokenUsage } from "./tokenUsageUtils-BCYRro5h.js";
-import { i as REDTEAM_SIMULATED_USER_TASK_ID } from "./promptfoo-BnRYCHWo.js";
-import { t as SimulatedUser } from "./simulatedUser-BHmmQ4hb.js";
-import { d as getLastMessageContent, h as messagesToRedteamHistory } from "./shared-Dk1AVE9w.js";
+import { i as REDTEAM_SIMULATED_USER_TASK_ID } from "./promptfoo-BeCm2WDJ.js";
+import { t as SimulatedUser } from "./simulatedUser-C8WconFg.js";
+import { d as getLastMessageContent, h as messagesToRedteamHistory } from "./shared-CkERSpeg.js";
 //#region src/redteam/providers/mischievousUser.ts
 const PROVIDER_ID = "promptfoo:redteam:mischievous-user";
 var RedteamMischievousUserProvider = class extends SimulatedUser {
@@ -48,4 +48,4 @@ var RedteamMischievousUserProvider = class extends SimulatedUser {
 //#endregion
 export { RedteamMischievousUserProvider as default };
 
-//# sourceMappingURL=mischievousUser-BVr9ULj0.js.map
+//# sourceMappingURL=mischievousUser-BJQRmmfP.js.map

package/dist/src/{mischievousUser-BDv5f6eO.cjs → mischievousUser-CHIJi5vr.cjs}

@@ -1,9 +1,9 @@
 const require_invariant = require("./invariant-C2JOzzO2.cjs");
-const require_accounts = require("./accounts-CZFxG3Og.cjs");
+const require_accounts = require("./accounts-DosZWKJy.cjs");
 const require_tokenUsageUtils = require("./tokenUsageUtils-BbqyaBi4.cjs");
-const require_promptfoo = require("./promptfoo-BzTq3CZR.cjs");
-const require_simulatedUser = require("./simulatedUser-BQghw48z.cjs");
-const require_shared = require("./shared-IP25vMkJ.cjs");
+const require_promptfoo = require("./promptfoo-B3EDkr9n.cjs");
+const require_simulatedUser = require("./simulatedUser-ByVb7gXp.cjs");
+const require_shared = require("./shared-Bl84k1Oo.cjs");
 //#region src/redteam/providers/mischievousUser.ts
 const PROVIDER_ID = "promptfoo:redteam:mischievous-user";
 var RedteamMischievousUserProvider = class extends require_simulatedUser.SimulatedUser {
@@ -48,4 +48,4 @@ var RedteamMischievousUserProvider = class extends require_simulatedUser.Simulat
 //#endregion
 exports.default = RedteamMischievousUserProvider;
 
-//# sourceMappingURL=mischievousUser-BDv5f6eO.cjs.map
+//# sourceMappingURL=mischievousUser-CHIJi5vr.cjs.map

package/dist/src/{modelslab-9k-zzEfW.cjs → modelslab-CLDbPmPX.cjs}

@@ -1,6 +1,6 @@
 const require_logger = require("./logger-BN3n9c1R.cjs");
-const require_fetch = require("./fetch-DTnUr1aF.cjs");
-const require_cache = require("./cache-DU82DyKI.cjs");
+const require_fetch = require("./fetch-D54lzFcD.cjs");
+const require_cache = require("./cache-g3VTrtsd.cjs");
 const require_blobs = require("./blobs-DsXWJXf6.cjs");
 const require_extractor = require("./extractor-C6JkPnKn.cjs");
 const require_text = require("./text-513KmH8t.cjs");
@@ -166,4 +166,4 @@ var ModelsLabImageProvider = class {
 //#endregion
 exports.ModelsLabImageProvider = ModelsLabImageProvider;
 
-//# sourceMappingURL=modelslab-9k-zzEfW.cjs.map
+//# sourceMappingURL=modelslab-CLDbPmPX.cjs.map

package/dist/src/{modelslab-VVi56eHt.js → modelslab-CZ03gaHC.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { R as getEnvString, c as logger } from "./logger-YzVIwMVq.js";
-import { k as getRequestTimeoutMs, r as fetchWithProxy } from "./fetch-Bnj1JCJi.js";
-import { i as fetchWithCache } from "./cache-NhFSRGTI.js";
+import { A as getRequestTimeoutMs, r as fetchWithProxy } from "./fetch-KD8O9oZZ.js";
+import { i as fetchWithCache } from "./cache-xL5UULpy.js";
 import { s as storeBlob } from "./blobs-Dpyeuxru.js";
 import { n as isBlobStorageEnabled } from "./extractor-8jl9p5Oy.js";
 import { t as ellipsize } from "./text-CV7MmVb_.js";
@@ -167,4 +167,4 @@ var ModelsLabImageProvider = class {
 //#endregion
 export { ModelsLabImageProvider };
 
-//# sourceMappingURL=modelslab-VVi56eHt.js.map
+//# sourceMappingURL=modelslab-CZ03gaHC.js.map