promptfoo 0.122.1 → 0.122.2

package/dist/src/{shared-IP25vMkJ.cjs → shared-Bl84k1Oo.cjs}

@@ -1,15 +1,15 @@
 const require_logger = require("./logger-BN3n9c1R.cjs");
 const require_invariant = require("./invariant-C2JOzzO2.cjs");
-const require_util = require("./util-L5T81aJ0.cjs");
-const require_fetch = require("./fetch-DTnUr1aF.cjs");
+const require_util = require("./util-BPkxeLuk.cjs");
+const require_fetch = require("./fetch-D54lzFcD.cjs");
 require("./tables-BaWJhXDV.cjs");
 const require_time = require("./time-B7AqDy5g.cjs");
-const require_accounts = require("./accounts-CZFxG3Og.cjs");
+const require_accounts = require("./accounts-DosZWKJy.cjs");
 const require_extractor = require("./extractor-C6JkPnKn.cjs");
 const require_tokenUsageUtils = require("./tokenUsageUtils-BbqyaBi4.cjs");
-const require_remoteGeneration = require("./remoteGeneration-PxK1EefI.cjs");
-const require_chat = require("./chat-g28uolEO.cjs");
-const require_promptfoo = require("./promptfoo-BzTq3CZR.cjs");
+const require_remoteGeneration = require("./remoteGeneration-C0Ev99MO.cjs");
+const require_chat = require("./chat-BuHuQ8dN.cjs");
+const require_promptfoo = require("./promptfoo-B3EDkr9n.cjs");
 const require_transform = require("./transform-Bz311bXX.cjs");
 let node_async_hooks = require("node:async_hooks");
 let crypto = require("crypto");
@@ -137,12 +137,12 @@ function wrapProviderWithRateLimiting(provider, registry) {
 function buildRemoteUploadTarget() {
 	if (require_logger.getEnvBool("PROMPTFOO_DISABLE_SHARING")) return null;
 	const baseUrl = require_fetch.cloudConfig.getApiHost();
-	const apiKey = require_fetch.cloudConfig.getApiKey();
-	if (!baseUrl || !apiKey || !require_accounts.isLoggedIntoCloud()) return null;
+	const authHeaders = require_fetch.cloudConfig.getAuthHeaders();
+	if (!baseUrl || !authHeaders || !require_accounts.isLoggedIntoCloud()) return null;
 	try {
 		return {
 			url: new URL("/api/blobs", baseUrl).toString(),
-			apiKey
+			authHeaders
 		};
 	} catch (error) {
 		require_logger.logger.debug("[RemoteBlob] Invalid remote blob URL", {
@@ -159,12 +159,12 @@ async function uploadBlobRemote(buffer, mimeType, context) {
 	const target = buildRemoteUploadTarget();
 	if (!target) return null;
 	try {
-		const { fetchWithProxy } = await Promise.resolve().then(() => require("./fetch-DTnUr1aF.cjs")).then((n) => n.fetch_exports);
+		const { fetchWithProxy } = await Promise.resolve().then(() => require("./fetch-D54lzFcD.cjs")).then((n) => n.fetch_exports);
 		const response = await fetchWithProxy(target.url, {
 			method: "POST",
 			headers: {
 				"Content-Type": "application/json",
-				Authorization: `Bearer ${target.apiKey}`
+				...target.authHeaders
 			},
 			body: JSON.stringify({
 				data: buffer.toString("base64"),
@@ -1130,7 +1130,7 @@ function accumulateUnblockingTokenUsage(totalTokenUsage, result) {
 	});
 }
 const defaultRedteamProviderLoader = async (providers) => {
-	const { loadApiProviders } = await Promise.resolve().then(() => require("./providers-ASKoKjG0.cjs")).then((n) => n.providers_exports);
+	const { loadApiProviders } = await Promise.resolve().then(() => require("./providers-CRCoPqQH.cjs")).then((n) => n.providers_exports);
 	return loadApiProviders(providers);
 };
 let redteamProviderLoader = defaultRedteamProviderLoader;
@@ -1583,7 +1583,7 @@ async function tryUnblocking({ messages, lastResponse, goal, purpose, targetId }
 			require_logger.logger.debug("[Unblocking] Disabled by default (set PROMPTFOO_ENABLE_UNBLOCKING=true to enable)");
 			return { success: false };
 		}
-		const { checkServerFeatureSupport } = await Promise.resolve().then(() => require("./server-CkrRpgsu.cjs")).then((n) => n.server_exports);
+		const { checkServerFeatureSupport } = await Promise.resolve().then(() => require("./server-BpmZ1EP0.cjs")).then((n) => n.server_exports);
 		if (!await checkServerFeatureSupport("blocking-question-analysis", "2025-06-16T14:49:11-07:00")) {
 			require_logger.logger.debug("[Unblocking] Server does not support unblocking, skipping gracefully");
 			return { success: false };
@@ -1862,4 +1862,4 @@ Object.defineProperty(exports, "withProviderCallTracingContext", {
 	}
 });
 
-//# sourceMappingURL=shared-IP25vMkJ.cjs.map
+//# sourceMappingURL=shared-Bl84k1Oo.cjs.map

package/dist/src/{shared-Dk1AVE9w.js → shared-CkERSpeg.js}

@@ -1,15 +1,15 @@
 import { E as safeJsonStringify, M as getEnvFloat, N as getEnvInt, R as state, j as getEnvBool, o as logger } from "./logger-BKiOczgq.js";
 import { t as invariant } from "./invariant-CHP0zrix.js";
-import { B as sanitizeProviderIdForLog, gt as isProviderOptions, ht as isApiProvider } from "./util-DdGIEAK_.js";
-import { I as cloudConfig, _ as isHttpRateLimitError, b as parseRateLimitHeaders, s as withFetchRetryContext, x as parseRetryAfter, y as isTransientConnectionError } from "./fetch-BjXG13jC.js";
+import { B as sanitizeProviderIdForLog, lt as isApiProvider, ut as isProviderOptions } from "./util-BnytsHEr.js";
+import { L as cloudConfig, S as parseRetryAfter, b as isTransientConnectionError, s as withFetchRetryContext, v as isHttpRateLimitError, x as parseRateLimitHeaders } from "./fetch-tOnj-VPG.js";
 import "./tables-BMHjeqVY.js";
 import { n as sleep } from "./time-BPNW8jwJ.js";
-import { s as isLoggedIntoCloud } from "./accounts-Jug2Ciel.js";
+import { s as isLoggedIntoCloud } from "./accounts-B8CVRmIl.js";
 import { n as isBlobStorageEnabled, t as extractAndStoreBinaryData } from "./extractor-BzMT8mfJ.js";
 import { a as accumulateGradingResponseTokenUsage, c as accumulateTokenUsage, d as createEmptyTokenUsage, s as accumulateResponseTokenUsage } from "./tokenUsageUtils-BCYRro5h.js";
-import { p as remoteGenerationContextPayload } from "./remoteGeneration-CopIeiNI.js";
-import { t as OpenAiChatCompletionProvider } from "./chat-DYIP7MZz.js";
-import { t as PromptfooChatCompletionProvider } from "./promptfoo-BnRYCHWo.js";
+import { p as remoteGenerationContextPayload } from "./remoteGeneration-DnSGqkoH.js";
+import { t as OpenAiChatCompletionProvider } from "./chat-DqUm2XRG.js";
+import { t as PromptfooChatCompletionProvider } from "./promptfoo-BeCm2WDJ.js";
 import { o as transform, r as TransformInputType } from "./transform-Ccf_EBqd.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { createHash, randomUUID } from "crypto";
@@ -137,12 +137,12 @@ function wrapProviderWithRateLimiting(provider, registry) {
 function buildRemoteUploadTarget() {
 	if (getEnvBool("PROMPTFOO_DISABLE_SHARING")) return null;
 	const baseUrl = cloudConfig.getApiHost();
-	const apiKey = cloudConfig.getApiKey();
-	if (!baseUrl || !apiKey || !isLoggedIntoCloud()) return null;
+	const authHeaders = cloudConfig.getAuthHeaders();
+	if (!baseUrl || !authHeaders || !isLoggedIntoCloud()) return null;
 	try {
 		return {
 			url: new URL("/api/blobs", baseUrl).toString(),
-			apiKey
+			authHeaders
 		};
 	} catch (error) {
 		logger.debug("[RemoteBlob] Invalid remote blob URL", {
@@ -159,12 +159,12 @@ async function uploadBlobRemote(buffer, mimeType, context) {
 	const target = buildRemoteUploadTarget();
 	if (!target) return null;
 	try {
-		const { fetchWithProxy } = await import("./fetch-BjXG13jC.js").then((n) => n.i);
+		const { fetchWithProxy } = await import("./fetch-tOnj-VPG.js").then((n) => n.i);
 		const response = await fetchWithProxy(target.url, {
 			method: "POST",
 			headers: {
 				"Content-Type": "application/json",
-				Authorization: `Bearer ${target.apiKey}`
+				...target.authHeaders
 			},
 			body: JSON.stringify({
 				data: buffer.toString("base64"),
@@ -1130,7 +1130,7 @@ function accumulateUnblockingTokenUsage(totalTokenUsage, result) {
 	});
 }
 const defaultRedteamProviderLoader = async (providers) => {
-	const { loadApiProviders } = await import("./providers-YJTtc38R.js").then((n) => n.i);
+	const { loadApiProviders } = await import("./providers-BbgOo13t.js").then((n) => n.i);
 	return loadApiProviders(providers);
 };
 let redteamProviderLoader = defaultRedteamProviderLoader;
@@ -1583,7 +1583,7 @@ async function tryUnblocking({ messages, lastResponse, goal, purpose, targetId }
 			logger.debug("[Unblocking] Disabled by default (set PROMPTFOO_ENABLE_UNBLOCKING=true to enable)");
 			return { success: false };
 		}
-		const { checkServerFeatureSupport } = await import("./server-lm2H6tXC.js").then((n) => n.n);
+		const { checkServerFeatureSupport } = await import("./server-DB1I8Xl3.js").then((n) => n.n);
 		if (!await checkServerFeatureSupport("blocking-question-analysis", "2025-06-16T14:49:11-07:00")) {
 			logger.debug("[Unblocking] Server does not support unblocking, skipping gracefully");
 			return { success: false };
@@ -1671,4 +1671,4 @@ function getGraderAssertionValue(assertToUse) {
 //#endregion
 export { getProviderCallTracingContext as A, TokenUsageTracker as C, createProviderRateLimitOptions as D, uploadBlobRemote as E, withProviderCallTracingContext as M, isRateLimitWrapped as O, throwIfTargetPromptExceedsMaxChars as S, shouldAttemptRemoteBlobUpload as T, runRedteamGrader as _, callTargetProvider as a, getGeneratedPromptOverLimit as b, externalizeResponseForRedteamHistory as c, getLastMessageContent as d, getTargetResponse as f, redteamProviderManager as g, messagesToRedteamHistory as h, callGradingProvider as i, withProviderCallExecutionContext as j, getProviderCallExecutionContext as k, formatRedteamHistoryAsTranscript as l, isValidChatMessageArray as m, accumulateUnblockingTokenUsage as n, checkPenalizedPhrases as o, isConversationEndedResponse as p, buildGraderResultAssertion as r, createIterationContext as s, accumulateGraderResult as t, getGraderAssertionValue as u, tryUnblocking as v, createRateLimitRegistry as w, getMaxCharsPerMessageModifierValue as x, MAX_CHARS_PER_MESSAGE_MODIFIER_KEY as y };
 
-//# sourceMappingURL=shared-Dk1AVE9w.js.map
+//# sourceMappingURL=shared-CkERSpeg.js.map

package/dist/src/{shared-yyb3qFQd.js → shared-jcnXW0lA.js}

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
 import { F as getEnvBool, I as getEnvFloat, L as getEnvInt, U as state, c as logger, k as safeJsonStringify } from "./logger-YzVIwMVq.js";
-import { A as isApiProvider, j as isProviderOptions } from "./evalResult-CmUmgA2I.js";
-import { C as isTransientConnectionError, T as parseRetryAfter, d as withFetchRetryContext, w as parseRateLimitHeaders, x as isHttpRateLimitError } from "./fetch-Bnj1JCJi.js";
+import { A as isApiProvider, j as isProviderOptions } from "./evalResult-C9ntrv7r.js";
+import { E as parseRetryAfter, S as isHttpRateLimitError, T as parseRateLimitHeaders, d as withFetchRetryContext, w as isTransientConnectionError } from "./fetch-KD8O9oZZ.js";
 import { t as invariant } from "./invariant-CbHB1xyx.js";
-import { l as isLoggedIntoCloud } from "./accounts-CAjSMkuH.js";
+import { l as isLoggedIntoCloud } from "./accounts-DApS8Gpe.js";
 import { n as sleep } from "./time-Ct6CnABs.js";
-import { i as cloudConfig } from "./cloud-D3FRkXX5.js";
+import { i as cloudConfig } from "./cloud-D9lRDzlx.js";
 import "./tables-DpSgejqG.js";
-import { A as sanitizeProviderIdForLog } from "./util-BdAsuWmv.js";
+import { A as sanitizeProviderIdForLog } from "./util-CZyLhvIk.js";
 import { n as isBlobStorageEnabled, t as extractAndStoreBinaryData } from "./extractor-8jl9p5Oy.js";
 import { a as accumulateGradingResponseTokenUsage, c as accumulateTokenUsage, d as createEmptyTokenUsage, s as accumulateResponseTokenUsage } from "./tokenUsageUtils-Cf6nFV6z.js";
-import { p as remoteGenerationContextPayload } from "./remoteGeneration-B0eQSIHo.js";
-import { t as OpenAiChatCompletionProvider } from "./chat-ByXWx4Jn.js";
-import { t as PromptfooChatCompletionProvider } from "./promptfoo-DFE6FPtn.js";
+import { p as remoteGenerationContextPayload } from "./remoteGeneration-Cc78LDjQ.js";
+import { t as OpenAiChatCompletionProvider } from "./chat-WpIdBaCf.js";
+import { t as PromptfooChatCompletionProvider } from "./promptfoo-HD40ugrk.js";
 import { o as transform, r as TransformInputType } from "./transform-BBv6X1Ag.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { createHash, randomUUID } from "crypto";
@@ -140,12 +140,12 @@ function wrapProviderWithRateLimiting(provider, registry) {
 function buildRemoteUploadTarget() {
 	if (getEnvBool("PROMPTFOO_DISABLE_SHARING")) return null;
 	const baseUrl = cloudConfig.getApiHost();
-	const apiKey = cloudConfig.getApiKey();
-	if (!baseUrl || !apiKey || !isLoggedIntoCloud()) return null;
+	const authHeaders = cloudConfig.getAuthHeaders();
+	if (!baseUrl || !authHeaders || !isLoggedIntoCloud()) return null;
 	try {
 		return {
 			url: new URL("/api/blobs", baseUrl).toString(),
-			apiKey
+			authHeaders
 		};
 	} catch (error) {
 		logger.debug("[RemoteBlob] Invalid remote blob URL", {
@@ -162,12 +162,12 @@ async function uploadBlobRemote(buffer, mimeType, context) {
 	const target = buildRemoteUploadTarget();
 	if (!target) return null;
 	try {
-		const { fetchWithProxy } = await import("./fetch-BYe9zZ94.js");
+		const { fetchWithProxy } = await import("./fetch-BO4sLtRp.js");
 		const response = await fetchWithProxy(target.url, {
 			method: "POST",
 			headers: {
 				"Content-Type": "application/json",
-				Authorization: `Bearer ${target.apiKey}`
+				...target.authHeaders
 			},
 			body: JSON.stringify({
 				data: buffer.toString("base64"),
@@ -1133,7 +1133,7 @@ function accumulateUnblockingTokenUsage(totalTokenUsage, result) {
 	});
 }
 const defaultRedteamProviderLoader = async (providers) => {
-	const { loadApiProviders } = await import("./providers-59LpYr3g.js");
+	const { loadApiProviders } = await import("./providers-DI6OXKnh.js");
 	return loadApiProviders(providers);
 };
 let redteamProviderLoader = defaultRedteamProviderLoader;
@@ -1586,7 +1586,7 @@ async function tryUnblocking({ messages, lastResponse, goal, purpose, targetId }
 			logger.debug("[Unblocking] Disabled by default (set PROMPTFOO_ENABLE_UNBLOCKING=true to enable)");
 			return { success: false };
 		}
-		const { checkServerFeatureSupport } = await import("./server-DmrHjxNq.js");
+		const { checkServerFeatureSupport } = await import("./server-B5-TIxn2.js");
 		if (!await checkServerFeatureSupport("blocking-question-analysis", "2025-06-16T14:49:11-07:00")) {
 			logger.debug("[Unblocking] Server does not support unblocking, skipping gracefully");
 			return { success: false };
@@ -1674,4 +1674,4 @@ function getGraderAssertionValue(assertToUse) {
 //#endregion
 export { getProviderCallTracingContext as A, TokenUsageTracker as C, createProviderRateLimitOptions as D, uploadBlobRemote as E, withProviderCallTracingContext as M, isRateLimitWrapped as O, throwIfTargetPromptExceedsMaxChars as S, shouldAttemptRemoteBlobUpload as T, runRedteamGrader as _, callTargetProvider as a, getGeneratedPromptOverLimit as b, externalizeResponseForRedteamHistory as c, getLastMessageContent as d, getTargetResponse as f, redteamProviderManager as g, messagesToRedteamHistory as h, callGradingProvider as i, withProviderCallExecutionContext as j, getProviderCallExecutionContext as k, formatRedteamHistoryAsTranscript as l, isValidChatMessageArray as m, accumulateUnblockingTokenUsage as n, checkPenalizedPhrases as o, isConversationEndedResponse as p, buildGraderResultAssertion as r, createIterationContext as s, accumulateGraderResult as t, getGraderAssertionValue as u, tryUnblocking as v, createRateLimitRegistry as w, getMaxCharsPerMessageModifierValue as x, MAX_CHARS_PER_MESSAGE_MODIFIER_KEY as y };
 
-//# sourceMappingURL=shared-yyb3qFQd.js.map
+//# sourceMappingURL=shared-jcnXW0lA.js.map

package/dist/src/{simulatedUser-9Ru_f_dX.js → simulatedUser-BK0F6Lub.js}

@@ -1,10 +1,11 @@
 import { D as safeJsonStringify, i as isDebugEnabled, o as logger } from "./logger-D4ion89i.js";
-import { At as getNunjucksEngine, lt as maybeLoadConfigFromExternalFile } from "./util-uYYKYi7_.js";
+import { lt as maybeLoadConfigFromExternalFile } from "./util-BPtpPW4O.js";
 import { t as invariant } from "./invariant-CHP0zrix.js";
 import { n as sleep } from "./time-BPNW8jwJ.js";
+import { o as getNunjucksEngine } from "./render-DIhuKgcQ.js";
 import { d as createEmptyTokenUsage, s as accumulateResponseTokenUsage } from "./tokenUsageUtils-T-dUB6UI.js";
-import { o as getSessionId } from "./util-BVDvJqrO.js";
-import { r as PromptfooSimulatedUserProvider } from "./promptfoo-DmLIq1Fg.js";
+import { o as getSessionId } from "./util-CEecmC3Y.js";
+import { r as PromptfooSimulatedUserProvider } from "./promptfoo-ByMuyN2p.js";
 //#region src/providers/simulatedUser.ts
 function providerOutputToString(output) {
 	if (output == null) return "";
@@ -243,4 +244,4 @@ var SimulatedUser = class {
 //#endregion
 export { SimulatedUser as t };
 
-//# sourceMappingURL=simulatedUser-9Ru_f_dX.js.map
+//# sourceMappingURL=simulatedUser-BK0F6Lub.js.map

package/dist/src/{simulatedUser-6ys8hxx_.js → simulatedUser-BTox0iZp.js}

@@ -2,10 +2,11 @@
 import { c as logger, k as safeJsonStringify, o as isDebugEnabled } from "./logger-YzVIwMVq.js";
 import { t as invariant } from "./invariant-CbHB1xyx.js";
 import { n as sleep } from "./time-Ct6CnABs.js";
-import { L as maybeLoadConfigFromExternalFile, nt as getNunjucksEngine } from "./util-BdAsuWmv.js";
+import { L as maybeLoadConfigFromExternalFile } from "./util-CZyLhvIk.js";
+import { o as getNunjucksEngine } from "./render-BRIaR8VG.js";
 import { d as createEmptyTokenUsage, s as accumulateResponseTokenUsage } from "./tokenUsageUtils-Cf6nFV6z.js";
-import { o as getSessionId } from "./util-DxyypCZC.js";
-import { r as PromptfooSimulatedUserProvider } from "./promptfoo-DFE6FPtn.js";
+import { o as getSessionId } from "./util-DlFpV1xV.js";
+import { r as PromptfooSimulatedUserProvider } from "./promptfoo-HD40ugrk.js";
 //#region src/providers/simulatedUser.ts
 function providerOutputToString(output) {
 	if (output == null) return "";
@@ -244,4 +245,4 @@ var SimulatedUser = class {
 //#endregion
 export { SimulatedUser as t };
 
-//# sourceMappingURL=simulatedUser-6ys8hxx_.js.map
+//# sourceMappingURL=simulatedUser-BTox0iZp.js.map

package/dist/src/{simulatedUser-BQghw48z.cjs → simulatedUser-ByVb7gXp.cjs}

@@ -1,10 +1,11 @@
 const require_logger = require("./logger-BN3n9c1R.cjs");
 const require_invariant = require("./invariant-C2JOzzO2.cjs");
-const require_util = require("./util-L5T81aJ0.cjs");
+const require_util = require("./util-BPkxeLuk.cjs");
 const require_time = require("./time-B7AqDy5g.cjs");
+const require_render = require("./render-C1VJjFT2.cjs");
 const require_tokenUsageUtils = require("./tokenUsageUtils-BbqyaBi4.cjs");
-const require_util$1 = require("./util-COyt9Xaf.cjs");
-const require_promptfoo = require("./promptfoo-BzTq3CZR.cjs");
+const require_util$1 = require("./util-BuKoPAn3.cjs");
+const require_promptfoo = require("./promptfoo-B3EDkr9n.cjs");
 //#region src/providers/simulatedUser.ts
 function providerOutputToString(output) {
 	if (output == null) return "";
@@ -53,7 +54,7 @@ var SimulatedUser = class {
 	renderTemplate(template, vars) {
 		if (typeof template !== "string") return template;
 		try {
-			return require_util.getNunjucksEngine().renderString(template, vars || {});
+			return require_render.getNunjucksEngine().renderString(template, vars || {});
 		} catch (err) {
 			require_logger.logger.warn(`[SimulatedUser] Failed to render template: ${template.substring(0, 100)}. Error: ${err instanceof Error ? err.message : err}`);
 			return template;
@@ -135,7 +136,7 @@ var SimulatedUser = class {
 	}
 	async sendMessageToAgent(prompt, messages, targetProvider, context) {
 		require_invariant.invariant(context?.prompt?.raw, "Expected context.prompt.raw to be set");
-		const renderedPrompt = context.prompt.function ? prompt : require_util.getNunjucksEngine().renderString(context.prompt.raw, context.vars);
+		const renderedPrompt = context.prompt.function ? prompt : require_render.getNunjucksEngine().renderString(context.prompt.raw, context.vars);
 		const targetPrompt = this.stateful ? context.vars?.sessionId ? JSON.stringify([{
 			role: "user",
 			content: messages[messages.length - 1].content
@@ -171,7 +172,7 @@ var SimulatedUser = class {
 	async callApi(prompt, context, _callApiOptions) {
 		require_invariant.invariant(context?.originalProvider, "Expected originalProvider to be set");
 		const targetProvider = context.originalProvider;
-		const instructions = require_util.getNunjucksEngine().renderString(this.rawInstructions, context?.vars);
+		const instructions = require_render.getNunjucksEngine().renderString(this.rawInstructions, context?.vars);
 		const userProvider = new require_promptfoo.PromptfooSimulatedUserProvider({
 			instructions,
 			redteamGenerationContext: this.redteamGenerationContext
@@ -248,4 +249,4 @@ Object.defineProperty(exports, "SimulatedUser", {
 	}
 });
 
-//# sourceMappingURL=simulatedUser-BQghw48z.cjs.map
+//# sourceMappingURL=simulatedUser-ByVb7gXp.cjs.map

package/dist/src/{simulatedUser-BHmmQ4hb.js → simulatedUser-C8WconFg.js}

@@ -1,10 +1,11 @@
 import { E as safeJsonStringify, i as isDebugEnabled, o as logger } from "./logger-BKiOczgq.js";
 import { t as invariant } from "./invariant-CHP0zrix.js";
-import { ft as getNunjucksEngine, q as maybeLoadConfigFromExternalFile } from "./util-DdGIEAK_.js";
+import { q as maybeLoadConfigFromExternalFile } from "./util-BnytsHEr.js";
 import { n as sleep } from "./time-BPNW8jwJ.js";
+import { o as getNunjucksEngine } from "./render-zarxdXS7.js";
 import { d as createEmptyTokenUsage, s as accumulateResponseTokenUsage } from "./tokenUsageUtils-BCYRro5h.js";
-import { o as getSessionId } from "./util-BoTwsVvn.js";
-import { r as PromptfooSimulatedUserProvider } from "./promptfoo-BnRYCHWo.js";
+import { o as getSessionId } from "./util-BKfPcBQN.js";
+import { r as PromptfooSimulatedUserProvider } from "./promptfoo-BeCm2WDJ.js";
 //#region src/providers/simulatedUser.ts
 function providerOutputToString(output) {
 	if (output == null) return "";
@@ -243,4 +244,4 @@ var SimulatedUser = class {
 //#endregion
 export { SimulatedUser as t };
 
-//# sourceMappingURL=simulatedUser-BHmmQ4hb.js.map
+//# sourceMappingURL=simulatedUser-C8WconFg.js.map

package/dist/src/{slack-C--lAIHY.js → slack-7DG3xMM4.js}

@@ -1,5 +1,5 @@
 import { o as logger } from "./logger-D4ion89i.js";
-import { t as fetchWithProviderProxy } from "./fetch-DDiGmyRM.js";
+import { t as fetchWithProviderProxy } from "./fetch-Cm0VICza.js";
 import { WebAPIPlatformError, WebAPIRateLimitedError, WebClient } from "@slack/web-api";
 //#region src/providers/slack.ts
 var SlackProvider = class {
@@ -139,4 +139,4 @@ var SlackProvider = class {
 //#endregion
 export { SlackProvider };
 
-//# sourceMappingURL=slack-C--lAIHY.js.map
+//# sourceMappingURL=slack-7DG3xMM4.js.map

package/dist/src/{slack-CxCLWDSi.js → slack-BvWGK3kV.js}

@@ -1,5 +1,5 @@
 import { o as logger } from "./logger-BKiOczgq.js";
-import { t as fetchWithProviderProxy } from "./fetch-BCrWkFgb.js";
+import { t as fetchWithProviderProxy } from "./fetch-CKqW5dym.js";
 import { WebAPIPlatformError, WebAPIRateLimitedError, WebClient } from "@slack/web-api";
 //#region src/providers/slack.ts
 var SlackProvider = class {
@@ -139,4 +139,4 @@ var SlackProvider = class {
 //#endregion
 export { SlackProvider };
 
-//# sourceMappingURL=slack-CxCLWDSi.js.map
+//# sourceMappingURL=slack-BvWGK3kV.js.map

package/dist/src/{slack-6c3iW1pP.cjs → slack-DqFNyAEf.cjs}

@@ -1,5 +1,5 @@
 const require_logger = require("./logger-BN3n9c1R.cjs");
-const require_fetch = require("./fetch-DxQ9oCzS.cjs");
+const require_fetch = require("./fetch-CQfF18HC.cjs");
 let _slack_web_api = require("@slack/web-api");
 //#region src/providers/slack.ts
 var SlackProvider = class {
@@ -139,4 +139,4 @@ var SlackProvider = class {
 //#endregion
 exports.SlackProvider = SlackProvider;
 
-//# sourceMappingURL=slack-6c3iW1pP.cjs.map
+//# sourceMappingURL=slack-DqFNyAEf.cjs.map

package/dist/src/{slack-D_QGURhP.js → slack-spSrgvZu.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { c as logger } from "./logger-YzVIwMVq.js";
-import { t as fetchWithProviderProxy } from "./fetch-JNQMF9vN.js";
+import { t as fetchWithProviderProxy } from "./fetch-Dwv9LIL3.js";
 import { WebAPIPlatformError, WebAPIRateLimitedError, WebClient } from "@slack/web-api";
 //#region src/providers/slack.ts
 var SlackProvider = class {
@@ -140,4 +140,4 @@ var SlackProvider = class {
 //#endregion
 export { SlackProvider };
 
-//# sourceMappingURL=slack-D_QGURhP.js.map
+//# sourceMappingURL=slack-spSrgvZu.js.map

package/dist/src/{storage-BFmq8CKG.cjs → storage-BX5ws4jD.cjs}

@@ -1,8 +1,8 @@
 const require_logger = require("./logger-BN3n9c1R.cjs");
 const require_invariant = require("./invariant-C2JOzzO2.cjs");
-const require_fetch = require("./fetch-DTnUr1aF.cjs");
+const require_fetch = require("./fetch-D54lzFcD.cjs");
 const require_tables = require("./tables-BaWJhXDV.cjs");
-const require_server = require("./server-CkrRpgsu.cjs");
+const require_server = require("./server-BpmZ1EP0.cjs");
 let fs_promises = require("fs/promises");
 fs_promises = require_logger.__toESM(fs_promises, 1);
 let path = require("path");
@@ -25,15 +25,13 @@ const PERMISSION_CHECK_SERVER_FEATURE_DATE = "2025-09-03T14:49:11Z";
 * @throws Error if the request fails due to network or other issues
 */
 function makeRequest(path, method, body) {
-	const apiHost = require_fetch.cloudConfig.getApiHost();
-	const apiKey = require_fetch.cloudConfig.getApiKey();
-	const url = `${apiHost}/api/v1/${path.startsWith("/") ? path.slice(1) : path}`;
+	const url = `${require_fetch.cloudConfig.getApiHost()}/api/v1/${path.startsWith("/") ? path.slice(1) : path}`;
 	try {
 		return require_fetch.fetchWithProxy(url, {
 			method,
 			body: JSON.stringify(body),
 			headers: {
-				Authorization: `Bearer ${apiKey}`,
+				...require_fetch.cloudConfig.getAuthHeaders() ?? {},
 				"Content-Type": "application/json"
 			}
 		});
@@ -227,8 +225,11 @@ async function getPluginSeverityOverridesFromCloud(cloudProviderId) {
 * @returns Promise resolving to an array of team objects
 * @throws Error if the request fails
 */
-async function getUserTeams(apiHost, apiKey) {
-	const response = apiHost && apiKey ? await require_fetch.fetchWithProxy(`${apiHost}/api/v1/users/me/teams`, { headers: { Authorization: `Bearer ${apiKey}` } }) : await makeRequest(`/users/me/teams`, "GET");
+async function getUserTeams(apiHost, apiKey, authHeaderName) {
+	const response = apiHost && apiKey ? await require_fetch.fetchWithProxy(`${apiHost}/api/v1/users/me/teams`, {
+		headers: { [authHeaderName || require_fetch.cloudConfig.getAuthHeaderName()]: `Bearer ${apiKey}` },
+		skipCloudAuthInjection: true
+	}) : await makeRequest(`/users/me/teams`, "GET");
 	if (!response.ok) throw new Error(`Failed to get user teams: ${response.statusText}`);
 	return await response.json();
 }
@@ -509,8 +510,7 @@ async function getOrgContext() {
 	if (!require_fetch.cloudConfig.isEnabled()) return null;
 	try {
 		const apiHost = require_fetch.cloudConfig.getApiHost();
-		const apiKey = require_fetch.cloudConfig.getApiKey();
-		const response = await require_fetch.fetchWithProxy(`${apiHost}/api/v1/users/me`, { headers: { Authorization: `Bearer ${apiKey}` } });
+		const response = await require_fetch.fetchWithProxy(`${apiHost}/api/v1/users/me`, { headers: { ...require_fetch.cloudConfig.getAuthHeaders() ?? {} } });
 		if (!response.ok) return null;
 		const { organization } = await response.json();
 		const currentTeamId = require_fetch.cloudConfig.getCurrentTeamId(organization.id);
@@ -907,4 +907,4 @@ Object.defineProperty(exports, "validateLinkedTargetId", {
 	}
 });
 
-//# sourceMappingURL=storage-BFmq8CKG.cjs.map
+//# sourceMappingURL=storage-BX5ws4jD.cjs.map

package/dist/src/{storage-J-nYoltq.js → storage-B_t-NiUa.js}

@@ -1,8 +1,8 @@
 import { A as getConfigDirectoryPath, I as getEnvString, o as logger } from "./logger-D4ion89i.js";
-import { B as CLOUD_PROVIDER_PREFIX, p as cloudConfig, t as fetchWithProxy } from "./fetch-BdWQKDMj.js";
+import { V as CLOUD_PROVIDER_PREFIX, m as cloudConfig, t as fetchWithProxy } from "./fetch-DnDg-Ics.js";
 import { t as invariant } from "./invariant-CHP0zrix.js";
 import { M as ProviderOptionsSchema, V as isUuid } from "./tables-Dq3ppf0B.js";
-import { r as checkServerFeatureSupport } from "./server-L884Wtbc.js";
+import { r as checkServerFeatureSupport } from "./server-CqQtEkS_.js";
 import * as fs$2 from "fs";
 import * as path$1 from "path";
 import * as crypto$1 from "crypto";
@@ -20,15 +20,13 @@ const PERMISSION_CHECK_SERVER_FEATURE_DATE = "2025-09-03T14:49:11Z";
 * @throws Error if the request fails due to network or other issues
 */
 function makeRequest(path, method, body) {
-	const apiHost = cloudConfig.getApiHost();
-	const apiKey = cloudConfig.getApiKey();
-	const url = `${apiHost}/api/v1/${path.startsWith("/") ? path.slice(1) : path}`;
+	const url = `${cloudConfig.getApiHost()}/api/v1/${path.startsWith("/") ? path.slice(1) : path}`;
 	try {
 		return fetchWithProxy(url, {
 			method,
 			body: JSON.stringify(body),
 			headers: {
-				Authorization: `Bearer ${apiKey}`,
+				...cloudConfig.getAuthHeaders() ?? {},
 				"Content-Type": "application/json"
 			}
 		});
@@ -222,8 +220,11 @@ async function getPluginSeverityOverridesFromCloud(cloudProviderId) {
 * @returns Promise resolving to an array of team objects
 * @throws Error if the request fails
 */
-async function getUserTeams(apiHost, apiKey) {
-	const response = apiHost && apiKey ? await fetchWithProxy(`${apiHost}/api/v1/users/me/teams`, { headers: { Authorization: `Bearer ${apiKey}` } }) : await makeRequest(`/users/me/teams`, "GET");
+async function getUserTeams(apiHost, apiKey, authHeaderName) {
+	const response = apiHost && apiKey ? await fetchWithProxy(`${apiHost}/api/v1/users/me/teams`, {
+		headers: { [authHeaderName || cloudConfig.getAuthHeaderName()]: `Bearer ${apiKey}` },
+		skipCloudAuthInjection: true
+	}) : await makeRequest(`/users/me/teams`, "GET");
 	if (!response.ok) throw new Error(`Failed to get user teams: ${response.statusText}`);
 	return await response.json();
 }
@@ -504,8 +505,7 @@ async function getOrgContext() {
 	if (!cloudConfig.isEnabled()) return null;
 	try {
 		const apiHost = cloudConfig.getApiHost();
-		const apiKey = cloudConfig.getApiKey();
-		const response = await fetchWithProxy(`${apiHost}/api/v1/users/me`, { headers: { Authorization: `Bearer ${apiKey}` } });
+		const response = await fetchWithProxy(`${apiHost}/api/v1/users/me`, { headers: { ...cloudConfig.getAuthHeaders() ?? {} } });
 		if (!response.ok) return null;
 		const { organization } = await response.json();
 		const currentTeamId = cloudConfig.getCurrentTeamId(organization.id);
@@ -831,4 +831,4 @@ function isMediaStorageEnabled() {
 //#endregion
 export { storeMedia as a, getEvalConfigFromCloud as c, getPoliciesFromCloud as d, getProviderFromCloud as f, validateLinkedTargetId as g, resolveTeamId as h, retrieveMedia as i, getOrgContext as l, makeRequest as m, isMediaStorageEnabled as n, checkCloudPermissions as o, isCloudProvider as p, mediaExists as r, getCloudDatabaseId as s, getMediaStorage as t, getPluginSeverityOverridesFromCloud as u };
 
-//# sourceMappingURL=storage-J-nYoltq.js.map
+//# sourceMappingURL=storage-B_t-NiUa.js.map

package/dist/src/{storage-BC3GVwPL.js → storage-CVVbTVYC.js}

@@ -1,8 +1,8 @@
 import { P as getEnvString, k as getConfigDirectoryPath, o as logger } from "./logger-BKiOczgq.js";
 import { t as invariant } from "./invariant-CHP0zrix.js";
-import { B as CLOUD_PROVIDER_PREFIX, I as cloudConfig, t as fetchWithProxy } from "./fetch-BjXG13jC.js";
+import { L as cloudConfig, V as CLOUD_PROVIDER_PREFIX, t as fetchWithProxy } from "./fetch-tOnj-VPG.js";
 import { Q as ProviderOptionsSchema, st as isUuid } from "./tables-BMHjeqVY.js";
-import { t as checkServerFeatureSupport } from "./server-lm2H6tXC.js";
+import { t as checkServerFeatureSupport } from "./server-DB1I8Xl3.js";
 import * as fsPromises from "fs/promises";
 import * as path$1 from "path";
 import * as fs$2 from "fs";
@@ -20,15 +20,13 @@ const PERMISSION_CHECK_SERVER_FEATURE_DATE = "2025-09-03T14:49:11Z";
 * @throws Error if the request fails due to network or other issues
 */
 function makeRequest(path, method, body) {
-	const apiHost = cloudConfig.getApiHost();
-	const apiKey = cloudConfig.getApiKey();
-	const url = `${apiHost}/api/v1/${path.startsWith("/") ? path.slice(1) : path}`;
+	const url = `${cloudConfig.getApiHost()}/api/v1/${path.startsWith("/") ? path.slice(1) : path}`;
 	try {
 		return fetchWithProxy(url, {
 			method,
 			body: JSON.stringify(body),
 			headers: {
-				Authorization: `Bearer ${apiKey}`,
+				...cloudConfig.getAuthHeaders() ?? {},
 				"Content-Type": "application/json"
 			}
 		});
@@ -222,8 +220,11 @@ async function getPluginSeverityOverridesFromCloud(cloudProviderId) {
 * @returns Promise resolving to an array of team objects
 * @throws Error if the request fails
 */
-async function getUserTeams(apiHost, apiKey) {
-	const response = apiHost && apiKey ? await fetchWithProxy(`${apiHost}/api/v1/users/me/teams`, { headers: { Authorization: `Bearer ${apiKey}` } }) : await makeRequest(`/users/me/teams`, "GET");
+async function getUserTeams(apiHost, apiKey, authHeaderName) {
+	const response = apiHost && apiKey ? await fetchWithProxy(`${apiHost}/api/v1/users/me/teams`, {
+		headers: { [authHeaderName || cloudConfig.getAuthHeaderName()]: `Bearer ${apiKey}` },
+		skipCloudAuthInjection: true
+	}) : await makeRequest(`/users/me/teams`, "GET");
 	if (!response.ok) throw new Error(`Failed to get user teams: ${response.statusText}`);
 	return await response.json();
 }
@@ -504,8 +505,7 @@ async function getOrgContext() {
 	if (!cloudConfig.isEnabled()) return null;
 	try {
 		const apiHost = cloudConfig.getApiHost();
-		const apiKey = cloudConfig.getApiKey();
-		const response = await fetchWithProxy(`${apiHost}/api/v1/users/me`, { headers: { Authorization: `Bearer ${apiKey}` } });
+		const response = await fetchWithProxy(`${apiHost}/api/v1/users/me`, { headers: { ...cloudConfig.getAuthHeaders() ?? {} } });
 		if (!response.ok) return null;
 		const { organization } = await response.json();
 		const currentTeamId = cloudConfig.getCurrentTeamId(organization.id);
@@ -819,4 +819,4 @@ function isMediaStorageEnabled() {
 //#endregion
 export { getCloudDatabaseId as a, getPluginSeverityOverridesFromCloud as c, isCloudProvider as d, makeRequest as f, checkCloudPermissions as i, getPoliciesFromCloud as l, validateLinkedTargetId as m, isMediaStorageEnabled as n, getEvalConfigFromCloud as o, resolveTeamId as p, storeMedia as r, getOrgContext as s, getMediaStorage as t, getProviderFromCloud as u };
 
-//# sourceMappingURL=storage-BC3GVwPL.js.map
+//# sourceMappingURL=storage-CVVbTVYC.js.map