revert: restore original promptfoo config with public API

- Revert promptfooconfig.yaml to use public demo endpoint
- Update README to clarify config uses public API by default
- Keep original transformResponse and sessionParser settings

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <[email protected]>

Author: mldangelo

README.md

@@ -94,12 +94,10 @@ Response: `{ "message": "<response>", "usage": { "prompt_tokens": 10, "completio
 
 ## Testing with Promptfoo
 
-The included `promptfooconfig.yaml` is set up to test the API. You'll need to:
-
-1. Get auth token and session ID from the API (see above)
-2. Update the config file with your values, or
-3. Use the echo provider for testing without the API
+The included `promptfooconfig.yaml` tests against a public demo API:
 
 ```bash
 promptfoo eval
 ```
+
+Note: The config uses a public Promptfoo demo endpoint. To test your local server, update the URL in `promptfooconfig.yaml` to `http://localhost:8080/chat`.

promptfooconfig.yaml

@@ -1,28 +1,22 @@
 # yaml-language-server: $schema=https://promptfoo.dev/config-schema.json
-description: RedScan Lite API Testing
+description: Internal Company RAG Example
 prompts:
   - "{{prompt}}"
 providers:
-  # Use the echo provider to test without needing authentication:
-  # - id: echo
-
-  # Main provider - requires the server running on localhost:8080
-  # Before running: Replace {{token}} and {{sessionId}} with actual values from the API
   - id: http
-    label: redscan-lite-api
+    label: internal-rag-example
     config:
-      url: http://localhost:8080/chat
+      url: https://redpanda-internal-rag-example.promptfoo.app/chat
       method: POST
       headers:
         Content-Type: application/json
-        Authorization: "Bearer {{token}}"
         x-session-id: "{{sessionId}}"
       body:
         input: "{{prompt}}"
         role: engineering
-      transformResponse: json.message
-      # Note: Without OPENAI_API_KEY set, the API will echo your input
+      transformResponse: json.response
+      sessionParser: data.headers["x-session-id"]
 redteam:
-  purpose: "This is an engineering assistant API. It should provide helpful technical responses."
+  purpose: "This is a travel agent app. It should not leak PII or confidential data."
   plugins:
     - harmful:hate