@postman-cse/onboarding-bootstrap 0.9.1 → 0.10.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@postman-cse/onboarding-bootstrap",
-  "version": "0.9.1",
+  "version": "0.10.0",
   "description": "Public open-alpha Postman bootstrap GitHub Action.",
   "type": "module",
   "main": "dist/index.cjs",
@@ -27,7 +27,8 @@
     "@actions/io": "^1.1.3"
   },
   "overrides": {
-    "undici": "^6.24.0"
+    "undici": "^6.24.0",
+    "picomatch": ">=4.0.4"
   },
   "devDependencies": {
     "esbuild": "^0.27.3",

package/src/cli.ts

@@ -168,9 +168,7 @@ export function createCliDependencies(
 ): BootstrapExecutionDependencies {
   const secretMasker = createSecretMasker([
     inputs.postmanApiKey,
-    inputs.postmanAccessToken,
-    inputs.githubToken,
-    inputs.ghFallbackToken
+    inputs.postmanAccessToken
   ]);
   const cliExec = createCliExec(secretMasker);
 
@@ -193,18 +191,17 @@ export function parseCliArgs(argv: string[], env: NodeJS.ProcessEnv = process.en
     'baseline-collection-id',
     'smoke-collection-id',
     'contract-collection-id',
+    'collection-sync-mode',
+    'spec-sync-mode',
+    'release-label',
     'domain',
     'domain-code',
     'requester-email',
     'workspace-admin-user-ids',
-    'environments-json',
-    'system-env-map-json',
     'governance-mapping-json',
     'integration-backend',
-    'github-auth-mode',
-    'github-token',
-    'gh-fallback-token',
     'team-id',
+    'workspace-team-id',
     'repo-url'
   ];
 
@@ -256,9 +253,6 @@ export async function runCli(
   const inputs = resolveInputs(config.inputEnv);
   const dependencies = createCliDependencies(inputs);
 
-  if (!dependencies.github) {
-    dependencies.core.info('GitHub repository variable persistence disabled for this run');
-  }
   if (inputs.domain && !dependencies.internalIntegration) {
     dependencies.core.warning(
       'Skipping governance assignment because postman-access-token is not configured'

package/src/contracts.ts

@@ -43,6 +43,25 @@ export const openAlphaActionContract: BetaActionContract = {
       description: 'Existing contract collection ID.',
       required: false
     },
+    'collection-sync-mode': {
+      description:
+        'Collection lifecycle policy: reuse existing collections, refresh them from the latest spec, or version them by release label.',
+      required: false,
+      default: 'refresh',
+      allowedValues: ['reuse', 'refresh', 'version']
+    },
+    'spec-sync-mode': {
+      description:
+        'Spec lifecycle policy: update the canonical spec or create/reuse a versioned spec for the resolved release label.',
+      required: false,
+      default: 'update',
+      allowedValues: ['update', 'version']
+    },
+    'release-label': {
+      description:
+        'Optional release label. When omitted for versioned sync, the action derives one from GitHub ref metadata.',
+      required: false
+    },
     'project-name': {
       description: 'Service project name.',
       required: true
@@ -63,20 +82,14 @@ export const openAlphaActionContract: BetaActionContract = {
       description: 'Comma-separated workspace admin user ids.',
       required: false
     },
+    'workspace-team-id': {
+      description: 'Numeric sub-team ID for org-mode workspace creation.',
+      required: false
+    },
     'spec-url': {
       description: 'HTTPS URL to the OpenAPI document.',
       required: true
     },
-    'environments-json': {
-      description: 'JSON array of environment slugs to preserve in bootstrap outputs.',
-      required: false,
-      default: '["prod"]'
-    },
-    'system-env-map-json': {
-      description: 'JSON map of environment slug to system environment id.',
-      required: false,
-      default: '{}'
-    },
     'governance-mapping-json': {
       description: 'JSON map of business domain to governance group name.',
       required: false,
@@ -90,19 +103,6 @@ export const openAlphaActionContract: BetaActionContract = {
       description: 'Postman access token used for governance and workspace mutations.',
       required: false
     },
-    'github-token': {
-      description: 'GitHub token for repository variable persistence.',
-      required: false
-    },
-    'gh-fallback-token': {
-      description: 'Fallback token for repository variable APIs.',
-      required: false
-    },
-    'github-auth-mode': {
-      description: 'GitHub auth mode for repository variable APIs.',
-      required: false,
-      default: 'github_token_first'
-    },
     'integration-backend': {
       description: 'Integration backend for downstream workspace connectivity.',
       required: false,
@@ -148,8 +148,8 @@ export const openAlphaActionContract: BetaActionContract = {
     'OpenAPI operation summary normalization before upload (missing or oversized summaries)',
     'spec linting by UID',
     'baseline, smoke, and contract collection generation',
+    'collection refresh and versioning policies',
     'collection tagging',
-    'GitHub repository variable persistence for downstream sync steps',
     'workspace, spec, and collection outputs'
   ],
   removedBehavior: [