@postman-cse/onboarding-bootstrap 2.1.1 → 2.2.0

package/dist/index.cjs

@@ -55569,7 +55569,7 @@ var require_lodash = __commonJS({
           }
           return mapped.length && mapped[0] === arrays[0] ? baseIntersection(mapped, undefined2, comparator) : [];
         });
-        function join3(array, separator) {
+        function join4(array, separator) {
           return array == null ? "" : nativeJoin.call(array, separator);
         }
         function last(array) {
@@ -57488,7 +57488,7 @@ var require_lodash = __commonJS({
         lodash.isUndefined = isUndefined;
         lodash.isWeakMap = isWeakMap;
         lodash.isWeakSet = isWeakSet;
-        lodash.join = join3;
+        lodash.join = join4;
         lodash.kebabCase = kebabCase;
         lodash.last = last;
         lodash.lastIndexOf = lastIndexOf;
@@ -127435,16 +127435,16 @@ var require_printer = __commonJS({
       },
       // Document
       Document: {
-        leave: (node) => join3(node.definitions, "\n\n")
+        leave: (node) => join4(node.definitions, "\n\n")
       },
       OperationDefinition: {
         leave(node) {
-          const varDefs = hasMultilineItems(node.variableDefinitions) ? wrap("(\n", join3(node.variableDefinitions, "\n"), "\n)") : wrap("(", join3(node.variableDefinitions, ", "), ")");
-          const prefix = wrap("", node.description, "\n") + join3(
+          const varDefs = hasMultilineItems(node.variableDefinitions) ? wrap("(\n", join4(node.variableDefinitions, "\n"), "\n)") : wrap("(", join4(node.variableDefinitions, ", "), ")");
+          const prefix = wrap("", node.description, "\n") + join4(
             [
               node.operation,
-              join3([node.name, varDefs]),
-              join3(node.directives, " ")
+              join4([node.name, varDefs]),
+              join4(node.directives, " ")
             ],
             " "
           );
@@ -127452,7 +127452,7 @@ var require_printer = __commonJS({
         }
       },
       VariableDefinition: {
-        leave: ({ variable, type, defaultValue, directives, description }) => wrap("", description, "\n") + variable + ": " + type + wrap(" = ", defaultValue) + wrap(" ", join3(directives, " "))
+        leave: ({ variable, type, defaultValue, directives, description }) => wrap("", description, "\n") + variable + ": " + type + wrap(" = ", defaultValue) + wrap(" ", join4(directives, " "))
       },
       SelectionSet: {
         leave: ({ selections }) => block(selections)
@@ -127460,11 +127460,11 @@ var require_printer = __commonJS({
       Field: {
         leave({ alias, name, arguments: args, directives, selectionSet }) {
           const prefix = wrap("", alias, ": ") + name;
-          let argsLine = prefix + wrap("(", join3(args, ", "), ")");
+          let argsLine = prefix + wrap("(", join4(args, ", "), ")");
           if (argsLine.length > MAX_LINE_LENGTH) {
-            argsLine = prefix + wrap("(\n", indent2(join3(args, "\n")), "\n)");
+            argsLine = prefix + wrap("(\n", indent2(join4(args, "\n")), "\n)");
           }
-          return join3([argsLine, join3(directives, " "), selectionSet], " ");
+          return join4([argsLine, join4(directives, " "), selectionSet], " ");
         }
       },
       Argument: {
@@ -127472,14 +127472,14 @@ var require_printer = __commonJS({
       },
       // Fragments
       FragmentSpread: {
-        leave: ({ name, directives }) => "..." + name + wrap(" ", join3(directives, " "))
+        leave: ({ name, directives }) => "..." + name + wrap(" ", join4(directives, " "))
       },
       InlineFragment: {
-        leave: ({ typeCondition, directives, selectionSet }) => join3(
+        leave: ({ typeCondition, directives, selectionSet }) => join4(
           [
             "...",
             wrap("on ", typeCondition),
-            join3(directives, " "),
+            join4(directives, " "),
             selectionSet
           ],
           " "
@@ -127495,7 +127495,7 @@ var require_printer = __commonJS({
           description
         }) => wrap("", description, "\n") + // Note: fragment variable definitions are experimental and may be changed
         // or removed in the future.
-        `fragment ${name}${wrap("(", join3(variableDefinitions, ", "), ")")} on ${typeCondition} ${wrap("", join3(directives, " "), " ")}` + selectionSet
+        `fragment ${name}${wrap("(", join4(variableDefinitions, ", "), ")")} on ${typeCondition} ${wrap("", join4(directives, " "), " ")}` + selectionSet
       },
       // Value
       IntValue: {
@@ -127517,17 +127517,17 @@ var require_printer = __commonJS({
         leave: ({ value }) => value
       },
       ListValue: {
-        leave: ({ values }) => "[" + join3(values, ", ") + "]"
+        leave: ({ values }) => "[" + join4(values, ", ") + "]"
       },
       ObjectValue: {
-        leave: ({ fields }) => "{" + join3(fields, ", ") + "}"
+        leave: ({ fields }) => "{" + join4(fields, ", ") + "}"
       },
       ObjectField: {
         leave: ({ name, value }) => name + ": " + value
       },
       // Directive
       Directive: {
-        leave: ({ name, arguments: args }) => "@" + name + wrap("(", join3(args, ", "), ")")
+        leave: ({ name, arguments: args }) => "@" + name + wrap("(", join4(args, ", "), ")")
       },
       // Type
       NamedType: {
@@ -127541,61 +127541,61 @@ var require_printer = __commonJS({
       },
       // Type System Definitions
       SchemaDefinition: {
-        leave: ({ description, directives, operationTypes }) => wrap("", description, "\n") + join3(["schema", join3(directives, " "), block(operationTypes)], " ")
+        leave: ({ description, directives, operationTypes }) => wrap("", description, "\n") + join4(["schema", join4(directives, " "), block(operationTypes)], " ")
       },
       OperationTypeDefinition: {
         leave: ({ operation, type }) => operation + ": " + type
       },
       ScalarTypeDefinition: {
-        leave: ({ description, name, directives }) => wrap("", description, "\n") + join3(["scalar", name, join3(directives, " ")], " ")
+        leave: ({ description, name, directives }) => wrap("", description, "\n") + join4(["scalar", name, join4(directives, " ")], " ")
       },
       ObjectTypeDefinition: {
-        leave: ({ description, name, interfaces, directives, fields }) => wrap("", description, "\n") + join3(
+        leave: ({ description, name, interfaces, directives, fields }) => wrap("", description, "\n") + join4(
           [
             "type",
             name,
-            wrap("implements ", join3(interfaces, " & ")),
-            join3(directives, " "),
+            wrap("implements ", join4(interfaces, " & ")),
+            join4(directives, " "),
             block(fields)
           ],
           " "
         )
       },
       FieldDefinition: {
-        leave: ({ description, name, arguments: args, type, directives }) => wrap("", description, "\n") + name + (hasMultilineItems(args) ? wrap("(\n", indent2(join3(args, "\n")), "\n)") : wrap("(", join3(args, ", "), ")")) + ": " + type + wrap(" ", join3(directives, " "))
+        leave: ({ description, name, arguments: args, type, directives }) => wrap("", description, "\n") + name + (hasMultilineItems(args) ? wrap("(\n", indent2(join4(args, "\n")), "\n)") : wrap("(", join4(args, ", "), ")")) + ": " + type + wrap(" ", join4(directives, " "))
       },
       InputValueDefinition: {
-        leave: ({ description, name, type, defaultValue, directives }) => wrap("", description, "\n") + join3(
-          [name + ": " + type, wrap("= ", defaultValue), join3(directives, " ")],
+        leave: ({ description, name, type, defaultValue, directives }) => wrap("", description, "\n") + join4(
+          [name + ": " + type, wrap("= ", defaultValue), join4(directives, " ")],
           " "
         )
       },
       InterfaceTypeDefinition: {
-        leave: ({ description, name, interfaces, directives, fields }) => wrap("", description, "\n") + join3(
+        leave: ({ description, name, interfaces, directives, fields }) => wrap("", description, "\n") + join4(
           [
             "interface",
             name,
-            wrap("implements ", join3(interfaces, " & ")),
-            join3(directives, " "),
+            wrap("implements ", join4(interfaces, " & ")),
+            join4(directives, " "),
             block(fields)
           ],
           " "
         )
       },
       UnionTypeDefinition: {
-        leave: ({ description, name, directives, types: types2 }) => wrap("", description, "\n") + join3(
-          ["union", name, join3(directives, " "), wrap("= ", join3(types2, " | "))],
+        leave: ({ description, name, directives, types: types2 }) => wrap("", description, "\n") + join4(
+          ["union", name, join4(directives, " "), wrap("= ", join4(types2, " | "))],
           " "
         )
       },
       EnumTypeDefinition: {
-        leave: ({ description, name, directives, values }) => wrap("", description, "\n") + join3(["enum", name, join3(directives, " "), block(values)], " ")
+        leave: ({ description, name, directives, values }) => wrap("", description, "\n") + join4(["enum", name, join4(directives, " "), block(values)], " ")
       },
       EnumValueDefinition: {
-        leave: ({ description, name, directives }) => wrap("", description, "\n") + join3([name, join3(directives, " ")], " ")
+        leave: ({ description, name, directives }) => wrap("", description, "\n") + join4([name, join4(directives, " ")], " ")
       },
       InputObjectTypeDefinition: {
-        leave: ({ description, name, directives, fields }) => wrap("", description, "\n") + join3(["input", name, join3(directives, " "), block(fields)], " ")
+        leave: ({ description, name, directives, fields }) => wrap("", description, "\n") + join4(["input", name, join4(directives, " "), block(fields)], " ")
       },
       DirectiveDefinition: {
         leave: ({
@@ -127605,84 +127605,84 @@ var require_printer = __commonJS({
           directives,
           repeatable,
           locations
-        }) => wrap("", description, "\n") + "directive @" + name + (hasMultilineItems(args) ? wrap("(\n", indent2(join3(args, "\n")), "\n)") : wrap("(", join3(args, ", "), ")")) + wrap(" ", join3(directives, " ")) + (repeatable ? " repeatable" : "") + " on " + join3(locations, " | ")
+        }) => wrap("", description, "\n") + "directive @" + name + (hasMultilineItems(args) ? wrap("(\n", indent2(join4(args, "\n")), "\n)") : wrap("(", join4(args, ", "), ")")) + wrap(" ", join4(directives, " ")) + (repeatable ? " repeatable" : "") + " on " + join4(locations, " | ")
       },
       SchemaExtension: {
-        leave: ({ directives, operationTypes }) => join3(
-          ["extend schema", join3(directives, " "), block(operationTypes)],
+        leave: ({ directives, operationTypes }) => join4(
+          ["extend schema", join4(directives, " "), block(operationTypes)],
           " "
         )
       },
       ScalarTypeExtension: {
-        leave: ({ name, directives }) => join3(["extend scalar", name, join3(directives, " ")], " ")
+        leave: ({ name, directives }) => join4(["extend scalar", name, join4(directives, " ")], " ")
       },
       ObjectTypeExtension: {
-        leave: ({ name, interfaces, directives, fields }) => join3(
+        leave: ({ name, interfaces, directives, fields }) => join4(
           [
             "extend type",
             name,
-            wrap("implements ", join3(interfaces, " & ")),
-            join3(directives, " "),
+            wrap("implements ", join4(interfaces, " & ")),
+            join4(directives, " "),
             block(fields)
           ],
           " "
         )
       },
       InterfaceTypeExtension: {
-        leave: ({ name, interfaces, directives, fields }) => join3(
+        leave: ({ name, interfaces, directives, fields }) => join4(
           [
             "extend interface",
             name,
-            wrap("implements ", join3(interfaces, " & ")),
-            join3(directives, " "),
+            wrap("implements ", join4(interfaces, " & ")),
+            join4(directives, " "),
             block(fields)
           ],
           " "
         )
       },
       UnionTypeExtension: {
-        leave: ({ name, directives, types: types2 }) => join3(
+        leave: ({ name, directives, types: types2 }) => join4(
           [
             "extend union",
             name,
-            join3(directives, " "),
-            wrap("= ", join3(types2, " | "))
+            join4(directives, " "),
+            wrap("= ", join4(types2, " | "))
           ],
           " "
         )
       },
       EnumTypeExtension: {
-        leave: ({ name, directives, values }) => join3(["extend enum", name, join3(directives, " "), block(values)], " ")
+        leave: ({ name, directives, values }) => join4(["extend enum", name, join4(directives, " "), block(values)], " ")
       },
       InputObjectTypeExtension: {
-        leave: ({ name, directives, fields }) => join3(["extend input", name, join3(directives, " "), block(fields)], " ")
+        leave: ({ name, directives, fields }) => join4(["extend input", name, join4(directives, " "), block(fields)], " ")
       },
       DirectiveExtension: {
-        leave: ({ name, directives }) => join3(["extend directive @" + name, join3(directives, " ")], " ")
+        leave: ({ name, directives }) => join4(["extend directive @" + name, join4(directives, " ")], " ")
       },
       // Schema Coordinates
       TypeCoordinate: {
         leave: ({ name }) => name
       },
       MemberCoordinate: {
-        leave: ({ name, memberName }) => join3([name, wrap(".", memberName)])
+        leave: ({ name, memberName }) => join4([name, wrap(".", memberName)])
       },
       ArgumentCoordinate: {
-        leave: ({ name, fieldName, argumentName }) => join3([name, wrap(".", fieldName), wrap("(", argumentName, ":)")])
+        leave: ({ name, fieldName, argumentName }) => join4([name, wrap(".", fieldName), wrap("(", argumentName, ":)")])
       },
       DirectiveCoordinate: {
-        leave: ({ name }) => join3(["@", name])
+        leave: ({ name }) => join4(["@", name])
       },
       DirectiveArgumentCoordinate: {
-        leave: ({ name, argumentName }) => join3(["@", name, wrap("(", argumentName, ":)")])
+        leave: ({ name, argumentName }) => join4(["@", name, wrap("(", argumentName, ":)")])
       }
     };
-    function join3(maybeArray, separator = "") {
+    function join4(maybeArray, separator = "") {
       var _maybeArray$filter$jo;
       return (_maybeArray$filter$jo = maybeArray === null || maybeArray === void 0 ? void 0 : maybeArray.filter((x) => x).join(separator)) !== null && _maybeArray$filter$jo !== void 0 ? _maybeArray$filter$jo : "";
     }
     function block(array) {
-      return wrap("{\n", indent2(join3(array, "\n")), "\n}");
+      return wrap("{\n", indent2(join4(array, "\n")), "\n}");
     }
     function wrap(start, maybeString, end = "") {
       return maybeString != null && maybeString !== "" ? start + maybeString + end : "";
@@ -152316,7 +152316,7 @@ var require_index_cjs = __commonJS({
       const t = parse10(r);
       return "http" === t.protocol || "https" === t.protocol;
     }
-    var join3 = (...r) => {
+    var join4 = (...r) => {
       if (0 === r.length) return ".";
       const t = r.map(parse10), e = Object.assign({}, t[0]);
       for (let n = 1; n < t.length; n++) {
@@ -152340,7 +152340,7 @@ var require_index_cjs = __commonJS({
     function resolve5(...r) {
       if (0 === r.length) return ".";
       const t = normalizeParsed(parse10(r[r.length - 1]));
-      return t.absolute ? format3(t) : join3(...r);
+      return t.absolute ? format3(t) : join4(...r);
     }
     var startsWithWindowsDrive = (r) => {
       return null !== parse10(r).drive;
@@ -152354,7 +152354,7 @@ var require_index_cjs = __commonJS({
     function serializeSrn({ shortcode: r, orgSlug: t, projectSlug: e, uri: n = "" }) {
       return [r, t, e, n.replace(/^\//, "")].filter(Boolean).join("/");
     }
-    exports2.basename = basename3, exports2.deserializeSrn = deserializeSrn, exports2.dirname = dirname3, exports2.extname = extname2, exports2.format = format3, exports2.isAbsolute = isAbsolute, exports2.isURL = isURL, exports2.join = join3, exports2.normalize = normalize3, exports2.parse = parse10, exports2.relative = relative2, exports2.resolve = resolve5, exports2.sep = "/", exports2.serializeSrn = serializeSrn, exports2.startsWithWindowsDrive = startsWithWindowsDrive, exports2.stripRoot = stripRoot, exports2.toFSPath = normalize3;
+    exports2.basename = basename3, exports2.deserializeSrn = deserializeSrn, exports2.dirname = dirname3, exports2.extname = extname2, exports2.format = format3, exports2.isAbsolute = isAbsolute, exports2.isURL = isURL, exports2.join = join4, exports2.normalize = normalize3, exports2.parse = parse10, exports2.relative = relative2, exports2.resolve = resolve5, exports2.sep = "/", exports2.serializeSrn = serializeSrn, exports2.startsWithWindowsDrive = startsWithWindowsDrive, exports2.stripRoot = stripRoot, exports2.toFSPath = normalize3;
   }
 });
 
@@ -154097,7 +154097,7 @@ var require_stable = __commonJS({
       return result;
     }
     function stringifyFullFn(key, parent, stack, replacer, indent2) {
-      var i, res, join3;
+      var i, res, join4;
       const originalIndentation = indentation;
       var value = parent[key];
       if (typeof value === "object" && value !== null && typeof value.toJSON === "function") {
@@ -154123,12 +154123,12 @@ var require_stable = __commonJS({
             indentation += indent2;
             res += `
 ${indentation}`;
-            join3 = `,
+            join4 = `,
 ${indentation}`;
             for (i = 0; i < value.length - 1; i++) {
               const tmp2 = stringifyFullFn(i, value, stack, replacer, indent2);
               res += tmp2 !== void 0 ? tmp2 : "null";
-              res += join3;
+              res += join4;
             }
             const tmp = stringifyFullFn(i, value, stack, replacer, indent2);
             res += tmp !== void 0 ? tmp : "null";
@@ -154150,7 +154150,7 @@ ${originalIndentation}`;
           indentation += indent2;
           res += `
 ${indentation}`;
-          join3 = `,
+          join4 = `,
 ${indentation}`;
           var separator = "";
           for (i = 0; i < keys.length; i++) {
@@ -154158,7 +154158,7 @@ ${indentation}`;
             const tmp = stringifyFullFn(key, value, stack, replacer, indent2);
             if (tmp !== void 0) {
               res += `${separator}"${strEscape(key)}": ${tmp}`;
-              separator = join3;
+              separator = join4;
             }
           }
           if (separator !== "") {
@@ -154180,7 +154180,7 @@ ${originalIndentation}`;
       }
     }
     function stringifyFullArr(key, value, stack, replacer, indent2) {
-      var i, res, join3;
+      var i, res, join4;
       const originalIndentation = indentation;
       if (typeof value === "object" && value !== null && typeof value.toJSON === "function") {
         value = value.toJSON(key);
@@ -154204,12 +154204,12 @@ ${originalIndentation}`;
             indentation += indent2;
             res += `
 ${indentation}`;
-            join3 = `,
+            join4 = `,
 ${indentation}`;
             for (i = 0; i < value.length - 1; i++) {
               const tmp2 = stringifyFullArr(i, value[i], stack, replacer, indent2);
               res += tmp2 !== void 0 ? tmp2 : "null";
-              res += join3;
+              res += join4;
             }
             const tmp = stringifyFullArr(i, value[i], stack, replacer, indent2);
             res += tmp !== void 0 ? tmp : "null";
@@ -154230,7 +154230,7 @@ ${originalIndentation}`;
           indentation += indent2;
           res += `
 ${indentation}`;
-          join3 = `,
+          join4 = `,
 ${indentation}`;
           var separator = "";
           for (i = 0; i < replacer.length; i++) {
@@ -154239,7 +154239,7 @@ ${indentation}`;
               const tmp = stringifyFullArr(key, value[key], stack, replacer, indent2);
               if (tmp !== void 0) {
                 res += `${separator}"${strEscape(key)}": ${tmp}`;
-                separator = join3;
+                separator = join4;
               }
             }
           }
@@ -154262,7 +154262,7 @@ ${originalIndentation}`;
       }
     }
     function stringifyIndent(key, value, stack, indent2) {
-      var i, res, join3;
+      var i, res, join4;
       const originalIndentation = indentation;
       switch (typeof value) {
         case "object":
@@ -154292,12 +154292,12 @@ ${originalIndentation}`;
             indentation += indent2;
             res += `
 ${indentation}`;
-            join3 = `,
+            join4 = `,
 ${indentation}`;
             for (i = 0; i < value.length - 1; i++) {
               const tmp2 = stringifyIndent(i, value[i], stack, indent2);
               res += tmp2 !== void 0 ? tmp2 : "null";
-              res += join3;
+              res += join4;
             }
             const tmp = stringifyIndent(i, value[i], stack, indent2);
             res += tmp !== void 0 ? tmp : "null";
@@ -154319,7 +154319,7 @@ ${originalIndentation}`;
           indentation += indent2;
           res += `
 ${indentation}`;
-          join3 = `,
+          join4 = `,
 ${indentation}`;
           var separator = "";
           for (i = 0; i < keys.length; i++) {
@@ -154327,7 +154327,7 @@ ${indentation}`;
             const tmp = stringifyIndent(key, value[key], stack, indent2);
             if (tmp !== void 0) {
               res += `${separator}"${strEscape(key)}": ${tmp}`;
-              separator = join3;
+              separator = join4;
             }
           }
           if (separator !== "") {
@@ -172660,7 +172660,7 @@ var require_lodash2 = __commonJS({
           }
           return mapped.length && mapped[0] === arrays[0] ? baseIntersection(mapped, undefined2, comparator) : [];
         });
-        function join3(array, separator) {
+        function join4(array, separator) {
           return array == null ? "" : nativeJoin.call(array, separator);
         }
         function last(array) {
@@ -174584,7 +174584,7 @@ var require_lodash2 = __commonJS({
         lodash.isUndefined = isUndefined;
         lodash.isWeakMap = isWeakMap;
         lodash.isWeakSet = isWeakSet;
-        lodash.join = join3;
+        lodash.join = join4;
         lodash.kebabCase = kebabCase;
         lodash.last = last;
         lodash.lastIndexOf = lastIndexOf;
@@ -179718,7 +179718,7 @@ var require_lodash3 = __commonJS({
           }
           return mapped.length && mapped[0] === arrays[0] ? baseIntersection(mapped, undefined2, comparator) : [];
         });
-        function join3(array, separator) {
+        function join4(array, separator) {
           return array == null ? "" : nativeJoin.call(array, separator);
         }
         function last(array) {
@@ -181642,7 +181642,7 @@ var require_lodash3 = __commonJS({
         lodash.isUndefined = isUndefined;
         lodash.isWeakMap = isWeakMap;
         lodash.isWeakSet = isWeakSet;
-        lodash.join = join3;
+        lodash.join = join4;
         lodash.kebabCase = kebabCase;
         lodash.last = last;
         lodash.lastIndexOf = lastIndexOf;
@@ -283137,7 +283137,7 @@ var require_lodash5 = __commonJS({
           }
           return mapped.length && mapped[0] === arrays[0] ? baseIntersection(mapped, undefined2, comparator) : [];
         });
-        function join3(array, separator) {
+        function join4(array, separator) {
           return array == null ? "" : nativeJoin.call(array, separator);
         }
         function last(array) {
@@ -285061,7 +285061,7 @@ var require_lodash5 = __commonJS({
         lodash.isUndefined = isUndefined;
         lodash.isWeakMap = isWeakMap;
         lodash.isWeakSet = isWeakSet;
-        lodash.join = join3;
+        lodash.join = join4;
         lodash.kebabCase = kebabCase;
         lodash.last = last;
         lodash.lastIndexOf = lastIndexOf;
@@ -294687,7 +294687,7 @@ function getIDToken(aud) {
 
 // src/index.ts
 var import_node_crypto4 = require("node:crypto");
-var import_node_fs4 = require("node:fs");
+var import_node_fs5 = require("node:fs");
 var path9 = __toESM(require("node:path"), 1);
 var import_yaml4 = __toESM(require_dist(), 1);
 
@@ -296241,12 +296241,62 @@ function resolvePostmanEndpointProfile(stack, region = "us") {
 
 // src/lib/postman/credential-identity.ts
 var sessionPath = "/api/sessions/current";
+var SESSION_MAX_ATTEMPTS = 3;
+var SESSION_RETRY_BASE_DELAY_MS = 500;
+var SESSION_RETRY_MAX_DELAY_MS = 8e3;
 var pmakMemo = /* @__PURE__ */ new Map();
 var sessionMemo = /* @__PURE__ */ new Map();
 var memoizedSessionIdentity;
+var memoizedSessionFailure;
+function defaultSessionSleep(ms) {
+  return new Promise((resolve5) => setTimeout(resolve5, ms));
+}
+function defaultRandom() {
+  return Math.random();
+}
+function parseRetryAfterMs(value) {
+  const trimmed = value?.trim();
+  if (!trimmed) {
+    return void 0;
+  }
+  if (/^\d+$/.test(trimmed)) {
+    return Number(trimmed) * 1e3;
+  }
+  const dateMs = Date.parse(trimmed);
+  if (!Number.isNaN(dateMs)) {
+    return Math.max(0, dateMs - Date.now());
+  }
+  return void 0;
+}
+function parseRateLimitResetMs(value) {
+  const trimmed = value?.trim();
+  if (!trimmed || !/^\d+$/.test(trimmed)) {
+    return void 0;
+  }
+  const seconds = Number(trimmed);
+  const nowSeconds = Date.now() / 1e3;
+  if (seconds > nowSeconds) {
+    return Math.max(0, (seconds - nowSeconds) * 1e3);
+  }
+  return seconds * 1e3;
+}
+function computeSessionRetryDelayMs(response, attempt, random) {
+  const headers = response?.headers;
+  const signal = parseRetryAfterMs(headers?.get("retry-after") ?? null) ?? parseRateLimitResetMs(
+    headers?.get("ratelimit-reset") ?? headers?.get("x-ratelimit-reset") ?? null
+  );
+  if (signal !== void 0) {
+    return Math.min(Math.max(0, signal), SESSION_RETRY_MAX_DELAY_MS);
+  }
+  const ceiling = Math.min(SESSION_RETRY_MAX_DELAY_MS, SESSION_RETRY_BASE_DELAY_MS * 2 ** (attempt - 1));
+  return Math.round(random() * ceiling);
+}
 function getMemoizedSessionIdentity() {
   return memoizedSessionIdentity;
 }
+function getSessionResolutionFailure() {
+  return memoizedSessionFailure;
+}
 function asRecord2(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) {
     return void 0;
@@ -296315,46 +296365,90 @@ async function resolveSessionIdentity(opts) {
   const memoKey = `${baseUrl}::${accessToken}`;
   let pending = sessionMemo.get(memoKey);
   if (!pending) {
-    pending = probeSessionIdentity(baseUrl, accessToken, opts.fetchImpl ?? fetch);
+    pending = probeSessionIdentity(
+      baseUrl,
+      accessToken,
+      opts.fetchImpl ?? fetch,
+      Math.max(1, opts.maxAttempts ?? SESSION_MAX_ATTEMPTS),
+      opts.sleepImpl ?? defaultSessionSleep,
+      opts.randomImpl ?? defaultRandom
+    );
     sessionMemo.set(memoKey, pending);
   }
   return pending;
 }
-async function probeSessionIdentity(baseUrl, accessToken, fetchImpl) {
+async function parseSessionResponse(response) {
+  let payload;
   try {
-    const response = await fetchImpl(`${baseUrl}${sessionPath}`, {
-      method: "GET",
-      headers: { "x-access-token": accessToken }
-    });
-    if (!response.ok) {
-      return void 0;
-    }
-    const payload = asRecord2(await response.json());
-    if (!payload) {
-      return void 0;
-    }
-    const root = asRecord2(payload.session) ?? payload;
-    const identity = asRecord2(root.identity);
-    const data = asRecord2(root.data);
-    const user = asRecord2(data?.user);
-    const roleEntries = Array.isArray(user?.roles) ? user.roles.map((entry) => coerceText(entry) ?? coerceId(entry)).filter((entry) => Boolean(entry)) : [];
-    const singleRole = coerceText(user?.role);
-    const roles = roleEntries.length > 0 ? roleEntries : singleRole ? [singleRole] : void 0;
-    const resolved = {
-      source: "iapub/sessions",
-      userId: coerceId(identity?.user) ?? coerceId(user?.id),
-      fullName: coerceText(user?.fullName) ?? coerceText(user?.name) ?? coerceText(user?.username),
-      teamId: coerceId(identity?.team),
-      teamName: coerceText(user?.teamName),
-      teamDomain: coerceText(identity?.domain),
-      ...roles ? { roles } : {},
-      consumerType: coerceText(root.consumerType) ?? coerceText(data?.consumerType) ?? coerceText(user?.consumerType)
-    };
-    memoizedSessionIdentity = resolved;
-    return resolved;
+    payload = asRecord2(await response.json());
   } catch {
     return void 0;
   }
+  if (!payload) {
+    return void 0;
+  }
+  const root = asRecord2(payload.session) ?? payload;
+  const identity = asRecord2(root.identity);
+  const data = asRecord2(root.data);
+  const user = asRecord2(data?.user);
+  const roleEntries = Array.isArray(user?.roles) ? user.roles.map((entry) => coerceText(entry) ?? coerceId(entry)).filter((entry) => Boolean(entry)) : [];
+  const singleRole = coerceText(user?.role);
+  const roles = roleEntries.length > 0 ? roleEntries : singleRole ? [singleRole] : void 0;
+  return {
+    source: "iapub/sessions",
+    userId: coerceId(identity?.user) ?? coerceId(user?.id),
+    fullName: coerceText(user?.fullName) ?? coerceText(user?.name) ?? coerceText(user?.username),
+    teamId: coerceId(identity?.team),
+    teamName: coerceText(user?.teamName),
+    teamDomain: coerceText(identity?.domain),
+    ...roles ? { roles } : {},
+    consumerType: coerceText(root.consumerType) ?? coerceText(data?.consumerType) ?? coerceText(user?.consumerType)
+  };
+}
+async function probeSessionIdentity(baseUrl, accessToken, fetchImpl, maxAttempts, sleepImpl, random) {
+  let failure = "unavailable";
+  for (let attempt = 1; attempt <= maxAttempts; attempt += 1) {
+    let response;
+    try {
+      response = await fetchImpl(`${baseUrl}${sessionPath}`, {
+        method: "GET",
+        headers: { "x-access-token": accessToken }
+      });
+    } catch {
+      failure = "unavailable";
+      if (attempt < maxAttempts) {
+        await sleepImpl(computeSessionRetryDelayMs(void 0, attempt, random));
+        continue;
+      }
+      break;
+    }
+    if (response.ok) {
+      const resolved = await parseSessionResponse(response);
+      if (resolved) {
+        memoizedSessionIdentity = resolved;
+        memoizedSessionFailure = void 0;
+        return resolved;
+      }
+      failure = "unavailable";
+      break;
+    }
+    if (response.status === 401 || response.status === 403) {
+      failure = "auth";
+      break;
+    }
+    if (response.status === 429 || response.status >= 500) {
+      failure = "unavailable";
+      if (attempt < maxAttempts) {
+        await sleepImpl(computeSessionRetryDelayMs(response, attempt, random));
+        continue;
+      }
+      break;
+    }
+    failure = "unavailable";
+    break;
+  }
+  memoizedSessionFailure = failure;
+  return void 0;
 }
 function describeTeam(id) {
   const label = id?.teamName ?? id?.teamDomain;
@@ -296445,7 +296539,9 @@ async function runCredentialPreflight(args) {
     session = await resolveSessionIdentity({
       iapubBaseUrl: args.iapubBaseUrl,
       accessToken,
-      fetchImpl: args.fetchImpl
+      fetchImpl: args.fetchImpl,
+      ...args.sleepImpl ? { sleepImpl: args.sleepImpl } : {},
+      ...args.randomImpl ? { randomImpl: args.randomImpl } : {}
     });
   } catch (error2) {
     args.log.warning(
@@ -296465,11 +296561,20 @@ async function runCredentialPreflight(args) {
       );
     }
   } else {
+    const failure = getSessionResolutionFailure();
+    const detail = failure === "auth" ? "the access token was rejected by iapub (401/403), so it is invalid or expired. Re-mint it with postman-resolve-service-token-action (or POST https://api.getpostman.com/service-account-tokens) and re-run." : "iapub was unreachable after retries (network or 5xx). This is usually transient; re-run the job.";
+    const base = "postman: credential preflight could not resolve the access-token session identity from iapub: " + detail;
+    if (args.mode === "enforce") {
+      throw new Error(
+        mask(
+          `${base} (credential-preflight: enforce requires a resolvable session identity; use credential-preflight: warn to continue with reactive error guidance only.)`
+        )
+      );
+    }
     args.log.warning(
-      mask(
-        "postman: credential preflight could not resolve the access-token session identity from iapub; continuing with reactive error guidance only"
-      )
+      mask(`${base} Continuing with reactive error guidance only (credential-preflight: warn).`)
     );
+    return;
   }
   const result = crossCheckIdentities({
     pmak,
@@ -298796,6 +298901,7 @@ function buildContractIndex(root) {
           parameterChecks,
           requestBody: collectRequestBody(root, operation, version2, operationId, opWarnings),
           security: collectSecurityRuntimeChecks(root, operation),
+          pathMethods: Object.keys(pathItem).filter((key) => HTTP_METHODS.has(key)).map((key) => key.toUpperCase()),
           warnings: opWarnings
         });
       }
@@ -298972,7 +299078,7 @@ function buildValidatorAssignments(operation, warnings, skipped) {
   return lines;
 }
 function createContractScript(operation, warnings = []) {
-  const contract = { method: operation.method, path: operation.path, responses: operation.responses, security: operation.security, parameters: operation.parameterChecks };
+  const contract = { method: operation.method, path: operation.path, responses: operation.responses, security: operation.security, parameters: operation.parameterChecks, pathMethods: operation.pathMethods };
   const skipped = [];
   const validatorLines = buildValidatorAssignments(operation, warnings, skipped);
   return [
@@ -299083,6 +299189,61 @@ function createContractScript(operation, warnings = []) {
     '  if (!isJsonSubtype(actual.subtype) && media.media.schema && media.media.schema.type !== "string") { return; }',
     '  if (!validate(value)) pm.expect.fail("OpenAPI schema validation failed for " + contract.method + " " + contract.path + " status " + pm.response.code + ": " + JSON.stringify(validate.errors || []));',
     "});",
+    "pm.test('Response satisfies RFC 9110 status-code requirements', function () {",
+    "  var code = pm.response.code;",
+    '  function respHeader(name) { return pm.response.headers.get(name) || ""; }',
+    "  if (code === 401) {",
+    '    var challenge = respHeader("WWW-Authenticate");',
+    '    if (!challenge) pm.expect.fail("RFC 9110 requires WWW-Authenticate on 401 responses");',
+    '    var wantsBearer = (contract.security || []).some(function (alternative) { return alternative.some(function (check) { return check.prefix && check.prefix.toLowerCase().indexOf("bearer") === 0; }); });',
+    '    if (wantsBearer && challenge && challenge.toLowerCase().indexOf("bearer") === -1) pm.expect.fail("RFC 6750 expects a Bearer challenge on 401 for bearer-secured operations; got: " + challenge);',
+    "  }",
+    "  if (code === 405) {",
+    '    var allow = respHeader("Allow");',
+    '    if (!allow) pm.expect.fail("RFC 9110 requires Allow on 405 responses");',
+    '    var allowed = allow.split(",").map(function (entry) { return entry.trim().toUpperCase(); });',
+    '    (contract.pathMethods || []).forEach(function (method) { if (allowed.indexOf(method) === -1) pm.expect.fail("Allow on 405 must list every method the OpenAPI path declares (RFC 9110); missing " + method + " in: " + allow); });',
+    "  }",
+    '  if (code === 304 && responseText().trim().length > 0) pm.expect.fail("RFC 9110 forbids content in a 304 response");',
+    "  if (code === 206) {",
+    '    var range = respHeader("Content-Range");',
+    '    if (!range) pm.expect.fail("RFC 9110 requires Content-Range on a single-part 206 response");',
+    '    if (range && !/^\\S+ (\\d+-\\d+|\\*)\\/(\\d+|\\*)$/.test(range)) pm.expect.fail("Content-Range is not a valid RFC 9110 range: " + range);',
+    "  }",
+    '  var retryAfter = respHeader("Retry-After");',
+    "  if (retryAfter && (code === 429 || code === 503 || (code >= 300 && code < 400))) {",
+    '    if (!/^\\d+$/.test(retryAfter.trim()) && isNaN(Date.parse(retryAfter))) pm.expect.fail("Retry-After must be delay-seconds or an HTTP-date (RFC 9110): " + retryAfter);',
+    "  }",
+    '  var location = respHeader("Location");',
+    "  if (location && (code === 201 || (code >= 300 && code < 400))) {",
+    '    if (/\\s/.test(location.trim()) || location.trim().length === 0) pm.expect.fail("Location must be a valid URI-reference (RFC 9110 / RFC 3986): " + location);',
+    "  }",
+    "});",
+    "pm.test('Error and encoding conventions match RFC 9457 / RFC 8259 / RFC 8288', function () {",
+    '  var contentTypeRaw = pm.response.headers.get("Content-Type") || "";',
+    "  var ct = mediaParts(contentTypeRaw);",
+    '  if (ct.type === "application" && ct.subtype === "problem+json") {',
+    "    var problem;",
+    '    try { problem = pm.response.json(); } catch (error) { pm.expect.fail("application/problem+json body is not valid JSON (RFC 9457): " + error); }',
+    '    if (!problem || typeof problem !== "object" || Array.isArray(problem)) pm.expect.fail("problem details must be a JSON object (RFC 9457)");',
+    '    ["type", "title", "detail", "instance"].forEach(function (member) { if (problem[member] !== undefined && typeof problem[member] !== "string") pm.expect.fail("RFC 9457 " + member + " member must be a string; got " + typeof problem[member]); });',
+    "    if (problem.status !== undefined) {",
+    '      if (typeof problem.status !== "number") pm.expect.fail("RFC 9457 status member must be a number; got " + typeof problem.status);',
+    '      else if (problem.status !== pm.response.code) pm.expect.fail("RFC 9457 status member (" + problem.status + ") must match the HTTP status code (" + pm.response.code + ")");',
+    "    }",
+    "  }",
+    "  if (isJsonSubtype(ct.subtype)) {",
+    '    var charsetMatch = contentTypeRaw.match(/charset\\s*=\\s*"?([^";\\s]+)"?/i);',
+    '    if (charsetMatch && charsetMatch[1].toLowerCase() !== "utf-8") pm.expect.fail("JSON interchange must be UTF-8 (RFC 8259); got charset=" + charsetMatch[1]);',
+    "  }",
+    '  var link = pm.response.headers.get("Link");',
+    "  if (link) {",
+    "    link.split(/,(?=\\s*<)/).forEach(function (value) {",
+    '      if (!/^\\s*<[^>]*>/.test(value)) pm.expect.fail("RFC 8288 link-value must start with a <URI-Reference>: " + value);',
+    '      if (!/;\\s*rel\\s*=/i.test(value)) pm.expect.fail("RFC 8288 link-value must carry a rel parameter: " + value);',
+    "    });",
+    "  }",
+    "});",
     ...operation.security ? [
       "pm.test('Request carries credentials required by OpenAPI security', function () {",
       "  function satisfied(check) {",
@@ -299512,6 +299673,15 @@ function asRecord7(value) {
   }
   return value;
 }
+function adviseWorkspaceFlipForbidden(error2) {
+  if (error2 instanceof HttpError && error2.status === 403) {
+    const body = error2.responseBody || "";
+    if (/addWorkspaceLevelTeamRoles/i.test(body) || /You are not authorized to perform this action/i.test(body)) {
+      return new Error(WORKSPACE_PERSONAL_ONLY_ADVICE, { cause: error2 });
+    }
+  }
+  return error2;
+}
 function extractGitRepoUrl(value) {
   if (!value) return null;
   if (typeof value === "string") {
@@ -299539,7 +299709,7 @@ function extractGitRepoUrl(value) {
 }
 var PostmanGatewayAssetsClient = class _PostmanGatewayAssetsClient {
   static GENERATION_LOCKED_MAX_RETRIES = 5;
-  static GENERATION_POLL_ATTEMPTS = 45;
+  static GENERATION_POLL_ATTEMPTS = 90;
   static GENERATION_POLL_DELAY_MS = 2e3;
   gateway;
   sleep;
@@ -299817,7 +299987,7 @@ var PostmanGatewayAssetsClient = class _PostmanGatewayAssetsClient {
       }
     } catch (error2) {
       await this.deleteWorkspace(workspaceId).catch(() => void 0);
-      throw error2;
+      throw adviseWorkspaceFlipForbidden(error2);
     }
     return { id: workspaceId };
   }
@@ -299914,6 +300084,40 @@ var PostmanGatewayAssetsClient = class _PostmanGatewayAssetsClient {
     const u = String(uid ?? "").trim();
     return u.includes("-") ? u.slice(u.indexOf("-") + 1) : u;
   }
+  /**
+   * PATCH a freshly-created item's `/scripts`, tolerating the two transient
+   * failures this immediate-after-create write is prone to on the shared gateway:
+   *   - `404 RESOURCE_NOT_FOUND` — the create write returns the assigned id, but
+   *     an immediate PATCH can hit a replica that has not yet observed the create
+   *     (read-after-write lag, live-observed on org-mode teams).
+   *   - a downstream `5xx` (e.g. `500 ESOCKETTIMEDOUT`) — a Bifrost/gateway read
+   *     timeout, not a durable rejection.
+   * `op:add /scripts` is idempotent (overwrites), so retrying either is safe.
+   * This is a deeper, longer-backoff budget than the gateway client's inner
+   * transient retry, to wait out a longer platform hiccup on this fragile write.
+   * Non-transient errors (e.g. 4xx schema rejections) surface immediately.
+   */
+  async patchNewItemScripts(cid, itemId, scripts) {
+    const maxAttempts = 6;
+    for (let attempt = 0; attempt < maxAttempts; attempt += 1) {
+      try {
+        await this.gateway.requestJson({
+          service: "collection",
+          method: "patch",
+          path: `/v3/collections/${cid}/items/${itemId}`,
+          headers: { "X-Entity-Type": "http-request" },
+          body: [{ op: "add", path: "/scripts", value: scripts }]
+        });
+        return;
+      } catch (error2) {
+        const retriable = error2 instanceof HttpError && (error2.status === 404 || error2.status >= 500);
+        if (!retriable || attempt === maxAttempts - 1) {
+          throw error2;
+        }
+        await this.sleep(Math.min(2e3, 300 * 2 ** attempt));
+      }
+    }
+  }
   /**
    * Apply tag slugs via the dedicated `tagging` service:
    * `PUT /v1/tags/collections/:uid` (full uid), body `{ tags:[{ slug }] }` — the
@@ -300031,26 +300235,14 @@ var PostmanGatewayAssetsClient = class _PostmanGatewayAssetsClient {
     });
     const newItemId = String(asRecord7(created?.data)?.id ?? "").trim();
     if (!newItemId) return;
-    await this.gateway.requestJson({
-      service: "collection",
-      method: "patch",
-      path: `/v3/collections/${cid}/items/${newItemId}`,
-      headers: { "X-Entity-Type": "http-request" },
-      body: [
-        {
-          op: "add",
-          path: "/scripts",
-          value: toV3Scripts([
-            'if (pm.environment.get("CI") === "true") { return; }',
-            "const body = pm.response.json();",
-            "if (body.SecretString) {",
-            "  const secrets = JSON.parse(body.SecretString);",
-            "  Object.entries(secrets).forEach(([k, v]) => pm.collectionVariables.set(k, v));",
-            "}"
-          ])
-        }
-      ]
-    });
+    await this.patchNewItemScripts(cid, newItemId, toV3Scripts([
+      'if (pm.environment.get("CI") === "true") { return; }',
+      "const body = pm.response.json();",
+      "if (body.SecretString) {",
+      "  const secrets = JSON.parse(body.SecretString);",
+      "  Object.entries(secrets).forEach(([k, v]) => pm.collectionVariables.set(k, v));",
+      "}"
+    ]));
   }
   // --- workspace roles + member resolution (live-proven 2026-06-30) ---
   //
@@ -300209,26 +300401,14 @@ var PostmanGatewayAssetsClient = class _PostmanGatewayAssetsClient {
       });
       const newItemId = String(asRecord7(created?.data)?.id ?? "").trim();
       if (newItemId) {
-        await this.gateway.requestJson({
-          service: "collection",
-          method: "patch",
-          path: `/v3/collections/${cid}/items/${newItemId}`,
-          headers: { "X-Entity-Type": "http-request" },
-          body: [
-            {
-              op: "add",
-              path: "/scripts",
-              value: toV3Scripts([
-                'if (pm.environment.get("CI") === "true") { return; }',
-                "const body = pm.response.json();",
-                "if (body.SecretString) {",
-                "  const secrets = JSON.parse(body.SecretString);",
-                "  Object.entries(secrets).forEach(([k, v]) => pm.collectionVariables.set(k, v));",
-                "}"
-              ])
-            }
-          ]
-        });
+        await this.patchNewItemScripts(cid, newItemId, toV3Scripts([
+          'if (pm.environment.get("CI") === "true") { return; }',
+          "const body = pm.response.json();",
+          "if (body.SecretString) {",
+          "  const secrets = JSON.parse(body.SecretString);",
+          "  Object.entries(secrets).forEach(([k, v]) => pm.collectionVariables.set(k, v));",
+          "}"
+        ]));
       }
     }
     return plan.warnings;
@@ -301064,7 +301244,7 @@ function resolveActionVersion(explicit) {
   if (explicit) {
     return explicit;
   }
-  return "2.1.1" ? "2.1.1" : "unknown";
+  return typeof __ACTION_VERSION__ !== "undefined" && __ACTION_VERSION__ ? __ACTION_VERSION__ : "unknown";
 }
 function telemetryDisabled(env) {
   const flag = String(env.POSTMAN_ACTIONS_TELEMETRY ?? "").trim().toLowerCase();
@@ -301186,11 +301366,23 @@ function createTelemetryContext(options) {
   };
 }
 
-// src/lib/spec/openapi-loader.ts
+// src/action-version.ts
 var import_node_fs3 = require("node:fs");
+var import_node_path3 = require("node:path");
+function resolveActionVersion2() {
+  try {
+    const raw = (0, import_node_fs3.readFileSync)((0, import_node_path3.join)(__dirname, "..", "package.json"), "utf8");
+    return JSON.parse(raw).version ?? "unknown";
+  } catch {
+    return "unknown";
+  }
+}
+
+// src/lib/spec/openapi-loader.ts
+var import_node_fs4 = require("node:fs");
 var import_promises3 = require("node:fs/promises");
 var import_node_url2 = require("node:url");
-var import_node_path3 = __toESM(require("node:path"), 1);
+var import_node_path4 = __toESM(require("node:path"), 1);
 
 // node_modules/@apidevtools/json-schema-ref-parser/dist/lib/util/convert-path-to-posix.js
 var win32Sep = "\\";
@@ -301531,14 +301723,14 @@ function fromFileSystemPath(path10) {
     const hasProjectUri = upperPath.includes(posixUpper);
     const isAbsolutePath = isAbsoluteWin32Path.test(path10) || path10.startsWith("http://") || path10.startsWith("https://") || path10.startsWith("file://");
     if (!(hasProjectDir || hasProjectUri || isAbsolutePath) && !projectDir.startsWith("http")) {
-      const join3 = (a, b) => {
+      const join4 = (a, b) => {
         if (a.endsWith("/") || a.endsWith("\\")) {
           return a + b;
         } else {
           return a + "/" + b;
         }
       };
-      path10 = join3(projectDir, path10);
+      path10 = join4(projectDir, path10);
     }
     path10 = convertPathToPosix(path10);
   }
@@ -305653,6 +305845,7 @@ function inventory$Ref($refParent, $refKey, path10, scopeBase, dynamicIdScope, p
   const file = stripHash(pointer.path);
   const hash = getHash(pointer.path);
   const external = file !== $refs._root$Ref.path && !$refs._aliases[file];
+  const nestedResource = Boolean($refs._aliases[file]) && pointer.$ref.value !== $refs._root$Ref.value;
   const extended = ref_default.isExtended$Ref($ref);
   indirections += pointer.indirections;
   const existingEntry = findInInventory(inventory, $refParent, $refKey);
@@ -305686,6 +305879,8 @@ function inventory$Ref($refParent, $refKey, path10, scopeBase, dynamicIdScope, p
     // Does this $ref extend its resolved value? (i.e. it has extra properties, in addition to "$ref")
     external,
     // Does this $ref pointer point to a file other than the main JSON Schema file?
+    nestedResource,
+    // Does this $ref resolve to an embedded schema resource with its own $id?
     indirections
     // The number of indirect references that were traversed to resolve the value
   });
@@ -305721,7 +305916,7 @@ function remap(inventory, options, rootId) {
   for (const entry of inventory) {
     const bundleOpts = options.bundle || {};
     if (!entry.external) {
-      if (bundleOpts.optimizeInternalRefs !== false) {
+      if (bundleOpts.optimizeInternalRefs !== false && !entry.nestedResource) {
         entry.$ref.$ref = entry.hash;
       }
     } else if (entry.file === file && entry.hash === hash) {
@@ -313525,22 +313720,22 @@ async function loadOpenApiContractSpec(specUrl, options = {}) {
 async function loadOpenApiContractSpecFromPath(specPath, options = {}) {
   if (!specPath) throw new Error("CONTRACT_SPEC_READ_FAILED: spec-path must not be empty");
   const workspaceRoot = (() => {
-    const root = import_node_path3.default.resolve(process.env.GITHUB_WORKSPACE ?? process.cwd());
+    const root = import_node_path4.default.resolve(process.env.GITHUB_WORKSPACE ?? process.cwd());
     try {
-      return (0, import_node_fs3.realpathSync)(root);
+      return (0, import_node_fs4.realpathSync)(root);
     } catch {
       return root;
     }
   })();
-  const resolved = import_node_path3.default.resolve(workspaceRoot, specPath);
+  const resolved = import_node_path4.default.resolve(workspaceRoot, specPath);
   let absolutePath;
   try {
-    absolutePath = (0, import_node_fs3.realpathSync)(resolved);
+    absolutePath = (0, import_node_fs4.realpathSync)(resolved);
   } catch (error2) {
     throw new Error(`CONTRACT_SPEC_READ_FAILED: Unable to read spec at ${specPath}`, { cause: error2 });
   }
-  const rel = import_node_path3.default.relative(workspaceRoot, absolutePath);
-  if (!rel || rel.startsWith("..") || import_node_path3.default.isAbsolute(rel)) {
+  const rel = import_node_path4.default.relative(workspaceRoot, absolutePath);
+  if (!rel || rel.startsWith("..") || import_node_path4.default.isAbsolute(rel)) {
     throw new Error(`CONTRACT_SPEC_READ_FAILED: spec-path must resolve inside ${workspaceRoot}, got: ${specPath}`);
   }
   const maxBytes = options.maxBytesPerResource ?? SAFE_FETCH_LIMITS.maxBytesPerResource;
@@ -313954,6 +314149,17 @@ function buildOperationScript(operation, index, warnings) {
     '    pm.expect(pm.response.code, "GraphQL responses are HTTP 200 even when the data field carries errors").to.be.below(500);',
     "});"
   );
+  lines.push(
+    "pm.test(" + JSON.stringify("[" + label + "] GraphQL-over-HTTP media type and status are consistent") + ", function () {",
+    '    var contentType = ((pm.response.headers && pm.response.headers.get && pm.response.headers.get("Content-Type")) || "").toLowerCase();',
+    '    var mediaType = contentType.split(";")[0].trim();',
+    "    if (!mediaType) return;",
+    '    if (mediaType !== "application/graphql-response+json" && mediaType !== "application/json") { pm.expect.fail("GraphQL-over-HTTP responses use application/graphql-response+json or application/json; got: " + (mediaType || "<missing>")); }',
+    "    var wellFormed = gqlBody.data !== undefined || Array.isArray(gqlBody.errors);",
+    '    if (mediaType === "application/graphql-response+json" && pm.response.code >= 200 && pm.response.code < 300 && !wellFormed) { pm.expect.fail("application/graphql-response+json forbids a 2xx status when the body is not a well-formed GraphQL response"); }',
+    '    if (mediaType === "application/json" && gqlBody.data !== undefined && gqlBody.data !== null && pm.response.code !== 200) { pm.expect.fail("a GraphQL response carrying data over application/json must be HTTP 200; got " + pm.response.code); }',
+    "});"
+  );
   lines.push(
     `pm.test(${JSON.stringify(`[${label}] GraphQL errors are well-formed and not a total failure`)}, function () {`,
     "    var errors = gqlBody.errors;",
@@ -315494,6 +315700,8 @@ function createSoapScript(operation, warnings = []) {
     hasOutput: Boolean(operation.output)
   };
   const responseRegex = operation.expectedResponseElement ? elementPresenceRegex(operation.expectedResponseElement) : "";
+  const mediaType = operation.soapVersion === "1.2" ? "application/soap+xml" : "text/xml";
+  const faultStatusLine = operation.soapVersion === "1.2" ? '  if (faulted && code !== 500 && code !== 400) pm.expect.fail("SOAP 1.2 Faults ride HTTP 500, or 400 for env:Sender faults (SOAP 1.2 Part 2 HTTP binding); got HTTP " + code);' : '  if (faulted && code !== 500) pm.expect.fail("SOAP 1.1 Faults must ride HTTP 500 (WS-I Basic Profile R1126); got HTTP " + code);';
   const lines = [
     `var soap = JSON.parse(${JSON.stringify(JSON.stringify(meta))});`,
     'var bodyText = (pm.response.text && pm.response.text()) || "";',
@@ -315504,9 +315712,11 @@ function createSoapScript(operation, warnings = []) {
     "  pm.response.to.have.status(200);",
     "});",
     "",
-    "pm.test('SOAP response Content-Type is XML', function () {",
+    // SOAP 1.1 responses bind to text/xml (SOAP 1.1 HTTP binding, WS-I Basic
+    // Profile); SOAP 1.2 responses bind to application/soap+xml (RFC 3902).
+    `pm.test('SOAP response Content-Type matches the SOAP ${operation.soapVersion} binding', function () {`,
     '  var ct = header("Content-Type").toLowerCase();',
-    '  pm.expect(ct, "expected an XML SOAP content-type, got: " + ct).to.match(/(?:text\\/xml|application\\/soap\\+xml|application\\/xml|\\+xml)/);',
+    `  pm.expect(ct, "SOAP ${operation.soapVersion} responses use ${mediaType} (got: " + (ct || "<missing>") + ")").to.include("${mediaType}");`,
     "});",
     "",
     "pm.test('SOAP Envelope element is present', function () {",
@@ -315523,6 +315733,13 @@ function createSoapScript(operation, warnings = []) {
     '    var detail = (bodyText.match(/<(?:[A-Za-z_][\\w.-]*:)?(?:faultstring|Reason|Text)[^>]*>([\\s\\S]*?)<\\//) || [])[1] || "";',
     '    pm.expect.fail("SOAP Fault returned for operation " + soap.name + (detail ? (": " + detail.trim()) : ""));',
     "  }",
+    "});",
+    "",
+    "pm.test('SOAP Fault and HTTP status are consistent', function () {",
+    '  var faulted = matchTag("Fault").test(bodyText);',
+    "  var code = pm.response.code;",
+    faultStatusLine,
+    '  if (!faulted && code === 500) pm.expect.fail("HTTP 500 from a SOAP endpoint must carry a SOAP Fault in the body");',
     "});"
   ];
   if (responseRegex) {
@@ -316774,6 +316991,7 @@ function normalizeSpecDocument(raw, warn) {
 async function runBootstrap(inputs, dependencies) {
   const telemetry = createTelemetryContext({
     action: "postman-bootstrap-action",
+    actionVersion: resolveActionVersion2(),
     logger: dependencies.core
   });
   try {
@@ -317180,7 +317398,7 @@ async function runBootstrapInner(inputs, dependencies, telemetry) {
     async () => {
       if (inputs.specPath) {
         const workspaceRoot = path9.resolve(process.env.GITHUB_WORKSPACE ?? process.cwd());
-        return (0, import_node_fs4.readFileSync)(path9.resolve(workspaceRoot, inputs.specPath), "utf8");
+        return (0, import_node_fs5.readFileSync)(path9.resolve(workspaceRoot, inputs.specPath), "utf8");
       }
       if (dependencies.specFetcher === fetch) {
         return safeFetchText(inputs.specUrl, { depth: 0 });