@postman-cse/onboarding-bootstrap 2.4.0 → 2.5.0

package/README.md

@@ -6,7 +6,7 @@ Provisions a [Postman workspace](https://learning.postman.com/docs/collaborating
 
 Part of the [Postman API Onboarding suite](https://github.com/postman-cs/postman-api-onboarding-action).
 
-> **Standards-grounded assertion generation.** Every collection this action generates ships with executable contract tests compiled from your spec. For OpenAPI: operation mapping, status-code, `Content-Type`, response-header, request/response body, parameter, security-credential, and `Content-Length` checks, with JSON Schema (draft-07 / 2020-12) body validation, dialect-exclusive keyword rejection, and RFC-checked formats (RFC 3339 timestamps, RFC 4122 UUIDs, RFC 3986 URIs, and more). Layered on top: RFC 9110 status-code, framing, and field-syntax requirements, RFC 9457 `application/problem+json` error bodies with RFC 8259 encoding and RFC 8288 `Link` checks, RFC 6265 `Set-Cookie`, RFC 6797 HSTS and security headers, WHATWG Fetch CORS, RFC 9651 structured fields, RFC 9209 typed `Proxy-Status`, RFC 9421 message signatures, RFC 9530 body digests, `Accept` negotiation, media-type conventions (NDJSON, multipart boundaries, HAL, JSON:API), authentication-scheme credential grammar, preconditions and RFC 6902 / RFC 7386 patch bodies, `Deprecation`/`Sunset` advisories, and OpenAPI links/servers resolution. Beyond REST: canonical proto3 JSON well-known-type validation for gRPC, version-aware SOAP 1.1/1.2 media-type and Fault-status checks, GraphQL-over-HTTP media-type/status discipline, static AsyncAPI WebSocket / Socket.IO / MQTT message validation, and static MCP server-manifest contract checks. The full test inventory and the standard behind each check: [Generated assertions](docs/generated-assertions.md) and [Multi-Protocol Contract Assertions](docs/MULTIPROTOCOL-ASSERTIONS.md).
+> **Standards-grounded assertion generation.** Every collection this action generates ships with executable contract tests compiled from your spec. For OpenAPI: operation mapping, status-code, `Content-Type`, response-header, request/response body, parameter, security-credential, and `Content-Length` checks, with JSON Schema (draft-07 / 2020-12) body validation, dialect-exclusive keyword rejection, and RFC-checked formats (RFC 3339 timestamps, RFC 4122 UUIDs, RFC 3986 URIs, and more). Layered on top: RFC 9110 status-code, framing, and field-syntax requirements, RFC 9457 `application/problem+json` error bodies with RFC 8259 encoding and RFC 8288 `Link` checks, RFC 6265 `Set-Cookie`, RFC 6797 HSTS and security headers, WHATWG Fetch CORS, RFC 9651 structured fields, RFC 9209 typed `Proxy-Status`, RFC 9421 message signatures, RFC 9530 body digests, `Accept` negotiation, media-type conventions (NDJSON, multipart boundaries, HAL, JSON:API), authentication-scheme credential grammar, preconditions and RFC 6902 / RFC 7386 patch bodies, `Deprecation`/`Sunset` advisories, and OpenAPI links/servers resolution. Beyond REST: canonical proto3 JSON well-known-type validation for gRPC with per-streamed-message shape checks and metadata/trailer wire-conformance, version-aware SOAP 1.1/1.2 media-type and Fault-status checks, GraphQL-over-HTTP media-type/status discipline, static AsyncAPI WebSocket / Socket.IO / MQTT message validation, and static MCP server-manifest contract checks. The full test inventory and the standard behind each check: [Generated assertions](docs/generated-assertions.md) and [Multi-Protocol Contract Assertions](docs/MULTIPROTOCOL-ASSERTIONS.md).
 
 ## Which action should I use?
 

package/dist/action.cjs

@@ -297618,7 +297618,17 @@ function createGrpcScript(spec) {
     // reporters/cli/modules/grpc.ts:15-21.
     'var GRPC_STATUS = { 0: "OK", 1: "CANCELLED", 2: "UNKNOWN", 3: "INVALID_ARGUMENT", 4: "DEADLINE_EXCEEDED", 5: "NOT_FOUND", 6: "ALREADY_EXISTS", 7: "PERMISSION_DENIED", 8: "RESOURCE_EXHAUSTED", 9: "FAILED_PRECONDITION", 10: "ABORTED", 11: "OUT_OF_RANGE", 12: "UNIMPLEMENTED", 13: "INTERNAL", 14: "UNAVAILABLE", 15: "DATA_LOSS", 16: "UNAUTHENTICATED" };',
     'function grpcStatusName() { if (typeof pm.response.status === "string" && pm.response.status) return pm.response.status; return GRPC_STATUS[pm.response.code] || ("UNKNOWN(" + pm.response.code + ")"); }',
-    "function grpcMessage() { try { return pm.response.json(); } catch (error) { return undefined; } }",
+    // Terminal message: pm.response.json() where the sandbox provides it,
+    // falling back to the last received message in pm.response.messages (the
+    // unified runtime's GRPCResponse exposes messages but no json()).
+    "function grpcMessage() {",
+    '  try { if (pm.response && typeof pm.response.json === "function") { var viaJson = pm.response.json(); if (viaJson !== undefined && viaJson !== null) return viaJson; } } catch (error) { /* fall back to messages */ }',
+    "  try {",
+    "    var list = pm.response && pm.response.messages;",
+    '    if (list && typeof list.each === "function") { var last; list.each(function (member) { last = member && member.data !== undefined ? member.data : member; }); return last; }',
+    "  } catch (error) { return undefined; }",
+    "  return undefined;",
+    "}",
     "function jsonTypeOf(value) {",
     '  if (value === null || value === undefined) return "null";',
     '  if (Array.isArray(value)) return "array";',
@@ -297769,9 +297779,38 @@ function createGrpcScript(spec) {
     '    if (set.length > 1) pm.expect.fail("gRPC response at " + path + " sets multiple members of a oneof: " + set.join(", "));',
     "  });",
     "}",
+    // Wire-conformance helpers for response metadata/trailers ({ key, value }
+    // PropertyLists; each/has/one guarded so the script stays inert on runtimes
+    // or harnesses that do not surface them).
+    'function grpcEachMeta(list, cb) { if (list && typeof list.each === "function") list.each(cb); }',
+    'function grpcMetaOne(list, key) { try { if (list && typeof list.has === "function" && list.has(key) && typeof list.one === "function") return list.one(key); } catch (error) { /* absent */ } return null; }',
+    "function grpcCheckMetaPairs(list, label) {",
+    "  grpcEachMeta(list, function (entry) {",
+    "    if (!entry || entry.disabled) return;",
+    '    var key = entry.key === undefined || entry.key === null ? "" : String(entry.key);',
+    '    var value = entry.value === undefined || entry.value === null ? "" : String(entry.value);',
+    '    if (!/^[0-9a-z_.-]+$/.test(key)) pm.expect.fail(label + " key " + JSON.stringify(key) + " must be a lowercase gRPC metadata key ([0-9a-z_.-])");',
+    '    if (/-bin$/.test(key)) { if (!/^[A-Za-z0-9+/=]*\\s*$/.test(value)) pm.expect.fail(label + " " + key + " must carry base64 data but was " + JSON.stringify(value)); }',
+    '    else if (!/^[\\x20-\\x7e]*$/.test(value)) pm.expect.fail(label + " " + key + " value must be printable ASCII (gRPC ASCII-Value)");',
+    "  });",
+    "}",
     `pm.test('gRPC status is OK for ' + grpcSpec.methodPath, function () {`,
     '  pm.expect(pm.response.code, "gRPC call for " + grpcSpec.methodPath + " returned " + grpcStatusName() + " (" + pm.response.code + ")").to.eql(0);',
     "});",
+    // Metadata/trailer wire conformance runs on every terminal status (error
+    // statuses carry trailers too, so this is not gated on code === 0).
+    `pm.test('gRPC response metadata and trailers conform to gRPC wire rules for ' + grpcSpec.methodPath, function () {`,
+    '  grpcCheckMetaPairs(pm.response.metadata, "gRPC response metadata");',
+    '  grpcCheckMetaPairs(pm.response.trailers, "gRPC response trailer");',
+    '  var contentType = grpcMetaOne(pm.response.metadata, "content-type");',
+    '  if (contentType && contentType.value !== undefined && contentType.value !== null && !/^application\\/grpc/.test(String(contentType.value))) pm.expect.fail("gRPC response content-type metadata must be application/grpc[+proto|+json] but was " + contentType.value);',
+    '  var echoedStatus = grpcMetaOne(pm.response.trailers, "grpc-status");',
+    "  if (echoedStatus) {",
+    "    var echoedCode = Number(echoedStatus.value);",
+    '    if (!Number.isInteger(echoedCode) || echoedCode < 0 || echoedCode > 16) pm.expect.fail("grpc-status trailer must be a canonical gRPC code 0-16 but was " + JSON.stringify(echoedStatus.value));',
+    '    else if (echoedCode !== pm.response.code) pm.expect.fail("grpc-status trailer (" + echoedCode + ") disagrees with the reported status code (" + pm.response.code + ")");',
+    "  }",
+    "});",
     // Terminal-response-message expectation. unary and client-streaming RPCs
     // return exactly one terminal response message; server/bidi streaming may
     // legitimately return ZERO messages on an OK stream, so no minimum is
@@ -297793,6 +297832,26 @@ function createGrpcScript(spec) {
       '  if (grpcSpec.responseShape) grpcCheckShape(message, grpcSpec.responseShape, grpcSpec.responseType + ".");',
       "  if (grpcSpec.responseIsRpcStatus) grpcCheckRpcStatus(message, grpcSpec.responseType);",
       "});"
+    ] : [],
+    // Every streamed message is validated, not only the terminal one that
+    // pm.response.json() returns; pm.response.messages is the full received
+    // stream. Server/bidi only: for unary/client the single terminal message
+    // is already covered above.
+    ...(spec.stream === "server" || spec.stream === "bidi") && (spec.hasResponseShape || spec.responseIsRpcStatus) ? [
+      `pm.test('gRPC streamed response messages each match ' + grpcSpec.responseType, function () {`,
+      "  if (pm.response.code !== 0) return;",
+      "  var list = pm.response.messages;",
+      '  if (!list || typeof list.each !== "function") return;',
+      "  var messageIndex = 0;",
+      "  list.each(function (member) {",
+      "    var data = member && member.data !== undefined ? member.data : member;",
+      '    var label = grpcSpec.responseType + "[message " + messageIndex + "]";',
+      "    messageIndex += 1;",
+      '    if (jsonTypeOf(data) !== "object") { pm.expect.fail("gRPC streamed response " + label + " is not a decodable message object but " + jsonTypeOf(data)); return; }',
+      '    if (grpcSpec.responseShape) grpcCheckShape(data, grpcSpec.responseShape, label + ".");',
+      "    if (grpcSpec.responseIsRpcStatus) grpcCheckRpcStatus(data, label);",
+      "  });",
+      "});"
     ] : []
   ];
 }

package/dist/cli.cjs

@@ -295936,7 +295936,17 @@ function createGrpcScript(spec) {
     // reporters/cli/modules/grpc.ts:15-21.
     'var GRPC_STATUS = { 0: "OK", 1: "CANCELLED", 2: "UNKNOWN", 3: "INVALID_ARGUMENT", 4: "DEADLINE_EXCEEDED", 5: "NOT_FOUND", 6: "ALREADY_EXISTS", 7: "PERMISSION_DENIED", 8: "RESOURCE_EXHAUSTED", 9: "FAILED_PRECONDITION", 10: "ABORTED", 11: "OUT_OF_RANGE", 12: "UNIMPLEMENTED", 13: "INTERNAL", 14: "UNAVAILABLE", 15: "DATA_LOSS", 16: "UNAUTHENTICATED" };',
     'function grpcStatusName() { if (typeof pm.response.status === "string" && pm.response.status) return pm.response.status; return GRPC_STATUS[pm.response.code] || ("UNKNOWN(" + pm.response.code + ")"); }',
-    "function grpcMessage() { try { return pm.response.json(); } catch (error) { return undefined; } }",
+    // Terminal message: pm.response.json() where the sandbox provides it,
+    // falling back to the last received message in pm.response.messages (the
+    // unified runtime's GRPCResponse exposes messages but no json()).
+    "function grpcMessage() {",
+    '  try { if (pm.response && typeof pm.response.json === "function") { var viaJson = pm.response.json(); if (viaJson !== undefined && viaJson !== null) return viaJson; } } catch (error) { /* fall back to messages */ }',
+    "  try {",
+    "    var list = pm.response && pm.response.messages;",
+    '    if (list && typeof list.each === "function") { var last; list.each(function (member) { last = member && member.data !== undefined ? member.data : member; }); return last; }',
+    "  } catch (error) { return undefined; }",
+    "  return undefined;",
+    "}",
     "function jsonTypeOf(value) {",
     '  if (value === null || value === undefined) return "null";',
     '  if (Array.isArray(value)) return "array";',
@@ -296087,9 +296097,38 @@ function createGrpcScript(spec) {
     '    if (set.length > 1) pm.expect.fail("gRPC response at " + path + " sets multiple members of a oneof: " + set.join(", "));',
     "  });",
     "}",
+    // Wire-conformance helpers for response metadata/trailers ({ key, value }
+    // PropertyLists; each/has/one guarded so the script stays inert on runtimes
+    // or harnesses that do not surface them).
+    'function grpcEachMeta(list, cb) { if (list && typeof list.each === "function") list.each(cb); }',
+    'function grpcMetaOne(list, key) { try { if (list && typeof list.has === "function" && list.has(key) && typeof list.one === "function") return list.one(key); } catch (error) { /* absent */ } return null; }',
+    "function grpcCheckMetaPairs(list, label) {",
+    "  grpcEachMeta(list, function (entry) {",
+    "    if (!entry || entry.disabled) return;",
+    '    var key = entry.key === undefined || entry.key === null ? "" : String(entry.key);',
+    '    var value = entry.value === undefined || entry.value === null ? "" : String(entry.value);',
+    '    if (!/^[0-9a-z_.-]+$/.test(key)) pm.expect.fail(label + " key " + JSON.stringify(key) + " must be a lowercase gRPC metadata key ([0-9a-z_.-])");',
+    '    if (/-bin$/.test(key)) { if (!/^[A-Za-z0-9+/=]*\\s*$/.test(value)) pm.expect.fail(label + " " + key + " must carry base64 data but was " + JSON.stringify(value)); }',
+    '    else if (!/^[\\x20-\\x7e]*$/.test(value)) pm.expect.fail(label + " " + key + " value must be printable ASCII (gRPC ASCII-Value)");',
+    "  });",
+    "}",
     `pm.test('gRPC status is OK for ' + grpcSpec.methodPath, function () {`,
     '  pm.expect(pm.response.code, "gRPC call for " + grpcSpec.methodPath + " returned " + grpcStatusName() + " (" + pm.response.code + ")").to.eql(0);',
     "});",
+    // Metadata/trailer wire conformance runs on every terminal status (error
+    // statuses carry trailers too, so this is not gated on code === 0).
+    `pm.test('gRPC response metadata and trailers conform to gRPC wire rules for ' + grpcSpec.methodPath, function () {`,
+    '  grpcCheckMetaPairs(pm.response.metadata, "gRPC response metadata");',
+    '  grpcCheckMetaPairs(pm.response.trailers, "gRPC response trailer");',
+    '  var contentType = grpcMetaOne(pm.response.metadata, "content-type");',
+    '  if (contentType && contentType.value !== undefined && contentType.value !== null && !/^application\\/grpc/.test(String(contentType.value))) pm.expect.fail("gRPC response content-type metadata must be application/grpc[+proto|+json] but was " + contentType.value);',
+    '  var echoedStatus = grpcMetaOne(pm.response.trailers, "grpc-status");',
+    "  if (echoedStatus) {",
+    "    var echoedCode = Number(echoedStatus.value);",
+    '    if (!Number.isInteger(echoedCode) || echoedCode < 0 || echoedCode > 16) pm.expect.fail("grpc-status trailer must be a canonical gRPC code 0-16 but was " + JSON.stringify(echoedStatus.value));',
+    '    else if (echoedCode !== pm.response.code) pm.expect.fail("grpc-status trailer (" + echoedCode + ") disagrees with the reported status code (" + pm.response.code + ")");',
+    "  }",
+    "});",
     // Terminal-response-message expectation. unary and client-streaming RPCs
     // return exactly one terminal response message; server/bidi streaming may
     // legitimately return ZERO messages on an OK stream, so no minimum is
@@ -296111,6 +296150,26 @@ function createGrpcScript(spec) {
       '  if (grpcSpec.responseShape) grpcCheckShape(message, grpcSpec.responseShape, grpcSpec.responseType + ".");',
       "  if (grpcSpec.responseIsRpcStatus) grpcCheckRpcStatus(message, grpcSpec.responseType);",
       "});"
+    ] : [],
+    // Every streamed message is validated, not only the terminal one that
+    // pm.response.json() returns; pm.response.messages is the full received
+    // stream. Server/bidi only: for unary/client the single terminal message
+    // is already covered above.
+    ...(spec.stream === "server" || spec.stream === "bidi") && (spec.hasResponseShape || spec.responseIsRpcStatus) ? [
+      `pm.test('gRPC streamed response messages each match ' + grpcSpec.responseType, function () {`,
+      "  if (pm.response.code !== 0) return;",
+      "  var list = pm.response.messages;",
+      '  if (!list || typeof list.each !== "function") return;',
+      "  var messageIndex = 0;",
+      "  list.each(function (member) {",
+      "    var data = member && member.data !== undefined ? member.data : member;",
+      '    var label = grpcSpec.responseType + "[message " + messageIndex + "]";',
+      "    messageIndex += 1;",
+      '    if (jsonTypeOf(data) !== "object") { pm.expect.fail("gRPC streamed response " + label + " is not a decodable message object but " + jsonTypeOf(data)); return; }',
+      '    if (grpcSpec.responseShape) grpcCheckShape(data, grpcSpec.responseShape, label + ".");',
+      "    if (grpcSpec.responseIsRpcStatus) grpcCheckRpcStatus(data, label);",
+      "  });",
+      "});"
     ] : []
   ];
 }

package/dist/index.cjs

@@ -297635,7 +297635,17 @@ function createGrpcScript(spec) {
     // reporters/cli/modules/grpc.ts:15-21.
     'var GRPC_STATUS = { 0: "OK", 1: "CANCELLED", 2: "UNKNOWN", 3: "INVALID_ARGUMENT", 4: "DEADLINE_EXCEEDED", 5: "NOT_FOUND", 6: "ALREADY_EXISTS", 7: "PERMISSION_DENIED", 8: "RESOURCE_EXHAUSTED", 9: "FAILED_PRECONDITION", 10: "ABORTED", 11: "OUT_OF_RANGE", 12: "UNIMPLEMENTED", 13: "INTERNAL", 14: "UNAVAILABLE", 15: "DATA_LOSS", 16: "UNAUTHENTICATED" };',
     'function grpcStatusName() { if (typeof pm.response.status === "string" && pm.response.status) return pm.response.status; return GRPC_STATUS[pm.response.code] || ("UNKNOWN(" + pm.response.code + ")"); }',
-    "function grpcMessage() { try { return pm.response.json(); } catch (error) { return undefined; } }",
+    // Terminal message: pm.response.json() where the sandbox provides it,
+    // falling back to the last received message in pm.response.messages (the
+    // unified runtime's GRPCResponse exposes messages but no json()).
+    "function grpcMessage() {",
+    '  try { if (pm.response && typeof pm.response.json === "function") { var viaJson = pm.response.json(); if (viaJson !== undefined && viaJson !== null) return viaJson; } } catch (error) { /* fall back to messages */ }',
+    "  try {",
+    "    var list = pm.response && pm.response.messages;",
+    '    if (list && typeof list.each === "function") { var last; list.each(function (member) { last = member && member.data !== undefined ? member.data : member; }); return last; }',
+    "  } catch (error) { return undefined; }",
+    "  return undefined;",
+    "}",
     "function jsonTypeOf(value) {",
     '  if (value === null || value === undefined) return "null";',
     '  if (Array.isArray(value)) return "array";',
@@ -297786,9 +297796,38 @@ function createGrpcScript(spec) {
     '    if (set.length > 1) pm.expect.fail("gRPC response at " + path + " sets multiple members of a oneof: " + set.join(", "));',
     "  });",
     "}",
+    // Wire-conformance helpers for response metadata/trailers ({ key, value }
+    // PropertyLists; each/has/one guarded so the script stays inert on runtimes
+    // or harnesses that do not surface them).
+    'function grpcEachMeta(list, cb) { if (list && typeof list.each === "function") list.each(cb); }',
+    'function grpcMetaOne(list, key) { try { if (list && typeof list.has === "function" && list.has(key) && typeof list.one === "function") return list.one(key); } catch (error) { /* absent */ } return null; }',
+    "function grpcCheckMetaPairs(list, label) {",
+    "  grpcEachMeta(list, function (entry) {",
+    "    if (!entry || entry.disabled) return;",
+    '    var key = entry.key === undefined || entry.key === null ? "" : String(entry.key);',
+    '    var value = entry.value === undefined || entry.value === null ? "" : String(entry.value);',
+    '    if (!/^[0-9a-z_.-]+$/.test(key)) pm.expect.fail(label + " key " + JSON.stringify(key) + " must be a lowercase gRPC metadata key ([0-9a-z_.-])");',
+    '    if (/-bin$/.test(key)) { if (!/^[A-Za-z0-9+/=]*\\s*$/.test(value)) pm.expect.fail(label + " " + key + " must carry base64 data but was " + JSON.stringify(value)); }',
+    '    else if (!/^[\\x20-\\x7e]*$/.test(value)) pm.expect.fail(label + " " + key + " value must be printable ASCII (gRPC ASCII-Value)");',
+    "  });",
+    "}",
     `pm.test('gRPC status is OK for ' + grpcSpec.methodPath, function () {`,
     '  pm.expect(pm.response.code, "gRPC call for " + grpcSpec.methodPath + " returned " + grpcStatusName() + " (" + pm.response.code + ")").to.eql(0);',
     "});",
+    // Metadata/trailer wire conformance runs on every terminal status (error
+    // statuses carry trailers too, so this is not gated on code === 0).
+    `pm.test('gRPC response metadata and trailers conform to gRPC wire rules for ' + grpcSpec.methodPath, function () {`,
+    '  grpcCheckMetaPairs(pm.response.metadata, "gRPC response metadata");',
+    '  grpcCheckMetaPairs(pm.response.trailers, "gRPC response trailer");',
+    '  var contentType = grpcMetaOne(pm.response.metadata, "content-type");',
+    '  if (contentType && contentType.value !== undefined && contentType.value !== null && !/^application\\/grpc/.test(String(contentType.value))) pm.expect.fail("gRPC response content-type metadata must be application/grpc[+proto|+json] but was " + contentType.value);',
+    '  var echoedStatus = grpcMetaOne(pm.response.trailers, "grpc-status");',
+    "  if (echoedStatus) {",
+    "    var echoedCode = Number(echoedStatus.value);",
+    '    if (!Number.isInteger(echoedCode) || echoedCode < 0 || echoedCode > 16) pm.expect.fail("grpc-status trailer must be a canonical gRPC code 0-16 but was " + JSON.stringify(echoedStatus.value));',
+    '    else if (echoedCode !== pm.response.code) pm.expect.fail("grpc-status trailer (" + echoedCode + ") disagrees with the reported status code (" + pm.response.code + ")");',
+    "  }",
+    "});",
     // Terminal-response-message expectation. unary and client-streaming RPCs
     // return exactly one terminal response message; server/bidi streaming may
     // legitimately return ZERO messages on an OK stream, so no minimum is
@@ -297810,6 +297849,26 @@ function createGrpcScript(spec) {
       '  if (grpcSpec.responseShape) grpcCheckShape(message, grpcSpec.responseShape, grpcSpec.responseType + ".");',
       "  if (grpcSpec.responseIsRpcStatus) grpcCheckRpcStatus(message, grpcSpec.responseType);",
       "});"
+    ] : [],
+    // Every streamed message is validated, not only the terminal one that
+    // pm.response.json() returns; pm.response.messages is the full received
+    // stream. Server/bidi only: for unary/client the single terminal message
+    // is already covered above.
+    ...(spec.stream === "server" || spec.stream === "bidi") && (spec.hasResponseShape || spec.responseIsRpcStatus) ? [
+      `pm.test('gRPC streamed response messages each match ' + grpcSpec.responseType, function () {`,
+      "  if (pm.response.code !== 0) return;",
+      "  var list = pm.response.messages;",
+      '  if (!list || typeof list.each !== "function") return;',
+      "  var messageIndex = 0;",
+      "  list.each(function (member) {",
+      "    var data = member && member.data !== undefined ? member.data : member;",
+      '    var label = grpcSpec.responseType + "[message " + messageIndex + "]";',
+      "    messageIndex += 1;",
+      '    if (jsonTypeOf(data) !== "object") { pm.expect.fail("gRPC streamed response " + label + " is not a decodable message object but " + jsonTypeOf(data)); return; }',
+      '    if (grpcSpec.responseShape) grpcCheckShape(data, grpcSpec.responseShape, label + ".");',
+      "    if (grpcSpec.responseIsRpcStatus) grpcCheckRpcStatus(data, label);",
+      "  });",
+      "});"
     ] : []
   ];
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@postman-cse/onboarding-bootstrap",
-  "version": "2.4.0",
+  "version": "2.5.0",
   "description": "Bootstrap Postman workspaces, specs, and collections from OpenAPI.",
   "type": "module",
   "main": "dist/index.cjs",