@postman-cse/onboarding-bootstrap 2.7.1 → 2.9.0

package/dist/action.cjs

@@ -263423,6 +263423,14 @@ function asRecord7(value) {
   }
   return value;
 }
+function resolvePollBudget(explicit, envValue, fallback, min) {
+  if (typeof explicit === "number" && Number.isFinite(explicit) && explicit >= min) return explicit;
+  if (envValue !== void 0) {
+    const parsed = Number(envValue);
+    if (Number.isFinite(parsed) && parsed >= min) return parsed;
+  }
+  return fallback;
+}
 function adviseWorkspaceFlipForbidden(error2) {
   if (error2 instanceof HttpError && error2.status === 403) {
     const body2 = error2.responseBody || "";
@@ -263459,13 +263467,27 @@ function extractGitRepoUrl(value) {
 }
 var PostmanGatewayAssetsClient = class _PostmanGatewayAssetsClient {
   static GENERATION_LOCKED_MAX_RETRIES = 5;
-  static GENERATION_POLL_ATTEMPTS = 90;
-  static GENERATION_POLL_DELAY_MS = 2e3;
+  static DEFAULT_GENERATION_POLL_ATTEMPTS = 90;
+  static DEFAULT_GENERATION_POLL_DELAY_MS = 2e3;
   gateway;
   sleep;
+  generationPollAttempts;
+  generationPollDelayMs;
   constructor(options) {
     this.gateway = options.gateway;
     this.sleep = options.sleep ?? ((delayMs) => new Promise((resolve5) => setTimeout(resolve5, delayMs)));
+    this.generationPollAttempts = resolvePollBudget(
+      options.generationPollAttempts,
+      process.env.POSTMAN_GENERATION_POLL_ATTEMPTS,
+      _PostmanGatewayAssetsClient.DEFAULT_GENERATION_POLL_ATTEMPTS,
+      1
+    );
+    this.generationPollDelayMs = resolvePollBudget(
+      options.generationPollDelayMs,
+      process.env.POSTMAN_GENERATION_POLL_DELAY_MS,
+      _PostmanGatewayAssetsClient.DEFAULT_GENERATION_POLL_DELAY_MS,
+      0
+    );
   }
   configureTeamContext(teamId, orgMode) {
     this.gateway.configureTeamContext(teamId, orgMode);
@@ -263610,8 +263632,8 @@ var PostmanGatewayAssetsClient = class _PostmanGatewayAssetsClient {
     };
     const taskId = await this.postGenerationWithLockRetry(specId, body2);
     if (taskId) {
-      for (let attempt = 0; attempt < _PostmanGatewayAssetsClient.GENERATION_POLL_ATTEMPTS; attempt += 1) {
-        await this.sleep(_PostmanGatewayAssetsClient.GENERATION_POLL_DELAY_MS);
+      for (let attempt = 0; attempt < this.generationPollAttempts; attempt += 1) {
+        await this.sleep(this.generationPollDelayMs);
         const task = await this.gateway.requestJson({
           service: "specification",
           method: "get",
@@ -263625,7 +263647,7 @@ var PostmanGatewayAssetsClient = class _PostmanGatewayAssetsClient {
         if (status && status !== "in-progress" && status !== "pending" && status !== "queued") {
           break;
         }
-        if (attempt === _PostmanGatewayAssetsClient.GENERATION_POLL_ATTEMPTS - 1) {
+        if (attempt === this.generationPollAttempts - 1) {
           throw new Error(`Collection generation timed out for ${prefix}`);
         }
       }
@@ -264590,6 +264612,53 @@ var AccessTokenProvider = class {
     return token;
   }
 };
+async function describeMintFailure(mintError, apiKey, apiBaseUrl, fetchImpl) {
+  const raw = mintError instanceof Error ? mintError.message : String(mintError);
+  const rejected = /HTTP 40[13]|PMAK rejected/.test(raw);
+  if (!rejected) {
+    return raw;
+  }
+  try {
+    const me = await fetchImpl(`${apiBaseUrl}/me`, { headers: { "x-api-key": apiKey } });
+    if (me.ok) {
+      const body2 = await me.json().catch(() => void 0);
+      const user = body2?.user;
+      const looksPersonal = Boolean(user && (user.username || user.email));
+      if (looksPersonal) {
+        return "Personal API key detected, cannot mint a service-account access token. POST /service-account-tokens only accepts a SERVICE-ACCOUNT API key; this postman-api-key belongs to a user account" + (user?.teamId ? ` (team ${user.teamId})` : "") + ". Create a service account in Team Settings and use its PMAK, or mint the token elsewhere and pass postman-access-token.";
+      }
+      return "The postman-api-key authenticates (GET /me OK) but was rejected by POST /service-account-tokens" + (user?.teamId ? ` (team ${user.teamId})` : "") + ". The service account likely lacks permission to mint access tokens, or service accounts are restricted for this team. Check the service account role in Team Settings, or pass a pre-minted postman-access-token.";
+    }
+    return "The postman-api-key is invalid, disabled, or expired (rejected by both POST /service-account-tokens and GET /me). Generate a fresh service-account PMAK in Team Settings and update the secret.";
+  } catch {
+    return raw;
+  }
+}
+async function mintAccessTokenIfNeeded(inputs, log, setSecret2, fetchImpl = fetch) {
+  if (inputs.postmanAccessToken || !inputs.postmanApiKey) {
+    return;
+  }
+  const apiBaseUrl = String(
+    inputs.postmanApiBase || POSTMAN_ENDPOINT_PROFILES.prod.apiBaseUrl
+  ).replace(/\/+$/, "");
+  const provider = new AccessTokenProvider({
+    apiKey: inputs.postmanApiKey,
+    apiBaseUrl,
+    fetchImpl,
+    onToken: (token) => setSecret2?.(token)
+  });
+  try {
+    inputs.postmanAccessToken = await provider.refresh();
+    log.info(
+      "postman: no postman-access-token configured - minted a short-lived service-account access token from the postman-api-key."
+    );
+  } catch (error2) {
+    const diagnosis = await describeMintFailure(error2, inputs.postmanApiKey, apiBaseUrl, fetchImpl);
+    log.warning(
+      "postman: could not mint an access token from the postman-api-key. " + diagnosis + " Continuing without an access token - access-token-only functionality will be unavailable unless postman-access-token is provided."
+    );
+  }
+}
 
 // src/lib/postman/workspace-selection.ts
 function chooseCanonicalWorkspace(args) {
@@ -307760,29 +307829,8 @@ function warnIfDeprecatedAccessToken(actionCore, inputs) {
     )
   );
 }
-async function mintAccessTokenIfNeeded(inputs, log, setSecret2) {
-  if (inputs.postmanAccessToken || !inputs.postmanApiKey) {
-    return;
-  }
-  const provider = new AccessTokenProvider({
-    apiKey: inputs.postmanApiKey,
-    apiBaseUrl: inputs.postmanApiBase,
-    onToken: (token) => setSecret2?.(token)
-  });
-  try {
-    inputs.postmanAccessToken = await provider.refresh();
-    log.info(
-      "postman: no postman-access-token configured - minted a short-lived service-account access token from the postman-api-key."
-    );
-  } catch (error2) {
-    const mask = createSecretMasker([inputs.postmanApiKey]);
-    const message = error2 instanceof Error ? error2.message : String(error2);
-    log.warning(
-      mask(
-        "postman: could not mint an access token from the postman-api-key (" + message + "). Continuing with PMAK only - governance assignment and org-mode detection are disabled. Configure postman-access-token (postman-cs/postman-resolve-service-token-action) for full functionality."
-      )
-    );
-  }
+async function mintAccessTokenIfNeeded2(inputs, log, setSecret2) {
+  await mintAccessTokenIfNeeded(inputs, log, setSecret2);
 }
 function isLegacyAccessTokenDeprecationWarning(message) {
   return message.includes("Postman CLI credential store populated by `postman login` is a legacy fallback");
@@ -309070,7 +309118,7 @@ async function runBootstrapInner(inputs, dependencies, telemetry) {
 }
 async function runAction(actionCore = core_exports, actionExec = exec_exports, actionIo = io_exports) {
   const inputs = readActionInputs(actionCore);
-  await mintAccessTokenIfNeeded(inputs, {
+  await mintAccessTokenIfNeeded2(inputs, {
     info: (message) => actionCore.info(message),
     warning: (message) => actionCore.warning(message)
   }, (secret) => actionCore.setSecret(secret));

package/dist/cli.cjs

@@ -261741,6 +261741,14 @@ function asRecord7(value) {
   }
   return value;
 }
+function resolvePollBudget(explicit, envValue, fallback, min) {
+  if (typeof explicit === "number" && Number.isFinite(explicit) && explicit >= min) return explicit;
+  if (envValue !== void 0) {
+    const parsed = Number(envValue);
+    if (Number.isFinite(parsed) && parsed >= min) return parsed;
+  }
+  return fallback;
+}
 function adviseWorkspaceFlipForbidden(error) {
   if (error instanceof HttpError && error.status === 403) {
     const body2 = error.responseBody || "";
@@ -261777,13 +261785,27 @@ function extractGitRepoUrl(value) {
 }
 var PostmanGatewayAssetsClient = class _PostmanGatewayAssetsClient {
   static GENERATION_LOCKED_MAX_RETRIES = 5;
-  static GENERATION_POLL_ATTEMPTS = 90;
-  static GENERATION_POLL_DELAY_MS = 2e3;
+  static DEFAULT_GENERATION_POLL_ATTEMPTS = 90;
+  static DEFAULT_GENERATION_POLL_DELAY_MS = 2e3;
   gateway;
   sleep;
+  generationPollAttempts;
+  generationPollDelayMs;
   constructor(options) {
     this.gateway = options.gateway;
     this.sleep = options.sleep ?? ((delayMs) => new Promise((resolve4) => setTimeout(resolve4, delayMs)));
+    this.generationPollAttempts = resolvePollBudget(
+      options.generationPollAttempts,
+      process.env.POSTMAN_GENERATION_POLL_ATTEMPTS,
+      _PostmanGatewayAssetsClient.DEFAULT_GENERATION_POLL_ATTEMPTS,
+      1
+    );
+    this.generationPollDelayMs = resolvePollBudget(
+      options.generationPollDelayMs,
+      process.env.POSTMAN_GENERATION_POLL_DELAY_MS,
+      _PostmanGatewayAssetsClient.DEFAULT_GENERATION_POLL_DELAY_MS,
+      0
+    );
   }
   configureTeamContext(teamId, orgMode) {
     this.gateway.configureTeamContext(teamId, orgMode);
@@ -261928,8 +261950,8 @@ var PostmanGatewayAssetsClient = class _PostmanGatewayAssetsClient {
     };
     const taskId = await this.postGenerationWithLockRetry(specId, body2);
     if (taskId) {
-      for (let attempt = 0; attempt < _PostmanGatewayAssetsClient.GENERATION_POLL_ATTEMPTS; attempt += 1) {
-        await this.sleep(_PostmanGatewayAssetsClient.GENERATION_POLL_DELAY_MS);
+      for (let attempt = 0; attempt < this.generationPollAttempts; attempt += 1) {
+        await this.sleep(this.generationPollDelayMs);
         const task = await this.gateway.requestJson({
           service: "specification",
           method: "get",
@@ -261943,7 +261965,7 @@ var PostmanGatewayAssetsClient = class _PostmanGatewayAssetsClient {
         if (status && status !== "in-progress" && status !== "pending" && status !== "queued") {
           break;
         }
-        if (attempt === _PostmanGatewayAssetsClient.GENERATION_POLL_ATTEMPTS - 1) {
+        if (attempt === this.generationPollAttempts - 1) {
           throw new Error(`Collection generation timed out for ${prefix}`);
         }
       }
@@ -262908,6 +262930,53 @@ var AccessTokenProvider = class {
     return token;
   }
 };
+async function describeMintFailure(mintError, apiKey, apiBaseUrl, fetchImpl) {
+  const raw = mintError instanceof Error ? mintError.message : String(mintError);
+  const rejected = /HTTP 40[13]|PMAK rejected/.test(raw);
+  if (!rejected) {
+    return raw;
+  }
+  try {
+    const me = await fetchImpl(`${apiBaseUrl}/me`, { headers: { "x-api-key": apiKey } });
+    if (me.ok) {
+      const body2 = await me.json().catch(() => void 0);
+      const user = body2?.user;
+      const looksPersonal = Boolean(user && (user.username || user.email));
+      if (looksPersonal) {
+        return "Personal API key detected, cannot mint a service-account access token. POST /service-account-tokens only accepts a SERVICE-ACCOUNT API key; this postman-api-key belongs to a user account" + (user?.teamId ? ` (team ${user.teamId})` : "") + ". Create a service account in Team Settings and use its PMAK, or mint the token elsewhere and pass postman-access-token.";
+      }
+      return "The postman-api-key authenticates (GET /me OK) but was rejected by POST /service-account-tokens" + (user?.teamId ? ` (team ${user.teamId})` : "") + ". The service account likely lacks permission to mint access tokens, or service accounts are restricted for this team. Check the service account role in Team Settings, or pass a pre-minted postman-access-token.";
+    }
+    return "The postman-api-key is invalid, disabled, or expired (rejected by both POST /service-account-tokens and GET /me). Generate a fresh service-account PMAK in Team Settings and update the secret.";
+  } catch {
+    return raw;
+  }
+}
+async function mintAccessTokenIfNeeded(inputs, log, setSecret2, fetchImpl = fetch) {
+  if (inputs.postmanAccessToken || !inputs.postmanApiKey) {
+    return;
+  }
+  const apiBaseUrl = String(
+    inputs.postmanApiBase || POSTMAN_ENDPOINT_PROFILES.prod.apiBaseUrl
+  ).replace(/\/+$/, "");
+  const provider = new AccessTokenProvider({
+    apiKey: inputs.postmanApiKey,
+    apiBaseUrl,
+    fetchImpl,
+    onToken: (token) => setSecret2?.(token)
+  });
+  try {
+    inputs.postmanAccessToken = await provider.refresh();
+    log.info(
+      "postman: no postman-access-token configured - minted a short-lived service-account access token from the postman-api-key."
+    );
+  } catch (error) {
+    const diagnosis = await describeMintFailure(error, inputs.postmanApiKey, apiBaseUrl, fetchImpl);
+    log.warning(
+      "postman: could not mint an access token from the postman-api-key. " + diagnosis + " Continuing without an access token - access-token-only functionality will be unavailable unless postman-access-token is provided."
+    );
+  }
+}
 
 // src/lib/postman/workspace-selection.ts
 function chooseCanonicalWorkspace(args) {
@@ -306056,29 +306125,8 @@ function createPlannedOutputs(inputs) {
     })
   };
 }
-async function mintAccessTokenIfNeeded(inputs, log, setSecret2) {
-  if (inputs.postmanAccessToken || !inputs.postmanApiKey) {
-    return;
-  }
-  const provider = new AccessTokenProvider({
-    apiKey: inputs.postmanApiKey,
-    apiBaseUrl: inputs.postmanApiBase,
-    onToken: (token) => setSecret2?.(token)
-  });
-  try {
-    inputs.postmanAccessToken = await provider.refresh();
-    log.info(
-      "postman: no postman-access-token configured - minted a short-lived service-account access token from the postman-api-key."
-    );
-  } catch (error) {
-    const mask = createSecretMasker([inputs.postmanApiKey]);
-    const message = error instanceof Error ? error.message : String(error);
-    log.warning(
-      mask(
-        "postman: could not mint an access token from the postman-api-key (" + message + "). Continuing with PMAK only - governance assignment and org-mode detection are disabled. Configure postman-access-token (postman-cs/postman-resolve-service-token-action) for full functionality."
-      )
-    );
-  }
+async function mintAccessTokenIfNeeded2(inputs, log, setSecret2) {
+  await mintAccessTokenIfNeeded(inputs, log, setSecret2);
 }
 function createWorkspaceName(inputs) {
   return inputs.domainCode ? `[${inputs.domainCode}] ${inputs.projectName}` : inputs.projectName;
@@ -307696,7 +307744,7 @@ async function runCli(argv = process.argv.slice(2), runtime = {}) {
   assertOutputFileAllowed2(config.resultJsonPath);
   assertOutputFileAllowed2(config.dotenvPath);
   const mintReporter = new ConsoleReporter();
-  await mintAccessTokenIfNeeded(inputs, mintReporter);
+  await mintAccessTokenIfNeeded2(inputs, mintReporter);
   const dependencies = createCliDependencies(inputs);
   await runCredentialPreflight({
     apiBaseUrl: inputs.postmanApiBase,

package/dist/index.cjs

@@ -253786,7 +253786,7 @@ __export(index_exports, {
   ensurePostmanCli: () => ensurePostmanCli,
   getInput: () => getInput2,
   lintSpecViaCli: () => lintSpecViaCli,
-  mintAccessTokenIfNeeded: () => mintAccessTokenIfNeeded,
+  mintAccessTokenIfNeeded: () => mintAccessTokenIfNeeded2,
   normalizeSpecDocument: () => normalizeSpecDocument,
   readActionInputs: () => readActionInputs,
   resolveInputs: () => resolveInputs,
@@ -263441,6 +263441,14 @@ function asRecord7(value) {
   }
   return value;
 }
+function resolvePollBudget(explicit, envValue, fallback, min) {
+  if (typeof explicit === "number" && Number.isFinite(explicit) && explicit >= min) return explicit;
+  if (envValue !== void 0) {
+    const parsed = Number(envValue);
+    if (Number.isFinite(parsed) && parsed >= min) return parsed;
+  }
+  return fallback;
+}
 function adviseWorkspaceFlipForbidden(error2) {
   if (error2 instanceof HttpError && error2.status === 403) {
     const body2 = error2.responseBody || "";
@@ -263477,13 +263485,27 @@ function extractGitRepoUrl(value) {
 }
 var PostmanGatewayAssetsClient = class _PostmanGatewayAssetsClient {
   static GENERATION_LOCKED_MAX_RETRIES = 5;
-  static GENERATION_POLL_ATTEMPTS = 90;
-  static GENERATION_POLL_DELAY_MS = 2e3;
+  static DEFAULT_GENERATION_POLL_ATTEMPTS = 90;
+  static DEFAULT_GENERATION_POLL_DELAY_MS = 2e3;
   gateway;
   sleep;
+  generationPollAttempts;
+  generationPollDelayMs;
   constructor(options) {
     this.gateway = options.gateway;
     this.sleep = options.sleep ?? ((delayMs) => new Promise((resolve5) => setTimeout(resolve5, delayMs)));
+    this.generationPollAttempts = resolvePollBudget(
+      options.generationPollAttempts,
+      process.env.POSTMAN_GENERATION_POLL_ATTEMPTS,
+      _PostmanGatewayAssetsClient.DEFAULT_GENERATION_POLL_ATTEMPTS,
+      1
+    );
+    this.generationPollDelayMs = resolvePollBudget(
+      options.generationPollDelayMs,
+      process.env.POSTMAN_GENERATION_POLL_DELAY_MS,
+      _PostmanGatewayAssetsClient.DEFAULT_GENERATION_POLL_DELAY_MS,
+      0
+    );
   }
   configureTeamContext(teamId, orgMode) {
     this.gateway.configureTeamContext(teamId, orgMode);
@@ -263628,8 +263650,8 @@ var PostmanGatewayAssetsClient = class _PostmanGatewayAssetsClient {
     };
     const taskId = await this.postGenerationWithLockRetry(specId, body2);
     if (taskId) {
-      for (let attempt = 0; attempt < _PostmanGatewayAssetsClient.GENERATION_POLL_ATTEMPTS; attempt += 1) {
-        await this.sleep(_PostmanGatewayAssetsClient.GENERATION_POLL_DELAY_MS);
+      for (let attempt = 0; attempt < this.generationPollAttempts; attempt += 1) {
+        await this.sleep(this.generationPollDelayMs);
         const task = await this.gateway.requestJson({
           service: "specification",
           method: "get",
@@ -263643,7 +263665,7 @@ var PostmanGatewayAssetsClient = class _PostmanGatewayAssetsClient {
         if (status && status !== "in-progress" && status !== "pending" && status !== "queued") {
           break;
         }
-        if (attempt === _PostmanGatewayAssetsClient.GENERATION_POLL_ATTEMPTS - 1) {
+        if (attempt === this.generationPollAttempts - 1) {
           throw new Error(`Collection generation timed out for ${prefix}`);
         }
       }
@@ -264608,6 +264630,53 @@ var AccessTokenProvider = class {
     return token;
   }
 };
+async function describeMintFailure(mintError, apiKey, apiBaseUrl, fetchImpl) {
+  const raw = mintError instanceof Error ? mintError.message : String(mintError);
+  const rejected = /HTTP 40[13]|PMAK rejected/.test(raw);
+  if (!rejected) {
+    return raw;
+  }
+  try {
+    const me = await fetchImpl(`${apiBaseUrl}/me`, { headers: { "x-api-key": apiKey } });
+    if (me.ok) {
+      const body2 = await me.json().catch(() => void 0);
+      const user = body2?.user;
+      const looksPersonal = Boolean(user && (user.username || user.email));
+      if (looksPersonal) {
+        return "Personal API key detected, cannot mint a service-account access token. POST /service-account-tokens only accepts a SERVICE-ACCOUNT API key; this postman-api-key belongs to a user account" + (user?.teamId ? ` (team ${user.teamId})` : "") + ". Create a service account in Team Settings and use its PMAK, or mint the token elsewhere and pass postman-access-token.";
+      }
+      return "The postman-api-key authenticates (GET /me OK) but was rejected by POST /service-account-tokens" + (user?.teamId ? ` (team ${user.teamId})` : "") + ". The service account likely lacks permission to mint access tokens, or service accounts are restricted for this team. Check the service account role in Team Settings, or pass a pre-minted postman-access-token.";
+    }
+    return "The postman-api-key is invalid, disabled, or expired (rejected by both POST /service-account-tokens and GET /me). Generate a fresh service-account PMAK in Team Settings and update the secret.";
+  } catch {
+    return raw;
+  }
+}
+async function mintAccessTokenIfNeeded(inputs, log, setSecret2, fetchImpl = fetch) {
+  if (inputs.postmanAccessToken || !inputs.postmanApiKey) {
+    return;
+  }
+  const apiBaseUrl = String(
+    inputs.postmanApiBase || POSTMAN_ENDPOINT_PROFILES.prod.apiBaseUrl
+  ).replace(/\/+$/, "");
+  const provider = new AccessTokenProvider({
+    apiKey: inputs.postmanApiKey,
+    apiBaseUrl,
+    fetchImpl,
+    onToken: (token) => setSecret2?.(token)
+  });
+  try {
+    inputs.postmanAccessToken = await provider.refresh();
+    log.info(
+      "postman: no postman-access-token configured - minted a short-lived service-account access token from the postman-api-key."
+    );
+  } catch (error2) {
+    const diagnosis = await describeMintFailure(error2, inputs.postmanApiKey, apiBaseUrl, fetchImpl);
+    log.warning(
+      "postman: could not mint an access token from the postman-api-key. " + diagnosis + " Continuing without an access token - access-token-only functionality will be unavailable unless postman-access-token is provided."
+    );
+  }
+}
 
 // src/lib/postman/workspace-selection.ts
 function chooseCanonicalWorkspace(args) {
@@ -307778,29 +307847,8 @@ function warnIfDeprecatedAccessToken(actionCore, inputs) {
     )
   );
 }
-async function mintAccessTokenIfNeeded(inputs, log, setSecret2) {
-  if (inputs.postmanAccessToken || !inputs.postmanApiKey) {
-    return;
-  }
-  const provider = new AccessTokenProvider({
-    apiKey: inputs.postmanApiKey,
-    apiBaseUrl: inputs.postmanApiBase,
-    onToken: (token) => setSecret2?.(token)
-  });
-  try {
-    inputs.postmanAccessToken = await provider.refresh();
-    log.info(
-      "postman: no postman-access-token configured - minted a short-lived service-account access token from the postman-api-key."
-    );
-  } catch (error2) {
-    const mask = createSecretMasker([inputs.postmanApiKey]);
-    const message = error2 instanceof Error ? error2.message : String(error2);
-    log.warning(
-      mask(
-        "postman: could not mint an access token from the postman-api-key (" + message + "). Continuing with PMAK only - governance assignment and org-mode detection are disabled. Configure postman-access-token (postman-cs/postman-resolve-service-token-action) for full functionality."
-      )
-    );
-  }
+async function mintAccessTokenIfNeeded2(inputs, log, setSecret2) {
+  await mintAccessTokenIfNeeded(inputs, log, setSecret2);
 }
 function isLegacyAccessTokenDeprecationWarning(message) {
   return message.includes("Postman CLI credential store populated by `postman login` is a legacy fallback");
@@ -309088,7 +309136,7 @@ async function runBootstrapInner(inputs, dependencies, telemetry) {
 }
 async function runAction(actionCore = core_exports, actionExec = exec_exports, actionIo = io_exports) {
   const inputs = readActionInputs(actionCore);
-  await mintAccessTokenIfNeeded(inputs, {
+  await mintAccessTokenIfNeeded2(inputs, {
     info: (message) => actionCore.info(message),
     warning: (message) => actionCore.warning(message)
   }, (secret) => actionCore.setSecret(secret));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@postman-cse/onboarding-bootstrap",
-  "version": "2.7.1",
+  "version": "2.9.0",
   "description": "Bootstrap Postman workspaces, specs, and collections from OpenAPI.",
   "type": "module",
   "main": "dist/index.cjs",
@@ -61,6 +61,8 @@
     "@commitlint/cli": "^21.0.2",
     "@commitlint/config-conventional": "^21.0.2",
     "@eslint/js": "^10.0.1",
+    "@grpc/grpc-js": "^1.14.4",
+    "@grpc/proto-loader": "^0.8.1",
     "@types/node": "^26.1.0",
     "esbuild": "0.28.1",
     "eslint": "^10.4.1",