@postman-cse/onboarding-insights 0.7.2 → 0.8.0

package/README.md

@@ -166,8 +166,7 @@ steps:
 | `environment-id` | Yes | | Postman environment UID for the onboarding association. |
 | `system-environment-id` | No | | Postman system environment UUID for service-level Insights acknowledgment. Falls back to the value from the discovered service record. |
 | `cluster-name` | No | | Insights cluster name. When set, the action matches `{cluster-name}/{project-name}` exactly. When omitted, falls back to suffix matching. |
-| `git-owner` | No | `$GITHUB_REPOSITORY_OWNER` | GitHub organization or user for the repository URL. |
-| `git-repository-name` | No | `project-name` | GitHub repository name. Defaults to the project name. |
+| `repo-url` | No | Auto-detected from CI when available | Repository URL used for Git onboarding. |
 | `postman-access-token` | Yes | | Postman session token for Bifrost API calls. See [Obtaining postman-access-token](#obtaining-postman-access-token-open-alpha). |
 | `postman-team-id` | No | | Explicit Postman team ID for org-mode Bifrost requests. When omitted, the action leaves `x-entity-team-id` unset so Bifrost resolves team context from the access token. |
 | `github-token` | No | ambient `GITHUB_TOKEN` env when exported by the workflow | Optional GitHub token passed as `git_api_key` only when repository auth is required by the onboarding endpoint. |
@@ -238,6 +237,17 @@ The action calls the following API endpoints in order:
 7. **Workspace acknowledge** -- `POST /v2/workspaces/{id}/onboarding/acknowledge` (Bifrost akita) to activate the Insights project.
 8. **Team verification token** -- `GET /v2/workspaces/{id}/team-verification-token` (Bifrost akita) to retrieve the DaemonSet telemetry token.
 
+## Contract smoke monitoring
+
+This repo includes `.github/workflows/contract-smoke.yml`, a scheduled live contract check for the upstream APIs used by Insights onboarding.
+
+Configure these repository secrets before enabling the workflow:
+
+- `SMOKE_ORG_API_KEY`
+- `SMOKE_ORG_ACCESS_TOKEN`
+
+The smoke workflow verifies `/me`, `/teams`, `iapub.postman.co/api/sessions/current`, and Bifrost API key creation so auth or payload drift shows up in CI before it hits production onboarding runs.
+
 ## Local development
 
 ```bash

package/action.yml

@@ -16,11 +16,8 @@ inputs:
   cluster-name:
     description: 'Insights cluster name. Matches {cluster}/{project-name} in discovered services'
     required: false
-  git-owner:
-    description: 'GitHub organization or user that owns the repository'
-    required: false
-  git-repository-name:
-    description: 'GitHub repository name. Defaults to project-name'
+  repo-url:
+    description: 'Repository URL for Git onboarding. Auto-detected from CI context when omitted.'
     required: false
   postman-access-token:
     description: 'Postman access token for Bifrost API calls'

package/dist/cli.cjs

@@ -27746,6 +27746,23 @@ async function validateApiKey(apiKey) {
   const teamId = data?.user?.teamId ? String(data.user.teamId) : void 0;
   return { valid: true, teamId };
 }
+async function getTeams(apiKey) {
+  try {
+    const res = await fetch("https://api.getpostman.com/teams", {
+      method: "GET",
+      headers: { "x-api-key": apiKey }
+    });
+    if (!res.ok) return [];
+    const data = await res.json();
+    return (data?.data ?? []).filter((t) => t?.id && t?.name).map((t) => ({
+      id: Number(t.id),
+      name: String(t.name),
+      ...t.organizationId != null ? { organizationId: Number(t.organizationId) } : {}
+    }));
+  } catch {
+    return [];
+  }
+}
 function clamp(value, min, max, fallback) {
   const parsed = Number.isFinite(value) ? value : fallback;
   return Math.min(max, Math.max(min, parsed));
@@ -27758,16 +27775,21 @@ function resolveInputs(env = process.env) {
   if (!postmanAccessToken) throw new Error("postman-access-token is required");
   const postmanApiKey = get("postman-api-key");
   const postmanTeamId = get("postman-team-id") || env.POSTMAN_TEAM_ID?.trim() || "";
-  const workspaceId = get("workspace-id");
-  if (!workspaceId) throw new Error("workspace-id is required");
-  const environmentId = get("environment-id");
-  if (!environmentId) throw new Error("environment-id is required");
+  const workspaceId = get("workspace-id") || env.POSTMAN_WORKSPACE_ID?.trim() || "";
+  if (!workspaceId) {
+    throw new Error(
+      "workspace-id is required. Provide it as an input, or set the POSTMAN_WORKSPACE_ID environment variable."
+    );
+  }
+  const environmentId = get("environment-id") || env.POSTMAN_ENVIRONMENT_ID?.trim() || "";
+  if (!environmentId) {
+    throw new Error(
+      "environment-id is required. Provide it as an input, or set the POSTMAN_ENVIRONMENT_ID environment variable."
+    );
+  }
   const repoSlug = env.GITHUB_REPOSITORY || env.CI_PROJECT_PATH || (env.BITBUCKET_WORKSPACE && env.BITBUCKET_REPO_SLUG ? `${env.BITBUCKET_WORKSPACE}/${env.BITBUCKET_REPO_SLUG}` : "") || env.BUILD_REPOSITORY_NAME || "";
-  const repoOwner = repoSlug.split("/")[0] || "";
-  const gitOwner = get("git-owner", repoOwner);
-  const gitRepositoryName = get("git-repository-name", projectName);
   const detectedRepoUrl = (env.GITHUB_SERVER_URL && env.GITHUB_REPOSITORY ? `${env.GITHUB_SERVER_URL}/${env.GITHUB_REPOSITORY}` : "") || env.CI_PROJECT_URL || env.BITBUCKET_GIT_HTTP_ORIGIN || env.BUILD_REPOSITORY_URI || "";
-  const repoUrl = get("repo-url", detectedRepoUrl || `https://github.com/${gitOwner}/${gitRepositoryName}`);
+  const repoUrl = get("repo-url", detectedRepoUrl);
   const rawTimeout = parseInt(get("poll-timeout-seconds", String(POLL_TIMEOUT_DEFAULT)), 10);
   const rawInterval = parseInt(get("poll-interval-seconds", String(POLL_INTERVAL_DEFAULT)), 10);
   return {
@@ -27776,8 +27798,6 @@ function resolveInputs(env = process.env) {
     environmentId,
     systemEnvironmentId: get("system-environment-id", ""),
     clusterName: get("cluster-name", ""),
-    gitOwner,
-    gitRepositoryName,
     repoUrl,
     postmanAccessToken,
     postmanApiKey,
@@ -27907,12 +27927,31 @@ async function resolveApiKeyAndTeamId(inputs, client, reporter = core_exports) {
     client.setApiKey(apiKey);
     reporter.info("New API key created successfully.");
   }
-  if (teamId) {
-    reporter.info(`Using explicit postman-team-id for Bifrost headers: ${teamId}`);
+  let resolvedTeamId = teamId;
+  if (!resolvedTeamId && apiKey) {
+    try {
+      const teams = await getTeams(apiKey);
+      if (teams.length > 1 && teams.every((t) => t.organizationId == null)) {
+        reporter.warning(
+          "GET /teams returned multiple teams but none include organizationId. Org-mode auto-detection may be degraded due to an upstream API change. Set postman-team-id explicitly if Bifrost calls fail."
+        );
+      }
+      const orgIds = new Set(teams.filter((t) => t.organizationId != null).map((t) => t.organizationId));
+      const meResult = await validateApiKey(apiKey);
+      const meTeamId = meResult.teamId ? parseInt(meResult.teamId, 10) : NaN;
+      if (teams.length > 1 && orgIds.size === 1 && !Number.isNaN(meTeamId) && orgIds.has(meTeamId)) {
+        resolvedTeamId = String(meTeamId);
+        reporter.info(`Org-mode auto-detected (${teams.length} sub-teams). Using team ID ${resolvedTeamId} for Bifrost headers.`);
+      }
+    } catch {
+    }
+  }
+  if (resolvedTeamId) {
+    reporter.info(`Using postman-team-id for Bifrost headers: ${resolvedTeamId}`);
   } else {
-    reporter.info("No explicit postman-team-id provided; omitting x-entity-team-id so Bifrost resolves team from the access token.");
+    reporter.info("No postman-team-id resolved; omitting x-entity-team-id so Bifrost resolves team from the access token.");
   }
-  return { apiKey, teamId };
+  return { apiKey, teamId: resolvedTeamId };
 }
 async function runAction() {
   const inputs = resolveInputs();
@@ -28014,8 +28053,6 @@ function parseCliArgs(argv, env = process.env) {
     "environment-id",
     "system-environment-id",
     "cluster-name",
-    "git-owner",
-    "git-repository-name",
     "repo-url",
     "postman-access-token",
     "postman-api-key",

package/dist/index.cjs

@@ -25015,6 +25015,7 @@ __export(index_exports, {
   createPlannedOutputs: () => createPlannedOutputs,
   deriveTeamId: () => deriveTeamId,
   deriveTeamIdFromSession: () => deriveTeamIdFromSession,
+  getTeams: () => getTeams,
   resolveApiKeyAndTeamId: () => resolveApiKeyAndTeamId,
   resolveInputs: () => resolveInputs,
   runOnboarding: () => runOnboarding,
@@ -27772,6 +27773,23 @@ async function deriveTeamIdFromSession(accessToken) {
   }
   return void 0;
 }
+async function getTeams(apiKey) {
+  try {
+    const res = await fetch("https://api.getpostman.com/teams", {
+      method: "GET",
+      headers: { "x-api-key": apiKey }
+    });
+    if (!res.ok) return [];
+    const data = await res.json();
+    return (data?.data ?? []).filter((t) => t?.id && t?.name).map((t) => ({
+      id: Number(t.id),
+      name: String(t.name),
+      ...t.organizationId != null ? { organizationId: Number(t.organizationId) } : {}
+    }));
+  } catch {
+    return [];
+  }
+}
 function clamp(value, min, max, fallback) {
   const parsed = Number.isFinite(value) ? value : fallback;
   return Math.min(max, Math.max(min, parsed));
@@ -27784,16 +27802,21 @@ function resolveInputs(env = process.env) {
   if (!postmanAccessToken) throw new Error("postman-access-token is required");
   const postmanApiKey = get("postman-api-key");
   const postmanTeamId = get("postman-team-id") || env.POSTMAN_TEAM_ID?.trim() || "";
-  const workspaceId = get("workspace-id");
-  if (!workspaceId) throw new Error("workspace-id is required");
-  const environmentId = get("environment-id");
-  if (!environmentId) throw new Error("environment-id is required");
+  const workspaceId = get("workspace-id") || env.POSTMAN_WORKSPACE_ID?.trim() || "";
+  if (!workspaceId) {
+    throw new Error(
+      "workspace-id is required. Provide it as an input, or set the POSTMAN_WORKSPACE_ID environment variable."
+    );
+  }
+  const environmentId = get("environment-id") || env.POSTMAN_ENVIRONMENT_ID?.trim() || "";
+  if (!environmentId) {
+    throw new Error(
+      "environment-id is required. Provide it as an input, or set the POSTMAN_ENVIRONMENT_ID environment variable."
+    );
+  }
   const repoSlug = env.GITHUB_REPOSITORY || env.CI_PROJECT_PATH || (env.BITBUCKET_WORKSPACE && env.BITBUCKET_REPO_SLUG ? `${env.BITBUCKET_WORKSPACE}/${env.BITBUCKET_REPO_SLUG}` : "") || env.BUILD_REPOSITORY_NAME || "";
-  const repoOwner = repoSlug.split("/")[0] || "";
-  const gitOwner = get("git-owner", repoOwner);
-  const gitRepositoryName = get("git-repository-name", projectName);
   const detectedRepoUrl = (env.GITHUB_SERVER_URL && env.GITHUB_REPOSITORY ? `${env.GITHUB_SERVER_URL}/${env.GITHUB_REPOSITORY}` : "") || env.CI_PROJECT_URL || env.BITBUCKET_GIT_HTTP_ORIGIN || env.BUILD_REPOSITORY_URI || "";
-  const repoUrl = get("repo-url", detectedRepoUrl || `https://github.com/${gitOwner}/${gitRepositoryName}`);
+  const repoUrl = get("repo-url", detectedRepoUrl);
   const rawTimeout = parseInt(get("poll-timeout-seconds", String(POLL_TIMEOUT_DEFAULT)), 10);
   const rawInterval = parseInt(get("poll-interval-seconds", String(POLL_INTERVAL_DEFAULT)), 10);
   return {
@@ -27802,8 +27825,6 @@ function resolveInputs(env = process.env) {
     environmentId,
     systemEnvironmentId: get("system-environment-id", ""),
     clusterName: get("cluster-name", ""),
-    gitOwner,
-    gitRepositoryName,
     repoUrl,
     postmanAccessToken,
     postmanApiKey,
@@ -27933,12 +27954,31 @@ async function resolveApiKeyAndTeamId(inputs, client, reporter = core_exports) {
     client.setApiKey(apiKey);
     reporter.info("New API key created successfully.");
   }
-  if (teamId) {
-    reporter.info(`Using explicit postman-team-id for Bifrost headers: ${teamId}`);
+  let resolvedTeamId = teamId;
+  if (!resolvedTeamId && apiKey) {
+    try {
+      const teams = await getTeams(apiKey);
+      if (teams.length > 1 && teams.every((t) => t.organizationId == null)) {
+        reporter.warning(
+          "GET /teams returned multiple teams but none include organizationId. Org-mode auto-detection may be degraded due to an upstream API change. Set postman-team-id explicitly if Bifrost calls fail."
+        );
+      }
+      const orgIds = new Set(teams.filter((t) => t.organizationId != null).map((t) => t.organizationId));
+      const meResult = await validateApiKey(apiKey);
+      const meTeamId = meResult.teamId ? parseInt(meResult.teamId, 10) : NaN;
+      if (teams.length > 1 && orgIds.size === 1 && !Number.isNaN(meTeamId) && orgIds.has(meTeamId)) {
+        resolvedTeamId = String(meTeamId);
+        reporter.info(`Org-mode auto-detected (${teams.length} sub-teams). Using team ID ${resolvedTeamId} for Bifrost headers.`);
+      }
+    } catch {
+    }
+  }
+  if (resolvedTeamId) {
+    reporter.info(`Using postman-team-id for Bifrost headers: ${resolvedTeamId}`);
   } else {
-    reporter.info("No explicit postman-team-id provided; omitting x-entity-team-id so Bifrost resolves team from the access token.");
+    reporter.info("No postman-team-id resolved; omitting x-entity-team-id so Bifrost resolves team from the access token.");
   }
-  return { apiKey, teamId };
+  return { apiKey, teamId: resolvedTeamId };
 }
 async function runAction() {
   const inputs = resolveInputs();
@@ -27999,6 +28039,7 @@ runAction().catch((error2) => {
   createPlannedOutputs,
   deriveTeamId,
   deriveTeamIdFromSession,
+  getTeams,
   resolveApiKeyAndTeamId,
   resolveInputs,
   runOnboarding,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@postman-cse/onboarding-insights",
-  "version": "0.7.2",
+  "version": "0.8.0",
   "description": "GitHub Action to onboard Postman Insights discovered services to API Catalog workspaces.",
   "type": "module",
   "main": "dist/index.cjs",
@@ -31,7 +31,8 @@
     "@actions/core": "^3.0.0"
   },
   "overrides": {
-    "undici": ">=6.24.0"
+    "undici": ">=6.24.0",
+    "picomatch": ">=4.0.4"
   },
   "devDependencies": {
     "@types/node": "^25.3.5",