postman-cli-completion 1.71.0 → 1.74.0

package/completions/zsh/_postman

@@ -1,6 +1,6 @@
 #compdef postman
 compdef _postman postman
-# Zsh completion for Postman CLI (postman v1.71.0)
+# Zsh completion for Postman CLI (postman v1.74.0)
 # Auto-generated by scripts/generate.mjs — DO NOT EDIT
 # Source: spec/commands.json
 # https://github.com/yokawasa/postman-cli-completion
@@ -10,47 +10,47 @@ _postman() {
   typeset -A opt_args
 
   _arguments -C \
-    '(-v --version)'{-v,--version}'[output the version number]' \
+    '--color[Enable/Disable colored output (auto|on|off)]:value:(auto on off)' \
+    '(-h --help)'{-h,--help}'[Show help for command]' \
     '--silent[Silences all terminal output]' \
-    '--color[Enable/Disable colored output (auto|on|off) (default\: "auto")]:value:(auto on off)' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
+    '(-v --version)'{-v,--version}'[Show postman version]' \
     '1: :_postman_commands' \
     '*::arg:->args'
 
   case $state in
     args)
       case $words[1] in
-        login) _postman_login ;;
-        signup) _postman_signup ;;
-        logout) _postman_logout ;;
-        init) _postman_init ;;
-        whoami) _postman_whoami ;;
-        feedback) _postman_feedback ;;
-        update) _postman_update ;;
-        skills) _postman_skills ;;
+        api) _postman_api ;;
         collection) _postman_collection ;;
+        dataset) _postman_dataset ;;
         environment) _postman_environment ;;
+        flows|fl) _postman_flows ;;
         globals) _postman_globals ;;
-        api) _postman_api ;;
-        runner) _postman_runner ;;
-        spec) _postman_spec ;;
+        mock) _postman_mock ;;
         monitor) _postman_monitor ;;
-        workspace|ws) _postman_workspace ;;
-        team) _postman_team ;;
-        performance) _postman_performance ;;
-        flows|fl) _postman_flows ;;
         request) _postman_request ;;
+        runner) _postman_runner ;;
         sdk) _postman_sdk ;;
-        mock) _postman_mock ;;
-        application|app) _postman_application ;;
-        simulation) _postman_simulation ;;
-        describe) _postman_describe ;;
+        spec) _postman_spec ;;
+        workspace|ws) _postman_workspace ;;
         context-graph) _postman_context_graph ;;
+        describe) _postman_describe ;;
+        init) _postman_init ;;
         search) _postman_search ;;
-        webhook) _postman_webhook ;;
-        dataset) _postman_dataset ;;
+        skills) _postman_skills ;;
+        login) _postman_login ;;
+        logout) _postman_logout ;;
+        signup) _postman_signup ;;
+        whoami) _postman_whoami ;;
+        application|app) _postman_application ;;
         dependency) _postman_dependency ;;
+        feedback) _postman_feedback ;;
+        performance) _postman_performance ;;
         secret) _postman_secret ;;
+        simulation) _postman_simulation ;;
+        team) _postman_team ;;
+        update) _postman_update ;;
+        webhook) _postman_webhook ;;
       esac
       ;;
   esac
@@ -59,141 +59,89 @@ _postman() {
 _postman_commands() {
   local -a commands
   commands=(
-    'login:Authenticate with Postman to access your resources.'
-    'signup:Sign up to keep the work you created as a guest (claims your guest workspace). Waits and signs this CLI in once the sign-up is completed in a browser — opening that browser here on a terminal, or printing the URL to hand over when output is piped.'
-    'logout:Delete the stored Postman API key.'
-    'init:Set up Postman artifacts and agent instructions in a repository.'
-    'whoami:Show the Postman account or guest session this CLI session is using.'
-    'feedback:Submit feedback about CLI usability, gaps, and improvement suggestions.'
-    'update:Update Postman CLI using the original installation method.'
-    'skills:Check and update the agent skills in this repository.'
-    'collection:Run and test your Postman collections directly from the command line.'
-    'environment:Work with local Postman environments from the command line. Also read cloud environments by ID.'
-    'globals:Work with local Postman globals from the command line. Also read cloud globals by workspace.'
     'api:Publish and test your APIs directly from the command line'
-    'runner:Where your monitors execute\: run and inspect your own self-hosted runners, and list the Postman-operated regions available to your team.'
-    'spec:Lint and validate Specifications from the command line'
-    'monitor:Run and manage Postman monitors.'
-    'workspace:Manage workspace resources.'
-    'ws:Alias for workspace'
-    'team:Work with the teams inside your organisation.'
-    'performance:Manage performance tests on your collections.'
-    'flows:Manage and interact with flows.'
+    'collection:Run and test your Postman collections directly from the command line'
+    'dataset:Work with Postman datasets in local YAML files or the cloud'
+    'environment:Work with local and cloud Postman environments'
+    'flows:Manage and interact with flows'
     'fl:Alias for flows'
-    'request:Send HTTP requests from the command line with full Postman capabilities including authentication, environment variables, assertions, retries, and detailed output control.'
-    'sdk:Generate and manage your SDKs directly from the command line.'
-    'mock:Create, run, and manage Postman mocks — in your repository or in Postman cloud.'
-    'application:Application-level commands\: initialise config and run tests.'
+    'globals:Work with local and cloud Postman globals'
+    'mock:Create, run, and manage Postman mocks'
+    'monitor:Run and manage Postman monitors'
+    'request:Send HTTP requests with full Postman capabilities'
+    'runner:Start and inspect self-hosted runners, and list Postman-operated regions'
+    'sdk:Generate and manage your SDKs directly from the command line'
+    'spec:Lint and validate specifications from the command line'
+    'workspace:Manage workspace resources'
+    'ws:Alias for workspace'
+    'context-graph:Ask natural-language questions about your team'\''s Context Graph'
+    'describe:Get API context for AI coding agents directly from the command line'
+    'init:Set up Postman artifacts and agent instructions in a repository'
+    'search:Search for Postman element types'
+    'skills:Check and update the agent skills in this repository'
+    'login:Authenticate with Postman to access your resources'
+    'logout:Delete the stored Postman API key'
+    'signup:Sign up to keep the work you created as a guest'
+    'whoami:Show the Postman account or guest session this CLI session is using'
+    'application:Application-level commands\: initialise config and run tests'
     'app:Alias for application'
-    'simulation:Create, run and manage simulations — serve several mocks behind one address.'
-    'describe:\[Beta\] Get API context for AI coding agents directly from the command line.'
-    'context-graph:Ask natural-language questions about your team'\''s Context Graph.'
-    'search:Search for Postman element types (requests, collections, workspaces, and more).'
-    'webhook:Create and manage Postman webhooks.'
-    'dataset:Work with Postman datasets in local YAML files or the cloud.'
-    'dependency:Manage workspace dependencies (Postman entities reused from other workspaces).'
-    'secret:Create and manage Postman secrets in a team'\''s shared vault.'
+    'dependency:Manage workspace dependencies reused from other workspaces'
+    'feedback:Submit feedback about CLI usability, gaps, and improvements'
+    'performance:Manage performance tests on your collections'
+    'secret:Create and manage Postman secrets in a team'\''s shared vault'
+    'simulation:Create, run and manage simulations'
+    'team:Work with the teams inside your organisation'
+    'update:Update Postman CLI using the original installation method'
+    'webhook:Create and manage Postman webhooks'
   )
   _describe -t commands 'postman command' commands
 }
 
-_postman_login() {
-  _arguments \
-    '--alias[Specify the alias of the API key to fetch your resources using it. (This option is discontinued and will be removed in a future release.)]:alias' \
-    '--with-api-key[Specify the API key directly.]:apikey' \
-    '--region[Specify the region for authentication. Use "eu" for EU region.]:region:(us eu)' \
-    '--verbose[Show detailed error information]' \
-    '(-h --help)'{-h,--help}'[display help for command]'
-}
-
-_postman_signup() {
-  _arguments \
-    '--guest[Start working as an anonymous guest instead of signing up — no account or browser needed, so it works anywhere. Your work is saved to a temporary workspace you can keep later by running `postman signup`.]' \
-    '--json[Print the sign-up details as machine-readable JSON.]' \
-    '(-h --help)'{-h,--help}'[display help for command]'
-}
-
-_postman_logout() {
-  _arguments \
-    '--alias[Specify the alias of the API key to fetch your resources using it. (This option is discontinued and will be removed in a future release.)]:alias' \
-    '(-h --help)'{-h,--help}'[display help for command]'
-}
-
-_postman_init() {
-  _arguments \
-    '--json[Emit machine-readable output for agents]' \
-    '--dry-run[Report what would happen without writing anything]' \
-    '--no-fetch[Use the skills bundled with this CLI instead of fetching the latest]' \
-    '--spec[Which spec is authoritative, when more than one could be]:path:_files -g "*.(yaml|yml|json)"' \
-    '--visibility[Create and bind a workspace non-interactively (personal, team)]:status' \
-    '(-y --yes)'{-y,--yes}'[Accept the default for every question instead of asking or stopping]' \
-    '--report-events[Dispatch init events to the API Catalog and Application Inventory ingestion pipelines (requires login)]' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:path:_files -g "*.json"'
-}
-
-_postman_whoami() {
-  _arguments \
-    '--json[Print current identity as machine-readable JSON.]' \
-    '(-h --help)'{-h,--help}'[display help for command]'
-}
-
-_postman_feedback() {
-  _arguments \
-    '--type[Feedback type\: cli_gap, improvement_suggestion, bug_report, feature_request, general (default\: general)]:type' \
-    '--context[Command or feature context this feedback is about]:context' \
-    '--json[Print result as machine-readable JSON]' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:text:'
-}
-
-_postman_update() {
-  _arguments \
-    '--check[Check whether a Postman CLI update is available.]' \
-    '(-h --help)'{-h,--help}'[display help for command]'
-}
-
-_postman_skills() {
+_postman_api() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_skills_commands' \
+    '1: :_postman_api_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        status) _postman_skills_status ;;
-        update) _postman_skills_update ;;
+        lint) _postman_api_lint ;;
+        publish) _postman_api_publish ;;
       esac
       ;;
   esac
 }
 
-_postman_skills_commands() {
+_postman_api_commands() {
   local -a sub
   sub=(
-    'status:Report whether this repository'\''s skills are up to date.'
-    'update:Fetch the latest skills into this repository.'
+    'lint:Run linting on the schema of the given API ID or local file in the given path. If \[api\] is not provided we will run the linting on the schema present in the .postman config file'
+    'publish:Publish a version of an API for the given apiId. All entities added to the API will be published by default. User can choose which entities to publish by using additional options.'
   )
-  _describe -t commands 'skills command' sub
+  _describe -t commands 'api command' sub
 }
 
-_postman_skills_status() {
+_postman_api_lint() {
   _arguments \
-    '--json[Emit machine-readable output for agents]' \
-    '--strict[Exit non-zero when the skills are not current]' \
+    '--integration-id[Specify the integration ID for the report.]:integration-id' \
+    '(-f --fail-severity)'{-f,--fail-severity}'[Results of this level or above will trigger a failure exit code. \[choices\: "error", "warn", "info", "hint"\] (default\: "ERROR")]:value' \
+    '(-x --suppress-exit-code)'{-x,--suppress-exit-code}'[Specify whether or not to override the default exit code for the current run]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:path:_files -g "*.json"'
+    '*:api:'
 }
 
-_postman_skills_update() {
+_postman_api_publish() {
   _arguments \
-    '--json[Emit machine-readable output for agents]' \
-    '--dry-run[Report what would change without writing anything]' \
-    '--force[Overwrite skill files that were edited locally]' \
+    '--name[Specify the name of the version to publish.]:name' \
+    '--release-notes[Specify release notes for the version to publish.]:releaseNotes' \
+    '--collections[Specify the collections to publish. If API is connected to a repository, provide file path instead of IDs.]:collectionIds/paths...:_files -g "*.json"' \
+    '--api-definition[Specify the API Definition to publish. If API is connected to a repository, provide schema root file path. Note that some repository connections utilize a schema directory path; for such APIs, provide schema directory path instead of file path.]:apiDefinitionId/directory/file' \
+    '--do-not-poll[Specify whether or not to poll for completion status of the publish action.]' \
+    '(-x --suppress-exit-code)'{-x,--suppress-exit-code}'[Specify whether or not to override the default exit code for the current run.]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:path:_files -g "*.json"'
+    '*:apiId:'
 }
 
 _postman_collection() {
@@ -706,680 +654,975 @@ _postman_collection_run() {
     '--export-cookie-jar[Exports the cookie jar to a file after completing the run]:path:_files -g "*.json"' \
     '--verbose[Show detailed information of collection run and each request sent]' \
     '--mock[Start a mock server for the run, its path if it lives in your repository (relative or absolute, e.g. ./postman/mocks/orders) or its id if it lives in Postman cloud (fetched then run locally). An id needs `postman login` (or --postman-api-key).]:pathOrId:_files -g "*.json"' \
-    '--port[Port for the --mock server (e.g. 4010), or "auto" for a free one. Defaults to the mock'\''s configured port. Only valid with --mock.]:port' \
+    '--port[Port for the --mock server or --simulation (e.g. 4010), or "auto" for a free one. Defaults to the configured port. Only valid with --mock or --simulation.]:port' \
     '--use-mock[Redirect requests for a URL or {{variable}} to a mock during the run. Format\: "<url> mock|mock-server\:<path|id> \[scenario\]". Repeat the flag to redirect several URLs (one --use-mock each). Use "mock\:<path>" for a mock in your repository (path relative or absolute, e.g. ./postman/mocks/orders), "mock\:<id>" for a mock in Postman cloud (fetched then run locally), or "mock-server\:<id>" to send requests to a deployed mock server. An id needs `postman login` (or --postman-api-key). The optional third field picks a scenario (defaults to "default"). (default\: \[\])]:mapping' \
-    '--simulate[Start mock servers with fault-injection scenarios from a .sim.yaml file]:path:_files -g "*.(sim.yaml|yaml|yml)"' \
-    '--simulation[Simulation id to record start history against when using --simulate.]:id' \
-    '--simulate-workspace[Workspace that owns the --simulate run, for recording its start history.]:id' \
-    '--no-simulate-history[Do not record the --simulate run in the simulation'\''s start history.]' \
-    '--report-events[Dispatch run events, including git-native v3 collection run results, to the API Catalog and Application Inventory ingestion pipelines (on by default)]' \
-    '--no-report-events[Do not dispatch run events to the API Catalog and Application Inventory ingestion pipelines]' \
+    '--simulation[Run the mocks in a simulation for the run, its .sim.yaml path if it lives in your repository (relative or absolute, e.g. ./postman/simulations/checkout.sim.yaml) or its id if it lives in Postman cloud (fetched then run locally). Members share one port and are addressed by routeKey (e.g. http\://localhost\:3000/<routeKey>/path). An id needs `postman login` (or --postman-api-key).]:pathOrId:_files -g "*.json"' \
+    '(-w --workspace)'{-w,--workspace}'[Workspace to record the --simulation run'\''s start history against. Defaults to the simulation'\''s own workspace (when run by id) or the linked project'\''s workspace.]:workspaceId' \
+    '--report-events[Dispatch run events, including git-native v3 collection run results and any --simulation start history, to the API Catalog and Application Inventory ingestion pipelines (on by default)]' \
+    '--no-report-events[Do not dispatch run events (results, --simulation start history, and analytics) to the API Catalog and Application Inventory ingestion pipelines]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
     '*:collectionId/Path:_files -g "*.json"'
 }
 
-_postman_environment() {
+_postman_dataset() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_environment_commands' \
+    '1: :_postman_dataset_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        new) _postman_environment_new ;;
-        list) _postman_environment_list ;;
-        get) _postman_environment_get ;;
-        delete) _postman_environment_delete ;;
-        var) _postman_environment_var ;;
-        lint) _postman_environment_lint ;;
+        list) _postman_dataset_list ;;
+        get) _postman_dataset_get ;;
+        query) _postman_dataset_query ;;
+        create) _postman_dataset_create ;;
+        delete) _postman_dataset_delete ;;
+        source) _postman_dataset_source ;;
+        view) _postman_dataset_view ;;
+        jdbc) _postman_dataset_jdbc ;;
       esac
       ;;
   esac
 }
 
-_postman_environment_commands() {
+_postman_dataset_commands() {
   local -a sub
   sub=(
-    'new:Scaffold a local environment file, or create one in a Postman workspace with --workspace.'
-    'list:List environments in a Postman workspace.'
-    'get:Read an environment by ID or local environment file path.'
-    'delete:Delete an environment by ID or local environment file path. Prompts unless --yes is passed.'
-    'var:Read and update environment variables.'
-    'lint:Run linting on a local Postman environment at the given file or directory path.'
+    'list:List local dataset YAMLs under a path, or (no path) a workspace'\''s cloud datasets.'
+    'get:Print a dataset'\''s metadata and structure summary (local YAML path or cloud id).'
+    'query:Run an ad-hoc SQL query against a dataset (local YAML path or cloud id).'
+    'create:Scaffold a new .dataset.yaml at <path>, or (no path, with -w) create a cloud dataset.'
+    'delete:Permanently remove a dataset\: a local .dataset.yaml or a cloud dataset id.'
+    'source:Inspect and manage a dataset'\''s datasources.'
+    'view:Inspect and manage saved views on a dataset.'
+    'jdbc:Inspect JDBC drivers before attaching one to a dataset.'
   )
-  _describe -t commands 'environment command' sub
+  _describe -t commands 'dataset command' sub
 }
 
-_postman_environment_new() {
+_postman_dataset_list() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Create the environment in a cloud Postman workspace instead of scaffolding it locally. Required when the current directory is not a local Postman workspace.]:workspaceId' \
-    '--force[Overwrite an existing local environment file.]' \
-    '--verbose[Verbose output]' \
-    '--json[JSON output]' \
+    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID (cloud list)]:id' \
+    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Output as JSON instead of a table]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:name:'
+    '*:pathOrDir:_files -g "*.json"'
 }
 
-_postman_environment_list() {
+_postman_dataset_get() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Workspace ID to list environments from.]:workspaceId' \
-    '(-f --filter)'{-f,--filter}'[Filter environments by name.]:name' \
-    '--verbose[Verbose output]' \
-    '--json[JSON output]' \
+    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--no-populate[Skip fetching datasources/views for a cloud dataset]' \
+    '--json[Output the full dataset as JSON]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:workspacePath:'
+    '*:datasetPathOrId:'
 }
 
-_postman_environment_get() {
+_postman_dataset_query() {
   _arguments \
-    '--verbose[Verbose output]' \
-    '--json[JSON output]' \
+    '(-q --query)'{-q,--query}'[SQL query to execute (e.g. "SELECT * FROM users LIMIT 10")]:sql' \
+    '(-s --source)'{-s,--source}'[Execute directly against a database datasource; without --source, use federated SQLite]:nameOrIdOrSlug' \
+    '(-p --param)'{-p,--param}'[Bind values to $1, $2, ... in order; pass multiple values after -p or repeat -p]:value...' \
+    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Output rows as JSON instead of a table]' \
+    '--debug[Include safe classified dataset diagnostics]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:environment:_files -g "*.json"'
+    '*:datasetPathOrId:'
 }
 
-_postman_environment_delete() {
+_postman_dataset_create() {
   _arguments \
-    '(-y --yes)'{-y,--yes}'[Delete without asking for confirmation first]' \
-    '--verbose[Verbose output]' \
-    '--json[JSON output]' \
+    '(-n --name)'{-n,--name}'[Human-readable name for the dataset]:name' \
+    '(-d --description)'{-d,--description}'[Optional description]:desc' \
+    '--dataset-id[Override the generated dataset id (local only; defaults to a random v4 UUID)]:uuid' \
+    '--force[Overwrite an existing file at <path>]' \
+    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID (create a cloud dataset)]:id' \
+    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:environment:_files -g "*.json"'
+    '*:path:_files -g "*.json"'
 }
 
-_postman_environment_var() {
+_postman_dataset_delete() {
+  _arguments \
+    '(-y --yes)'{-y,--yes}'[Skip the confirmation prompt]' \
+    '--keep-resources[Preserve the local resource directory even when it is empty (local only)]' \
+    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:datasetPathOrId:'
+}
+
+_postman_dataset_source() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_environment_var_commands' \
+    '1: :_postman_dataset_source_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        set) _postman_environment_var_set ;;
-        get) _postman_environment_var_get ;;
-        unset) _postman_environment_var_unset ;;
+        list) _postman_dataset_source_list ;;
+        add) _postman_dataset_source_add ;;
+        remove) _postman_dataset_source_remove ;;
+        update) _postman_dataset_source_update ;;
+        test) _postman_dataset_source_test ;;
       esac
       ;;
   esac
 }
 
-_postman_environment_var_commands() {
+_postman_dataset_source_commands() {
   local -a sub
   sub=(
-    'set:Set one variable in an environment, or link it to a shared-vault secret.'
-    'get:Read one variable value from an environment.'
-    'unset:Remove one variable from an environment.'
+    'list:List the datasources defined on a dataset (local YAML path or cloud id).'
+    'add:Add a datasource to a dataset.'
+    'remove:Remove a datasource from a dataset (local YAML path or cloud id).'
+    'update:Update fields on an existing datasource. Only the flags you provide are changed.'
+    'test:Open and close a real connection using a source'\''s stored configuration.'
   )
-  _describe -t commands 'var command' sub
+  _describe -t commands 'source command' sub
 }
 
-_postman_environment_var_set() {
+_postman_dataset_source_list() {
   _arguments \
-    '(-e --environment)'{-e,--environment}'[Cloud Environment ID or local environment file path.]:environment:_files -g "*.json"' \
-    '--secret-id[Link this variable to a shared-vault secret instead of an inline value (from `secret create`'\''s output).]:id' \
-    '--vault-id[Vault id for --secret-id (auto-resolved from --workspace when omitted).]:id' \
-    '(-w --workspace)'{-w,--workspace}'[Workspace to resolve --vault-id from when --secret-id is given without --vault-id (falls back to .postman/resources.yaml).]:workspaceId' \
-    '--verbose[Verbose output]' \
-    '--json[JSON output]' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:value:'
+    '(-d --dataset)'{-d,--dataset}'[Dataset whose sources to list — a local .dataset.yaml path or a cloud dataset id]:datasetPathOrId' \
+    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Output sources as JSON instead of a table]' \
+    '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_environment_var_get() {
+_postman_dataset_source_add() {
   _arguments \
-    '(-e --environment)'{-e,--environment}'[Cloud Environment ID or local environment file path.]:environment:_files -g "*.json"' \
-    '--verbose[Verbose output]' \
-    '--json[JSON output]' \
+    '(-d --dataset)'{-d,--dataset}'[Dataset to add the source to; positional target is also accepted for v1.45 compatibility]:datasetPathOrId' \
+    '(-n --name)'{-n,--name}'[Logical name for the source (becomes the SQL table name when it loads a file or a database --table). Required for every source except a spreadsheet, whose worksheets are each named source_<worksheet>]:name' \
+    '--source-id[Override the generated source id (local dataset only)]:uuid' \
+    '--format[Use this format instead of extension/type inference; file contents are not sniffed. A spreadsheet (xlsx/xls/ods) is added as one source per worksheet, each named source_<worksheet>]:csv|json|xlsx|xls|ods|jdbc|mysql|postgres|sqlserver' \
+    '--type[Source kind; local is inferred from --file, jdbc from --driver-jar]:local|mysql|postgresql|sqlserver|jdbc' \
+    '--file[Path to a local CSV/JSON/spreadsheet file (absolute or cwd-relative)]:path:_files -g "*.json"' \
+    '--ref-only[Reference the file in place; do NOT copy into data_dir (local dataset)]' \
+    '--force[When copying, overwrite an existing file at the destination (local dataset)]' \
+    '--upload[Cloud dataset only\: upload --file as a postmancloudfile source (runs via /exec). Without --upload, --file is registered as a local_filesystem source read by the local engine. Either way a cloud dataset takes csv/json only — add a spreadsheet to a local .dataset.yaml, where each worksheet becomes its own source.]' \
+    '--driver-jar[JDBC driver JAR(s). Repeatable, or pass several after one flag]:path...:_files -g "*.json"' \
+    '--driver-class[Driver class. Auto-resolved when the JAR contains exactly one]:fqcn' \
+    '--driver-name[Label for this driver type (defaults to the JAR filename)]:label' \
+    '--url-template[JDBC URL with {{placeholders}}, e.g. jdbc\:postgresql\://{{host}}\:{{port}}/{{database}}]:template' \
+    '--var[Value for a {{placeholder}}. Repeatable. Use vault\:<vaultId>/<secretId> for a secret. WARNING\: a literal value is visible in `ps` output and shell history, and is stored in clear text in the dataset YAML (local) or sent in the request body (cloud). Prefer a Shared Vault reference.]:name=value...' \
+    '--prop[Driver connection property. Repeatable. Same vault\: syntax as --var]:name=value...' \
+    '--vars-file[JSON object of --var values; "-" reads stdin. Supports {"$vaultId"\:..,"$secretId"\:..} objects, and keeps secrets out of argv entirely]:path:_files -g "*.json"' \
+    '--from-source[Reuse another source'\''s driver JAR, class and URL template]:name' \
+    '--java-path[Java runtime to use. Machine-local only - never written to the dataset. Also read from POSTMAN_JDBC_JAVA_PATH]:path:_files -g "*.json"' \
+    '--no-test[Skip the pre-write connection test. Note that resolving the driver class still starts a JVM — on a machine with no Java, pass --driver-class (or --from-source) too]' \
+    '--ssh-target-host-variable[Template variable holding the tunnelled host (inferred when omitted)]:name' \
+    '--ssh-target-port-variable[Template variable holding the tunnelled port (inferred when omitted)]:name' \
+    '--json[Emit the result as JSON instead of prose]' \
+    '--host[DB host (mysql/postgresql/sqlserver)]:host' \
+    '--port[DB port (defaults to 1433 for sqlserver)]:port' \
+    '--user[DB user. WARNING\: a literal value is visible in `ps` output and shell history, and is stored in clear text in the dataset YAML (local) or sent in the request body (cloud). Prefer a Shared Vault reference.]:user' \
+    '--password[DB password. WARNING\: a literal value is visible in `ps` output and shell history, and is stored in clear text in the dataset YAML (local) or sent in the request body (cloud). Prefer a Shared Vault reference.]:password' \
+    '--database[DB database name]:db' \
+    '--table[DB table to load (required for sqlserver). Leave it out to connect to the whole database; query it with `dataset query -s <source>` or `dataset view create -s <source>`]:table' \
+    '--ssh-host[SSH bastion host]:host' \
+    '--ssh-port[SSH bastion port]:port' \
+    '--ssh-user[SSH bastion user]:user' \
+    '--ssh-private-key[Path to the SSH private key. WARNING\: the path is visible in `ps` output and shell history; key contents are read locally at execution time and are not stored in the dataset config.]:filepath:_files -g "*.(pem|crt|key)"' \
+    '--ssh-host-key[SSH bastion public host key]:publicKey' \
+    '--ssh-host-key-vault-id[Shared Vault ID containing the SSH public host key]:id' \
+    '--ssh-host-key-secret-id[Shared Vault secret ID containing the SSH public host key]:id' \
+    '--ssh-insecure-skip-host-key-verification[WARNING\: disable SSH host-key verification; use only for trusted local testing]' \
+    '--schema[DB schema (postgresql/sqlserver; defaults to dbo for sqlserver)]:schema' \
+    '--encrypt[SQL Server TLS encryption (default\: true)]:true|false' \
+    '--trust-server-certificate[SQL Server\: skip certificate verification (default\: false; insecure)]:true|false' \
+    '--tls-certificate[SQL Server CA/server certificate file path]:path:_files -g "*.(pem|crt|key)"' \
+    '--host-name-in-certificate[SQL Server certificate hostname override]:hostname' \
+    '--tls-min-version[SQL Server minimum TLS version (default\: 1.2)]:1.2|1.3' \
+    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:key:_files -g "*.json"'
+    '*:datasetPathOrId:'
 }
 
-_postman_environment_var_unset() {
+_postman_dataset_source_remove() {
   _arguments \
-    '(-e --environment)'{-e,--environment}'[Cloud Environment ID or local environment file path.]:environment:_files -g "*.json"' \
-    '--verbose[Verbose output]' \
-    '--json[JSON output]' \
+    '(-d --dataset)'{-d,--dataset}'[Dataset the source belongs to — a local .dataset.yaml path or a cloud dataset id]:datasetPathOrId' \
+    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:key:_files -g "*.json"'
+    '*:sourceNameOrId:'
 }
 
-_postman_environment_lint() {
+_postman_dataset_source_update() {
   _arguments \
-    '(-f --fail-severity)'{-f,--fail-severity}'[Exit with failure if diagnostics at this level or above are present. \[choices\: "error", "warning"\] (default\: "error")]:value' \
-    '(-o --output)'{-o,--output}'[Output format\: cli (human-readable), table, json, or csv. (default\: "cli")]:value' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:path:_files -g "*.json"'
-}
-
-_postman_globals() {
-  local context state state_descr line
-  typeset -A opt_args
-  _arguments -C \
+    '(-d --dataset)'{-d,--dataset}'[Dataset the source belongs to — a local .dataset.yaml path or a cloud dataset id]:datasetPathOrId' \
+    '(-n --name)'{-n,--name}'[Rename the source]:name' \
+    '--format[Change the format (local dataset only; cloud source formats are immutable). A spreadsheet format is not offered here\: this command changes the format field alone and cannot pin a worksheet, so the source would not compile. Add the workbook with `dataset source add` instead, which makes one worksheet-pinned source per sheet]:csv|json|jdbc|mysql|postgres|sqlserver' \
+    '--file[Replace the source file (local dataset only; cloud file replacement is unsupported)]:path:_files -g "*.json"' \
+    '--ref-only[With --file, reference in place instead of copying (local dataset only)]' \
+    '--force[With --file, overwrite the copied destination (local dataset only)]' \
+    '--driver-jar[Replace the JDBC driver JAR(s)]:path...:_files -g "*.json"' \
+    '--driver-class[Replace the JDBC driver class]:fqcn' \
+    '--driver-name[Rename the JDBC driver type label]:label' \
+    '--url-template[Replace the JDBC URL template]:template' \
+    '--var[Set a JDBC template variable. Merges onto the existing values. Use vault\:<vaultId>/<secretId> for a secret. WARNING\: a literal value is visible in `ps` output and shell history, and is stored in clear text in the dataset YAML (local) or sent in the request body (cloud). Prefer a Shared Vault reference.]:name=value...' \
+    '--prop[Set a JDBC connection property. Merges, same vault\: syntax]:name=value...' \
+    '--unset-var[Remove a JDBC template variable. Merging alone can never remove a key]:name...' \
+    '--unset-prop[Remove a JDBC connection property]:name...' \
+    '--vars-file[JSON object of --var values; "-" reads stdin]:path:_files -g "*.json"' \
+    '--ssh-target-host-variable[Template variable holding the tunnelled host (JDBC)]:name' \
+    '--ssh-target-port-variable[Template variable holding the tunnelled port (JDBC)]:name' \
+    '--java-path[Java runtime for JDBC operations. Machine-local only]:path:_files -g "*.json"' \
+    '--host[Update DB host (mysql/postgresql/sqlserver)]:host' \
+    '--port[Update DB port]:port' \
+    '--user[Update DB user. WARNING\: a literal value is visible in `ps` output and shell history, and is stored in clear text in the dataset YAML (local) or sent in the request body (cloud). Prefer a Shared Vault reference.]:user' \
+    '--password[Update DB password. WARNING\: a literal value is visible in `ps` output and shell history, and is stored in clear text in the dataset YAML (local) or sent in the request body (cloud). Prefer a Shared Vault reference.]:password' \
+    '--database[Update DB database name]:db' \
+    '--table[Update the DB table to load. A source without a table connects to the whole database; query it with `dataset query -s <source>` or `dataset view create -s <source>`]:table' \
+    '--ssh-host[Update SSH bastion host]:host' \
+    '--ssh-port[Update SSH bastion port]:port' \
+    '--ssh-user[Update SSH bastion user]:user' \
+    '--ssh-private-key[Update the SSH private-key file path. WARNING\: the path is visible in `ps` output and shell history; key contents are read locally and are not stored in the dataset config.]:filepath:_files -g "*.(pem|crt|key)"' \
+    '--ssh-host-key[Update the SSH bastion public host key]:publicKey' \
+    '--ssh-host-key-vault-id[Update the Shared Vault ID containing the SSH public host key]:id' \
+    '--ssh-host-key-secret-id[Update the Shared Vault secret ID containing the SSH public host key]:id' \
+    '--ssh-insecure-skip-host-key-verification[WARNING\: disable SSH host-key verification; use only for trusted local testing]' \
+    '--schema[Update DB schema (postgresql/sqlserver)]:schema' \
+    '--encrypt[Update SQL Server TLS encryption]:true|false' \
+    '--trust-server-certificate[Update SQL Server certificate verification (true is insecure)]:true|false' \
+    '--tls-certificate[Update SQL Server CA/server certificate file path]:path:_files -g "*.(pem|crt|key)"' \
+    '--host-name-in-certificate[Update SQL Server certificate hostname override]:hostname' \
+    '--tls-min-version[Update SQL Server minimum TLS version]:1.2|1.3' \
+    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Emit the result as JSON instead of prose]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_globals_commands' \
-    '*::arg:->args'
-  case $state in
-    args)
-      case $words[1] in
-        get) _postman_globals_get ;;
-        var) _postman_globals_var ;;
-        lint) _postman_globals_lint ;;
-      esac
-      ;;
-  esac
-}
-
-_postman_globals_commands() {
-  local -a sub
-  sub=(
-    'get:Read local workspace globals from the default file, or cloud globals with --workspace.'
-    'var:Read and update variables in the workspace globals singleton.'
-    'lint:Run linting on a local Postman globals file at the given file or directory path.'
-  )
-  _describe -t commands 'globals command' sub
+    '*:sourceNameOrId:'
 }
 
-_postman_globals_get() {
+_postman_dataset_source_test() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Workspace ID to read globals from.]:workspaceId' \
-    '--workspace-path[Local Postman workspace path. Defaults to the current directory.]:path:_files -g "*.json"' \
-    '--verbose[Verbose output]' \
-    '--json[JSON output]' \
+    '(-d --dataset)'{-d,--dataset}'[Dataset the source belongs to — a local .dataset.yaml path or a cloud dataset id]:datasetPathOrId' \
+    '(-n --name)'{-n,--name}'[Source to test]:name' \
+    '--java-path[Java runtime to use for a JDBC source. Machine-local only; also read from POSTMAN_JDBC_JAVA_PATH]:path:_files -g "*.json"' \
+    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Emit the result as JSON instead of prose]' \
     '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_globals_var() {
+_postman_dataset_view() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_globals_var_commands' \
+    '1: :_postman_dataset_view_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        set) _postman_globals_var_set ;;
-        get) _postman_globals_var_get ;;
-        unset) _postman_globals_var_unset ;;
+        list) _postman_dataset_view_list ;;
+        run) _postman_dataset_view_run ;;
+        create) _postman_dataset_view_create ;;
+        delete) _postman_dataset_view_delete ;;
+        update) _postman_dataset_view_update ;;
       esac
       ;;
   esac
 }
 
-_postman_globals_var_commands() {
+_postman_dataset_view_commands() {
   local -a sub
   sub=(
-    'set:Set one variable in local workspace globals, or link it to a shared-vault secret.'
-    'get:Read one variable from local workspace globals, or cloud globals with --workspace.'
-    'unset:Remove one variable from local workspace globals, or cloud globals with --workspace.'
+    'list:List the saved views defined on a dataset (local YAML path or cloud id).'
+    'run:Execute a saved view against a dataset and print the rows.'
+    'create:Add a saved view to a dataset (local YAML path or cloud id).'
+    'delete:Remove a saved view from a dataset (local YAML path or cloud id).'
+    'update:Update name and/or query on an existing view (local YAML path or cloud id).'
   )
-  _describe -t commands 'var command' sub
+  _describe -t commands 'view command' sub
 }
 
-_postman_globals_var_set() {
+_postman_dataset_view_list() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Workspace ID whose cloud globals should be updated.]:workspaceId' \
-    '--secret-id[Link this variable to a shared-vault secret instead of an inline value (from `secret create`'\''s output).]:id' \
-    '--vault-id[Vault id for --secret-id (auto-resolved from --workspace when omitted).]:id' \
-    '--workspace-path[Local Postman workspace path. Defaults to the current directory.]:path:_files -g "*.json"' \
-    '--verbose[Verbose output]' \
-    '--json[JSON output]' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:value:'
+    '(-d --dataset)'{-d,--dataset}'[Dataset whose views to list — a local .dataset.yaml path or a cloud dataset id]:datasetPathOrId' \
+    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Output views as JSON instead of a table]' \
+    '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_globals_var_get() {
+_postman_dataset_view_run() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Workspace ID whose cloud globals should be read.]:workspaceId' \
-    '--workspace-path[Local Postman workspace path. Defaults to the current directory.]:path:_files -g "*.json"' \
-    '--verbose[Verbose output]' \
-    '--json[JSON output]' \
+    '(-d --dataset)'{-d,--dataset}'[Dataset the view belongs to — a local .dataset.yaml path or a cloud dataset id]:datasetPathOrId' \
+    '(-p --param)'{-p,--param}'[Bind values to $1, $2, ... in order; pass multiple values after -p or repeat -p]:value...' \
+    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Output rows as JSON instead of a table]' \
+    '--debug[Include safe classified dataset diagnostics]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:key:_files -g "*.json"'
+    '*:viewNameOrId:'
 }
 
-_postman_globals_var_unset() {
+_postman_dataset_view_create() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Workspace ID whose cloud globals should be updated.]:workspaceId' \
-    '--workspace-path[Local Postman workspace path. Defaults to the current directory.]:path:_files -g "*.json"' \
-    '--verbose[Verbose output]' \
-    '--json[JSON output]' \
+    '(-d --dataset)'{-d,--dataset}'[Dataset to add the view to — a local .dataset.yaml path or a cloud dataset id]:datasetPathOrId' \
+    '(-n --name)'{-n,--name}'[View name]:name' \
+    '(-q --query)'{-q,--query}'[SQL query the view executes]:sql' \
+    '(-s --source)'{-s,--source}'[Bind the view to one datasource and run the query natively against it, instead of through the federated SQLite layer. Same reference `dataset query -s` takes]:nameOrIdOrSlug' \
+    '--view-id[Override the generated view id (local only; cloud assigns its own)]:uuid' \
+    '--json[Emit the result as JSON instead of prose]' \
+    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '(-h --help)'{-h,--help}'[display help for command]'
+}
+
+_postman_dataset_view_delete() {
+  _arguments \
+    '(-d --dataset)'{-d,--dataset}'[Dataset the view belongs to — a local .dataset.yaml path or a cloud dataset id]:datasetPathOrId' \
+    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:key:_files -g "*.json"'
+    '*:viewNameOrId:'
 }
 
-_postman_globals_lint() {
+_postman_dataset_view_update() {
   _arguments \
-    '(-f --fail-severity)'{-f,--fail-severity}'[Exit with failure if diagnostics at this level or above are present. \[choices\: "error", "warning"\] (default\: "error")]:value' \
-    '(-o --output)'{-o,--output}'[Output format\: cli (human-readable), table, json, or csv. (default\: "cli")]:value' \
+    '(-d --dataset)'{-d,--dataset}'[Dataset the view belongs to — a local .dataset.yaml path or a cloud dataset id]:datasetPathOrId' \
+    '(-n --name)'{-n,--name}'[New view name]:name' \
+    '(-q --query)'{-q,--query}'[New SQL query]:sql' \
+    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:path:_files -g "*.json"'
+    '*:viewNameOrId:'
 }
 
-_postman_api() {
+_postman_dataset_jdbc() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_api_commands' \
+    '1: :_postman_dataset_jdbc_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        lint) _postman_api_lint ;;
-        publish) _postman_api_publish ;;
+        inspect) _postman_dataset_jdbc_inspect ;;
       esac
       ;;
   esac
 }
 
-_postman_api_commands() {
+_postman_dataset_jdbc_commands() {
   local -a sub
   sub=(
-    'lint:Run linting on the schema of the given API ID or local file in the given path. If \[api\] is not provided we will run the linting on the schema present in the .postman config file'
-    'publish:Publish a version of an API for the given apiId. All entities added to the API will be published by default. User can choose which entities to publish by using additional options.'
+    'inspect:Detect Java, list driver classes, suggest a URL template and read driver properties.'
   )
-  _describe -t commands 'api command' sub
+  _describe -t commands 'jdbc command' sub
 }
 
-_postman_api_lint() {
-  _arguments \
-    '--integration-id[Specify the integration ID for the report.]:integration-id' \
-    '(-f --fail-severity)'{-f,--fail-severity}'[Results of this level or above will trigger a failure exit code. \[choices\: "error", "warn", "info", "hint"\] (default\: "ERROR")]:value' \
-    '(-x --suppress-exit-code)'{-x,--suppress-exit-code}'[Specify whether or not to override the default exit code for the current run]' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:api:'
-}
-
-_postman_api_publish() {
+_postman_dataset_jdbc_inspect() {
   _arguments \
-    '--name[Specify the name of the version to publish.]:name' \
-    '--release-notes[Specify release notes for the version to publish.]:releaseNotes' \
-    '--collections[Specify the collections to publish. If API is connected to a repository, provide file path instead of IDs.]:collectionIds/paths...:_files -g "*.json"' \
-    '--api-definition[Specify the API Definition to publish. If API is connected to a repository, provide schema root file path. Note that some repository connections utilize a schema directory path; for such APIs, provide schema directory path instead of file path.]:apiDefinitionId/directory/file' \
-    '--do-not-poll[Specify whether or not to poll for completion status of the publish action.]' \
-    '(-x --suppress-exit-code)'{-x,--suppress-exit-code}'[Specify whether or not to override the default exit code for the current run.]' \
+    '--driver-class[Introspect this class instead of auto-selecting]:fqcn' \
+    '--url-template[Use this URL template instead of the one inferred from the JAR filename]:template' \
+    '--java-path[Java runtime to use. Machine-local only — never written to a dataset. Also read from POSTMAN_JDBC_JAVA_PATH.]:path:_files -g "*.json"' \
+    '--json[Emit the discovery result as JSON]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:apiId:'
+    '*:jar...:'
 }
 
-_postman_runner() {
+_postman_environment() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_runner_commands' \
+    '1: :_postman_environment_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        start) _postman_runner_start ;;
-        list) _postman_runner_list ;;
-        regions) _postman_runner_regions ;;
+        new) _postman_environment_new ;;
+        list) _postman_environment_list ;;
+        get) _postman_environment_get ;;
+        delete) _postman_environment_delete ;;
+        var) _postman_environment_var ;;
+        lint) _postman_environment_lint ;;
       esac
       ;;
   esac
 }
 
-_postman_runner_commands() {
+_postman_environment_commands() {
   local -a sub
   sub=(
-    'start:Start a self-hosted runner in your own network.'
-    'list:List the team'\''s registered self-hosted runners.'
-    'regions:List the region and private-runner values valid for monitor create/update --runner, with the static IP Postman runs each one from, where your team has access to it.'
+    'new:Scaffold a local environment file, or create one in a Postman workspace with --workspace.'
+    'list:List environments in a Postman workspace.'
+    'get:Read an environment by ID or local environment file path.'
+    'delete:Delete an environment by ID or local environment file path. Prompts unless --yes is passed.'
+    'var:Read and update environment variables.'
+    'lint:Run linting on a local Postman environment at the given file or directory path.'
   )
-  _describe -t commands 'runner command' sub
+  _describe -t commands 'environment command' sub
 }
 
-_postman_runner_start() {
+_postman_environment_new() {
   _arguments \
-    '--id[The ID of the runner to execute]:id' \
-    '--key[The secret key for the runner]:key:_files -g "*.(pem|crt|key)"' \
-    '--region[Region this runner reports to -- use "eu" for the EU region]:region' \
-    '--proxy[External proxy URL, for example http\://proxy.com or http\://proxy.com\:8080]:url' \
-    '--egress-proxy[Enable built-in egress proxy]' \
-    '--egress-proxy-authz-url[Custom egress proxy authorization service base URL]:url' \
-    '--ssl-extra-ca-certs[Additional trusted CA certificates (PEM file, can contain multiple certs)]:path:_files -g "*.(pem|crt|key)"' \
-    '--dataset-jdbc-driver-dir[Folder on this machine holding the JDBC driver .jar files you put there. Required to run a dataset that uses a JDBC source. Drivers are loaded only from this folder and matched by file name; driver paths saved in the dataset are ignored]:path:_files -/' \
-    '--metrics[Enable the metrics server for health checks]' \
-    '--metrics-port[Port for the metrics server (default\: "9090")]:port' \
-    '--report-events[Dispatch run events to the API Catalog and Application Inventory ingestion pipelines (on by default)]' \
-    '--no-report-events[Do not dispatch run events to the API Catalog and Application Inventory ingestion pipelines]' \
-    '(-h --help)'{-h,--help}'[display help for command]'
+    '(-w --workspace)'{-w,--workspace}'[Create the environment in a cloud Postman workspace instead of scaffolding it locally. Required when the current directory is not a local Postman workspace.]:workspaceId' \
+    '--force[Overwrite an existing local environment file.]' \
+    '--verbose[Verbose output]' \
+    '--json[JSON output]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:name:'
 }
 
-_postman_runner_list() {
+_postman_environment_list() {
   _arguments \
-    '--api-key[Postman API key (defaults to POSTMAN_API_KEY, then the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '(-w --workspace)'{-w,--workspace}'[Filter to runners in this workspace]:id' \
-    '--json[Output the runner list as JSON instead of a table]' \
-    '(-h --help)'{-h,--help}'[display help for command]'
+    '(-w --workspace)'{-w,--workspace}'[Workspace ID to list environments from.]:workspaceId' \
+    '(-f --filter)'{-f,--filter}'[Filter environments by name.]:name' \
+    '--verbose[Verbose output]' \
+    '--json[JSON output]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:workspacePath:'
 }
 
-_postman_runner_regions() {
+_postman_environment_get() {
   _arguments \
-    '--api-key[Postman API key (defaults to POSTMAN_API_KEY, then the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '--json[Output the region list as JSON instead of a table]' \
-    '(-h --help)'{-h,--help}'[display help for command]'
+    '--verbose[Verbose output]' \
+    '--json[JSON output]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:environment:_files -g "*.json"'
 }
 
-_postman_spec() {
+_postman_environment_delete() {
+  _arguments \
+    '(-y --yes)'{-y,--yes}'[Delete without asking for confirmation first]' \
+    '--verbose[Verbose output]' \
+    '--json[JSON output]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:environment:_files -g "*.json"'
+}
+
+_postman_environment_var() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_spec_commands' \
+    '1: :_postman_environment_var_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        lint) _postman_spec_lint ;;
-        ai-readiness) _postman_spec_ai_readiness ;;
-        list) _postman_spec_list ;;
-        get) _postman_spec_get ;;
-        file) _postman_spec_file ;;
-        create) _postman_spec_create ;;
-        generate) _postman_spec_generate ;;
-        sync) _postman_spec_sync ;;
-        delete) _postman_spec_delete ;;
+        set) _postman_environment_var_set ;;
+        get) _postman_environment_var_get ;;
+        unset) _postman_environment_var_unset ;;
       esac
       ;;
   esac
 }
 
-_postman_spec_commands() {
+_postman_environment_var_commands() {
   local -a sub
   sub=(
-    'lint:Run linting on the given specification by ID or local file path.'
-    'ai-readiness:Score an OpenAPI specification for AI readiness by ID or local file path.'
-    'list:List local spec files under a path, or (no path) a workspace'\''s cloud specs.'
-    'get:Read a spec definition, including every file of a multi-file spec.'
-    'file:Get, add, update, or remove files in a spec (cloud ID or local directory).'
-    'create:Create a new spec in a workspace, or (with path) scaffold a local spec file.'
-    'generate:Generate artifacts from a specification.'
-    'sync:Sync a generated collection with its source specification.'
-    'delete:Delete a spec by its cloud ID or local file path. Cannot be undone.'
+    'set:Set one variable in an environment, or link it to a shared-vault secret.'
+    'get:Read one variable value from an environment.'
+    'unset:Remove one variable from an environment.'
   )
-  _describe -t commands 'spec command' sub
+  _describe -t commands 'var command' sub
 }
 
-_postman_spec_lint() {
+_postman_environment_var_set() {
   _arguments \
-    '(-f --fail-severity)'{-f,--fail-severity}'[Results of this level or above will trigger a failure exit code. \[choices\: "error", "warning", "info", "hint"\] (default\: "ERROR")]:value' \
-    '(-o --output)'{-o,--output}'[Output format for the results. \[choices\: "json", "csv"\]]:value' \
-    '--workspace-id[The workspace ID to use for fetching governance rulesets.]:value' \
-    '--report-events[Dispatch events to the API Catalog and Application Inventory ingestion pipelines (on by default)]' \
-    '--no-report-events[Do not dispatch events to the API Catalog and Application Inventory ingestion pipelines]' \
+    '(-e --environment)'{-e,--environment}'[Cloud Environment ID or local environment file path.]:environment:_files -g "*.json"' \
+    '--secret-id[Link this variable to a shared-vault secret instead of an inline value (from `secret create`'\''s output).]:id' \
+    '--vault-id[Vault id for --secret-id (auto-resolved from --workspace when omitted).]:id' \
+    '(-w --workspace)'{-w,--workspace}'[Workspace to resolve --vault-id from when --secret-id is given without --vault-id (falls back to .postman/resources.yaml).]:workspaceId' \
+    '--verbose[Verbose output]' \
+    '--json[JSON output]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:spec:'
+    '*:value:'
 }
 
-_postman_spec_ai_readiness() {
+_postman_environment_var_get() {
   _arguments \
-    '(-o --output)'{-o,--output}'[Output format for the results. \[choices\: "cli", "json", "html"\]]:value' \
-    '--export[Write the report to this file instead of stdout. A directory receives the report under a name derived from the specification. Requires --output html.]:path:_files -g "*.json"' \
-    '--min-score[Exit with a non-zero code if the overall score is below this threshold (0-100).]:n' \
+    '(-e --environment)'{-e,--environment}'[Cloud Environment ID or local environment file path.]:environment:_files -g "*.json"' \
+    '--verbose[Verbose output]' \
+    '--json[JSON output]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:spec:'
+    '*:key:_files -g "*.json"'
 }
 
-_postman_spec_list() {
+_postman_environment_var_unset() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Workspace ID (defaults to .postman/resources.yaml binding)]:id' \
-    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
-    '--json[Output as JSON]' \
+    '(-e --environment)'{-e,--environment}'[Cloud Environment ID or local environment file path.]:environment:_files -g "*.json"' \
+    '--verbose[Verbose output]' \
+    '--json[JSON output]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:pathOrDir:_files -g "*.json"'
+    '*:key:_files -g "*.json"'
 }
 
-_postman_spec_get() {
+_postman_environment_lint() {
   _arguments \
-    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
-    '--json[Output as JSON (full spec definition)]' \
+    '(-f --fail-severity)'{-f,--fail-severity}'[Exit with failure if diagnostics at this level or above are present. \[choices\: "error", "warning"\] (default\: "error")]:value' \
+    '(-o --output)'{-o,--output}'[Output format\: cli (human-readable), table, json, or csv. (default\: "cli")]:value' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:spec...:'
+    '*:path:_files -g "*.json"'
 }
 
-_postman_spec_file() {
+_postman_flows() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_spec_file_commands' \
+    '1: :_postman_flows_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        get) _postman_spec_file_get ;;
-        add) _postman_spec_file_add ;;
-        update) _postman_spec_file_update ;;
-        rm) _postman_spec_file_rm ;;
+        list) _postman_flows_list ;;
+        trigger) _postman_flows_trigger ;;
+        deploy) _postman_flows_deploy ;;
+        run) _postman_flows_run ;;
+        update) _postman_flows_update ;;
+        delete) _postman_flows_delete ;;
+        list-runs) _postman_flows_list_runs ;;
+        get-run) _postman_flows_get_run ;;
       esac
       ;;
   esac
 }
 
-_postman_spec_file_commands() {
+_postman_flows_commands() {
   local -a sub
   sub=(
-    'get:Show a file in a spec\: its path, size and content.'
-    'add:Add a new file to a spec.'
-    'update:Update an existing file in a spec.'
-    'rm:Remove a file from a spec.'
+    'list:List all flows'
+    'trigger:Trigger a deployed flow'
+    'deploy:Deploy a flow (required to trigger it)'
+    'run:Run a single flow from a file (e.g. ./path/to/flow.json)'
+    'update:Update settings for a deployed flow'
+    'delete:Delete a flow. A flow id deletes the cloud flow; a local flow file path deletes that file only. Prompts for confirmation unless --yes is passed.'
+    'list-runs:List run history for a deployed flow'
+    'get-run:Analyze a specific flow run'
   )
-  _describe -t commands 'file command' sub
+  _describe -t commands 'flows command' sub
 }
 
-_postman_spec_file_get() {
+_postman_flows_list() {
   _arguments \
-    '--json[Output as JSON]' \
-    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:filePath:_files -g "*.json"'
+    '(-w --workspace)'{-w,--workspace}'[Specify the workspace ID to list flows from]:workspaceId' \
+    '(-p --paginate)'{-p,--paginate}'[Paginates the list of flows]' \
+    '(-f --filter)'{-f,--filter}'[Filter flows by name. Pattern may be a regex, or a name prefix.]:pattern' \
+    '(-s --sort)'{-s,--sort}'[Sort flows by criteria\: "name" or "updated" (default\: updated) (default\: "updated")]:criteria' \
+    '--verbose[Verbose output]' \
+    '--debug[Debug output]' \
+    '--json[JSON output]' \
+    '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_spec_file_add() {
+_postman_flows_trigger() {
   _arguments \
-    '(-c --content)'{-c,--content}'[File content (reads from stdin if omitted)]:content' \
-    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
+    '(-i --input)'{-i,--input}'[Set key=value pairs in the trigger payload (e.g. --input foo=bar --input baz=qux) (default\: \[\])]:key=value:_files -g "*.(pem|crt|key)"' \
+    '(-f --input-file)'{-f,--input-file}'[Set payload values from JSON files (e.g. --input-file ./inputs.json --input-file ./config.json) (default\: \[\])]:path.json:_files -g "*.json"' \
+    '(-q --query)'{-q,--query}'[Set query parameters as key=value pairs (e.g. --query foo=bar --query baz=qux) (default\: \[\])]:key=value:_files -g "*.(pem|crt|key)"' \
+    '--headers[Set custom headers as key=value pairs (e.g. --headers X-API-Key=12345 --headers User-Agent=MyApp) (default\: \[\])]:key=value:_files -g "*.(pem|crt|key)"' \
+    '(-n --dry-run)'{-n,--dry-run}'[Show the flow requestURL and payload that would be sent without making the actual request (default\: false)]' \
+    '--show-secrets[Show actual authentication tokens in dry-run output (otherwise secrets are masked) (default\: false)]' \
+    '(-r --result)'{-r,--result}'[Show only the response body (default\: false)]' \
+    '(-s --scenario)'{-s,--scenario}'[Use a named scenario from the flow definition to construct the input payload, headers, and query parameters (overridden by --headers/--query)]:name' \
+    '--verbose[Verbose output]' \
+    '--debug[Debug output]' \
+    '--json[JSON output]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:filePath:_files -g "*.json"'
+    '*:flowId:'
 }
 
-_postman_spec_file_update() {
+_postman_flows_deploy() {
   _arguments \
-    '(-c --content)'{-c,--content}'[New file content (reads from stdin if omitted)]:content' \
-    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
+    '(-p --path)'{-p,--path}'[Specify the URL path for the trigger]:path:_files -g "*.json"' \
+    '(-t --timeout)'{-t,--timeout}'[Specify the HTTP session timeout (5000ms to 60000ms) (default\: "10000ms")]:timeout' \
+    '(-a --auth)'{-a,--auth}'[Enable authentication for the trigger (default\: false)]' \
+    '--verbose[Verbose output]' \
+    '--debug[Debug output]' \
+    '--json[JSON output]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:filePath:_files -g "*.json"'
+    '*:flowId:'
 }
 
-_postman_spec_file_rm() {
+_postman_flows_run() {
   _arguments \
-    '(-y --yes)'{-y,--yes}'[Skip confirmation prompt]' \
-    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:filePath:_files -g "*.json"'
-}
-
-_postman_spec_create() {
-  _arguments \
-    '(-n --name)'{-n,--name}'[Specification name / title]:name' \
-    '(-t --type)'{-t,--type}'[Spec type\: openapi, asyncapi, graphql, protobuf, smithy (default\: openapi) (default\: "openapi")]:type' \
-    '--spec-version[Spec version (e.g. 3.1 for openapi, 3 for protobuf)]:ver' \
-    '(-f --format)'{-f,--format}'[File format\: yaml or json (openapi/asyncapi only, default\: yaml) (default\: "yaml")]:fmt' \
-    '(-w --workspace)'{-w,--workspace}'[Workspace ID (cloud create, defaults to .postman/resources.yaml)]:id' \
-    '--force[Overwrite an existing local file]' \
-    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
+    '(-i --input)'{-i,--input}'[Set flow inputs as key=value pairs (e.g. --input foo=bar --input baz=qux) (default\: \[\])]:key=value:_files -g "*.(pem|crt|key)"' \
+    '(-f --input-file)'{-f,--input-file}'[Set flow inputs from JSON files (e.g. --input-file ./inputs.json --input-file ./config.json) (default\: \[\])]:path.json:_files -g "*.json"' \
+    '(-s --scenario)'{-s,--scenario}'[Use a pre-built scenario as flow inputs (by scenario name). Can be combined with --input and --input-file to override values.]:name' \
+    '--iteration-data-dataset[\[BETA\] Run the flow once per row of a dataset view. Accepts a local .dataset.yaml path or a cloud dataset id (cloud requires login). Requires --iteration-data-view. Dataset columns feed the flow inputs (see --map-column).]:pathOrId:_files -g "*.(json|csv)"' \
+    '--iteration-data-view[\[BETA\] Name or id of the view (within --iteration-data-dataset) whose rows drive the run.]:nameOrId' \
+    '(-m --map-column)'{-m,--map-column}'[\[BETA\] Bind a flow input to a dataset column (e.g. -m isActive=active). Repeatable. Inputs whose name matches a column bind automatically. (default\: \[\])]:input=column' \
+    '(-e --environment)'{-e,--environment}'[Specify a path to a Postman Environment file (JSON or YAML)]:path:_files -g "*.json"' \
+    '--working-dir[Specify the path to the working directory]:path:_files -/' \
+    '--no-insecure-file-read[Prevent reading dataset files situated outside of the working directory (applies to --iteration-data-dataset)]' \
+    '--verbose[Show detailed information of flow run and each request (method, URL, assertions)]' \
+    '--no-truncate[Show full output without truncating long values]' \
+    '--output[Save execution result to a file (supported\: json)]:format' \
+    '--reporters[Save a test results report to a file (supported\: html)]:format' \
+    '(-x --suppress-exit-code)'{-x,--suppress-exit-code}'[Specify whether or not to override the default exit code for the current run]' \
+    '--workspace[Workspace ID required for flows that contain connector blocks. Find it in the Postman app URL\: https\://postman.com/workspace/<workspaceId>]:workspaceId' \
+    '--report-events[Dispatch events to the API Catalog and Application Inventory ingestion pipelines (on by default)]' \
+    '--no-report-events[Do not dispatch events to the API Catalog and Application Inventory ingestion pipelines]' \
+    '--verbose[Verbose output]' \
+    '--debug[Debug output]' \
+    '--json[JSON output]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
     '*:path:_files -g "*.json"'
 }
 
-_postman_spec_generate() {
+_postman_flows_update() {
+  _arguments \
+    '(-t --trigger)'{-t,--trigger}'[Enable or disable the flow trigger]:on|off' \
+    '(-a --auth)'{-a,--auth}'[Enable or disable authentication for the flow trigger]:on|off' \
+    '--verbose[Verbose output]' \
+    '--debug[Debug output]' \
+    '--json[JSON output]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:flowId:'
+}
+
+_postman_flows_delete() {
+  _arguments \
+    '(-y --yes)'{-y,--yes}'[Skip the confirmation prompt]' \
+    '--verbose[Verbose output]' \
+    '--debug[Debug output]' \
+    '--json[JSON output]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:flowIdOrPath:'
+}
+
+_postman_flows_list_runs() {
+  _arguments \
+    '(-w --workspace)'{-w,--workspace}'[Specify the workspace ID]:workspaceId' \
+    '(-f --flow)'{-f,--flow}'[Filter sessions by flow ID]:flowId' \
+    '(-r --range)'{-r,--range}'[Time range to list runs (e.g. 30m, 2h, 3d) (default\: "1h")]:range' \
+    '--verbose[Verbose output]' \
+    '--debug[Debug output]' \
+    '--json[JSON output]' \
+    '(-h --help)'{-h,--help}'[display help for command]'
+}
+
+_postman_flows_get_run() {
+  _arguments \
+    '(-r --run-id)'{-r,--run-id}'[Specify the run ID to analyze]:runId' \
+    '(-l --logs)'{-l,--logs}'[Show detailed event log (default\: false)]' \
+    '--filter[Filter event log by block ID prefix (can be specified multiple times) (default\: \[\])]:blockId' \
+    '--verbose[Verbose output]' \
+    '--debug[Debug output]' \
+    '--json[JSON output]' \
+    '(-h --help)'{-h,--help}'[display help for command]'
+}
+
+_postman_globals() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_spec_generate_commands' \
+    '1: :_postman_globals_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        collection) _postman_spec_generate_collection ;;
+        get) _postman_globals_get ;;
+        var) _postman_globals_var ;;
+        lint) _postman_globals_lint ;;
       esac
       ;;
   esac
 }
 
-_postman_spec_generate_commands() {
+_postman_globals_commands() {
   local -a sub
   sub=(
-    'collection:Generate a Postman collection from a specification.'
+    'get:Read local workspace globals from the default file, or cloud globals with --workspace.'
+    'var:Read and update variables in the workspace globals singleton.'
+    'lint:Run linting on a local Postman globals file at the given file or directory path.'
   )
-  _describe -t commands 'generate command' sub
+  _describe -t commands 'globals command' sub
 }
 
-_postman_spec_generate_collection() {
+_postman_globals_get() {
   _arguments \
-    '(-n --name)'{-n,--name}'[Collection name]:name' \
-    '--folder-strategy[Folder strategy\: Paths or Tags (default\: Paths) (default\: "Paths")]:strategy' \
-    '(-w --workspace)'{-w,--workspace}'[Workspace ID (cloud mode)]:id' \
-    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
-    '--force[Overwrite the collection if one with this name already exists (local mode)]' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:spec:'
+    '(-w --workspace)'{-w,--workspace}'[Workspace ID to read globals from.]:workspaceId' \
+    '--workspace-path[Local Postman workspace path. Defaults to the current directory.]:path:_files -g "*.json"' \
+    '--verbose[Verbose output]' \
+    '--json[JSON output]' \
+    '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_spec_sync() {
+_postman_globals_var() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_spec_sync_commands' \
+    '1: :_postman_globals_var_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        collection) _postman_spec_sync_collection ;;
+        set) _postman_globals_var_set ;;
+        get) _postman_globals_var_get ;;
+        unset) _postman_globals_var_unset ;;
       esac
       ;;
   esac
 }
 
-_postman_spec_sync_commands() {
+_postman_globals_var_commands() {
   local -a sub
   sub=(
-    'collection:Sync a collection from a linked specification (local path or cloud UUID).'
+    'set:Set one variable in local workspace globals, or link it to a shared-vault secret.'
+    'get:Read one variable from local workspace globals, or cloud globals with --workspace.'
+    'unset:Remove one variable from local workspace globals, or cloud globals with --workspace.'
   )
-  _describe -t commands 'sync command' sub
+  _describe -t commands 'var command' sub
 }
 
-_postman_spec_sync_collection() {
+_postman_globals_var_set() {
   _arguments \
-    '--collection-id[Collection ID to sync (required for cloud mode)]:id' \
-    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
-    '--force[Overwrite hand-written scripts that the spec would otherwise drop]' \
+    '(-w --workspace)'{-w,--workspace}'[Workspace ID whose cloud globals should be updated.]:workspaceId' \
+    '--secret-id[Link this variable to a shared-vault secret instead of an inline value (from `secret create`'\''s output).]:id' \
+    '--vault-id[Vault id for --secret-id (auto-resolved from --workspace when omitted).]:id' \
+    '--workspace-path[Local Postman workspace path. Defaults to the current directory.]:path:_files -g "*.json"' \
+    '--verbose[Verbose output]' \
+    '--json[JSON output]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:spec:'
+    '*:value:'
 }
 
-_postman_spec_delete() {
+_postman_globals_var_get() {
   _arguments \
-    '(-y --yes)'{-y,--yes}'[Delete without asking for confirmation first]' \
-    '--api-key[Postman API key, used with a cloud ID (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '(-w --workspace)'{-w,--workspace}'[Workspace ID whose cloud globals should be read.]:workspaceId' \
+    '--workspace-path[Local Postman workspace path. Defaults to the current directory.]:path:_files -g "*.json"' \
+    '--verbose[Verbose output]' \
+    '--json[JSON output]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:spec:'
+    '*:key:_files -g "*.json"'
 }
 
-_postman_monitor() {
+_postman_globals_var_unset() {
+  _arguments \
+    '(-w --workspace)'{-w,--workspace}'[Workspace ID whose cloud globals should be updated.]:workspaceId' \
+    '--workspace-path[Local Postman workspace path. Defaults to the current directory.]:path:_files -g "*.json"' \
+    '--verbose[Verbose output]' \
+    '--json[JSON output]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:key:_files -g "*.json"'
+}
+
+_postman_globals_lint() {
+  _arguments \
+    '(-f --fail-severity)'{-f,--fail-severity}'[Exit with failure if diagnostics at this level or above are present. \[choices\: "error", "warning"\] (default\: "error")]:value' \
+    '(-o --output)'{-o,--output}'[Output format\: cli (human-readable), table, json, or csv. (default\: "cli")]:value' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:path:_files -g "*.json"'
+}
+
+_postman_mock() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_monitor_commands' \
+    '1: :_postman_mock_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        run) _postman_monitor_run ;;
-        create) _postman_monitor_create ;;
-        update) _postman_monitor_update ;;
-        delete) _postman_monitor_delete ;;
-        jobs) _postman_monitor_jobs ;;
-        runs) _postman_monitor_runs ;;
-        list) _postman_monitor_list ;;
-        get) _postman_monitor_get ;;
-        metrics) _postman_monitor_metrics ;;
-        pause) _postman_monitor_pause ;;
-        resume) _postman_monitor_resume ;;
+        generate) _postman_mock_generate ;;
+        run) _postman_mock_run ;;
+        push) _postman_mock_push ;;
+        deploy) _postman_mock_deploy ;;
+        get) _postman_mock_get ;;
+        list) _postman_mock_list ;;
+        log) _postman_mock_log ;;
+        delete) _postman_mock_delete ;;
       esac
       ;;
   esac
 }
 
-_postman_monitor_commands() {
+_postman_mock_commands() {
   local -a sub
   sub=(
-    'run:Invoke a monitor run and display results.'
-    'create:Create a collection-based monitor.'
-    'update:Update a monitor'\''s schedule, runner, notifications, request selection or run options.'
-    'delete:Permanently delete a monitor. Prompts for confirmation unless --yes is passed.'
-    'jobs:Inspect a monitor'\''s jobs and their per-region runs.'
-    'runs:Inspect a monitor run'\''s attempts.'
-    'list:List the monitors visible to you.'
-    'get:Show a monitor'\''s configuration.'
-    'metrics:Show per-request latency and outcome history for a monitor.'
-    'pause:Pause a monitor, so it stops firing on schedule.'
-    'resume:Resume a paused monitor, so it fires on schedule again.'
+    'generate:Generate a mock from a Postman collection or an OpenAPI file, or from a built-in sample shopping-cart mock (POST /cart/items, GET /cart, POST /checkout). Writes a local mock by default, or a cloud mock with --workspace.'
+    'run:Start a mock using its path if it lives in your repository, or its id if it lives in Postman cloud (fetched and run locally).'
+    'push:Upload a mock from your repository to Postman cloud (creates it the first time, updates it after).'
+    'deploy:Turn a mock in Postman cloud into a live mock server others can call over the internet.'
+    'get:Show a mock'\''s details using its path if it lives in your repository, or its id if it lives in Postman cloud.'
+    'list:List the mocks in your repository or Postman cloud workspace'
+    'log:Show the requests a live mock server has received and the responses it sent, using its id.'
+    'delete:Delete a mock using its path if it lives in your repository, or its id if it lives in Postman cloud. Cannot be undone.'
   )
-  _describe -t commands 'monitor command' sub
+  _describe -t commands 'mock command' sub
 }
 
-_postman_monitor_run() {
+_postman_mock_generate() {
   _arguments \
-    '--api-key[Postman API key (defaults to POSTMAN_API_KEY, then the `postman login` session, then a guest session)]:key:_files -g "*.(pem|crt|key)"' \
-    '(-x --suppress-exit-code)'{-x,--suppress-exit-code}'[Specify whether or not to override the default exit code for the current run]' \
-    '(-t --timeout)'{-t,--timeout}'[Maximum wait time for run completion in milliseconds (default\: 15 minutes) (default\: 900000)]:ms' \
-    '--async[Submit the run and return immediately with its job id and Postman URL, without waiting for completion]' \
-    '--json[Output the run'\''s verdict as JSON instead of a table, printing nothing else]' \
+    '(-o --output)'{-o,--output}'[Folder to save the mock in. Relative or absolute, e.g. ./postman/mocks/orders. Defaults to postman/mocks/<name>.]:dir:_files -g "*.json"' \
+    '(-n --name)'{-n,--name}'[Name for the mock. Taken from the source when you provide one; required for the sample.]:name' \
+    '--port[Port the mock runs on (e.g. 4010) (default\: 4500)]:port' \
+    '--stateful[Generate pm.state-backed CRUD handlers (create/read/list/update/delete) instead of static example responses. Endpoints that are not CRUD-shaped stay static. Applies to collection or spec sources.]' \
+    '--force[Overwrite the mock'\''s files if the target folder already has one]' \
+    '(-u --update)'{-u,--update}'[Update an existing mock from the source instead of creating a new one. Path to the mock, relative or absolute, e.g. ./postman/mocks/orders. Cannot be used with --output.]:mockPath:_files -g "*.json"' \
+    '(-w --workspace)'{-w,--workspace}'[Save the mock to this Postman cloud workspace (by id) instead of your repository. Cannot be used with --output, --force, or --update.]:id' \
+    '--api-key[Postman API key to use with --workspace (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '(-x --suppress-exit-code)'{-x,--suppress-exit-code}'[Always exit with code 0, even on failure]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:monitorId:'
+    '*:sourcePath:'
 }
 
-_postman_monitor_create() {
+_postman_mock_run() {
   _arguments \
-    '(-c --collection)'{-c,--collection}'[Collection to monitor -- accepts the id shown in the Postman app, prefixed or bare]:id' \
-    '--name[Monitor name (defaults to the linked collection'\''s own name)]:name' \
-    '(-e --environment)'{-e,--environment}'[Environment to run the monitored collection with]:id' \
-    '(-w --workspace)'{-w,--workspace}'[Workspace to create the monitor in (defaults to the workspace named in the local .postman/resources.yaml manifest; required if neither is available)]:id' \
-    '--schedule[Cron expression for the monitor'\''s schedule]:cron' \
-    '--timezone[Time zone for --schedule, for example America/New_York (defaults to the host machine'\''s own zone)]:tz' \
-    '--runner[A Postman region name (see `postman runner regions`) or the id of a self-hosted runner created in Postman (list existing ones with `postman runner list`) to run from (repeatable) (default\: \[\])]:value' \
-    '(-i --item)'{-i,--item}'[Id of a request or folder in the collection to run, in the order given (repeatable; ids only, not names or paths; defaults to every request; list ids with `postman collection get <collection-id> --json`) (default\: \[\])]:id' \
-    '--notify-email[Email to notify on a run failure or error (repeatable) (default\: \[\])]:email' \
-    '--notification-limit[Consecutive failure notifications to send before muting them]:n' \
-    '--retry[Times to retry a failed run]:n' \
-    '--timeout[Request timeout in milliseconds]:ms' \
-    '--delay[Delay between requests in milliseconds]:ms' \
-    '--strict-ssl[Fail the run when the target'\''s TLS certificate cannot be verified]' \
-    '--insecure[Skip TLS certificate verification for the monitored target]' \
-    '--follow-redirects[Follow HTTP redirects during the run]' \
-    '--block-redirects[Do not follow HTTP redirects during the run]' \
-    '--dataset-id[Dataset to use as iteration data (used together with --dataset-view-id)]:id' \
-    '--dataset-view-id[Dataset view to iterate (used together with --dataset-id)]:id' \
-    '--iteration-count[Number of iterations to run]:n' \
-    '--iteration-strategy[How iteration data is consumed, for example round_robin, repeat_last or stop_at_end (requires --iteration-count, --dataset-id and --dataset-view-id)]:strategy' \
-    '--no-run-now[Do not trigger an immediate run after creating the monitor]' \
-    '--api-key[Postman API key (defaults to POSTMAN_API_KEY, then the `postman login` session, then a guest session)]:key:_files -g "*.(pem|crt|key)"' \
-    '--json[Output as JSON instead of a table]' \
-    '(-h --help)'{-h,--help}'[display help for command]'
+    '(-e --environment)'{-e,--environment}'[Path to a file of environment variables for the mock. Relative or absolute, e.g. ./postman/environments/dev.environment.yaml]:path:_files -g "*.json"' \
+    '(-g --globals)'{-g,--globals}'[Path to a file of global variables for the mock. Relative or absolute, e.g. ./globals.json]:path:_files -g "*.json"' \
+    '(-p --port)'{-p,--port}'[Port to run on (e.g. 4010), or "auto" for a free one. Defaults to the mock'\''s configured port.]:port' \
+    '--api-key[Postman API key, used with a Postman cloud id (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '(-w --workspace)'{-w,--workspace}'[Workspace that owns the run, for recording its start history. Auto-resolved for a Postman cloud id; required to record history for a path.]:id' \
+    '--no-history[Do not record this run in the mock'\''s start history.]' \
+    '--output[Live output format\: auto (default, human-readable logs) or ndjson (one JSON event per line on stdout, ending with a "summary" event — for CI or other non-interactive use) (default\: "auto")]:format' \
+    '--dataset[Pass --dataset multiple times to load several .dataset.yaml files (or directories containing them). Each is made available to the mock'\''s handlers as pm.datasets(<id>). (default\: \[\])]:pathOrDir:_files -g "*.json"' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:mockIdOrPath:_files -g "*.json"'
 }
 
-_postman_monitor_update() {
+_postman_mock_push() {
+  _arguments \
+    '(-w --workspace)'{-w,--workspace}'[Postman cloud workspace to upload to, by id (defaults to the workspace already linked to this project)]:id' \
+    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:mockPath:_files -g "*.json"'
+}
+
+_postman_mock_deploy() {
+  _arguments \
+    '(-w --workspace)'{-w,--workspace}'[Postman cloud workspace that will own the server, by id (defaults to the workspace already linked to this project)]:id' \
+    '(-n --name)'{-n,--name}'[Name for the mock server (you are asked for one if you skip this)]:name' \
+    '(-s --slug)'{-s,--slug}'[Short label used in the server'\''s web address, e.g. "my-mock" (you are asked for one if you skip this)]:slug' \
+    '--public[Let anyone with the link reach the server. Private by default (callers must send a Postman API key).]' \
+    '--auto-deploy[Update the live server automatically whenever the mock changes (off by default)]' \
+    '(-y --yes)'{-y,--yes}'[Use the defaults and skip all questions (private, no auto-deploy)]' \
+    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:mockId:_files -g "*.json"'
+}
+
+_postman_mock_get() {
+  _arguments \
+    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Print the details as machine-readable data instead of a table]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:mockIdOrPath:_files -g "*.json"'
+}
+
+_postman_mock_list() {
+  _arguments \
+    '(-w --workspace)'{-w,--workspace}'[Postman cloud workspace whose mocks to list, by id (defaults to the workspace already linked to this project)]:id' \
+    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Print the list as machine-readable data instead of a table]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:pathOrDir:_files -g "*.json"'
+}
+
+_postman_mock_log() {
+  _arguments \
+    '--limit[Most entries to show (defaults to 50 when printing machine-readable output)]:n' \
+    '--method[Show only requests of this type (e.g. GET, POST)]:method' \
+    '--status[Show only these response codes (e.g. 404, or 5xx for any 500-series)]:code|range' \
+    '--path[Show only requests to matching addresses (use * and ? as wildcards, e.g. /users/*)]:pattern' \
+    '--since[Show entries from this long ago until now (e.g. 2h = the last 2 hours)]:duration' \
+    '--until[Hide entries newer than this (e.g. 30m = skip the most recent 30 minutes)]:duration' \
+    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Print entries as machine-readable data instead of the scrollable view]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:mockServerId:_files -g "*.json"'
+}
+
+_postman_mock_delete() {
+  _arguments \
+    '(-y --yes)'{-y,--yes}'[Delete without asking for confirmation first]' \
+    '--api-key[Postman API key, used with a Postman cloud id (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:mockIdOrPath:_files -g "*.json"'
+}
+
+_postman_monitor() {
+  local context state state_descr line
+  typeset -A opt_args
+  _arguments -C \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '1: :_postman_monitor_commands' \
+    '*::arg:->args'
+  case $state in
+    args)
+      case $words[1] in
+        run) _postman_monitor_run ;;
+        create) _postman_monitor_create ;;
+        update) _postman_monitor_update ;;
+        delete) _postman_monitor_delete ;;
+        jobs) _postman_monitor_jobs ;;
+        runs) _postman_monitor_runs ;;
+        list) _postman_monitor_list ;;
+        get) _postman_monitor_get ;;
+        metrics) _postman_monitor_metrics ;;
+        pause) _postman_monitor_pause ;;
+        resume) _postman_monitor_resume ;;
+      esac
+      ;;
+  esac
+}
+
+_postman_monitor_commands() {
+  local -a sub
+  sub=(
+    'run:Invoke a monitor run and display results.'
+    'create:Create a collection-based monitor.'
+    'update:Update a monitor'\''s schedule, runner, notifications, request selection or run options.'
+    'delete:Permanently delete a monitor. Prompts for confirmation unless --yes is passed.'
+    'jobs:Inspect a monitor'\''s jobs and their per-region runs.'
+    'runs:Inspect a monitor run'\''s attempts.'
+    'list:List the monitors visible to you.'
+    'get:Show a monitor'\''s configuration.'
+    'metrics:Show per-request latency and outcome history for a monitor.'
+    'pause:Pause a monitor, so it stops firing on schedule.'
+    'resume:Resume a paused monitor, so it fires on schedule again.'
+  )
+  _describe -t commands 'monitor command' sub
+}
+
+_postman_monitor_run() {
+  _arguments \
+    '--api-key[Postman API key (defaults to POSTMAN_API_KEY, then the `postman login` session, then a guest session)]:key:_files -g "*.(pem|crt|key)"' \
+    '(-x --suppress-exit-code)'{-x,--suppress-exit-code}'[Specify whether or not to override the default exit code for the current run]' \
+    '(-t --timeout)'{-t,--timeout}'[Maximum wait time for run completion in milliseconds (default\: 15 minutes) (default\: 900000)]:ms' \
+    '--async[Submit the run and return immediately with its job id and Postman URL, without waiting for completion]' \
+    '--json[Output the run'\''s verdict as JSON instead of a table, printing nothing else]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:monitorId:'
+}
+
+_postman_monitor_create() {
+  _arguments \
+    '(-c --collection)'{-c,--collection}'[Collection to monitor -- accepts the id shown in the Postman app, prefixed or bare]:id' \
+    '--name[Monitor name (defaults to the linked collection'\''s own name)]:name' \
+    '(-e --environment)'{-e,--environment}'[Environment to run the monitored collection with]:id' \
+    '(-w --workspace)'{-w,--workspace}'[Workspace to create the monitor in (defaults to the workspace named in the local .postman/resources.yaml manifest; required if neither is available)]:id' \
+    '--schedule[Cron expression for the monitor'\''s schedule]:cron' \
+    '--timezone[Time zone for --schedule, for example America/New_York (defaults to the host machine'\''s own zone)]:tz' \
+    '--runner[A Postman region name (see `postman runner regions`) or the id of a self-hosted runner created in Postman (list existing ones with `postman runner list`) to run from (repeatable) (default\: \[\])]:value' \
+    '(-i --item)'{-i,--item}'[Id of a request or folder in the collection to run, in the order given (repeatable; ids only, not names or paths; defaults to every request; list ids with `postman collection get <collection-id> --json`) (default\: \[\])]:id' \
+    '--notify-email[Email to notify on a run failure or error (repeatable) (default\: \[\])]:email' \
+    '--notification-limit[Consecutive failure notifications to send before muting them]:n' \
+    '--retry[Times to retry a failed run]:n' \
+    '--timeout[Request timeout in milliseconds]:ms' \
+    '--delay[Delay between requests in milliseconds]:ms' \
+    '--strict-ssl[Fail the run when the target'\''s TLS certificate cannot be verified]' \
+    '--insecure[Skip TLS certificate verification for the monitored target]' \
+    '--follow-redirects[Follow HTTP redirects during the run]' \
+    '--block-redirects[Do not follow HTTP redirects during the run]' \
+    '--dataset-id[Dataset to use as iteration data (used together with --dataset-view-id)]:id' \
+    '--dataset-view-id[Dataset view to iterate (used together with --dataset-id)]:id' \
+    '--iteration-count[Number of iterations to run]:n' \
+    '--iteration-strategy[How iteration data is consumed, for example round_robin, repeat_last or stop_at_end (requires --iteration-count, --dataset-id and --dataset-view-id)]:strategy' \
+    '--no-run-now[Do not trigger an immediate run after creating the monitor]' \
+    '--api-key[Postman API key (defaults to POSTMAN_API_KEY, then the `postman login` session, then a guest session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Output as JSON instead of a table]' \
+    '(-h --help)'{-h,--help}'[display help for command]'
+}
+
+_postman_monitor_update() {
   _arguments \
     '--name[New monitor name]:name' \
     '--schedule[New cron expression for the monitor'\''s schedule]:cron' \
@@ -1555,924 +1798,769 @@ _postman_monitor_resume() {
     '*:monitorId:'
 }
 
-_postman_workspace() {
+_postman_request() {
+  _arguments \
+    '(-H --header)'{-H,--header}'[Add HTTP header in key\:value format. Can be used multiple times. Example\: -H "Content-Type\:application/json" -H "X-API-Key\:abc123" (default\: \[\])]:header' \
+    '(-d --body)'{-d,--body}'[Request body content. Supports\: inline string, @filepath for file content, or "-" for stdin. Example\: --body '\''{"name"\:"John"}'\'' or --body @data.json]:body' \
+    '(-f --form)'{-f,--form}'[Add multipart/form-data field in key=value format. Can be used multiple times. For file uploads use key=@filepath. Example\: -f "name=John" -f "avatar=@photo.jpg" (default\: \[\])]:field' \
+    '(-e --environment)'{-e,--environment}'[Load Postman Environment by UUID or file path. Variables in URL, headers, and body will be resolved. Example\: -e dev.postman_environment.json]:path:_files -g "*.json"' \
+    '--timeout[Request timeout in milliseconds. Request will fail if no response within this time. (default\: 300000)]:n' \
+    '--redirects-ignore[Prevents Postman CLI from automatically following 3XX redirect responses. By default, redirects are followed.]' \
+    '--redirects-max[Maximum number of redirects to follow. Default is unlimited. Useful for preventing redirect loops.]:n' \
+    '--redirects-follow-method[Preserves the original HTTP method when following redirects. By default, redirects are followed with GET method.]' \
+    '--redirects-remove-referrer[Removes the Referer header when following redirects. By default, Referer header is sent with redirects.]' \
+    '(-k --insecure)'{-k,--insecure}'[Disable SSL certificate verification.]' \
+    '--ssl-client-cert-list[Specify the path to client certificate configurations (JSON).]:path:_files -g "*.(pem|crt|key)"' \
+    '--ssl-client-cert[Specify the path to a client certificate (PEM).]:path:_files -g "*.(pem|crt|key)"' \
+    '--ssl-client-key[Specify the path to a client certificate private key.]:path:_files -g "*.(pem|crt|key)"' \
+    '--ssl-client-passphrase[Specify the client certificate passphrase (for protected key).]:passphrase' \
+    '--ssl-extra-ca-certs[Specify additional trusted CA certificates (PEM).]:path:_files -g "*.(pem|crt|key)"' \
+    '--cookie-jar[Specify the path to a custom cookie jar (serialized tough-cookie JSON).]:path:_files -g "*.json"' \
+    '--export-cookie-jar[Export the cookie jar to a file after completing the request.]:path:_files -g "*.json"' \
+    '--retry[Number of retry attempts for failed requests (4xx, 5xx, network errors). Useful for flaky endpoints or rate-limited APIs. (default\: 0)]:n' \
+    '--retry-delay[Delay between retry attempts in milliseconds. (default\: 1000)]:ms' \
+    '--script-pre-request[Add JavaScript script to run before the request. Can be inline JS or @filepath to load from file. Scripts have access to pm.* APIs. Example\: --script-pre-request "pm.environment.set('\''timestamp'\'', Date.now());" or --script-pre-request @setup.js]:script' \
+    '--script-post-request[Add JavaScript script to run after the request. Can be inline JS or @filepath to load from file. Scripts have access to pm.* APIs. Example\: --script-post-request "console.log(pm.response.json());" or --script-post-request @validate.js]:script' \
+    '--dataset[\[BETA\] Pass --dataset multiple times to load several .dataset.yaml files (or directories containing them). Each is made available to pre/post-request scripts as pm.datasets(<id>). (default\: \[\])]:pathOrDir:_files -g "*.json"' \
+    '(-o --output)'{-o,--output}'[Save complete response to JSON file.Useful for debugging or further processing.]:path:_files -g "*.json"' \
+    '--verbose[Show detailed request and response information including headers, body, and metadata.]' \
+    '--response-only[suppress all output except response body. Useful for piping to other commands.]' \
+    '--debug[Debug mode\: show detailed execution information including retry attempts, redirects, and timing breakdowns.]' \
+    '--report-events[Dispatch events to the API Catalog and Application Inventory ingestion pipelines (on by default)]' \
+    '--no-report-events[Do not dispatch events to the API Catalog and Application Inventory ingestion pipelines]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '--auth-basic-username[Supply authentication parameters dynamically.]:value' \
+    '--auth-basic-password[Supply authentication parameters dynamically.]:value' \
+    '--auth-bearer-token[Supply authentication parameters dynamically.]:value' \
+    '--auth-digest-username[Supply authentication parameters dynamically.]:value' \
+    '--auth-digest-password[Supply authentication parameters dynamically.]:value' \
+    '--auth-oauth1-consumerKey[Supply authentication parameters dynamically.]:value' \
+    '--auth-oauth1-consumerSecret[Supply authentication parameters dynamically.]:value' \
+    '--auth-oauth1-token[Supply authentication parameters dynamically.]:value' \
+    '--auth-oauth1-tokenSecret[Supply authentication parameters dynamically.]:value' \
+    '--auth-oauth2-accessToken[Supply authentication parameters dynamically.]:value' \
+    '--auth-oauth2-tokenType[Supply authentication parameters dynamically.]:value' \
+    '--auth-hawk-authId[Supply authentication parameters dynamically.]:value' \
+    '--auth-hawk-authKey[Supply authentication parameters dynamically.]:value' \
+    '--auth-hawk-algorithm[Supply authentication parameters dynamically.]:value' \
+    '--auth-aws-accessKey[Supply authentication parameters dynamically.]:value' \
+    '--auth-aws-secretKey[Supply authentication parameters dynamically.]:value' \
+    '--auth-aws-region[Supply authentication parameters dynamically.]:value' \
+    '--auth-aws-service[Supply authentication parameters dynamically.]:value' \
+    '--auth-aws-sessionToken[Supply authentication parameters dynamically.]:value' \
+    '--auth-ntlm-username[Supply authentication parameters dynamically.]:value' \
+    '--auth-ntlm-password[Supply authentication parameters dynamically.]:value' \
+    '--auth-ntlm-domain[Supply authentication parameters dynamically.]:value' \
+    '--auth-ntlm-workstation[Supply authentication parameters dynamically.]:value' \
+    '--auth-apikey-key[Supply authentication parameters dynamically.]:value' \
+    '--auth-apikey-value[Supply authentication parameters dynamically.]:value' \
+    '--auth-apikey-in[Supply authentication parameters dynamically.]:value' \
+    '*:URL:'
+}
+
+_postman_runner() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_workspace_commands' \
+    '1: :_postman_runner_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        list) _postman_workspace_list ;;
-        prepare) _postman_workspace_prepare ;;
-        push) _postman_workspace_push ;;
-        lint) _postman_workspace_lint ;;
-        get) _postman_workspace_get ;;
-        create) _postman_workspace_create ;;
-        delete) _postman_workspace_delete ;;
-        pull) _postman_workspace_pull ;;
-        connect-git) _postman_workspace_connect_git ;;
-        disconnect-git) _postman_workspace_disconnect_git ;;
-        diff) _postman_workspace_diff ;;
+        start) _postman_runner_start ;;
+        list) _postman_runner_list ;;
+        regions) _postman_runner_regions ;;
       esac
       ;;
   esac
 }
 
-_postman_workspace_commands() {
+_postman_runner_commands() {
   local -a sub
   sub=(
-    'list:List all available Postman Workspaces'
-    'prepare:Prepare local collections and environments for push by validating and regenerating IDs if needed.'
-    'push:Push local workspace entities (collections, environments, specifications, mocks and more) to Postman workspace.'
-    'lint:Lint the current local Postman workspace\: its configuration (.postman/resources.yaml) plus every discovered entity. Use --meta to lint only the configuration.'
-    'get:Read a workspace'\''s metadata, and optionally the ids of what it holds.'
-    'create:Create a Postman workspace and bind it to this git repository.'
-    'delete:Permanently delete a workspace and everything in it. Prompts for confirmation unless --yes is passed.'
-    'pull:Pull workspace entities from a Postman workspace into the local git-native folder.'
-    'connect-git:Connect a Postman workspace to a local git repository.'
-    'disconnect-git:Disconnect a Postman workspace from its local git repository.'
-    'diff:Preview local-vs-cloud drift before pushing. Read-only\: nothing is created, updated or deleted.'
+    'start:Start a self-hosted runner in your own network.'
+    'list:List the team'\''s registered self-hosted runners.'
+    'regions:List the region and private-runner values valid for monitor create/update --runner, with the static IP Postman runs each one from, where your team has access to it.'
   )
-  _describe -t commands 'workspace command' sub
-}
-
-_postman_workspace_list() {
-  _arguments \
-    '(-f --filter)'{-f,--filter}'[Filter workspaces by name.]:name' \
-    '(-t --type)'{-t,--type}'[Filter workspaces by visibility type\: team, public, private, personal.]:type' \
-    '--cursor[Fetch the page of workspaces that follows this cursor.]:cursor' \
-    '--verbose[Verbose output]' \
-    '--debug[Debug output]' \
-    '--json[JSON output]' \
-    '(-h --help)'{-h,--help}'[display help for command]'
+  _describe -t commands 'runner command' sub
 }
 
-_postman_workspace_prepare() {
+_postman_runner_start() {
   _arguments \
-    '--verbose[Show detailed logging]' \
-    '--json[Print the outcome as machine-readable JSON.]' \
-    '(-h --help)'{-h,--help}'[display help for command]'
+    '--id[The ID of the runner to execute]:id' \
+    '--key[The secret key for the runner]:key:_files -g "*.(pem|crt|key)"' \
+    '--region[Region this runner reports to -- use "eu" for the EU region]:region' \
+    '--proxy[External proxy URL, for example http\://proxy.com or http\://proxy.com\:8080]:url' \
+    '--egress-proxy[Enable built-in egress proxy]' \
+    '--egress-proxy-authz-url[Custom egress proxy authorization service base URL]:url' \
+    '--ssl-extra-ca-certs[Additional trusted CA certificates (PEM file, can contain multiple certs)]:path:_files -g "*.(pem|crt|key)"' \
+    '--dataset-jdbc-driver-dir[Folder on this machine holding the JDBC driver .jar files you put there. Required to run a dataset that uses a JDBC source. Drivers are loaded only from this folder and matched by file name; driver paths saved in the dataset are ignored]:path:_files -/' \
+    '--metrics[Enable the metrics server for health checks]' \
+    '--metrics-port[Port for the metrics server (default\: "9090")]:port' \
+    '--report-events[Dispatch run events to the API Catalog and Application Inventory ingestion pipelines (on by default)]' \
+    '--no-report-events[Do not dispatch run events to the API Catalog and Application Inventory ingestion pipelines]' \
+    '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_workspace_push() {
+_postman_runner_list() {
   _arguments \
-    '--no-prepare[Skip ID validation and auto-fix before pushing]' \
-    '(-y --yes)'{-y,--yes}'[Skip all confirmation prompts]' \
-    '--push-strategy[Push strategy. "force-sync"\: mirror the whole workspace — also DELETE cloud entities that have no local counterpart (destructive). Defaults to "default" (create/update only).]:strategy' \
-    '--json[Print the outcome as machine-readable JSON. Implies non-interactive\: use --yes to actually push.]' \
-    '--verbose[Show detailed logging]' \
-    '--report-events[Dispatch events to the API Catalog and Application Inventory ingestion pipelines (on by default)]' \
-    '--no-report-events[Do not dispatch events to the API Catalog and Application Inventory ingestion pipelines]' \
+    '--api-key[Postman API key (defaults to POSTMAN_API_KEY, then the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '(-w --workspace)'{-w,--workspace}'[Filter to runners in this workspace]:id' \
+    '--json[Output the runner list as JSON instead of a table]' \
     '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_workspace_lint() {
+_postman_runner_regions() {
   _arguments \
-    '(-f --fail-severity)'{-f,--fail-severity}'[Exit with failure if diagnostics at this level or above are present. \[choices\: "error", "warning", "info", "hint"\] (default\: "error")]:value' \
-    '(-o --output)'{-o,--output}'[Output format\: cli (human-readable), table, or json. (default\: "cli")]:value' \
-    '--meta[Only lint the workspace configuration (.postman/resources.yaml); skip per-entity linting.]' \
-    '--workspace-id[The workspace ID to use for fetching governance rulesets. Defaults to the id in .postman/resources.yaml.]:value' \
-    '--fix[Apply safe autofixes to repairable workspace lint issues.]' \
+    '--api-key[Postman API key (defaults to POSTMAN_API_KEY, then the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Output the region list as JSON instead of a table]' \
     '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_workspace_get() {
-  _arguments \
-    '--elements[Also report the resources the workspace holds.]' \
-    '--json[Print the workspace as machine-readable JSON.]' \
-    '--timeout[Milliseconds to wait for the API (default 30000).]:ms' \
+_postman_sdk() {
+  local context state state_descr line
+  typeset -A opt_args
+  _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:id:'
+    '1: :_postman_sdk_commands' \
+    '*::arg:->args'
+  case $state in
+    args)
+      case $words[1] in
+        init) _postman_sdk_init ;;
+        generate|build) _postman_sdk_generate ;;
+        track) _postman_sdk_track ;;
+        list|ls) _postman_sdk_list ;;
+        fetch|get) _postman_sdk_fetch ;;
+        connect) _postman_sdk_connect ;;
+        connections) _postman_sdk_connections ;;
+      esac
+      ;;
+  esac
 }
 
-_postman_workspace_create() {
+_postman_sdk_commands() {
+  local -a sub
+  sub=(
+    'init:Create or update .postman/config.json with an SDK configuration stub.'
+    'generate:Generate a new SDK from a Postman collection or specification (OpenAPI or AsyncAPI).'
+    'build:Alias for generate'
+    'track:Enable change tracking for a generated SDK. Adds file hashes to .manifest.json so that the next `sdk generate` can detect your edits and preserve them via 3-way merge.'
+    'list:List SDK builds for a collection, extensible collection, or specification.'
+    'ls:Alias for list'
+    'fetch:Download SDKs from a build by its ID.'
+    'get:Alias for fetch'
+    'connect:Connect a collection or specification to a GitHub repository for automatic SDK pull requests'
+    'connections:Manage GitHub connections that drive automatic SDK pull requests'
+  )
+  _describe -t commands 'sdk command' sub
+}
+
+_postman_sdk_init() {
   _arguments \
-    '--visibility[Required. One of\: personal, private, team, public, partner.]:status' \
-    '--name[Workspace name (defaults to owner/repo from the git remote)]:name' \
-    '--summary[Optional workspace summary]:text' \
-    '--team-id[The team inside your organisation the workspace belongs to. Required for a team workspace when your organisation has teams inside it. Find it with `postman team list`.]:id' \
-    '--team-role[What a team or public workspace grants\: view or edit. Applies to the team named by --team-id, or to your whole organisation when none is named. Defaults to your team'\''s configured default.]:level' \
-    '--path[Directory to bind (defaults to the current directory)]:dir:_files -g "*.json"' \
-    '--no-connect[Create the workspace without binding it to the repository]' \
-    '--force[Create even when a workspace is already recorded for this repo]' \
-    '--json[Print the created workspace as machine-readable JSON.]' \
+    '(-y --yes)'{-y,--yes}'[Skip prompts and overwrite existing sdk config]' \
     '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_workspace_delete() {
+_postman_sdk_generate() {
   _arguments \
-    '(-y --yes)'{-y,--yes}'[Skip the confirmation prompt]' \
-    '--json[Print the outcome as machine-readable JSON]' \
-    '--verbose[Show detailed logging]' \
-    '--timeout[Abort the run after this many milliseconds. Defaults to 30000.]:ms' \
+    '(-l --language)'{-l,--language}'[Target language(s) for SDK generation. Specify one or more languages. \[choices\: "typescript", "python", "java", "go", "csharp", "php", "ruby", "cli", "kotlin", "rust", "swift"\]]:languages...' \
+    '--all[Generate SDKs for all supported languages]' \
+    '(-o --output-dir)'{-o,--output-dir}'[Directory where the generated SDK will be saved (default\: "./sdks")]:path:_files -/' \
+    '--name[Name for the generated SDK package]:name' \
+    '--sdk-version[Version number for the generated SDK]:version' \
+    '--config[Path to SDK generation config file (JSON). If not specified, will look for .postman/config.json (sdk key).]:path:_files -g "*.json"' \
+    '(-y --yes)'{-y,--yes}'[Skip all confirmation prompts and overwrite existing files]' \
+    '--overwrite[Overwrite existing files without confirmation]' \
+    '--verbose[Show detailed generation progress and logs]' \
+    '--log-level[Set build log detail level. "warn" (default) shows errors/warnings inline and collapses info notes; "info" expands all log entries (default\: "warn")]:level' \
+    '--no-track-changes[Disable change tracking. By default, file hashes are written into .manifest.json to enable edit detection on the next regeneration.]' \
+    '--no-merge[Skip custom code merge even if user edits are detected. Forces a fresh generation.]' \
+    '--conflict-strategy[Strategy for handling merge conflicts\: "mark" inserts conflict markers (default), "ours" keeps user edits, "theirs" keeps generated code]:strategy' \
+    '--no-emit[Skip downloading and saving SDK artifacts to disk. Useful in CI when the build only needs to trigger server-side pull requests.]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:workspaceId:'
+    '*:idOrPath:'
 }
 
-_postman_workspace_pull() {
+_postman_sdk_track() {
   _arguments \
-    '(-y --yes)'{-y,--yes}'[Skip all confirmation prompts]' \
-    '--source-workspace[Pull from a different source workspace.]:workspaceId' \
-    '--json[Print the outcome as machine-readable JSON. Implies non-interactive\: use --yes to actually pull.]' \
-    '--verbose[Show detailed logging]' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:workspaceId:'
+    '(-l --language)'{-l,--language}'[Language(s) to track. \[choices\: "typescript", "python", "java", "go", "csharp", "php", "ruby", "cli", "kotlin", "rust", "swift"\]]:languages...' \
+    '(-o --output-dir)'{-o,--output-dir}'[Base directory containing generated SDKs (default\: "./sdks")]:path:_files -/' \
+    '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_workspace_connect_git() {
+_postman_sdk_list() {
   _arguments \
-    '--verbose[Show detailed logging]' \
-    '--json[Print the outcome as machine-readable JSON.]' \
+    '(-s --status)'{-s,--status}'[Filter builds by status (case-insensitive) \[choices\: in-progress, success, failure\]]:status' \
+    '(-o --output)'{-o,--output}'[Output format \[choices\: "json", "table"\] (default\: "table")]:format' \
+    '--log-level[Set build log detail level. "warn" (default) shows errors/warnings inline and collapses info notes; "info" expands all log entries (default\: "warn")]:level' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:path:_files -g "*.json"'
+    '*:id:'
 }
 
-_postman_workspace_disconnect_git() {
+_postman_sdk_fetch() {
   _arguments \
-    '(-y --yes)'{-y,--yes}'[Skip all confirmation prompts]' \
-    '--verbose[Show detailed logging]' \
-    '--json[Print the outcome as machine-readable JSON. Requires --yes to actually disconnect.]' \
+    '(-o --output-dir)'{-o,--output-dir}'[Directory to save the downloaded SDK(s) (default\: "./sdks")]:path:_files -/' \
+    '(-l --language)'{-l,--language}'[Download only the specified language (e.g., typescript, python)]:language' \
+    '--overwrite[Overwrite existing files without confirmation]' \
+    '--verbose[Show detailed download progress]' \
+    '--log-level[Set build log detail level. "warn" (default) shows errors/warnings inline and collapses info notes; "info" expands all log entries (default\: "warn")]:level' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:workspaceId:'
+    '*:buildId:'
 }
 
-_postman_workspace_diff() {
+_postman_sdk_connect() {
   _arguments \
-    '--push-strategy[Strategy to preview. "force-sync" also shows cloud entities that would be DELETED. Defaults to "force-sync".]:strategy' \
-    '--summary[Skip content comparison. Faster, but updates are listed without checking whether they changed.]' \
-    '--json[Print the diff as machine-readable JSON.]' \
-    '--exit-code[Exit with code 1 when a verified difference is found (for CI gates). Entity types with no comparison path are reported but do not fail the gate.]' \
-    '--verbose[Show detailed logging]' \
-    '--timeout[Abort the run after this many milliseconds. Defaults to 120000.]:ms' \
+    '(-l --language)'{-l,--language}'[SDK language (required) \[choices\: typescript, python, java, go, csharp, php, ruby, cli, kotlin, rust, swift\]]:language' \
+    '(-r --repo)'{-r,--repo}'[GitHub repository in <owner>/<name> form (alternative to --repo-owner + --repo-name)]:owner/name' \
+    '--repo-owner[GitHub repository owner (user or org)]:owner' \
+    '--repo-name[GitHub repository name]:name' \
+    '(-b --branch)'{-b,--branch}'[Target branch for SDK pull requests (default\: "main")]:branch' \
+    '--push-to-base[Push SDK updates directly to the base branch instead of opening a pull request (default\: false)]' \
+    '--auto-update-pull-requests[Open auto-update pull requests when the SDK changes (true|false). Defaults to true server-side when omitted]:bool' \
+    '--auth-provider[OAuth provider used by the server when pushing (choices\: githubapp, github) (default\: "githubapp")]:provider' \
+    '--verbose[Show extra logging]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:workspaceId:'
+    '*:id:'
 }
 
-_postman_team() {
+_postman_sdk_connections() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_team_commands' \
+    '1: :_postman_sdk_connections_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        list) _postman_team_list ;;
+        list|ls) _postman_sdk_connections_list ;;
+        delete|rm) _postman_sdk_connections_delete ;;
       esac
       ;;
   esac
 }
 
-_postman_team_commands() {
+_postman_sdk_connections_commands() {
   local -a sub
   sub=(
-    'list:List the teams inside your organisation.'
+    'list:List GitHub connections for a collection or specification'
+    'ls:Alias for list'
+    'delete:Delete a GitHub connection for a collection or specification'
+    'rm:Alias for delete'
   )
-  _describe -t commands 'team command' sub
+  _describe -t commands 'connections command' sub
 }
 
-_postman_team_list() {
+_postman_sdk_connections_list() {
   _arguments \
-    '--can-create-workspace[Only list teams you could create a workspace in.]' \
-    '--json[Print the list as machine-readable JSON.]' \
-    '--timeout[Abort the run after this many milliseconds. Defaults to 30000.]:ms' \
-    '(-h --help)'{-h,--help}'[display help for command]'
+    '--refresh[Refresh PR statuses from GitHub before listing (slower) (default\: false)]' \
+    '--json[Output raw JSON instead of formatted text (default\: false)]' \
+    '--verbose[Show extra logging]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:id:'
 }
 
-_postman_performance() {
+_postman_sdk_connections_delete() {
+  _arguments \
+    '(-y --yes)'{-y,--yes}'[Skip the confirmation prompt (default\: false)]' \
+    '--verbose[Show extra logging]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:connectionId:'
+}
+
+_postman_spec() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_performance_commands' \
+    '1: :_postman_spec_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        run) _postman_performance_run ;;
-        list) _postman_performance_list ;;
-        get) _postman_performance_get ;;
+        lint) _postman_spec_lint ;;
+        ai-readiness) _postman_spec_ai_readiness ;;
+        list) _postman_spec_list ;;
+        get) _postman_spec_get ;;
+        file) _postman_spec_file ;;
+        create) _postman_spec_create ;;
+        generate) _postman_spec_generate ;;
+        sync) _postman_spec_sync ;;
+        delete) _postman_spec_delete ;;
       esac
       ;;
   esac
 }
 
-_postman_performance_commands() {
+_postman_spec_commands() {
   local -a sub
   sub=(
-    'run:Run a performance test on a collection'
-    'list:List past performance runs for a collection, newest first.'
-    'get:Get one performance run by ID.'
+    'lint:Run linting on the given specification by ID or local file path.'
+    'ai-readiness:Score an OpenAPI specification for AI readiness by ID or local file path.'
+    'list:List local spec files under a path, or (no path) a workspace'\''s cloud specs.'
+    'get:Read a spec definition, including every file of a multi-file spec.'
+    'file:Get, add, update, or remove files in a spec (cloud ID or local directory).'
+    'create:Create a new spec in a workspace, or (with path) scaffold a local spec file.'
+    'generate:Generate artifacts from a specification.'
+    'sync:Sync a generated collection with its source specification.'
+    'delete:Delete a spec by its cloud ID or local file path. Cannot be undone.'
   )
-  _describe -t commands 'performance command' sub
+  _describe -t commands 'spec command' sub
 }
 
-_postman_performance_run() {
+_postman_spec_lint() {
   _arguments \
-    '(-e --environment)'{-e,--environment}'[Specify an Id to a Postman Environment]:id' \
-    '(-g --globals)'{-g,--globals}'[Specify an Id to a Postman Globals]:id' \
-    '--setup-collection[Collection UID to run before the performance test]:id' \
-    '--teardown-collection[Collection UID to run after the performance test]:id' \
-    '--peak-vu[Peak (maximum) virtual users (default\: 20)]:count' \
-    '--vu-count[Older name for --peak-vu]:count' \
-    '--base-vu[Base (floor) virtual users the run starts from, 1 or more. Not for --load-profile fixed, which runs flat]:count' \
-    '(-d --duration)'{-d,--duration}'[Duration of the performance test in minutes (default\: 1)]:minutes' \
-    '(-p --load-profile)'{-p,--load-profile}'[Load profile type\: fixed, ramp-up, spike, peak (default\: "ramp-up")]:profile' \
-    '(-s --load-segments)'{-s,--load-segments}'[Duration of each phase of the profile, comma separated, in order. ramp-up takes 2, spike 3, peak 4; fixed takes none. See the load-segment section below for which position is which phase]:durations' \
-    '--data-file[Path to a JSON or CSV data file to use with the collection]:path:_files -g "*.json"' \
-    '--ssl-client-cert-list[Path to a client certificates configuration file (JSON). Local runner only.]:path:_files -g "*.(pem|crt|key)"' \
-    '--ssl-client-cert[Path to a client certificate (PEM) for mTLS targets. Local runner only.]:path:_files -g "*.(pem|crt|key)"' \
-    '--ssl-client-key[Path to the client certificate private key. Local runner only.]:path:_files -g "*.(pem|crt|key)"' \
-    '--ssl-client-passphrase[Client certificate passphrase (for a protected key). Local runner only.]:passphrase' \
-    '(-k --insecure)'{-k,--insecure}'[Disable SSL certificate verification for the target. Local runner only.]' \
-    '--ssl-extra-ca-certs[Path to additionally trusted CA certificates (PEM) for the target. Local runner only.]:path:_files -g "*.(pem|crt|key)"' \
-    '--dataset-id[Use a Postman Dataset as iteration data (with --dataset-view-id)]:id' \
-    '--dataset-view-id[Dataset view to execute for iteration data (requires --dataset-id)]:id' \
-    '--dataset-distribution[How rows map to VUs\: round-robin (default), fixed, random]:strategy' \
-    '--postman-api-key[API Key used to load the resources from the Postman API (Only supported in the US region, use '\''postman login --region'\'' to authenticate instead)]:apiKey' \
-    '--output[Output format for live results\: auto (default, interactive dashboard) or ndjson (one JSON object per line on stdout, ending with a "summary" event — for CI or other non-interactive use) (default\: "auto")]:format' \
-    '--runner[Runner to execute the performance test on\: local, postman-cloud, or postman-cloud-static-ip (egress from your account region'\''s static-IP cluster) (default\: local)]:runner' \
-    '--disable-unicode[Forces Unicode compliant symbols to be replaced by their plain text equivalents]' \
-    '--pass-if[Pass condition in format\: function(metric, value) (repeatable; all conditions must hold). Functions\: less_than, greater_than, less_than_eq, greater_than_eq. Metrics\: avg, p90, p95, p99, error_rate, rps. Example\: less_than(p95, 500)]:condition' \
-    '--use-mock[Redirect a variable/host to a local code mock or cloud Mock Server (repeatable). Format\: "<{{var}}|host> mock|mock-server\:<path|id> \[scenario\]" (default\: \[\])]:mapping' \
-    '--dataset[Pass --dataset multiple times to load several .dataset.yaml files (or directories containing them). Each is made available to the handlers of the local mocks started by --use-mock as pm.datasets(<id>). Local runner only. (default\: \[\])]:pathOrDir:_files -g "*.json"' \
+    '(-f --fail-severity)'{-f,--fail-severity}'[Results of this level or above will trigger a failure exit code. \[choices\: "error", "warning", "info", "hint"\] (default\: "ERROR")]:value' \
+    '--issueType[Limit linting to a specific issue type. \[choices\: "syntax"\]]:value' \
+    '(-o --output)'{-o,--output}'[Output format for the results. \[choices\: "json", "csv"\]]:value' \
+    '--workspace-id[The workspace ID to use for fetching governance rulesets.]:value' \
+    '--ruleset[Lint against a local Spectral ruleset.]:path:_files -g "*.json"' \
+    '--report-events[Dispatch events to the API Catalog and Application Inventory ingestion pipelines (on by default)]' \
+    '--no-report-events[Do not dispatch events to the API Catalog and Application Inventory ingestion pipelines]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:collectionId:_files -g "*.json"'
+    '*:spec:'
 }
 
-_postman_performance_list() {
+_postman_spec_ai_readiness() {
   _arguments \
-    '(-c --collection-id)'{-c,--collection-id}'[Collection ID whose performance runs to list]:id' \
-    '--cursor[Pagination cursor from a previous page'\''s response]:token' \
-    '--output[Output format\: table (default) or json (default\: "table")]:format' \
-    '--json[Alias for --output json]' \
-    '--timeout[Milliseconds to wait for the service before failing (default\: "30000")]:ms' \
+    '(-o --output)'{-o,--output}'[Output format for the results. \[choices\: "cli", "json", "html"\]]:value' \
+    '--export[Write the report to this file instead of stdout. A directory receives the report under a name derived from the specification. Requires --output html.]:path:_files -g "*.json"' \
+    '--min-score[Exit with a non-zero code if the overall score is below this threshold (0-100).]:n' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:id:'
+    '*:spec:'
 }
 
-_postman_performance_get() {
+_postman_spec_list() {
   _arguments \
-    '--output[Output format\: table (default) or json (default\: "table")]:format' \
-    '--json[Alias for --output json]' \
-    '--timeout[Milliseconds to wait for the service before failing (default\: "30000")]:ms' \
+    '(-w --workspace)'{-w,--workspace}'[Workspace ID (defaults to .postman/resources.yaml binding)]:id' \
+    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Output as JSON]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:runId:'
+    '*:pathOrDir:_files -g "*.json"'
 }
 
-_postman_flows() {
+_postman_spec_get() {
+  _arguments \
+    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Output as JSON (full spec definition)]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:spec...:'
+}
+
+_postman_spec_file() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_flows_commands' \
+    '1: :_postman_spec_file_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        list) _postman_flows_list ;;
-        trigger) _postman_flows_trigger ;;
-        deploy) _postman_flows_deploy ;;
-        run) _postman_flows_run ;;
-        update) _postman_flows_update ;;
-        list-runs) _postman_flows_list_runs ;;
-        get-run) _postman_flows_get_run ;;
+        get) _postman_spec_file_get ;;
+        add) _postman_spec_file_add ;;
+        update) _postman_spec_file_update ;;
+        rm) _postman_spec_file_rm ;;
       esac
       ;;
   esac
 }
 
-_postman_flows_commands() {
+_postman_spec_file_commands() {
   local -a sub
   sub=(
-    'list:List all flows'
-    'trigger:Trigger a deployed flow'
-    'deploy:Deploy a flow (required to trigger it)'
-    'run:Run a single flow from a file (e.g. ./path/to/flow.json)'
-    'update:Update settings for a deployed flow'
-    'list-runs:List run history for a deployed flow'
-    'get-run:Analyze a specific flow run'
+    'get:Show a file in a spec\: its path, size and content.'
+    'add:Add a new file to a spec.'
+    'update:Update an existing file in a spec.'
+    'rm:Remove a file from a spec.'
   )
-  _describe -t commands 'flows command' sub
-}
-
-_postman_flows_list() {
-  _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Specify the workspace ID to list flows from]:workspaceId' \
-    '(-p --paginate)'{-p,--paginate}'[Paginates the list of flows]' \
-    '(-f --filter)'{-f,--filter}'[Filter flows by name. Pattern may be a regex, or a name prefix.]:pattern' \
-    '(-s --sort)'{-s,--sort}'[Sort flows by criteria\: "name" or "updated" (default\: updated) (default\: "updated")]:criteria' \
-    '--verbose[Verbose output]' \
-    '--debug[Debug output]' \
-    '--json[JSON output]' \
-    '(-h --help)'{-h,--help}'[display help for command]'
+  _describe -t commands 'file command' sub
 }
 
-_postman_flows_trigger() {
+_postman_spec_file_get() {
   _arguments \
-    '(-i --input)'{-i,--input}'[Set key=value pairs in the trigger payload (e.g. --input foo=bar --input baz=qux) (default\: \[\])]:key=value:_files -g "*.(pem|crt|key)"' \
-    '(-f --input-file)'{-f,--input-file}'[Set payload values from JSON files (e.g. --input-file ./inputs.json --input-file ./config.json) (default\: \[\])]:path.json:_files -g "*.json"' \
-    '(-q --query)'{-q,--query}'[Set query parameters as key=value pairs (e.g. --query foo=bar --query baz=qux) (default\: \[\])]:key=value:_files -g "*.(pem|crt|key)"' \
-    '--headers[Set custom headers as key=value pairs (e.g. --headers X-API-Key=12345 --headers User-Agent=MyApp) (default\: \[\])]:key=value:_files -g "*.(pem|crt|key)"' \
-    '(-n --dry-run)'{-n,--dry-run}'[Show the flow requestURL and payload that would be sent without making the actual request (default\: false)]' \
-    '--show-secrets[Show actual authentication tokens in dry-run output (otherwise secrets are masked) (default\: false)]' \
-    '(-r --result)'{-r,--result}'[Show only the response body (default\: false)]' \
-    '(-s --scenario)'{-s,--scenario}'[Use a named scenario from the flow definition to construct the input payload, headers, and query parameters (overridden by --headers/--query)]:name' \
-    '--verbose[Verbose output]' \
-    '--debug[Debug output]' \
-    '--json[JSON output]' \
+    '--json[Output as JSON]' \
+    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:flowId:'
+    '*:filePath:_files -g "*.json"'
 }
 
-_postman_flows_deploy() {
+_postman_spec_file_add() {
   _arguments \
-    '(-p --path)'{-p,--path}'[Specify the URL path for the trigger]:path:_files -g "*.json"' \
-    '(-t --timeout)'{-t,--timeout}'[Specify the HTTP session timeout (5000ms to 60000ms) (default\: "10000ms")]:timeout' \
-    '(-a --auth)'{-a,--auth}'[Enable authentication for the trigger (default\: false)]' \
-    '--verbose[Verbose output]' \
-    '--debug[Debug output]' \
-    '--json[JSON output]' \
+    '(-c --content)'{-c,--content}'[File content (reads from stdin if omitted)]:content' \
+    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:flowId:'
+    '*:filePath:_files -g "*.json"'
 }
 
-_postman_flows_run() {
+_postman_spec_file_update() {
   _arguments \
-    '(-i --input)'{-i,--input}'[Set flow inputs as key=value pairs (e.g. --input foo=bar --input baz=qux) (default\: \[\])]:key=value:_files -g "*.(pem|crt|key)"' \
-    '(-f --input-file)'{-f,--input-file}'[Set flow inputs from JSON files (e.g. --input-file ./inputs.json --input-file ./config.json) (default\: \[\])]:path.json:_files -g "*.json"' \
-    '(-s --scenario)'{-s,--scenario}'[Use a pre-built scenario as flow inputs (by scenario name). Can be combined with --input and --input-file to override values.]:name' \
-    '--iteration-data-dataset[\[BETA\] Run the flow once per row of a dataset view. Accepts a local .dataset.yaml path or a cloud dataset id (cloud requires login). Requires --iteration-data-view. Dataset columns feed the flow inputs (see --map-column).]:pathOrId:_files -g "*.(json|csv)"' \
-    '--iteration-data-view[\[BETA\] Name or id of the view (within --iteration-data-dataset) whose rows drive the run.]:nameOrId' \
-    '(-m --map-column)'{-m,--map-column}'[\[BETA\] Bind a flow input to a dataset column (e.g. -m isActive=active). Repeatable. Inputs whose name matches a column bind automatically. (default\: \[\])]:input=column' \
-    '(-e --environment)'{-e,--environment}'[Specify a path to a Postman Environment file (JSON or YAML)]:path:_files -g "*.json"' \
-    '--working-dir[Specify the path to the working directory]:path:_files -/' \
-    '--no-insecure-file-read[Prevent reading dataset files situated outside of the working directory (applies to --iteration-data-dataset)]' \
-    '--verbose[Show detailed information of flow run and each request (method, URL, assertions)]' \
-    '--no-truncate[Show full output without truncating long values]' \
-    '--output[Save execution result to a file (supported\: json)]:format' \
-    '--reporters[Save a test results report to a file (supported\: html)]:format' \
-    '(-x --suppress-exit-code)'{-x,--suppress-exit-code}'[Specify whether or not to override the default exit code for the current run]' \
-    '--workspace[Workspace ID required for flows that contain connector blocks. Find it in the Postman app URL\: https\://postman.com/workspace/<workspaceId>]:workspaceId' \
-    '--report-events[Dispatch events to the API Catalog and Application Inventory ingestion pipelines (on by default)]' \
-    '--no-report-events[Do not dispatch events to the API Catalog and Application Inventory ingestion pipelines]' \
-    '--verbose[Verbose output]' \
-    '--debug[Debug output]' \
-    '--json[JSON output]' \
+    '(-c --content)'{-c,--content}'[New file content (reads from stdin if omitted)]:content' \
+    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:path:_files -g "*.json"'
+    '*:filePath:_files -g "*.json"'
 }
 
-_postman_flows_update() {
+_postman_spec_file_rm() {
   _arguments \
-    '(-t --trigger)'{-t,--trigger}'[Enable or disable the flow trigger]:on|off' \
-    '(-a --auth)'{-a,--auth}'[Enable or disable authentication for the flow trigger]:on|off' \
-    '--verbose[Verbose output]' \
-    '--debug[Debug output]' \
-    '--json[JSON output]' \
+    '(-y --yes)'{-y,--yes}'[Skip confirmation prompt]' \
+    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:flowId:'
-}
-
-_postman_flows_list_runs() {
-  _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Specify the workspace ID]:workspaceId' \
-    '(-f --flow)'{-f,--flow}'[Filter sessions by flow ID]:flowId' \
-    '(-r --range)'{-r,--range}'[Time range to list runs (e.g. 30m, 2h, 3d) (default\: "1h")]:range' \
-    '--verbose[Verbose output]' \
-    '--debug[Debug output]' \
-    '--json[JSON output]' \
-    '(-h --help)'{-h,--help}'[display help for command]'
-}
-
-_postman_flows_get_run() {
-  _arguments \
-    '(-r --run-id)'{-r,--run-id}'[Specify the run ID to analyze]:runId' \
-    '(-l --logs)'{-l,--logs}'[Show detailed event log (default\: false)]' \
-    '--filter[Filter event log by block ID prefix (can be specified multiple times) (default\: \[\])]:blockId' \
-    '--verbose[Verbose output]' \
-    '--debug[Debug output]' \
-    '--json[JSON output]' \
-    '(-h --help)'{-h,--help}'[display help for command]'
+    '*:filePath:_files -g "*.json"'
 }
 
-_postman_request() {
+_postman_spec_create() {
   _arguments \
-    '(-H --header)'{-H,--header}'[Add HTTP header in key\:value format. Can be used multiple times. Example\: -H "Content-Type\:application/json" -H "X-API-Key\:abc123" (default\: \[\])]:header' \
-    '(-d --body)'{-d,--body}'[Request body content. Supports\: inline string, @filepath for file content, or "-" for stdin. Example\: --body '\''{"name"\:"John"}'\'' or --body @data.json]:body' \
-    '(-f --form)'{-f,--form}'[Add multipart/form-data field in key=value format. Can be used multiple times. For file uploads use key=@filepath. Example\: -f "name=John" -f "avatar=@photo.jpg" (default\: \[\])]:field' \
-    '(-e --environment)'{-e,--environment}'[Load Postman Environment by UUID or file path. Variables in URL, headers, and body will be resolved. Example\: -e dev.postman_environment.json]:path:_files -g "*.json"' \
-    '--timeout[Request timeout in milliseconds. Request will fail if no response within this time. (default\: 300000)]:n' \
-    '--redirects-ignore[Prevents Postman CLI from automatically following 3XX redirect responses. By default, redirects are followed.]' \
-    '--redirects-max[Maximum number of redirects to follow. Default is unlimited. Useful for preventing redirect loops.]:n' \
-    '--redirects-follow-method[Preserves the original HTTP method when following redirects. By default, redirects are followed with GET method.]' \
-    '--redirects-remove-referrer[Removes the Referer header when following redirects. By default, Referer header is sent with redirects.]' \
-    '(-k --insecure)'{-k,--insecure}'[Disable SSL certificate verification.]' \
-    '--ssl-client-cert-list[Specify the path to client certificate configurations (JSON).]:path:_files -g "*.(pem|crt|key)"' \
-    '--ssl-client-cert[Specify the path to a client certificate (PEM).]:path:_files -g "*.(pem|crt|key)"' \
-    '--ssl-client-key[Specify the path to a client certificate private key.]:path:_files -g "*.(pem|crt|key)"' \
-    '--ssl-client-passphrase[Specify the client certificate passphrase (for protected key).]:passphrase' \
-    '--ssl-extra-ca-certs[Specify additional trusted CA certificates (PEM).]:path:_files -g "*.(pem|crt|key)"' \
-    '--cookie-jar[Specify the path to a custom cookie jar (serialized tough-cookie JSON).]:path:_files -g "*.json"' \
-    '--export-cookie-jar[Export the cookie jar to a file after completing the request.]:path:_files -g "*.json"' \
-    '--retry[Number of retry attempts for failed requests (4xx, 5xx, network errors). Useful for flaky endpoints or rate-limited APIs. (default\: 0)]:n' \
-    '--retry-delay[Delay between retry attempts in milliseconds. (default\: 1000)]:ms' \
-    '--script-pre-request[Add JavaScript script to run before the request. Can be inline JS or @filepath to load from file. Scripts have access to pm.* APIs. Example\: --script-pre-request "pm.environment.set('\''timestamp'\'', Date.now());" or --script-pre-request @setup.js]:script' \
-    '--script-post-request[Add JavaScript script to run after the request. Can be inline JS or @filepath to load from file. Scripts have access to pm.* APIs. Example\: --script-post-request "console.log(pm.response.json());" or --script-post-request @validate.js]:script' \
-    '--dataset[\[BETA\] Pass --dataset multiple times to load several .dataset.yaml files (or directories containing them). Each is made available to pre/post-request scripts as pm.datasets(<id>). (default\: \[\])]:pathOrDir:_files -g "*.json"' \
-    '(-o --output)'{-o,--output}'[Save complete response to JSON file.Useful for debugging or further processing.]:path:_files -g "*.json"' \
-    '--verbose[Show detailed request and response information including headers, body, and metadata.]' \
-    '--response-only[suppress all output except response body. Useful for piping to other commands.]' \
-    '--debug[Debug mode\: show detailed execution information including retry attempts, redirects, and timing breakdowns.]' \
-    '--report-events[Dispatch events to the API Catalog and Application Inventory ingestion pipelines (on by default)]' \
-    '--no-report-events[Do not dispatch events to the API Catalog and Application Inventory ingestion pipelines]' \
+    '(-n --name)'{-n,--name}'[Specification name / title]:name' \
+    '(-t --type)'{-t,--type}'[Spec type\: openapi, asyncapi, graphql, protobuf, smithy (default\: openapi) (default\: "openapi")]:type' \
+    '--spec-version[Spec version (e.g. 3.1 for openapi, 3 for protobuf)]:ver' \
+    '(-f --format)'{-f,--format}'[File format\: yaml or json (openapi/asyncapi only, default\: yaml) (default\: "yaml")]:fmt' \
+    '(-w --workspace)'{-w,--workspace}'[Workspace ID (cloud create, defaults to .postman/resources.yaml)]:id' \
+    '--force[Overwrite an existing local file]' \
+    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '--auth-basic-username[Supply authentication parameters dynamically.]:value' \
-    '--auth-basic-password[Supply authentication parameters dynamically.]:value' \
-    '--auth-bearer-token[Supply authentication parameters dynamically.]:value' \
-    '--auth-digest-username[Supply authentication parameters dynamically.]:value' \
-    '--auth-digest-password[Supply authentication parameters dynamically.]:value' \
-    '--auth-oauth1-consumerKey[Supply authentication parameters dynamically.]:value' \
-    '--auth-oauth1-consumerSecret[Supply authentication parameters dynamically.]:value' \
-    '--auth-oauth1-token[Supply authentication parameters dynamically.]:value' \
-    '--auth-oauth1-tokenSecret[Supply authentication parameters dynamically.]:value' \
-    '--auth-oauth2-accessToken[Supply authentication parameters dynamically.]:value' \
-    '--auth-oauth2-tokenType[Supply authentication parameters dynamically.]:value' \
-    '--auth-hawk-authId[Supply authentication parameters dynamically.]:value' \
-    '--auth-hawk-authKey[Supply authentication parameters dynamically.]:value' \
-    '--auth-hawk-algorithm[Supply authentication parameters dynamically.]:value' \
-    '--auth-aws-accessKey[Supply authentication parameters dynamically.]:value' \
-    '--auth-aws-secretKey[Supply authentication parameters dynamically.]:value' \
-    '--auth-aws-region[Supply authentication parameters dynamically.]:value' \
-    '--auth-aws-service[Supply authentication parameters dynamically.]:value' \
-    '--auth-aws-sessionToken[Supply authentication parameters dynamically.]:value' \
-    '--auth-ntlm-username[Supply authentication parameters dynamically.]:value' \
-    '--auth-ntlm-password[Supply authentication parameters dynamically.]:value' \
-    '--auth-ntlm-domain[Supply authentication parameters dynamically.]:value' \
-    '--auth-ntlm-workstation[Supply authentication parameters dynamically.]:value' \
-    '--auth-apikey-key[Supply authentication parameters dynamically.]:value' \
-    '--auth-apikey-value[Supply authentication parameters dynamically.]:value' \
-    '--auth-apikey-in[Supply authentication parameters dynamically.]:value' \
-    '*:url:'
+    '*:path:_files -g "*.json"'
 }
 
-_postman_sdk() {
+_postman_spec_generate() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_sdk_commands' \
+    '1: :_postman_spec_generate_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        init) _postman_sdk_init ;;
-        generate|build) _postman_sdk_generate ;;
-        track) _postman_sdk_track ;;
-        list|ls) _postman_sdk_list ;;
-        fetch|get) _postman_sdk_fetch ;;
-        connect) _postman_sdk_connect ;;
-        connections) _postman_sdk_connections ;;
+        collection) _postman_spec_generate_collection ;;
       esac
       ;;
   esac
 }
 
-_postman_sdk_commands() {
+_postman_spec_generate_commands() {
   local -a sub
   sub=(
-    'init:Create or update .postman/config.json with an SDK configuration stub.'
-    'generate:Generate a new SDK from a Postman collection or specification (OpenAPI or AsyncAPI).'
-    'build:Alias for generate'
-    'track:Enable change tracking for a generated SDK. Adds file hashes to .manifest.json so that the next `sdk generate` can detect your edits and preserve them via 3-way merge.'
-    'list:List SDK builds for a collection, extensible collection, or specification.'
-    'ls:Alias for list'
-    'fetch:Download SDKs from a build by its ID.'
-    'get:Alias for fetch'
-    'connect:Connect a collection or specification to a GitHub repository for automatic SDK pull requests'
-    'connections:Manage GitHub connections that drive automatic SDK pull requests'
+    'collection:Generate a Postman collection from a specification.'
   )
-  _describe -t commands 'sdk command' sub
-}
-
-_postman_sdk_init() {
-  _arguments \
-    '(-y --yes)'{-y,--yes}'[Skip prompts and overwrite existing sdk config]' \
-    '(-h --help)'{-h,--help}'[display help for command]'
-}
-
-_postman_sdk_generate() {
-  _arguments \
-    '(-l --language)'{-l,--language}'[Target language(s) for SDK generation. Specify one or more languages. \[choices\: "typescript", "python", "java", "go", "csharp", "php", "ruby", "cli", "kotlin", "rust", "swift"\]]:languages...' \
-    '--all[Generate SDKs for all supported languages]' \
-    '(-o --output-dir)'{-o,--output-dir}'[Directory where the generated SDK will be saved (default\: "./sdks")]:path:_files -/' \
-    '--name[Name for the generated SDK package]:name' \
-    '--sdk-version[Version number for the generated SDK]:version' \
-    '--config[Path to SDK generation config file (JSON). If not specified, will look for .postman/config.json (sdk key).]:path:_files -g "*.json"' \
-    '(-y --yes)'{-y,--yes}'[Skip all confirmation prompts and overwrite existing files]' \
-    '--overwrite[Overwrite existing files without confirmation]' \
-    '--verbose[Show detailed generation progress and logs]' \
-    '--log-level[Set build log detail level. "warn" (default) shows errors/warnings inline and collapses info notes; "info" expands all log entries (default\: "warn")]:level' \
-    '--no-track-changes[Disable change tracking. By default, file hashes are written into .manifest.json to enable edit detection on the next regeneration.]' \
-    '--no-merge[Skip custom code merge even if user edits are detected. Forces a fresh generation.]' \
-    '--conflict-strategy[Strategy for handling merge conflicts\: "mark" inserts conflict markers (default), "ours" keeps user edits, "theirs" keeps generated code]:strategy' \
-    '--no-emit[Skip downloading and saving SDK artifacts to disk. Useful in CI when the build only needs to trigger server-side pull requests.]' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:idOrPath:'
-}
-
-_postman_sdk_track() {
-  _arguments \
-    '(-l --language)'{-l,--language}'[Language(s) to track. \[choices\: "typescript", "python", "java", "go", "csharp", "php", "ruby", "cli", "kotlin", "rust", "swift"\]]:languages...' \
-    '(-o --output-dir)'{-o,--output-dir}'[Base directory containing generated SDKs (default\: "./sdks")]:path:_files -/' \
-    '(-h --help)'{-h,--help}'[display help for command]'
-}
-
-_postman_sdk_list() {
-  _arguments \
-    '(-s --status)'{-s,--status}'[Filter builds by status (case-insensitive) \[choices\: in-progress, success, failure\]]:status' \
-    '(-o --output)'{-o,--output}'[Output format \[choices\: "json", "table"\] (default\: "table")]:format' \
-    '--log-level[Set build log detail level. "warn" (default) shows errors/warnings inline and collapses info notes; "info" expands all log entries (default\: "warn")]:level' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:id:'
-}
-
-_postman_sdk_fetch() {
-  _arguments \
-    '(-o --output-dir)'{-o,--output-dir}'[Directory to save the downloaded SDK(s) (default\: "./sdks")]:path:_files -/' \
-    '(-l --language)'{-l,--language}'[Download only the specified language (e.g., typescript, python)]:language' \
-    '--overwrite[Overwrite existing files without confirmation]' \
-    '--verbose[Show detailed download progress]' \
-    '--log-level[Set build log detail level. "warn" (default) shows errors/warnings inline and collapses info notes; "info" expands all log entries (default\: "warn")]:level' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:buildId:'
+  _describe -t commands 'generate command' sub
 }
 
-_postman_sdk_connect() {
+_postman_spec_generate_collection() {
   _arguments \
-    '(-l --language)'{-l,--language}'[SDK language (required) \[choices\: typescript, python, java, go, csharp, php, ruby, cli, kotlin, rust, swift\]]:language' \
-    '(-r --repo)'{-r,--repo}'[GitHub repository in <owner>/<name> form (alternative to --repo-owner + --repo-name)]:owner/name' \
-    '--repo-owner[GitHub repository owner (user or org)]:owner' \
-    '--repo-name[GitHub repository name]:name' \
-    '(-b --branch)'{-b,--branch}'[Target branch for SDK pull requests (default\: "main")]:branch' \
-    '--push-to-base[Push SDK updates directly to the base branch instead of opening a pull request (default\: false)]' \
-    '--auto-update-pull-requests[Open auto-update pull requests when the SDK changes (true|false). Defaults to true server-side when omitted]:bool' \
-    '--auth-provider[OAuth provider used by the server when pushing (choices\: githubapp, github) (default\: "githubapp")]:provider' \
-    '--verbose[Show extra logging]' \
+    '(-n --name)'{-n,--name}'[Collection name]:name' \
+    '--folder-strategy[Folder strategy\: Paths or Tags (default\: Paths) (default\: "Paths")]:strategy' \
+    '(-w --workspace)'{-w,--workspace}'[Workspace ID (cloud mode)]:id' \
+    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
+    '--force[Overwrite the collection if one with this name already exists (local mode)]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:id:'
+    '*:spec:'
 }
 
-_postman_sdk_connections() {
+_postman_spec_sync() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_sdk_connections_commands' \
+    '1: :_postman_spec_sync_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        list|ls) _postman_sdk_connections_list ;;
-        delete|rm) _postman_sdk_connections_delete ;;
+        collection) _postman_spec_sync_collection ;;
       esac
       ;;
   esac
 }
 
-_postman_sdk_connections_commands() {
+_postman_spec_sync_commands() {
   local -a sub
   sub=(
-    'list:List GitHub connections for a collection or specification'
-    'ls:Alias for list'
-    'delete:Delete a GitHub connection for a collection or specification'
-    'rm:Alias for delete'
+    'collection:Sync a collection from a linked specification (local path or cloud UUID).'
   )
-  _describe -t commands 'connections command' sub
+  _describe -t commands 'sync command' sub
 }
 
-_postman_sdk_connections_list() {
+_postman_spec_sync_collection() {
   _arguments \
-    '--refresh[Refresh PR statuses from GitHub before listing (slower) (default\: false)]' \
-    '--json[Output raw JSON instead of formatted text (default\: false)]' \
-    '--verbose[Show extra logging]' \
+    '--collection-id[Collection ID to sync (required for cloud mode)]:id' \
+    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
+    '--force[Overwrite hand-written scripts, headers and descriptions that the spec would otherwise drop]' \
+    '--dry-run[Report what sync would change and remove without writing anything]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:id:'
+    '*:spec:'
 }
 
-_postman_sdk_connections_delete() {
+_postman_spec_delete() {
   _arguments \
-    '(-y --yes)'{-y,--yes}'[Skip the confirmation prompt (default\: false)]' \
-    '--verbose[Show extra logging]' \
+    '(-y --yes)'{-y,--yes}'[Delete without asking for confirmation first]' \
+    '--api-key[Postman API key, used with a cloud ID (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:connectionId:'
+    '*:spec:'
 }
 
-_postman_mock() {
+_postman_workspace() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_mock_commands' \
+    '1: :_postman_workspace_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        generate) _postman_mock_generate ;;
-        run) _postman_mock_run ;;
-        push) _postman_mock_push ;;
-        deploy) _postman_mock_deploy ;;
-        get) _postman_mock_get ;;
-        list) _postman_mock_list ;;
-        log) _postman_mock_log ;;
-        delete) _postman_mock_delete ;;
+        list) _postman_workspace_list ;;
+        prepare) _postman_workspace_prepare ;;
+        push) _postman_workspace_push ;;
+        lint) _postman_workspace_lint ;;
+        get) _postman_workspace_get ;;
+        create) _postman_workspace_create ;;
+        delete) _postman_workspace_delete ;;
+        pull) _postman_workspace_pull ;;
+        connect-git) _postman_workspace_connect_git ;;
+        disconnect-git) _postman_workspace_disconnect_git ;;
+        diff) _postman_workspace_diff ;;
       esac
       ;;
   esac
 }
 
-_postman_mock_commands() {
+_postman_workspace_commands() {
   local -a sub
   sub=(
-    'generate:Generate a mock from a Postman collection or an OpenAPI file, or from a built-in sample shopping-cart mock (POST /cart/items, GET /cart, POST /checkout). Writes a local mock by default, or a cloud mock with --workspace.'
-    'run:Start a mock using its path if it lives in your repository, or its id if it lives in Postman cloud (fetched and run locally).'
-    'push:Upload a mock from your repository to Postman cloud (creates it the first time, updates it after).'
-    'deploy:Turn a mock in Postman cloud into a live mock server others can call over the internet.'
-    'get:Show a mock'\''s details using its path if it lives in your repository, or its id if it lives in Postman cloud.'
-    'list:List the mocks in your repository or Postman cloud workspace'
-    'log:Show the requests a live mock server has received and the responses it sent, using its id.'
-    'delete:Delete a mock using its path if it lives in your repository, or its id if it lives in Postman cloud. Cannot be undone.'
+    'list:List all available Postman Workspaces'
+    'prepare:Prepare local collections and environments for push by validating and regenerating IDs if needed.'
+    'push:Push local workspace entities (collections, environments, specifications, mocks and more) to Postman workspace.'
+    'lint:Lint the current local Postman workspace\: its configuration (.postman/resources.yaml) plus every discovered entity. Use --meta to lint only the configuration.'
+    'get:Read a workspace'\''s metadata, and optionally the ids of what it holds.'
+    'create:Create a Postman workspace and bind it to this git repository.'
+    'delete:Permanently delete a workspace and everything in it. Prompts for confirmation unless --yes is passed.'
+    'pull:Pull workspace entities from a Postman workspace into the local git-native folder.'
+    'connect-git:Connect a Postman workspace to a local git repository.'
+    'disconnect-git:Disconnect a Postman workspace from its local git repository.'
+    'diff:Preview local-vs-cloud drift before pushing. Read-only\: nothing is created, updated or deleted.'
   )
-  _describe -t commands 'mock command' sub
+  _describe -t commands 'workspace command' sub
 }
 
-_postman_mock_generate() {
+_postman_workspace_list() {
   _arguments \
-    '(-o --output)'{-o,--output}'[Folder to save the mock in. Relative or absolute, e.g. ./postman/mocks/orders. Defaults to postman/mocks/<name>.]:dir:_files -g "*.json"' \
-    '(-n --name)'{-n,--name}'[Name for the mock. Taken from the source when you provide one; required for the sample.]:name' \
-    '--port[Port the mock runs on (e.g. 4010) (default\: 4500)]:port' \
-    '--force[Overwrite the mock'\''s files if the target folder already has one]' \
-    '(-u --update)'{-u,--update}'[Update an existing mock from the source instead of creating a new one. Path to the mock, relative or absolute, e.g. ./postman/mocks/orders. Cannot be used with --output.]:mockPath:_files -g "*.json"' \
-    '(-w --workspace)'{-w,--workspace}'[Save the mock to this Postman cloud workspace (by id) instead of your repository. Cannot be used with --output, --force, or --update.]:id' \
-    '--api-key[Postman API key to use with --workspace (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '(-x --suppress-exit-code)'{-x,--suppress-exit-code}'[Always exit with code 0, even on failure]' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:sourcePath:'
+    '(-f --filter)'{-f,--filter}'[Filter workspaces by name.]:name' \
+    '(-t --type)'{-t,--type}'[Filter workspaces by visibility type\: team, public, private, personal.]:type' \
+    '--cursor[Fetch the page of workspaces that follows this cursor.]:cursor' \
+    '--verbose[Verbose output]' \
+    '--debug[Debug output]' \
+    '--json[JSON output]' \
+    '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_mock_run() {
+_postman_workspace_prepare() {
   _arguments \
-    '(-e --environment)'{-e,--environment}'[Path to a file of environment variables for the mock. Relative or absolute, e.g. ./postman/environments/dev.environment.yaml]:path:_files -g "*.json"' \
-    '(-g --globals)'{-g,--globals}'[Path to a file of global variables for the mock. Relative or absolute, e.g. ./globals.json]:path:_files -g "*.json"' \
-    '(-p --port)'{-p,--port}'[Port to run on (e.g. 4010), or "auto" for a free one. Defaults to the mock'\''s configured port.]:port' \
-    '--api-key[Postman API key, used with a Postman cloud id (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '(-w --workspace)'{-w,--workspace}'[Workspace that owns the run, for recording its start history. Auto-resolved for a Postman cloud id; required to record history for a path.]:id' \
-    '--no-history[Do not record this run in the mock'\''s start history.]' \
-    '--output[Live output format\: auto (default, human-readable logs) or ndjson (one JSON event per line on stdout, ending with a "summary" event — for CI or other non-interactive use) (default\: "auto")]:format' \
-    '--dataset[Pass --dataset multiple times to load several .dataset.yaml files (or directories containing them). Each is made available to the mock'\''s handlers as pm.datasets(<id>). (default\: \[\])]:pathOrDir:_files -g "*.json"' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:mockIdOrPath:_files -g "*.json"'
+    '--verbose[Show detailed logging]' \
+    '--json[Print the outcome as machine-readable JSON.]' \
+    '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_mock_push() {
+_postman_workspace_push() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Postman cloud workspace to upload to, by id (defaults to the workspace already linked to this project)]:id' \
-    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:mockPath:_files -g "*.json"'
+    '--no-prepare[Skip ID validation and auto-fix before pushing]' \
+    '(-y --yes)'{-y,--yes}'[Skip all confirmation prompts]' \
+    '--push-strategy[Push strategy. "force-sync"\: mirror the whole workspace — also DELETE cloud entities that have no local counterpart (destructive). Defaults to "default" (create/update only).]:strategy' \
+    '--json[Print the outcome as machine-readable JSON. Implies non-interactive\: use --yes to actually push.]' \
+    '--verbose[Show detailed logging]' \
+    '--report-events[Dispatch events to the API Catalog and Application Inventory ingestion pipelines (on by default)]' \
+    '--no-report-events[Do not dispatch events to the API Catalog and Application Inventory ingestion pipelines]' \
+    '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_mock_deploy() {
+_postman_workspace_lint() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Postman cloud workspace that will own the server, by id (defaults to the workspace already linked to this project)]:id' \
-    '(-n --name)'{-n,--name}'[Name for the mock server (you are asked for one if you skip this)]:name' \
-    '(-s --slug)'{-s,--slug}'[Short label used in the server'\''s web address, e.g. "my-mock" (you are asked for one if you skip this)]:slug' \
-    '--public[Let anyone with the link reach the server. Private by default (callers must send a Postman API key).]' \
-    '--auto-deploy[Update the live server automatically whenever the mock changes (off by default)]' \
-    '(-y --yes)'{-y,--yes}'[Use the defaults and skip all questions (private, no auto-deploy)]' \
-    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:mockId:_files -g "*.json"'
+    '(-f --fail-severity)'{-f,--fail-severity}'[Exit with failure if diagnostics at this level or above are present. \[choices\: "error", "warning", "info", "hint"\] (default\: "error")]:value' \
+    '(-o --output)'{-o,--output}'[Output format\: cli (human-readable), table, or json. (default\: "cli")]:value' \
+    '--meta[Only lint the workspace configuration (.postman/resources.yaml); skip per-entity linting.]' \
+    '--workspace-id[The workspace ID to use for fetching governance rulesets. Defaults to the id in .postman/resources.yaml.]:value' \
+    '--fix[Apply safe autofixes to repairable workspace lint issues.]' \
+    '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_mock_get() {
+_postman_workspace_get() {
   _arguments \
-    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '--json[Print the details as machine-readable data instead of a table]' \
+    '--elements[Also report the resources the workspace holds.]' \
+    '--json[Print the workspace as machine-readable JSON.]' \
+    '--timeout[Milliseconds to wait for the API (default 30000).]:ms' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:mockIdOrPath:_files -g "*.json"'
+    '*:id:'
 }
 
-_postman_mock_list() {
+_postman_workspace_create() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Postman cloud workspace whose mocks to list, by id (defaults to the workspace already linked to this project)]:id' \
-    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '--json[Print the list as machine-readable data instead of a table]' \
+    '--visibility[Required. One of\: personal, private, team, public, partner.]:status' \
+    '--name[Workspace name (defaults to owner/repo from the git remote)]:name' \
+    '--summary[Optional workspace summary]:text' \
+    '--team-id[The team inside your organisation the workspace belongs to. Required for a team workspace when your organisation has teams inside it. Find it with `postman team list`.]:id' \
+    '--team-role[What a team or public workspace grants\: view or edit. Applies to the team named by --team-id, or to your whole organisation when none is named. Defaults to your team'\''s configured default.]:level' \
+    '--path[Directory to bind (defaults to the current directory)]:dir:_files -g "*.json"' \
+    '--no-connect[Create the workspace without binding it to the repository]' \
+    '--force[Create even when a workspace is already recorded for this repo]' \
+    '--json[Print the created workspace as machine-readable JSON.]' \
+    '(-h --help)'{-h,--help}'[display help for command]'
+}
+
+_postman_workspace_delete() {
+  _arguments \
+    '(-y --yes)'{-y,--yes}'[Skip the confirmation prompt]' \
+    '--json[Print the outcome as machine-readable JSON]' \
+    '--verbose[Show detailed logging]' \
+    '--timeout[Abort the run after this many milliseconds. Defaults to 30000.]:ms' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:pathOrDir:_files -g "*.json"'
+    '*:workspaceId:'
 }
 
-_postman_mock_log() {
+_postman_workspace_pull() {
   _arguments \
-    '--limit[Most entries to show (defaults to 50 when printing machine-readable output)]:n' \
-    '--method[Show only requests of this type (e.g. GET, POST)]:method' \
-    '--status[Show only these response codes (e.g. 404, or 5xx for any 500-series)]:code|range' \
-    '--path[Show only requests to matching addresses (use * and ? as wildcards, e.g. /users/*)]:pattern' \
-    '--since[Show entries from this long ago until now (e.g. 2h = the last 2 hours)]:duration' \
-    '--until[Hide entries newer than this (e.g. 30m = skip the most recent 30 minutes)]:duration' \
-    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '--json[Print entries as machine-readable data instead of the scrollable view]' \
+    '(-y --yes)'{-y,--yes}'[Skip all confirmation prompts]' \
+    '--source-workspace[Pull from a different source workspace.]:workspaceId' \
+    '--json[Print the outcome as machine-readable JSON. Implies non-interactive\: use --yes to actually pull.]' \
+    '--verbose[Show detailed logging]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:mockServerId:_files -g "*.json"'
+    '*:workspaceId:'
 }
 
-_postman_mock_delete() {
+_postman_workspace_connect_git() {
   _arguments \
-    '(-y --yes)'{-y,--yes}'[Delete without asking for confirmation first]' \
-    '--api-key[Postman API key, used with a Postman cloud id (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--verbose[Show detailed logging]' \
+    '--json[Print the outcome as machine-readable JSON.]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:mockIdOrPath:_files -g "*.json"'
+    '*:path:_files -g "*.json"'
 }
 
-_postman_application() {
+_postman_workspace_disconnect_git() {
+  _arguments \
+    '(-y --yes)'{-y,--yes}'[Skip all confirmation prompts]' \
+    '--verbose[Show detailed logging]' \
+    '--json[Print the outcome as machine-readable JSON. Requires --yes to actually disconnect.]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:workspaceId:'
+}
+
+_postman_workspace_diff() {
+  _arguments \
+    '--push-strategy[Strategy to preview. "force-sync" also shows cloud entities that would be DELETED. Defaults to "force-sync".]:strategy' \
+    '--summary[Skip content comparison. Faster, but updates are listed without checking whether they changed.]' \
+    '--json[Print the diff as machine-readable JSON.]' \
+    '--exit-code[Exit with code 1 when a verified difference is found (for CI gates). Entity types with no comparison path are reported but do not fail the gate.]' \
+    '--verbose[Show detailed logging]' \
+    '--timeout[Abort the run after this many milliseconds. Defaults to 120000.]:ms' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:workspaceId:'
+}
+
+_postman_context_graph() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_application_commands' \
+    '1: :_postman_context_graph_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        init) _postman_application_init ;;
-        test) _postman_application_test ;;
-        setup-capture) _postman_application_setup_capture ;;
+        ask) _postman_context_graph_ask ;;
+        status) _postman_context_graph_status ;;
+        ingest) _postman_context_graph_ingest ;;
       esac
       ;;
   esac
 }
 
-_postman_application_commands() {
+_postman_context_graph_commands() {
   local -a sub
   sub=(
-    'init:\[DEPRECATED\] Use `postman app test` instead. Initialise a postman.config.cjs file with target collections, environment, and test command.'
-    'test:Run a command first (primary task), then match captured traffic against Postman collections and run assertions.'
-    'setup-capture:Install postman-playwright and patch playwright.config.* to capture network traffic automatically via withPostman().'
+    'ask:Ask a natural-language question about your team'\''s Context Graph.'
+    'status:Check an ask submitted by `ask`, without blocking. Prints the answer when ready.'
+    'ingest:Onboard repos and workspaces into your team'\''s Context Graph, and check ingestion progress.'
   )
-  _describe -t commands 'application command' sub
-}
-
-_postman_application_init() {
-  _arguments \
-    '--target-collection[Collection name or path for the default target (repeatable) (default\: \[\])]:name' \
-    '--target-environment[Environment name or path for the default target (last value wins) (default\: \[\])]:name' \
-    '--filter-urlpatterns[Comma-separated URL patterns to exclude from captured traffic (default\: \[\])]:patterns' \
-    '--filter-methods[Comma-separated HTTP methods to exclude from captured traffic (default\: \[\])]:methods' \
-    '--filter-headers[Comma-separated request header filters in header=value form (default\: \[\])]:headers' \
-    '--command[Command to run your tests (e.g. "npx playwright test")]:cmd' \
-    '(-h --help)'{-h,--help}'[display help for command]'
+  _describe -t commands 'context-graph command' sub
 }
 
-_postman_application_test() {
+_postman_context_graph_ask() {
   _arguments \
-    '--target[Select a target from postman.config.js targets block (default\: "default")]:name' \
-    '--target-collection[Collection override for the selected target (repeatable) (default\: \[\])]:path:_files -g "*.json"' \
-    '--target-environment[Environment override for the selected target (last value wins) (default\: \[\])]:path:_files -g "*.json"' \
-    '--command[Command to run first (primary task). Overrides config.]:cmd' \
-    '--deployed-version[Version identity of the application under test (e.g. a build ID, release tag, or version string). Also read from the APP_DEPLOYED_VERSION environment variable.]:version' \
-    '--network-log[Directory to scan for captured artifacts, or a direct path to a Playwright JSON report / NDJSON capture file. When a directory is given, recursively discovers `*.json` Playwright reports plus their `trace.zip` attachments, and `network-capture-*.ndjson` at the top level. By default, scans Playwright config `outputDir`, test-results/, then pm-results/.]:path:_files -g "*.json"' \
-    '--capture-only[Skip collection matching and tests; capture traffic and save a V3 collection organised by host]' \
-    '--output[Output directory for captured collection (default\: pm-results/captured/; used with --capture-only)]:path:_files -g "*.json"' \
-    '--force[Deprecated\: output directory is always overwritten on re-run (used with --capture-only)]' \
-    '--report-events[Dispatch application test run results to the API Catalog and Application Inventory ingestion pipelines (on by default) (default\: true)]:boolean' \
-    '--no-report-events[Do not dispatch run results to the API Catalog and Application Inventory ingestion pipelines]' \
-    '--verbose[Show detailed per-request matching, sandbox errors, and debug information]' \
-    '(-h --help)'{-h,--help}'[display help for command]'
+    '--wait[Block until the answer arrives, then print it]' \
+    '--api-key[Postman API key (falls back to POSTMAN_API_KEY, then a `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Output the ask record as JSON]' \
+    '--no-include-answer[Do not ask the service to include the answer inline]' \
+    '--max-steps[Cap the reasoning steps the service may take (its default applies when omitted)]:count' \
+    '--interval[With --wait, seconds between polls (default\: 2)]:seconds' \
+    '--timeout[With --wait, seconds to wait before giving up (default\: 300)]:seconds' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:query:'
 }
 
-_postman_application_setup_capture() {
+_postman_context_graph_status() {
   _arguments \
-    '--config[Path to playwright.config.* to patch (default\: auto-detect)]:path:_files -g "*.json"' \
-    '(-h --help)'{-h,--help}'[display help for command]'
+    '--api-key[Postman API key (falls back to POSTMAN_API_KEY, then a `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Output the ask record as JSON]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:askId:'
 }
 
-_postman_simulation() {
+_postman_context_graph_ingest() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_simulation_commands' \
+    '1: :_postman_context_graph_ingest_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        create) _postman_simulation_create ;;
-        list) _postman_simulation_list ;;
-        get) _postman_simulation_get ;;
-        run) _postman_simulation_run ;;
-        push) _postman_simulation_push ;;
-        deploy) _postman_simulation_deploy ;;
-        delete) _postman_simulation_delete ;;
+        git) _postman_context_graph_ingest_git ;;
+        workspaces) _postman_context_graph_ingest_workspaces ;;
+        status) _postman_context_graph_ingest_status ;;
       esac
       ;;
   esac
 }
 
-_postman_simulation_commands() {
+_postman_context_graph_ingest_commands() {
   local -a sub
   sub=(
-    'create:Create a simulation that serves several mocks behind one address'
-    'list:List the simulations in your repository or Postman cloud workspace'
-    'get:Show a simulation'\''s details using its .sim.yaml path if it lives in your repository, or its id if it lives in Postman cloud.'
-    'run:Serve a simulation'\''s mocks on one local port, routing each by its routeKey. Pass a .sim.yaml path (local) or a Postman simulation id (fetched and run locally).'
-    'push:Upload a simulation from your repository to Postman cloud (creates it the first time, updates it after). Its member mocks are pushed too.'
-    'deploy:Turn a simulation in Postman cloud into a live mock server others can call over the internet.'
-    'delete:Delete a simulation using its .sim.yaml path if it lives in your repository, or its id if it lives in Postman cloud. Cannot be undone.'
+    'git:Onboard GitHub repos into your team'\''s Context Graph.'
+    'workspaces:Onboard Postman workspaces into your team'\''s Context Graph.'
+    'status:Check ingestion progress for the team, or for one source.'
   )
-  _describe -t commands 'simulation command' sub
-}
-
-_postman_simulation_create() {
-  _arguments \
-    '(-n --name)'{-n,--name}'[Name for the simulation]:name' \
-    '--mock[A mock to include (repeatable). Use a local mock path to build the simulation in your repository, or a Postman mock id to create it in Postman cloud. Set its address with <mockIdOrPath>=<routeKey>. (default\: \[\])]:mockIdOrPath:_files -g "*.json"' \
-    '--routing[How callers reach each mock\: header or path (default path)]:header|path' \
-    '(-o --output)'{-o,--output}'[Where to save the simulation file in your repository, a file or folder (defaults to postman/simulations)]:path:_files -g "*.json"' \
-    '--force[Overwrite the simulation file if it already exists]' \
-    '(-w --workspace)'{-w,--workspace}'[Postman cloud workspace to create the simulation in, by id (defaults to the workspace already linked to this project)]:id' \
-    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '(-h --help)'{-h,--help}'[display help for command]'
-}
-
-_postman_simulation_list() {
-  _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Postman cloud workspace whose simulations to list, by id (defaults to the workspace already linked to this project)]:id' \
-    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '--json[Print the list as machine-readable data instead of a table]' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:pathOrDir:_files -g "*.json"'
-}
-
-_postman_simulation_get() {
-  _arguments \
-    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '--json[Print the details as machine-readable data instead of a table]' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:simIdOrPath:'
-}
-
-_postman_simulation_run() {
-  _arguments \
-    '(-e --environment)'{-e,--environment}'[Path to a file of environment variables for the mocks (relative or absolute)]:path:_files -g "*.json"' \
-    '(-g --globals)'{-g,--globals}'[Path to a file of global variables for the mocks (relative or absolute)]:path:_files -g "*.json"' \
-    '(-p --port)'{-p,--port}'[Port to serve on (e.g. 4010), or "auto" for a free one (default 3000)]:port' \
-    '--dataset[Dataset file or folder to load for pm.datasets (repeatable) (default\: \[\])]:pathOrDir:_files -g "*.json"' \
-    '(-w --workspace)'{-w,--workspace}'[Workspace for recording start history. Derived from a simulation id or the linked project; needed only for an unlinked .sim.yaml path.]:id' \
-    '--simulation[Simulation id to record start history against for a .sim.yaml path (a local file has only a name). Not needed when running by simulation id, or when the file is linked to a cloud simulation (via workspace push).]:id' \
-    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '--no-history[Do not record this run in the simulation'\''s start history]' \
-    '--output[Live output format\: auto (default, human-readable logs) or ndjson (one JSON event per line on stdout, ending with a "summary" event — for CI or other non-interactive use) (default\: "auto")]:format' \
-    '--proxy[Serve the mocks behind a local HTTP(S) forward proxy instead of one routed port, so a repo under test can point HTTP_PROXY/HTTPS_PROXY at it and reach each mock by hostname without code changes. Requires a simulation.yaml (routing config), not a .sim.yaml.]' \
-    '--proxy-port[Port for the proxy server. Distinct from --port, which is the one-port run'\''s own port. (default\: 7001)]:n' \
-    '--scenario[Scenario each mock serves, sent as both pm-mock-scenario and x-mock-scenario. (default\: "default")]:name' \
-    '--session[Session id to select via the x-mock-session header (default\: a generated id).]:id' \
-    '--log-format[Proxy request log format\: text or json. (default\: "text")]:format' \
-    '--log-body[Also log each response body (truncated). Buffers full responses in memory; meant for temporary debugging, not left on by default.]' \
-    '--doctor[Start the proxy, probe each available HTTP client (fetch/undici/axios/node-fetch) to confirm it honors HTTP_PROXY/HTTPS_PROXY, then exit.]' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:simIdOrPath:'
+  _describe -t commands 'ingest command' sub
 }
 
-_postman_simulation_push() {
+_postman_context_graph_ingest_git() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Postman cloud workspace to upload to, by id (defaults to the workspace already linked to this project)]:id' \
-    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--all-git-linked-workspaces[Also onboard the repo linked to every git-linked workspace in the team]' \
+    '--tag[With --all-git-linked-workspaces, only workspaces with this tag. Repeatable, up to 5; all must match]:tag' \
+    '--ttl[Override the service'\''s default TTL, in seconds]:seconds' \
+    '--api-key[Postman API key (falls back to POSTMAN_API_KEY, then a `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Output the onboarding response as JSON]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:simPath:'
+    '*:repoUrls...:'
 }
 
-_postman_simulation_deploy() {
+_postman_context_graph_ingest_workspaces() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Postman cloud workspace that will own the server, by id (defaults to the workspace already linked to this project)]:id' \
-    '(-n --name)'{-n,--name}'[Name for the mock server (you are asked for one if you skip this)]:name' \
-    '(-s --slug)'{-s,--slug}'[Short label used in the server'\''s web address, e.g. "my-sim" (you are asked for one if you skip this)]:slug' \
-    '--private[Require a Postman API key to reach the server. Public by default.]' \
-    '(-y --yes)'{-y,--yes}'[Use the defaults and skip all questions (public)]' \
-    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:simId:'
+    '(-w --workspace)'{-w,--workspace}'[Workspace to onboard. Repeatable. Omit to onboard the team'\''s git-linked workspaces]:id' \
+    '--top[Cap how many workspaces this call onboards]:n' \
+    '--ttl[Override the service'\''s default TTL, in seconds]:seconds' \
+    '--api-key[Postman API key (falls back to POSTMAN_API_KEY, then a `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Output the onboarding response as JSON]' \
+    '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_simulation_delete() {
+_postman_context_graph_ingest_status() {
   _arguments \
-    '(-y --yes)'{-y,--yes}'[Delete without asking for confirmation first]' \
-    '--api-key[Postman API key, used with a Postman cloud id (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:simIdOrPath:'
+    '--source[Show one source'\''s jobs, by the source id `ingest git` or `ingest workspaces` printed]:sourceId' \
+    '--api-key[Postman API key (falls back to POSTMAN_API_KEY, then a `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Output the service response as JSON]' \
+    '(-h --help)'{-h,--help}'[display help for command]'
 }
 
 _postman_describe() {
@@ -2710,51 +2798,17 @@ _postman_describe_environment_get() {
     '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_context_graph() {
-  local context state state_descr line
-  typeset -A opt_args
-  _arguments -C \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_context_graph_commands' \
-    '*::arg:->args'
-  case $state in
-    args)
-      case $words[1] in
-        ask) _postman_context_graph_ask ;;
-        status) _postman_context_graph_status ;;
-      esac
-      ;;
-  esac
-}
-
-_postman_context_graph_commands() {
-  local -a sub
-  sub=(
-    'ask:Ask a natural-language question about your team'\''s Context Graph.'
-    'status:Check an ask submitted by `ask`, without blocking. Prints the answer when ready.'
-  )
-  _describe -t commands 'context-graph command' sub
-}
-
-_postman_context_graph_ask() {
-  _arguments \
-    '--wait[Block until the answer arrives, then print it]' \
-    '--api-key[Postman API key (falls back to POSTMAN_API_KEY, then a `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '--json[Output the ask record as JSON]' \
-    '--no-include-answer[Do not ask the service to include the answer inline]' \
-    '--max-steps[Cap the reasoning steps the service may take (its default applies when omitted)]:count' \
-    '--interval[With --wait, seconds between polls (default\: 2)]:seconds' \
-    '--timeout[With --wait, seconds to wait before giving up (default\: 300)]:seconds' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:query:'
-}
-
-_postman_context_graph_status() {
+_postman_init() {
   _arguments \
-    '--api-key[Postman API key (falls back to POSTMAN_API_KEY, then a `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '--json[Output the ask record as JSON]' \
+    '--json[Emit machine-readable output for agents]' \
+    '--dry-run[Report what would happen without writing anything]' \
+    '--no-fetch[Use the skills bundled with this CLI instead of fetching the latest]' \
+    '--spec[Which spec is authoritative, when more than one could be]:path:_files -g "*.(yaml|yml|json)"' \
+    '--visibility[Create and bind a workspace non-interactively (personal, team)]:status' \
+    '(-y --yes)'{-y,--yes}'[Accept the default for every question instead of asking or stopping]' \
+    '--report-events[Dispatch init events to the API Catalog and Application Inventory ingestion pipelines (requires login)]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:askId:'
+    '*:path:_files -g "*.json"'
 }
 
 _postman_search() {
@@ -2849,672 +2903,723 @@ _postman_search_documents() {
     '*:query:'
 }
 
-_postman_webhook() {
+_postman_skills() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_webhook_commands' \
+    '1: :_postman_skills_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        create) _postman_webhook_create ;;
-        start) _postman_webhook_start ;;
-        pause) _postman_webhook_pause ;;
-        list) _postman_webhook_list ;;
-        delete) _postman_webhook_delete ;;
-        status) _postman_webhook_status ;;
-        requests) _postman_webhook_requests ;;
-        scripts) _postman_webhook_scripts ;;
-        forward) _postman_webhook_forward ;;
+        status) _postman_skills_status ;;
+        update) _postman_skills_update ;;
       esac
       ;;
   esac
 }
 
-_postman_webhook_commands() {
+_postman_skills_commands() {
   local -a sub
   sub=(
-    'create:Create a new webhook and print its public URL.'
-    'start:Activate a webhook so it can receive requests.'
-    'pause:Pause a webhook so it no longer accepts requests.'
-    'list:List all webhooks in a workspace.'
-    'delete:Permanently delete a webhook.'
-    'status:Show details for a webhook.'
-    'requests:List, inspect, and replay requests received by a webhook.'
-    'scripts:Create or update scripts executed by a webhook.'
-    'forward:Forward incoming webhook requests to a local port.'
+    'status:Report whether this repository'\''s skills are up to date.'
+    'update:Fetch the latest skills into this repository.'
   )
-  _describe -t commands 'webhook command' sub
+  _describe -t commands 'skills command' sub
 }
 
-_postman_webhook_create() {
+_postman_skills_status() {
   _arguments \
-    '(-t --title)'{-t,--title}'[Name for the webhook (default\: "CLI Webhook")]:title' \
-    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID (falls back to .postman/resources.yaml or .postman/config.json)]:workspaceId' \
-    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
-    '(-h --help)'{-h,--help}'[display help for command]'
+    '--json[Emit machine-readable output for agents]' \
+    '--strict[Exit non-zero when the skills are not current]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:path:_files -g "*.json"'
 }
 
-_postman_webhook_start() {
+_postman_skills_update() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID]:workspaceId' \
-    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Emit machine-readable output for agents]' \
+    '--dry-run[Report what would change without writing anything]' \
+    '--force[Overwrite skill files that were edited locally]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:webhookIdOrUrl:'
+    '*:path:_files -g "*.json"'
 }
 
-_postman_webhook_pause() {
+_postman_login() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID]:workspaceId' \
-    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:webhookIdOrUrl:'
+    '--alias[Specify the alias of the API key to fetch your resources using it. (This option is discontinued and will be removed in a future release.)]:alias' \
+    '--with-api-key[Specify the API key directly.]:apikey' \
+    '--region[Specify the region for authentication. Use "eu" for EU region.]:region:(us eu)' \
+    '--verbose[Show detailed error information]' \
+    '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_webhook_list() {
+_postman_logout() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID (falls back to .postman/resources.yaml or .postman/config.json)]:workspaceId' \
-    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
+    '--alias[Specify the alias of the API key to fetch your resources using it. (This option is discontinued and will be removed in a future release.)]:alias' \
     '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_webhook_delete() {
+_postman_signup() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID]:workspaceId' \
-    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:webhookId:'
+    '--guest[Start working as an anonymous guest instead of signing up — no account or browser needed, so it works anywhere. Your work is saved to a temporary workspace you can keep later by running `postman signup`.]' \
+    '--no-push[Do not push local work to your guest workspace before signing up. By default, work saved under postman/ is pushed first, so the workspace you keep is not empty.]' \
+    '--json[Print the sign-up details as machine-readable JSON.]' \
+    '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_webhook_status() {
+_postman_whoami() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID]:workspaceId' \
-    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:webhookId:'
+    '--json[Print current identity as machine-readable JSON.]' \
+    '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_webhook_requests() {
+_postman_application() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_webhook_requests_commands' \
+    '1: :_postman_application_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        list) _postman_webhook_requests_list ;;
-        describe) _postman_webhook_requests_describe ;;
-        replay) _postman_webhook_requests_replay ;;
+        init) _postman_application_init ;;
+        test) _postman_application_test ;;
+        setup-capture) _postman_application_setup_capture ;;
       esac
       ;;
   esac
 }
 
-_postman_webhook_requests_commands() {
+_postman_application_commands() {
   local -a sub
   sub=(
-    'list:List recent requests received by a webhook.'
-    'describe:Show details for a request received by a webhook.'
-    'replay:Replay a request received by a webhook.'
+    'init:\[DEPRECATED\] Use `postman app test` instead. Initialise a postman.config.cjs file with target collections, environment, and test command.'
+    'test:Run a command first (primary task), then match captured traffic against Postman collections and run assertions.'
+    'setup-capture:Install postman-playwright and patch playwright.config.* to capture network traffic automatically via withPostman().'
   )
-  _describe -t commands 'requests command' sub
+  _describe -t commands 'application command' sub
 }
 
-_postman_webhook_requests_list() {
+_postman_application_init() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID (falls back to .postman/resources.yaml or .postman/config.json)]:workspaceId' \
-    '--cursor[Pagination cursor returned by a previous request list response]:cursor' \
-    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:webhookId:'
+    '--target-collection[Collection name or path for the default target (repeatable) (default\: \[\])]:name' \
+    '--target-environment[Environment name or path for the default target (last value wins) (default\: \[\])]:name' \
+    '--filter-urlpatterns[Comma-separated URL patterns to exclude from captured traffic (default\: \[\])]:patterns' \
+    '--filter-methods[Comma-separated HTTP methods to exclude from captured traffic (default\: \[\])]:methods' \
+    '--filter-headers[Comma-separated request header filters in header=value form (default\: \[\])]:headers' \
+    '--command[Command to run your tests (e.g. "npx playwright test")]:cmd' \
+    '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_webhook_requests_describe() {
+_postman_application_test() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID (falls back to .postman/resources.yaml or .postman/config.json)]:workspaceId' \
-    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
-    '--verbose[Show script execution logs]' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:requestId:'
+    '--target[Select a target from postman.config.js targets block (default\: "default")]:name' \
+    '--target-collection[Collection override for the selected target (repeatable) (default\: \[\])]:path:_files -g "*.json"' \
+    '--target-environment[Environment override for the selected target (last value wins) (default\: \[\])]:path:_files -g "*.json"' \
+    '--command[Command to run first (primary task). Overrides config.]:cmd' \
+    '--deployed-version[Version identity of the application under test (e.g. a build ID, release tag, or version string). Also read from the APP_DEPLOYED_VERSION environment variable.]:version' \
+    '--network-log[Directory to scan for captured artifacts, or a direct path to a Playwright JSON report / NDJSON capture file. When a directory is given, recursively discovers `*.json` Playwright reports plus their `trace.zip` attachments, and `network-capture-*.ndjson` at the top level. By default, scans Playwright config `outputDir`, test-results/, then pm-results/.]:path:_files -g "*.json"' \
+    '--capture-only[Skip collection matching and tests; capture traffic and save a V3 collection organised by host]' \
+    '--output[Output directory for captured collection (default\: pm-results/captured/; used with --capture-only)]:path:_files -g "*.json"' \
+    '--force[Deprecated\: output directory is always overwritten on re-run (used with --capture-only)]' \
+    '--report-events[Dispatch application test run results to the API Catalog and Application Inventory ingestion pipelines (on by default) (default\: true)]:boolean' \
+    '--no-report-events[Do not dispatch run results to the API Catalog and Application Inventory ingestion pipelines]' \
+    '--verbose[Show detailed per-request matching, sandbox errors, and debug information]' \
+    '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_webhook_requests_replay() {
+_postman_application_setup_capture() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID (falls back to .postman/resources.yaml or .postman/config.json)]:workspaceId' \
-    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:requestId:'
+    '--config[Path to playwright.config.* to patch (default\: auto-detect)]:path:_files -g "*.json"' \
+    '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_webhook_scripts() {
+_postman_dependency() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_webhook_scripts_commands' \
+    '1: :_postman_dependency_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        set) _postman_webhook_scripts_set ;;
+        add) _postman_dependency_add ;;
+        get) _postman_dependency_get ;;
+        list) _postman_dependency_list ;;
+        install) _postman_dependency_install ;;
+        update) _postman_dependency_update ;;
+        remove) _postman_dependency_remove ;;
       esac
       ;;
   esac
 }
 
-_postman_webhook_scripts_commands() {
+_postman_dependency_commands() {
   local -a sub
   sub=(
-    'set:Create or update a webhook script from a JavaScript or TypeScript file.'
+    'add:Add a Postman collection, environment, or mock as a workspace dependency.'
+    'get:Show a declared workspace dependency from .postman/resources.yaml.'
+    'list:List the workspace dependencies declared in .postman/resources.yaml.'
+    'install:Materialise the dependencies declared in .postman/resources.yaml (all, or one).'
+    'update:Refresh declared dependencies to the latest content from their source (all, or one).'
+    'remove:Remove a workspace dependency and delete its local files.'
   )
-  _describe -t commands 'scripts command' sub
+  _describe -t commands 'dependency command' sub
 }
 
-_postman_webhook_scripts_set() {
+_postman_dependency_add() {
   _arguments \
-    '--event[Script event\: onEvent or onResponse]:event' \
-    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID (falls back to .postman/resources.yaml or .postman/config.json)]:workspaceId' \
-    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
+    '(-w --workspace)'{-w,--workspace}'[Workspace id to resolve a name in (defaults to the current workspace).]:id' \
+    '(-y --yes)'{-y,--yes}'[Skip all confirmation prompts.]' \
+    '--json[Output the result as JSON.]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:scriptPath:'
+    '*:nameOrId:'
 }
 
-_postman_webhook_forward() {
+_postman_dependency_get() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID]:workspaceId' \
-    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
+    '--type[Only match dependencies of this type (collection, environment, or mock).]:type' \
+    '--json[Output the result as JSON.]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:port:'
+    '*:nameOrId:'
 }
 
-_postman_dataset() {
+_postman_dependency_list() {
+  _arguments \
+    '--type[Only list dependencies of this type (collection, environment, or mock).]:type' \
+    '--json[Output the result as JSON.]' \
+    '(-h --help)'{-h,--help}'[display help for command]'
+}
+
+_postman_dependency_install() {
+  _arguments \
+    '--type[Only install dependencies of this type (collection, environment, or mock).]:type' \
+    '--json[Output the result as JSON.]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:nameOrId:'
+}
+
+_postman_dependency_update() {
+  _arguments \
+    '--type[Only update dependencies of this type (collection, environment, or mock).]:type' \
+    '--json[Output the result as JSON.]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:nameOrId:'
+}
+
+_postman_dependency_remove() {
+  _arguments \
+    '--type[Only match dependencies of this type (collection, environment, or mock).]:type' \
+    '(-y --yes)'{-y,--yes}'[Skip the confirmation prompt (required outside an interactive terminal).]' \
+    '--json[Output the result as JSON.]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:nameOrId:'
+}
+
+_postman_feedback() {
+  _arguments \
+    '--type[Feedback type\: cli_gap, improvement_suggestion, bug_report, feature_request, general (default\: general)]:type' \
+    '--context[Command or feature context this feedback is about]:context' \
+    '--json[Print result as machine-readable JSON]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:text:'
+}
+
+_postman_performance() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_dataset_commands' \
+    '1: :_postman_performance_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        list) _postman_dataset_list ;;
-        get) _postman_dataset_get ;;
-        query) _postman_dataset_query ;;
-        create) _postman_dataset_create ;;
-        delete) _postman_dataset_delete ;;
-        source) _postman_dataset_source ;;
-        view) _postman_dataset_view ;;
-        jdbc) _postman_dataset_jdbc ;;
+        run) _postman_performance_run ;;
+        list) _postman_performance_list ;;
+        get) _postman_performance_get ;;
       esac
       ;;
   esac
 }
 
-_postman_dataset_commands() {
+_postman_performance_commands() {
   local -a sub
   sub=(
-    'list:List local dataset YAMLs under a path, or (no path) a workspace'\''s cloud datasets.'
-    'get:Print a dataset'\''s metadata and structure summary (local YAML path or cloud id).'
-    'query:Run an ad-hoc SQL query against a dataset (local YAML path or cloud id).'
-    'create:Scaffold a new .dataset.yaml at <path>, or (no path, with -w) create a cloud dataset.'
-    'delete:Permanently remove a dataset\: a local .dataset.yaml or a cloud dataset id.'
-    'source:Inspect and manage a dataset'\''s datasources.'
-    'view:Inspect and manage saved views on a dataset.'
-    'jdbc:Inspect JDBC drivers before attaching one to a dataset.'
+    'run:Run a performance test on a collection (cloud collection UID or local collection path)'
+    'list:List past performance runs for a collection, newest first.'
+    'get:Get one performance run by ID.'
   )
-  _describe -t commands 'dataset command' sub
-}
-
-_postman_dataset_list() {
-  _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID (cloud list)]:id' \
-    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '--json[Output as JSON instead of a table]' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:pathOrDir:_files -g "*.json"'
+  _describe -t commands 'performance command' sub
 }
 
-_postman_dataset_get() {
+_postman_performance_run() {
   _arguments \
-    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '--no-populate[Skip fetching datasources/views for a cloud dataset]' \
-    '--json[Output the full dataset as JSON]' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:datasetPathOrId:'
-}
-
-_postman_dataset_query() {
-  _arguments \
-    '(-q --query)'{-q,--query}'[SQL query to execute (e.g. "SELECT * FROM users LIMIT 10")]:sql' \
-    '(-s --source)'{-s,--source}'[Execute directly against a database datasource; without --source, use federated SQLite]:nameOrIdOrSlug' \
-    '(-p --param)'{-p,--param}'[Bind values to $1, $2, ... in order; pass multiple values after -p or repeat -p]:value...' \
-    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '--json[Output rows as JSON instead of a table]' \
-    '--debug[Include safe classified dataset diagnostics]' \
+    '(-e --environment)'{-e,--environment}'[Specify an Id to a Postman Environment]:id' \
+    '(-g --globals)'{-g,--globals}'[Specify an Id to a Postman Globals]:id' \
+    '--setup-collection[Collection UID to run before the performance test]:id' \
+    '--teardown-collection[Collection UID to run after the performance test]:id' \
+    '--peak-vu[Peak (maximum) virtual users (default\: 20)]:count' \
+    '--vu-count[Older name for --peak-vu]:count' \
+    '--base-vu[Base (floor) virtual users the run starts from, 1 or more. Not for --load-profile fixed, which runs flat]:count' \
+    '(-d --duration)'{-d,--duration}'[Duration of the performance test in minutes (default\: 1)]:minutes' \
+    '(-p --load-profile)'{-p,--load-profile}'[Load profile type\: fixed, ramp-up, spike, peak (default\: "ramp-up")]:profile' \
+    '(-s --load-segments)'{-s,--load-segments}'[Duration of each phase of the profile, comma separated, in order. ramp-up takes 2, spike 3, peak 4; fixed takes none. See the load-segment section below for which position is which phase]:durations' \
+    '--data-file[Path to a JSON or CSV data file to use with the collection]:path:_files -g "*.json"' \
+    '--ssl-client-cert-list[Path to a client certificates configuration file (JSON). Local runner only.]:path:_files -g "*.(pem|crt|key)"' \
+    '--ssl-client-cert[Path to a client certificate (PEM) for mTLS targets. Local runner only.]:path:_files -g "*.(pem|crt|key)"' \
+    '--ssl-client-key[Path to the client certificate private key. Local runner only.]:path:_files -g "*.(pem|crt|key)"' \
+    '--ssl-client-passphrase[Client certificate passphrase (for a protected key). Local runner only.]:passphrase' \
+    '(-k --insecure)'{-k,--insecure}'[Disable SSL certificate verification for the target. Local runner only.]' \
+    '--ssl-extra-ca-certs[Path to additionally trusted CA certificates (PEM) for the target. Local runner only.]:path:_files -g "*.(pem|crt|key)"' \
+    '--dataset-id[Use a Postman Dataset as iteration data (with --dataset-view-id)]:id' \
+    '--dataset-view-id[Dataset view to execute for iteration data (requires --dataset-id)]:id' \
+    '--dataset-distribution[How rows map to VUs\: round-robin (default), fixed, random]:strategy' \
+    '--postman-api-key[API Key used to load the resources from the Postman API (Only supported in the US region, use '\''postman login --region'\'' to authenticate instead)]:apiKey' \
+    '--output[Output format for live results\: auto (default, interactive dashboard) or ndjson (one JSON object per line on stdout, ending with a "summary" event — for CI or other non-interactive use) (default\: "auto")]:format' \
+    '--runner[Runner to execute the performance test on\: local, postman-cloud, or postman-cloud-static-ip (egress from your account region'\''s static-IP cluster) (default\: local)]:runner' \
+    '--disable-unicode[Forces Unicode compliant symbols to be replaced by their plain text equivalents]' \
+    '--pass-if[Pass condition in format\: function(metric, value) (repeatable; all conditions must hold). Functions\: less_than, greater_than, less_than_eq, greater_than_eq. Metrics\: avg, p90, p95, p99, error_rate, rps. Example\: less_than(p95, 500)]:condition' \
+    '--use-mock[Redirect a variable/host to a local code mock or cloud Mock Server (repeatable). Format\: "<{{var}}|host> mock|mock-server\:<path|id> \[scenario\]" (default\: \[\])]:mapping' \
+    '--dataset[Pass --dataset multiple times to load several .dataset.yaml files (or directories containing them). Each is made available to the handlers of the local mocks started by --use-mock as pm.datasets(<id>). Local runner only. (default\: \[\])]:pathOrDir:_files -g "*.json"' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:datasetPathOrId:'
+    '*:collectionId:_files -g "*.json"'
 }
 
-_postman_dataset_create() {
+_postman_performance_list() {
   _arguments \
-    '(-n --name)'{-n,--name}'[Human-readable name for the dataset]:name' \
-    '(-d --description)'{-d,--description}'[Optional description]:desc' \
-    '--dataset-id[Override the generated dataset id (local only; defaults to a random v4 UUID)]:uuid' \
-    '--force[Overwrite an existing file at <path>]' \
-    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID (create a cloud dataset)]:id' \
-    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '(-c --collection-id)'{-c,--collection-id}'[Collection ID whose performance runs to list]:id' \
+    '--cursor[Pagination cursor from a previous page'\''s response]:token' \
+    '--output[Output format\: table (default) or json (default\: "table")]:format' \
+    '--json[Alias for --output json]' \
+    '--timeout[Milliseconds to wait for the service before failing (default\: "30000")]:ms' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:path:_files -g "*.json"'
+    '*:id:'
 }
 
-_postman_dataset_delete() {
+_postman_performance_get() {
   _arguments \
-    '(-y --yes)'{-y,--yes}'[Skip the confirmation prompt]' \
-    '--keep-resources[Preserve the local resource directory even when it is empty (local only)]' \
-    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--output[Output format\: table (default) or json (default\: "table")]:format' \
+    '--json[Alias for --output json]' \
+    '--timeout[Milliseconds to wait for the service before failing (default\: "30000")]:ms' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:datasetPathOrId:'
+    '*:runId:'
 }
 
-_postman_dataset_source() {
+_postman_secret() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_dataset_source_commands' \
+    '1: :_postman_secret_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        list) _postman_dataset_source_list ;;
-        add) _postman_dataset_source_add ;;
-        remove) _postman_dataset_source_remove ;;
-        update) _postman_dataset_source_update ;;
-        test) _postman_dataset_source_test ;;
+        create) _postman_secret_create ;;
+        list) _postman_secret_list ;;
       esac
       ;;
   esac
 }
 
-_postman_dataset_source_commands() {
+_postman_secret_commands() {
   local -a sub
   sub=(
-    'list:List the datasources defined on a dataset (local YAML path or cloud id).'
-    'add:Add a datasource to a dataset.'
-    'remove:Remove a datasource from a dataset (local YAML path or cloud id).'
-    'update:Update fields on an existing datasource. Only the flags you provide are changed.'
-    'test:Open and close a real connection using a source'\''s stored configuration.'
+    'create:Create a secret in a team'\''s shared vault.'
+    'list:List the secrets in a workspace'\''s shared vault\: key, secret id, vault id, and allowed domains.'
   )
-  _describe -t commands 'source command' sub
-}
-
-_postman_dataset_source_list() {
-  _arguments \
-    '(-d --dataset)'{-d,--dataset}'[Dataset whose sources to list — a local .dataset.yaml path or a cloud dataset id]:datasetPathOrId' \
-    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '--json[Output sources as JSON instead of a table]' \
-    '(-h --help)'{-h,--help}'[display help for command]'
-}
-
-_postman_dataset_source_add() {
-  _arguments \
-    '(-d --dataset)'{-d,--dataset}'[Dataset to add the source to; positional target is also accepted for v1.45 compatibility]:datasetPathOrId' \
-    '(-n --name)'{-n,--name}'[Logical name for the source (becomes the SQL table name when it loads a file or a database --table). Required for every source except a spreadsheet, whose worksheets are each named source_<worksheet>]:name' \
-    '--source-id[Override the generated source id (local dataset only)]:uuid' \
-    '--format[Use this format instead of extension/type inference; file contents are not sniffed. A spreadsheet (xlsx/xls/ods) is added as one source per worksheet, each named source_<worksheet>]:csv|json|xlsx|xls|ods|jdbc|mysql|postgres|sqlserver' \
-    '--type[Source kind; local is inferred from --file, jdbc from --driver-jar]:local|mysql|postgresql|sqlserver|jdbc' \
-    '--file[Path to a local CSV/JSON/spreadsheet file (absolute or cwd-relative)]:path:_files -g "*.json"' \
-    '--ref-only[Reference the file in place; do NOT copy into data_dir (local dataset)]' \
-    '--force[When copying, overwrite an existing file at the destination (local dataset)]' \
-    '--upload[Cloud dataset only\: upload --file as a postmancloudfile source (runs via /exec). Without --upload, --file is registered as a local_filesystem source read by the local engine. Either way a cloud dataset takes csv/json only — add a spreadsheet to a local .dataset.yaml, where each worksheet becomes its own source.]' \
-    '--driver-jar[JDBC driver JAR(s). Repeatable, or pass several after one flag]:path...:_files -g "*.json"' \
-    '--driver-class[Driver class. Auto-resolved when the JAR contains exactly one]:fqcn' \
-    '--driver-name[Label for this driver type (defaults to the JAR filename)]:label' \
-    '--url-template[JDBC URL with {{placeholders}}, e.g. jdbc\:postgresql\://{{host}}\:{{port}}/{{database}}]:template' \
-    '--var[Value for a {{placeholder}}. Repeatable. Use vault\:<vaultId>/<secretId> for a secret. WARNING\: a literal value is visible in `ps` output and shell history, and is stored in clear text in the dataset YAML (local) or sent in the request body (cloud). Prefer a Shared Vault reference.]:name=value...' \
-    '--prop[Driver connection property. Repeatable. Same vault\: syntax as --var]:name=value...' \
-    '--vars-file[JSON object of --var values; "-" reads stdin. Supports {"$vaultId"\:..,"$secretId"\:..} objects, and keeps secrets out of argv entirely]:path:_files -g "*.json"' \
-    '--from-source[Reuse another source'\''s driver JAR, class and URL template]:name' \
-    '--java-path[Java runtime to use. Machine-local only - never written to the dataset. Also read from POSTMAN_JDBC_JAVA_PATH]:path:_files -g "*.json"' \
-    '--no-test[Skip the pre-write connection test. Note that resolving the driver class still starts a JVM — on a machine with no Java, pass --driver-class (or --from-source) too]' \
-    '--ssh-target-host-variable[Template variable holding the tunnelled host (inferred when omitted)]:name' \
-    '--ssh-target-port-variable[Template variable holding the tunnelled port (inferred when omitted)]:name' \
-    '--json[Emit the result as JSON instead of prose]' \
-    '--host[DB host (mysql/postgresql/sqlserver)]:host' \
-    '--port[DB port (defaults to 1433 for sqlserver)]:port' \
-    '--user[DB user. WARNING\: a literal value is visible in `ps` output and shell history, and is stored in clear text in the dataset YAML (local) or sent in the request body (cloud). Prefer a Shared Vault reference.]:user' \
-    '--password[DB password. WARNING\: a literal value is visible in `ps` output and shell history, and is stored in clear text in the dataset YAML (local) or sent in the request body (cloud). Prefer a Shared Vault reference.]:password' \
-    '--database[DB database name]:db' \
-    '--table[DB table to load (required for sqlserver). Leave it out to connect to the whole database; query it with `dataset query -s <source>` or `dataset view create -s <source>`]:table' \
-    '--ssh-host[SSH bastion host]:host' \
-    '--ssh-port[SSH bastion port]:port' \
-    '--ssh-user[SSH bastion user]:user' \
-    '--ssh-private-key[Path to the SSH private key. WARNING\: the path is visible in `ps` output and shell history; key contents are read locally at execution time and are not stored in the dataset config.]:filepath:_files -g "*.(pem|crt|key)"' \
-    '--ssh-host-key[SSH bastion public host key]:publicKey' \
-    '--ssh-host-key-vault-id[Shared Vault ID containing the SSH public host key]:id' \
-    '--ssh-host-key-secret-id[Shared Vault secret ID containing the SSH public host key]:id' \
-    '--ssh-insecure-skip-host-key-verification[WARNING\: disable SSH host-key verification; use only for trusted local testing]' \
-    '--schema[DB schema (postgresql/sqlserver; defaults to dbo for sqlserver)]:schema' \
-    '--encrypt[SQL Server TLS encryption (default\: true)]:true|false' \
-    '--trust-server-certificate[SQL Server\: skip certificate verification (default\: false; insecure)]:true|false' \
-    '--tls-certificate[SQL Server CA/server certificate file path]:path:_files -g "*.(pem|crt|key)"' \
-    '--host-name-in-certificate[SQL Server certificate hostname override]:hostname' \
-    '--tls-min-version[SQL Server minimum TLS version (default\: 1.2)]:1.2|1.3' \
-    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:datasetPathOrId:'
-}
-
-_postman_dataset_source_remove() {
-  _arguments \
-    '(-d --dataset)'{-d,--dataset}'[Dataset the source belongs to — a local .dataset.yaml path or a cloud dataset id]:datasetPathOrId' \
-    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:sourceNameOrId:'
+  _describe -t commands 'secret command' sub
 }
 
-_postman_dataset_source_update() {
+_postman_secret_create() {
   _arguments \
-    '(-d --dataset)'{-d,--dataset}'[Dataset the source belongs to — a local .dataset.yaml path or a cloud dataset id]:datasetPathOrId' \
-    '(-n --name)'{-n,--name}'[Rename the source]:name' \
-    '--format[Change the format (local dataset only; cloud source formats are immutable). A spreadsheet format is not offered here\: this command changes the format field alone and cannot pin a worksheet, so the source would not compile. Add the workbook with `dataset source add` instead, which makes one worksheet-pinned source per sheet]:csv|json|jdbc|mysql|postgres|sqlserver' \
-    '--file[Replace the source file (local dataset only; cloud file replacement is unsupported)]:path:_files -g "*.json"' \
-    '--ref-only[With --file, reference in place instead of copying (local dataset only)]' \
-    '--force[With --file, overwrite the copied destination (local dataset only)]' \
-    '--driver-jar[Replace the JDBC driver JAR(s)]:path...:_files -g "*.json"' \
-    '--driver-class[Replace the JDBC driver class]:fqcn' \
-    '--driver-name[Rename the JDBC driver type label]:label' \
-    '--url-template[Replace the JDBC URL template]:template' \
-    '--var[Set a JDBC template variable. Merges onto the existing values. Use vault\:<vaultId>/<secretId> for a secret. WARNING\: a literal value is visible in `ps` output and shell history, and is stored in clear text in the dataset YAML (local) or sent in the request body (cloud). Prefer a Shared Vault reference.]:name=value...' \
-    '--prop[Set a JDBC connection property. Merges, same vault\: syntax]:name=value...' \
-    '--unset-var[Remove a JDBC template variable. Merging alone can never remove a key]:name...' \
-    '--unset-prop[Remove a JDBC connection property]:name...' \
-    '--vars-file[JSON object of --var values; "-" reads stdin]:path:_files -g "*.json"' \
-    '--ssh-target-host-variable[Template variable holding the tunnelled host (JDBC)]:name' \
-    '--ssh-target-port-variable[Template variable holding the tunnelled port (JDBC)]:name' \
-    '--java-path[Java runtime for JDBC operations. Machine-local only]:path:_files -g "*.json"' \
-    '--host[Update DB host (mysql/postgresql/sqlserver)]:host' \
-    '--port[Update DB port]:port' \
-    '--user[Update DB user. WARNING\: a literal value is visible in `ps` output and shell history, and is stored in clear text in the dataset YAML (local) or sent in the request body (cloud). Prefer a Shared Vault reference.]:user' \
-    '--password[Update DB password. WARNING\: a literal value is visible in `ps` output and shell history, and is stored in clear text in the dataset YAML (local) or sent in the request body (cloud). Prefer a Shared Vault reference.]:password' \
-    '--database[Update DB database name]:db' \
-    '--table[Update the DB table to load. A source without a table connects to the whole database; query it with `dataset query -s <source>` or `dataset view create -s <source>`]:table' \
-    '--ssh-host[Update SSH bastion host]:host' \
-    '--ssh-port[Update SSH bastion port]:port' \
-    '--ssh-user[Update SSH bastion user]:user' \
-    '--ssh-private-key[Update the SSH private-key file path. WARNING\: the path is visible in `ps` output and shell history; key contents are read locally and are not stored in the dataset config.]:filepath:_files -g "*.(pem|crt|key)"' \
-    '--ssh-host-key[Update the SSH bastion public host key]:publicKey' \
-    '--ssh-host-key-vault-id[Update the Shared Vault ID containing the SSH public host key]:id' \
-    '--ssh-host-key-secret-id[Update the Shared Vault secret ID containing the SSH public host key]:id' \
-    '--ssh-insecure-skip-host-key-verification[WARNING\: disable SSH host-key verification; use only for trusted local testing]' \
-    '--schema[Update DB schema (postgresql/sqlserver)]:schema' \
-    '--encrypt[Update SQL Server TLS encryption]:true|false' \
-    '--trust-server-certificate[Update SQL Server certificate verification (true is insecure)]:true|false' \
-    '--tls-certificate[Update SQL Server CA/server certificate file path]:path:_files -g "*.(pem|crt|key)"' \
-    '--host-name-in-certificate[Update SQL Server certificate hostname override]:hostname' \
-    '--tls-min-version[Update SQL Server minimum TLS version]:1.2|1.3' \
-    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '--json[Emit the result as JSON instead of prose]' \
+    '--team-id[Team id (defaults to your authenticated profile'\''s team; must be your own team — the vault rejects any other team id, even one you otherwise have access to)]:id' \
+    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID (falls back to .postman/resources.yaml or .postman/config.json)]:workspaceId' \
+    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
+    '--terminal[Enter one secret value through the terminal instead of the default browser form]' \
+    '--value-stdin[Read the secret value from stdin instead of prompting; implies --terminal]' \
+    '--timeout[Seconds to wait for the browser form (default 300)]:seconds' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:sourceNameOrId:'
+    '*:keys...:_files -g "*.json"'
 }
 
-_postman_dataset_source_test() {
+_postman_secret_list() {
   _arguments \
-    '(-d --dataset)'{-d,--dataset}'[Dataset the source belongs to — a local .dataset.yaml path or a cloud dataset id]:datasetPathOrId' \
-    '(-n --name)'{-n,--name}'[Source to test]:name' \
-    '--java-path[Java runtime to use for a JDBC source. Machine-local only; also read from POSTMAN_JDBC_JAVA_PATH]:path:_files -g "*.json"' \
-    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '--json[Emit the result as JSON instead of prose]' \
+    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID (falls back to .postman/resources.yaml or .postman/config.json)]:workspaceId' \
+    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Print the list as machine-readable JSON.]' \
     '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_dataset_view() {
+_postman_simulation() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_dataset_view_commands' \
+    '1: :_postman_simulation_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        list) _postman_dataset_view_list ;;
-        run) _postman_dataset_view_run ;;
-        create) _postman_dataset_view_create ;;
-        delete) _postman_dataset_view_delete ;;
-        update) _postman_dataset_view_update ;;
+        create) _postman_simulation_create ;;
+        list) _postman_simulation_list ;;
+        get) _postman_simulation_get ;;
+        run) _postman_simulation_run ;;
+        push) _postman_simulation_push ;;
+        deploy) _postman_simulation_deploy ;;
+        update) _postman_simulation_update ;;
+        log) _postman_simulation_log ;;
+        delete) _postman_simulation_delete ;;
       esac
       ;;
   esac
 }
 
-_postman_dataset_view_commands() {
+_postman_simulation_commands() {
   local -a sub
   sub=(
-    'list:List the saved views defined on a dataset (local YAML path or cloud id).'
-    'run:Execute a saved view against a dataset and print the rows.'
-    'create:Add a saved view to a dataset (local YAML path or cloud id).'
-    'delete:Remove a saved view from a dataset (local YAML path or cloud id).'
-    'update:Update name and/or query on an existing view (local YAML path or cloud id).'
+    'create:Create a simulation that serves several mocks behind one address'
+    'list:List the simulations in your repository or Postman cloud workspace'
+    'get:Show a simulation'\''s details using its .sim.yaml path if it lives in your repository, or its id if it lives in Postman cloud.'
+    'run:Serve a simulation'\''s mocks on one local port, routing each by its routeKey. Pass a .sim.yaml path (local) or a Postman simulation id (fetched and run locally).'
+    'push:Upload a simulation from your repository to Postman cloud (creates it the first time, updates it after). Its member mocks are pushed too.'
+    'deploy:Turn a simulation in Postman cloud into a live mock server others can call over the internet.'
+    'update:Change a simulation in place — rename it, switch routing, add mocks, or change a member'\''s address. Pass a .sim.yaml path (repository) or a Postman simulation id (cloud).'
+    'log:Show the requests a deployed simulation has received and the responses it sent, using its mock server id.'
+    'delete:Delete a simulation using its .sim.yaml path if it lives in your repository, or its id if it lives in Postman cloud. Cannot be undone.'
   )
-  _describe -t commands 'view command' sub
+  _describe -t commands 'simulation command' sub
 }
 
-_postman_dataset_view_list() {
+_postman_simulation_create() {
   _arguments \
-    '(-d --dataset)'{-d,--dataset}'[Dataset whose views to list — a local .dataset.yaml path or a cloud dataset id]:datasetPathOrId' \
-    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '--json[Output views as JSON instead of a table]' \
+    '(-n --name)'{-n,--name}'[Name for the simulation]:name' \
+    '--mock[A mock to include (repeatable). Use a local mock path to build the simulation in your repository, or a Postman mock id to create it in Postman cloud. Set its address with <mockIdOrPath>=<routeKey>. (default\: \[\])]:mockIdOrPath:_files -g "*.json"' \
+    '--routing[How callers reach each mock\: header or path (default path)]:header|path' \
+    '(-o --output)'{-o,--output}'[Where to save the simulation file in your repository, a file or folder (defaults to postman/simulations)]:path:_files -g "*.json"' \
+    '--force[Overwrite the simulation file if it already exists]' \
+    '(-w --workspace)'{-w,--workspace}'[Postman cloud workspace to create the simulation in, by id (defaults to the workspace already linked to this project)]:id' \
+    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
     '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_dataset_view_run() {
+_postman_simulation_list() {
+  _arguments \
+    '(-w --workspace)'{-w,--workspace}'[Postman cloud workspace whose simulations to list, by id (defaults to the workspace already linked to this project)]:id' \
+    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Print the list as machine-readable data instead of a table]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:pathOrDir:_files -g "*.json"'
+}
+
+_postman_simulation_get() {
+  _arguments \
+    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Print the details as machine-readable data instead of a table]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:simIdOrPath:'
+}
+
+_postman_simulation_run() {
+  _arguments \
+    '(-e --environment)'{-e,--environment}'[Path to a file of environment variables for the mocks (relative or absolute)]:path:_files -g "*.json"' \
+    '(-g --globals)'{-g,--globals}'[Path to a file of global variables for the mocks (relative or absolute)]:path:_files -g "*.json"' \
+    '(-p --port)'{-p,--port}'[Port to serve on (e.g. 4010), or "auto" for a free one (default 3000)]:port' \
+    '--dataset[Dataset file or folder to load for pm.datasets (repeatable) (default\: \[\])]:pathOrDir:_files -g "*.json"' \
+    '(-w --workspace)'{-w,--workspace}'[Workspace for recording start history. Derived from a simulation id or the linked project; needed only for an unlinked .sim.yaml path.]:id' \
+    '--simulation[Simulation id to record start history against for a .sim.yaml path (a local file has only a name). Not needed when running by simulation id, or when the file is linked to a cloud simulation (via workspace push).]:id' \
+    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--no-history[Do not record this run in the simulation'\''s start history]' \
+    '--output[Live output format\: auto (default, human-readable logs) or ndjson (one JSON event per line on stdout, ending with a "summary" event — for CI or other non-interactive use) (default\: "auto")]:format' \
+    '--proxy[Serve the mocks behind a local HTTP(S) forward proxy instead of one routed port, so a repo under test can point HTTP_PROXY/HTTPS_PROXY at it and reach each mock by hostname without code changes. Requires a simulation.yaml (routing config), not a .sim.yaml.]' \
+    '--proxy-port[Port for the proxy server. Distinct from --port, which is the one-port run'\''s own port. (default\: 7001)]:n' \
+    '--scenario[Scenario each mock serves, sent as both pm-mock-scenario and x-mock-scenario. (default\: "default")]:name' \
+    '--session[Session id to select via the x-mock-session header (default\: a generated id).]:id' \
+    '--log-format[Proxy request log format\: text or json. (default\: "text")]:format' \
+    '--log-body[Also log each response body (truncated). Buffers full responses in memory; meant for temporary debugging, not left on by default.]' \
+    '--doctor[Start the proxy, probe each available HTTP client (fetch/undici/axios/node-fetch) to confirm it honors HTTP_PROXY/HTTPS_PROXY, then exit.]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:simIdOrPath:'
+}
+
+_postman_simulation_push() {
+  _arguments \
+    '(-w --workspace)'{-w,--workspace}'[Postman cloud workspace to upload to, by id (defaults to the workspace already linked to this project)]:id' \
+    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:simPath:'
+}
+
+_postman_simulation_deploy() {
   _arguments \
-    '(-d --dataset)'{-d,--dataset}'[Dataset the view belongs to — a local .dataset.yaml path or a cloud dataset id]:datasetPathOrId' \
-    '(-p --param)'{-p,--param}'[Bind values to $1, $2, ... in order; pass multiple values after -p or repeat -p]:value...' \
-    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '--json[Output rows as JSON instead of a table]' \
-    '--debug[Include safe classified dataset diagnostics]' \
+    '(-w --workspace)'{-w,--workspace}'[Postman cloud workspace that will own the server, by id (defaults to the workspace already linked to this project)]:id' \
+    '(-n --name)'{-n,--name}'[Name for the mock server (you are asked for one if you skip this)]:name' \
+    '(-s --slug)'{-s,--slug}'[Short label used in the server'\''s web address, e.g. "my-sim" (you are asked for one if you skip this)]:slug' \
+    '--private[Require a Postman API key to reach the server. Public by default.]' \
+    '(-y --yes)'{-y,--yes}'[Use the defaults and skip all questions (public)]' \
+    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:viewNameOrId:'
+    '*:simId:'
 }
 
-_postman_dataset_view_create() {
+_postman_simulation_update() {
   _arguments \
-    '(-d --dataset)'{-d,--dataset}'[Dataset to add the view to — a local .dataset.yaml path or a cloud dataset id]:datasetPathOrId' \
-    '(-n --name)'{-n,--name}'[View name]:name' \
-    '(-q --query)'{-q,--query}'[SQL query the view executes]:sql' \
-    '(-s --source)'{-s,--source}'[Bind the view to one datasource and run the query natively against it, instead of through the federated SQLite layer. Same reference `dataset query -s` takes]:nameOrIdOrSlug' \
-    '--view-id[Override the generated view id (local only; cloud assigns its own)]:uuid' \
-    '--json[Emit the result as JSON instead of prose]' \
-    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
-    '(-h --help)'{-h,--help}'[display help for command]'
+    '(-n --name)'{-n,--name}'[Rename the simulation]:name' \
+    '--routing[Switch routing\: header or path]:header|path' \
+    '--add-mock[Attach a mock (repeatable). A local mock path for a repository simulation, a Postman mock id for a cloud one. Set its address with <mockIdOrPath>=<routeKey>. (default\: \[\])]:mockIdOrPath:_files -g "*.json"' \
+    '--route-key[Change a member mock'\''s address (repeatable), e.g. ./postman/mocks/payments=payments (default\: \[\])]:mockIdOrPath=routeKey:_files -g "*.(pem|crt|key)"' \
+    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Print the update as machine-readable data instead of a table]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:simIdOrPath:'
 }
 
-_postman_dataset_view_delete() {
+_postman_simulation_log() {
   _arguments \
-    '(-d --dataset)'{-d,--dataset}'[Dataset the view belongs to — a local .dataset.yaml path or a cloud dataset id]:datasetPathOrId' \
-    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--mock[Show only requests served by this member (by routeKey). Repeat the flag for several members (default\: \[\])]:routeKey' \
+    '--limit[Most entries to show (defaults to 50 when printing machine-readable output)]:n' \
+    '--method[Show only requests of this type (e.g. GET, POST)]:method' \
+    '--status[Show only these response codes (e.g. 404, or 5xx for any 500-series)]:code|range' \
+    '--path[Show only requests to matching addresses (use * and ? as wildcards, e.g. /users/*)]:pattern' \
+    '--since[Show entries from this long ago until now (e.g. 2h = the last 2 hours)]:duration' \
+    '--until[Hide entries newer than this (e.g. 30m = skip the most recent 30 minutes)]:duration' \
+    '--api-key[Postman API key (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '--json[Print entries as machine-readable data instead of the scrollable view]' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:viewNameOrId:'
+    '*:mockServerId:_files -g "*.json"'
 }
 
-_postman_dataset_view_update() {
+_postman_simulation_delete() {
   _arguments \
-    '(-d --dataset)'{-d,--dataset}'[Dataset the view belongs to — a local .dataset.yaml path or a cloud dataset id]:datasetPathOrId' \
-    '(-n --name)'{-n,--name}'[New view name]:name' \
-    '(-q --query)'{-q,--query}'[New SQL query]:sql' \
-    '--api-key[Postman API key (defaults to the `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
+    '(-y --yes)'{-y,--yes}'[Delete without asking for confirmation first]' \
+    '--api-key[Postman API key, used with a Postman cloud id (defaults to your `postman login` session)]:key:_files -g "*.(pem|crt|key)"' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:viewNameOrId:'
+    '*:simIdOrPath:'
 }
 
-_postman_dataset_jdbc() {
+_postman_team() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_dataset_jdbc_commands' \
+    '1: :_postman_team_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        inspect) _postman_dataset_jdbc_inspect ;;
+        list) _postman_team_list ;;
       esac
       ;;
   esac
 }
 
-_postman_dataset_jdbc_commands() {
+_postman_team_commands() {
   local -a sub
   sub=(
-    'inspect:Detect Java, list driver classes, suggest a URL template and read driver properties.'
+    'list:List the teams inside your organisation.'
   )
-  _describe -t commands 'jdbc command' sub
+  _describe -t commands 'team command' sub
 }
 
-_postman_dataset_jdbc_inspect() {
+_postman_team_list() {
   _arguments \
-    '--driver-class[Introspect this class instead of auto-selecting]:fqcn' \
-    '--url-template[Use this URL template instead of the one inferred from the JAR filename]:template' \
-    '--java-path[Java runtime to use. Machine-local only — never written to a dataset. Also read from POSTMAN_JDBC_JAVA_PATH.]:path:_files -g "*.json"' \
-    '--json[Emit the discovery result as JSON]' \
-    '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:jar...:'
+    '--can-create-workspace[Only list teams you could create a workspace in.]' \
+    '--json[Print the list as machine-readable JSON.]' \
+    '--timeout[Abort the run after this many milliseconds. Defaults to 30000.]:ms' \
+    '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_dependency() {
+_postman_update() {
+  _arguments \
+    '--check[Check whether a Postman CLI update is available.]' \
+    '(-h --help)'{-h,--help}'[display help for command]'
+}
+
+_postman_webhook() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_dependency_commands' \
+    '1: :_postman_webhook_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        add) _postman_dependency_add ;;
-        get) _postman_dependency_get ;;
-        list) _postman_dependency_list ;;
-        install) _postman_dependency_install ;;
-        update) _postman_dependency_update ;;
-        remove) _postman_dependency_remove ;;
+        create) _postman_webhook_create ;;
+        start) _postman_webhook_start ;;
+        pause) _postman_webhook_pause ;;
+        list) _postman_webhook_list ;;
+        delete) _postman_webhook_delete ;;
+        status) _postman_webhook_status ;;
+        requests) _postman_webhook_requests ;;
+        scripts) _postman_webhook_scripts ;;
+        forward) _postman_webhook_forward ;;
       esac
       ;;
   esac
 }
 
-_postman_dependency_commands() {
+_postman_webhook_commands() {
   local -a sub
   sub=(
-    'add:Add a Postman collection, environment, or mock as a workspace dependency.'
-    'get:Show a declared workspace dependency from .postman/resources.yaml.'
-    'list:List the workspace dependencies declared in .postman/resources.yaml.'
-    'install:Materialise the dependencies declared in .postman/resources.yaml (all, or one).'
-    'update:Refresh declared dependencies to the latest content from their source (all, or one).'
-    'remove:Remove a workspace dependency and delete its local files.'
+    'create:Create a new webhook and print its public URL.'
+    'start:Activate a webhook so it can receive requests.'
+    'pause:Pause a webhook so it no longer accepts requests.'
+    'list:List all webhooks in a workspace.'
+    'delete:Permanently delete a webhook.'
+    'status:Show details for a webhook.'
+    'requests:List, inspect, and replay requests received by a webhook.'
+    'scripts:Create or update scripts executed by a webhook.'
+    'forward:Forward incoming webhook requests to a local port.'
   )
-  _describe -t commands 'dependency command' sub
+  _describe -t commands 'webhook command' sub
 }
 
-_postman_dependency_add() {
+_postman_webhook_create() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Workspace id to resolve a name in (defaults to the current workspace).]:id' \
-    '(-y --yes)'{-y,--yes}'[Skip all confirmation prompts.]' \
-    '--json[Output the result as JSON.]' \
+    '(-t --title)'{-t,--title}'[Name for the webhook (default\: "CLI Webhook")]:title' \
+    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID (falls back to .postman/resources.yaml or .postman/config.json)]:workspaceId' \
+    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
+    '(-h --help)'{-h,--help}'[display help for command]'
+}
+
+_postman_webhook_start() {
+  _arguments \
+    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID]:workspaceId' \
+    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:nameOrId:'
+    '*:webhookIdOrUrl:'
 }
 
-_postman_dependency_get() {
+_postman_webhook_pause() {
   _arguments \
-    '--type[Only match dependencies of this type (collection, environment, or mock).]:type' \
-    '--json[Output the result as JSON.]' \
+    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID]:workspaceId' \
+    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:nameOrId:'
+    '*:webhookIdOrUrl:'
 }
 
-_postman_dependency_list() {
+_postman_webhook_list() {
   _arguments \
-    '--type[Only list dependencies of this type (collection, environment, or mock).]:type' \
-    '--json[Output the result as JSON.]' \
+    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID (falls back to .postman/resources.yaml or .postman/config.json)]:workspaceId' \
+    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
     '(-h --help)'{-h,--help}'[display help for command]'
 }
 
-_postman_dependency_install() {
+_postman_webhook_delete() {
   _arguments \
-    '--type[Only install dependencies of this type (collection, environment, or mock).]:type' \
-    '--json[Output the result as JSON.]' \
+    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID]:workspaceId' \
+    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:nameOrId:'
+    '*:webhookId:'
 }
 
-_postman_dependency_update() {
+_postman_webhook_status() {
   _arguments \
-    '--type[Only update dependencies of this type (collection, environment, or mock).]:type' \
-    '--json[Output the result as JSON.]' \
+    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID]:workspaceId' \
+    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:nameOrId:'
+    '*:webhookId:'
 }
 
-_postman_dependency_remove() {
+_postman_webhook_requests() {
+  local context state state_descr line
+  typeset -A opt_args
+  _arguments -C \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '1: :_postman_webhook_requests_commands' \
+    '*::arg:->args'
+  case $state in
+    args)
+      case $words[1] in
+        list) _postman_webhook_requests_list ;;
+        describe) _postman_webhook_requests_describe ;;
+        replay) _postman_webhook_requests_replay ;;
+      esac
+      ;;
+  esac
+}
+
+_postman_webhook_requests_commands() {
+  local -a sub
+  sub=(
+    'list:List recent requests received by a webhook.'
+    'describe:Show details for a request received by a webhook.'
+    'replay:Replay a request received by a webhook.'
+  )
+  _describe -t commands 'requests command' sub
+}
+
+_postman_webhook_requests_list() {
   _arguments \
-    '--type[Only match dependencies of this type (collection, environment, or mock).]:type' \
-    '(-y --yes)'{-y,--yes}'[Skip the confirmation prompt (required outside an interactive terminal).]' \
-    '--json[Output the result as JSON.]' \
+    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID (falls back to .postman/resources.yaml or .postman/config.json)]:workspaceId' \
+    '--cursor[Pagination cursor returned by a previous request list response]:cursor' \
+    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:nameOrId:'
+    '*:webhookId:'
 }
 
-_postman_secret() {
+_postman_webhook_requests_describe() {
+  _arguments \
+    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID (falls back to .postman/resources.yaml or .postman/config.json)]:workspaceId' \
+    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
+    '--verbose[Show script execution logs]' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:requestId:'
+}
+
+_postman_webhook_requests_replay() {
+  _arguments \
+    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID (falls back to .postman/resources.yaml or .postman/config.json)]:workspaceId' \
+    '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:requestId:'
+}
+
+_postman_webhook_scripts() {
   local context state state_descr line
   typeset -A opt_args
   _arguments -C \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '1: :_postman_secret_commands' \
+    '1: :_postman_webhook_scripts_commands' \
     '*::arg:->args'
   case $state in
     args)
       case $words[1] in
-        create) _postman_secret_create ;;
-        list) _postman_secret_list ;;
+        set) _postman_webhook_scripts_set ;;
       esac
       ;;
   esac
 }
 
-_postman_secret_commands() {
+_postman_webhook_scripts_commands() {
   local -a sub
   sub=(
-    'create:Create a secret in a team'\''s shared vault.'
-    'list:List the secrets in a workspace'\''s shared vault\: key, secret id, vault id, and allowed domains.'
+    'set:Create or update a webhook script from a JavaScript or TypeScript file.'
   )
-  _describe -t commands 'secret command' sub
+  _describe -t commands 'scripts command' sub
 }
 
-_postman_secret_create() {
+_postman_webhook_scripts_set() {
   _arguments \
-    '--team-id[Team id (defaults to your authenticated profile'\''s team; must be your own team — the vault rejects any other team id, even one you otherwise have access to)]:id' \
+    '--event[Script event\: onEvent or onResponse]:event' \
     '(-w --workspace)'{-w,--workspace}'[Postman workspace ID (falls back to .postman/resources.yaml or .postman/config.json)]:workspaceId' \
     '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
-    '--terminal[Enter one secret value through the terminal instead of the default browser form]' \
-    '--value-stdin[Read the secret value from stdin instead of prompting; implies --terminal]' \
-    '--timeout[Seconds to wait for the browser form (default 300)]:seconds' \
     '(-h --help)'{-h,--help}'[display help for command]' \
-    '*:keys...:_files -g "*.json"'
+    '*:scriptPath:'
 }
 
-_postman_secret_list() {
+_postman_webhook_forward() {
   _arguments \
-    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID (falls back to .postman/resources.yaml or .postman/config.json)]:workspaceId' \
+    '(-w --workspace)'{-w,--workspace}'[Postman workspace ID]:workspaceId' \
     '--api-key[Postman API key]:key:_files -g "*.(pem|crt|key)"' \
-    '--json[Print the list as machine-readable JSON.]' \
-    '(-h --help)'{-h,--help}'[display help for command]'
+    '(-h --help)'{-h,--help}'[display help for command]' \
+    '*:port:'
 }
 
 # When loaded via fpath + compinit, the file body becomes the function body of