| mode | Action mode. Use validate for setup checks, run for PR preview, cleanup for PR close cleanup, or repair for automated implementation repair. In validate mode, an optional agent harness lint runs when opted in via tdd.harness.enabled or a root AGENTS.md file; harness lint errors are imperative 'To fix:' remediation instructions surfaced in validation-summary. | no | run |
| onboarding-config-path | Path to .postman-template/onboarding.yml. | no | .postman-template/onboarding.yml |
| project-name | Optional service project name override. Defaults to service.name from onboarding config. | no | — |
| spec-path | Optional OpenAPI spec path override. Defaults to spec.path from onboarding config. | no | — |
| pr-number | Optional PR number override. Defaults to the pull_request event number. | no | — |
| postman-api-key | Postman API key used for workspace, spec, and collection operations. Required unless mode=validate. | no | — |
| postman-access-token | Postman access token. Required by mode=repair when the resolved repair provider is postman-agent-mode; optional otherwise. | no | — |
| openai-api-key | OpenAI API key used by mode=repair when the resolved repair provider is openai-responses. | no | — |
| anthropic-api-key | Anthropic API key used by mode=repair when the resolved repair provider is anthropic-messages. | no | — |
| github-token | GitHub token used for PR comments and config writeback. Required unless mode=validate. | no | — |
| repair-github-token | Optional token used by mode=repair for pushing repair commits. Prefer a PAT or GitHub App token so pushed commits trigger follow-up workflows. | no | — |
| repair-provider | Optional repair provider guard for mode=repair. When omitted, tdd.repair.provider from onboarding config is used. If set, it must be one of openai-responses, anthropic-messages, or postman-agent-mode and must match onboarding config. | no | — |
| repair-model | Model used by mode=repair. Defaults to gpt-5.5 for openai-responses, claude-sonnet-5 for anthropic-messages, and GPT_5 for postman-agent-mode. | no | — |
| repair-max-attempts | Maximum accepted implementation patch attempts in mode=repair. | no | 3 |
| repair-max-tool-rounds | Per-attempt provider tool-round budget in mode=repair. Integer between 1 and 50. | no | 12 |
| repair-breaker-threshold | Consecutive identical failure fingerprint count that triggers a repeated_failure circuit breaker in mode=repair. Integer >= 2. | no | 2 |
| repair-escalation-model | Optional stronger model for the escalation rung in mode=repair. Same provider, one extra attempt after budget exhaustion. Defaults to tdd.repair.escalationModel from onboarding config when unset. | no | — |
| repair-commit-message | Commit message used when mode=repair pushes a passing implementation change. | no | Postman TDD repair |
| immutable-state-signing-key | Optional HMAC signing key for immutable spec baselines. When set, previous sticky comment baselines must have a valid signature. | no | — |
| workspace-team-id | Numeric Postman sub-team ID for org-mode workspace creation. | no | — |
| config-write-mode | How workspace ID bootstrap should write back onboarding config. One of commit-and-push, commit-only, none. | no | commit-and-push |
| committer-name | Git committer name for workspace ID writeback commits. | no | Postman |
| committer-email | Git committer email for workspace ID writeback commits. | no | support@postman.com |
| postman-region | Postman data residency region. One of us or eu. | no | us |
| postman-stack | Postman stack profile. Leave prod unless Postman support directs otherwise. | no | prod |