| project-name | Service project name used for temporary smoke collection naming. | yes | — |
| workspace-id | Postman workspace ID produced by bootstrap. | yes | — |
| spec-id | Postman spec ID produced by bootstrap. | yes | — |
| smoke-collection-id | Canonical Smoke collection ID to refresh in place. | yes | — |
| flow-path | Optional repo-root-relative path to the curated flow.yaml manifest. When omitted, the canonical Smoke collection is refreshed from the generated spec collection without flow curation. | no | — |
| postman-api-key | Optional service-account API key. Only used to re-mint an expired postman-access-token; the collection reshape itself runs access-token-only through the Postman gateway. | no | — |
| postman-region | Postman data residency region for public API calls. Supported values are us and eu. | no | us |
| auth-config-json | Advanced low-level Smoke runtime auth JSON, usually generated by onboarding templates from smoke.apiKey or smoke.oauth config. Supports OAuth2 client credentials and API key auth. | no | — |
| secrets-resolver-enabled | Whether to include the legacy AWS Secrets Manager resolver item at the start of the generated Smoke collection. Defaults to true for backward compatibility; set to false to opt out. | no | true |
| spec-path | Optional repo-root-relative path to the local OpenAPI spec for validation and debug context. | no | — |
| debug-dump-path | Optional repo-root-relative or absolute path to write the transformed collection JSON before update. | no | — |
| collection-sync-mode | Collection lifecycle policy. Refresh is the supported v1 mode. | no | refresh |
| postman-access-token | Service-account access token (x-access-token) that authenticates the Smoke collection reshape against the Postman gateway. Required for the reshape; when omitted, the action mints one from postman-api-key (service-account PMAK). | no | — |
| fail-on-flow-warning | Whether non-blocking flow warnings should fail the action. | no | false |
| keep-temp-collection-on-failure | Whether to keep the generated temporary smoke collection for debugging after a failed apply. | no | false |
| temp-collection-prefix | Prefix used when generating the temporary smoke collection from the spec. | no | [Smoke][Temp] |
| team-id | Optional Postman team ID, used only to attribute non-identifying usage telemetry to your team. The action runs identically with or without it. | no | — |
| branch-strategy | Branch-aware sync strategy. legacy (default) keeps branch-blind behavior; publish-gate restricts canonical writes to the canonical branch and skips on other branches; preview additionally maintains suffixed per-branch preview asset sets. | no | legacy |
| canonical-branch | Explicit canonical branch (the sole writer of canonical assets). Defaults to the provider-resolved default branch; required on providers without a default-branch variable (Bitbucket, Azure DevOps) when branch-strategy is not legacy. | no | — |
| channels | Comma-separated channel map for long-lived promotion branches, e.g. "develop=DEV, staging=STAGE, release/*=RC". | no | — |