CLI reference — Forge

Generated by bun run generate:cli-reference from spec/admin-api-openapi.json. Do not hand-edit — regenerate after refreshing the spec.

Every operation below is documented CLI-first (nayaone-admin api <operationId>) per PRD-407/DO-7. The REST /admin-api/* method+path is the fallback/alternative integration option.

19 operations in this area.

`adminForgeAddOrgMember`

PRD-359 Phase Z — add a user to a Forge org via the platform manual-grant team (Admin only). Forgejo org membership is team-derived; this ensures the marker-tagged ‘collaborators’ team and adds the user to it.

CLI (preferred):

nayaone-admin api adminForgeAddOrgMember --body '{}'

REST fallback: POST /admin-api/forge/orgs/members/add

`adminForgeAddTeamMember`

PRD-359 Phase Z — add a user to a Forge team by Forgejo team id (Admin only)

CLI (preferred):

nayaone-admin api adminForgeAddTeamMember --body '{}'

REST fallback: POST /admin-api/forge/teams/members/add

`adminForgeCreateRepo`

PRD-407 Phase J — create a Forgejo repo under an org or user owner (Admin only)

CLI (preferred):

nayaone-admin api adminForgeCreateRepo --body '{}'

REST fallback: POST /admin-api/forge/repos/create

`adminForgeCreateUser`

PRD-407 Phase J — create a Forgejo user via admin API (Admin only). When password is omitted, a random one is generated and returned once.

CLI (preferred):

nayaone-admin api adminForgeCreateUser --body '{}'

REST fallback: POST /admin-api/forge/users/create

`adminForgeDiagnoseAccess`

PRD-359 Phase Z — composed read: why can/can’t a user see a Forge repo (CF edge expectation + Forge user + org/team/collaborator grants + Sudo visibility probe) (Admin only)

CLI (preferred):

nayaone-admin api adminForgeDiagnoseAccess --body '{}'

REST fallback: POST /admin-api/forge/diagnose-access

`adminForgeGrantRepoCollaborator`

PRD-359 Phase Z — grant/update a Forge repo collaborator at a permission level (Admin only)

CLI (preferred):

nayaone-admin api adminForgeGrantRepoCollaborator --body '{}'

REST fallback: POST /admin-api/forge/repos/collaborators/grant

`adminForgeListRunners`

PRD-407 Phase J — list Forgejo Actions runners on an install (Admin only). POST-with-body so orgId (incl. SYSTEM sentinel) follows the module convention.

CLI (preferred):

nayaone-admin api adminForgeListRunners --body '{}'

REST fallback: POST /admin-api/forge/runners/list

`adminForgeMigrateRepo`

PRD-407 Phase J — migrate a remote git/GitHub repo onto a Forgejo install (Admin only)

CLI (preferred):

nayaone-admin api adminForgeMigrateRepo --body '{}'

REST fallback: POST /admin-api/forge/repos/migrate

`adminForgeRemoveOrgMember`

PRD-359 Phase Z — remove a user from a Forge org (drops every team membership in that org) (Admin only)

CLI (preferred):

nayaone-admin api adminForgeRemoveOrgMember --body '{}'

REST fallback: POST /admin-api/forge/orgs/members/remove

`adminForgeRemoveTeamMember`

PRD-359 Phase Z — remove a user from a Forge team (Admin only)

CLI (preferred):

nayaone-admin api adminForgeRemoveTeamMember --body '{}'

REST fallback: POST /admin-api/forge/teams/members/remove

`adminForgeRevokeRepoCollaborator`

PRD-359 Phase Z — revoke a Forge repo collaborator (Admin only)

CLI (preferred):

nayaone-admin api adminForgeRevokeRepoCollaborator --body '{}'

REST fallback: POST /admin-api/forge/repos/collaborators/revoke

`adminForgeSetRepoSecret`

PRD-407 Phase J — create or update a Forgejo repo Actions secret (Admin only). Secret value is never audited or returned.

CLI (preferred):

nayaone-admin api adminForgeSetRepoSecret --body '{}'

REST fallback: POST /admin-api/forge/repos/secrets/set

`adminForgeSetRepoVariable`

PRD-407 Phase J — create or update a Forgejo repo Actions variable (Admin only). Value is never audited or returned.

CLI (preferred):

nayaone-admin api adminForgeSetRepoVariable --body '{}'

REST fallback: POST /admin-api/forge/repos/variables/set

`adminForgeSetRepoVisibility`

PRD-359 Phase Z — set a Forge repo private/public (Admin only)

CLI (preferred):

nayaone-admin api adminForgeSetRepoVisibility --body '{}'

REST fallback: POST /admin-api/forge/repos/visibility

`adminForgeSetSiteAdmin`

PRD-359 Phase Z — promote/demote the Forgejo site-admin flag on a user (Admin only)

CLI (preferred):

nayaone-admin api adminForgeSetSiteAdmin --body '{}'

REST fallback: POST /admin-api/forge/users/site-admin

`adminForgeUserAccess`

PRD-359 Phase Z — per-org Forge access report for one n1 user (login, site-admin flag, teams, repo grants) from the D1 inventory mirror (Admin only)

CLI (preferred):

nayaone-admin api adminForgeUserAccess --param userId=<userId>

REST fallback: GET /admin-api/forge/users/{userId}/access

`adminReconcileForgeCodeAssist`

PRD-376 WS-N — install the n1-code-assist reviewer workflow + repo secrets on every Forge repo (Admin only)

CLI (preferred):

nayaone-admin api adminReconcileForgeCodeAssist --body '{}'

REST fallback: POST /admin-api/forge/reconcile-code-assist

`adminReconcileForgeInventory`

PRD-359 Phase R — sync Forgejo inventory + drift report + oracle orphans (Admin only)

CLI (preferred):

nayaone-admin api adminReconcileForgeInventory --body '{}'

REST fallback: POST /admin-api/forge/reconcile-inventory

`adminReconcileForgePlatform`

PRD-359 Phase Q — discover CF Access apps, upsert forge oracle rows, heal CF drift (Admin only)

CLI (preferred):

nayaone-admin api adminReconcileForgePlatform --body '{}'

REST fallback: POST /admin-api/forge/reconcile-platform