CLI reference — Pulumi State

Generated by bun run generate:cli-reference from spec/admin-api-openapi.json. Do not hand-edit — regenerate after refreshing the spec.

Every operation below is documented CLI-first (nayaone-admin api <operationId>) per PRD-407/DO-7. The REST /admin-api/* method+path is the fallback/alternative integration option.

11 operations in this area.

`adminCancelPulumiState`

Dispatch a Pulumi state-lock cancel for the given scope (PRD-259). Dispatches cancel.yml (SHGR) or cancel-cold-start.yml (ubuntu-latest) and creates a task row.

CLI (preferred):

nayaone-admin api adminCancelPulumiState --body '{}'

REST fallback: POST /admin-api/pulumi-state/cancel

`adminClearPulumiStateCache`

Wipe Pulumi state cache for the given scope (PRD-141 KD-7)

CLI (preferred):

nayaone-admin api adminClearPulumiStateCache --body '{}'

REST fallback: DELETE /admin-api/pulumi-state/cache

`adminGetLatestPulumiPreview`

Render pulumi preview diff for a scope (PRD-141)

CLI (preferred):

nayaone-admin api adminGetLatestPulumiPreview

REST fallback: GET /admin-api/pulumi-state/preview

`adminGetPulumiPreview`

Fetch a single pulumi_preview_result row by id (PRD-141 Phase D)

CLI (preferred):

nayaone-admin api adminGetPulumiPreview --param id=<id>

REST fallback: GET /admin-api/pulumi-state/preview/{id}

`adminGetPulumiStateCache`

List Pulumi state cache rows for the cache-tab UI (PRD-141 KD-7)

CLI (preferred):

nayaone-admin api adminGetPulumiStateCache

REST fallback: GET /admin-api/pulumi-state/cache

`adminListAdoptSecretKeys`

List seeded adopt-secret key names for a stack (admin only)

CLI (preferred):

nayaone-admin api adminListAdoptSecretKeys --param stackId=<stackId>

REST fallback: GET /admin-api/pulumi-state/adopt-secrets/{stackId}

`adminListPulumiPreviews`

List pulumi_preview_result rows (PRD-141 Phase D)

CLI (preferred):

nayaone-admin api adminListPulumiPreviews

REST fallback: GET /admin-api/pulumi-state/previews

`adminProbePulumiState`

Read-only preflight probe — D1 oracle lock + GH workflow in-flight + (boxes) CF tunnel reachability. Returns lock + link3 decisions for the given ConvergeScope. Mirrors bun scripts/probe.ts and gh workflow run probe.yml.

CLI (preferred):

nayaone-admin api adminProbePulumiState --body '{}'

REST fallback: POST /admin-api/pulumi-state/probe

`adminReleasePulumiStateLock`

Force-release the R2 lock for a given Pulumi stack (PRD-141 KD-12; replaces force-unlock.yml).

CLI (preferred):

nayaone-admin api adminReleasePulumiStateLock --body '{}'

REST fallback: DELETE /admin-api/pulumi-state/lock

`adminRunPulumiConverge`

Dispatch a Pulumi Automation API converge for the given scope (PRD-141). Action ∈ preview|up|refresh|destroy.

CLI (preferred):

nayaone-admin api adminRunPulumiConverge --body '{}'

REST fallback: POST /admin-api/pulumi-state/converge

`adminSeedAdoptSecrets`

Seed current credential values so a converge adopts them (admin only)

CLI (preferred):

nayaone-admin api adminSeedAdoptSecrets --param stackId=<stackId> --body '{}'

REST fallback: POST /admin-api/pulumi-state/adopt-secrets/{stackId}