CLI reference — miscellaneous

Generated by bun run generate:cli-reference from spec/admin-api-openapi.json. Do not hand-edit — regenerate after refreshing the spec.

Every operation below is documented CLI-first (nayaone-admin api <operationId>) per PRD-407/DO-7. The REST /admin-api/* method+path is the fallback/alternative integration option.

40 operations in this area.

adminDeleteOauthClient

Disable an OAuth2/OIDC client

CLI (preferred):

nayaone-admin api adminDeleteOauthClient --param clientId=<clientId> --body '{}'

REST fallback: DELETE /admin-api/oauth-clients/{clientId}

adminEmitCatalogRefreshedCe

Emit cloud.nayaone.catalog.refreshed (platform-admin only). Used by out-of-process crons (ai-models refresh) that bypass the api-worker upsert routes.

CLI (preferred):

nayaone-admin api adminEmitCatalogRefreshedCe --body '{}'

REST fallback: POST /admin-api/cloudevents/catalog-refreshed

adminGetBoxCredentialLease

PRD-350 M3 — short-lived SSH credential lease for the pyinfra runner (Bearer PROVISION_CALLBACK_SECRET or admin session). Returns private key material; time-boxed via expires_at.

CLI (preferred):

nayaone-admin api adminGetBoxCredentialLease --param boxId=<boxId>

REST fallback: GET /admin-api/box-credential/{boxId}

adminGetCloudAccountRunnerStackConfig

BYOA → Pulumi stack-config seeds (with plaintext secrets) for the runner. Admin-only (PRD-9 §7).

CLI (preferred):

nayaone-admin api adminGetCloudAccountRunnerStackConfig

REST fallback: GET /admin-api/cloud-accounts/runner-stack-config

adminGetCost

Get cost data for all orgs (Admin only)

CLI (preferred):

nayaone-admin api adminGetCost

REST fallback: GET /admin-api/cost

adminGetEntitlement

Get an entitlement with active holders and graph edges

CLI (preferred):

nayaone-admin api adminGetEntitlement --param id=<id>

REST fallback: GET /admin-api/entitlements/{id}

adminGetPyinfraInventory

PRD-139 — pyinfra dynamic inventory (Bearer PROVISION_CALLBACK_SECRET or admin session)

CLI (preferred):

nayaone-admin api adminGetPyinfraInventory

REST fallback: GET /admin-api/pyinfra-inventory

adminGetRunnerCredentialLease

PRD-350 M9 — short-lived per-runner SSH credential lease for the pyinfra runner-scope converge (Bearer PROVISION_CALLBACK_SECRET or admin session). Fetch-or-mints the per-runner key; returns private key material; time-boxed via expires_at.

CLI (preferred):

nayaone-admin api adminGetRunnerCredentialLease --param runnerId=<runnerId>

REST fallback: GET /admin-api/runner-credential/{runnerId}

adminListCapabilityInstallDefaults

Pre-populate values for the per-org capability install dialog (admin only)

CLI (preferred):

nayaone-admin api adminListCapabilityInstallDefaults

REST fallback: GET /admin-api/capability-install-defaults

adminListCostFacts

Platform-wide cost fact rows (cloud-VM + AI inference) for the AG Grid pivot at /admin/cost (Admin only).

CLI (preferred):

nayaone-admin api adminListCostFacts

REST fallback: GET /admin-api/cost/facts

adminListDesiredCloudResources

Return the parsed cloud_resource.desired_state_json for the canonical row in the given scope (PRD-141 KD-4 / KD-5).

CLI (preferred):

nayaone-admin api adminListDesiredCloudResources

REST fallback: GET /admin-api/cloud-resources/desired

adminListFeedback

Visual feedback submissions from end users — proxies PostHog insight cTjIm2FI (Admin only).

CLI (preferred):

nayaone-admin api adminListFeedback

REST fallback: GET /admin-api/feedback/list

adminListOrgCapabilityInstalls

Platform-wide list of per-org Pulumi-installer capability installs (admin only)

CLI (preferred):

nayaone-admin api adminListOrgCapabilityInstalls

REST fallback: GET /admin-api/org-capability-installs

adminListPlanFeatures

List all plan_feature catalogue rows (platform_admin)

CLI (preferred):

nayaone-admin api adminListPlanFeatures

REST fallback: GET /admin-api/plan-features

adminListProjectResources

Get aggregated resources for all boxes in a project (Admin only)

CLI (preferred):

nayaone-admin api adminListProjectResources --param id=<id>

REST fallback: GET /admin-api/projects/{id}/resources

adminListPulumiStacks

List Pulumi stacks (Admin only)

CLI (preferred):

nayaone-admin api adminListPulumiStacks

REST fallback: GET /admin-api/pulumi-stacks

adminListVcpuQuotas

At-a-glance vCPU quota state for regions in use by the fleet

CLI (preferred):

nayaone-admin api adminListVcpuQuotas

REST fallback: GET /admin-api/vcpu-quotas

adminPresignFleetArtifact

PRD-350 M13 — mint a short-TTL presigned GET for a PRIVATE fleet artefact (n1d/cloudflared binary or content-addressed floor script). Bearer PROVISION_CALLBACK_SECRET or admin session.

CLI (preferred):

nayaone-admin api adminPresignFleetArtifact

REST fallback: GET /admin-api/fleet-artifact-presign

adminPreviewCloudAccountStackConfig

Sanitised BYOA stack-config preview (secret values replaced with <set>) — debug only.

CLI (preferred):

nayaone-admin api adminPreviewCloudAccountStackConfig

REST fallback: GET /admin-api/cloud-accounts/preview-stack-config

adminProvisionMachineUser

Provision a machine USER (member + user-owned api-token) — platform_admin

CLI (preferred):

nayaone-admin api adminProvisionMachineUser --body '{}'

REST fallback: POST /admin-api/machine-users/provision

adminProxyPyinfraConvergeRunner

PRD-139 Phase G.1 — runner-proxy bridge consumed by the pyinfra-worker

CLI (preferred):

nayaone-admin api adminProxyPyinfraConvergeRunner --body '{}'

REST fallback: POST /admin-api/pyinfra-converge-via-worker/runner-proxy

adminPyinfraRunnerComplete

PRD-350 M3 — pyinfra runner completion webhook (Bearer PROVISION_CALLBACK_SECRET). Closes the box_pyinfra_run telemetry pair with the real exit code.

CLI (preferred):

nayaone-admin api adminPyinfraRunnerComplete --body '{}'

REST fallback: POST /admin-api/pyinfra-runner/complete

adminPyinfraRunnerExecute

PRD-350 M3 — dispatch a pyinfra operation to the runner fleet via workflow_dispatch pyinfra.yml. Emits the started box_pyinfra_run telemetry row.

CLI (preferred):

nayaone-admin api adminPyinfraRunnerExecute --body '{}'

REST fallback: POST /admin-api/pyinfra-runner/execute

adminRefreshAiSpendRollup

Run the PRD-390 AI spend rollup now (platform_admin only)

CLI (preferred):

nayaone-admin api adminRefreshAiSpendRollup --body '{}'

REST fallback: POST /admin-api/ai-spend/refresh

adminRefreshApiWorkerTelemetryRollup

Run the PRD-390 api-worker telemetry rollup now (platform_admin only)

CLI (preferred):

nayaone-admin api adminRefreshApiWorkerTelemetryRollup --body '{}'

REST fallback: POST /admin-api/api-worker-telemetry/refresh

adminRefreshConvergeOracleRollup

Run the PRD-390 converge/oracle rollup now (platform_admin only)

CLI (preferred):

nayaone-admin api adminRefreshConvergeOracleRollup --body '{}'

REST fallback: POST /admin-api/converge-oracle/refresh

adminRefreshFleetHealthRollup

Run the PRD-390 fleet-health rollup now (platform_admin only)

CLI (preferred):

nayaone-admin api adminRefreshFleetHealthRollup --body '{}'

REST fallback: POST /admin-api/fleet-health/refresh

adminRepairMemberSync

PRD-110 — manually enqueue a reconcile for a single scope (Admin only)

CLI (preferred):

nayaone-admin api adminRepairMemberSync --body '{}'

REST fallback: POST /admin-api/member-sync/repair

adminRunPyinfraConvergeViaWorker

PRD-139 Phase G — converge a capability via the Pyodide / CF-Workers Python pyinfra dispatcher (runner-proxy transport per G.1 spike)

CLI (preferred):

nayaone-admin api adminRunPyinfraConvergeViaWorker --body '{}'

REST fallback: POST /admin-api/pyinfra-converge-via-worker

adminScopeLookup

Batch-resolve scope IDs (user / org / project / box / runner) into display metadata (Admin only).

CLI (preferred):

nayaone-admin api adminScopeLookup --body '{}'

REST fallback: POST /admin-api/scope-lookup

adminSendSystemReportEmail

Send cloud-resource oracle system report to nik@nayaone.com (Admin only)

CLI (preferred):

nayaone-admin api adminSendSystemReportEmail --body '{}'

REST fallback: POST /admin-api/system-report/email

adminSetDaemonVersion

PRD-133 — record the latest published n1-cloud-daemon version in the daemon_version_oracle table. Bearer PROVISION_CALLBACK_SECRET (release CI) or admin session.

CLI (preferred):

nayaone-admin api adminSetDaemonVersion --body '{}'

REST fallback: POST /admin-api/daemon-version

adminSweepMemberSync

PRD-110 — enqueue reconcile_request events for one or every org (Admin only)

CLI (preferred):

nayaone-admin api adminSweepMemberSync --body '{}'

REST fallback: POST /admin-api/member-sync/sweep

adminUpsertGoldenImage

PRD-350 M6 — register a Packer-baked golden image in the golden_image catalog. Bearer PROVISION_CALLBACK_SECRET (CI) or admin session.

CLI (preferred):

nayaone-admin api adminUpsertGoldenImage --body '{}'

REST fallback: POST /admin-api/golden-image

adminUpsertOauthClient

Upsert an OAuth2/OIDC client (admin)

CLI (preferred):

nayaone-admin api adminUpsertOauthClient --body '{}'

REST fallback: POST /admin-api/oauth-clients

adminUpsertWorkerSecret

Bind / rotate a Cloudflare Worker secret (platform-admin only). Wraps PUT /accounts/{id}/workers/scripts/{name}/secrets.

CLI (preferred):

nayaone-admin api adminUpsertWorkerSecret --body '{}'

REST fallback: POST /admin-api/worker-secrets

adminValidateArchitecture

Validate (provider, region, machineType, architecture, osSlug) against the cached cloud catalog (Admin only).

CLI (preferred):

nayaone-admin api adminValidateArchitecture --body '{}'

REST fallback: POST /admin-api/architecture/validate

adminVerifyConvergePostDestroy

PRD-231 Phase C — Probe each pre-destroy cloud_resource_id by-id; audit + block next up on still-present rows.

CLI (preferred):

nayaone-admin api adminVerifyConvergePostDestroy --body '{}'

REST fallback: POST /admin-api/converge/post-destroy-verify

getPlatformHeadscaleOverview

PRD-92 P — platform-admin full-tailnet Headscale overview

CLI (preferred):

nayaone-admin api getPlatformHeadscaleOverview

REST fallback: GET /admin-api/headscale/overview

reserveNextPrdNumber

PRD-373 — atomically reserve the next PRD ordinal from the D1 sequence table. Bearer PROVISION_CALLBACK_SECRET (CI) or admin session.

CLI (preferred):

nayaone-admin api reserveNextPrdNumber --body '{}'

REST fallback: POST /admin-api/prd-number/reserve