Git commit prior to merge

lib/api-spec/openapi.yaml

@@ -1811,6 +1811,18 @@ paths:
           schema:
             type: string
           description: Exact action name to filter by (e.g. "group.force_delete").
+        - in: query
+          name: forcedOnly
+          required: false
+          schema:
+            type: boolean
+            default: false
+          description: |
+            When true, restrict results to forced deletions only — i.e. rows
+            with action `group.force_delete`, `user.force_delete`,
+            `app.force_delete`, `service.force_delete`, or any
+            `group.delete`/`user.delete`/`app.delete` row whose metadata
+            contains `force: true`. Overrides the `action` filter when set.
         - in: query
           name: from
           required: false
@@ -1861,7 +1873,8 @@ paths:
       summary: Export filtered audit log as CSV (admin)
       description: |
         Streams the filtered audit log as a CSV download.
-        Honors the same `action`, `from`, and `to` filters as the list endpoint.
+        Honors the same `action`, `forcedOnly`, `from`, and `to` filters as the
+        list endpoint.
         Columns: action, actor_username, target_type, target_id, created_at, metadata.
         Capped at 50,000 rows per export to bound response size.
       parameters:
@@ -1871,6 +1884,16 @@ paths:
           schema:
             type: string
           description: Exact action name to filter by (e.g. "group.force_delete").
+        - in: query
+          name: forcedOnly
+          required: false
+          schema:
+            type: boolean
+            default: false
+          description: |
+            When true, restrict the export to forced deletions only.
+            See the list endpoint for the exact set of matching rows.
+            Overrides the `action` filter when set.
         - in: query
           name: from
           required: false