feat: add forgejo_team_repository resource

Adds a new `forgejo_team_repository` resource for managing
team-to-repository assignments. This enables fine-grained, per-repository
team access control as an alternative to the `includes_all_repositories`
boolean on the team resource.

The resource uses existing Forgejo SDK methods:
- AddTeamRepository (PUT /api/v1/teams/{id}/repos/{org}/{repo})
- RemoveTeamRepository (DELETE /api/v1/teams/{id}/repos/{org}/{repo})
- ListTeamRepositories (GET /api/v1/teams/{id}/repos)

All attributes require replacement (no in-place updates).

Import is supported using org_name/team_name/repo_name format,
consistent with the forgejo_team import identifier convention.

Closes #114
Closes #154

Author: ap-1

README.md

@@ -193,13 +193,14 @@ Some resources support import into Terraform state.
 Importing is useful for bringing existing, manually created resources under Terraform management.
 Each resource defines its own import identifier, which uniquely identifies the resource to be imported:
 
-| Resource                     | Import Identifier                                   |
-| ---------------------------- | --------------------------------------------------- |
-| `forgejo_repository`         | `<<<repo_owner>>>/<<<repo_name>>>`                  |
-| `forgejo_repository_webhook` | `<<<repo_owner>>>/<<<repo_name>>>/<<<webhook_id>>>` |
-| `forgejo_branch_protection`  | `<<<repo_owner>>>/<<<repo_name>>>/<<<branch>>>`     |
-| `forgejo_user`               | `<<<login>>>`                                       |
-| `forgejo_team`               | `<<<org_name>>>/<<<team_name>>>`                    |
+| Resource                     | Import Identifier                                       |
+| ---------------------------- | ------------------------------------------------------- |
+| `forgejo_repository`         | `<<<repo_owner>>>/<<<repo_name>>>`                      |
+| `forgejo_repository_webhook` | `<<<repo_owner>>>/<<<repo_name>>>/<<<webhook_id>>>`     |
+| `forgejo_branch_protection`  | `<<<repo_owner>>>/<<<repo_name>>>/<<<branch>>>`         |
+| `forgejo_user`               | `<<<login>>>`                                           |
+| `forgejo_team`               | `<<<org_name>>>/<<<team_name>>>`                        |
+| `forgejo_team_repository`    | `<<<org_name>>>/<<<team_name>>>/<<<repo_name>>>`        |
 
 Refer to the `examples/` directory for more import examples.
 

examples/resources/forgejo_team_repository/import.sh

@@ -0,0 +1,2 @@
+# Import using the org_name/team_name/repo_name.
+terraform import forgejo_team_repository.example test_org/org_test_team/test_repo

examples/resources/forgejo_team_repository/resource.tf

@@ -0,0 +1,39 @@
+terraform {
+  required_providers {
+    forgejo = {
+      source = "svalabs/forgejo"
+    }
+  }
+}
+
+provider "forgejo" {
+  host = "http://localhost:3000"
+}
+
+# Organization
+resource "forgejo_organization" "owner" {
+  name = "test_org"
+}
+
+# Team
+resource "forgejo_team" "team" {
+  organization_id = forgejo_organization.owner.id
+  name            = "org_test_team"
+
+  units_map = {
+    "repo.code" = "read"
+  }
+}
+
+# Repository
+resource "forgejo_repository" "repo" {
+  owner = forgejo_organization.owner.name
+  name  = "test_repo"
+}
+
+# Team repository
+resource "forgejo_team_repository" "membership" {
+  team_id    = forgejo_team.team.id
+  owner      = forgejo_organization.owner.name
+  repository = forgejo_repository.repo.name
+}

internal/provider/provider.go

@@ -271,6 +271,7 @@ func (p *forgejoProvider) Resources(_ context.Context) []func() resource.Resourc
 		NewBranchProtectionResource,
 		NewTeamResource,
 		NewTeamMemberResource,
+		NewTeamRepositoryResource,
 		NewUserResource,
 	}
 }