@asteroidai/cli 1.9.33 → 1.9.67

package/dist/core.js

@@ -189,7 +189,23 @@ var COMMANDS = [
           flag: "base",
           type: "json",
           required: true,
-          description: "The base machine: a browser, or a Linux / Windows OS environment. For non-admins, an OS base's `snapshotName` must be one of the organisation's snapshots or a public one; admins may name any snapshot. Omit it for the default image."
+          description: "The base machine: a browser, or a Linux / Windows OS environment. For non-admins, an OS base's `snapshotName` must be one of the organisation's snapshots or a public one; admins may name any snapshot. Omit it for the default image.",
+          fields: [
+            {
+              name: "type",
+              flag: "type",
+              type: "string",
+              required: false,
+              description: "Type of execution environment",
+              enum: ["browser", "os"]
+            },
+            {
+              name: "config",
+              flag: "config",
+              type: "json",
+              required: false
+            }
+          ]
         },
         {
           name: "profiles",
@@ -210,21 +226,272 @@ var COMMANDS = [
           flag: "warm-pool",
           type: "json",
           required: false,
-          description: "Warm pool configuration. Absent means the environment is not kept warm. Exclusive with warmCache and dedicated."
+          description: "Warm pool configuration. Absent means the environment is not kept warm. Exclusive with warmCache and dedicated.",
+          fields: [
+            {
+              name: "targetSize",
+              flag: "target-size",
+              type: "integer",
+              required: false,
+              description: "Baseline number of warm environments to keep ready per profile row outside any scheduled window. An environment with no rows keeps this many in total. 0 drains the pool while no window is open; with no schedule, 0 drains it fully so keep-warm can be turned off or the environment deleted"
+            },
+            {
+              name: "schedule",
+              flag: "schedule",
+              type: "json",
+              required: false,
+              description: "Hour windows that override the baseline target size. Absent means the baseline applies around the clock.",
+              fields: [
+                {
+                  name: "timezone",
+                  flag: "timezone",
+                  type: "string",
+                  required: false,
+                  description: "IANA time zone the windows are evaluated in, such as Europe/London"
+                },
+                {
+                  name: "windows",
+                  flag: "windows",
+                  type: "json",
+                  required: false
+                }
+              ]
+            },
+            {
+              name: "maxAgeMins",
+              flag: "max-age-mins",
+              type: "integer",
+              required: false,
+              description: "Member max age in minutes, not a hard retirement time. The replacement boots ahead of it, by the pool's recent warmup time; the member stays claimable past it until the replacement is ready, for a grace of at most half the max age or 15 minutes."
+            },
+            {
+              name: "reuse",
+              flag: "reuse",
+              type: "json",
+              required: false,
+              description: "How long a pooled environment lives: retired on its first claim, or reused until maxAgeMins and its replacement is ready."
+            },
+            {
+              name: "initialization",
+              flag: "initialization",
+              type: "json",
+              required: false,
+              description: "Agent that initialises each member. Absent means a member is available as soon as it has booted.",
+              fields: [
+                {
+                  name: "workflowId",
+                  flag: "workflow-id",
+                  type: "string",
+                  required: false,
+                  description: "The initialising workflow"
+                },
+                {
+                  name: "inputs",
+                  flag: "inputs",
+                  type: "json",
+                  required: false,
+                  description: "Fixed inputs for the initialising run",
+                  record: "json"
+                },
+                {
+                  name: "successOutcomes",
+                  flag: "success-outcomes",
+                  type: "string[]",
+                  required: false,
+                  description: "Outcomes of the initialising run that count as a success. A run that completes with any other outcome is treated as a failed run: a warm pool tears the member down, a warm cache records a failed login. Each must be an outcome of the agent's published version. Absent or empty means any completed run counts."
+                }
+              ]
+            },
+            {
+              name: "keepAlive",
+              flag: "keep-alive",
+              type: "json",
+              required: false,
+              description: "Periodic probe that keeps an idle member's session alive and retires a member whose session is dead. Needs an Anchor browser base or a Daytona desktop base. Absent means members are never touched between warmup and retirement.",
+              fields: [
+                {
+                  name: "intervalMins",
+                  flag: "interval-mins",
+                  type: "integer",
+                  required: false,
+                  description: "Minutes between probes of the same member, whether the last one passed or failed. The sweep runs once a minute, so 1 is the shortest effective interval. Must be below the pool's maxAgeMins."
+                },
+                {
+                  name: "script",
+                  flag: "script",
+                  type: "string",
+                  required: false,
+                  description: "On a browser base: a JavaScript expression evaluated in the member's open page. `await` is allowed. It must evaluate, or resolve, to true while the session is live and to false once it is not. Example: `fetch('/api/session', {credentials: 'include'}).then(r => r.ok)`. It runs with no attached execution, so it must not navigate. On a Linux base: a bash script. On a Windows base: a PowerShell script. Exit code 0 means the session is live; any other exit code means it is dead."
+                }
+              ]
+            }
+          ]
         },
         {
           name: "warmCache",
           flag: "warm-cache",
           type: "json",
           required: false,
-          description: "Warm cache configuration. Absent means no login agent keeps the profiles' cookies fresh. Exclusive with warmPool and dedicated."
+          description: "Warm cache configuration. Absent means no login agent keeps the profiles' cookies fresh. Exclusive with warmPool and dedicated.",
+          fields: [
+            {
+              name: "intervalMins",
+              flag: "interval-mins",
+              type: "integer",
+              required: false,
+              description: "Minutes between logins of the same profile"
+            },
+            {
+              name: "activeHours",
+              flag: "active-hours",
+              type: "json",
+              required: false,
+              description: "Hours during which logins run. Absent means around the clock.",
+              fields: [
+                {
+                  name: "timezone",
+                  flag: "timezone",
+                  type: "string",
+                  required: false,
+                  description: "IANA time zone the windows are evaluated in, such as Europe/London"
+                },
+                {
+                  name: "windows",
+                  flag: "windows",
+                  type: "json",
+                  required: false
+                }
+              ]
+            },
+            {
+              name: "initialization",
+              flag: "initialization",
+              type: "json",
+              required: false,
+              description: "The login agent, run on each profile's own environment",
+              fields: [
+                {
+                  name: "workflowId",
+                  flag: "workflow-id",
+                  type: "string",
+                  required: false,
+                  description: "The initialising workflow"
+                },
+                {
+                  name: "inputs",
+                  flag: "inputs",
+                  type: "json",
+                  required: false,
+                  description: "Fixed inputs for the initialising run",
+                  record: "json"
+                },
+                {
+                  name: "successOutcomes",
+                  flag: "success-outcomes",
+                  type: "string[]",
+                  required: false,
+                  description: "Outcomes of the initialising run that count as a success. A run that completes with any other outcome is treated as a failed run: a warm pool tears the member down, a warm cache records a failed login. Each must be an outcome of the agent's published version. Absent or empty means any completed run counts."
+                }
+              ]
+            },
+            {
+              name: "executionsWriteBack",
+              flag: "executions-write-back",
+              type: "boolean",
+              required: false,
+              description: "Whether executions on the environment save the browser profile when they stop. Off by default: only the login agent saves it, so a run that ends logged out cannot overwrite the session for later runs. Must be on with an Anchor sticky IP, which saves every session."
+            }
+          ]
         },
         {
           name: "dedicated",
           flag: "dedicated",
           type: "json",
           required: false,
-          description: "Admin only, and returned to admins only. Dedicated worker configuration. Absent means no workers are kept. Exclusive with warmPool and warmCache."
+          description: "Admin only, and returned to admins only. Dedicated worker configuration. Absent means no workers are kept. Exclusive with warmPool and warmCache.",
+          fields: [
+            {
+              name: "workflowId",
+              flag: "workflow-id",
+              type: "string",
+              required: false,
+              description: "The workflow the workers keep loaded"
+            },
+            {
+              name: "targetSize",
+              flag: "target-size",
+              type: "integer",
+              required: false,
+              description: "Baseline number of workers to keep ready outside any scheduled window. 0 drains the environment."
+            },
+            {
+              name: "schedule",
+              flag: "schedule",
+              type: "json",
+              required: false,
+              description: "Hour windows that override the baseline target size. Absent means the baseline applies around the clock.",
+              fields: [
+                {
+                  name: "timezone",
+                  flag: "timezone",
+                  type: "string",
+                  required: false,
+                  description: "IANA time zone the windows are evaluated in, such as Europe/London"
+                },
+                {
+                  name: "windows",
+                  flag: "windows",
+                  type: "json",
+                  required: false
+                }
+              ]
+            },
+            {
+              name: "maxAgeMins",
+              flag: "max-age-mins",
+              type: "integer",
+              required: false,
+              description: "Member max age in minutes. As for a warm pool, the replacement boots ahead of it."
+            },
+            {
+              name: "executionsPerWorker",
+              flag: "executions-per-worker",
+              type: "integer",
+              required: false,
+              description: "Executions one worker runs at once, each on its own page of the member's browser"
+            },
+            {
+              name: "initialization",
+              flag: "initialization",
+              type: "json",
+              required: false,
+              description: "Workflow that initialises each member before its worker loads, such as a sign-in. Absent means the worker loads as soon as the browser has booted.",
+              fields: [
+                {
+                  name: "workflowId",
+                  flag: "workflow-id",
+                  type: "string",
+                  required: false,
+                  description: "The initialising workflow"
+                },
+                {
+                  name: "inputs",
+                  flag: "inputs",
+                  type: "json",
+                  required: false,
+                  description: "Fixed inputs for the initialising run",
+                  record: "json"
+                },
+                {
+                  name: "successOutcomes",
+                  flag: "success-outcomes",
+                  type: "string[]",
+                  required: false,
+                  description: "Outcomes of the initialising run that count as a success. A run that completes with any other outcome is treated as a failed run: a warm pool tears the member down, a warm cache records a failed login. Each must be an outcome of the agent's published version. Absent or empty means any completed run counts."
+                }
+              ]
+            }
+          ]
         }
       ],
       files: [],
@@ -339,7 +606,23 @@ var COMMANDS = [
           flag: "base",
           type: "json",
           required: true,
-          description: "The base machine: a browser, or a Linux / Windows OS environment. For non-admins, an OS base's `snapshotName` must be one of the organisation's snapshots or a public one; admins may name any snapshot. Omit it for the default image."
+          description: "The base machine: a browser, or a Linux / Windows OS environment. For non-admins, an OS base's `snapshotName` must be one of the organisation's snapshots or a public one; admins may name any snapshot. Omit it for the default image.",
+          fields: [
+            {
+              name: "type",
+              flag: "type",
+              type: "string",
+              required: false,
+              description: "Type of execution environment",
+              enum: ["browser", "os"]
+            },
+            {
+              name: "config",
+              flag: "config",
+              type: "json",
+              required: false
+            }
+          ]
         },
         {
           name: "profiles",
@@ -360,21 +643,272 @@ var COMMANDS = [
           flag: "warm-pool",
           type: "json",
           required: false,
-          description: "Warm pool configuration. Absent means the environment is not kept warm. Exclusive with warmCache and dedicated."
+          description: "Warm pool configuration. Absent means the environment is not kept warm. Exclusive with warmCache and dedicated.",
+          fields: [
+            {
+              name: "targetSize",
+              flag: "target-size",
+              type: "integer",
+              required: false,
+              description: "Baseline number of warm environments to keep ready per profile row outside any scheduled window. An environment with no rows keeps this many in total. 0 drains the pool while no window is open; with no schedule, 0 drains it fully so keep-warm can be turned off or the environment deleted"
+            },
+            {
+              name: "schedule",
+              flag: "schedule",
+              type: "json",
+              required: false,
+              description: "Hour windows that override the baseline target size. Absent means the baseline applies around the clock.",
+              fields: [
+                {
+                  name: "timezone",
+                  flag: "timezone",
+                  type: "string",
+                  required: false,
+                  description: "IANA time zone the windows are evaluated in, such as Europe/London"
+                },
+                {
+                  name: "windows",
+                  flag: "windows",
+                  type: "json",
+                  required: false
+                }
+              ]
+            },
+            {
+              name: "maxAgeMins",
+              flag: "max-age-mins",
+              type: "integer",
+              required: false,
+              description: "Member max age in minutes, not a hard retirement time. The replacement boots ahead of it, by the pool's recent warmup time; the member stays claimable past it until the replacement is ready, for a grace of at most half the max age or 15 minutes."
+            },
+            {
+              name: "reuse",
+              flag: "reuse",
+              type: "json",
+              required: false,
+              description: "How long a pooled environment lives: retired on its first claim, or reused until maxAgeMins and its replacement is ready."
+            },
+            {
+              name: "initialization",
+              flag: "initialization",
+              type: "json",
+              required: false,
+              description: "Agent that initialises each member. Absent means a member is available as soon as it has booted.",
+              fields: [
+                {
+                  name: "workflowId",
+                  flag: "workflow-id",
+                  type: "string",
+                  required: false,
+                  description: "The initialising workflow"
+                },
+                {
+                  name: "inputs",
+                  flag: "inputs",
+                  type: "json",
+                  required: false,
+                  description: "Fixed inputs for the initialising run",
+                  record: "json"
+                },
+                {
+                  name: "successOutcomes",
+                  flag: "success-outcomes",
+                  type: "string[]",
+                  required: false,
+                  description: "Outcomes of the initialising run that count as a success. A run that completes with any other outcome is treated as a failed run: a warm pool tears the member down, a warm cache records a failed login. Each must be an outcome of the agent's published version. Absent or empty means any completed run counts."
+                }
+              ]
+            },
+            {
+              name: "keepAlive",
+              flag: "keep-alive",
+              type: "json",
+              required: false,
+              description: "Periodic probe that keeps an idle member's session alive and retires a member whose session is dead. Needs an Anchor browser base or a Daytona desktop base. Absent means members are never touched between warmup and retirement.",
+              fields: [
+                {
+                  name: "intervalMins",
+                  flag: "interval-mins",
+                  type: "integer",
+                  required: false,
+                  description: "Minutes between probes of the same member, whether the last one passed or failed. The sweep runs once a minute, so 1 is the shortest effective interval. Must be below the pool's maxAgeMins."
+                },
+                {
+                  name: "script",
+                  flag: "script",
+                  type: "string",
+                  required: false,
+                  description: "On a browser base: a JavaScript expression evaluated in the member's open page. `await` is allowed. It must evaluate, or resolve, to true while the session is live and to false once it is not. Example: `fetch('/api/session', {credentials: 'include'}).then(r => r.ok)`. It runs with no attached execution, so it must not navigate. On a Linux base: a bash script. On a Windows base: a PowerShell script. Exit code 0 means the session is live; any other exit code means it is dead."
+                }
+              ]
+            }
+          ]
         },
         {
           name: "warmCache",
           flag: "warm-cache",
           type: "json",
           required: false,
-          description: "Warm cache configuration. Absent means no login agent keeps the profiles' cookies fresh. Exclusive with warmPool and dedicated."
+          description: "Warm cache configuration. Absent means no login agent keeps the profiles' cookies fresh. Exclusive with warmPool and dedicated.",
+          fields: [
+            {
+              name: "intervalMins",
+              flag: "interval-mins",
+              type: "integer",
+              required: false,
+              description: "Minutes between logins of the same profile"
+            },
+            {
+              name: "activeHours",
+              flag: "active-hours",
+              type: "json",
+              required: false,
+              description: "Hours during which logins run. Absent means around the clock.",
+              fields: [
+                {
+                  name: "timezone",
+                  flag: "timezone",
+                  type: "string",
+                  required: false,
+                  description: "IANA time zone the windows are evaluated in, such as Europe/London"
+                },
+                {
+                  name: "windows",
+                  flag: "windows",
+                  type: "json",
+                  required: false
+                }
+              ]
+            },
+            {
+              name: "initialization",
+              flag: "initialization",
+              type: "json",
+              required: false,
+              description: "The login agent, run on each profile's own environment",
+              fields: [
+                {
+                  name: "workflowId",
+                  flag: "workflow-id",
+                  type: "string",
+                  required: false,
+                  description: "The initialising workflow"
+                },
+                {
+                  name: "inputs",
+                  flag: "inputs",
+                  type: "json",
+                  required: false,
+                  description: "Fixed inputs for the initialising run",
+                  record: "json"
+                },
+                {
+                  name: "successOutcomes",
+                  flag: "success-outcomes",
+                  type: "string[]",
+                  required: false,
+                  description: "Outcomes of the initialising run that count as a success. A run that completes with any other outcome is treated as a failed run: a warm pool tears the member down, a warm cache records a failed login. Each must be an outcome of the agent's published version. Absent or empty means any completed run counts."
+                }
+              ]
+            },
+            {
+              name: "executionsWriteBack",
+              flag: "executions-write-back",
+              type: "boolean",
+              required: false,
+              description: "Whether executions on the environment save the browser profile when they stop. Off by default: only the login agent saves it, so a run that ends logged out cannot overwrite the session for later runs. Must be on with an Anchor sticky IP, which saves every session."
+            }
+          ]
         },
         {
           name: "dedicated",
           flag: "dedicated",
           type: "json",
           required: false,
-          description: "Admin only, and returned to admins only. Dedicated worker configuration. Absent means no workers are kept. Exclusive with warmPool and warmCache."
+          description: "Admin only, and returned to admins only. Dedicated worker configuration. Absent means no workers are kept. Exclusive with warmPool and warmCache.",
+          fields: [
+            {
+              name: "workflowId",
+              flag: "workflow-id",
+              type: "string",
+              required: false,
+              description: "The workflow the workers keep loaded"
+            },
+            {
+              name: "targetSize",
+              flag: "target-size",
+              type: "integer",
+              required: false,
+              description: "Baseline number of workers to keep ready outside any scheduled window. 0 drains the environment."
+            },
+            {
+              name: "schedule",
+              flag: "schedule",
+              type: "json",
+              required: false,
+              description: "Hour windows that override the baseline target size. Absent means the baseline applies around the clock.",
+              fields: [
+                {
+                  name: "timezone",
+                  flag: "timezone",
+                  type: "string",
+                  required: false,
+                  description: "IANA time zone the windows are evaluated in, such as Europe/London"
+                },
+                {
+                  name: "windows",
+                  flag: "windows",
+                  type: "json",
+                  required: false
+                }
+              ]
+            },
+            {
+              name: "maxAgeMins",
+              flag: "max-age-mins",
+              type: "integer",
+              required: false,
+              description: "Member max age in minutes. As for a warm pool, the replacement boots ahead of it."
+            },
+            {
+              name: "executionsPerWorker",
+              flag: "executions-per-worker",
+              type: "integer",
+              required: false,
+              description: "Executions one worker runs at once, each on its own page of the member's browser"
+            },
+            {
+              name: "initialization",
+              flag: "initialization",
+              type: "json",
+              required: false,
+              description: "Workflow that initialises each member before its worker loads, such as a sign-in. Absent means the worker loads as soon as the browser has booted.",
+              fields: [
+                {
+                  name: "workflowId",
+                  flag: "workflow-id",
+                  type: "string",
+                  required: false,
+                  description: "The initialising workflow"
+                },
+                {
+                  name: "inputs",
+                  flag: "inputs",
+                  type: "json",
+                  required: false,
+                  description: "Fixed inputs for the initialising run",
+                  record: "json"
+                },
+                {
+                  name: "successOutcomes",
+                  flag: "success-outcomes",
+                  type: "string[]",
+                  required: false,
+                  description: "Outcomes of the initialising run that count as a success. A run that completes with any other outcome is treated as a failed run: a warm pool tears the member down, a warm cache records a failed login. Each must be an outcome of the agent's published version. Absent or empty means any completed run counts."
+                }
+              ]
+            }
+          ]
         }
       ],
       files: [],
@@ -1227,7 +1761,8 @@ var COMMANDS = [
           flag: "inputs",
           type: "json",
           required: false,
-          description: "Input variables for the new execution. Replaces the original inputs when set."
+          description: "Input variables for the new execution. Replaces the original inputs when set.",
+          record: "json"
         },
         {
           name: "profileId",
@@ -2090,21 +2625,69 @@ var COMMANDS = [
           name: "inputs",
           flag: "inputs",
           type: "json",
-          required: false
+          required: false,
+          record: "json"
         },
         {
           name: "batchSource",
           flag: "batch-source",
           type: "json",
           required: false,
-          description: "Set to make each tick create a batch from a spreadsheet instead of one execution"
+          description: "Set to make each tick create a batch from a spreadsheet instead of one execution",
+          fields: [
+            {
+              name: "sheetUrl",
+              flag: "sheet-url",
+              type: "string",
+              required: false,
+              description: "Google Sheets URL. The gid selects the tab; without one the first tab is used."
+            },
+            {
+              name: "columnMappings",
+              flag: "column-mappings",
+              type: "json",
+              required: false,
+              description: "Maps a sheet column header to the workflow input it fills. Unmapped columns are ignored.",
+              record: "string"
+            },
+            {
+              name: "requiredInputs",
+              flag: "required-inputs",
+              type: "string[]",
+              required: false,
+              description: "Inputs a row must supply non-empty to count as valid. Rows missing any of them\nare skipped for that tick rather than failing the whole run."
+            },
+            {
+              name: "config",
+              flag: "config",
+              type: "json",
+              required: false,
+              description: "How the resulting batch paces its executions"
+            }
+          ]
         },
         {
           name: "executionOptions",
           flag: "execution-options",
           type: "json",
           required: false,
-          description: "Per-execution runtime options applied to every run this schedule triggers."
+          description: "Per-execution runtime options applied to every run this schedule triggers.",
+          fields: [
+            {
+              name: "variantKey",
+              flag: "variant-key",
+              type: "string",
+              required: false,
+              description: "Identifies which variant this execution is for, scoping its shared files and scripts to a per-variant subdirectory under each node's shared folder. It does not change which workflow or version runs. Normalised to a filesystem-safe slug by the server. Requires the workflow to have `variant_mode` enabled, and a variant-mode workflow requires it on every execution."
+            },
+            {
+              name: "softTimeoutMins",
+              flag: "soft-timeout-mins",
+              type: "integer",
+              required: false,
+              description: "Soft timeout in minutes. When the execution has been running longer than this value, a message is injected on every subsequent step urging the agent to wrap up and produce output. Must be greater than 0 and less than the agent's hard timeout (max_timeout_mins)."
+            }
+          ]
         }
       ],
       files: [],
@@ -2285,14 +2868,46 @@ var COMMANDS = [
           name: "inputs",
           flag: "inputs",
           type: "json",
-          required: false
+          required: false,
+          record: "json"
         },
         {
           name: "batchSource",
           flag: "batch-source",
           type: "json",
           required: false,
-          description: "Replaces the batch source. Omit to leave it unchanged; use clearBatchSource to remove it."
+          description: "Replaces the batch source. Omit to leave it unchanged; use clearBatchSource to remove it.",
+          fields: [
+            {
+              name: "sheetUrl",
+              flag: "sheet-url",
+              type: "string",
+              required: false,
+              description: "Google Sheets URL. The gid selects the tab; without one the first tab is used."
+            },
+            {
+              name: "columnMappings",
+              flag: "column-mappings",
+              type: "json",
+              required: false,
+              description: "Maps a sheet column header to the workflow input it fills. Unmapped columns are ignored.",
+              record: "string"
+            },
+            {
+              name: "requiredInputs",
+              flag: "required-inputs",
+              type: "string[]",
+              required: false,
+              description: "Inputs a row must supply non-empty to count as valid. Rows missing any of them\nare skipped for that tick rather than failing the whole run."
+            },
+            {
+              name: "config",
+              flag: "config",
+              type: "json",
+              required: false,
+              description: "How the resulting batch paces its executions"
+            }
+          ]
         },
         {
           name: "clearBatchSource",
@@ -2313,7 +2928,23 @@ var COMMANDS = [
           flag: "execution-options",
           type: "json",
           required: false,
-          description: "Per-execution runtime options applied to every run this schedule triggers. Replaces the stored options in full, so send every field you want to keep."
+          description: "Per-execution runtime options applied to every run this schedule triggers. Replaces the stored options in full, so send every field you want to keep.",
+          fields: [
+            {
+              name: "variantKey",
+              flag: "variant-key",
+              type: "string",
+              required: false,
+              description: "Identifies which variant this execution is for, scoping its shared files and scripts to a per-variant subdirectory under each node's shared folder. It does not change which workflow or version runs. Normalised to a filesystem-safe slug by the server. Requires the workflow to have `variant_mode` enabled, and a variant-mode workflow requires it on every execution."
+            },
+            {
+              name: "softTimeoutMins",
+              flag: "soft-timeout-mins",
+              type: "integer",
+              required: false,
+              description: "Soft timeout in minutes. When the execution has been running longer than this value, a message is injected on every subsequent step urging the agent to wrap up and produce output. Must be greater than 0 and less than the agent's hard timeout (max_timeout_mins)."
+            }
+          ]
         }
       ],
       files: [],
@@ -2382,14 +3013,16 @@ var COMMANDS = [
           name: "inputs",
           flag: "inputs",
           type: "json",
-          required: false
+          required: false,
+          record: "json"
         },
         {
           name: "metadata",
           flag: "metadata",
           type: "json",
           required: false,
-          description: "String key/value pairs to label and filter executions."
+          description: "String key/value pairs to label and filter executions.",
+          record: "string"
         },
         {
           name: "executeAt",
@@ -2403,7 +3036,23 @@ var COMMANDS = [
           flag: "execution-options",
           type: "json",
           required: false,
-          description: "Per-execution runtime options applied when this execution is triggered."
+          description: "Per-execution runtime options applied when this execution is triggered.",
+          fields: [
+            {
+              name: "variantKey",
+              flag: "variant-key",
+              type: "string",
+              required: false,
+              description: "Identifies which variant this execution is for, scoping its shared files and scripts to a per-variant subdirectory under each node's shared folder. It does not change which workflow or version runs. Normalised to a filesystem-safe slug by the server. Requires the workflow to have `variant_mode` enabled, and a variant-mode workflow requires it on every execution."
+            },
+            {
+              name: "softTimeoutMins",
+              flag: "soft-timeout-mins",
+              type: "integer",
+              required: false,
+              description: "Soft timeout in minutes. When the execution has been running longer than this value, a message is injected on every subsequent step urging the agent to wrap up and produce output. Must be greater than 0 and less than the agent's hard timeout (max_timeout_mins)."
+            }
+          ]
         }
       ],
       files: [],
@@ -2534,7 +3183,8 @@ var COMMANDS = [
           name: "schema",
           flag: "schema",
           type: "json",
-          required: true
+          required: true,
+          record: "json"
         }
       ],
       files: [],
@@ -2652,7 +3302,51 @@ var COMMANDS = [
           flag: "field",
           type: "json",
           required: true,
-          description: "Write shape for a field. The server derives key from label."
+          description: "Write shape for a field. The server derives key from label.",
+          fields: [
+            {
+              name: "type",
+              flag: "type",
+              type: "string",
+              required: false,
+              description: "Type of a vault field. Sensitivity is derived from the type: username, email, url, phone, text, card_expiry, and cardholder_name are readable; password, hidden, totp_seed, api_key, card_number, and card_cvv are write-only. There is no separate hidden flag.",
+              enum: [
+                "username",
+                "email",
+                "url",
+                "phone",
+                "text",
+                "password",
+                "hidden",
+                "totp_seed",
+                "api_key",
+                "card_number",
+                "card_expiry",
+                "card_cvv",
+                "cardholder_name"
+              ]
+            },
+            {
+              name: "label",
+              flag: "label",
+              type: "string",
+              required: false,
+              description: "Human label shown in forms. The field key is UPPER_SNAKE of this label."
+            },
+            {
+              name: "required",
+              flag: "required",
+              type: "boolean",
+              required: false
+            },
+            {
+              name: "hint",
+              flag: "hint",
+              type: "string",
+              required: false,
+              description: "Optional guidance shown next to the field, copied from catalog credentials when generating masters."
+            }
+          ]
         },
         {
           name: "value",
@@ -2919,6 +3613,26 @@ var COMMANDS = [
       credentialOrganization: true
     }
   },
+  {
+    command: "secret-request delete",
+    tool: "secret_request_delete",
+    title: "Delete request",
+    description: "Delete a secret request in any state. A pending request stops working at once. The secret a completed request created is kept.",
+    method: "DELETE",
+    path: "/agents/v2/secret-requests/{requestId}",
+    args: [
+      {
+        name: "requestId",
+        flag: "request-id",
+        type: "string",
+        required: true
+      }
+    ],
+    query: [],
+    binary: false,
+    readOnly: false,
+    destructive: true
+  },
   {
     command: "secret-request list",
     tool: "secret_requests_list",
@@ -3500,7 +4214,115 @@ var COMMANDS = [
           flag: "version",
           type: "json",
           required: false,
-          description: "The first version of the workflow. Omit it to start from a blank workflow with a single start node."
+          description: "The first version of the workflow. Omit it to start from a blank workflow with a single start node.",
+          fields: [
+            {
+              name: "parentId",
+              flag: "parent-id",
+              type: "string",
+              required: false,
+              description: "Optional parent workflow ID to derive from"
+            },
+            {
+              name: "rules",
+              flag: "rules",
+              type: "string",
+              required: false
+            },
+            {
+              name: "graph",
+              flag: "graph",
+              type: "json",
+              required: false,
+              fields: [
+                {
+                  name: "nodes",
+                  flag: "nodes",
+                  type: "json",
+                  required: false
+                },
+                {
+                  name: "transitions",
+                  flag: "transitions",
+                  type: "json",
+                  required: false
+                },
+                {
+                  name: "sticky_notes",
+                  flag: "sticky_notes",
+                  type: "json",
+                  required: false
+                }
+              ]
+            },
+            {
+              name: "inputs",
+              flag: "inputs",
+              type: "json",
+              required: false,
+              description: "Typed input definitions for this workflow. Names referenced in prompts but omitted here default to optional strings."
+            },
+            {
+              name: "settings",
+              flag: "settings",
+              type: "json",
+              required: false,
+              description: "Configuration settings for workflow execution",
+              fields: [
+                {
+                  name: "viewport_width",
+                  flag: "viewport_width",
+                  type: "integer",
+                  required: false,
+                  description: "Browser viewport width in pixels"
+                },
+                {
+                  name: "viewport_height",
+                  flag: "viewport_height",
+                  type: "integer",
+                  required: false,
+                  description: "Browser viewport height in pixels"
+                },
+                {
+                  name: "max_timeout_mins",
+                  flag: "max_timeout_mins",
+                  type: "integer",
+                  required: false,
+                  description: "Maximum timeout in minutes"
+                },
+                {
+                  name: "custom_environment_id",
+                  flag: "custom_environment_id",
+                  type: "string",
+                  required: false,
+                  description: "Custom environment executions of this workflow boot on: its environment type and snapshot replace the workflow's own environment, its profile rows restrict which profile an execution may use, and a kept-warm environment hands out a pre-warmed copy. On a new version, omit it to keep the environment of the workflow's latest version (its editable head, which can be newer than the published one), or send null to boot the workflow's own environment. On a new workflow, there is nothing to keep: omit it or send null for no custom environment."
+                }
+              ]
+            },
+            {
+              name: "environmentTemplate",
+              flag: "environment-template",
+              type: "json",
+              required: false,
+              description: "Optional environment template. On a new version, omit it to keep the template of the workflow's latest version (its editable head); on a new workflow, omitting it means a browser. Omits admin-only OS fields.",
+              fields: [
+                {
+                  name: "type",
+                  flag: "type",
+                  type: "string",
+                  required: false,
+                  description: "Type of execution environment",
+                  enum: ["browser", "os"]
+                },
+                {
+                  name: "config",
+                  flag: "config",
+                  type: "json",
+                  required: false
+                }
+              ]
+            }
+          ]
         }
       ],
       files: [],
@@ -3604,7 +4426,8 @@ var COMMANDS = [
           flag: "inputs",
           type: "json",
           required: false,
-          description: "Inputs to be merged into the placeholders defined in prompts"
+          description: "Inputs to be merged into the placeholders defined in prompts",
+          record: "json"
         },
         {
           name: "tempFiles",
@@ -3618,7 +4441,8 @@ var COMMANDS = [
           flag: "metadata",
           type: "json",
           required: false,
-          description: "Optional metadata key-value pairs (string keys and string values) for organizing and filtering executions"
+          description: "Optional metadata key-value pairs (string keys and string values) for organizing and filtering executions",
+          record: "string"
         },
         {
           name: "version",
@@ -3639,7 +4463,23 @@ var COMMANDS = [
           flag: "execution-options",
           type: "json",
           required: false,
-          description: "Per-execution runtime options that override or extend the workflow's default settings."
+          description: "Per-execution runtime options that override or extend the workflow's default settings.",
+          fields: [
+            {
+              name: "variantKey",
+              flag: "variant-key",
+              type: "string",
+              required: false,
+              description: "Identifies which variant this execution is for, scoping its shared files and scripts to a per-variant subdirectory under each node's shared folder. It does not change which workflow or version runs. Normalised to a filesystem-safe slug by the server. Requires the workflow to have `variant_mode` enabled, and a variant-mode workflow requires it on every execution."
+            },
+            {
+              name: "softTimeoutMins",
+              flag: "soft-timeout-mins",
+              type: "integer",
+              required: false,
+              description: "Soft timeout in minutes. When the execution has been running longer than this value, a message is injected on every subsequent step urging the agent to wrap up and produce output. Must be greater than 0 and less than the agent's hard timeout (max_timeout_mins)."
+            }
+          ]
         },
         {
           name: "onCapacityLimit",
@@ -3697,7 +4537,8 @@ var COMMANDS = [
           flag: "inputs",
           type: "json",
           required: false,
-          description: "Inputs to be merged into the placeholders defined in prompts"
+          description: "Inputs to be merged into the placeholders defined in prompts",
+          record: "json"
         },
         {
           name: "tempFiles",
@@ -3711,7 +4552,8 @@ var COMMANDS = [
           flag: "metadata",
           type: "json",
           required: false,
-          description: "Optional metadata key-value pairs (string keys and string values) for organizing and filtering executions"
+          description: "Optional metadata key-value pairs (string keys and string values) for organizing and filtering executions",
+          record: "string"
         },
         {
           name: "version",
@@ -3732,7 +4574,23 @@ var COMMANDS = [
           flag: "execution-options",
           type: "json",
           required: false,
-          description: "Per-execution runtime options that override or extend the workflow's default settings."
+          description: "Per-execution runtime options that override or extend the workflow's default settings.",
+          fields: [
+            {
+              name: "variantKey",
+              flag: "variant-key",
+              type: "string",
+              required: false,
+              description: "Identifies which variant this execution is for, scoping its shared files and scripts to a per-variant subdirectory under each node's shared folder. It does not change which workflow or version runs. Normalised to a filesystem-safe slug by the server. Requires the workflow to have `variant_mode` enabled, and a variant-mode workflow requires it on every execution."
+            },
+            {
+              name: "softTimeoutMins",
+              flag: "soft-timeout-mins",
+              type: "integer",
+              required: false,
+              description: "Soft timeout in minutes. When the execution has been running longer than this value, a message is injected on every subsequent step urging the agent to wrap up and produce output. Must be greater than 0 and less than the agent's hard timeout (max_timeout_mins)."
+            }
+          ]
         },
         {
           name: "onCapacityLimit",
@@ -4234,7 +5092,27 @@ var COMMANDS = [
           name: "graph",
           flag: "graph",
           type: "json",
-          required: true
+          required: true,
+          fields: [
+            {
+              name: "nodes",
+              flag: "nodes",
+              type: "json",
+              required: false
+            },
+            {
+              name: "transitions",
+              flag: "transitions",
+              type: "json",
+              required: false
+            },
+            {
+              name: "sticky_notes",
+              flag: "sticky_notes",
+              type: "json",
+              required: false
+            }
+          ]
         },
         {
           name: "inputs",
@@ -4248,14 +5126,60 @@ var COMMANDS = [
           flag: "settings",
           type: "json",
           required: true,
-          description: "Configuration settings for workflow execution"
+          description: "Configuration settings for workflow execution",
+          fields: [
+            {
+              name: "viewport_width",
+              flag: "viewport_width",
+              type: "integer",
+              required: false,
+              description: "Browser viewport width in pixels"
+            },
+            {
+              name: "viewport_height",
+              flag: "viewport_height",
+              type: "integer",
+              required: false,
+              description: "Browser viewport height in pixels"
+            },
+            {
+              name: "max_timeout_mins",
+              flag: "max_timeout_mins",
+              type: "integer",
+              required: false,
+              description: "Maximum timeout in minutes"
+            },
+            {
+              name: "custom_environment_id",
+              flag: "custom_environment_id",
+              type: "string",
+              required: false,
+              description: "Custom environment executions of this workflow boot on: its environment type and snapshot replace the workflow's own environment, its profile rows restrict which profile an execution may use, and a kept-warm environment hands out a pre-warmed copy. On a new version, omit it to keep the environment of the workflow's latest version (its editable head, which can be newer than the published one), or send null to boot the workflow's own environment. On a new workflow, there is nothing to keep: omit it or send null for no custom environment."
+            }
+          ]
         },
         {
           name: "environmentTemplate",
           flag: "environment-template",
           type: "json",
           required: false,
-          description: "Optional environment template. On a new version, omit it to keep the template of the workflow's latest version (its editable head); on a new workflow, omitting it means a browser. Omits admin-only OS fields."
+          description: "Optional environment template. On a new version, omit it to keep the template of the workflow's latest version (its editable head); on a new workflow, omitting it means a browser. Omits admin-only OS fields.",
+          fields: [
+            {
+              name: "type",
+              flag: "type",
+              type: "string",
+              required: false,
+              description: "Type of execution environment",
+              enum: ["browser", "os"]
+            },
+            {
+              name: "config",
+              flag: "config",
+              type: "json",
+              required: false
+            }
+          ]
         }
       ],
       files: [],
@@ -4302,7 +5226,27 @@ var COMMANDS = [
           name: "graph",
           flag: "graph",
           type: "json",
-          required: true
+          required: true,
+          fields: [
+            {
+              name: "nodes",
+              flag: "nodes",
+              type: "json",
+              required: false
+            },
+            {
+              name: "transitions",
+              flag: "transitions",
+              type: "json",
+              required: false
+            },
+            {
+              name: "sticky_notes",
+              flag: "sticky_notes",
+              type: "json",
+              required: false
+            }
+          ]
         },
         {
           name: "inputs",
@@ -4316,14 +5260,60 @@ var COMMANDS = [
           flag: "settings",
           type: "json",
           required: true,
-          description: "Configuration settings for workflow execution"
+          description: "Configuration settings for workflow execution",
+          fields: [
+            {
+              name: "viewport_width",
+              flag: "viewport_width",
+              type: "integer",
+              required: false,
+              description: "Browser viewport width in pixels"
+            },
+            {
+              name: "viewport_height",
+              flag: "viewport_height",
+              type: "integer",
+              required: false,
+              description: "Browser viewport height in pixels"
+            },
+            {
+              name: "max_timeout_mins",
+              flag: "max_timeout_mins",
+              type: "integer",
+              required: false,
+              description: "Maximum timeout in minutes"
+            },
+            {
+              name: "custom_environment_id",
+              flag: "custom_environment_id",
+              type: "string",
+              required: false,
+              description: "Custom environment executions of this workflow boot on: its environment type and snapshot replace the workflow's own environment, its profile rows restrict which profile an execution may use, and a kept-warm environment hands out a pre-warmed copy. On a new version, omit it to keep the environment of the workflow's latest version (its editable head, which can be newer than the published one), or send null to boot the workflow's own environment. On a new workflow, there is nothing to keep: omit it or send null for no custom environment."
+            }
+          ]
         },
         {
           name: "environmentTemplate",
           flag: "environment-template",
           type: "json",
           required: false,
-          description: "Optional environment template. On a new version, omit it to keep the template of the workflow's latest version (its editable head); on a new workflow, omitting it means a browser. Omits admin-only OS fields."
+          description: "Optional environment template. On a new version, omit it to keep the template of the workflow's latest version (its editable head); on a new workflow, omitting it means a browser. Omits admin-only OS fields.",
+          fields: [
+            {
+              name: "type",
+              flag: "type",
+              type: "string",
+              required: false,
+              description: "Type of execution environment",
+              enum: ["browser", "os"]
+            },
+            {
+              name: "config",
+              flag: "config",
+              type: "json",
+              required: false
+            }
+          ]
         }
       ],
       files: [],
@@ -4390,14 +5380,16 @@ var COMMANDS = [
           flag: "inputs",
           type: "json",
           required: false,
-          description: "Inputs to be merged into the placeholders defined in prompts. Do not set together with inputVariables."
+          description: "Inputs to be merged into the placeholders defined in prompts. Do not set together with inputVariables.",
+          record: "json"
         },
         {
           name: "metadata",
           flag: "metadata",
           type: "json",
           required: false,
-          description: "Optional metadata key-value pairs for organizing and filtering executions"
+          description: "Optional metadata key-value pairs for organizing and filtering executions",
+          record: "string"
         },
         {
           name: "profileId",
@@ -4425,7 +5417,23 @@ var COMMANDS = [
           flag: "execution-options",
           type: "json",
           required: false,
-          description: "Per-execution runtime options that override or extend the workflow's default settings."
+          description: "Per-execution runtime options that override or extend the workflow's default settings.",
+          fields: [
+            {
+              name: "variantKey",
+              flag: "variant-key",
+              type: "string",
+              required: false,
+              description: "Identifies which variant this execution is for, scoping its shared files and scripts to a per-variant subdirectory under each node's shared folder. It does not change which workflow or version runs. Normalised to a filesystem-safe slug by the server. Requires the workflow to have `variant_mode` enabled, and a variant-mode workflow requires it on every execution."
+            },
+            {
+              name: "softTimeoutMins",
+              flag: "soft-timeout-mins",
+              type: "integer",
+              required: false,
+              description: "Soft timeout in minutes. When the execution has been running longer than this value, a message is injected on every subsequent step urging the agent to wrap up and produce output. Must be greater than 0 and less than the agent's hard timeout (max_timeout_mins)."
+            }
+          ]
         },
         {
           name: "parentExecutionId",
@@ -4701,7 +5709,27 @@ var COMMANDS = [
           name: "graph",
           flag: "graph",
           type: "json",
-          required: true
+          required: true,
+          fields: [
+            {
+              name: "nodes",
+              flag: "nodes",
+              type: "json",
+              required: false
+            },
+            {
+              name: "transitions",
+              flag: "transitions",
+              type: "json",
+              required: false
+            },
+            {
+              name: "sticky_notes",
+              flag: "sticky_notes",
+              type: "json",
+              required: false
+            }
+          ]
         },
         {
           name: "inputs",
@@ -4715,14 +5743,60 @@ var COMMANDS = [
           flag: "settings",
           type: "json",
           required: true,
-          description: "Configuration settings for workflow execution"
+          description: "Configuration settings for workflow execution",
+          fields: [
+            {
+              name: "viewport_width",
+              flag: "viewport_width",
+              type: "integer",
+              required: false,
+              description: "Browser viewport width in pixels"
+            },
+            {
+              name: "viewport_height",
+              flag: "viewport_height",
+              type: "integer",
+              required: false,
+              description: "Browser viewport height in pixels"
+            },
+            {
+              name: "max_timeout_mins",
+              flag: "max_timeout_mins",
+              type: "integer",
+              required: false,
+              description: "Maximum timeout in minutes"
+            },
+            {
+              name: "custom_environment_id",
+              flag: "custom_environment_id",
+              type: "string",
+              required: false,
+              description: "Custom environment executions of this workflow boot on: its environment type and snapshot replace the workflow's own environment, its profile rows restrict which profile an execution may use, and a kept-warm environment hands out a pre-warmed copy. On a new version, omit it to keep the environment of the workflow's latest version (its editable head, which can be newer than the published one), or send null to boot the workflow's own environment. On a new workflow, there is nothing to keep: omit it or send null for no custom environment."
+            }
+          ]
         },
         {
           name: "environmentTemplate",
           flag: "environment-template",
           type: "json",
           required: false,
-          description: "Optional environment template. On a new version, omit it to keep the template of the workflow's latest version (its editable head); on a new workflow, omitting it means a browser. Omits admin-only OS fields."
+          description: "Optional environment template. On a new version, omit it to keep the template of the workflow's latest version (its editable head); on a new workflow, omitting it means a browser. Omits admin-only OS fields.",
+          fields: [
+            {
+              name: "type",
+              flag: "type",
+              type: "string",
+              required: false,
+              description: "Type of execution environment",
+              enum: ["browser", "os"]
+            },
+            {
+              name: "config",
+              flag: "config",
+              type: "json",
+              required: false
+            }
+          ]
         }
       ],
       files: [],
@@ -4935,6 +6009,23 @@ var GLOBAL_FLAGS = [
   ["--output <file>", "Write a downloaded file here, not to stdout."],
   ["-h, --help", "Show help."]
 ];
+function childFlags(option2, prefix = option2.flag) {
+  if (option2.record) {
+    return [
+      {
+        name: option2.name,
+        flag: `${prefix}.<key>`,
+        type: option2.record,
+        required: false,
+        description: "One entry. The key is sent as written."
+      }
+    ];
+  }
+  return (option2.fields ?? []).flatMap((child) => {
+    const flag2 = `${prefix}.${child.flag}`;
+    return [{ ...child, flag: flag2 }, ...childFlags(child, flag2)];
+  });
+}
 
 // src/program.ts
 var DOTTED = /^--([a-z0-9-]+\.[a-z0-9.-]+)(?:=(.*))?$/;
@@ -4951,7 +6042,7 @@ function optionText(option2) {
 }
 function splitDotted(argv) {
   const rest = [];
-  const dotted = /* @__PURE__ */ new Map();
+  const dotted2 = /* @__PURE__ */ new Map();
   for (let i = 0; i < argv.length; i++) {
     const match = DOTTED.exec(argv[i]);
     if (!match) {
@@ -4961,9 +6052,9 @@ function splitDotted(argv) {
     const value2 = match[2] ?? argv[++i];
     if (value2 === void 0)
       throw new UsageError(`--${match[1]} needs a value`);
-    dotted.set(match[1], [...dotted.get(match[1]) ?? [], value2]);
+    dotted2.set(match[1], [...dotted2.get(match[1]) ?? [], value2]);
   }
-  return { argv: rest, dotted };
+  return { argv: rest, dotted: dotted2 };
 }
 function group(parent, name, groups, path) {
   const existing = groups.get(path);
@@ -4987,6 +6078,10 @@ function leafOptions(leaf, command) {
     );
     if (option2.negatable)
       leaf.option(`--no-${option2.flag}`, `Skip ${option2.flag}.`);
+    for (const child of childFlags(option2)) {
+      const placeholder2 = child.enum ? child.enum.join("|") : child.type.replace("[]", "");
+      leaf.option(`--${child.flag} <${placeholder2}>`, optionText(child));
+    }
   }
   for (const file of command.body?.files ?? []) {
     leaf.option(`--${file} <path>`, "File to upload. Repeatable.", collect);
@@ -5002,10 +6097,10 @@ function leafOptions(leaf, command) {
       "The pulled head folder to push. Defaults to the current folder."
     );
 }
-function toParsed(leaf, positionals, dotted) {
+function toParsed(leaf, positionals, dotted2) {
   const globals = leaf.optsWithGlobals();
   const own = leaf.opts();
-  const flags = new Map(dotted);
+  const flags = new Map(dotted2);
   for (const option2 of leaf.options) {
     const flag2 = option2.long?.replace(/^--(no-)?/, "");
     const value2 = own[option2.attributeName()];
@@ -5021,7 +6116,7 @@ function toParsed(leaf, positionals, dotted) {
     output: globals.output
   };
 }
-function defineCommands(root, options, dotted = /* @__PURE__ */ new Map(), onInvocation = () => void 0) {
+function defineCommands(root, options, dotted2 = /* @__PURE__ */ new Map(), onInvocation = () => void 0) {
   if (options.description) root.description(options.description);
   if (options.version)
     root.addHelpText(
@@ -5090,7 +6185,7 @@ ${notes.join("\n")}`);
           `expected ${expected}, got ${cmd.args.length} argument(s)`
         );
       }
-      const unknownDotted = [...dotted.keys()].filter(
+      const unknownDotted = [...dotted2.keys()].filter(
         (flag2) => !(command.body?.fields ?? []).some(
           (f) => flag2.startsWith(`${f.flag}.`)
         )
@@ -5103,7 +6198,7 @@ ${notes.join("\n")}`);
       onInvocation({
         kind: "command",
         command,
-        parsed: toParsed(cmd, positionals, dotted)
+        parsed: toParsed(cmd, positionals, dotted2)
       });
     });
   }
@@ -5122,12 +6217,12 @@ async function parseInvocation(argv, options) {
       stderr: ""
     };
   }
-  const { argv: rest, dotted } = splitDotted(argv);
+  const { argv: rest, dotted: dotted2 } = splitDotted(argv);
   const root = new Command("asteroid").exitOverride().helpCommand(false).configureOutput({
     writeOut: (text2) => stdout += text2,
     writeErr: (text2) => stderr += text2
   });
-  defineCommands(root, options, dotted, (invocation) => {
+  defineCommands(root, options, dotted2, (invocation) => {
     result = invocation;
   });
   try {
@@ -5232,6 +6327,41 @@ function setPath(target, path, value2) {
   }
   node[path.at(-1)] = value2;
 }
+async function dotted(field, segments, flag2, raws, io) {
+  const path = [];
+  let option2 = field;
+  for (const [i, segment] of segments.entries()) {
+    if (option2?.record) {
+      const key = segments.slice(i).join(".");
+      const entry = { ...option2, flag: flag2, type: option2.record };
+      delete entry.enum;
+      return [
+        [...path, key],
+        entry.type === "json" ? loose(raws.at(-1)) : value(entry, raws)
+      ];
+    }
+    if (option2?.fields) {
+      const child = option2.fields.find(
+        (f) => f.flag === segment
+      );
+      if (!child) throw new UsageError(`unknown flag: --${flag2}`);
+      path.push(child.name);
+      option2 = child;
+      continue;
+    }
+    if (option2 && option2.type !== "json") {
+      throw new UsageError(`unknown flag: --${flag2}`);
+    }
+    path.push(camel(segment));
+    option2 = void 0;
+  }
+  if (!option2) return [path, loose(raws.at(-1))];
+  if (option2.fields || option2.record) {
+    throw new UsageError(`--${flag2} needs a field, as --${flag2}.<name>`);
+  }
+  const inputs = option2.type === "json" ? await Promise.all(raws.map((raw) => readInput(raw, io))) : raws;
+  return [path, value({ ...option2, flag: flag2 }, inputs)];
+}
 async function buildRequest(command, input, context = {}) {
   const io = context.io ?? nodeReader;
   const parsed = await resolveInputs(command, input, io);
@@ -5318,7 +6448,8 @@ async function buildRequest(command, input, context = {}) {
     flags.delete(flag2);
     const current = json[field.name];
     json[field.name] = typeof current === "object" && current !== null ? current : {};
-    setPath(json, [field.name, ...rest.map(camel)], loose(raws.at(-1)));
+    const [path2, value2] = await dotted(field, rest, flag2, raws, io);
+    setPath(json, [field.name, ...path2], value2);
   }
   rejectUnknown(flags);
   delete json.organizationId;