@zitadel/cli 1.0.0-alpha.22 → 1.0.0-alpha.24

package/oclif.manifest.json

@@ -35,13 +35,6 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "force": {
-          "char": "f",
-          "description": "Overwrite protected files on conflict.",
-          "name": "force",
-          "allowNo": false,
-          "type": "boolean"
-        },
         "dry-run": {
           "description": "Preview without mutating files or the platform.",
           "name": "dry-run",
@@ -65,19 +58,6 @@
           "name": "telemetry",
           "allowNo": true,
           "type": "boolean"
-        },
-        "environment": {
-          "char": "e",
-          "description": "Target environment (default: development).",
-          "name": "environment",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "options": [
-            "development",
-            "preview",
-            "production"
-          ],
-          "type": "option"
         }
       },
       "hasDynamicHelp": false,
@@ -88,17 +68,13 @@
       "pluginType": "core",
       "strict": true,
       "enableJsonFlag": true,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "apply.mjs"
-      ]
+      "group": "Configuration commands",
+      "groupOrder": 2
     },
     "claim": {
       "aliases": [],
       "args": {},
-      "description": "Attach this project to a team so it becomes permanent. Opens a browser to finish signing in.",
+      "description": "Claim this project to make it permanent. Opens a browser to create an account or sign in.",
       "examples": [
         "<%= config.bin %> <%= command.id %>",
         "<%= config.bin %> <%= command.id %> --no-open",
@@ -135,13 +111,6 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "force": {
-          "char": "f",
-          "description": "Overwrite protected files on conflict.",
-          "name": "force",
-          "allowNo": false,
-          "type": "boolean"
-        },
         "dry-run": {
           "description": "Preview without mutating files or the platform.",
           "name": "dry-run",
@@ -188,17 +157,17 @@
       "pluginType": "core",
       "strict": true,
       "enableJsonFlag": true,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "claim.mjs"
-      ]
+      "group": "Project commands",
+      "groupOrder": 2
     },
-    "doctor": {
+    "console": {
       "aliases": [],
       "args": {},
-      "description": "Verify local runtime and project state.",
+      "description": "Open the local console, signed in as the local admin created by `zitadel start`.",
+      "examples": [
+        "<%= config.bin %> <%= command.id %>",
+        "<%= config.bin %> <%= command.id %> --no-open"
+      ],
       "flags": {
         "json": {
           "description": "Format output as json.",
@@ -230,10 +199,80 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "force": {
-          "char": "f",
-          "description": "Overwrite protected files on conflict.",
-          "name": "force",
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "no-open": {
+          "description": "Print the sign-in link instead of opening a browser.",
+          "name": "no-open",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "console",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "group": "Local server commands",
+      "groupOrder": 6
+    },
+    "doctor": {
+      "aliases": [],
+      "args": {},
+      "description": "Verify local runtime and project state.",
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
           "allowNo": false,
           "type": "boolean"
         },
@@ -302,12 +341,8 @@
       "pluginType": "core",
       "strict": true,
       "enableJsonFlag": true,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "doctor.mjs"
-      ]
+      "group": "Project commands",
+      "groupOrder": 3
     },
     "eject": {
       "aliases": [
@@ -346,13 +381,6 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "force": {
-          "char": "f",
-          "description": "Overwrite protected files on conflict.",
-          "name": "force",
-          "allowNo": false,
-          "type": "boolean"
-        },
         "dry-run": {
           "description": "Preview without mutating files or the platform.",
           "name": "dry-run",
@@ -376,6 +404,13 @@
           "name": "telemetry",
           "allowNo": true,
           "type": "boolean"
+        },
+        "force": {
+          "char": "f",
+          "description": "Remove the managed files without the confirmation prompt.",
+          "name": "force",
+          "allowNo": false,
+          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
@@ -386,12 +421,8 @@
       "pluginType": "core",
       "strict": true,
       "enableJsonFlag": true,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "eject.mjs"
-      ]
+      "group": "Project commands",
+      "groupOrder": 4
     },
     "logs": {
       "aliases": [],
@@ -428,13 +459,6 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "force": {
-          "char": "f",
-          "description": "Overwrite protected files on conflict.",
-          "name": "force",
-          "allowNo": false,
-          "type": "boolean"
-        },
         "dry-run": {
           "description": "Preview without mutating files or the platform.",
           "name": "dry-run",
@@ -482,12 +506,8 @@
       "pluginType": "core",
       "strict": true,
       "enableJsonFlag": true,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "logs.mjs"
-      ]
+      "group": "Local server commands",
+      "groupOrder": 4
     },
     "plan": {
       "aliases": [],
@@ -524,13 +544,6 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "force": {
-          "char": "f",
-          "description": "Overwrite protected files on conflict.",
-          "name": "force",
-          "allowNo": false,
-          "type": "boolean"
-        },
         "dry-run": {
           "description": "Preview without mutating files or the platform.",
           "name": "dry-run",
@@ -554,19 +567,6 @@
           "name": "telemetry",
           "allowNo": true,
           "type": "boolean"
-        },
-        "environment": {
-          "char": "e",
-          "description": "Target environment (default: development).",
-          "name": "environment",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "options": [
-            "development",
-            "preview",
-            "production"
-          ],
-          "type": "option"
         }
       },
       "hasDynamicHelp": false,
@@ -577,12 +577,8 @@
       "pluginType": "core",
       "strict": true,
       "enableJsonFlag": true,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "plan.mjs"
-      ]
+      "group": "Configuration commands",
+      "groupOrder": 1
     },
     "reset": {
       "aliases": [],
@@ -619,12 +615,88 @@
           "allowNo": false,
           "type": "boolean"
         },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
         "force": {
           "char": "f",
-          "description": "Overwrite protected files on conflict.",
+          "description": "Delete the local runtime and its data without the confirmation prompt.",
           "name": "force",
           "allowNo": false,
           "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "reset",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "group": "Local server commands",
+      "groupOrder": 5
+    },
+    "resources": {
+      "aliases": [],
+      "args": {},
+      "description": "List the resources this CLI manages and what can be done to each.",
+      "examples": [
+        "<%= config.bin %> resources",
+        "<%= config.bin %> resources --json",
+        "<%= config.bin %> resources --json | jq -r '.data.resources[] | \"\\(.topic): \\(.verbs | join(\", \"))\"'"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
         },
         "dry-run": {
           "description": "Preview without mutating files or the platform.",
@@ -653,18 +725,14 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "reset",
+      "id": "resources",
       "pluginAlias": "@zitadel/cli",
       "pluginName": "@zitadel/cli",
       "pluginType": "core",
       "strict": true,
       "enableJsonFlag": true,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "reset.mjs"
-      ]
+      "group": "Resource commands",
+      "groupOrder": 0
     },
     "setup": {
       "aliases": [],
@@ -705,13 +773,6 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "force": {
-          "char": "f",
-          "description": "Overwrite protected files on conflict.",
-          "name": "force",
-          "allowNo": false,
-          "type": "boolean"
-        },
         "dry-run": {
           "description": "Preview without mutating files or the platform.",
           "name": "dry-run",
@@ -736,6 +797,13 @@
           "allowNo": true,
           "type": "boolean"
         },
+        "force": {
+          "char": "f",
+          "description": "Overwrite managed files that already exist.",
+          "name": "force",
+          "allowNo": false,
+          "type": "boolean"
+        },
         "framework": {
           "description": "Framework to target.",
           "name": "framework",
@@ -800,17 +868,10 @@
           "type": "option"
         },
         "design": {
-          "description": "Login design to eject into .zitadel/branding/ and publish as branding revision 1. Skips the wizard's design question. When omitted in non-interactive runs, the login uses the built-in template; run the `branding eject` command later to customize. Split-family designs (split, split-right, hero) collapse their brand pane by container width: narrow containers — including widget-posture embeds at card width — render the compact brand mark instead (logo_url, else hero_url, from .zitadel/branding/branding.json; hero falls back to editable text).",
+          "hidden": true,
           "name": "design",
           "hasDynamicHelp": false,
           "multiple": false,
-          "options": [
-            "centered",
-            "split",
-            "split-right",
-            "hero",
-            "minimal"
-          ],
           "type": "option"
         }
       },
@@ -822,12 +883,8 @@
       "pluginType": "core",
       "strict": true,
       "enableJsonFlag": true,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "setup.mjs"
-      ]
+      "group": "Project commands",
+      "groupOrder": 1
     },
     "start": {
       "aliases": [],
@@ -864,13 +921,6 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "force": {
-          "char": "f",
-          "description": "Overwrite protected files on conflict.",
-          "name": "force",
-          "allowNo": false,
-          "type": "boolean"
-        },
         "dry-run": {
           "description": "Preview without mutating files or the platform.",
           "name": "dry-run",
@@ -930,12 +980,8 @@
       "pluginType": "core",
       "strict": true,
       "enableJsonFlag": true,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "start.mjs"
-      ]
+      "group": "Local server commands",
+      "groupOrder": 1
     },
     "status": {
       "aliases": [],
@@ -972,13 +1018,6 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "force": {
-          "char": "f",
-          "description": "Overwrite protected files on conflict.",
-          "name": "force",
-          "allowNo": false,
-          "type": "boolean"
-        },
         "dry-run": {
           "description": "Preview without mutating files or the platform.",
           "name": "dry-run",
@@ -1012,12 +1051,8 @@
       "pluginType": "core",
       "strict": true,
       "enableJsonFlag": true,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "status.mjs"
-      ]
+      "group": "Local server commands",
+      "groupOrder": 3
     },
     "stop": {
       "aliases": [],
@@ -1054,13 +1089,6 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "force": {
-          "char": "f",
-          "description": "Overwrite protected files on conflict.",
-          "name": "force",
-          "allowNo": false,
-          "type": "boolean"
-        },
         "dry-run": {
           "description": "Preview without mutating files or the platform.",
           "name": "dry-run",
@@ -1100,12 +1128,8 @@
       "pluginType": "core",
       "strict": true,
       "enableJsonFlag": true,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "stop.mjs"
-      ]
+      "group": "Local server commands",
+      "groupOrder": 2
     },
     "branding:eject": {
       "aliases": [],
@@ -1142,13 +1166,6 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "force": {
-          "char": "f",
-          "description": "Overwrite protected files on conflict.",
-          "name": "force",
-          "allowNo": false,
-          "type": "boolean"
-        },
         "dry-run": {
           "description": "Preview without mutating files or the platform.",
           "name": "dry-run",
@@ -1173,18 +1190,18 @@
           "allowNo": true,
           "type": "boolean"
         },
+        "force": {
+          "char": "f",
+          "description": "Overwrite an existing branding file.",
+          "name": "force",
+          "allowNo": false,
+          "type": "boolean"
+        },
         "design": {
-          "description": "Design to start from (default: centered).",
+          "description": "Design to start from: centered or minimal (default: centered).",
           "name": "design",
           "hasDynamicHelp": false,
           "multiple": false,
-          "options": [
-            "centered",
-            "split",
-            "split-right",
-            "hero",
-            "minimal"
-          ],
           "type": "option"
         }
       },
@@ -1196,18 +1213,17 @@
       "pluginType": "core",
       "strict": true,
       "enableJsonFlag": true,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "branding",
-        "eject.mjs"
-      ]
+      "group": "Configuration commands",
+      "groupOrder": 4
     },
-    "schemas:list": {
+    "variables:list": {
       "aliases": [],
       "args": {},
-      "description": "List revisions of a user-schema by objectType.",
+      "description": "List the variables entered on the project.",
+      "examples": [
+        "<%= config.bin %> variables list --project-level",
+        "<%= config.bin %> variables list --project-level --json"
+      ],
       "flags": {
         "json": {
           "description": "Format output as json.",
@@ -1239,13 +1255,6 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "force": {
-          "char": "f",
-          "description": "Overwrite protected files on conflict.",
-          "name": "force",
-          "allowNo": false,
-          "type": "boolean"
-        },
         "dry-run": {
           "description": "Preview without mutating files or the platform.",
           "name": "dry-run",
@@ -1270,45 +1279,3872 @@
           "allowNo": true,
           "type": "boolean"
         },
-        "object-type": {
-          "char": "t",
-          "description": "Filter revisions by objectType (e.g. human-user).",
-          "name": "object-type",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
+        "project-level": {
+          "description": "Address the project level. Required: it is the only owner the CLI can address today.",
+          "name": "project-level",
+          "allowNo": false,
+          "type": "boolean"
         },
-        "environment": {
-          "char": "e",
-          "description": "Target environment (default: development).",
-          "name": "environment",
+        "plain": {
+          "description": "Tab-separated rows with no header, for piping. Implied when stdout is not a terminal.",
+          "name": "plain",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "variables:list",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "group": "Configuration commands"
+    },
+    "variables:get": {
+      "aliases": [],
+      "args": {
+        "name": {
+          "description": "Variable name to read.",
+          "name": "name",
+          "required": true
+        }
+      },
+      "description": "Get one variable from the project.",
+      "examples": [
+        "<%= config.bin %> variables get GOOGLE_CLIENT_ID --project-level",
+        "<%= config.bin %> variables get GOOGLE_CLIENT_ID --project-level --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "project-level": {
+          "description": "Address the project level. Required: it is the only owner the CLI can address today.",
+          "name": "project-level",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "variables:get",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "group": "Configuration commands"
+    },
+    "variables:set": {
+      "aliases": [],
+      "args": {
+        "name": {
+          "description": "Variable name (letters, digits and underscores).",
+          "name": "name",
+          "required": true
+        }
+      },
+      "description": "Set one variable on the project.",
+      "examples": [
+        "<%= config.bin %> variables set GOOGLE_CLIENT_ID --project-level",
+        "<%= config.bin %> variables set GOOGLE_CLIENT_SECRET --project-level --secret < secret.txt",
+        "<%= config.bin %> variables set SESSION_TTL --project-level --as number"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "project-level": {
+          "description": "Address the project level. Required: it is the only owner the CLI can address today.",
+          "name": "project-level",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "secret": {
+          "description": "Store the value encrypted. It can be replaced later but never read back.",
+          "name": "secret",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "as": {
+          "description": "Store the value as this JSON type. A reference to the whole field resolves to that type, so a number stays a number.",
+          "name": "as",
+          "default": "string",
           "hasDynamicHelp": false,
           "multiple": false,
           "options": [
-            "development",
-            "preview",
-            "production"
+            "string",
+            "number",
+            "boolean"
           ],
           "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "schemas:list",
+      "id": "variables:set",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "group": "Configuration commands"
+    },
+    "variables:delete": {
+      "aliases": [],
+      "args": {
+        "name": {
+          "description": "Variable name to delete.",
+          "name": "name",
+          "required": true
+        }
+      },
+      "description": "Delete one variable from the project.",
+      "examples": [
+        "<%= config.bin %> variables delete GOOGLE_CLIENT_ID --project-level",
+        "<%= config.bin %> variables delete GOOGLE_CLIENT_ID --project-level --force"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "project-level": {
+          "description": "Address the project level. Required: it is the only owner the CLI can address today.",
+          "name": "project-level",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "force": {
+          "char": "f",
+          "description": "Delete the variable without the confirmation prompt. Required when non-interactive.",
+          "name": "force",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "variables:delete",
       "pluginAlias": "@zitadel/cli",
       "pluginName": "@zitadel/cli",
       "pluginType": "core",
       "strict": true,
       "enableJsonFlag": true,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "schemas",
-        "list.mjs"
-      ]
+      "group": "Configuration commands"
+    },
+    "users:list": {
+      "aliases": [],
+      "args": {},
+      "description": "List users.",
+      "examples": [
+        "<%= config.bin %> users list --json",
+        "<%= config.bin %> users list --all --json",
+        "<%= config.bin %> users list --filter created_at=equals:<value> --sort created_at:desc"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "limit": {
+          "description": "Page size (server default 20, max 100).",
+          "name": "limit",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "page-token": {
+          "description": "Continue from a previous page's next_page_token.",
+          "name": "page-token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "all": {
+          "char": "a",
+          "description": "Fetch every page instead of one.",
+          "exclusive": [
+            "page-token"
+          ],
+          "name": "all",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Columns to show, comma-separated dot-paths (e.g. id,attributes.email). Defaults to the resource's own columns; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "plain": {
+          "description": "Tab-separated rows with no header, for piping. Implied when stdout is not a terminal.",
+          "name": "plain",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "filter": {
+          "description": "Filter as field=operation:value (operation defaults to equals). Fields: created_at (equals|not_equals|contains|not_contains|less_than|less_than_or_equal|greater_than|greater_than_or_equal), id (equals|not_equals|contains|not_contains|less_than|less_than_or_equal|greater_than|greater_than_or_equal), schema (equals|not_equals|contains|not_contains|less_than|less_than_or_equal|greater_than|greater_than_or_equal), status (equals|not_equals|contains|not_contains|less_than|less_than_or_equal|greater_than|greater_than_or_equal), team_id (equals|not_equals|contains|not_contains|less_than|less_than_or_equal|greater_than|greater_than_or_equal), lifecycle_owner_team_id (equals|not_equals|contains|not_contains|less_than|less_than_or_equal|greater_than|greater_than_or_equal).",
+          "name": "filter",
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "type": "option"
+        },
+        "sort": {
+          "description": "Sort as field:direction (asc|desc). Fields: created_at, id, schema, status, lifecycle_owner_team_id.",
+          "name": "sort",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "users:list",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "users:get": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "user id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Get one user by id.",
+      "examples": [
+        "<%= config.bin %> users get <id>",
+        "<%= config.bin %> users get <id> --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Fields to show, comma-separated dot-paths. Defaults to the resource's own; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "users:get",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "users:create": {
+      "aliases": [],
+      "args": {},
+      "description": "Create an user.",
+      "examples": [
+        "<%= config.bin %> users create --schema <schema> --attributes <key>=<value> --json",
+        "<%= config.bin %> users create --data '{...}' --json",
+        "<%= config.bin %> users create --file ./user.json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "schema": {
+          "description": "(required) The schema that defines the content of `attributes`.",
+          "helpGroup": "REQUIRED FIELD",
+          "name": "schema",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "attributes": {
+          "description": "(required) Repeatable attributes entry: key=value for a string, key:=value for JSON. The user's schema-defined content.",
+          "helpGroup": "REQUIRED FIELD",
+          "name": "attributes",
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "type": "option"
+        },
+        "data": {
+          "description": "Whole body as a JSON object, instead of the field flags.",
+          "exclusive": [
+            "file"
+          ],
+          "helpGroup": "RAW BODY",
+          "name": "data",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "file": {
+          "description": "Read the body from a JSON file; `-` reads stdin.",
+          "exclusive": [
+            "data"
+          ],
+          "helpGroup": "RAW BODY",
+          "name": "file",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "users:create",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "users:update": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "user id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Update an user by id.",
+      "examples": [
+        "<%= config.bin %> users update <id> --data '{...}' --json",
+        "<%= config.bin %> users update <id> --file ./user.json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "schema": {
+          "description": "The schema the user follows after this patch.",
+          "helpGroup": "OPTIONAL FIELD",
+          "name": "schema",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "attributes": {
+          "description": "Repeatable attributes entry: key=value for a string, key:=value for JSON. The changed attributes only.",
+          "helpGroup": "OPTIONAL FIELD",
+          "name": "attributes",
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "type": "option"
+        },
+        "data": {
+          "description": "Whole body as a JSON object, instead of the field flags.",
+          "exclusive": [
+            "file"
+          ],
+          "helpGroup": "RAW BODY",
+          "name": "data",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "file": {
+          "description": "Read the body from a JSON file; `-` reads stdin.",
+          "exclusive": [
+            "data"
+          ],
+          "helpGroup": "RAW BODY",
+          "name": "file",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "users:update",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "users:delete": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "user id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Delete an user by id.",
+      "examples": [
+        "<%= config.bin %> users delete <id> --force --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "force": {
+          "char": "f",
+          "description": "Delete the user without the confirmation prompt. Required when non-interactive.",
+          "name": "force",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "users:delete",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "teams:list": {
+      "aliases": [],
+      "args": {},
+      "description": "List teams.",
+      "examples": [
+        "<%= config.bin %> teams list --json",
+        "<%= config.bin %> teams list --all --json",
+        "<%= config.bin %> teams list --filter created_at=equals:<value> --sort created_at:desc"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "limit": {
+          "description": "Page size (server default 20, max 100).",
+          "name": "limit",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "page-token": {
+          "description": "Continue from a previous page's next_page_token.",
+          "name": "page-token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "all": {
+          "char": "a",
+          "description": "Fetch every page instead of one.",
+          "exclusive": [
+            "page-token"
+          ],
+          "name": "all",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Columns to show, comma-separated dot-paths (e.g. id,attributes.email). Defaults to the resource's own columns; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "plain": {
+          "description": "Tab-separated rows with no header, for piping. Implied when stdout is not a terminal.",
+          "name": "plain",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "filter": {
+          "description": "Filter as field=operation:value (operation defaults to equals). Fields: created_at (equals|not_equals|contains|not_contains|less_than|less_than_or_equal|greater_than|greater_than_or_equal), name (equals|not_equals|contains|not_contains|less_than|less_than_or_equal|greater_than|greater_than_or_equal), status (equals|not_equals|contains|not_contains|less_than|less_than_or_equal|greater_than|greater_than_or_equal).",
+          "name": "filter",
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "type": "option"
+        },
+        "sort": {
+          "description": "Sort as field:direction (asc|desc). Fields: created_at, name, status.",
+          "name": "sort",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "teams:list",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "teams:get": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "team id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Get one team by id.",
+      "examples": [
+        "<%= config.bin %> teams get <id>",
+        "<%= config.bin %> teams get <id> --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Fields to show, comma-separated dot-paths. Defaults to the resource's own; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "teams:get",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "teams:create": {
+      "aliases": [],
+      "args": {},
+      "description": "Create a team.",
+      "examples": [
+        "<%= config.bin %> teams create --name <name> --json",
+        "<%= config.bin %> teams create --data '{...}' --json",
+        "<%= config.bin %> teams create --file ./team.json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "name": {
+          "description": "(required) The name of the team.",
+          "helpGroup": "REQUIRED FIELD",
+          "name": "name",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "data": {
+          "description": "Whole body as a JSON object, instead of the field flags.",
+          "exclusive": [
+            "file"
+          ],
+          "helpGroup": "RAW BODY",
+          "name": "data",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "file": {
+          "description": "Read the body from a JSON file; `-` reads stdin.",
+          "exclusive": [
+            "data"
+          ],
+          "helpGroup": "RAW BODY",
+          "name": "file",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "teams:create",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "teams:update": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "team id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Update a team by id.",
+      "examples": [
+        "<%= config.bin %> teams update <id> --data '{...}' --json",
+        "<%= config.bin %> teams update <id> --file ./team.json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "name": {
+          "description": "The name of the team.",
+          "helpGroup": "OPTIONAL FIELD",
+          "name": "name",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "data": {
+          "description": "Whole body as a JSON object, instead of the field flags.",
+          "exclusive": [
+            "file"
+          ],
+          "helpGroup": "RAW BODY",
+          "name": "data",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "file": {
+          "description": "Read the body from a JSON file; `-` reads stdin.",
+          "exclusive": [
+            "data"
+          ],
+          "helpGroup": "RAW BODY",
+          "name": "file",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "teams:update",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "teams:deactivate": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "team id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Deactivate a team by id.",
+      "examples": [
+        "<%= config.bin %> teams deactivate <id> --force --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "force": {
+          "char": "f",
+          "description": "Deactivate the team without the confirmation prompt. Required when non-interactive.",
+          "name": "force",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "teams:deactivate",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "sessions:list": {
+      "aliases": [],
+      "args": {},
+      "description": "List sessions.",
+      "examples": [
+        "<%= config.bin %> sessions list --json",
+        "<%= config.bin %> sessions list --all --json",
+        "<%= config.bin %> sessions list --filter created_at=equals:<value> --sort created_at:desc"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "limit": {
+          "description": "Page size (server default 20, max 100).",
+          "name": "limit",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "page-token": {
+          "description": "Continue from a previous page's next_page_token.",
+          "name": "page-token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "all": {
+          "char": "a",
+          "description": "Fetch every page instead of one.",
+          "exclusive": [
+            "page-token"
+          ],
+          "name": "all",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Columns to show, comma-separated dot-paths (e.g. id,attributes.email). Defaults to the resource's own columns; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "plain": {
+          "description": "Tab-separated rows with no header, for piping. Implied when stdout is not a terminal.",
+          "name": "plain",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "filter": {
+          "description": "Filter as field=operation:value (operation defaults to equals). Fields: created_at (equals|not_equals|contains|not_contains|less_than|less_than_or_equal|greater_than|greater_than_or_equal), user_id (equals|not_equals|contains|not_contains|less_than|less_than_or_equal|greater_than|greater_than_or_equal), state (equals|not_equals|contains|not_contains|less_than|less_than_or_equal|greater_than|greater_than_or_equal), lifecycle_owner_team_id (equals|not_equals|contains|not_contains|less_than|less_than_or_equal|greater_than|greater_than_or_equal).",
+          "name": "filter",
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "type": "option"
+        },
+        "sort": {
+          "description": "Sort as field:direction (asc|desc). Fields: created_at, user_id.",
+          "name": "sort",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "sessions:list",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "sessions:get": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "session id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Get one session by id.",
+      "examples": [
+        "<%= config.bin %> sessions get <id>",
+        "<%= config.bin %> sessions get <id> --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Fields to show, comma-separated dot-paths. Defaults to the resource's own; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "sessions:get",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "sessions:revoke": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "session id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Revoke a session by id.",
+      "examples": [
+        "<%= config.bin %> sessions revoke <id> --force --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "force": {
+          "char": "f",
+          "description": "Revoke the session without the confirmation prompt. Required when non-interactive.",
+          "name": "force",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "sessions:revoke",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "events:list": {
+      "aliases": [],
+      "args": {},
+      "description": "List events.",
+      "examples": [
+        "<%= config.bin %> events list --json",
+        "<%= config.bin %> events list --all --json",
+        "<%= config.bin %> events list --filter category=equals:<value> --sort occurred_at:desc"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "limit": {
+          "description": "Page size (server default 20, max 100).",
+          "name": "limit",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "page-token": {
+          "description": "Continue from a previous page's next_page_token.",
+          "name": "page-token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "all": {
+          "char": "a",
+          "description": "Fetch every page instead of one.",
+          "exclusive": [
+            "page-token"
+          ],
+          "name": "all",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Columns to show, comma-separated dot-paths (e.g. id,attributes.email). Defaults to the resource's own columns; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "plain": {
+          "description": "Tab-separated rows with no header, for piping. Implied when stdout is not a terminal.",
+          "name": "plain",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "filter": {
+          "description": "Filter as field=operation:value (operation defaults to equals). Fields: category (equals; values request|auth|session|admin|entity|signal; repeats widen), event_type (equals; repeats widen), actor_id (equals), session_id (equals), flow_id (equals), request_id (equals), entity_type (equals), entity_id (equals), team_id (equals), created_at (greater_than_or_equal|less_than).",
+          "name": "filter",
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "type": "option"
+        },
+        "sort": {
+          "description": "Sort as field:direction (asc|desc). Fields: occurred_at.",
+          "name": "sort",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "events:list",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "events:get": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "event id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Get one event by id.",
+      "examples": [
+        "<%= config.bin %> events get <id>",
+        "<%= config.bin %> events get <id> --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Fields to show, comma-separated dot-paths. Defaults to the resource's own; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "events:get",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "grants:list": {
+      "aliases": [],
+      "args": {},
+      "description": "List grants.",
+      "examples": [
+        "<%= config.bin %> grants list --json",
+        "<%= config.bin %> grants list --all --json",
+        "<%= config.bin %> grants list --filter created_at=equals:<value> --sort created_at:desc"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "limit": {
+          "description": "Page size (server default 20, max 100).",
+          "name": "limit",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "page-token": {
+          "description": "Continue from a previous page's next_page_token.",
+          "name": "page-token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "all": {
+          "char": "a",
+          "description": "Fetch every page instead of one.",
+          "exclusive": [
+            "page-token"
+          ],
+          "name": "all",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Columns to show, comma-separated dot-paths (e.g. id,attributes.email). Defaults to the resource's own columns; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "plain": {
+          "description": "Tab-separated rows with no header, for piping. Implied when stdout is not a terminal.",
+          "name": "plain",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "filter": {
+          "description": "Filter as field=operation:value (operation defaults to equals). Fields: created_at (equals|not_equals|contains|not_contains|less_than|less_than_or_equal|greater_than|greater_than_or_equal), user_id (equals|not_equals|contains|not_contains|less_than|less_than_or_equal|greater_than|greater_than_or_equal), team_id (equals|not_equals|contains|not_contains|less_than|less_than_or_equal|greater_than|greater_than_or_equal), relation (equals|not_equals|contains|not_contains|less_than|less_than_or_equal|greater_than|greater_than_or_equal), expires_at (equals|not_equals|contains|not_contains|less_than|less_than_or_equal|greater_than|greater_than_or_equal).",
+          "name": "filter",
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "type": "option"
+        },
+        "sort": {
+          "description": "Sort as field:direction (asc|desc). Fields: created_at, expires_at, id.",
+          "name": "sort",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "grants:list",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "grants:get": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "grant id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Get one grant by id.",
+      "examples": [
+        "<%= config.bin %> grants get <id>",
+        "<%= config.bin %> grants get <id> --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Fields to show, comma-separated dot-paths. Defaults to the resource's own; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "grants:get",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "grants:create": {
+      "aliases": [],
+      "args": {},
+      "description": "Create a grant.",
+      "examples": [
+        "<%= config.bin %> grants create --data '{...}' --json",
+        "<%= config.bin %> grants create --file ./grant.json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "relation": {
+          "description": "(required) Catalog relation on `object_type` `project`.",
+          "helpGroup": "REQUIRED FIELD",
+          "name": "relation",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "viewer",
+            "editor",
+            "admin"
+          ],
+          "type": "option"
+        },
+        "expires-at": {
+          "description": "Optional expiry.",
+          "helpGroup": "OPTIONAL FIELD",
+          "name": "expires-at",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "data": {
+          "description": "Whole body as a JSON object, instead of the field flags.",
+          "exclusive": [
+            "file"
+          ],
+          "helpGroup": "RAW BODY",
+          "name": "data",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "file": {
+          "description": "Read the body from a JSON file; `-` reads stdin.",
+          "exclusive": [
+            "data"
+          ],
+          "helpGroup": "RAW BODY",
+          "name": "file",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "grants:create",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "grants:delete": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "grant id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Delete a grant by id.",
+      "examples": [
+        "<%= config.bin %> grants delete <id> --force --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "force": {
+          "char": "f",
+          "description": "Delete the grant without the confirmation prompt. Required when non-interactive.",
+          "name": "force",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "grants:delete",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "idps:list": {
+      "aliases": [],
+      "args": {},
+      "description": "List idps.",
+      "examples": [
+        "<%= config.bin %> idps list --json",
+        "<%= config.bin %> idps list --all --json",
+        "<%= config.bin %> idps list --filter slug=equals:<value> --sort slug:desc"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "limit": {
+          "description": "Page size (server default 20, max 100).",
+          "name": "limit",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "page-token": {
+          "description": "Continue from a previous page's next_page_token.",
+          "name": "page-token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "all": {
+          "char": "a",
+          "description": "Fetch every page instead of one.",
+          "exclusive": [
+            "page-token"
+          ],
+          "name": "all",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Columns to show, comma-separated dot-paths (e.g. id,attributes.email). Defaults to the resource's own columns; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "plain": {
+          "description": "Tab-separated rows with no header, for piping. Implied when stdout is not a terminal.",
+          "name": "plain",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "filter": {
+          "description": "Filter as field=operation:value (operation defaults to equals). Fields: slug (equals|not_equals|contains|not_contains|less_than|less_than_or_equal|greater_than|greater_than_or_equal), created_at (equals|not_equals|contains|not_contains|less_than|less_than_or_equal|greater_than|greater_than_or_equal).",
+          "name": "filter",
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "type": "option"
+        },
+        "sort": {
+          "description": "Sort as field:direction (asc|desc). Fields: slug, created_at.",
+          "name": "sort",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "idps:list",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "idps:get": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "identity provider connection id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Get one identity provider connection by id.",
+      "examples": [
+        "<%= config.bin %> idps get <id>",
+        "<%= config.bin %> idps get <id> --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Fields to show, comma-separated dot-paths. Defaults to the resource's own; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "idps:get",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "idps:create": {
+      "aliases": [],
+      "args": {},
+      "description": "Create an identity provider connection.",
+      "examples": [
+        "<%= config.bin %> idps create --data '{...}' --json",
+        "<%= config.bin %> idps create --file ./identity provider connection.json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "data": {
+          "description": "Whole body as a JSON object, instead of the field flags.",
+          "exclusive": [
+            "file"
+          ],
+          "helpGroup": "RAW BODY",
+          "name": "data",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "file": {
+          "description": "Read the body from a JSON file; `-` reads stdin.",
+          "exclusive": [
+            "data"
+          ],
+          "helpGroup": "RAW BODY",
+          "name": "file",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "idps:create",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "projects:list": {
+      "aliases": [],
+      "args": {},
+      "description": "List projects.",
+      "examples": [
+        "<%= config.bin %> projects list --json",
+        "<%= config.bin %> projects list --all --json",
+        "<%= config.bin %> projects list --filter created_at=equals:<value> --sort created_at:desc"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "limit": {
+          "description": "Page size (server default 20, max 100).",
+          "name": "limit",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "page-token": {
+          "description": "Continue from a previous page's next_page_token.",
+          "name": "page-token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "all": {
+          "char": "a",
+          "description": "Fetch every page instead of one.",
+          "exclusive": [
+            "page-token"
+          ],
+          "name": "all",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Columns to show, comma-separated dot-paths (e.g. id,attributes.email). Defaults to the resource's own columns; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "plain": {
+          "description": "Tab-separated rows with no header, for piping. Implied when stdout is not a terminal.",
+          "name": "plain",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "filter": {
+          "description": "Filter as field=operation:value (operation defaults to equals). Fields: created_at (equals|not_equals|contains|not_contains|less_than|less_than_or_equal|greater_than|greater_than_or_equal).",
+          "name": "filter",
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "type": "option"
+        },
+        "sort": {
+          "description": "Sort as field:direction (asc|desc). Fields: created_at.",
+          "name": "sort",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "projects:list",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "projects:get": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "project id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Get one project by id.",
+      "examples": [
+        "<%= config.bin %> projects get <id>",
+        "<%= config.bin %> projects get <id> --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Fields to show, comma-separated dot-paths. Defaults to the resource's own; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "projects:get",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "projects:update": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "project id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Update a project by id.",
+      "examples": [
+        "<%= config.bin %> projects update <id> --data '{...}' --json",
+        "<%= config.bin %> projects update <id> --file ./project.json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "name": {
+          "description": "The name of the project.",
+          "helpGroup": "OPTIONAL FIELD",
+          "name": "name",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "password-hash": {
+          "description": "The method this project's passwords are hashed with.",
+          "helpGroup": "OPTIONAL FIELD",
+          "name": "password-hash",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "data": {
+          "description": "Whole body as a JSON object, instead of the field flags.",
+          "exclusive": [
+            "file"
+          ],
+          "helpGroup": "RAW BODY",
+          "name": "data",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "file": {
+          "description": "Read the body from a JSON file; `-` reads stdin.",
+          "exclusive": [
+            "data"
+          ],
+          "helpGroup": "RAW BODY",
+          "name": "file",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "projects:update",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Resource commands"
+    },
+    "schemas:list": {
+      "aliases": [],
+      "args": {},
+      "description": "List schemas.",
+      "examples": [
+        "<%= config.bin %> schemas list --json",
+        "<%= config.bin %> schemas list --all --json",
+        "<%= config.bin %> schemas list --filter object_type=equals:<value>"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "limit": {
+          "description": "Page size (server default 20, max 100).",
+          "name": "limit",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "page-token": {
+          "description": "Continue from a previous page's next_page_token.",
+          "name": "page-token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "all": {
+          "char": "a",
+          "description": "Fetch every page instead of one.",
+          "exclusive": [
+            "page-token"
+          ],
+          "name": "all",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Columns to show, comma-separated dot-paths (e.g. id,attributes.email). Defaults to the resource's own columns; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "plain": {
+          "description": "Tab-separated rows with no header, for piping. Implied when stdout is not a terminal.",
+          "name": "plain",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "filter": {
+          "description": "Filter as field=operation:value (operation defaults to equals). Fields: object_type (equals), kind (equals), revisions (equals; values all|latest).",
+          "name": "filter",
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "schemas:list",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Configuration commands"
+    },
+    "schemas:get": {
+      "aliases": [],
+      "args": {
+        "schema": {
+          "description": "object type (current revision) or revision id",
+          "name": "schema",
+          "required": true
+        }
+      },
+      "description": "Get one schema by id.",
+      "examples": [
+        "<%= config.bin %> schemas get <id>",
+        "<%= config.bin %> schemas get <id> --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Fields to show, comma-separated dot-paths. Defaults to the resource's own; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "schemas:get",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Configuration commands"
+    },
+    "environments:list": {
+      "aliases": [],
+      "args": {},
+      "description": "List environments.",
+      "examples": [
+        "<%= config.bin %> environments list --json",
+        "<%= config.bin %> environments list --all --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "limit": {
+          "description": "Page size (server default 20, max 100).",
+          "name": "limit",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "page-token": {
+          "description": "Continue from a previous page's next_page_token.",
+          "name": "page-token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "all": {
+          "char": "a",
+          "description": "Fetch every page instead of one.",
+          "exclusive": [
+            "page-token"
+          ],
+          "name": "all",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Columns to show, comma-separated dot-paths (e.g. id,attributes.email). Defaults to the resource's own columns; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "plain": {
+          "description": "Tab-separated rows with no header, for piping. Implied when stdout is not a terminal.",
+          "name": "plain",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "environments:list",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Configuration commands"
+    },
+    "environments:get": {
+      "aliases": [],
+      "args": {
+        "name": {
+          "description": "environment name",
+          "name": "name",
+          "required": true
+        }
+      },
+      "description": "Get one environment by id.",
+      "examples": [
+        "<%= config.bin %> environments get <id>",
+        "<%= config.bin %> environments get <id> --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Fields to show, comma-separated dot-paths. Defaults to the resource's own; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "environments:get",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Configuration commands"
+    },
+    "releases:list": {
+      "aliases": [],
+      "args": {},
+      "description": "List releases.",
+      "examples": [
+        "<%= config.bin %> releases list --json",
+        "<%= config.bin %> releases list --all --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "limit": {
+          "description": "Page size (server default 20, max 100).",
+          "name": "limit",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "page-token": {
+          "description": "Continue from a previous page's next_page_token.",
+          "name": "page-token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "all": {
+          "char": "a",
+          "description": "Fetch every page instead of one.",
+          "exclusive": [
+            "page-token"
+          ],
+          "name": "all",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Columns to show, comma-separated dot-paths (e.g. id,attributes.email). Defaults to the resource's own columns; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "plain": {
+          "description": "Tab-separated rows with no header, for piping. Implied when stdout is not a terminal.",
+          "name": "plain",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "releases:list",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Configuration commands"
+    },
+    "releases:get": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "release id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Get one release by id.",
+      "examples": [
+        "<%= config.bin %> releases get <id>",
+        "<%= config.bin %> releases get <id> --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Fields to show, comma-separated dot-paths. Defaults to the resource's own; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "releases:get",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Configuration commands"
+    },
+    "flow-definitions:list": {
+      "aliases": [],
+      "args": {},
+      "description": "List flow-definitions.",
+      "examples": [
+        "<%= config.bin %> flow-definitions list --json",
+        "<%= config.bin %> flow-definitions list --all --json",
+        "<%= config.bin %> flow-definitions list --filter name=equals:<value>"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "limit": {
+          "description": "Page size (server default 20, max 100).",
+          "name": "limit",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "page-token": {
+          "description": "Continue from a previous page's next_page_token.",
+          "name": "page-token",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "all": {
+          "char": "a",
+          "description": "Fetch every page instead of one.",
+          "exclusive": [
+            "page-token"
+          ],
+          "name": "all",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Columns to show, comma-separated dot-paths (e.g. id,attributes.email). Defaults to the resource's own columns; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "plain": {
+          "description": "Tab-separated rows with no header, for piping. Implied when stdout is not a terminal.",
+          "name": "plain",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "filter": {
+          "description": "Filter as field=operation:value (operation defaults to equals). Fields: name (equals), purpose (equals), revisions (equals; values all|latest).",
+          "name": "filter",
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "flow-definitions:list",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Configuration commands"
+    },
+    "flow-definitions:get": {
+      "aliases": [],
+      "args": {
+        "flow": {
+          "description": "flow name (newest revision) or revision id",
+          "name": "flow",
+          "required": true
+        }
+      },
+      "description": "Get one flow definition by id.",
+      "examples": [
+        "<%= config.bin %> flow-definitions get <id>",
+        "<%= config.bin %> flow-definitions get <id> --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Fields to show, comma-separated dot-paths. Defaults to the resource's own; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "flow-definitions:get",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Configuration commands"
+    },
+    "branding:list": {
+      "aliases": [],
+      "args": {},
+      "description": "List branding.",
+      "examples": [
+        "<%= config.bin %> branding list --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Columns to show, comma-separated dot-paths (e.g. id,attributes.email). Defaults to the resource's own columns; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "plain": {
+          "description": "Tab-separated rows with no header, for piping. Implied when stdout is not a terminal.",
+          "name": "plain",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "branding:list",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Configuration commands"
+    },
+    "branding:get": {
+      "aliases": [],
+      "args": {
+        "id": {
+          "description": "branding revision id",
+          "name": "id",
+          "required": true
+        }
+      },
+      "description": "Get one branding revision by id.",
+      "examples": [
+        "<%= config.bin %> branding get <id>",
+        "<%= config.bin %> branding get <id> --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cwd": {
+          "char": "c",
+          "description": "Project directory to operate on.",
+          "name": "cwd",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "server": {
+          "char": "s",
+          "description": "Override the resolved server URL.",
+          "name": "server",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "non-interactive": {
+          "char": "n",
+          "description": "Disable prompts. Required when scripting or running as an agent.",
+          "name": "non-interactive",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "dry-run": {
+          "description": "Preview without mutating files or the platform.",
+          "name": "dry-run",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "verbose": {
+          "description": "Verbose logging.",
+          "name": "verbose",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "debug": {
+          "description": "Debug logging.",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "telemetry": {
+          "description": "Send anonymous usage analytics. Disable with --no-telemetry.",
+          "name": "telemetry",
+          "allowNo": true,
+          "type": "boolean"
+        },
+        "fields": {
+          "description": "Fields to show, comma-separated dot-paths. Defaults to the resource's own; `--json` is unaffected.",
+          "name": "fields",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "branding:get",
+      "pluginAlias": "@zitadel/cli",
+      "pluginName": "@zitadel/cli",
+      "pluginType": "core",
+      "strict": true,
+      "group": "Configuration commands"
     }
   },
-  "version": "1.0.0-alpha.22"
+  "version": "1.0.0-alpha.24"
 }