| cli_version | Oasis CLI version to install. Options:
- "auto" (default): Read version from rofl.yaml tooling.version field
- "latest": Use the latest release from GitHub
- Specific version (e.g., "0.18.0"): Use exact version
| no | auto |
| check_updates | Run 'oasis rofl upgrade' to check for artifact updates (runtime, compose, etc).
If updates are found and create_update_pr is true, a PR will be created.
| no | false |
| create_update_pr | Create a pull request if rofl.yaml changes are detected after running upgrade.
Requires check_updates: true and GITHUB_TOKEN with write permissions.
| no | false |
| config | Global CLI config file to use | no | — |
| deployment | Deployment name (defaults to default) | no | — |
| encrypted | Encrypt transaction call data (requires online mode) | no | false |
| fee_denom | Override fee denomination (defaults to native) | no | — |
| force | Force deployment | no | false |
| format | Transaction output format, one of [json, cbor] (defaults to json) | no | — |
| gas_limit | Gas limit to use | no | — |
| gas_price | Gas price to use | no | — |
| machine | Machine name | no | — |
| network | Network to use | no | mainnet |
| no_container | Do not use the containerized builder | no | false |
| no_update_manifest | Do not update the manifest | no | false |
| update_manifest | Allow updating rofl.yaml with new enclave IDs after build (skips verification).
WARNING: For testing only. Production deployments should commit enclave IDs
to source control and use the default verify behavior.
| no | false |
| nonce | Explicitly set transaction nonce | no | — |
| offer | Offer name | no | — |
| offline | Do not perform any operations requiring network access | no | false |
| only_validate | Validate without building | no | false |
| output | Output bundle filename | no | — |
| output_file | Output transaction into specified file instead of broadcasting | no | — |
| provider | Provider name | no | — |
| replace_machine | Rent a new machine if the provided one expired | no | false |
| show_offers | Show all provider offers and quit | no | false |
| term | Term to pay for in advance [hour, month, year] | no | — |
| term_count | Number of terms to pay for in advance | no | — |
| unsigned | Do not sign transaction | no | false |
| verbose | Verbose output | no | false |
| verify | Verify build against manifest and on-chain state | no | false |
| wallet_account | Oasis CLI account to use for wallet operations (defaults to test:alice for offline/unsigned mode) | no | test:alice |
| wallet_algorithm | Cryptographic algorithm to use for wallet , one of [ed25519-adr8, ed25519-raw, secp256k1-bip44, secp256k1-raw, sr25519-adr8, sr25519-raw] | no | — |
| wallet_import | Run wallet import before build (true/false) | no | false |
| wallet_number | Key number to use in the key derivation scheme for wallet import | no | — |
| wallet_secret | Secret for wallet import. Format depends on wallet_algorithm:
- Mnemonic algorithms (ed25519-adr8, secp256k1-bip44, sr25519-adr8): BIP-39 phrase
- Raw algorithms (ed25519-raw, secp256k1-raw, sr25519-raw): Private key hex
| no | — |
| wipe_storage | Whether to wipe machine storage | no | false |
| working_directory | Directory to run all ROFL commands in | no | — |
| skip_build | Skip the ROFL build step | no | false |
| skip_update | Skip the ROFL update step | no | false |
| skip_deploy | Skip the ROFL deploy step | no | false |
| update_output_file | Output file for update transaction (instead of broadcasting) | no | — |
| deploy_output_file | Output file for deploy transaction (instead of broadcasting) | no | — |
| safe_address | Safe multisig contract address | no | — |
| safe_proposer_key | Private key for Safe transaction proposer | no | — |
| safe_rpc_url | RPC URL for the chain where Safe is deployed (auto-detected from network if not specified) | no | — |
| safe_service_url | Safe transaction service URL (auto-detected from network if not specified) | no | — |
| safe_chain_id | Chain ID for Safe transactions (auto-detected from network if not specified) | no | — |
| safe_dry_run | Dry run mode for Safe proposal. Runs all steps (CBOR parsing, subcall generation,
transaction creation, signing) but does NOT submit to the Safe service.
Useful for testing the Safe integration without actually proposing.
| no | false |