hereya-cli 0.104.0 → 0.105.0

package/README.md

@@ -21,7 +21,7 @@ $ npm install -g hereya-cli
 $ hereya COMMAND
 running command...
 $ hereya (--version)
-hereya-cli/0.104.0 linux-x64 node-v24.18.0
+hereya-cli/0.105.0 linux-x64 node-v24.18.0
 $ hereya --help [COMMAND]
 USAGE
   $ hereya COMMAND
@@ -131,7 +131,7 @@ EXAMPLES
   $ hereya add cloudy/docker_postgres
 ```
 
-_See code: [src/commands/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/add/index.ts)_
+_See code: [src/commands/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/add/index.ts)_
 
 ## `hereya app deploy NAME`
 
@@ -165,7 +165,7 @@ EXAMPLES
   $ hereya app deploy my-org/my-app -w prod -p organizationId=org-123
 ```
 
-_See code: [src/commands/app/deploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/app/deploy/index.ts)_
+_See code: [src/commands/app/deploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/app/deploy/index.ts)_
 
 ## `hereya app deployments NAME`
 
@@ -185,7 +185,7 @@ EXAMPLES
   $ hereya app deployments my-org/my-app
 ```
 
-_See code: [src/commands/app/deployments/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/app/deployments/index.ts)_
+_See code: [src/commands/app/deployments/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/app/deployments/index.ts)_
 
 ## `hereya app destroy NAME`
 
@@ -214,7 +214,7 @@ EXAMPLES
   $ hereya app destroy my-org/my-app -w my-workspace
 ```
 
-_See code: [src/commands/app/destroy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/app/destroy/index.ts)_
+_See code: [src/commands/app/destroy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/app/destroy/index.ts)_
 
 ## `hereya app env NAME [KEY]`
 
@@ -240,7 +240,7 @@ EXAMPLES
   $ hereya app env my-org/my-app -w my-workspace DATABASE_URL
 ```
 
-_See code: [src/commands/app/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/app/env/index.ts)_
+_See code: [src/commands/app/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/app/env/index.ts)_
 
 ## `hereya app list`
 
@@ -257,7 +257,7 @@ EXAMPLES
   $ hereya app list
 ```
 
-_See code: [src/commands/app/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/app/list/index.ts)_
+_See code: [src/commands/app/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/app/list/index.ts)_
 
 ## `hereya app new DIRNAME`
 
@@ -283,7 +283,7 @@ EXAMPLES
   $ hereya app new ./my-app -n my-org/my-app --description "An ai-app-builder app"
 ```
 
-_See code: [src/commands/app/new/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/app/new/index.ts)_
+_See code: [src/commands/app/new/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/app/new/index.ts)_
 
 ## `hereya app status NAME`
 
@@ -306,7 +306,7 @@ EXAMPLES
   $ hereya app status my-org/my-app -w my-workspace
 ```
 
-_See code: [src/commands/app/status/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/app/status/index.ts)_
+_See code: [src/commands/app/status/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/app/status/index.ts)_
 
 ## `hereya bootstrap INFRASTRUCTURETYPE`
 
@@ -331,7 +331,7 @@ EXAMPLES
   $ hereya bootstrap local
 ```
 
-_See code: [src/commands/bootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/bootstrap/index.ts)_
+_See code: [src/commands/bootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/bootstrap/index.ts)_
 
 ## `hereya clone PROJECT`
 
@@ -356,7 +356,7 @@ EXAMPLES
   $ hereya clone myProject --chdir=./myProject
 ```
 
-_See code: [src/commands/clone/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/clone/index.ts)_
+_See code: [src/commands/clone/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/clone/index.ts)_
 
 ## `hereya config export-backend [FILE]`
 
@@ -378,7 +378,7 @@ EXAMPLES
   $ hereya config export-backend ./path/to/export.json
 ```
 
-_See code: [src/commands/config/export-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/config/export-backend/index.ts)_
+_See code: [src/commands/config/export-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/config/export-backend/index.ts)_
 
 ## `hereya config get-backend`
 
@@ -395,7 +395,7 @@ EXAMPLES
   $ hereya config get-backend
 ```
 
-_See code: [src/commands/config/get-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/config/get-backend/index.ts)_
+_See code: [src/commands/config/get-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/config/get-backend/index.ts)_
 
 ## `hereya config import-backend FILE`
 
@@ -415,7 +415,7 @@ EXAMPLES
   $ hereya config import-backend ./path/to/cloud-backend.json
 ```
 
-_See code: [src/commands/config/import-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/config/import-backend/index.ts)_
+_See code: [src/commands/config/import-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/config/import-backend/index.ts)_
 
 ## `hereya config use-backend TYPE`
 
@@ -437,7 +437,7 @@ EXAMPLES
   $ hereya config use-backend local
 ```
 
-_See code: [src/commands/config/use-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/config/use-backend/index.ts)_
+_See code: [src/commands/config/use-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/config/use-backend/index.ts)_
 
 ## `hereya delete-state`
 
@@ -463,7 +463,7 @@ EXAMPLES
   $ hereya delete-state --workspace staging
 ```
 
-_See code: [src/commands/delete-state/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/delete-state/index.ts)_
+_See code: [src/commands/delete-state/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/delete-state/index.ts)_
 
 ## `hereya deploy`
 
@@ -489,7 +489,7 @@ EXAMPLES
   $ hereya deploy
 ```
 
-_See code: [src/commands/deploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/deploy/index.ts)_
+_See code: [src/commands/deploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/deploy/index.ts)_
 
 ## `hereya devenv config`
 
@@ -510,7 +510,7 @@ EXAMPLES
   $ hereya devenv config -w my-workspace
 ```
 
-_See code: [src/commands/devenv/config/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/devenv/config/index.ts)_
+_See code: [src/commands/devenv/config/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/devenv/config/index.ts)_
 
 ## `hereya devenv install`
 
@@ -537,7 +537,7 @@ EXAMPLES
   $ hereya devenv install -w my-workspace -p instanceType=t3.large
 ```
 
-_See code: [src/commands/devenv/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/devenv/install/index.ts)_
+_See code: [src/commands/devenv/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/devenv/install/index.ts)_
 
 ## `hereya devenv project init PROJECT`
 
@@ -569,7 +569,7 @@ EXAMPLES
   $ hereya devenv project init my-app -w my-workspace -t acme/node-starter -p region=us-east-1
 ```
 
-_See code: [src/commands/devenv/project/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/devenv/project/init/index.ts)_
+_See code: [src/commands/devenv/project/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/devenv/project/init/index.ts)_
 
 ## `hereya devenv project uninit PROJECT`
 
@@ -595,7 +595,7 @@ EXAMPLES
   $ hereya devenv project uninit my-app -w my-workspace --force
 ```
 
-_See code: [src/commands/devenv/project/uninit/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/devenv/project/uninit/index.ts)_
+_See code: [src/commands/devenv/project/uninit/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/devenv/project/uninit/index.ts)_
 
 ## `hereya devenv sleep`
 
@@ -616,7 +616,7 @@ EXAMPLES
   $ hereya devenv sleep -w my-workspace
 ```
 
-_See code: [src/commands/devenv/sleep/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/devenv/sleep/index.ts)_
+_See code: [src/commands/devenv/sleep/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/devenv/sleep/index.ts)_
 
 ## `hereya devenv ssh`
 
@@ -636,7 +636,7 @@ EXAMPLES
   $ hereya devenv ssh -w my-workspace
 ```
 
-_See code: [src/commands/devenv/ssh/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/devenv/ssh/index.ts)_
+_See code: [src/commands/devenv/ssh/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/devenv/ssh/index.ts)_
 
 ## `hereya devenv uninstall`
 
@@ -657,7 +657,7 @@ EXAMPLES
   $ hereya devenv uninstall -w my-workspace
 ```
 
-_See code: [src/commands/devenv/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/devenv/uninstall/index.ts)_
+_See code: [src/commands/devenv/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/devenv/uninstall/index.ts)_
 
 ## `hereya doc PACKAGE`
 
@@ -690,7 +690,7 @@ EXAMPLES
   $ hereya doc my-package --no-doc
 ```
 
-_See code: [src/commands/doc/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/doc/index.ts)_
+_See code: [src/commands/doc/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/doc/index.ts)_
 
 ## `hereya docker run IMAGE`
 
@@ -721,7 +721,7 @@ EXAMPLES
   $ hereya docker run myapp:latest -- --rm -v ./data:/data
 ```
 
-_See code: [src/commands/docker/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/docker/run/index.ts)_
+_See code: [src/commands/docker/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/docker/run/index.ts)_
 
 ## `hereya down`
 
@@ -748,7 +748,7 @@ EXAMPLES
   $ hereya down
 ```
 
-_See code: [src/commands/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/down/index.ts)_
+_See code: [src/commands/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/down/index.ts)_
 
 ## `hereya env [NAME]`
 
@@ -779,7 +779,7 @@ EXAMPLES
   $ hereya env -w dev -l
 ```
 
-_See code: [src/commands/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/env/index.ts)_
+_See code: [src/commands/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/env/index.ts)_
 
 ## `hereya env set [NAME]`
 
@@ -806,7 +806,7 @@ EXAMPLES
   $ hereya env set FOO -v bar -w dev
 ```
 
-_See code: [src/commands/env/set/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/env/set/index.ts)_
+_See code: [src/commands/env/set/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/env/set/index.ts)_
 
 ## `hereya executor start`
 
@@ -840,7 +840,7 @@ EXAMPLES
   HEREYA_TOKEN=<token> HEREYA_CLOUD_URL=https://my-cloud.example.com hereya executor start -w my-workspace
 ```
 
-_See code: [src/commands/executor/start/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/executor/start/index.ts)_
+_See code: [src/commands/executor/start/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/executor/start/index.ts)_
 
 ## `hereya flow add PACKAGE`
 
@@ -878,7 +878,7 @@ EXAMPLES
   $ hereya flow add cloudy/docker_postgres -p DB_NAME=mydb -p DB_USER=admin
 ```
 
-_See code: [src/commands/flow/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/flow/add/index.ts)_
+_See code: [src/commands/flow/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/flow/add/index.ts)_
 
 ## `hereya flow docker run IMAGE`
 
@@ -908,7 +908,7 @@ EXAMPLES
   $ hereya flow docker run --pin myapp:latest -- --rm
 ```
 
-_See code: [src/commands/flow/docker/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/flow/docker/run/index.ts)_
+_See code: [src/commands/flow/docker/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/flow/docker/run/index.ts)_
 
 ## `hereya flow down`
 
@@ -942,7 +942,7 @@ EXAMPLES
   $ hereya flow down --pin
 ```
 
-_See code: [src/commands/flow/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/flow/down/index.ts)_
+_See code: [src/commands/flow/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/flow/down/index.ts)_
 
 ## `hereya flow env [NAME]`
 
@@ -976,7 +976,7 @@ EXAMPLES
   $ hereya flow env -l
 ```
 
-_See code: [src/commands/flow/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/flow/env/index.ts)_
+_See code: [src/commands/flow/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/flow/env/index.ts)_
 
 ## `hereya flow provid PACKAGE`
 
@@ -1005,7 +1005,7 @@ EXAMPLES
   $ hereya flow provid hereya/postgres --pin
 ```
 
-_See code: [src/commands/flow/provid/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/flow/provid/index.ts)_
+_See code: [src/commands/flow/provid/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/flow/provid/index.ts)_
 
 ## `hereya flow remove PACKAGE`
 
@@ -1035,7 +1035,7 @@ EXAMPLES
   $ hereya flow remove cloudy/docker_postgres --profile staging
 ```
 
-_See code: [src/commands/flow/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/flow/remove/index.ts)_
+_See code: [src/commands/flow/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/flow/remove/index.ts)_
 
 ## `hereya flow run CMD`
 
@@ -1064,7 +1064,7 @@ EXAMPLES
   $ hereya flow run --pin -- npm test
 ```
 
-_See code: [src/commands/flow/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/flow/run/index.ts)_
+_See code: [src/commands/flow/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/flow/run/index.ts)_
 
 ## `hereya flow up`
 
@@ -1098,7 +1098,7 @@ EXAMPLES
   $ hereya flow up --pin
 ```
 
-_See code: [src/commands/flow/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/flow/up/index.ts)_
+_See code: [src/commands/flow/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/flow/up/index.ts)_
 
 ## `hereya help [COMMAND]`
 
@@ -1155,7 +1155,7 @@ EXAMPLES
   $ hereya import org/my-package -f state.tfstate -w my-workspace
 ```
 
-_See code: [src/commands/import/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/import/index.ts)_
+_See code: [src/commands/import/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/import/index.ts)_
 
 ## `hereya import-repo PROJECT`
 
@@ -1185,7 +1185,7 @@ EXAMPLES
   $ hereya import-repo myProject -w=dev -r=https://github.com/acme/api --clone --chdir=./api
 ```
 
-_See code: [src/commands/import-repo/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/import-repo/index.ts)_
+_See code: [src/commands/import-repo/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/import-repo/index.ts)_
 
 ## `hereya init PROJECT`
 
@@ -1219,7 +1219,7 @@ EXAMPLES
   $ hereya init myProject -w=dev -t=acme/node-starter -d=prod -p region=us-east-1
 ```
 
-_See code: [src/commands/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/init/index.ts)_
+_See code: [src/commands/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/init/index.ts)_
 
 ## `hereya job cancel JOBID`
 
@@ -1247,7 +1247,7 @@ EXAMPLES
   $ hereya job cancel my-job-id -w my-workspace --force
 ```
 
-_See code: [src/commands/job/cancel/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/job/cancel/index.ts)_
+_See code: [src/commands/job/cancel/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/job/cancel/index.ts)_
 
 ## `hereya job list`
 
@@ -1273,7 +1273,7 @@ EXAMPLES
   $ hereya job list -w my-workspace --status pending --limit 10
 ```
 
-_See code: [src/commands/job/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/job/list/index.ts)_
+_See code: [src/commands/job/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/job/list/index.ts)_
 
 ## `hereya list`
 
@@ -1290,7 +1290,7 @@ EXAMPLES
   $ hereya list
 ```
 
-_See code: [src/commands/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/list/index.ts)_
+_See code: [src/commands/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/list/index.ts)_
 
 ## `hereya login [URL]`
 
@@ -1319,7 +1319,7 @@ EXAMPLES
   $ hereya login --token=your-token https://cloud.hereya.dev
 ```
 
-_See code: [src/commands/login/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/login/index.ts)_
+_See code: [src/commands/login/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/login/index.ts)_
 
 ## `hereya logout`
 
@@ -1336,7 +1336,7 @@ EXAMPLES
   $ hereya logout
 ```
 
-_See code: [src/commands/logout/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/logout/index.ts)_
+_See code: [src/commands/logout/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/logout/index.ts)_
 
 ## `hereya provid PACKAGE`
 
@@ -1364,7 +1364,7 @@ EXAMPLES
   $ hereya provid hereya/postgres --workspace staging
 ```
 
-_See code: [src/commands/provid/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/provid/index.ts)_
+_See code: [src/commands/provid/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/provid/index.ts)_
 
 ## `hereya publish`
 
@@ -1387,7 +1387,7 @@ EXAMPLES
   $ hereya publish --chdir=/path/to/package
 ```
 
-_See code: [src/commands/publish/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/publish/index.ts)_
+_See code: [src/commands/publish/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/publish/index.ts)_
 
 ## `hereya remove PACKAGE`
 
@@ -1415,7 +1415,7 @@ EXAMPLES
   $ hereya remove cloudy/docker_postgres
 ```
 
-_See code: [src/commands/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/remove/index.ts)_
+_See code: [src/commands/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/remove/index.ts)_
 
 ## `hereya run CMD`
 
@@ -1441,7 +1441,7 @@ EXAMPLES
   $ hereya run -w uat -- node index.js
 ```
 
-_See code: [src/commands/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/run/index.ts)_
+_See code: [src/commands/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/run/index.ts)_
 
 ## `hereya search QUERY`
 
@@ -1472,7 +1472,7 @@ EXAMPLES
   $ hereya search database --json
 ```
 
-_See code: [src/commands/search/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/search/index.ts)_
+_See code: [src/commands/search/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/search/index.ts)_
 
 ## `hereya unbootstrap INFRASTRUCTURETYPE`
 
@@ -1497,7 +1497,7 @@ EXAMPLES
   $ hereya unbootstrap local
 ```
 
-_See code: [src/commands/unbootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/unbootstrap/index.ts)_
+_See code: [src/commands/unbootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/unbootstrap/index.ts)_
 
 ## `hereya undeploy`
 
@@ -1523,7 +1523,7 @@ EXAMPLES
   $ hereya undeploy
 ```
 
-_See code: [src/commands/undeploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/undeploy/index.ts)_
+_See code: [src/commands/undeploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/undeploy/index.ts)_
 
 ## `hereya uninit PROJECT`
 
@@ -1551,7 +1551,7 @@ EXAMPLES
   $ hereya uninit myProject -w dev -p prodWorkspace=prod
 ```
 
-_See code: [src/commands/uninit/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/uninit/index.ts)_
+_See code: [src/commands/uninit/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/uninit/index.ts)_
 
 ## `hereya up`
 
@@ -1578,7 +1578,7 @@ EXAMPLES
   $ hereya up
 ```
 
-_See code: [src/commands/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/up/index.ts)_
+_See code: [src/commands/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/up/index.ts)_
 
 ## `hereya update [VERSION]`
 
@@ -1600,7 +1600,7 @@ EXAMPLES
   $ hereya update 0.75.0
 ```
 
-_See code: [src/commands/update/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/update/index.ts)_
+_See code: [src/commands/update/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/update/index.ts)_
 
 ## `hereya workspace create NAME`
 
@@ -1625,7 +1625,7 @@ EXAMPLES
   $ hereya workspace create dev
 ```
 
-_See code: [src/commands/workspace/create/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/workspace/create/index.ts)_
+_See code: [src/commands/workspace/create/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/workspace/create/index.ts)_
 
 ## `hereya workspace delete NAME`
 
@@ -1645,7 +1645,7 @@ EXAMPLES
   $ hereya workspace delete dev
 ```
 
-_See code: [src/commands/workspace/delete/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/workspace/delete/index.ts)_
+_See code: [src/commands/workspace/delete/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/workspace/delete/index.ts)_
 
 ## `hereya workspace env [NAME]`
 
@@ -1671,7 +1671,7 @@ EXAMPLES
   $ hereya workspace env myEnv -w dev
 ```
 
-_See code: [src/commands/workspace/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/workspace/env/index.ts)_
+_See code: [src/commands/workspace/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/workspace/env/index.ts)_
 
 ## `hereya workspace env set`
 
@@ -1695,7 +1695,7 @@ EXAMPLES
   $ hereya workspace env set -w my-workspace -n myVar -v my-value -i aws -s
 ```
 
-_See code: [src/commands/workspace/env/set/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/workspace/env/set/index.ts)_
+_See code: [src/commands/workspace/env/set/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/workspace/env/set/index.ts)_
 
 ## `hereya workspace env unset`
 
@@ -1716,7 +1716,7 @@ EXAMPLES
   $ hereya workspace env unset -w my-workspace -n myVar
 ```
 
-_See code: [src/commands/workspace/env/unset/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/workspace/env/unset/index.ts)_
+_See code: [src/commands/workspace/env/unset/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/workspace/env/unset/index.ts)_
 
 ## `hereya workspace executor install`
 
@@ -1745,7 +1745,7 @@ DESCRIPTION
   - always-on: a long-lived EC2 polls hereya-cloud 24/7 (legacy).
 ```
 
-_See code: [src/commands/workspace/executor/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/workspace/executor/install/index.ts)_
+_See code: [src/commands/workspace/executor/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/workspace/executor/install/index.ts)_
 
 ## `hereya workspace executor token`
 
@@ -1762,7 +1762,7 @@ DESCRIPTION
   Generate a workspace-scoped executor token for the remote executor
 ```
 
-_See code: [src/commands/workspace/executor/token/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/workspace/executor/token/index.ts)_
+_See code: [src/commands/workspace/executor/token/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/workspace/executor/token/index.ts)_
 
 ## `hereya workspace executor uninstall`
 
@@ -1786,7 +1786,7 @@ DESCRIPTION
   controls log output.
 ```
 
-_See code: [src/commands/workspace/executor/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/workspace/executor/uninstall/index.ts)_
+_See code: [src/commands/workspace/executor/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/workspace/executor/uninstall/index.ts)_
 
 ## `hereya workspace install PACKAGE`
 
@@ -1813,7 +1813,7 @@ EXAMPLES
   $ hereya workspace install hereya/aws-cognito
 ```
 
-_See code: [src/commands/workspace/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/workspace/install/index.ts)_
+_See code: [src/commands/workspace/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/workspace/install/index.ts)_
 
 ## `hereya workspace list`
 
@@ -1837,7 +1837,7 @@ EXAMPLES
   $ hereya workspace list --org personal
 ```
 
-_See code: [src/commands/workspace/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/workspace/list/index.ts)_
+_See code: [src/commands/workspace/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/workspace/list/index.ts)_
 
 ## `hereya workspace set-profile PROFILE`
 
@@ -1861,7 +1861,7 @@ EXAMPLES
   $ hereya workspace set-profile prod-profile -w production
 ```
 
-_See code: [src/commands/workspace/set-profile/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/workspace/set-profile/index.ts)_
+_See code: [src/commands/workspace/set-profile/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/workspace/set-profile/index.ts)_
 
 ## `hereya workspace uninstall PACKAGE`
 
@@ -1888,5 +1888,5 @@ EXAMPLES
   $ hereya workspace uninstall hereya/aws-cognito
 ```
 
-_See code: [src/commands/workspace/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.104.0/src/commands/workspace/uninstall/index.ts)_
+_See code: [src/commands/workspace/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.105.0/src/commands/workspace/uninstall/index.ts)_
 <!-- commandsstop -->

package/dist/commands/executor/start/index.js

@@ -9,6 +9,7 @@ import { executeAppJob } from '../../../lib/executor-start/execute-app-job.js';
 import { executeInitJob } from '../../../lib/executor-start/execute-init-job.js';
 import { createExecutorHooks } from '../../../lib/executor-start/hooks.js';
 import { dispatchJob } from '../../../lib/executor-start/job-dispatch.js';
+import { KeyedMutex } from '../../../lib/executor-start/job-serialization.js';
 export { redactCredentials } from '../../../lib/executor-start/format.js';
 export default class ExecutorStart extends Command {
     static description = `Start the remote executor process (polls for jobs from hereya cloud).
@@ -71,6 +72,9 @@ Set the HEREYA_CLOUD_URL environment variable to target a specific hereya cloud
         process.on('SIGINT', shutdown);
         process.on('SIGTERM', shutdown);
         const activeJobs = new Set();
+        // One shared mutex per executor process: jobs targeting the same
+        // (target, workspace) run serially, unrelated jobs stay concurrent.
+        const serialization = new KeyedMutex();
         // Ephemeral mode = an idle-timeout is configured (the EC2/ASG executor).
         // There, a job that hits the execution timeout triggers a delayed
         // non-zero exit so systemd replaces the wedged instance; in non-ephemeral
@@ -107,6 +111,7 @@ Set the HEREYA_CLOUD_URL environment variable to target a specific hereya cloud
                     lastJobAt,
                     lastSuccessfulPollAt,
                     maxConsecutive401s: MAX_CONSECUTIVE_401S,
+                    serialization,
                     workspace: flags.workspace,
                 });
                 consecutive401s = step.consecutive401s;
@@ -165,7 +170,7 @@ Set the HEREYA_CLOUD_URL environment variable to target a specific hereya cloud
         return { exit: false };
     }
     async runPollIteration(args) {
-        const { activeJobs, cloudBackend, cloudUrl, concurrency, executor, executorId, hereyaToken, hooks, idleTimeout, maxConsecutive401s, workspace, } = args;
+        const { activeJobs, cloudBackend, cloudUrl, concurrency, executor, executorId, hereyaToken, hooks, idleTimeout, maxConsecutive401s, serialization, workspace, } = args;
         let { consecutive401s, lastJobAt, lastSuccessfulPollAt } = args;
         if (activeJobs.size > 0) {
             lastJobAt = Date.now();
@@ -201,7 +206,7 @@ Set the HEREYA_CLOUD_URL environment variable to target a specific hereya cloud
             const { job } = pollResult;
             this.log(`Received job ${job.id} (${job.type}) [${activeJobs.size + 1}/${concurrency} slots used]`);
             lastJobAt = Date.now();
-            const jobPromise = dispatchJob(job, executor, cloudBackend, hooks).finally(() => {
+            const jobPromise = dispatchJob(job, executor, cloudBackend, hooks, serialization).finally(() => {
                 activeJobs.delete(jobPromise);
             });
             activeJobs.add(jobPromise);

package/dist/lib/executor-start/format.d.ts

@@ -4,6 +4,15 @@
  * the same sanitization.
  */
 export declare function sanitizeWorkspaceForFilename(workspace: string): string;
+/**
+ * Builds a verbose error description for server-side job logs. If the thrown
+ * error is a `ShellCommandError` (or anything carrying `.stderr`/`.stdout`),
+ * include the full buffers so operators can see the complete failure context.
+ */
+export declare function formatJobError(error: unknown): {
+    fullErr: string;
+    reason: string;
+};
 /**
  * Strip credentials from log strings before flushing them to the cloud.
  * Removes:

package/dist/lib/executor-start/format.js

@@ -6,6 +6,30 @@
 export function sanitizeWorkspaceForFilename(workspace) {
     return workspace.replaceAll('/', '-');
 }
+/**
+ * Builds a verbose error description for server-side job logs. If the thrown
+ * error is a `ShellCommandError` (or anything carrying `.stderr`/`.stdout`),
+ * include the full buffers so operators can see the complete failure context.
+ */
+export function formatJobError(error) {
+    const reason = error && typeof error === 'object' && 'message' in error && typeof error.message === 'string'
+        ? error.message
+        : String(error);
+    const stderrBuffer = error && typeof error === 'object' && typeof error.stderr === 'string'
+        ? error.stderr
+        : '';
+    const stdoutBuffer = error && typeof error === 'object' && typeof error.stdout === 'string'
+        ? error.stdout
+        : '';
+    let extra = '';
+    if (stderrBuffer.trim()) {
+        extra = `\n--- stderr ---\n${stderrBuffer}`;
+    }
+    else if (stdoutBuffer.trim()) {
+        extra = `\n--- stdout ---\n${stdoutBuffer}`;
+    }
+    return { fullErr: reason + extra, reason };
+}
 /**
  * Strip credentials from log strings before flushing them to the cloud.
  * Removes:

package/dist/lib/executor-start/job-dispatch.d.ts

@@ -1,5 +1,6 @@
 import { CloudBackend } from '../../backend/cloud/cloud-backend.js';
 import { LocalExecutor } from '../../executor/local.js';
+import { KeyedMutex } from './job-serialization.js';
 export interface JobDispatchHooks {
     log(msg: string): void;
     /**
@@ -15,9 +16,13 @@ export interface JobDispatchHooks {
  * and heartbeating to the cloud. Errors are caught and reported as failed
  * jobs. Execution is raced against a per-job timeout so a hung child can
  * never hold its slot indefinitely.
+ *
+ * `serialization` must be the executor-process-wide KeyedMutex: jobs that
+ * mutate the same logical (target, workspace) run serially on it, everything
+ * else stays concurrent. See job-serialization.ts.
  */
 export declare function dispatchJob(job: {
     id: string;
     payload: any;
     type: string;
-}, executor: LocalExecutor, cloudBackend: CloudBackend, hooks: JobDispatchHooks): Promise<void>;
+}, executor: LocalExecutor, cloudBackend: CloudBackend, hooks: JobDispatchHooks, serialization: KeyedMutex): Promise<void>;

package/dist/lib/executor-start/job-dispatch.js

@@ -1,54 +1,21 @@
 import { executeAppJob } from './execute-app-job.js';
 import { executeDeployJob } from './execute-deploy-job.js';
 import { executeInitJob } from './execute-init-job.js';
-const DEFAULT_EXECUTOR_JOB_TIMEOUT_MIN = 60;
-/**
- * Per-job execution timeout in minutes. Overridable via
- * HEREYA_EXECUTOR_JOB_TIMEOUT_MIN (positive number, in minutes).
- * A wedged child process (e.g. a tool blocking on a prompt) must not hold
- * its executor slot forever while the heartbeat keeps the job "alive".
- */
-function executorJobTimeoutMin() {
-    const fromEnv = process.env.HEREYA_EXECUTOR_JOB_TIMEOUT_MIN;
-    if (fromEnv !== undefined) {
-        const parsed = Number(fromEnv);
-        if (Number.isFinite(parsed) && parsed > 0) {
-            return parsed;
-        }
-    }
-    return DEFAULT_EXECUTOR_JOB_TIMEOUT_MIN;
-}
-/**
- * Builds a verbose error description for server-side job logs. If the thrown
- * error is a `ShellCommandError` (or anything carrying `.stderr`/`.stdout`),
- * include the full buffers so operators can see the complete failure context.
- */
-function formatJobError(error) {
-    const reason = error && typeof error === 'object' && 'message' in error && typeof error.message === 'string'
-        ? error.message
-        : String(error);
-    const stderrBuffer = error && typeof error === 'object' && typeof error.stderr === 'string'
-        ? error.stderr
-        : '';
-    const stdoutBuffer = error && typeof error === 'object' && typeof error.stdout === 'string'
-        ? error.stdout
-        : '';
-    let extra = '';
-    if (stderrBuffer.trim()) {
-        extra = `\n--- stderr ---\n${stderrBuffer}`;
-    }
-    else if (stdoutBuffer.trim()) {
-        extra = `\n--- stdout ---\n${stdoutBuffer}`;
-    }
-    return { fullErr: reason + extra, reason };
-}
+import { formatJobError } from './format.js';
+import { deriveJobSerializationKey } from './job-serialization.js';
+import { executorJobTimeoutMin } from './job-timeout.js';
 /**
  * Dispatches a single job to the right handler, with periodic log flushing
  * and heartbeating to the cloud. Errors are caught and reported as failed
  * jobs. Execution is raced against a per-job timeout so a hung child can
  * never hold its slot indefinitely.
+ *
+ * `serialization` must be the executor-process-wide KeyedMutex: jobs that
+ * mutate the same logical (target, workspace) run serially on it, everything
+ * else stays concurrent. See job-serialization.ts.
  */
-export async function dispatchJob(job, executor, cloudBackend, hooks) {
+// eslint-disable-next-line max-params -- explicit DI of the process-wide mutex beats hidden module state
+export async function dispatchJob(job, executor, cloudBackend, hooks, serialization) {
     let logBuffer = '';
     const logInterval = setInterval(async () => {
         if (logBuffer) {
@@ -125,13 +92,35 @@ export async function dispatchJob(job, executor, cloudBackend, hooks) {
             : await executor.destroy({ ...job.payload, logger });
         await finalize(result, '');
     };
+    // Jobs mutating the same logical (target, workspace) — e.g. a resubmitted
+    // duplicate of a deploy that looked stuck — must run serially: concurrent
+    // runs race over the same cloned repo dirs, local hereya state and tofu/CDK
+    // state. The wait happens INSIDE the job lifecycle, AFTER the log/heartbeat
+    // intervals started above, so a queued job keeps heartbeating — otherwise
+    // the server-side stale reaper would reset it and this same executor would
+    // claim it again. The per-job execution timeout below INTENTIONALLY covers
+    // queue-wait + execution: a job stuck behind a wedged predecessor is failed
+    // and retried rather than waiting forever.
+    const serializationKey = deriveJobSerializationKey(job);
+    const executeSerialized = async () => {
+        if (serialization.isBusy(serializationKey)) {
+            logger.info(`Waiting for an in-flight job on the same target (${serializationKey}) to finish before starting...`);
+        }
+        await serialization.run(serializationKey, async () => {
+            // A job that timed out while queued must not ghost-execute after its
+            // predecessor finally drains — its row is already failed.
+            if (timedOut)
+                return;
+            await execute();
+        });
+    };
     try {
         const timeoutPromise = new Promise((resolve) => {
             timeoutTimer = setTimeout(() => resolve('timeout'), timeoutMin * 60 * 1000);
             // Belt-and-braces: a pending job timer must never keep the process alive.
             timeoutTimer.unref?.();
         });
-        const executePromise = execute().then(() => 'done');
+        const executePromise = executeSerialized().then(() => 'done');
         // Keep the chain explicitly handled even after the timeout wins the race:
         // a late rejection from the wedged handler (hung tool killed by OOM,
         // network drop, ...) must never surface as an unhandledRejection and

package/dist/lib/executor-start/job-serialization.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Per-(target, workspace) job serialization for the remote executor.
+ *
+ * Production incident: a user resubmitted a deploy that looked stuck, and the
+ * executor ran BOTH identical deploys of the same project+workspace
+ * concurrently. They raced each other over the same cloned repo dirs, local
+ * hereya state and tofu/CDK state, and both wedged. Jobs that mutate the same
+ * logical target in the same workspace must run serially on one executor;
+ * unrelated jobs (e.g. the normal boot burst of provisions for different
+ * packages) must keep running concurrently.
+ */
+/**
+ * Derives a stable key identifying "same logical target in the same
+ * workspace", or null when the job must NOT be serialized (read-only jobs,
+ * unknown job types, malformed payloads — those run immediately, no lock).
+ * Never throws.
+ *
+ * Key derivation per job type (the kind prefix prevents cross-kind
+ * collisions, e.g. a project named like an app):
+ *   - deploy / undeploy:        `project:<payload.project>:<payload.workspace>`
+ *   - init:                     `project:<payload.projectName>:<payload.workspace>`
+ *   - app-deploy / app-destroy: `app:<payload.appName>:<payload.workspace>`
+ *   - provision / destroy:      `pkg:<payload.package>:<payload.workspace>`
+ *   - resolve-env:              null (read-only, never serialized)
+ */
+export declare function deriveJobSerializationKey(job: {
+    id: string;
+    payload: any;
+    type: string;
+}): null | string;
+/**
+ * Minimal keyed mutex: chains async functions per key so runs with the same
+ * key execute strictly serially (FIFO), while runs with different keys — or a
+ * null key — start immediately and proceed concurrently.
+ *
+ * - A rejecting fn never blocks its successors: each fn is chained via
+ *   `.then(fn, fn)` onto a rejection-swallowed tail.
+ * - The map entry for a key is removed once its chain drains, so the map
+ *   cannot grow unboundedly over executor uptime.
+ */
+export declare class KeyedMutex {
+    private readonly chains;
+    /** Number of keys with in-flight or queued runs (introspection/test aid). */
+    get size(): number;
+    /**
+     * True when at least one run for this key is in flight or queued — i.e. a
+     * new run() with this key would have to wait. A null key is never busy.
+     */
+    isBusy(key: null | string): boolean;
+    run<T>(key: null | string, fn: () => Promise<T>): Promise<T>;
+}

package/dist/lib/executor-start/job-serialization.js

@@ -0,0 +1,134 @@
+/**
+ * Per-(target, workspace) job serialization for the remote executor.
+ *
+ * Production incident: a user resubmitted a deploy that looked stuck, and the
+ * executor ran BOTH identical deploys of the same project+workspace
+ * concurrently. They raced each other over the same cloned repo dirs, local
+ * hereya state and tofu/CDK state, and both wedged. Jobs that mutate the same
+ * logical target in the same workspace must run serially on one executor;
+ * unrelated jobs (e.g. the normal boot burst of provisions for different
+ * packages) must keep running concurrently.
+ */
+/**
+ * Escape '%' (the escape character) and ':' (the key segment separator) so
+ * two different (target, workspace) pairs can never collide on the same key
+ * (e.g. project `a:b` in workspace `c` vs project `a` in workspace `b:c`).
+ */
+function escapeSegment(value) {
+    return value.replaceAll('%', '%25').replaceAll(':', '%3A');
+}
+function buildKey(kind, target, workspace) {
+    return `${kind}:${escapeSegment(target)}:${escapeSegment(workspace)}`;
+}
+function nonEmptyString(value) {
+    if (typeof value !== 'string')
+        return undefined;
+    const trimmed = value.trim();
+    return trimmed === '' ? undefined : trimmed;
+}
+/**
+ * Derives a stable key identifying "same logical target in the same
+ * workspace", or null when the job must NOT be serialized (read-only jobs,
+ * unknown job types, malformed payloads — those run immediately, no lock).
+ * Never throws.
+ *
+ * Key derivation per job type (the kind prefix prevents cross-kind
+ * collisions, e.g. a project named like an app):
+ *   - deploy / undeploy:        `project:<payload.project>:<payload.workspace>`
+ *   - init:                     `project:<payload.projectName>:<payload.workspace>`
+ *   - app-deploy / app-destroy: `app:<payload.appName>:<payload.workspace>`
+ *   - provision / destroy:      `pkg:<payload.package>:<payload.workspace>`
+ *   - resolve-env:              null (read-only, never serialized)
+ */
+export function deriveJobSerializationKey(job) {
+    try {
+        const { payload } = job;
+        if (!payload || typeof payload !== 'object')
+            return null;
+        const workspace = nonEmptyString(payload.workspace);
+        if (!workspace)
+            return null;
+        switch (job.type) {
+            case 'app-deploy':
+            case 'app-destroy': {
+                const appName = nonEmptyString(payload.appName);
+                return appName ? buildKey('app', appName, workspace) : null;
+            }
+            case 'deploy':
+            case 'undeploy': {
+                // The deploy payload carries the project NAME (the repo URL lives in
+                // the project metadata fetched later), so the name is the identity.
+                const project = nonEmptyString(payload.project);
+                return project ? buildKey('project', project, workspace) : null;
+            }
+            case 'destroy':
+            case 'provision': {
+                const pkg = nonEmptyString(payload.package);
+                return pkg ? buildKey('pkg', pkg, workspace) : null;
+            }
+            case 'init': {
+                // Shares the `project:` key space with deploy/undeploy on purpose:
+                // an init and a deploy of the same project must not interleave.
+                const projectName = nonEmptyString(payload.projectName);
+                return projectName ? buildKey('project', projectName, workspace) : null;
+            }
+            default: {
+                // resolve-env (read-only) and any unknown/future job type.
+                return null;
+            }
+        }
+    }
+    catch {
+        // Serialization is best-effort protection; a weird payload must never
+        // prevent the job from running at all.
+        return null;
+    }
+}
+/**
+ * Minimal keyed mutex: chains async functions per key so runs with the same
+ * key execute strictly serially (FIFO), while runs with different keys — or a
+ * null key — start immediately and proceed concurrently.
+ *
+ * - A rejecting fn never blocks its successors: each fn is chained via
+ *   `.then(fn, fn)` onto a rejection-swallowed tail.
+ * - The map entry for a key is removed once its chain drains, so the map
+ *   cannot grow unboundedly over executor uptime.
+ */
+export class KeyedMutex {
+    chains = new Map();
+    /** Number of keys with in-flight or queued runs (introspection/test aid). */
+    get size() {
+        return this.chains.size;
+    }
+    /**
+     * True when at least one run for this key is in flight or queued — i.e. a
+     * new run() with this key would have to wait. A null key is never busy.
+     */
+    isBusy(key) {
+        return key !== null && this.chains.has(key);
+    }
+    async run(key, fn) {
+        if (key === null) {
+            return fn();
+        }
+        const existing = this.chains.get(key);
+        const entry = existing ?? { pending: 0, tail: Promise.resolve() };
+        if (!existing) {
+            this.chains.set(key, entry);
+        }
+        entry.pending += 1;
+        const chained = entry.tail.then(fn, fn);
+        // The stored tail must never reject (a failed predecessor must not block
+        // or poison successors); once this run settles, drop the map entry if no
+        // other run is in flight or queued for the key.
+        entry.tail = chained
+            .then(() => { }, () => { })
+            .finally(() => {
+            entry.pending -= 1;
+            if (entry.pending === 0 && this.chains.get(key) === entry) {
+                this.chains.delete(key);
+            }
+        });
+        return chained;
+    }
+}

package/dist/lib/executor-start/job-timeout.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Per-job execution timeout in minutes. Overridable via
+ * HEREYA_EXECUTOR_JOB_TIMEOUT_MIN (positive number, in minutes).
+ * A wedged child process (e.g. a tool blocking on a prompt) must not hold
+ * its executor slot forever while the heartbeat keeps the job "alive".
+ */
+export declare function executorJobTimeoutMin(): number;

package/dist/lib/executor-start/job-timeout.js

@@ -0,0 +1,17 @@
+const DEFAULT_EXECUTOR_JOB_TIMEOUT_MIN = 60;
+/**
+ * Per-job execution timeout in minutes. Overridable via
+ * HEREYA_EXECUTOR_JOB_TIMEOUT_MIN (positive number, in minutes).
+ * A wedged child process (e.g. a tool blocking on a prompt) must not hold
+ * its executor slot forever while the heartbeat keeps the job "alive".
+ */
+export function executorJobTimeoutMin() {
+    const fromEnv = process.env.HEREYA_EXECUTOR_JOB_TIMEOUT_MIN;
+    if (fromEnv !== undefined) {
+        const parsed = Number(fromEnv);
+        if (Number.isFinite(parsed) && parsed > 0) {
+            return parsed;
+        }
+    }
+    return DEFAULT_EXECUTOR_JOB_TIMEOUT_MIN;
+}

package/oclif.manifest.json

@@ -3517,5 +3517,5 @@
       ]
     }
   },
-  "version": "0.104.0"
+  "version": "0.105.0"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "hereya-cli",
   "description": "Infrastructure as Package",
-  "version": "0.104.0",
+  "version": "0.105.0",
   "author": "Hereya Developers",
   "bin": {
     "hereya": "./bin/run.cjs"