hereya-cli 0.85.5 → 0.86.0

package/README.md

@@ -21,7 +21,7 @@ $ npm install -g hereya-cli
 $ hereya COMMAND
 running command...
 $ hereya (--version)
-hereya-cli/0.85.5 linux-x64 node-v24.14.1
+hereya-cli/0.86.0 linux-x64 node-v24.14.1
 $ hereya --help [COMMAND]
 USAGE
   $ hereya COMMAND
@@ -127,7 +127,7 @@ EXAMPLES
   $ hereya add cloudy/docker_postgres
 ```
 
-_See code: [src/commands/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/add/index.ts)_
+_See code: [src/commands/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/add/index.ts)_
 
 ## `hereya app deploy NAME`
 
@@ -135,7 +135,8 @@ Deploy a hereya-app to a workspace.
 
 ```
 USAGE
-  $ hereya app deploy NAME -w <value> [--chdir <value>] [--local] [-p <value>...] [--version <value>]
+  $ hereya app deploy NAME -w <value> [--chdir <value>] [--local] [-p <value>...] [--token <value>] [--version
+    <value>]
 
 ARGUMENTS
   NAME  app name in org/name format
@@ -148,6 +149,9 @@ FLAGS
                               Alternatively, you can define the project root by setting the HEREYA_PROJECT_ROOT_DIR
                               environment variable.
       --local                 force local execution (skip remote executor)
+      --token=<value>         Ephemeral cloud access token used for this invocation only. Held in memory; never written
+                              to the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN
+                              environment variable.
       --version=<value>       specific app version to deploy (defaults to latest)
 
 DESCRIPTION
@@ -161,7 +165,7 @@ EXAMPLES
   $ hereya app deploy my-org/my-app -w prod -p organizationId=org-123
 ```
 
-_See code: [src/commands/app/deploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/app/deploy/index.ts)_
+_See code: [src/commands/app/deploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/app/deploy/index.ts)_
 
 ## `hereya app deployments NAME`
 
@@ -169,11 +173,15 @@ List workspaces a hereya-app has been deployed to.
 
 ```
 USAGE
-  $ hereya app deployments NAME
+  $ hereya app deployments NAME [--token <value>]
 
 ARGUMENTS
   NAME  app name in org/name format
 
+FLAGS
+  --token=<value>  Ephemeral cloud access token used for this invocation only. Held in memory; never written to the
+                   keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment variable.
+
 DESCRIPTION
   List workspaces a hereya-app has been deployed to.
 
@@ -181,7 +189,7 @@ EXAMPLES
   $ hereya app deployments my-org/my-app
 ```
 
-_See code: [src/commands/app/deployments/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/app/deployments/index.ts)_
+_See code: [src/commands/app/deployments/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/app/deployments/index.ts)_
 
 ## `hereya app destroy NAME`
 
@@ -189,7 +197,7 @@ Destroy a hereya-app deployment from a workspace.
 
 ```
 USAGE
-  $ hereya app destroy NAME -w <value> [--chdir <value>] [--local] [-p <value>...]
+  $ hereya app destroy NAME -w <value> [--chdir <value>] [--local] [-p <value>...] [--token <value>]
 
 ARGUMENTS
   NAME  app name in org/name format
@@ -202,6 +210,9 @@ FLAGS
                               Alternatively, you can define the project root by setting the HEREYA_PROJECT_ROOT_DIR
                               environment variable.
       --local                 force local execution (skip remote executor)
+      --token=<value>         Ephemeral cloud access token used for this invocation only. Held in memory; never written
+                              to the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN
+                              environment variable.
 
 DESCRIPTION
   Destroy a hereya-app deployment from a workspace.
@@ -210,7 +221,7 @@ EXAMPLES
   $ hereya app destroy my-org/my-app -w my-workspace
 ```
 
-_See code: [src/commands/app/destroy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/app/destroy/index.ts)_
+_See code: [src/commands/app/destroy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/app/destroy/index.ts)_
 
 ## `hereya app env NAME [KEY]`
 
@@ -218,7 +229,7 @@ Print environment variables exported by a hereya-app deployment.
 
 ```
 USAGE
-  $ hereya app env NAME [KEY] -w <value>
+  $ hereya app env NAME [KEY] -w <value> [--token <value>]
 
 ARGUMENTS
   NAME  app name in org/name format
@@ -226,6 +237,9 @@ ARGUMENTS
 
 FLAGS
   -w, --workspace=<value>  (required) workspace to read env outputs from
+      --token=<value>      Ephemeral cloud access token used for this invocation only. Held in memory; never written to
+                           the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment
+                           variable.
 
 DESCRIPTION
   Print environment variables exported by a hereya-app deployment.
@@ -236,7 +250,7 @@ EXAMPLES
   $ hereya app env my-org/my-app -w my-workspace DATABASE_URL
 ```
 
-_See code: [src/commands/app/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/app/env/index.ts)_
+_See code: [src/commands/app/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/app/env/index.ts)_
 
 ## `hereya app list`
 
@@ -244,7 +258,11 @@ List hereya-apps available to your account.
 
 ```
 USAGE
-  $ hereya app list
+  $ hereya app list [--token <value>]
+
+FLAGS
+  --token=<value>  Ephemeral cloud access token used for this invocation only. Held in memory; never written to the
+                   keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment variable.
 
 DESCRIPTION
   List hereya-apps available to your account.
@@ -253,7 +271,7 @@ EXAMPLES
   $ hereya app list
 ```
 
-_See code: [src/commands/app/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/app/list/index.ts)_
+_See code: [src/commands/app/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/app/list/index.ts)_
 
 ## `hereya app new DIRNAME`
 
@@ -279,7 +297,7 @@ EXAMPLES
   $ hereya app new ./my-app -n my-org/my-app --description "An ai-app-builder app"
 ```
 
-_See code: [src/commands/app/new/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/app/new/index.ts)_
+_See code: [src/commands/app/new/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/app/new/index.ts)_
 
 ## `hereya app status NAME`
 
@@ -287,13 +305,16 @@ Show the deployment status of a hereya-app on a workspace.
 
 ```
 USAGE
-  $ hereya app status NAME -w <value>
+  $ hereya app status NAME -w <value> [--token <value>]
 
 ARGUMENTS
   NAME  app name in org/name format
 
 FLAGS
   -w, --workspace=<value>  (required) workspace to read deployment status from
+      --token=<value>      Ephemeral cloud access token used for this invocation only. Held in memory; never written to
+                           the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment
+                           variable.
 
 DESCRIPTION
   Show the deployment status of a hereya-app on a workspace.
@@ -302,7 +323,7 @@ EXAMPLES
   $ hereya app status my-org/my-app -w my-workspace
 ```
 
-_See code: [src/commands/app/status/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/app/status/index.ts)_
+_See code: [src/commands/app/status/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/app/status/index.ts)_
 
 ## `hereya bootstrap INFRASTRUCTURETYPE`
 
@@ -327,7 +348,7 @@ EXAMPLES
   $ hereya bootstrap local
 ```
 
-_See code: [src/commands/bootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/bootstrap/index.ts)_
+_See code: [src/commands/bootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/bootstrap/index.ts)_
 
 ## `hereya clone PROJECT`
 
@@ -352,7 +373,7 @@ EXAMPLES
   $ hereya clone myProject --chdir=./myProject
 ```
 
-_See code: [src/commands/clone/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/clone/index.ts)_
+_See code: [src/commands/clone/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/clone/index.ts)_
 
 ## `hereya config export-backend [FILE]`
 
@@ -374,7 +395,7 @@ EXAMPLES
   $ hereya config export-backend ./path/to/export.json
 ```
 
-_See code: [src/commands/config/export-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/config/export-backend/index.ts)_
+_See code: [src/commands/config/export-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/config/export-backend/index.ts)_
 
 ## `hereya config get-backend`
 
@@ -391,7 +412,7 @@ EXAMPLES
   $ hereya config get-backend
 ```
 
-_See code: [src/commands/config/get-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/config/get-backend/index.ts)_
+_See code: [src/commands/config/get-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/config/get-backend/index.ts)_
 
 ## `hereya config import-backend FILE`
 
@@ -411,7 +432,7 @@ EXAMPLES
   $ hereya config import-backend ./path/to/cloud-backend.json
 ```
 
-_See code: [src/commands/config/import-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/config/import-backend/index.ts)_
+_See code: [src/commands/config/import-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/config/import-backend/index.ts)_
 
 ## `hereya config use-backend TYPE`
 
@@ -433,7 +454,7 @@ EXAMPLES
   $ hereya config use-backend local
 ```
 
-_See code: [src/commands/config/use-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/config/use-backend/index.ts)_
+_See code: [src/commands/config/use-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/config/use-backend/index.ts)_
 
 ## `hereya delete-state`
 
@@ -459,7 +480,7 @@ EXAMPLES
   $ hereya delete-state --workspace staging
 ```
 
-_See code: [src/commands/delete-state/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/delete-state/index.ts)_
+_See code: [src/commands/delete-state/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/delete-state/index.ts)_
 
 ## `hereya deploy`
 
@@ -467,7 +488,7 @@ Deploy a hereya project using the project deployment package
 
 ```
 USAGE
-  $ hereya deploy -w <value> [--chdir <value>] [--debug] [--local]
+  $ hereya deploy -w <value> [--chdir <value>] [--debug] [--local] [--token <value>]
 
 FLAGS
   -w, --workspace=<value>  (required) name of the workspace to deploy the packages for
@@ -477,6 +498,9 @@ FLAGS
                            environment variable.
       --debug              enable debug mode
       --local              force local execution (skip remote executor)
+      --token=<value>      Ephemeral cloud access token used for this invocation only. Held in memory; never written to
+                           the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment
+                           variable.
 
 DESCRIPTION
   Deploy a hereya project using the project deployment package
@@ -485,7 +509,7 @@ EXAMPLES
   $ hereya deploy
 ```
 
-_See code: [src/commands/deploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/deploy/index.ts)_
+_See code: [src/commands/deploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/deploy/index.ts)_
 
 ## `hereya devenv config`
 
@@ -505,7 +529,7 @@ EXAMPLES
   $ hereya devenv config -w my-workspace
 ```
 
-_See code: [src/commands/devenv/config/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/devenv/config/index.ts)_
+_See code: [src/commands/devenv/config/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/devenv/config/index.ts)_
 
 ## `hereya devenv install`
 
@@ -530,7 +554,7 @@ EXAMPLES
   $ hereya devenv install -w my-workspace -p instanceType=t3.large
 ```
 
-_See code: [src/commands/devenv/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/devenv/install/index.ts)_
+_See code: [src/commands/devenv/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/devenv/install/index.ts)_
 
 ## `hereya devenv project init PROJECT`
 
@@ -562,7 +586,7 @@ EXAMPLES
   $ hereya devenv project init my-app -w my-workspace -t acme/node-starter -p region=us-east-1
 ```
 
-_See code: [src/commands/devenv/project/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/devenv/project/init/index.ts)_
+_See code: [src/commands/devenv/project/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/devenv/project/init/index.ts)_
 
 ## `hereya devenv project uninit PROJECT`
 
@@ -588,7 +612,7 @@ EXAMPLES
   $ hereya devenv project uninit my-app -w my-workspace --force
 ```
 
-_See code: [src/commands/devenv/project/uninit/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/devenv/project/uninit/index.ts)_
+_See code: [src/commands/devenv/project/uninit/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/devenv/project/uninit/index.ts)_
 
 ## `hereya devenv ssh`
 
@@ -608,7 +632,7 @@ EXAMPLES
   $ hereya devenv ssh -w my-workspace
 ```
 
-_See code: [src/commands/devenv/ssh/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/devenv/ssh/index.ts)_
+_See code: [src/commands/devenv/ssh/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/devenv/ssh/index.ts)_
 
 ## `hereya devenv uninstall`
 
@@ -629,7 +653,7 @@ EXAMPLES
   $ hereya devenv uninstall -w my-workspace
 ```
 
-_See code: [src/commands/devenv/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/devenv/uninstall/index.ts)_
+_See code: [src/commands/devenv/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/devenv/uninstall/index.ts)_
 
 ## `hereya doc PACKAGE`
 
@@ -662,7 +686,7 @@ EXAMPLES
   $ hereya doc my-package --no-doc
 ```
 
-_See code: [src/commands/doc/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/doc/index.ts)_
+_See code: [src/commands/doc/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/doc/index.ts)_
 
 ## `hereya docker run IMAGE`
 
@@ -693,7 +717,7 @@ EXAMPLES
   $ hereya docker run myapp:latest -- --rm -v ./data:/data
 ```
 
-_See code: [src/commands/docker/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/docker/run/index.ts)_
+_See code: [src/commands/docker/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/docker/run/index.ts)_
 
 ## `hereya down`
 
@@ -720,7 +744,7 @@ EXAMPLES
   $ hereya down
 ```
 
-_See code: [src/commands/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/down/index.ts)_
+_See code: [src/commands/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/down/index.ts)_
 
 ## `hereya env [NAME]`
 
@@ -751,7 +775,7 @@ EXAMPLES
   $ hereya env -w dev -l
 ```
 
-_See code: [src/commands/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/env/index.ts)_
+_See code: [src/commands/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/env/index.ts)_
 
 ## `hereya env set [NAME]`
 
@@ -778,7 +802,7 @@ EXAMPLES
   $ hereya env set FOO -v bar -w dev
 ```
 
-_See code: [src/commands/env/set/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/env/set/index.ts)_
+_See code: [src/commands/env/set/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/env/set/index.ts)_
 
 ## `hereya executor start`
 
@@ -811,7 +835,7 @@ EXAMPLES
   HEREYA_TOKEN=<token> HEREYA_CLOUD_URL=https://my-cloud.example.com hereya executor start -w my-workspace
 ```
 
-_See code: [src/commands/executor/start/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/executor/start/index.ts)_
+_See code: [src/commands/executor/start/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/executor/start/index.ts)_
 
 ## `hereya flow add PACKAGE`
 
@@ -849,7 +873,7 @@ EXAMPLES
   $ hereya flow add cloudy/docker_postgres -p DB_NAME=mydb -p DB_USER=admin
 ```
 
-_See code: [src/commands/flow/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/flow/add/index.ts)_
+_See code: [src/commands/flow/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/flow/add/index.ts)_
 
 ## `hereya flow docker run IMAGE`
 
@@ -879,7 +903,7 @@ EXAMPLES
   $ hereya flow docker run --pin myapp:latest -- --rm
 ```
 
-_See code: [src/commands/flow/docker/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/flow/docker/run/index.ts)_
+_See code: [src/commands/flow/docker/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/flow/docker/run/index.ts)_
 
 ## `hereya flow down`
 
@@ -913,7 +937,7 @@ EXAMPLES
   $ hereya flow down --pin
 ```
 
-_See code: [src/commands/flow/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/flow/down/index.ts)_
+_See code: [src/commands/flow/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/flow/down/index.ts)_
 
 ## `hereya flow env [NAME]`
 
@@ -947,7 +971,7 @@ EXAMPLES
   $ hereya flow env -l
 ```
 
-_See code: [src/commands/flow/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/flow/env/index.ts)_
+_See code: [src/commands/flow/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/flow/env/index.ts)_
 
 ## `hereya flow provid PACKAGE`
 
@@ -976,7 +1000,7 @@ EXAMPLES
   $ hereya flow provid hereya/postgres --pin
 ```
 
-_See code: [src/commands/flow/provid/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/flow/provid/index.ts)_
+_See code: [src/commands/flow/provid/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/flow/provid/index.ts)_
 
 ## `hereya flow remove PACKAGE`
 
@@ -1006,7 +1030,7 @@ EXAMPLES
   $ hereya flow remove cloudy/docker_postgres --profile staging
 ```
 
-_See code: [src/commands/flow/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/flow/remove/index.ts)_
+_See code: [src/commands/flow/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/flow/remove/index.ts)_
 
 ## `hereya flow run CMD`
 
@@ -1035,7 +1059,7 @@ EXAMPLES
   $ hereya flow run --pin -- npm test
 ```
 
-_See code: [src/commands/flow/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/flow/run/index.ts)_
+_See code: [src/commands/flow/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/flow/run/index.ts)_
 
 ## `hereya flow up`
 
@@ -1069,7 +1093,7 @@ EXAMPLES
   $ hereya flow up --pin
 ```
 
-_See code: [src/commands/flow/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/flow/up/index.ts)_
+_See code: [src/commands/flow/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/flow/up/index.ts)_
 
 ## `hereya help [COMMAND]`
 
@@ -1126,7 +1150,7 @@ EXAMPLES
   $ hereya import org/my-package -f state.tfstate -w my-workspace
 ```
 
-_See code: [src/commands/import/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/import/index.ts)_
+_See code: [src/commands/import/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/import/index.ts)_
 
 ## `hereya init PROJECT`
 
@@ -1134,7 +1158,8 @@ Initialize hereya in a project directory.
 
 ```
 USAGE
-  $ hereya init PROJECT -w <value> [--chdir <value>] [-d <value>] [-p <value>...] [-t <value>]
+  $ hereya init PROJECT -w <value> [--chdir <value>] [-d <value>] [-p <value>...] [-t <value>] [--token
+    <value>]
 
 ARGUMENTS
   PROJECT  project name
@@ -1146,6 +1171,9 @@ FLAGS
   -t, --template=<value>          template package name (e.g. owner/repo)
   -w, --workspace=<value>         (required) workspace to set as default
       --chdir=<value>             directory to run command in
+      --token=<value>             Ephemeral cloud access token used for this invocation only. Held in memory; never
+                                  written to the keychain or `~/.hereya/secrets/`. Takes precedence over the
+                                  HEREYA_TOKEN environment variable.
 
 DESCRIPTION
   Initialize hereya in a project directory.
@@ -1160,7 +1188,7 @@ EXAMPLES
   $ hereya init myProject -w=dev -t=acme/node-starter -d=prod -p region=us-east-1
 ```
 
-_See code: [src/commands/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/init/index.ts)_
+_See code: [src/commands/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/init/index.ts)_
 
 ## `hereya list`
 
@@ -1177,7 +1205,7 @@ EXAMPLES
   $ hereya list
 ```
 
-_See code: [src/commands/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/list/index.ts)_
+_See code: [src/commands/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/list/index.ts)_
 
 ## `hereya login [URL]`
 
@@ -1206,7 +1234,7 @@ EXAMPLES
   $ hereya login --token=your-token https://cloud.hereya.dev
 ```
 
-_See code: [src/commands/login/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/login/index.ts)_
+_See code: [src/commands/login/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/login/index.ts)_
 
 ## `hereya logout`
 
@@ -1223,7 +1251,7 @@ EXAMPLES
   $ hereya logout
 ```
 
-_See code: [src/commands/logout/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/logout/index.ts)_
+_See code: [src/commands/logout/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/logout/index.ts)_
 
 ## `hereya provid PACKAGE`
 
@@ -1251,7 +1279,7 @@ EXAMPLES
   $ hereya provid hereya/postgres --workspace staging
 ```
 
-_See code: [src/commands/provid/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/provid/index.ts)_
+_See code: [src/commands/provid/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/provid/index.ts)_
 
 ## `hereya publish`
 
@@ -1259,11 +1287,13 @@ Publish a package to the Hereya registry
 
 ```
 USAGE
-  $ hereya publish [--chdir <value>]
+  $ hereya publish [--chdir <value>] [--token <value>]
 
 FLAGS
   --chdir=<value>  Directory where the command will be executed.
                    If not specified, it defaults to the current working directory.
+  --token=<value>  Ephemeral cloud access token used for this invocation only. Held in memory; never written to the
+                   keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment variable.
 
 DESCRIPTION
   Publish a package to the Hereya registry
@@ -1274,7 +1304,7 @@ EXAMPLES
   $ hereya publish --chdir=/path/to/package
 ```
 
-_See code: [src/commands/publish/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/publish/index.ts)_
+_See code: [src/commands/publish/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/publish/index.ts)_
 
 ## `hereya remove PACKAGE`
 
@@ -1302,7 +1332,7 @@ EXAMPLES
   $ hereya remove cloudy/docker_postgres
 ```
 
-_See code: [src/commands/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/remove/index.ts)_
+_See code: [src/commands/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/remove/index.ts)_
 
 ## `hereya run CMD`
 
@@ -1310,7 +1340,7 @@ Run a command with hereya env vars.
 
 ```
 USAGE
-  $ hereya run CMD... [--chdir <value>] [-w <value>]
+  $ hereya run CMD... [--chdir <value>] [--token <value>] [-w <value>]
 
 ARGUMENTS
   CMD...  command to run
@@ -1318,6 +1348,9 @@ ARGUMENTS
 FLAGS
   -w, --workspace=<value>  name of the workspace to run the command in
       --chdir=<value>      directory to run command in
+      --token=<value>      Ephemeral cloud access token used for this invocation only. Held in memory; never written to
+                           the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment
+                           variable.
 
 DESCRIPTION
   Run a command with hereya env vars.
@@ -1328,7 +1361,7 @@ EXAMPLES
   $ hereya run -w uat -- node index.js
 ```
 
-_See code: [src/commands/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/run/index.ts)_
+_See code: [src/commands/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/run/index.ts)_
 
 ## `hereya search QUERY`
 
@@ -1336,7 +1369,7 @@ Search for packages in the registry
 
 ```
 USAGE
-  $ hereya search QUERY [-C <value>] [-j] [-l <value>]
+  $ hereya search QUERY [-C <value>] [-j] [-l <value>] [--token <value>]
 
 ARGUMENTS
   QUERY  Search query string
@@ -1344,6 +1377,8 @@ ARGUMENTS
 FLAGS
   -j, --json           Output in JSON format
   -l, --limit=<value>  [default: 20] Maximum number of results to return
+      --token=<value>  Ephemeral cloud access token used for this invocation only. Held in memory; never written to the
+                       keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment variable.
 
 GLOBAL FLAGS
   -C, --chdir=<value>  [default: .] directory to run command in
@@ -1359,7 +1394,7 @@ EXAMPLES
   $ hereya search database --json
 ```
 
-_See code: [src/commands/search/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/search/index.ts)_
+_See code: [src/commands/search/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/search/index.ts)_
 
 ## `hereya unbootstrap INFRASTRUCTURETYPE`
 
@@ -1384,7 +1419,7 @@ EXAMPLES
   $ hereya unbootstrap local
 ```
 
-_See code: [src/commands/unbootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/unbootstrap/index.ts)_
+_See code: [src/commands/unbootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/unbootstrap/index.ts)_
 
 ## `hereya undeploy`
 
@@ -1392,7 +1427,7 @@ Undeploy a hereya project by removing all resources.
 
 ```
 USAGE
-  $ hereya undeploy -w <value> [--chdir <value>] [--debug] [--local]
+  $ hereya undeploy -w <value> [--chdir <value>] [--debug] [--local] [--token <value>]
 
 FLAGS
   -w, --workspace=<value>  (required) name of the workspace to undeploy the packages for
@@ -1402,6 +1437,9 @@ FLAGS
                            environment variable.
       --debug              enable debug mode
       --local              force local execution (skip remote executor)
+      --token=<value>      Ephemeral cloud access token used for this invocation only. Held in memory; never written to
+                           the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment
+                           variable.
 
 DESCRIPTION
   Undeploy a hereya project by removing all resources.
@@ -1410,7 +1448,7 @@ EXAMPLES
   $ hereya undeploy
 ```
 
-_See code: [src/commands/undeploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/undeploy/index.ts)_
+_See code: [src/commands/undeploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/undeploy/index.ts)_
 
 ## `hereya uninit PROJECT`
 
@@ -1438,7 +1476,7 @@ EXAMPLES
   $ hereya uninit myProject -w dev -p prodWorkspace=prod
 ```
 
-_See code: [src/commands/uninit/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/uninit/index.ts)_
+_See code: [src/commands/uninit/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/uninit/index.ts)_
 
 ## `hereya up`
 
@@ -1446,7 +1484,7 @@ Provision all packages in the project.
 
 ```
 USAGE
-  $ hereya up [--chdir <value>] [--debug] [--deploy] [-s <value>...] [-w <value>]
+  $ hereya up [--chdir <value>] [--debug] [--deploy] [-s <value>...] [--token <value>] [-w <value>]
 
 FLAGS
   -s, --select=<value>...  [default: ] select the packages to provision
@@ -1457,6 +1495,9 @@ FLAGS
                            environment variable.
       --debug              enable debug mode
       --deploy             provision deployment companion packages
+      --token=<value>      Ephemeral cloud access token used for this invocation only. Held in memory; never written to
+                           the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment
+                           variable.
 
 DESCRIPTION
   Provision all packages in the project.
@@ -1465,7 +1506,7 @@ EXAMPLES
   $ hereya up
 ```
 
-_See code: [src/commands/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/up/index.ts)_
+_See code: [src/commands/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/up/index.ts)_
 
 ## `hereya update [VERSION]`
 
@@ -1487,7 +1528,7 @@ EXAMPLES
   $ hereya update 0.75.0
 ```
 
-_See code: [src/commands/update/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/update/index.ts)_
+_See code: [src/commands/update/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/update/index.ts)_
 
 ## `hereya workspace create NAME`
 
@@ -1512,7 +1553,7 @@ EXAMPLES
   $ hereya workspace create dev
 ```
 
-_See code: [src/commands/workspace/create/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/workspace/create/index.ts)_
+_See code: [src/commands/workspace/create/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/workspace/create/index.ts)_
 
 ## `hereya workspace delete NAME`
 
@@ -1532,7 +1573,7 @@ EXAMPLES
   $ hereya workspace delete dev
 ```
 
-_See code: [src/commands/workspace/delete/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/workspace/delete/index.ts)_
+_See code: [src/commands/workspace/delete/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/workspace/delete/index.ts)_
 
 ## `hereya workspace env [NAME]`
 
@@ -1558,7 +1599,7 @@ EXAMPLES
   $ hereya workspace env myEnv -w dev
 ```
 
-_See code: [src/commands/workspace/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/workspace/env/index.ts)_
+_See code: [src/commands/workspace/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/workspace/env/index.ts)_
 
 ## `hereya workspace env set`
 
@@ -1582,7 +1623,7 @@ EXAMPLES
   $ hereya workspace env set -w my-workspace -n myVar -v my-value -i aws -s
 ```
 
-_See code: [src/commands/workspace/env/set/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/workspace/env/set/index.ts)_
+_See code: [src/commands/workspace/env/set/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/workspace/env/set/index.ts)_
 
 ## `hereya workspace env unset`
 
@@ -1603,7 +1644,7 @@ EXAMPLES
   $ hereya workspace env unset -w my-workspace -n myVar
 ```
 
-_See code: [src/commands/workspace/env/unset/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/workspace/env/unset/index.ts)_
+_See code: [src/commands/workspace/env/unset/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/workspace/env/unset/index.ts)_
 
 ## `hereya workspace executor install`
 
@@ -1611,18 +1652,21 @@ Install a remote executor into a workspace
 
 ```
 USAGE
-  $ hereya workspace executor install -w <value> [--debug] [-f]
+  $ hereya workspace executor install -w <value> [--debug] [-f] [--token <value>]
 
 FLAGS
   -f, --force              force reinstall even if executor is already installed
   -w, --workspace=<value>  (required) name of the workspace
       --debug              enable debug mode
+      --token=<value>      Ephemeral cloud access token used for this invocation only. Held in memory; never written to
+                           the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment
+                           variable.
 
 DESCRIPTION
   Install a remote executor into a workspace
 ```
 
-_See code: [src/commands/workspace/executor/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/workspace/executor/install/index.ts)_
+_See code: [src/commands/workspace/executor/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/workspace/executor/install/index.ts)_
 
 ## `hereya workspace executor token`
 
@@ -1630,16 +1674,19 @@ Generate a workspace-scoped executor token for the remote executor
 
 ```
 USAGE
-  $ hereya workspace executor token -w <value>
+  $ hereya workspace executor token -w <value> [--token <value>]
 
 FLAGS
   -w, --workspace=<value>  (required) name of the workspace
+      --token=<value>      Ephemeral cloud access token used for this invocation only. Held in memory; never written to
+                           the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment
+                           variable.
 
 DESCRIPTION
   Generate a workspace-scoped executor token for the remote executor
 ```
 
-_See code: [src/commands/workspace/executor/token/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/workspace/executor/token/index.ts)_
+_See code: [src/commands/workspace/executor/token/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/workspace/executor/token/index.ts)_
 
 ## `hereya workspace executor uninstall`
 
@@ -1647,17 +1694,20 @@ Uninstall the remote executor from a workspace
 
 ```
 USAGE
-  $ hereya workspace executor uninstall -w <value> [--debug]
+  $ hereya workspace executor uninstall -w <value> [--debug] [--token <value>]
 
 FLAGS
   -w, --workspace=<value>  (required) name of the workspace
       --debug              enable debug mode
+      --token=<value>      Ephemeral cloud access token used for this invocation only. Held in memory; never written to
+                           the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment
+                           variable.
 
 DESCRIPTION
   Uninstall the remote executor from a workspace
 ```
 
-_See code: [src/commands/workspace/executor/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/workspace/executor/uninstall/index.ts)_
+_See code: [src/commands/workspace/executor/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/workspace/executor/uninstall/index.ts)_
 
 ## `hereya workspace install PACKAGE`
 
@@ -1684,7 +1734,7 @@ EXAMPLES
   $ hereya workspace install hereya/aws-cognito
 ```
 
-_See code: [src/commands/workspace/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/workspace/install/index.ts)_
+_See code: [src/commands/workspace/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/workspace/install/index.ts)_
 
 ## `hereya workspace list`
 
@@ -1708,7 +1758,7 @@ EXAMPLES
   $ hereya workspace list --org personal
 ```
 
-_See code: [src/commands/workspace/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/workspace/list/index.ts)_
+_See code: [src/commands/workspace/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/workspace/list/index.ts)_
 
 ## `hereya workspace set-profile PROFILE`
 
@@ -1732,7 +1782,7 @@ EXAMPLES
   $ hereya workspace set-profile prod-profile -w production
 ```
 
-_See code: [src/commands/workspace/set-profile/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/workspace/set-profile/index.ts)_
+_See code: [src/commands/workspace/set-profile/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/workspace/set-profile/index.ts)_
 
 ## `hereya workspace uninstall PACKAGE`
 
@@ -1759,5 +1809,5 @@ EXAMPLES
   $ hereya workspace uninstall hereya/aws-cognito
 ```
 
-_See code: [src/commands/workspace/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.85.5/src/commands/workspace/uninstall/index.ts)_
+_See code: [src/commands/workspace/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.0/src/commands/workspace/uninstall/index.ts)_
 <!-- commandsstop -->