hereya-cli 0.86.3 → 0.87.0

package/README.md

@@ -21,7 +21,7 @@ $ npm install -g hereya-cli
 $ hereya COMMAND
 running command...
 $ hereya (--version)
-hereya-cli/0.86.3 linux-x64 node-v24.14.1
+hereya-cli/0.87.0 linux-x64 node-v24.14.1
 $ hereya --help [COMMAND]
 USAGE
   $ hereya COMMAND
@@ -66,6 +66,7 @@ USAGE
 * [`hereya flow remove PACKAGE`](#hereya-flow-remove-package)
 * [`hereya flow run CMD`](#hereya-flow-run-cmd)
 * [`hereya flow up`](#hereya-flow-up)
+* [`hereya git`](#hereya-git)
 * [`hereya help [COMMAND]`](#hereya-help-command)
 * [`hereya import PACKAGE`](#hereya-import-package)
 * [`hereya init PROJECT`](#hereya-init-project)
@@ -127,7 +128,7 @@ EXAMPLES
   $ hereya add cloudy/docker_postgres
 ```
 
-_See code: [src/commands/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/add/index.ts)_
+_See code: [src/commands/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/add/index.ts)_
 
 ## `hereya app deploy NAME`
 
@@ -165,7 +166,7 @@ EXAMPLES
   $ hereya app deploy my-org/my-app -w prod -p organizationId=org-123
 ```
 
-_See code: [src/commands/app/deploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/app/deploy/index.ts)_
+_See code: [src/commands/app/deploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/app/deploy/index.ts)_
 
 ## `hereya app deployments NAME`
 
@@ -189,7 +190,7 @@ EXAMPLES
   $ hereya app deployments my-org/my-app
 ```
 
-_See code: [src/commands/app/deployments/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/app/deployments/index.ts)_
+_See code: [src/commands/app/deployments/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/app/deployments/index.ts)_
 
 ## `hereya app destroy NAME`
 
@@ -221,7 +222,7 @@ EXAMPLES
   $ hereya app destroy my-org/my-app -w my-workspace
 ```
 
-_See code: [src/commands/app/destroy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/app/destroy/index.ts)_
+_See code: [src/commands/app/destroy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/app/destroy/index.ts)_
 
 ## `hereya app env NAME [KEY]`
 
@@ -250,7 +251,7 @@ EXAMPLES
   $ hereya app env my-org/my-app -w my-workspace DATABASE_URL
 ```
 
-_See code: [src/commands/app/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/app/env/index.ts)_
+_See code: [src/commands/app/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/app/env/index.ts)_
 
 ## `hereya app list`
 
@@ -271,7 +272,7 @@ EXAMPLES
   $ hereya app list
 ```
 
-_See code: [src/commands/app/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/app/list/index.ts)_
+_See code: [src/commands/app/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/app/list/index.ts)_
 
 ## `hereya app new DIRNAME`
 
@@ -297,7 +298,7 @@ EXAMPLES
   $ hereya app new ./my-app -n my-org/my-app --description "An ai-app-builder app"
 ```
 
-_See code: [src/commands/app/new/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/app/new/index.ts)_
+_See code: [src/commands/app/new/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/app/new/index.ts)_
 
 ## `hereya app status NAME`
 
@@ -323,7 +324,7 @@ EXAMPLES
   $ hereya app status my-org/my-app -w my-workspace
 ```
 
-_See code: [src/commands/app/status/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/app/status/index.ts)_
+_See code: [src/commands/app/status/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/app/status/index.ts)_
 
 ## `hereya bootstrap INFRASTRUCTURETYPE`
 
@@ -348,7 +349,7 @@ EXAMPLES
   $ hereya bootstrap local
 ```
 
-_See code: [src/commands/bootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/bootstrap/index.ts)_
+_See code: [src/commands/bootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/bootstrap/index.ts)_
 
 ## `hereya clone PROJECT`
 
@@ -373,7 +374,7 @@ EXAMPLES
   $ hereya clone myProject --chdir=./myProject
 ```
 
-_See code: [src/commands/clone/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/clone/index.ts)_
+_See code: [src/commands/clone/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/clone/index.ts)_
 
 ## `hereya config export-backend [FILE]`
 
@@ -395,7 +396,7 @@ EXAMPLES
   $ hereya config export-backend ./path/to/export.json
 ```
 
-_See code: [src/commands/config/export-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/config/export-backend/index.ts)_
+_See code: [src/commands/config/export-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/config/export-backend/index.ts)_
 
 ## `hereya config get-backend`
 
@@ -412,7 +413,7 @@ EXAMPLES
   $ hereya config get-backend
 ```
 
-_See code: [src/commands/config/get-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/config/get-backend/index.ts)_
+_See code: [src/commands/config/get-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/config/get-backend/index.ts)_
 
 ## `hereya config import-backend FILE`
 
@@ -432,7 +433,7 @@ EXAMPLES
   $ hereya config import-backend ./path/to/cloud-backend.json
 ```
 
-_See code: [src/commands/config/import-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/config/import-backend/index.ts)_
+_See code: [src/commands/config/import-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/config/import-backend/index.ts)_
 
 ## `hereya config use-backend TYPE`
 
@@ -454,7 +455,7 @@ EXAMPLES
   $ hereya config use-backend local
 ```
 
-_See code: [src/commands/config/use-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/config/use-backend/index.ts)_
+_See code: [src/commands/config/use-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/config/use-backend/index.ts)_
 
 ## `hereya delete-state`
 
@@ -480,7 +481,7 @@ EXAMPLES
   $ hereya delete-state --workspace staging
 ```
 
-_See code: [src/commands/delete-state/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/delete-state/index.ts)_
+_See code: [src/commands/delete-state/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/delete-state/index.ts)_
 
 ## `hereya deploy`
 
@@ -509,7 +510,7 @@ EXAMPLES
   $ hereya deploy
 ```
 
-_See code: [src/commands/deploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/deploy/index.ts)_
+_See code: [src/commands/deploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/deploy/index.ts)_
 
 ## `hereya devenv config`
 
@@ -529,7 +530,7 @@ EXAMPLES
   $ hereya devenv config -w my-workspace
 ```
 
-_See code: [src/commands/devenv/config/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/devenv/config/index.ts)_
+_See code: [src/commands/devenv/config/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/devenv/config/index.ts)_
 
 ## `hereya devenv install`
 
@@ -554,7 +555,7 @@ EXAMPLES
   $ hereya devenv install -w my-workspace -p instanceType=t3.large
 ```
 
-_See code: [src/commands/devenv/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/devenv/install/index.ts)_
+_See code: [src/commands/devenv/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/devenv/install/index.ts)_
 
 ## `hereya devenv project init PROJECT`
 
@@ -586,7 +587,7 @@ EXAMPLES
   $ hereya devenv project init my-app -w my-workspace -t acme/node-starter -p region=us-east-1
 ```
 
-_See code: [src/commands/devenv/project/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/devenv/project/init/index.ts)_
+_See code: [src/commands/devenv/project/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/devenv/project/init/index.ts)_
 
 ## `hereya devenv project uninit PROJECT`
 
@@ -612,7 +613,7 @@ EXAMPLES
   $ hereya devenv project uninit my-app -w my-workspace --force
 ```
 
-_See code: [src/commands/devenv/project/uninit/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/devenv/project/uninit/index.ts)_
+_See code: [src/commands/devenv/project/uninit/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/devenv/project/uninit/index.ts)_
 
 ## `hereya devenv ssh`
 
@@ -632,7 +633,7 @@ EXAMPLES
   $ hereya devenv ssh -w my-workspace
 ```
 
-_See code: [src/commands/devenv/ssh/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/devenv/ssh/index.ts)_
+_See code: [src/commands/devenv/ssh/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/devenv/ssh/index.ts)_
 
 ## `hereya devenv uninstall`
 
@@ -653,7 +654,7 @@ EXAMPLES
   $ hereya devenv uninstall -w my-workspace
 ```
 
-_See code: [src/commands/devenv/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/devenv/uninstall/index.ts)_
+_See code: [src/commands/devenv/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/devenv/uninstall/index.ts)_
 
 ## `hereya doc PACKAGE`
 
@@ -686,7 +687,7 @@ EXAMPLES
   $ hereya doc my-package --no-doc
 ```
 
-_See code: [src/commands/doc/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/doc/index.ts)_
+_See code: [src/commands/doc/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/doc/index.ts)_
 
 ## `hereya docker run IMAGE`
 
@@ -717,7 +718,7 @@ EXAMPLES
   $ hereya docker run myapp:latest -- --rm -v ./data:/data
 ```
 
-_See code: [src/commands/docker/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/docker/run/index.ts)_
+_See code: [src/commands/docker/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/docker/run/index.ts)_
 
 ## `hereya down`
 
@@ -744,7 +745,7 @@ EXAMPLES
   $ hereya down
 ```
 
-_See code: [src/commands/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/down/index.ts)_
+_See code: [src/commands/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/down/index.ts)_
 
 ## `hereya env [NAME]`
 
@@ -775,7 +776,7 @@ EXAMPLES
   $ hereya env -w dev -l
 ```
 
-_See code: [src/commands/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/env/index.ts)_
+_See code: [src/commands/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/env/index.ts)_
 
 ## `hereya env set [NAME]`
 
@@ -802,7 +803,7 @@ EXAMPLES
   $ hereya env set FOO -v bar -w dev
 ```
 
-_See code: [src/commands/env/set/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/env/set/index.ts)_
+_See code: [src/commands/env/set/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/env/set/index.ts)_
 
 ## `hereya executor start`
 
@@ -835,7 +836,7 @@ EXAMPLES
   HEREYA_TOKEN=<token> HEREYA_CLOUD_URL=https://my-cloud.example.com hereya executor start -w my-workspace
 ```
 
-_See code: [src/commands/executor/start/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/executor/start/index.ts)_
+_See code: [src/commands/executor/start/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/executor/start/index.ts)_
 
 ## `hereya flow add PACKAGE`
 
@@ -873,7 +874,7 @@ EXAMPLES
   $ hereya flow add cloudy/docker_postgres -p DB_NAME=mydb -p DB_USER=admin
 ```
 
-_See code: [src/commands/flow/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/flow/add/index.ts)_
+_See code: [src/commands/flow/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/flow/add/index.ts)_
 
 ## `hereya flow docker run IMAGE`
 
@@ -903,7 +904,7 @@ EXAMPLES
   $ hereya flow docker run --pin myapp:latest -- --rm
 ```
 
-_See code: [src/commands/flow/docker/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/flow/docker/run/index.ts)_
+_See code: [src/commands/flow/docker/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/flow/docker/run/index.ts)_
 
 ## `hereya flow down`
 
@@ -937,7 +938,7 @@ EXAMPLES
   $ hereya flow down --pin
 ```
 
-_See code: [src/commands/flow/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/flow/down/index.ts)_
+_See code: [src/commands/flow/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/flow/down/index.ts)_
 
 ## `hereya flow env [NAME]`
 
@@ -971,7 +972,7 @@ EXAMPLES
   $ hereya flow env -l
 ```
 
-_See code: [src/commands/flow/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/flow/env/index.ts)_
+_See code: [src/commands/flow/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/flow/env/index.ts)_
 
 ## `hereya flow provid PACKAGE`
 
@@ -1000,7 +1001,7 @@ EXAMPLES
   $ hereya flow provid hereya/postgres --pin
 ```
 
-_See code: [src/commands/flow/provid/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/flow/provid/index.ts)_
+_See code: [src/commands/flow/provid/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/flow/provid/index.ts)_
 
 ## `hereya flow remove PACKAGE`
 
@@ -1030,7 +1031,7 @@ EXAMPLES
   $ hereya flow remove cloudy/docker_postgres --profile staging
 ```
 
-_See code: [src/commands/flow/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/flow/remove/index.ts)_
+_See code: [src/commands/flow/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/flow/remove/index.ts)_
 
 ## `hereya flow run CMD`
 
@@ -1059,7 +1060,7 @@ EXAMPLES
   $ hereya flow run --pin -- npm test
 ```
 
-_See code: [src/commands/flow/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/flow/run/index.ts)_
+_See code: [src/commands/flow/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/flow/run/index.ts)_
 
 ## `hereya flow up`
 
@@ -1093,7 +1094,39 @@ EXAMPLES
   $ hereya flow up --pin
 ```
 
-_See code: [src/commands/flow/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/flow/up/index.ts)_
+_See code: [src/commands/flow/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/flow/up/index.ts)_
+
+## `hereya git`
+
+Run an arbitrary git command with the hereya credential helper available. Wraps `git <args...>`, propagating an ephemeral `--token` to the credential-helper grandchild via `HEREYA_EPHEMERAL_TOKEN`. After a successful `clone`, also wires the cloned repo to use the hereya credential helper for future `push`/`pull`/`fetch` operations. Use `--` to separate hereya flags from git flags so e.g. `--depth` reaches git instead of being parsed by oclif.
+
+```
+USAGE
+  $ hereya git [--chdir <value>] [--token <value>]
+
+FLAGS
+  --chdir=<value>  directory to run git in (cwd of the spawned git process)
+  --token=<value>  Ephemeral cloud access token used for this invocation only. Held in memory; never written to the
+                   keychain or `~/.hereya/secrets/`. Propagated to the git credential-helper grandchild via the
+                   HEREYA_EPHEMERAL_TOKEN env var. Takes precedence over the HEREYA_TOKEN environment variable.
+
+DESCRIPTION
+  Run an arbitrary git command with the hereya credential helper available. Wraps `git <args...>`, propagating an
+  ephemeral `--token` to the credential-helper grandchild via `HEREYA_EPHEMERAL_TOKEN`. After a successful `clone`, also
+  wires the cloned repo to use the hereya credential helper for future `push`/`pull`/`fetch` operations. Use `--` to
+  separate hereya flags from git flags so e.g. `--depth` reaches git instead of being parsed by oclif.
+
+EXAMPLES
+  $ hereya git --token <token> -- push
+
+  $ hereya git --token <token> -- pull --rebase
+
+  $ hereya git --token <token> -- clone https://github.com/owner/repo my-dir
+
+  $ hereya git -- log --oneline -10
+```
+
+_See code: [src/commands/git/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/git/index.ts)_
 
 ## `hereya help [COMMAND]`
 
@@ -1150,7 +1183,7 @@ EXAMPLES
   $ hereya import org/my-package -f state.tfstate -w my-workspace
 ```
 
-_See code: [src/commands/import/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/import/index.ts)_
+_See code: [src/commands/import/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/import/index.ts)_
 
 ## `hereya init PROJECT`
 
@@ -1188,7 +1221,7 @@ EXAMPLES
   $ hereya init myProject -w=dev -t=acme/node-starter -d=prod -p region=us-east-1
 ```
 
-_See code: [src/commands/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/init/index.ts)_
+_See code: [src/commands/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/init/index.ts)_
 
 ## `hereya list`
 
@@ -1205,7 +1238,7 @@ EXAMPLES
   $ hereya list
 ```
 
-_See code: [src/commands/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/list/index.ts)_
+_See code: [src/commands/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/list/index.ts)_
 
 ## `hereya login [URL]`
 
@@ -1234,7 +1267,7 @@ EXAMPLES
   $ hereya login --token=your-token https://cloud.hereya.dev
 ```
 
-_See code: [src/commands/login/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/login/index.ts)_
+_See code: [src/commands/login/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/login/index.ts)_
 
 ## `hereya logout`
 
@@ -1251,7 +1284,7 @@ EXAMPLES
   $ hereya logout
 ```
 
-_See code: [src/commands/logout/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/logout/index.ts)_
+_See code: [src/commands/logout/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/logout/index.ts)_
 
 ## `hereya provid PACKAGE`
 
@@ -1279,7 +1312,7 @@ EXAMPLES
   $ hereya provid hereya/postgres --workspace staging
 ```
 
-_See code: [src/commands/provid/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/provid/index.ts)_
+_See code: [src/commands/provid/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/provid/index.ts)_
 
 ## `hereya publish`
 
@@ -1304,7 +1337,7 @@ EXAMPLES
   $ hereya publish --chdir=/path/to/package
 ```
 
-_See code: [src/commands/publish/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/publish/index.ts)_
+_See code: [src/commands/publish/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/publish/index.ts)_
 
 ## `hereya remove PACKAGE`
 
@@ -1332,7 +1365,7 @@ EXAMPLES
   $ hereya remove cloudy/docker_postgres
 ```
 
-_See code: [src/commands/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/remove/index.ts)_
+_See code: [src/commands/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/remove/index.ts)_
 
 ## `hereya run CMD`
 
@@ -1361,7 +1394,7 @@ EXAMPLES
   $ hereya run -w uat -- node index.js
 ```
 
-_See code: [src/commands/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/run/index.ts)_
+_See code: [src/commands/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/run/index.ts)_
 
 ## `hereya search QUERY`
 
@@ -1394,7 +1427,7 @@ EXAMPLES
   $ hereya search database --json
 ```
 
-_See code: [src/commands/search/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/search/index.ts)_
+_See code: [src/commands/search/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/search/index.ts)_
 
 ## `hereya unbootstrap INFRASTRUCTURETYPE`
 
@@ -1419,7 +1452,7 @@ EXAMPLES
   $ hereya unbootstrap local
 ```
 
-_See code: [src/commands/unbootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/unbootstrap/index.ts)_
+_See code: [src/commands/unbootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/unbootstrap/index.ts)_
 
 ## `hereya undeploy`
 
@@ -1448,7 +1481,7 @@ EXAMPLES
   $ hereya undeploy
 ```
 
-_See code: [src/commands/undeploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/undeploy/index.ts)_
+_See code: [src/commands/undeploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/undeploy/index.ts)_
 
 ## `hereya uninit PROJECT`
 
@@ -1476,7 +1509,7 @@ EXAMPLES
   $ hereya uninit myProject -w dev -p prodWorkspace=prod
 ```
 
-_See code: [src/commands/uninit/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/uninit/index.ts)_
+_See code: [src/commands/uninit/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/uninit/index.ts)_
 
 ## `hereya up`
 
@@ -1506,7 +1539,7 @@ EXAMPLES
   $ hereya up
 ```
 
-_See code: [src/commands/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/up/index.ts)_
+_See code: [src/commands/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/up/index.ts)_
 
 ## `hereya update [VERSION]`
 
@@ -1528,7 +1561,7 @@ EXAMPLES
   $ hereya update 0.75.0
 ```
 
-_See code: [src/commands/update/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/update/index.ts)_
+_See code: [src/commands/update/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/update/index.ts)_
 
 ## `hereya workspace create NAME`
 
@@ -1553,7 +1586,7 @@ EXAMPLES
   $ hereya workspace create dev
 ```
 
-_See code: [src/commands/workspace/create/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/workspace/create/index.ts)_
+_See code: [src/commands/workspace/create/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/create/index.ts)_
 
 ## `hereya workspace delete NAME`
 
@@ -1573,7 +1606,7 @@ EXAMPLES
   $ hereya workspace delete dev
 ```
 
-_See code: [src/commands/workspace/delete/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/workspace/delete/index.ts)_
+_See code: [src/commands/workspace/delete/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/delete/index.ts)_
 
 ## `hereya workspace env [NAME]`
 
@@ -1599,7 +1632,7 @@ EXAMPLES
   $ hereya workspace env myEnv -w dev
 ```
 
-_See code: [src/commands/workspace/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/workspace/env/index.ts)_
+_See code: [src/commands/workspace/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/env/index.ts)_
 
 ## `hereya workspace env set`
 
@@ -1623,7 +1656,7 @@ EXAMPLES
   $ hereya workspace env set -w my-workspace -n myVar -v my-value -i aws -s
 ```
 
-_See code: [src/commands/workspace/env/set/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/workspace/env/set/index.ts)_
+_See code: [src/commands/workspace/env/set/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/env/set/index.ts)_
 
 ## `hereya workspace env unset`
 
@@ -1644,7 +1677,7 @@ EXAMPLES
   $ hereya workspace env unset -w my-workspace -n myVar
 ```
 
-_See code: [src/commands/workspace/env/unset/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/workspace/env/unset/index.ts)_
+_See code: [src/commands/workspace/env/unset/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/env/unset/index.ts)_
 
 ## `hereya workspace executor install`
 
@@ -1666,7 +1699,7 @@ DESCRIPTION
   Install a remote executor into a workspace
 ```
 
-_See code: [src/commands/workspace/executor/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/workspace/executor/install/index.ts)_
+_See code: [src/commands/workspace/executor/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/executor/install/index.ts)_
 
 ## `hereya workspace executor token`
 
@@ -1686,7 +1719,7 @@ DESCRIPTION
   Generate a workspace-scoped executor token for the remote executor
 ```
 
-_See code: [src/commands/workspace/executor/token/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/workspace/executor/token/index.ts)_
+_See code: [src/commands/workspace/executor/token/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/executor/token/index.ts)_
 
 ## `hereya workspace executor uninstall`
 
@@ -1707,7 +1740,7 @@ DESCRIPTION
   Uninstall the remote executor from a workspace
 ```
 
-_See code: [src/commands/workspace/executor/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/workspace/executor/uninstall/index.ts)_
+_See code: [src/commands/workspace/executor/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/executor/uninstall/index.ts)_
 
 ## `hereya workspace install PACKAGE`
 
@@ -1734,7 +1767,7 @@ EXAMPLES
   $ hereya workspace install hereya/aws-cognito
 ```
 
-_See code: [src/commands/workspace/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/workspace/install/index.ts)_
+_See code: [src/commands/workspace/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/install/index.ts)_
 
 ## `hereya workspace list`
 
@@ -1758,7 +1791,7 @@ EXAMPLES
   $ hereya workspace list --org personal
 ```
 
-_See code: [src/commands/workspace/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/workspace/list/index.ts)_
+_See code: [src/commands/workspace/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/list/index.ts)_
 
 ## `hereya workspace set-profile PROFILE`
 
@@ -1782,7 +1815,7 @@ EXAMPLES
   $ hereya workspace set-profile prod-profile -w production
 ```
 
-_See code: [src/commands/workspace/set-profile/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/workspace/set-profile/index.ts)_
+_See code: [src/commands/workspace/set-profile/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/set-profile/index.ts)_
 
 ## `hereya workspace uninstall PACKAGE`
 
@@ -1809,5 +1842,5 @@ EXAMPLES
   $ hereya workspace uninstall hereya/aws-cognito
 ```
 
-_See code: [src/commands/workspace/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.86.3/src/commands/workspace/uninstall/index.ts)_
+_See code: [src/commands/workspace/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/uninstall/index.ts)_
 <!-- commandsstop -->

package/dist/commands/git/index.d.ts

@@ -0,0 +1,12 @@
+import { Command } from '@oclif/core';
+export default class Git extends Command {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        chdir: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        token: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    static strict: boolean;
+    run(): Promise<void>;
+    private runInner;
+}

package/dist/commands/git/index.js

@@ -0,0 +1,116 @@
+import { Command, Flags } from '@oclif/core';
+import fs from 'node:fs';
+import path from 'node:path';
+import { withEphemeralToken } from '../../lib/ephemeral-token.js';
+import { gitUtils } from '../../lib/git-utils.js';
+import { getDefaultLogger } from '../../lib/log.js';
+import { shellUtils } from '../../lib/shell.js';
+export default class Git extends Command {
+    static description = 'Run an arbitrary git command with the hereya credential helper available. Wraps `git <args...>`, propagating an ephemeral `--token` to the credential-helper grandchild via `HEREYA_EPHEMERAL_TOKEN`. After a successful `clone`, also wires the cloned repo to use the hereya credential helper for future `push`/`pull`/`fetch` operations. Use `--` to separate hereya flags from git flags so e.g. `--depth` reaches git instead of being parsed by oclif.';
+    static examples = [
+        '<%= config.bin %> <%= command.id %> --token <token> -- push',
+        '<%= config.bin %> <%= command.id %> --token <token> -- pull --rebase',
+        '<%= config.bin %> <%= command.id %> --token <token> -- clone https://github.com/owner/repo my-dir',
+        '<%= config.bin %> <%= command.id %> -- log --oneline -10',
+    ];
+    static flags = {
+        chdir: Flags.string({
+            description: 'directory to run git in (cwd of the spawned git process)',
+            required: false,
+        }),
+        token: Flags.string({
+            description: 'Ephemeral cloud access token used for this invocation only. Held in memory; never written to the keychain or `~/.hereya/secrets/`. Propagated to the git credential-helper grandchild via the HEREYA_EPHEMERAL_TOKEN env var. Takes precedence over the HEREYA_TOKEN environment variable.',
+            required: false,
+        }),
+    };
+    static strict = false;
+    async run() {
+        const { argv, flags } = await this.parse(Git);
+        // Precedence: --token flag > HEREYA_TOKEN env var > keychain.
+        if (flags.token) {
+            if (process.env.HEREYA_TOKEN) {
+                getDefaultLogger().debug('[git] --token flag overrides HEREYA_TOKEN environment variable.');
+            }
+            return withEphemeralToken(flags.token, () => this.runInner(argv, flags));
+        }
+        return this.runInner(argv, flags);
+    }
+    async runInner(gitArgs, flags) {
+        if (gitArgs.length === 0) {
+            this.error('Missing git arguments. Example: `hereya git push --token <…>`.');
+        }
+        const cwd = path.resolve(flags.chdir ?? process.env.HEREYA_PROJECT_ROOT_DIR ?? process.cwd());
+        const result = await shellUtils.runShell('git', gitArgs, {
+            directory: cwd,
+            stdio: 'inherit',
+        });
+        if (result.status !== 0) {
+            this.error(`git ${gitArgs.join(' ')} failed (exit ${result.status})`);
+        }
+        // Auto-wire the credential helper after a successful clone so future
+        // git operations from inside the cloned repo find hereya's helper.
+        if (gitArgs[0] === 'clone') {
+            const target = deriveCloneTarget(gitArgs.slice(1), cwd);
+            if (target && fs.existsSync(path.join(target, '.git'))) {
+                try {
+                    await gitUtils.setupCredentialHelper({
+                        hereyaBinPath: process.argv[1],
+                        projectDir: target,
+                    });
+                }
+                catch (error) {
+                    // Don't fail the clone if the wire-up step fails — surface as warning.
+                    this.warn(`Cloned ${gitArgs.join(' ')} successfully, but failed to wire the hereya credential helper in ${target}: ${error.message}`);
+                }
+            }
+        }
+    }
+}
+/**
+ * Best-effort resolution of the directory `git clone` wrote to. Mirrors git's
+ * own behavior: if the user passed an explicit target, that's it; otherwise
+ * derive it from the URL's basename (stripping any trailing `.git`).
+ *
+ * Returns an absolute path or `null` if we can't tell.
+ */
+function deriveCloneTarget(cloneArgs, cwd) {
+    // Walk the args, skipping flag tokens (--xxx, -x) and their values.
+    // This is heuristic — git's flag schema is large — but it covers the
+    // common cases (`-c`, `--depth`, `--branch`, `--single-branch`, ...).
+    // If the heuristic is wrong, the existsSync(.git) check below will skip
+    // wire-up rather than touching the wrong directory.
+    const positional = [];
+    for (let i = 0; i < cloneArgs.length; i++) {
+        const a = cloneArgs[i];
+        if (a.startsWith('-')) {
+            // --flag=value: no separate value arg.
+            if (a.includes('='))
+                continue;
+            // -c key=value, --depth 1, etc.: skip the next arg as a value if it
+            // doesn't look like another flag.
+            if (i + 1 < cloneArgs.length && !cloneArgs[i + 1].startsWith('-')) {
+                i++;
+            }
+            continue;
+        }
+        positional.push(a);
+    }
+    // First positional is the URL; second (optional) is the target.
+    if (positional.length >= 2) {
+        return path.resolve(cwd, positional[1]);
+    }
+    if (positional.length === 1) {
+        const url = positional[0];
+        // Equivalent to Array.findLast(Boolean) but without requiring ES2023 lib.
+        const parts = url.replace(/\.git$/, '').split(/[/\\:]/);
+        let basename = '';
+        for (let i = parts.length - 1; i >= 0; i--) {
+            if (parts[i]) {
+                basename = parts[i];
+                break;
+            }
+        }
+        return basename ? path.resolve(cwd, basename) : null;
+    }
+    return null;
+}

package/oclif.manifest.json

@@ -455,6 +455,50 @@
         "index.js"
       ]
     },
+    "git": {
+      "aliases": [],
+      "args": {},
+      "description": "Run an arbitrary git command with the hereya credential helper available. Wraps `git <args...>`, propagating an ephemeral `--token` to the credential-helper grandchild via `HEREYA_EPHEMERAL_TOKEN`. After a successful `clone`, also wires the cloned repo to use the hereya credential helper for future `push`/`pull`/`fetch` operations. Use `--` to separate hereya flags from git flags so e.g. `--depth` reaches git instead of being parsed by oclif.",
+      "examples": [
+        "<%= config.bin %> <%= command.id %> --token <token> -- push",
+        "<%= config.bin %> <%= command.id %> --token <token> -- pull --rebase",
+        "<%= config.bin %> <%= command.id %> --token <token> -- clone https://github.com/owner/repo my-dir",
+        "<%= config.bin %> <%= command.id %> -- log --oneline -10"
+      ],
+      "flags": {
+        "chdir": {
+          "description": "directory to run git in (cwd of the spawned git process)",
+          "name": "chdir",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "token": {
+          "description": "Ephemeral cloud access token used for this invocation only. Held in memory; never written to the keychain or `~/.hereya/secrets/`. Propagated to the git credential-helper grandchild via the HEREYA_EPHEMERAL_TOKEN env var. Takes precedence over the HEREYA_TOKEN environment variable.",
+          "name": "token",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "git",
+      "pluginAlias": "hereya-cli",
+      "pluginName": "hereya-cli",
+      "pluginType": "core",
+      "strict": false,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "git",
+        "index.js"
+      ]
+    },
     "import": {
       "aliases": [],
       "args": {
@@ -1079,43 +1123,57 @@
         "index.js"
       ]
     },
-    "uninit": {
+    "up": {
       "aliases": [],
-      "args": {
-        "project": {
-          "description": "project name",
-          "name": "project",
-          "required": true
-        }
-      },
-      "description": "Destroy template infrastructure and uninitialize a project.",
+      "args": {},
+      "description": "Provision all packages in the project.",
       "examples": [
-        "<%= config.bin %> <%= command.id %> myProject -w dev",
-        "<%= config.bin %> <%= command.id %> myProject -w dev -p prodWorkspace=prod"
+        "<%= config.bin %> <%= command.id %>"
       ],
       "flags": {
         "chdir": {
-          "description": "directory to run command in",
+          "description": "\n        Directory where the command will be executed.\n        If not specified, it defaults to the current working directory.\n        Alternatively, you can define the project root by setting the HEREYA_PROJECT_ROOT_DIR environment variable.\n      ",
           "name": "chdir",
           "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "parameter": {
-          "char": "p",
-          "description": "parameter for the template, in the form of 'key=value'. Overrides saved parameters.",
-          "name": "parameter",
+        "debug": {
+          "description": "enable debug mode",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "deploy": {
+          "description": "provision deployment companion packages",
+          "name": "deploy",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "select": {
+          "char": "s",
+          "description": "select the packages to provision",
+          "name": "select",
           "default": [],
           "hasDynamicHelp": false,
           "multiple": true,
           "type": "option"
         },
+        "token": {
+          "description": "Ephemeral cloud access token used for this invocation only. Held in memory; never written to the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment variable.",
+          "name": "token",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
         "workspace": {
           "char": "w",
-          "description": "workspace used during init",
+          "description": "name of the workspace to install the packages for",
           "name": "workspace",
-          "required": true,
+          "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -1123,7 +1181,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "uninit",
+      "id": "up",
       "pluginAlias": "hereya-cli",
       "pluginName": "hereya-cli",
       "pluginType": "core",
@@ -1133,61 +1191,47 @@
       "relativePath": [
         "dist",
         "commands",
-        "uninit",
+        "up",
         "index.js"
       ]
     },
-    "up": {
+    "uninit": {
       "aliases": [],
-      "args": {},
-      "description": "Provision all packages in the project.",
+      "args": {
+        "project": {
+          "description": "project name",
+          "name": "project",
+          "required": true
+        }
+      },
+      "description": "Destroy template infrastructure and uninitialize a project.",
       "examples": [
-        "<%= config.bin %> <%= command.id %>"
+        "<%= config.bin %> <%= command.id %> myProject -w dev",
+        "<%= config.bin %> <%= command.id %> myProject -w dev -p prodWorkspace=prod"
       ],
       "flags": {
         "chdir": {
-          "description": "\n        Directory where the command will be executed.\n        If not specified, it defaults to the current working directory.\n        Alternatively, you can define the project root by setting the HEREYA_PROJECT_ROOT_DIR environment variable.\n      ",
+          "description": "directory to run command in",
           "name": "chdir",
           "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "debug": {
-          "description": "enable debug mode",
-          "name": "debug",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "deploy": {
-          "description": "provision deployment companion packages",
-          "name": "deploy",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "select": {
-          "char": "s",
-          "description": "select the packages to provision",
-          "name": "select",
+        "parameter": {
+          "char": "p",
+          "description": "parameter for the template, in the form of 'key=value'. Overrides saved parameters.",
+          "name": "parameter",
           "default": [],
           "hasDynamicHelp": false,
           "multiple": true,
           "type": "option"
         },
-        "token": {
-          "description": "Ephemeral cloud access token used for this invocation only. Held in memory; never written to the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment variable.",
-          "name": "token",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
         "workspace": {
           "char": "w",
-          "description": "name of the workspace to install the packages for",
+          "description": "workspace used during init",
           "name": "workspace",
-          "required": false,
+          "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -1195,7 +1239,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "up",
+      "id": "uninit",
       "pluginAlias": "hereya-cli",
       "pluginName": "hereya-cli",
       "pluginType": "core",
@@ -1205,7 +1249,7 @@
       "relativePath": [
         "dist",
         "commands",
-        "up",
+        "uninit",
         "index.js"
       ]
     },
@@ -3154,26 +3198,35 @@
         "index.js"
       ]
     },
-    "workspace:env:unset": {
+    "workspace:executor:install": {
       "aliases": [],
       "args": {},
-      "description": "unset an env var for a workspace",
-      "examples": [
-        "<%= config.bin %> <%= command.id %> -w my-workspace -n myVar"
-      ],
+      "description": "Install a remote executor into a workspace",
       "flags": {
-        "name": {
-          "char": "n",
-          "description": "name of the env var to unset",
-          "name": "name",
-          "required": true,
+        "debug": {
+          "description": "enable debug mode",
+          "name": "debug",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "force": {
+          "char": "f",
+          "description": "force reinstall even if executor is already installed",
+          "name": "force",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "token": {
+          "description": "Ephemeral cloud access token used for this invocation only. Held in memory; never written to the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment variable.",
+          "name": "token",
+          "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
         "workspace": {
           "char": "w",
-          "description": "name of the workspace to unset an env var for",
+          "description": "name of the workspace",
           "name": "workspace",
           "required": true,
           "hasDynamicHelp": false,
@@ -3183,7 +3236,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "workspace:env:unset",
+      "id": "workspace:executor:install",
       "pluginAlias": "hereya-cli",
       "pluginName": "hereya-cli",
       "pluginType": "core",
@@ -3194,40 +3247,31 @@
         "dist",
         "commands",
         "workspace",
-        "env",
-        "unset",
+        "executor",
+        "install",
         "index.js"
       ]
     },
-    "workspace:executor:install": {
+    "workspace:env:unset": {
       "aliases": [],
       "args": {},
-      "description": "Install a remote executor into a workspace",
+      "description": "unset an env var for a workspace",
+      "examples": [
+        "<%= config.bin %> <%= command.id %> -w my-workspace -n myVar"
+      ],
       "flags": {
-        "debug": {
-          "description": "enable debug mode",
-          "name": "debug",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "force": {
-          "char": "f",
-          "description": "force reinstall even if executor is already installed",
-          "name": "force",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "token": {
-          "description": "Ephemeral cloud access token used for this invocation only. Held in memory; never written to the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment variable.",
-          "name": "token",
-          "required": false,
+        "name": {
+          "char": "n",
+          "description": "name of the env var to unset",
+          "name": "name",
+          "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
         "workspace": {
           "char": "w",
-          "description": "name of the workspace",
+          "description": "name of the workspace to unset an env var for",
           "name": "workspace",
           "required": true,
           "hasDynamicHelp": false,
@@ -3237,7 +3281,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "workspace:executor:install",
+      "id": "workspace:env:unset",
       "pluginAlias": "hereya-cli",
       "pluginName": "hereya-cli",
       "pluginType": "core",
@@ -3248,8 +3292,8 @@
         "dist",
         "commands",
         "workspace",
-        "executor",
-        "install",
+        "env",
+        "unset",
         "index.js"
       ]
     },
@@ -3342,5 +3386,5 @@
       ]
     }
   },
-  "version": "0.86.3"
+  "version": "0.87.0"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "hereya-cli",
   "description": "Infrastructure as Package",
-  "version": "0.86.3",
+  "version": "0.87.0",
   "author": "Hereya Developers",
   "bin": {
     "hereya": "./bin/run.js"