hereya-cli 0.87.0 → 0.88.0

package/README.md

@@ -21,7 +21,7 @@ $ npm install -g hereya-cli
 $ hereya COMMAND
 running command...
 $ hereya (--version)
-hereya-cli/0.87.0 linux-x64 node-v24.14.1
+hereya-cli/0.88.0 linux-x64 node-v24.14.1
 $ hereya --help [COMMAND]
 USAGE
   $ hereya COMMAND
@@ -66,7 +66,6 @@ USAGE
 * [`hereya flow remove PACKAGE`](#hereya-flow-remove-package)
 * [`hereya flow run CMD`](#hereya-flow-run-cmd)
 * [`hereya flow up`](#hereya-flow-up)
-* [`hereya git`](#hereya-git)
 * [`hereya help [COMMAND]`](#hereya-help-command)
 * [`hereya import PACKAGE`](#hereya-import-package)
 * [`hereya init PROJECT`](#hereya-init-project)
@@ -128,7 +127,7 @@ EXAMPLES
   $ hereya add cloudy/docker_postgres
 ```
 
-_See code: [src/commands/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/add/index.ts)_
+_See code: [src/commands/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/add/index.ts)_
 
 ## `hereya app deploy NAME`
 
@@ -136,8 +135,7 @@ Deploy a hereya-app to a workspace.
 
 ```
 USAGE
-  $ hereya app deploy NAME -w <value> [--chdir <value>] [--local] [-p <value>...] [--token <value>] [--version
-    <value>]
+  $ hereya app deploy NAME -w <value> [--chdir <value>] [--local] [-p <value>...] [--version <value>]
 
 ARGUMENTS
   NAME  app name in org/name format
@@ -150,9 +148,6 @@ FLAGS
                               Alternatively, you can define the project root by setting the HEREYA_PROJECT_ROOT_DIR
                               environment variable.
       --local                 force local execution (skip remote executor)
-      --token=<value>         Ephemeral cloud access token used for this invocation only. Held in memory; never written
-                              to the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN
-                              environment variable.
       --version=<value>       specific app version to deploy (defaults to latest)
 
 DESCRIPTION
@@ -166,7 +161,7 @@ EXAMPLES
   $ hereya app deploy my-org/my-app -w prod -p organizationId=org-123
 ```
 
-_See code: [src/commands/app/deploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/app/deploy/index.ts)_
+_See code: [src/commands/app/deploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/app/deploy/index.ts)_
 
 ## `hereya app deployments NAME`
 
@@ -174,15 +169,11 @@ List workspaces a hereya-app has been deployed to.
 
 ```
 USAGE
-  $ hereya app deployments NAME [--token <value>]
+  $ hereya app deployments NAME
 
 ARGUMENTS
   NAME  app name in org/name format
 
-FLAGS
-  --token=<value>  Ephemeral cloud access token used for this invocation only. Held in memory; never written to the
-                   keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment variable.
-
 DESCRIPTION
   List workspaces a hereya-app has been deployed to.
 
@@ -190,7 +181,7 @@ EXAMPLES
   $ hereya app deployments my-org/my-app
 ```
 
-_See code: [src/commands/app/deployments/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/app/deployments/index.ts)_
+_See code: [src/commands/app/deployments/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/app/deployments/index.ts)_
 
 ## `hereya app destroy NAME`
 
@@ -198,7 +189,7 @@ Destroy a hereya-app deployment from a workspace.
 
 ```
 USAGE
-  $ hereya app destroy NAME -w <value> [--chdir <value>] [--local] [-p <value>...] [--token <value>]
+  $ hereya app destroy NAME -w <value> [--chdir <value>] [--local] [-p <value>...]
 
 ARGUMENTS
   NAME  app name in org/name format
@@ -211,9 +202,6 @@ FLAGS
                               Alternatively, you can define the project root by setting the HEREYA_PROJECT_ROOT_DIR
                               environment variable.
       --local                 force local execution (skip remote executor)
-      --token=<value>         Ephemeral cloud access token used for this invocation only. Held in memory; never written
-                              to the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN
-                              environment variable.
 
 DESCRIPTION
   Destroy a hereya-app deployment from a workspace.
@@ -222,7 +210,7 @@ EXAMPLES
   $ hereya app destroy my-org/my-app -w my-workspace
 ```
 
-_See code: [src/commands/app/destroy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/app/destroy/index.ts)_
+_See code: [src/commands/app/destroy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/app/destroy/index.ts)_
 
 ## `hereya app env NAME [KEY]`
 
@@ -230,7 +218,7 @@ Print environment variables exported by a hereya-app deployment.
 
 ```
 USAGE
-  $ hereya app env NAME [KEY] -w <value> [--token <value>]
+  $ hereya app env NAME [KEY] -w <value>
 
 ARGUMENTS
   NAME  app name in org/name format
@@ -238,9 +226,6 @@ ARGUMENTS
 
 FLAGS
   -w, --workspace=<value>  (required) workspace to read env outputs from
-      --token=<value>      Ephemeral cloud access token used for this invocation only. Held in memory; never written to
-                           the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment
-                           variable.
 
 DESCRIPTION
   Print environment variables exported by a hereya-app deployment.
@@ -251,7 +236,7 @@ EXAMPLES
   $ hereya app env my-org/my-app -w my-workspace DATABASE_URL
 ```
 
-_See code: [src/commands/app/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/app/env/index.ts)_
+_See code: [src/commands/app/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/app/env/index.ts)_
 
 ## `hereya app list`
 
@@ -259,11 +244,7 @@ List hereya-apps available to your account.
 
 ```
 USAGE
-  $ hereya app list [--token <value>]
-
-FLAGS
-  --token=<value>  Ephemeral cloud access token used for this invocation only. Held in memory; never written to the
-                   keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment variable.
+  $ hereya app list
 
 DESCRIPTION
   List hereya-apps available to your account.
@@ -272,7 +253,7 @@ EXAMPLES
   $ hereya app list
 ```
 
-_See code: [src/commands/app/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/app/list/index.ts)_
+_See code: [src/commands/app/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/app/list/index.ts)_
 
 ## `hereya app new DIRNAME`
 
@@ -298,7 +279,7 @@ EXAMPLES
   $ hereya app new ./my-app -n my-org/my-app --description "An ai-app-builder app"
 ```
 
-_See code: [src/commands/app/new/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/app/new/index.ts)_
+_See code: [src/commands/app/new/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/app/new/index.ts)_
 
 ## `hereya app status NAME`
 
@@ -306,16 +287,13 @@ Show the deployment status of a hereya-app on a workspace.
 
 ```
 USAGE
-  $ hereya app status NAME -w <value> [--token <value>]
+  $ hereya app status NAME -w <value>
 
 ARGUMENTS
   NAME  app name in org/name format
 
 FLAGS
   -w, --workspace=<value>  (required) workspace to read deployment status from
-      --token=<value>      Ephemeral cloud access token used for this invocation only. Held in memory; never written to
-                           the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment
-                           variable.
 
 DESCRIPTION
   Show the deployment status of a hereya-app on a workspace.
@@ -324,7 +302,7 @@ EXAMPLES
   $ hereya app status my-org/my-app -w my-workspace
 ```
 
-_See code: [src/commands/app/status/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/app/status/index.ts)_
+_See code: [src/commands/app/status/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/app/status/index.ts)_
 
 ## `hereya bootstrap INFRASTRUCTURETYPE`
 
@@ -349,7 +327,7 @@ EXAMPLES
   $ hereya bootstrap local
 ```
 
-_See code: [src/commands/bootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/bootstrap/index.ts)_
+_See code: [src/commands/bootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/bootstrap/index.ts)_
 
 ## `hereya clone PROJECT`
 
@@ -374,7 +352,7 @@ EXAMPLES
   $ hereya clone myProject --chdir=./myProject
 ```
 
-_See code: [src/commands/clone/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/clone/index.ts)_
+_See code: [src/commands/clone/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/clone/index.ts)_
 
 ## `hereya config export-backend [FILE]`
 
@@ -396,7 +374,7 @@ EXAMPLES
   $ hereya config export-backend ./path/to/export.json
 ```
 
-_See code: [src/commands/config/export-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/config/export-backend/index.ts)_
+_See code: [src/commands/config/export-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/config/export-backend/index.ts)_
 
 ## `hereya config get-backend`
 
@@ -413,7 +391,7 @@ EXAMPLES
   $ hereya config get-backend
 ```
 
-_See code: [src/commands/config/get-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/config/get-backend/index.ts)_
+_See code: [src/commands/config/get-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/config/get-backend/index.ts)_
 
 ## `hereya config import-backend FILE`
 
@@ -433,7 +411,7 @@ EXAMPLES
   $ hereya config import-backend ./path/to/cloud-backend.json
 ```
 
-_See code: [src/commands/config/import-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/config/import-backend/index.ts)_
+_See code: [src/commands/config/import-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/config/import-backend/index.ts)_
 
 ## `hereya config use-backend TYPE`
 
@@ -455,7 +433,7 @@ EXAMPLES
   $ hereya config use-backend local
 ```
 
-_See code: [src/commands/config/use-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/config/use-backend/index.ts)_
+_See code: [src/commands/config/use-backend/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/config/use-backend/index.ts)_
 
 ## `hereya delete-state`
 
@@ -481,7 +459,7 @@ EXAMPLES
   $ hereya delete-state --workspace staging
 ```
 
-_See code: [src/commands/delete-state/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/delete-state/index.ts)_
+_See code: [src/commands/delete-state/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/delete-state/index.ts)_
 
 ## `hereya deploy`
 
@@ -489,7 +467,7 @@ Deploy a hereya project using the project deployment package
 
 ```
 USAGE
-  $ hereya deploy -w <value> [--chdir <value>] [--debug] [--local] [--token <value>]
+  $ hereya deploy -w <value> [--chdir <value>] [--debug] [--local]
 
 FLAGS
   -w, --workspace=<value>  (required) name of the workspace to deploy the packages for
@@ -499,9 +477,6 @@ FLAGS
                            environment variable.
       --debug              enable debug mode
       --local              force local execution (skip remote executor)
-      --token=<value>      Ephemeral cloud access token used for this invocation only. Held in memory; never written to
-                           the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment
-                           variable.
 
 DESCRIPTION
   Deploy a hereya project using the project deployment package
@@ -510,7 +485,7 @@ EXAMPLES
   $ hereya deploy
 ```
 
-_See code: [src/commands/deploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/deploy/index.ts)_
+_See code: [src/commands/deploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/deploy/index.ts)_
 
 ## `hereya devenv config`
 
@@ -530,7 +505,7 @@ EXAMPLES
   $ hereya devenv config -w my-workspace
 ```
 
-_See code: [src/commands/devenv/config/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/devenv/config/index.ts)_
+_See code: [src/commands/devenv/config/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/devenv/config/index.ts)_
 
 ## `hereya devenv install`
 
@@ -555,7 +530,7 @@ EXAMPLES
   $ hereya devenv install -w my-workspace -p instanceType=t3.large
 ```
 
-_See code: [src/commands/devenv/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/devenv/install/index.ts)_
+_See code: [src/commands/devenv/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/devenv/install/index.ts)_
 
 ## `hereya devenv project init PROJECT`
 
@@ -587,7 +562,7 @@ EXAMPLES
   $ hereya devenv project init my-app -w my-workspace -t acme/node-starter -p region=us-east-1
 ```
 
-_See code: [src/commands/devenv/project/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/devenv/project/init/index.ts)_
+_See code: [src/commands/devenv/project/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/devenv/project/init/index.ts)_
 
 ## `hereya devenv project uninit PROJECT`
 
@@ -613,7 +588,7 @@ EXAMPLES
   $ hereya devenv project uninit my-app -w my-workspace --force
 ```
 
-_See code: [src/commands/devenv/project/uninit/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/devenv/project/uninit/index.ts)_
+_See code: [src/commands/devenv/project/uninit/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/devenv/project/uninit/index.ts)_
 
 ## `hereya devenv ssh`
 
@@ -633,7 +608,7 @@ EXAMPLES
   $ hereya devenv ssh -w my-workspace
 ```
 
-_See code: [src/commands/devenv/ssh/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/devenv/ssh/index.ts)_
+_See code: [src/commands/devenv/ssh/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/devenv/ssh/index.ts)_
 
 ## `hereya devenv uninstall`
 
@@ -654,7 +629,7 @@ EXAMPLES
   $ hereya devenv uninstall -w my-workspace
 ```
 
-_See code: [src/commands/devenv/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/devenv/uninstall/index.ts)_
+_See code: [src/commands/devenv/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/devenv/uninstall/index.ts)_
 
 ## `hereya doc PACKAGE`
 
@@ -687,7 +662,7 @@ EXAMPLES
   $ hereya doc my-package --no-doc
 ```
 
-_See code: [src/commands/doc/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/doc/index.ts)_
+_See code: [src/commands/doc/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/doc/index.ts)_
 
 ## `hereya docker run IMAGE`
 
@@ -718,7 +693,7 @@ EXAMPLES
   $ hereya docker run myapp:latest -- --rm -v ./data:/data
 ```
 
-_See code: [src/commands/docker/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/docker/run/index.ts)_
+_See code: [src/commands/docker/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/docker/run/index.ts)_
 
 ## `hereya down`
 
@@ -745,7 +720,7 @@ EXAMPLES
   $ hereya down
 ```
 
-_See code: [src/commands/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/down/index.ts)_
+_See code: [src/commands/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/down/index.ts)_
 
 ## `hereya env [NAME]`
 
@@ -776,7 +751,7 @@ EXAMPLES
   $ hereya env -w dev -l
 ```
 
-_See code: [src/commands/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/env/index.ts)_
+_See code: [src/commands/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/env/index.ts)_
 
 ## `hereya env set [NAME]`
 
@@ -803,7 +778,7 @@ EXAMPLES
   $ hereya env set FOO -v bar -w dev
 ```
 
-_See code: [src/commands/env/set/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/env/set/index.ts)_
+_See code: [src/commands/env/set/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/env/set/index.ts)_
 
 ## `hereya executor start`
 
@@ -836,7 +811,7 @@ EXAMPLES
   HEREYA_TOKEN=<token> HEREYA_CLOUD_URL=https://my-cloud.example.com hereya executor start -w my-workspace
 ```
 
-_See code: [src/commands/executor/start/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/executor/start/index.ts)_
+_See code: [src/commands/executor/start/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/executor/start/index.ts)_
 
 ## `hereya flow add PACKAGE`
 
@@ -874,7 +849,7 @@ EXAMPLES
   $ hereya flow add cloudy/docker_postgres -p DB_NAME=mydb -p DB_USER=admin
 ```
 
-_See code: [src/commands/flow/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/flow/add/index.ts)_
+_See code: [src/commands/flow/add/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/flow/add/index.ts)_
 
 ## `hereya flow docker run IMAGE`
 
@@ -904,7 +879,7 @@ EXAMPLES
   $ hereya flow docker run --pin myapp:latest -- --rm
 ```
 
-_See code: [src/commands/flow/docker/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/flow/docker/run/index.ts)_
+_See code: [src/commands/flow/docker/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/flow/docker/run/index.ts)_
 
 ## `hereya flow down`
 
@@ -938,7 +913,7 @@ EXAMPLES
   $ hereya flow down --pin
 ```
 
-_See code: [src/commands/flow/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/flow/down/index.ts)_
+_See code: [src/commands/flow/down/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/flow/down/index.ts)_
 
 ## `hereya flow env [NAME]`
 
@@ -972,7 +947,7 @@ EXAMPLES
   $ hereya flow env -l
 ```
 
-_See code: [src/commands/flow/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/flow/env/index.ts)_
+_See code: [src/commands/flow/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/flow/env/index.ts)_
 
 ## `hereya flow provid PACKAGE`
 
@@ -1001,7 +976,7 @@ EXAMPLES
   $ hereya flow provid hereya/postgres --pin
 ```
 
-_See code: [src/commands/flow/provid/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/flow/provid/index.ts)_
+_See code: [src/commands/flow/provid/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/flow/provid/index.ts)_
 
 ## `hereya flow remove PACKAGE`
 
@@ -1031,7 +1006,7 @@ EXAMPLES
   $ hereya flow remove cloudy/docker_postgres --profile staging
 ```
 
-_See code: [src/commands/flow/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/flow/remove/index.ts)_
+_See code: [src/commands/flow/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/flow/remove/index.ts)_
 
 ## `hereya flow run CMD`
 
@@ -1060,7 +1035,7 @@ EXAMPLES
   $ hereya flow run --pin -- npm test
 ```
 
-_See code: [src/commands/flow/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/flow/run/index.ts)_
+_See code: [src/commands/flow/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/flow/run/index.ts)_
 
 ## `hereya flow up`
 
@@ -1094,39 +1069,7 @@ EXAMPLES
   $ hereya flow up --pin
 ```
 
-_See code: [src/commands/flow/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/flow/up/index.ts)_
-
-## `hereya git`
-
-Run an arbitrary git command with the hereya credential helper available. Wraps `git <args...>`, propagating an ephemeral `--token` to the credential-helper grandchild via `HEREYA_EPHEMERAL_TOKEN`. After a successful `clone`, also wires the cloned repo to use the hereya credential helper for future `push`/`pull`/`fetch` operations. Use `--` to separate hereya flags from git flags so e.g. `--depth` reaches git instead of being parsed by oclif.
-
-```
-USAGE
-  $ hereya git [--chdir <value>] [--token <value>]
-
-FLAGS
-  --chdir=<value>  directory to run git in (cwd of the spawned git process)
-  --token=<value>  Ephemeral cloud access token used for this invocation only. Held in memory; never written to the
-                   keychain or `~/.hereya/secrets/`. Propagated to the git credential-helper grandchild via the
-                   HEREYA_EPHEMERAL_TOKEN env var. Takes precedence over the HEREYA_TOKEN environment variable.
-
-DESCRIPTION
-  Run an arbitrary git command with the hereya credential helper available. Wraps `git <args...>`, propagating an
-  ephemeral `--token` to the credential-helper grandchild via `HEREYA_EPHEMERAL_TOKEN`. After a successful `clone`, also
-  wires the cloned repo to use the hereya credential helper for future `push`/`pull`/`fetch` operations. Use `--` to
-  separate hereya flags from git flags so e.g. `--depth` reaches git instead of being parsed by oclif.
-
-EXAMPLES
-  $ hereya git --token <token> -- push
-
-  $ hereya git --token <token> -- pull --rebase
-
-  $ hereya git --token <token> -- clone https://github.com/owner/repo my-dir
-
-  $ hereya git -- log --oneline -10
-```
-
-_See code: [src/commands/git/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/git/index.ts)_
+_See code: [src/commands/flow/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/flow/up/index.ts)_
 
 ## `hereya help [COMMAND]`
 
@@ -1183,7 +1126,7 @@ EXAMPLES
   $ hereya import org/my-package -f state.tfstate -w my-workspace
 ```
 
-_See code: [src/commands/import/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/import/index.ts)_
+_See code: [src/commands/import/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/import/index.ts)_
 
 ## `hereya init PROJECT`
 
@@ -1191,8 +1134,7 @@ Initialize hereya in a project directory.
 
 ```
 USAGE
-  $ hereya init PROJECT -w <value> [--chdir <value>] [-d <value>] [-p <value>...] [-t <value>] [--token
-    <value>]
+  $ hereya init PROJECT -w <value> [--chdir <value>] [-d <value>] [-p <value>...] [-t <value>]
 
 ARGUMENTS
   PROJECT  project name
@@ -1204,9 +1146,6 @@ FLAGS
   -t, --template=<value>          template package name (e.g. owner/repo)
   -w, --workspace=<value>         (required) workspace to set as default
       --chdir=<value>             directory to run command in
-      --token=<value>             Ephemeral cloud access token used for this invocation only. Held in memory; never
-                                  written to the keychain or `~/.hereya/secrets/`. Takes precedence over the
-                                  HEREYA_TOKEN environment variable.
 
 DESCRIPTION
   Initialize hereya in a project directory.
@@ -1221,7 +1160,7 @@ EXAMPLES
   $ hereya init myProject -w=dev -t=acme/node-starter -d=prod -p region=us-east-1
 ```
 
-_See code: [src/commands/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/init/index.ts)_
+_See code: [src/commands/init/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/init/index.ts)_
 
 ## `hereya list`
 
@@ -1238,7 +1177,7 @@ EXAMPLES
   $ hereya list
 ```
 
-_See code: [src/commands/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/list/index.ts)_
+_See code: [src/commands/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/list/index.ts)_
 
 ## `hereya login [URL]`
 
@@ -1267,7 +1206,7 @@ EXAMPLES
   $ hereya login --token=your-token https://cloud.hereya.dev
 ```
 
-_See code: [src/commands/login/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/login/index.ts)_
+_See code: [src/commands/login/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/login/index.ts)_
 
 ## `hereya logout`
 
@@ -1284,7 +1223,7 @@ EXAMPLES
   $ hereya logout
 ```
 
-_See code: [src/commands/logout/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/logout/index.ts)_
+_See code: [src/commands/logout/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/logout/index.ts)_
 
 ## `hereya provid PACKAGE`
 
@@ -1312,7 +1251,7 @@ EXAMPLES
   $ hereya provid hereya/postgres --workspace staging
 ```
 
-_See code: [src/commands/provid/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/provid/index.ts)_
+_See code: [src/commands/provid/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/provid/index.ts)_
 
 ## `hereya publish`
 
@@ -1320,13 +1259,11 @@ Publish a package to the Hereya registry
 
 ```
 USAGE
-  $ hereya publish [--chdir <value>] [--token <value>]
+  $ hereya publish [--chdir <value>]
 
 FLAGS
   --chdir=<value>  Directory where the command will be executed.
                    If not specified, it defaults to the current working directory.
-  --token=<value>  Ephemeral cloud access token used for this invocation only. Held in memory; never written to the
-                   keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment variable.
 
 DESCRIPTION
   Publish a package to the Hereya registry
@@ -1337,7 +1274,7 @@ EXAMPLES
   $ hereya publish --chdir=/path/to/package
 ```
 
-_See code: [src/commands/publish/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/publish/index.ts)_
+_See code: [src/commands/publish/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/publish/index.ts)_
 
 ## `hereya remove PACKAGE`
 
@@ -1365,7 +1302,7 @@ EXAMPLES
   $ hereya remove cloudy/docker_postgres
 ```
 
-_See code: [src/commands/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/remove/index.ts)_
+_See code: [src/commands/remove/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/remove/index.ts)_
 
 ## `hereya run CMD`
 
@@ -1373,7 +1310,7 @@ Run a command with hereya env vars.
 
 ```
 USAGE
-  $ hereya run CMD... [--chdir <value>] [--token <value>] [-w <value>]
+  $ hereya run CMD... [--chdir <value>] [-w <value>]
 
 ARGUMENTS
   CMD...  command to run
@@ -1381,9 +1318,6 @@ ARGUMENTS
 FLAGS
   -w, --workspace=<value>  name of the workspace to run the command in
       --chdir=<value>      directory to run command in
-      --token=<value>      Ephemeral cloud access token used for this invocation only. Held in memory; never written to
-                           the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment
-                           variable.
 
 DESCRIPTION
   Run a command with hereya env vars.
@@ -1394,7 +1328,7 @@ EXAMPLES
   $ hereya run -w uat -- node index.js
 ```
 
-_See code: [src/commands/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/run/index.ts)_
+_See code: [src/commands/run/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/run/index.ts)_
 
 ## `hereya search QUERY`
 
@@ -1402,7 +1336,7 @@ Search for packages in the registry
 
 ```
 USAGE
-  $ hereya search QUERY [-C <value>] [-j] [-l <value>] [--token <value>]
+  $ hereya search QUERY [-C <value>] [-j] [-l <value>]
 
 ARGUMENTS
   QUERY  Search query string
@@ -1410,8 +1344,6 @@ ARGUMENTS
 FLAGS
   -j, --json           Output in JSON format
   -l, --limit=<value>  [default: 20] Maximum number of results to return
-      --token=<value>  Ephemeral cloud access token used for this invocation only. Held in memory; never written to the
-                       keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment variable.
 
 GLOBAL FLAGS
   -C, --chdir=<value>  [default: .] directory to run command in
@@ -1427,7 +1359,7 @@ EXAMPLES
   $ hereya search database --json
 ```
 
-_See code: [src/commands/search/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/search/index.ts)_
+_See code: [src/commands/search/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/search/index.ts)_
 
 ## `hereya unbootstrap INFRASTRUCTURETYPE`
 
@@ -1452,7 +1384,7 @@ EXAMPLES
   $ hereya unbootstrap local
 ```
 
-_See code: [src/commands/unbootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/unbootstrap/index.ts)_
+_See code: [src/commands/unbootstrap/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/unbootstrap/index.ts)_
 
 ## `hereya undeploy`
 
@@ -1460,7 +1392,7 @@ Undeploy a hereya project by removing all resources.
 
 ```
 USAGE
-  $ hereya undeploy -w <value> [--chdir <value>] [--debug] [--local] [--token <value>]
+  $ hereya undeploy -w <value> [--chdir <value>] [--debug] [--local]
 
 FLAGS
   -w, --workspace=<value>  (required) name of the workspace to undeploy the packages for
@@ -1470,9 +1402,6 @@ FLAGS
                            environment variable.
       --debug              enable debug mode
       --local              force local execution (skip remote executor)
-      --token=<value>      Ephemeral cloud access token used for this invocation only. Held in memory; never written to
-                           the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment
-                           variable.
 
 DESCRIPTION
   Undeploy a hereya project by removing all resources.
@@ -1481,7 +1410,7 @@ EXAMPLES
   $ hereya undeploy
 ```
 
-_See code: [src/commands/undeploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/undeploy/index.ts)_
+_See code: [src/commands/undeploy/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/undeploy/index.ts)_
 
 ## `hereya uninit PROJECT`
 
@@ -1509,7 +1438,7 @@ EXAMPLES
   $ hereya uninit myProject -w dev -p prodWorkspace=prod
 ```
 
-_See code: [src/commands/uninit/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/uninit/index.ts)_
+_See code: [src/commands/uninit/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/uninit/index.ts)_
 
 ## `hereya up`
 
@@ -1517,7 +1446,7 @@ Provision all packages in the project.
 
 ```
 USAGE
-  $ hereya up [--chdir <value>] [--debug] [--deploy] [-s <value>...] [--token <value>] [-w <value>]
+  $ hereya up [--chdir <value>] [--debug] [--deploy] [-s <value>...] [-w <value>]
 
 FLAGS
   -s, --select=<value>...  [default: ] select the packages to provision
@@ -1528,9 +1457,6 @@ FLAGS
                            environment variable.
       --debug              enable debug mode
       --deploy             provision deployment companion packages
-      --token=<value>      Ephemeral cloud access token used for this invocation only. Held in memory; never written to
-                           the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment
-                           variable.
 
 DESCRIPTION
   Provision all packages in the project.
@@ -1539,7 +1465,7 @@ EXAMPLES
   $ hereya up
 ```
 
-_See code: [src/commands/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/up/index.ts)_
+_See code: [src/commands/up/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/up/index.ts)_
 
 ## `hereya update [VERSION]`
 
@@ -1561,7 +1487,7 @@ EXAMPLES
   $ hereya update 0.75.0
 ```
 
-_See code: [src/commands/update/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/update/index.ts)_
+_See code: [src/commands/update/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/update/index.ts)_
 
 ## `hereya workspace create NAME`
 
@@ -1586,7 +1512,7 @@ EXAMPLES
   $ hereya workspace create dev
 ```
 
-_See code: [src/commands/workspace/create/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/create/index.ts)_
+_See code: [src/commands/workspace/create/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/workspace/create/index.ts)_
 
 ## `hereya workspace delete NAME`
 
@@ -1606,7 +1532,7 @@ EXAMPLES
   $ hereya workspace delete dev
 ```
 
-_See code: [src/commands/workspace/delete/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/delete/index.ts)_
+_See code: [src/commands/workspace/delete/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/workspace/delete/index.ts)_
 
 ## `hereya workspace env [NAME]`
 
@@ -1632,7 +1558,7 @@ EXAMPLES
   $ hereya workspace env myEnv -w dev
 ```
 
-_See code: [src/commands/workspace/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/env/index.ts)_
+_See code: [src/commands/workspace/env/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/workspace/env/index.ts)_
 
 ## `hereya workspace env set`
 
@@ -1656,7 +1582,7 @@ EXAMPLES
   $ hereya workspace env set -w my-workspace -n myVar -v my-value -i aws -s
 ```
 
-_See code: [src/commands/workspace/env/set/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/env/set/index.ts)_
+_See code: [src/commands/workspace/env/set/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/workspace/env/set/index.ts)_
 
 ## `hereya workspace env unset`
 
@@ -1677,7 +1603,7 @@ EXAMPLES
   $ hereya workspace env unset -w my-workspace -n myVar
 ```
 
-_See code: [src/commands/workspace/env/unset/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/env/unset/index.ts)_
+_See code: [src/commands/workspace/env/unset/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/workspace/env/unset/index.ts)_
 
 ## `hereya workspace executor install`
 
@@ -1685,21 +1611,18 @@ Install a remote executor into a workspace
 
 ```
 USAGE
-  $ hereya workspace executor install -w <value> [--debug] [-f] [--token <value>]
+  $ hereya workspace executor install -w <value> [--debug] [-f]
 
 FLAGS
   -f, --force              force reinstall even if executor is already installed
   -w, --workspace=<value>  (required) name of the workspace
       --debug              enable debug mode
-      --token=<value>      Ephemeral cloud access token used for this invocation only. Held in memory; never written to
-                           the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment
-                           variable.
 
 DESCRIPTION
   Install a remote executor into a workspace
 ```
 
-_See code: [src/commands/workspace/executor/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/executor/install/index.ts)_
+_See code: [src/commands/workspace/executor/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/workspace/executor/install/index.ts)_
 
 ## `hereya workspace executor token`
 
@@ -1707,19 +1630,16 @@ Generate a workspace-scoped executor token for the remote executor
 
 ```
 USAGE
-  $ hereya workspace executor token -w <value> [--token <value>]
+  $ hereya workspace executor token -w <value>
 
 FLAGS
   -w, --workspace=<value>  (required) name of the workspace
-      --token=<value>      Ephemeral cloud access token used for this invocation only. Held in memory; never written to
-                           the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment
-                           variable.
 
 DESCRIPTION
   Generate a workspace-scoped executor token for the remote executor
 ```
 
-_See code: [src/commands/workspace/executor/token/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/executor/token/index.ts)_
+_See code: [src/commands/workspace/executor/token/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/workspace/executor/token/index.ts)_
 
 ## `hereya workspace executor uninstall`
 
@@ -1727,20 +1647,17 @@ Uninstall the remote executor from a workspace
 
 ```
 USAGE
-  $ hereya workspace executor uninstall -w <value> [--debug] [--token <value>]
+  $ hereya workspace executor uninstall -w <value> [--debug]
 
 FLAGS
   -w, --workspace=<value>  (required) name of the workspace
       --debug              enable debug mode
-      --token=<value>      Ephemeral cloud access token used for this invocation only. Held in memory; never written to
-                           the keychain or `~/.hereya/secrets/`. Takes precedence over the HEREYA_TOKEN environment
-                           variable.
 
 DESCRIPTION
   Uninstall the remote executor from a workspace
 ```
 
-_See code: [src/commands/workspace/executor/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/executor/uninstall/index.ts)_
+_See code: [src/commands/workspace/executor/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/workspace/executor/uninstall/index.ts)_
 
 ## `hereya workspace install PACKAGE`
 
@@ -1767,7 +1684,7 @@ EXAMPLES
   $ hereya workspace install hereya/aws-cognito
 ```
 
-_See code: [src/commands/workspace/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/install/index.ts)_
+_See code: [src/commands/workspace/install/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/workspace/install/index.ts)_
 
 ## `hereya workspace list`
 
@@ -1791,7 +1708,7 @@ EXAMPLES
   $ hereya workspace list --org personal
 ```
 
-_See code: [src/commands/workspace/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/list/index.ts)_
+_See code: [src/commands/workspace/list/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/workspace/list/index.ts)_
 
 ## `hereya workspace set-profile PROFILE`
 
@@ -1815,7 +1732,7 @@ EXAMPLES
   $ hereya workspace set-profile prod-profile -w production
 ```
 
-_See code: [src/commands/workspace/set-profile/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/set-profile/index.ts)_
+_See code: [src/commands/workspace/set-profile/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/workspace/set-profile/index.ts)_
 
 ## `hereya workspace uninstall PACKAGE`
 
@@ -1842,5 +1759,5 @@ EXAMPLES
   $ hereya workspace uninstall hereya/aws-cognito
 ```
 
-_See code: [src/commands/workspace/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.87.0/src/commands/workspace/uninstall/index.ts)_
+_See code: [src/commands/workspace/uninstall/index.ts](https://github.com/hereya/hereya-cli/blob/v0.88.0/src/commands/workspace/uninstall/index.ts)_
 <!-- commandsstop -->