v11.0.1

[eas-cli] make eas config command not require authentication when running in --eas-json-only mode (#2517 )
* [eas-cli] make eas config command not require authentication when running in --eas-json-only mode * add changelog
2026-11-14 10:08:06 -10:00 · 2024-08-27 00:28:25 +02:00 · 2024-08-27 00:27:34 +02:00 · 2024-08-26 18:34:45 +02:00 · 2024-08-26 15:13:51 +00:00 · 2024-08-26 17:06:41 +02:00
281 changed files with 22822 additions and 4367 deletions
@@ -5,3 +5,4 @@
 packages/eas-cli/src/graphql/generated.ts

 node_modules
+ts-declarations
@@ -30,12 +30,6 @@ module.exports = {
      },
    ],
    'no-underscore-dangle': ['error', { allow: ['__typename'] }],
-    '@typescript-eslint/explicit-function-return-type': [
-      'warn',
-      {
-        allowExpressions: true,
-      },
-    ],
    'async-protect/async-suffix': 'error',
    'node/no-sync': 'error',
  },
@@ -69,16 +69,22 @@ jobs:
      - uses: actions/setup-node@v2
        with:
          node-version: 20
+      - run: brew install python-setuptools
+        env:
+          HOMEBREW_NO_AUTO_UPDATE: 1
      - run: yarn install --frozen-lockfile --check-files
      - run: yarn build
      - name: Build tarballs
        working-directory: ${{ github.workspace }}/packages/eas-cli
        run: |
          yarn pretarball-ci
-          yarn oclif pack:tarballs --no-xz --targets darwin-x64
+          yarn oclif pack:tarballs --no-xz --targets darwin-x64,darwin-arm64
      - id: x64
        run: echo "filename=$(ls eas-*-x64.tar.gz)" >> $GITHUB_OUTPUT
        working-directory: ${{ github.workspace }}/packages/eas-cli/dist
+      - id: arm64
+        run: echo "filename=$(ls eas-*-arm64.tar.gz)" >> $GITHUB_OUTPUT
+        working-directory: ${{ github.workspace }}/packages/eas-cli/dist
      - name: Upload darwin-x64 tarball
        uses: actions/upload-release-asset@v1
        env:
@@ -88,6 +94,15 @@ jobs:
          asset_path: packages/eas-cli/dist/${{ steps.x64.outputs.filename }}
          asset_name: ${{ steps.x64.outputs.filename }}
          asset_content_type: application/gzip
+      - name: Upload darwin-arm64 tarball
+        uses: actions/upload-release-asset@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          upload_url: ${{ needs.release.outputs.upload_url }}
+          asset_path: packages/eas-cli/dist/${{ steps.arm64.outputs.filename }}
+          asset_name: ${{ steps.arm64.outputs.filename }}
+          asset_content_type: application/gzip
  build-windows:
    name: Build for Windows
    runs-on: ubuntu-latest
@@ -211,3 +226,16 @@ jobs:
          SLACK_USERNAME: 'EAS CLI CI'
          SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}
          SLACK_FOOTER: ''
+  open-pr-in-universe:
+    name: Open a PR with `@expo/eas-json` bump in universe
+    needs: publish-to-npm
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: Open a PR with `@expo/eas-json` version bump in universe
+        uses: benc-uk/workflow-dispatch@v1
+        with:
+          repo: expo/universe
+          ref: main
+          workflow: update-eas-json.yml
+          token: ${{ secrets.EXPO_BOT_PAT }}
@@ -15,7 +15,7 @@ jobs:
    runs-on: ubuntu-latest
    strategy:
      matrix:
-        node: ['16', '18', '20']
+        node: ['18', '20', '22']
        include:
          - node: '20'
            coverage: true
@@ -10,9 +10,249 @@ This is the log of notable changes to EAS CLI and related packages.

 ### 🐛 Bug fixes

+- Make `eas config` command not require authentication when running in `--eas-json-only` mode. ([#2517](https://github.com/expo/eas-cli/pull/2517) by [@szdziedzic](https://github.com/szdziedzic))
+
+### 🧹 Chores
+
+## [11.0.0](https://github.com/expo/eas-cli/releases/tag/v11.0.0) - 2024-08-26
+
+### 🛠 Breaking changes
+
+- Remove long-deprecated `eas update` flags. ([#2501](https://github.com/expo/eas-cli/pull/2501) by [@wschurman](https://github.com/wschurman))
+
+### 🎉 New features
+
+- Add new rollout update type for `eas update` and `eas update:edit`. ([#2502](https://github.com/expo/eas-cli/pull/2502), [#2503](https://github.com/expo/eas-cli/pull/2503) by [@wschurman](https://github.com/wschurman))
+
+### 🧹 Chores
+
+- Upgrade packages to SDK 51 release. ([#2498](https://github.com/expo/eas-cli/pull/2498) by [@wschurman](https://github.com/wschurman))
+- Enable typescript linting and various lint rules. ([#2505](https://github.com/expo/eas-cli/pull/2505), [#2507](https://github.com/expo/eas-cli/pull/2507), [#2508](https://github.com/expo/eas-cli/pull/2508), [#2509](https://github.com/expo/eas-cli/pull/2509), [#2510](https://github.com/expo/eas-cli/pull/2510) by [@wschurman](https://github.com/wschurman))
+- Include debug info in fingerprint metadata during build. ([#2513](https://github.com/expo/eas-cli/pull/2513) by [@wschurman](https://github.com/wschurman))
+
+## [10.2.4](https://github.com/expo/eas-cli/releases/tag/v10.2.4) - 2024-08-19
+
+## [10.2.3](https://github.com/expo/eas-cli/releases/tag/v10.2.3) - 2024-08-13
+
+### 🧹 Chores
+
+- Add support for `EAS_DANGEROUS_OVERRIDE_IOS_BUNDLE_IDENTIFIER` for bare workflow iOS builds. ([#2469](https://github.com/expo/eas-cli/pull/2469) by [@szdziedzic](https://github.com/szdziedzic))
+- Update images list in `eas.schema.json` and warn users when using the deprecated Android images. ([#2450](https://github.com/expo/eas-cli/pull/2450) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [10.2.2](https://github.com/expo/eas-cli/releases/tag/v10.2.2) - 2024-07-31
+
+### 🐛 Bug fixes
+
+- Pass correct path to `vcsClient.isFileIgnoredAsync` check for monorepos to validate that custom build config file is not ignored. ([#2470](https://github.com/expo/eas-cli/pull/2470) by [@szdziedzic](https://github.com/szdziedzic))
+
+### 🧹 Chores
+
+- Bump asset upload timeout from 90 to 180 seconds. ([#2466](https://github.com/expo/eas-cli/pull/2466) by [@quinlanj](https://github.com/quinlanj))
+
+## [10.2.1](https://github.com/expo/eas-cli/releases/tag/v10.2.1) - 2024-07-18
+
+### 🧹 Chores
+
+- Indicate if a user is logged in using `EXPO_TOKEN` when running `eas whoami` command. ([#2461](https://github.com/expo/eas-cli/pull/2461) by [@szdziedzic](https://github.com/szdziedzic))
+- Throw error when `eas login` command is run with `EXPO_TOKEN` environment variable set. ([#2461](https://github.com/expo/eas-cli/pull/2461) by [@szdziedzic](https://github.com/szdziedzic))
+- Check if user is already logged in when running `eas login` command. ([#2461](https://github.com/expo/eas-cli/pull/2461) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [10.2.0](https://github.com/expo/eas-cli/releases/tag/v10.2.0) - 2024-07-15
+
+### 🎉 New features
+
+- Added flag `--emit-metadata` to emit `eas-update-metadata.json` in the bundle folder with detailed information about the generated updates ([#2451](https://github.com/expo/eas-cli/pull/2451) by [@rainst](https://github.com/rainst))
+
+### 🐛 Bug fixes
+
+- Bump `@expo/apple-utils` version to use the fallback Apple Developer Portal domain on every internal server error. ([#2459](https://github.com/expo/eas-cli/pull/2459) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [10.1.1](https://github.com/expo/eas-cli/releases/tag/v10.1.1) - 2024-07-04
+
+## [10.1.0](https://github.com/expo/eas-cli/releases/tag/v10.1.0) - 2024-07-02
+
+### 🎉 New features
+
+- Save local fingeprint sources during build. ([#2422](https://github.com/expo/eas-cli/pull/2422) by [@kadikraman](https://github.com/kadikraman))
+
+## [10.0.3](https://github.com/expo/eas-cli/releases/tag/v10.0.3) - 2024-06-26
+
+### 🧹 Chores
+
+- Track usage of `--local` build mode in analytics. ([#2445](https://github.com/expo/eas-cli/pull/2445) by [@szdziedzic](https://github.com/szdziedzic))
+- Remove any mentions of deleted Xcode < 15 images. ([#2438](https://github.com/expo/eas-cli/pull/2438) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [10.0.2](https://github.com/expo/eas-cli/releases/tag/v10.0.2) - 2024-06-17
+
+### 🐛 Bug fixes
+
+- Fix parsing of `build.gradle` file by `gradle-to-js` parser by filtering out empty single line comments. ([#2435](https://github.com/expo/eas-cli/pull/2435) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [10.0.1](https://github.com/expo/eas-cli/releases/tag/v10.0.1) - 2024-06-17
+
+### 🧹 Chores
+
+- Add clarification to private-key flag in command line help. ([#2432](https://github.com/expo/eas-cli/pull/2432) by [@quinlanj](https://github.com/quinlanj))
+
+## [10.0.0](https://github.com/expo/eas-cli/releases/tag/v10.0.0) - 2024-06-13
+
+### 🛠 Breaking changes
+
+- Drop support for Node 16. ([#2413](https://github.com/expo/eas-cli/pull/2413) by [@byCedric](https://github.com/byCedric))
+- Update [`eas-build`](https://github.com/expo/eas-build) dependencies to the version requiring Node 18 as minimal Node version. ([#2416](https://github.com/expo/eas-cli/pull/2416) by [@expo-bot](https://github.com/expo-bot))
+
+### 🐛 Bug fixes
+
+- Resolve correct submit profile configuration for `eas build` command with `--auto-submit-with-profile` flag. ([#2425](https://github.com/expo/eas-cli/pull/2425) by [@szdziedzic](https://github.com/szdziedzic))
+- Correctly parse the EXPO_APPLE_PROVIER_ID environment variable. ([#2349](https://github.com/expo/eas-cli/pull/2349) by [@louix](https://github.com/louix))
+
+### 🧹 Chores
+
+- Update lockfile to only include `@types/[email protected]`. ([#2412](https://github.com/expo/eas-cli/pull/2412) by [@byCedric](https://github.com/byCedric))
+- Update test workflow Node versions to 18, 20, and 22. ([#2413](https://github.com/expo/eas-cli/pull/2413) by [@byCedric](https://github.com/byCedric))
+
+## [9.2.0](https://github.com/expo/eas-cli/releases/tag/v9.2.0) - 2024-06-06
+
+### 🎉 New features
+
+- Add `target-profile` and `source-profile` flags to the `eas build:resign` command. ([#2410](https://github.com/expo/eas-cli/pull/2410) by [@szdziedzic](https://github.com/szdziedzic))
+- Display build profile in the output of `eas build:list`. ([#2408](https://github.com/expo/eas-cli/pull/2408) by [@szdziedzic](https://github.com/szdziedzic))
+
+### 🐛 Bug fixes
+
+- Use the correct app config for no GitHub flow in `init:onboarding`. ([#2397](https://github.com/expo/eas-cli/pull/2397) by [@szdziedzic](https://github.com/szdziedzic))
+- Disallow picking expired builds as submit archive source. ([#2406](https://github.com/expo/eas-cli/pull/2406) by [@sjchmiela](https://github.com/sjchmiela))
+
+### 🧹 Chores
+
+- Print network error message if present. ([#2407](https://github.com/expo/eas-cli/pull/2407) by [@szdziedzic](https://github.com/szdziedzic))
+- Make flags for `eas build:list` command more aligned with flags for rest of the commands. ([#2409](https://github.com/expo/eas-cli/pull/2409) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [9.1.0](https://github.com/expo/eas-cli/releases/tag/v9.1.0) - 2024-05-23
+
+### 🎉 New features
+
+- Make `eas init:onboarding` command public. ([#2399](https://github.com/expo/eas-cli/pull/2399) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [9.0.10](https://github.com/expo/eas-cli/releases/tag/v9.0.10) - 2024-05-22
+
+## [9.0.9](https://github.com/expo/eas-cli/releases/tag/v9.0.9) - 2024-05-22
+
+## [9.0.8](https://github.com/expo/eas-cli/releases/tag/v9.0.8) - 2024-05-21
+
+### 🧹 Chores
+
+- Upgrade [`eas-build`](https://github.com/expo/eas-build) dependencies. ([#2387](https://github.com/expo/eas-cli/pull/2387) by [@expo-bot](https://github.com/expo-bot))
+- Improve displaying of device registration QR code. ([#2391](https://github.com/expo/eas-cli/pull/2391) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [9.0.7](https://github.com/expo/eas-cli/releases/tag/v9.0.7) - 2024-05-17
+
+## [9.0.6](https://github.com/expo/eas-cli/releases/tag/v9.0.6) - 2024-05-15
+
+## [9.0.5](https://github.com/expo/eas-cli/releases/tag/v9.0.5) - 2024-05-13
+
+## [9.0.4](https://github.com/expo/eas-cli/releases/tag/v9.0.4) - 2024-05-13
+
+### 🧹 Chores
+
+- Add loader and progress information to the `diagnostics` command. ([#2378](https://github.com/expo/eas-cli/pull/2378) by [@simek](https://github.com/simek))
+
+## [9.0.3](https://github.com/expo/eas-cli/releases/tag/v9.0.3) - 2024-05-10
+
+### 🧹 Chores
+
+- Upgrade [`eas-build`](https://github.com/expo/eas-build) dependencies. ([#2372](https://github.com/expo/eas-cli/pull/2372) by [@expo-bot](https://github.com/expo-bot))
+
+## [9.0.2](https://github.com/expo/eas-cli/releases/tag/v9.0.2) - 2024-05-09
+
+## [9.0.1](https://github.com/expo/eas-cli/releases/tag/v9.0.1) - 2024-05-09
+
+### 🧹 Chores
+
+- Update image tags in `eas.schema.json`. ([#2363](https://github.com/expo/eas-cli/pull/2363) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [9.0.0](https://github.com/expo/eas-cli/releases/tag/v9.0.0) - 2024-05-08
+
+### 🛠 Breaking changes
+
+- Allow modification of provisioning profile in CI, add --freeze-credentials flag. ([#2347](https://github.com/expo/eas-cli/pull/2347) by [@quinlanj](https://github.com/quinlanj))
+
+### 🐛 Bug fixes
+
+- Pass env from process.env and build profile to expo-updates CLI calls where applicable. ([#2359](https://github.com/expo/eas-cli/pull/2359) by [@wschurman](https://github.com/wschurman))
+
+### 🧹 Chores
+
+- Remove more classic updates code. ([#2357](https://github.com/expo/eas-cli/pull/2357) by [@wschurman](https://github.com/wschurman))
+- Upgrade [`eas-build`](https://github.com/expo/eas-build) dependencies. ([#2360](https://github.com/expo/eas-cli/pull/2360) by [@expo-bot](https://github.com/expo-bot))
+- Don't pass custom global `"expoCli"` version set in `eas.json` to EAS Build process and warn users when setting it. ([#2361](https://github.com/expo/eas-cli/pull/2361) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [8.0.0](https://github.com/expo/eas-cli/releases/tag/v8.0.0) - 2024-05-01
+
+### 🛠 Breaking changes
+
+- Stop creating a channel on `eas update` and `eas update:roll-back-to-embedded` unless the `--channel` flag is specified. ([#2346](https://github.com/expo/eas-cli/pull/2346) by [@quinlanj](https://github.com/quinlanj))
+
+### 🐛 Bug fixes
+
+- Improve login info message for other login options. ([#2352](https://github.com/expo/eas-cli/pull/2352) by [@wschurman](https://github.com/wschurman))
+- Show the -s, --sso option in the login command help. ([#2353](https://github.com/expo/eas-cli/pull/2353) by [@lzkb](https://github.com/lzkb))
+
+### 🧹 Chores
+
+- Upgrade [`eas-build`](https://github.com/expo/eas-build) dependencies. ([#2351](https://github.com/expo/eas-cli/pull/2351) by [@expo-bot](https://github.com/expo-bot))
+- Don't prompt users to set push notifications by default if they don't have the `expo-notifications` installed. ([#2343](https://github.com/expo/eas-cli/pull/2343) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [7.8.5](https://github.com/expo/eas-cli/releases/tag/v7.8.5) - 2024-04-26
+
+### 🐛 Bug fixes
+
+- Add explicit workflow arg to expo-update CLI calls. ([#2340](https://github.com/expo/eas-cli/pull/2340) by [@wschurman](https://github.com/wschurman))
+
+### 🧹 Chores
+
+- Improve error message if the server returns `UNAUTHORIZED_ERROR`. ([#2345](https://github.com/expo/eas-cli/pull/2345) by [@szdziedzic](https://github.com/szdziedzic))
+- Fill in min expo-updates version for expo-updates CLI. ([#2344](https://github.com/expo/eas-cli/pull/2344) by [@wschurman](https://github.com/wschurman))
+
+## [7.8.4](https://github.com/expo/eas-cli/releases/tag/v7.8.4) - 2024-04-24
+
+### 🧹 Chores
+
+- Update the list of available Android images. ([#2337](https://github.com/expo/eas-cli/pull/2337) by [@radoslawkrzemien](https://github.com/radoslawkrzemien))
+- Make multi-select for revoking distribution certificates more readable. ([#2342](https://github.com/expo/eas-cli/pull/2342) by [@szdziedzic](https://github.com/szdziedzic))
+- Improve error message displayed when EAS CLI version doesn't satisfy minimal version required specified in eas.json. ([#2341](https://github.com/expo/eas-cli/pull/2341) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [7.8.3](https://github.com/expo/eas-cli/releases/tag/v7.8.3) - 2024-04-23
+
+### 🐛 Bug fixes
+
+- Don't prompt to set `android.package` and `ios.bundleIdentifier` values when running in non-interactive mode. ([#2336](https://github.com/expo/eas-cli/pull/2336) by [@szdziedzic](https://github.com/szdziedzic))
+
+### 🧹 Chores
+
+- Amend credential removal wording. ([#2334](https://github.com/expo/eas-cli/pull/2334) by [@quinlanj](https://github.com/quinlanj))
+
+## [7.8.2](https://github.com/expo/eas-cli/releases/tag/v7.8.2) - 2024-04-15
+
+### 🐛 Bug fixes
+
+- Fix display of errors when expo-updates CLI command fails. ([#2324](https://github.com/expo/eas-cli/pull/2324) by [@wschurman](https://github.com/wschurman))
+- Move credentials endpoints to paginated counterparts. ([#2327](https://github.com/expo/eas-cli/pull/2327) by [@quinlanj](https://github.com/quinlanj))
+
+### 🧹 Chores
+
+- Add progress bar for fetching paginated datasets. ([#2326](https://github.com/expo/eas-cli/pull/2326) by [@quinlanj](https://github.com/quinlanj))
+
+## [7.8.1](https://github.com/expo/eas-cli/releases/tag/v7.8.1) - 2024-04-11
+
+### 🐛 Bug fixes
+
+- Fix command source files URLs in autogenerated `README`. ([#2318](https://github.com/expo/eas-cli/pull/2318) by [@szdziedzic](https://github.com/szdziedzic))
+
 ### 🧹 Chores

 - Upgrade [`eas-build`](https://github.com/expo/eas-build) dependencies. ([#2316](https://github.com/expo/eas-cli/pull/2316) by [@expo-bot](https://github.com/expo-bot))
+- Stop querying `Build.resourceClass` field. ([#2320](https://github.com/expo/eas-cli/pull/2320) by [@szdziedzic](https://github.com/szdziedzic))

 ## [7.8.0](https://github.com/expo/eas-cli/releases/tag/v7.8.0) - 2024-04-08

@@ -1,5 +1,5 @@
 {
  "npmClient": "yarn",
-  "version": "7.8.0",
+  "version": "11.0.1",
  "$schema": "node_modules/lerna/schemas/lerna-schema.json"
 }
@@ -23,7 +23,7 @@
    "@types/jest": "29.5.11",
    "@types/node": "20.11.0",
    "eslint": "8.56.0",
-    "eslint-config-universe": "12.0.0",
+    "eslint-config-universe": "13.0.0",
    "eslint-plugin-async-protect": "3.1.0",
    "eslint-plugin-node": "11.1.0",
    "jest": "29.7.0",
@@ -39,7 +39,7 @@ An example of **eas.json** that enforces `eas-cli` in version `1.0.0` or newer:
 }
 ```

-Learn more: https://docs.expo.dev/build-reference/eas-json/
+Learn more: https://docs.expo.dev/build/eas-json/

 # Usage

@@ -94,14 +94,17 @@ eas --help COMMAND
 * [`eas diagnostics`](#eas-diagnostics)
 * [`eas help [COMMAND]`](#eas-help-command)
 * [`eas init`](#eas-init)
+* [`eas init:onboarding [TARGET_PROJECT_DIRECTORY]`](#eas-initonboarding-target_project_directory)
 * [`eas login`](#eas-login)
 * [`eas logout`](#eas-logout)
 * [`eas metadata:lint`](#eas-metadatalint)
 * [`eas metadata:pull`](#eas-metadatapull)
 * [`eas metadata:push`](#eas-metadatapush)
+* [`eas onboarding [TARGET_PROJECT_DIRECTORY]`](#eas-onboarding-target_project_directory)
 * [`eas open`](#eas-open)
 * [`eas project:info`](#eas-projectinfo)
 * [`eas project:init`](#eas-projectinit)
+* [`eas project:onboarding [TARGET_PROJECT_DIRECTORY]`](#eas-projectonboarding-target_project_directory)
 * [`eas secret:create`](#eas-secretcreate)
 * [`eas secret:delete`](#eas-secretdelete)
 * [`eas secret:list`](#eas-secretlist)
@@ -128,7 +131,10 @@ log in with your Expo account

 ```
 USAGE
-  $ eas account:login
+  $ eas account:login [-s]
+
+FLAGS
+  -s, --sso  Login with SSO

 DESCRIPTION
  log in with your Expo account
@@ -137,7 +143,7 @@ ALIASES
  $ eas login
 ```

-_See code: [src/commands/account/login.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/account/login.ts)_
+_See code: [packages/eas-cli/src/commands/account/login.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/account/login.ts)_

 ## `eas account:logout`

@@ -154,7 +160,7 @@ ALIASES
  $ eas logout
 ```

-_See code: [src/commands/account/logout.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/account/logout.ts)_
+_See code: [packages/eas-cli/src/commands/account/logout.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/account/logout.ts)_

 ## `eas account:view`

@@ -171,7 +177,7 @@ ALIASES
  $ eas whoami
 ```

-_See code: [src/commands/account/view.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/account/view.ts)_
+_See code: [packages/eas-cli/src/commands/account/view.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/account/view.ts)_

 ## `eas analytics [STATUS]`

@@ -185,7 +191,7 @@ DESCRIPTION
  display or change analytics settings
 ```

-_See code: [src/commands/analytics.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/analytics.ts)_
+_See code: [packages/eas-cli/src/commands/analytics.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/analytics.ts)_

 ## `eas autocomplete [SHELL]`

@@ -216,7 +222,7 @@ EXAMPLES
  $ eas autocomplete --refresh-cache
 ```

-_See code: [@oclif/plugin-autocomplete](https://github.com/oclif/plugin-autocomplete/blob/v2.3.10/src/commands/autocomplete/index.ts)_
+_See code: [@oclif/plugin-autocomplete](https://github.com/oclif/plugin-autocomplete/blob/v2.3.10/packages/eas-cli/src/commands/autocomplete/index.ts)_

 ## `eas branch:create [NAME]`

@@ -237,7 +243,7 @@ DESCRIPTION
  create a branch
 ```

-_See code: [src/commands/branch/create.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/branch/create.ts)_
+_See code: [packages/eas-cli/src/commands/branch/create.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/branch/create.ts)_

 ## `eas branch:delete [NAME]`

@@ -258,7 +264,7 @@ DESCRIPTION
  delete a branch
 ```

-_See code: [src/commands/branch/delete.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/branch/delete.ts)_
+_See code: [packages/eas-cli/src/commands/branch/delete.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/branch/delete.ts)_

 ## `eas branch:list`

@@ -278,7 +284,7 @@ DESCRIPTION
  list all branches
 ```

-_See code: [src/commands/branch/list.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/branch/list.ts)_
+_See code: [packages/eas-cli/src/commands/branch/list.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/branch/list.ts)_

 ## `eas branch:rename`

@@ -298,7 +304,7 @@ DESCRIPTION
  rename a branch
 ```

-_See code: [src/commands/branch/rename.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/branch/rename.ts)_
+_See code: [packages/eas-cli/src/commands/branch/rename.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/branch/rename.ts)_

 ## `eas branch:view [NAME]`

@@ -321,7 +327,7 @@ DESCRIPTION
  view a branch
 ```

-_See code: [src/commands/branch/view.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/branch/view.ts)_
+_See code: [packages/eas-cli/src/commands/branch/view.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/branch/view.ts)_

 ## `eas build`

@@ -331,7 +337,7 @@ start a build
 USAGE
  $ eas build [-p android|ios|all] [-e <value>] [--local] [--output <value>] [--wait] [--clear-cache]
    [--auto-submit | --auto-submit-with-profile <value>] [-m <value>] [--build-logger-level
-    trace|debug|info|warn|error|fatal] [--json --non-interactive]
+    trace|debug|info|warn|error|fatal] [--freeze-credentials] [--json --non-interactive]

 FLAGS
  -e, --profile=PROFILE_NAME                                Name of the build profile from eas.json. Defaults to
@@ -345,6 +351,8 @@ FLAGS
  --build-logger-level=(trace|debug|info|warn|error|fatal)  The level of logs to output during the build process.
                                                            Defaults to "info".
  --clear-cache                                             Clear cache before the build
+  --freeze-credentials                                      Prevent the build from updating credentials in
+                                                            non-interactive mode
  --json                                                    Enable JSON output, non-JSON messages will be printed to
                                                            stderr.
  --local                                                   Run build locally [experimental]
@@ -356,7 +364,7 @@ DESCRIPTION
  start a build
 ```

-_See code: [src/commands/build/index.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/build/index.ts)_
+_See code: [packages/eas-cli/src/commands/build/index.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/index.ts)_

 ## `eas build:cancel [BUILD_ID]`

@@ -375,7 +383,7 @@ DESCRIPTION
  cancel a build
 ```

-_See code: [src/commands/build/cancel.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/build/cancel.ts)_
+_See code: [packages/eas-cli/src/commands/build/cancel.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/cancel.ts)_

 ## `eas build:configure`

@@ -392,7 +400,7 @@ DESCRIPTION
  configure the project to support EAS Build
 ```

-_See code: [src/commands/build/configure.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/build/configure.ts)_
+_See code: [packages/eas-cli/src/commands/build/configure.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/configure.ts)_

 ## `eas build:delete [BUILD_ID]`

@@ -411,7 +419,7 @@ DESCRIPTION
  delete a build
 ```

-_See code: [src/commands/build/delete.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/build/delete.ts)_
+_See code: [packages/eas-cli/src/commands/build/delete.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/delete.ts)_

 ## `eas build:inspect`

@@ -446,7 +454,7 @@ DESCRIPTION
  inspect the state of the project at specific build stages, useful for troubleshooting
 ```

-_See code: [src/commands/build/inspect.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/build/inspect.ts)_
+_See code: [packages/eas-cli/src/commands/build/inspect.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/inspect.ts)_

 ## `eas build:list`

@@ -454,20 +462,27 @@ list all builds for your project

 ```
 USAGE
-  $ eas build:list [--platform all|android|ios] [--status
+  $ eas build:list [-p android|ios|all] [--status
    new|in-queue|in-progress|pending-cancel|errored|finished|canceled] [--distribution store|internal|simulator]
-    [--channel <value>] [--appVersion <value>] [--appBuildVersion <value>] [--sdkVersion <value>] [--runtimeVersion
-    <value>] [--appIdentifier <value>] [--buildProfile <value>] [--gitCommitHash <value>] [--offset <value>] [--limit
-    <value>] [--json --non-interactive] [--simulator]
+    [--channel <value>] [--app-version <value>] [--app-build-version <value>] [--sdk-version <value>] [--runtime-version
+    <value>] [--app-identifier <value>] [-e <value>] [--git-commit-hash <value>] [--offset <value>] [--limit <value>]
+    [--json --non-interactive] [--simulator]

 FLAGS
-  --appBuildVersion=<value>
-  --appIdentifier=<value>
-  --appVersion=<value>
-  --buildProfile=<value>
+  -e, --build-profile=<value>                                                   Filter only builds created with the
+                                                                                specified build profile
+  -p, --platform=(android|ios|all)
+  --app-build-version=<value>                                                   Filter only builds created with the
+                                                                                specified app build version
+  --app-identifier=<value>                                                      Filter only builds created with the
+                                                                                specified app identifier
+  --app-version=<value>                                                         Filter only builds created with the
+                                                                                specified main app version
  --channel=<value>
-  --distribution=(store|internal|simulator)
-  --gitCommitHash=<value>
+  --distribution=(store|internal|simulator)                                     Filter only builds with the specified
+                                                                                distribution type
+  --git-commit-hash=<value>                                                     Filter only builds created with the
+                                                                                specified git commit hash
  --json                                                                        Enable JSON output, non-JSON messages
                                                                                will be printed to stderr.
  --limit=<value>                                                               The number of items to fetch each query.
@@ -475,19 +490,21 @@ FLAGS
  --non-interactive                                                             Run the command in non-interactive mode.
  --offset=<value>                                                              Start queries from specified index. Use
                                                                                for paginating results. Defaults to 0.
-  --platform=(all|android|ios)
-  --runtimeVersion=<value>
-  --sdkVersion=<value>
+  --runtime-version=<value>                                                     Filter only builds created with the
+                                                                                specified runtime version
+  --sdk-version=<value>                                                         Filter only builds created with the
+                                                                                specified Expo SDK version
  --simulator                                                                   Filter only iOS simulator builds. Can
                                                                                only be used with --platform flag set to
                                                                                "ios"
-  --status=(new|in-queue|in-progress|pending-cancel|errored|finished|canceled)
+  --status=(new|in-queue|in-progress|pending-cancel|errored|finished|canceled)  Filter only builds with the specified
+                                                                                status

 DESCRIPTION
  list all builds for your project
 ```

-_See code: [src/commands/build/list.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/build/list.ts)_
+_See code: [packages/eas-cli/src/commands/build/list.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/list.ts)_

 ## `eas build:resign`

@@ -495,25 +512,28 @@ re-sign a build archive

 ```
 USAGE
-  $ eas build:resign [-p android|ios] [-e <value>] [--wait] [--id <value>] [--offset <value>] [--limit <value>]
-    [--json --non-interactive]
+  $ eas build:resign [-p android|ios] [-e <value>] [--source-profile <value>] [--wait] [--id <value>] [--offset
+    <value>] [--limit <value>] [--json --non-interactive]

 FLAGS
-  -e, --profile=PROFILE_NAME    Name of the build profile from eas.json. Defaults to "production" if defined in
-                                eas.json.
+  -e, --target-profile=PROFILE_NAME  Name of the target build profile from eas.json. Credentials and environment
+                                     variables from this profile will be used when re-signing. Defaults to "production"
+                                     if defined in eas.json.
  -p, --platform=(android|ios)
-  --id=<value>                  ID of the build to re-sign.
-  --json                        Enable JSON output, non-JSON messages will be printed to stderr.
-  --limit=<value>               The number of items to fetch each query. Defaults to 50 and is capped at 100.
-  --non-interactive             Run the command in non-interactive mode.
-  --offset=<value>              Start queries from specified index. Use for paginating results. Defaults to 0.
-  --[no-]wait                   Wait for build(s) to complete.
+  --id=<value>                       ID of the build to re-sign.
+  --json                             Enable JSON output, non-JSON messages will be printed to stderr.
+  --limit=<value>                    The number of items to fetch each query. Defaults to 50 and is capped at 100.
+  --non-interactive                  Run the command in non-interactive mode.
+  --offset=<value>                   Start queries from specified index. Use for paginating results. Defaults to 0.
+  --source-profile=PROFILE_NAME      Name of the source build profile from eas.json. Used to filter builds eligible for
+                                     re-signing.
+  --[no-]wait                        Wait for build(s) to complete.

 DESCRIPTION
  re-sign a build archive
 ```

-_See code: [src/commands/build/resign.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/build/resign.ts)_
+_See code: [packages/eas-cli/src/commands/build/resign.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/resign.ts)_

 ## `eas build:run`

@@ -539,7 +559,7 @@ DESCRIPTION
  run simulator/emulator builds from eas-cli
 ```

-_See code: [src/commands/build/run.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/build/run.ts)_
+_See code: [packages/eas-cli/src/commands/build/run.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/run.ts)_

 ## `eas build:submit`

@@ -589,7 +609,7 @@ DESCRIPTION
  get the latest version from EAS servers
 ```

-_See code: [src/commands/build/version/get.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/build/version/get.ts)_
+_See code: [packages/eas-cli/src/commands/build/version/get.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/version/get.ts)_

 ## `eas build:version:set`

@@ -608,7 +628,7 @@ DESCRIPTION
  update version of an app
 ```

-_See code: [src/commands/build/version/set.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/build/version/set.ts)_
+_See code: [packages/eas-cli/src/commands/build/version/set.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/version/set.ts)_

 ## `eas build:version:sync`

@@ -627,7 +647,7 @@ DESCRIPTION
  update a version in native code with a value stored on EAS servers
 ```

-_See code: [src/commands/build/version/sync.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/build/version/sync.ts)_
+_See code: [packages/eas-cli/src/commands/build/version/sync.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/version/sync.ts)_

 ## `eas build:view [BUILD_ID]`

@@ -644,7 +664,7 @@ DESCRIPTION
  view a build for your project
 ```

-_See code: [src/commands/build/view.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/build/view.ts)_
+_See code: [packages/eas-cli/src/commands/build/view.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/build/view.ts)_

 ## `eas channel:create [NAME]`

@@ -665,7 +685,7 @@ DESCRIPTION
  create a channel
 ```

-_See code: [src/commands/channel/create.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/channel/create.ts)_
+_See code: [packages/eas-cli/src/commands/channel/create.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/channel/create.ts)_

 ## `eas channel:edit [NAME]`

@@ -687,7 +707,7 @@ DESCRIPTION
  point a channel at a new branch
 ```

-_See code: [src/commands/channel/edit.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/channel/edit.ts)_
+_See code: [packages/eas-cli/src/commands/channel/edit.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/channel/edit.ts)_

 ## `eas channel:list`

@@ -707,7 +727,7 @@ DESCRIPTION
  list all channels
 ```

-_See code: [src/commands/channel/list.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/channel/list.ts)_
+_See code: [packages/eas-cli/src/commands/channel/list.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/channel/list.ts)_

 ## `eas channel:rollout [CHANNEL]`

@@ -732,14 +752,15 @@ FLAGS
                                           --action=create
  --private-key-path=<value>               File containing the PEM-encoded private key corresponding to the certificate
                                           in expo-updates' configuration. Defaults to a file named "private-key.pem" in
-                                           the certificate's directory.
+                                           the certificate's directory. Only relevant if you are using code signing:
+                                           https://docs.expo.dev/eas-update/code-signing/
  --runtime-version=<value>                Runtime version to target. Use with --action=create

 DESCRIPTION
  Roll a new branch out on a channel incrementally.
 ```

-_See code: [src/commands/channel/rollout.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/channel/rollout.ts)_
+_See code: [packages/eas-cli/src/commands/channel/rollout.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/channel/rollout.ts)_

 ## `eas channel:view [NAME]`

@@ -762,7 +783,7 @@ DESCRIPTION
  view a channel
 ```

-_See code: [src/commands/channel/view.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/channel/view.ts)_
+_See code: [packages/eas-cli/src/commands/channel/view.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/channel/view.ts)_

 ## `eas config`

@@ -783,7 +804,7 @@ DESCRIPTION
  display project configuration (app.json + eas.json)
 ```

-_See code: [src/commands/config.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/config.ts)_
+_See code: [packages/eas-cli/src/commands/config.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/config.ts)_

 ## `eas credentials`

@@ -800,7 +821,7 @@ DESCRIPTION
  manage credentials
 ```

-_See code: [src/commands/credentials/index.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/credentials/index.ts)_
+_See code: [packages/eas-cli/src/commands/credentials/index.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/credentials/index.ts)_

 ## `eas credentials:configure-build`

@@ -818,7 +839,7 @@ DESCRIPTION
  Set up credentials for building your project.
 ```

-_See code: [src/commands/credentials/configure-build.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/credentials/configure-build.ts)_
+_See code: [packages/eas-cli/src/commands/credentials/configure-build.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/credentials/configure-build.ts)_

 ## `eas device:create`

@@ -832,7 +853,7 @@ DESCRIPTION
  register new Apple Devices to use for internal distribution
 ```

-_See code: [src/commands/device/create.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/device/create.ts)_
+_See code: [packages/eas-cli/src/commands/device/create.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/device/create.ts)_

 ## `eas device:delete`

@@ -852,7 +873,7 @@ DESCRIPTION
  remove a registered device from your account
 ```

-_See code: [src/commands/device/delete.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/device/delete.ts)_
+_See code: [packages/eas-cli/src/commands/device/delete.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/device/delete.ts)_

 ## `eas device:list`

@@ -873,7 +894,7 @@ DESCRIPTION
  list all registered devices for your account
 ```

-_See code: [src/commands/device/list.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/device/list.ts)_
+_See code: [packages/eas-cli/src/commands/device/list.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/device/list.ts)_

 ## `eas device:rename`

@@ -894,7 +915,7 @@ DESCRIPTION
  rename a registered device
 ```

-_See code: [src/commands/device/rename.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/device/rename.ts)_
+_See code: [packages/eas-cli/src/commands/device/rename.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/device/rename.ts)_

 ## `eas device:view [UDID]`

@@ -908,7 +929,7 @@ DESCRIPTION
  view a device for your project
 ```

-_See code: [src/commands/device/view.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/device/view.ts)_
+_See code: [packages/eas-cli/src/commands/device/view.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/device/view.ts)_

 ## `eas diagnostics`

@@ -922,7 +943,7 @@ DESCRIPTION
  display environment info
 ```

-_See code: [src/commands/diagnostics.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/diagnostics.ts)_
+_See code: [packages/eas-cli/src/commands/diagnostics.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/diagnostics.ts)_

 ## `eas help [COMMAND]`

@@ -942,7 +963,7 @@ DESCRIPTION
  Display help for eas.
 ```

-_See code: [@expo/plugin-help](https://github.com/expo/oclif-plugin-help/blob/v5.1.23/src/commands/help.ts)_
+_See code: [@expo/plugin-help](https://github.com/expo/oclif-plugin-help/blob/v5.1.23/packages/eas-cli/src/commands/help.ts)_

 ## `eas init`

@@ -964,13 +985,32 @@ ALIASES
  $ eas init
 ```

+## `eas init:onboarding [TARGET_PROJECT_DIRECTORY]`
+
+continue onboarding process started on the https://expo.new website.
+
+```
+USAGE
+  $ eas init:onboarding [TARGET_PROJECT_DIRECTORY]
+
+DESCRIPTION
+  continue onboarding process started on the https://expo.new website.
+
+ALIASES
+  $ eas init:onboarding
+  $ eas onboarding
+```
+
 ## `eas login`

 log in with your Expo account

 ```
 USAGE
-  $ eas login
+  $ eas login [-s]
+
+FLAGS
+  -s, --sso  Login with SSO

 DESCRIPTION
  log in with your Expo account
@@ -1010,7 +1050,7 @@ DESCRIPTION
  validate the local store configuration
 ```

-_See code: [src/commands/metadata/lint.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/metadata/lint.ts)_
+_See code: [packages/eas-cli/src/commands/metadata/lint.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/metadata/lint.ts)_

 ## `eas metadata:pull`

@@ -1027,7 +1067,7 @@ DESCRIPTION
  generate the local store configuration from the app stores
 ```

-_See code: [src/commands/metadata/pull.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/metadata/pull.ts)_
+_See code: [packages/eas-cli/src/commands/metadata/pull.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/metadata/pull.ts)_

 ## `eas metadata:push`

@@ -1044,7 +1084,23 @@ DESCRIPTION
  sync the local store configuration to the app stores
 ```

-_See code: [src/commands/metadata/push.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/metadata/push.ts)_
+_See code: [packages/eas-cli/src/commands/metadata/push.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/metadata/push.ts)_
+
+## `eas onboarding [TARGET_PROJECT_DIRECTORY]`
+
+continue onboarding process started on the https://expo.new website.
+
+```
+USAGE
+  $ eas onboarding [TARGET_PROJECT_DIRECTORY]
+
+DESCRIPTION
+  continue onboarding process started on the https://expo.new website.
+
+ALIASES
+  $ eas init:onboarding
+  $ eas onboarding
+```

 ## `eas open`

@@ -1058,7 +1114,7 @@ DESCRIPTION
  open the project page in a web browser
 ```

-_See code: [src/commands/open.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/open.ts)_
+_See code: [packages/eas-cli/src/commands/open.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/open.ts)_

 ## `eas project:info`

@@ -1072,7 +1128,7 @@ DESCRIPTION
  information about the current project
 ```

-_See code: [src/commands/project/info.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/project/info.ts)_
+_See code: [packages/eas-cli/src/commands/project/info.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/project/info.ts)_

 ## `eas project:init`

@@ -1094,7 +1150,25 @@ ALIASES
  $ eas init
 ```

-_See code: [src/commands/project/init.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/project/init.ts)_
+_See code: [packages/eas-cli/src/commands/project/init.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/project/init.ts)_
+
+## `eas project:onboarding [TARGET_PROJECT_DIRECTORY]`
+
+continue onboarding process started on the https://expo.new website.
+
+```
+USAGE
+  $ eas project:onboarding [TARGET_PROJECT_DIRECTORY]
+
+DESCRIPTION
+  continue onboarding process started on the https://expo.new website.
+
+ALIASES
+  $ eas init:onboarding
+  $ eas onboarding
+```
+
+_See code: [packages/eas-cli/src/commands/project/onboarding.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/project/onboarding.ts)_

 ## `eas secret:create`

@@ -1117,7 +1191,7 @@ DESCRIPTION
  create an environment secret on the current project or owner account
 ```

-_See code: [src/commands/secret/create.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/secret/create.ts)_
+_See code: [packages/eas-cli/src/commands/secret/create.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/secret/create.ts)_

 ## `eas secret:delete`

@@ -1135,7 +1209,7 @@ DESCRIPTION
  delete an environment secret by ID
 ```

-_See code: [src/commands/secret/delete.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/secret/delete.ts)_
+_See code: [packages/eas-cli/src/commands/secret/delete.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/secret/delete.ts)_

 ## `eas secret:list`

@@ -1149,7 +1223,7 @@ DESCRIPTION
  list environment secrets available for your current app
 ```

-_See code: [src/commands/secret/list.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/secret/list.ts)_
+_See code: [packages/eas-cli/src/commands/secret/list.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/secret/list.ts)_

 ## `eas secret:push`

@@ -1169,7 +1243,7 @@ DESCRIPTION
  read environment secrets from env file and store on the server
 ```

-_See code: [src/commands/secret/push.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/secret/push.ts)_
+_See code: [packages/eas-cli/src/commands/secret/push.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/secret/push.ts)_

 ## `eas submit`

@@ -1200,7 +1274,7 @@ ALIASES
  $ eas build:submit
 ```

-_See code: [src/commands/submit.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/submit.ts)_
+_See code: [packages/eas-cli/src/commands/submit.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/submit.ts)_

 ## `eas update`

@@ -1208,9 +1282,9 @@ publish an update group

 ```
 USAGE
-  $ eas update [--branch <value>] [--channel <value>] [-m <value>] [--republish | --input-dir <value> |
-    --skip-bundler] [--group <value> |  | ] [--clear-cache] [-p android|ios|all] [--auto] [--private-key-path <value>]
-    [--json --non-interactive]
+  $ eas update [--branch <value>] [--channel <value>] [-m <value>] [--input-dir <value>] [--skip-bundler]
+    [--clear-cache] [--emit-metadata] [-p android|ios|all] [--auto] [--private-key-path <value>] [--json
+    --non-interactive]

 FLAGS
  -m, --message=<value>             A short message describing the update
@@ -1219,21 +1293,22 @@ FLAGS
  --branch=<value>                  Branch to publish the update group on
  --channel=<value>                 Channel that the published update should affect
  --clear-cache                     Clear the bundler cache before publishing
-  --group=<value>                   Update group to republish (deprecated, see republish command)
+  --emit-metadata                   Emit "eas-update-metadata.json" in the bundle folder with detailed information about
+                                    the generated updates
  --input-dir=<value>               [default: dist] Location of the bundle
  --json                            Enable JSON output, non-JSON messages will be printed to stderr.
  --non-interactive                 Run the command in non-interactive mode.
  --private-key-path=<value>        File containing the PEM-encoded private key corresponding to the certificate in
                                    expo-updates' configuration. Defaults to a file named "private-key.pem" in the
-                                    certificate's directory.
-  --republish                       Republish an update group (deprecated, see republish command)
+                                    certificate's directory. Only relevant if you are using code signing:
+                                    https://docs.expo.dev/eas-update/code-signing/
  --skip-bundler                    Skip running Expo CLI to bundle the app before publishing

 DESCRIPTION
  publish an update group
 ```

-_See code: [src/commands/update/index.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/update/index.ts)_
+_See code: [packages/eas-cli/src/commands/update/index.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/update/index.ts)_

 ## `eas update:configure`

@@ -1251,7 +1326,7 @@ DESCRIPTION
  configure the project to support EAS Update
 ```

-_See code: [src/commands/update/configure.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/update/configure.ts)_
+_See code: [packages/eas-cli/src/commands/update/configure.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/update/configure.ts)_

 ## `eas update:delete GROUPID`

@@ -1272,7 +1347,7 @@ DESCRIPTION
  delete all the updates in an update group
 ```

-_See code: [src/commands/update/delete.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/update/delete.ts)_
+_See code: [packages/eas-cli/src/commands/update/delete.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/update/delete.ts)_

 ## `eas update:list`

@@ -1294,7 +1369,7 @@ DESCRIPTION
  view the recent updates
 ```

-_See code: [src/commands/update/list.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/update/list.ts)_
+_See code: [packages/eas-cli/src/commands/update/list.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/update/list.ts)_

 ## `eas update:republish`

@@ -1315,13 +1390,14 @@ FLAGS
  --non-interactive                 Run the command in non-interactive mode.
  --private-key-path=<value>        File containing the PEM-encoded private key corresponding to the certificate in
                                    expo-updates' configuration. Defaults to a file named "private-key.pem" in the
-                                    certificate's directory.
+                                    certificate's directory. Only relevant if you are using code signing:
+                                    https://docs.expo.dev/eas-update/code-signing/

 DESCRIPTION
  roll back to an existing update
 ```

-_See code: [src/commands/update/republish.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/update/republish.ts)_
+_See code: [packages/eas-cli/src/commands/update/republish.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/update/republish.ts)_

 ## `eas update:roll-back-to-embedded`

@@ -1342,13 +1418,14 @@ FLAGS
  --non-interactive                 Run the command in non-interactive mode.
  --private-key-path=<value>        File containing the PEM-encoded private key corresponding to the certificate in
                                    expo-updates' configuration. Defaults to a file named "private-key.pem" in the
-                                    certificate's directory.
+                                    certificate's directory. Only relevant if you are using code signing:
+                                    https://docs.expo.dev/eas-update/code-signing/

 DESCRIPTION
  roll back to the embedded update
 ```

-_See code: [src/commands/update/roll-back-to-embedded.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/update/roll-back-to-embedded.ts)_
+_See code: [packages/eas-cli/src/commands/update/roll-back-to-embedded.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/update/roll-back-to-embedded.ts)_

 ## `eas update:rollback`

@@ -1361,13 +1438,14 @@ USAGE
 FLAGS
  --private-key-path=<value>  File containing the PEM-encoded private key corresponding to the certificate in
                              expo-updates' configuration. Defaults to a file named "private-key.pem" in the
-                              certificate's directory.
+                              certificate's directory. Only relevant if you are using code signing:
+                              https://docs.expo.dev/eas-update/code-signing/

 DESCRIPTION
  roll back to an embedded update or an existing update
 ```

-_See code: [src/commands/update/rollback.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/update/rollback.ts)_
+_See code: [packages/eas-cli/src/commands/update/rollback.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/update/rollback.ts)_

 ## `eas update:view GROUPID`

@@ -1387,7 +1465,7 @@ DESCRIPTION
  update group details
 ```

-_See code: [src/commands/update/view.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/update/view.ts)_
+_See code: [packages/eas-cli/src/commands/update/view.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/update/view.ts)_

 ## `eas webhook:create`

@@ -1408,7 +1486,7 @@ DESCRIPTION
  create a webhook
 ```

-_See code: [src/commands/webhook/create.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/webhook/create.ts)_
+_See code: [packages/eas-cli/src/commands/webhook/create.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/webhook/create.ts)_

 ## `eas webhook:delete [ID]`

@@ -1428,7 +1506,7 @@ DESCRIPTION
  delete a webhook
 ```

-_See code: [src/commands/webhook/delete.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/webhook/delete.ts)_
+_See code: [packages/eas-cli/src/commands/webhook/delete.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/webhook/delete.ts)_

 ## `eas webhook:list`

@@ -1446,7 +1524,7 @@ DESCRIPTION
  list webhooks
 ```

-_See code: [src/commands/webhook/list.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/webhook/list.ts)_
+_See code: [packages/eas-cli/src/commands/webhook/list.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/webhook/list.ts)_

 ## `eas webhook:update`

@@ -1468,7 +1546,7 @@ DESCRIPTION
  update a webhook
 ```

-_See code: [src/commands/webhook/update.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/webhook/update.ts)_
+_See code: [packages/eas-cli/src/commands/webhook/update.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/webhook/update.ts)_

 ## `eas webhook:view ID`

@@ -1485,7 +1563,7 @@ DESCRIPTION
  view a webhook
 ```

-_See code: [src/commands/webhook/view.ts](https://github.com/expo/eas-cli/blob/v7.8.0/src/commands/webhook/view.ts)_
+_See code: [packages/eas-cli/src/commands/webhook/view.ts](https://github.com/expo/eas-cli/blob/v11.0.1/packages/eas-cli/src/commands/webhook/view.ts)_

 ## `eas whoami`

@@ -1,34 +1,34 @@
 {
  "name": "eas-cli",
  "description": "EAS command line tool",
-  "version": "7.8.0",
+  "version": "11.0.1",
  "author": "Expo <[email protected]>",
  "bin": {
    "eas": "./bin/run"
  },
  "bugs": "https://github.com/expo/eas-cli/issues",
  "dependencies": {
-    "@expo/apple-utils": "1.7.0",
+    "@expo/apple-utils": "1.7.1",
    "@expo/code-signing-certificates": "0.0.5",
-    "@expo/config": "8.5.4",
-    "@expo/config-plugins": "7.8.4",
-    "@expo/config-types": "50.0.0",
-    "@expo/eas-build-job": "1.0.95",
-    "@expo/eas-json": "7.8.0",
-    "@expo/json-file": "8.2.37",
-    "@expo/logger": "1.0.57",
+    "@expo/config": "9.0.3",
+    "@expo/config-plugins": "8.0.8",
+    "@expo/config-types": "51.0.2",
+    "@expo/eas-build-job": "1.0.133",
+    "@expo/eas-json": "11.0.0",
+    "@expo/json-file": "8.3.3",
+    "@expo/logger": "1.0.117",
    "@expo/multipart-body-parser": "1.1.0",
-    "@expo/osascript": "2.0.33",
-    "@expo/package-manager": "1.1.2",
-    "@expo/pkcs12": "0.0.8",
-    "@expo/plist": "0.0.20",
+    "@expo/osascript": "2.1.3",
+    "@expo/package-manager": "1.5.2",
+    "@expo/pkcs12": "0.1.2",
+    "@expo/plist": "0.1.3",
    "@expo/plugin-help": "5.1.23",
    "@expo/plugin-warn-if-update-available": "2.5.1",
-    "@expo/prebuild-config": "6.7.3",
+    "@expo/prebuild-config": "7.0.8",
    "@expo/results": "1.0.0",
    "@expo/rudder-sdk-node": "1.1.1",
-    "@expo/spawn-async": "1.7.0",
-    "@expo/steps": "1.0.95",
+    "@expo/spawn-async": "1.7.2",
+    "@expo/steps": "1.0.130",
    "@expo/timeago.js": "1.0.0",
    "@oclif/core": "^1.26.2",
    "@oclif/plugin-autocomplete": "^2.3.10",
@@ -77,7 +77,7 @@
    "resolve-from": "5.0.0",
    "semver": "7.5.4",
    "slash": "3.0.0",
-    "tar": "6.2.0",
+    "tar": "6.2.1",
    "terminal-link": "2.1.1",
    "tslib": "2.6.2",
    "turndown": "7.1.2",
@@ -108,7 +108,7 @@
    "@types/tough-cookie": "4.0.2",
    "@types/uuid": "9.0.7",
    "@types/wrap-ansi": "3.0.0",
-    "axios": "0.27.2",
+    "axios": "0.28.1",
    "eslint-plugin-graphql": "4.0.0",
    "express": "4.19.2",
    "memfs": "3.4.13",
@@ -121,7 +121,7 @@
    "typescript": "5.3.3"
  },
  "engines": {
-    "node": ">=16.0.0"
+    "node": ">=18.0.0"
  },
  "files": [
    "/bin",
@@ -3,8 +3,7 @@ const fs = require('fs/promises');
 (async () => {
  // Patch `oclif readme` path and link generation
  let readmeContent = await fs.readFile('README.md', 'utf8');
-  readmeContent = readmeContent.replace(/\[build\//g, '[src/');
-  readmeContent = readmeContent.replace(/build\/commands/g, 'packages/eas-cli/src/commands');
+  readmeContent = readmeContent.replace(/src\/commands/g, 'packages/eas-cli/src/commands');
  await fs.writeFile('README.md', readmeContent);

  // eslint-disable-next-line no-console
@@ -0,0 +1,40 @@
+module.exports = {
+  extends: ['universe/shared/typescript-analysis'],
+  overrides: [
+    {
+      files: ['*.ts', '*.d.ts'],
+      parserOptions: {
+        project: './packages/eas-cli/tsconfig.json',
+      },
+      rules: {
+        '@typescript-eslint/explicit-function-return-type': [
+          'warn',
+          {
+            allowExpressions: true,
+          },
+        ],
+        '@typescript-eslint/prefer-nullish-coalescing': ['warn', { ignorePrimitives: true }],
+        '@typescript-eslint/no-confusing-void-expression': 'warn',
+        '@typescript-eslint/await-thenable': 'error',
+        '@typescript-eslint/no-misused-promises': [
+          'error',
+          {
+            checksVoidReturn: false,
+          },
+        ],
+        '@typescript-eslint/no-floating-promises': 'error',
+        'no-void': ['warn', { allowAsStatement: true }],
+        'no-return-await': 'off',
+        '@typescript-eslint/return-await': ['error', 'always'],
+        '@typescript-eslint/no-confusing-non-null-assertion': 'warn',
+        '@typescript-eslint/no-extra-non-null-assertion': 'warn',
+        '@typescript-eslint/prefer-as-const': 'warn',
+        '@typescript-eslint/prefer-includes': 'warn',
+        '@typescript-eslint/prefer-readonly': 'warn',
+        '@typescript-eslint/prefer-string-starts-ends-with': 'warn',
+        '@typescript-eslint/prefer-ts-expect-error': 'warn',
+        '@typescript-eslint/no-unnecessary-type-assertion': 'warn',
+      },
+    },
+  ],
+};
@@ -24,6 +24,7 @@ export function getMockAppFragment(): AppFragment {
  return {
    id: mockProjectId,
    slug: 'testapp',
+    name: 'testapp',
    fullName: '@testuser/testpp',
    ownerAccount: {
      id: 'test-account-id',
@@ -28,7 +28,7 @@ import {
 */
 export class SelectBranch implements EASUpdateAction<UpdateBranchBasicInfoFragment | null> {
  constructor(
-    private options: {
+    private readonly options: {
      filterPredicate?: (branchInfo: UpdateBranchBasicInfoFragment) => boolean;
      printedType?: string;
      pageSize?: number;
@@ -91,8 +91,8 @@ export class SelectBranch implements EASUpdateAction<UpdateBranchBasicInfoFragme
      queryParams: QueryParams
    ): Promise<Connection<UpdateBranchBasicInfoFragment>> =>
      filterPredicate
-        ? this.filterQueryAsync(ctx, queryParams, filterPredicate)
-        : this.queryAsync(ctx, queryParams);
+        ? await this.filterQueryAsync(ctx, queryParams, filterPredicate)
+        : await this.queryAsync(ctx, queryParams);

    const getTitleAsync = async (branchInfo: UpdateBranchBasicInfoFragment): Promise<string> =>
      branchInfo.name;
@@ -84,7 +84,9 @@ export async function listAndRenderBranchesOnAppAsync(
        queryBranchesOnProjectAsync(graphqlClient, limit, offset, projectId),
      promptOptions: {
        title: 'Load more branches?',
-        renderListItems: branches => renderPageOfBranches(branches, paginatedQueryOptions),
+        renderListItems: branches => {
+          renderPageOfBranches(branches, paginatedQueryOptions);
+        },
      },
    });
  }
@@ -3,13 +3,7 @@ import { v4 as uuid } from 'uuid';

 import { ExpoGraphqlClient } from '../../commandUtils/context/contextUtils/createGraphqlClient';
 import { selectBuildToCancelAsync } from '../../commands/build/cancel';
-import {
-  AppPlatform,
-  BuildFragment,
-  BuildPriority,
-  BuildResourceClass,
-  BuildStatus,
-} from '../../graphql/generated';
+import { AppPlatform, BuildFragment, BuildPriority, BuildStatus } from '../../graphql/generated';
 import { BuildQuery } from '../../graphql/queries/BuildQuery';
 import { confirmAsync, selectAsync } from '../../prompts';

@@ -53,14 +47,14 @@ describe(selectBuildToCancelAsync.name, () => {
  it('does not return build id when confirmation is rejected', async () => {
    const graphqlClient = instance(mock<ExpoGraphqlClient>());
    jest.mocked(confirmAsync).mockResolvedValueOnce(false);
-    expect(selectBuildToCancelAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(null);
+    await expect(selectBuildToCancelAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(null);
  });

  it('returns build id when confirmation is confirmed', async () => {
    const graphqlClient = instance(mock<ExpoGraphqlClient>());
    jest.mocked(selectAsync).mockResolvedValueOnce(selectedBuildId);
    jest.mocked(confirmAsync).mockResolvedValueOnce(true);
-    expect(selectBuildToCancelAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(
+    await expect(selectBuildToCancelAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(
      selectedBuildId
    );
  });
@@ -91,7 +85,6 @@ function createMockBuildFragment({
      },
    },
    status: BuildStatus.InQueue,
-    resourceClass: BuildResourceClass.AndroidMedium,
    isForIosSimulator: false,
  };
 }
@@ -3,13 +3,7 @@ import { v4 as uuid } from 'uuid';

 import { ExpoGraphqlClient } from '../../commandUtils/context/contextUtils/createGraphqlClient';
 import { selectBuildToDeleteAsync } from '../../commands/build/delete';
-import {
-  AppPlatform,
-  BuildFragment,
-  BuildPriority,
-  BuildResourceClass,
-  BuildStatus,
-} from '../../graphql/generated';
+import { AppPlatform, BuildFragment, BuildPriority, BuildStatus } from '../../graphql/generated';
 import { BuildQuery } from '../../graphql/queries/BuildQuery';
 import { confirmAsync, selectAsync } from '../../prompts';

@@ -53,14 +47,14 @@ describe(selectBuildToDeleteAsync.name, () => {
  it('does not return build id when confirmation is rejected', async () => {
    const graphqlClient = instance(mock<ExpoGraphqlClient>());
    jest.mocked(confirmAsync).mockResolvedValueOnce(false);
-    expect(selectBuildToDeleteAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(null);
+    await expect(selectBuildToDeleteAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(null);
  });

  it('returns build id when confirmation is confirmed', async () => {
    const graphqlClient = instance(mock<ExpoGraphqlClient>());
    jest.mocked(selectAsync).mockResolvedValueOnce(selectedBuildId);
    jest.mocked(confirmAsync).mockResolvedValueOnce(true);
-    expect(selectBuildToDeleteAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(
+    await expect(selectBuildToDeleteAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(
      selectedBuildId
    );
  });
@@ -91,7 +85,6 @@ function createMockBuildFragment({
      },
    },
    status: BuildStatus.InQueue,
-    resourceClass: BuildResourceClass.AndroidMedium,
    isForIosSimulator: false,
  };
 }
@@ -107,6 +107,7 @@ export async function prepareAndroidBuildAsync(
            ? false
            : ctx.buildProfile.autoIncrement,
        vcsClient: ctx.vcsClient,
+        env: ctx.env,
      });
    },
    prepareJobAsync: async (
@@ -15,7 +15,6 @@ export function transformJob(job: Android.Job): AndroidJobInput {
    triggeredBy: transformBuildTrigger(job.triggeredBy),
    projectArchive: transformProjectArchive(job.projectArchive),
    projectRootDirectory: job.projectRootDirectory,
-    releaseChannel: job.releaseChannel,
    updates: job.updates,
    secrets: job.secrets,
    builderEnvironment: job.builderEnvironment,
@@ -56,6 +56,15 @@ export async function prepareJobAsync(
    ? getCustomBuildConfigPathForJob(buildProfile.config)
    : undefined;

+  let buildMode;
+  if (ctx.repack) {
+    buildMode = BuildMode.REPACK;
+  } else if (buildProfile.config) {
+    buildMode = BuildMode.CUSTOM;
+  } else {
+    buildMode = BuildMode.BUILD;
+  }
+
  const job: Android.Job = {
    type: ctx.workflow,
    platform: Platform.ANDROID,
@@ -68,7 +77,6 @@ export async function prepareJobAsync(
      bun: buildProfile.bun,
      yarn: buildProfile.yarn,
      ndk: buildProfile.ndk,
-      expoCli: buildProfile.expoCli,
      env: buildProfile.env,
    },
    cache: {
@@ -79,7 +87,6 @@ export async function prepareJobAsync(
    secrets: {
      ...buildCredentials,
    },
-    releaseChannel: buildProfile.releaseChannel,
    updates: { channel: buildProfile.channel },
    developmentClient: buildProfile.developmentClient,
    gradleCommand: buildProfile.gradleCommand,
@@ -95,13 +102,18 @@ export async function prepareJobAsync(
    experimental: {
      prebuildCommand: buildProfile.prebuildCommand,
    },
-    mode: buildProfile.config ? BuildMode.CUSTOM : BuildMode.BUILD,
+    mode: buildMode,
    triggeredBy: BuildTrigger.EAS_CLI,
    ...(maybeCustomBuildConfigPath && {
      customBuildConfig: {
        path: maybeCustomBuildConfigPath,
      },
    }),
+    ...(ctx.repack && {
+      customBuildConfig: {
+        path: '__eas/repack.yml',
+      },
+    }),
    loggerLevel: ctx.loggerLevel,
  };

@@ -1,6 +1,6 @@
 import { ExpoConfig } from '@expo/config';
 import { AndroidConfig } from '@expo/config-plugins';
-import { Platform, Workflow } from '@expo/eas-build-job';
+import { Env, Platform, Workflow } from '@expo/eas-build-job';
 import { AndroidVersionAutoIncrement } from '@expo/eas-json';
 import chalk from 'chalk';
 import fs from 'fs-extra';
@@ -18,11 +18,13 @@ export async function syncProjectConfigurationAsync({
  exp,
  localAutoIncrement,
  vcsClient,
+  env,
 }: {
  projectDir: string;
  exp: ExpoConfig;
  localAutoIncrement?: AndroidVersionAutoIncrement;
  vcsClient: Client;
+  env: Env | undefined;
 }): Promise<void> {
  const workflow = await resolveWorkflowAsync(projectDir, Platform.ANDROID, vcsClient);
  const versionBumpStrategy = resolveVersionBumpStrategy(localAutoIncrement ?? false);
@@ -30,7 +32,7 @@ export async function syncProjectConfigurationAsync({
  if (workflow === Workflow.GENERIC) {
    await cleanUpOldEasBuildGradleScriptAsync(projectDir);
    if (isExpoUpdatesInstalled(projectDir)) {
-      await syncUpdatesConfigurationAsync(projectDir, exp);
+      await syncUpdatesConfigurationAsync({ projectDir, exp, workflow, env });
    }
    await bumpVersionAsync({ projectDir, exp, bumpStrategy: versionBumpStrategy });
  } else {
@@ -44,7 +44,7 @@ export async function bumpVersionAsync({

  const buildGradle = await getAppBuildGradleAsync(projectDir);
  const isMultiFlavor =
-    buildGradle.android?.productFlavors || buildGradle.android?.flavorDimensions;
+    buildGradle.android?.productFlavors ?? buildGradle.android?.flavorDimensions;
  if (isMultiFlavor) {
    throw new Error(
      'Automatic version bumping is not supported for multi-flavor Android projects.'
@@ -2,6 +2,7 @@ import {
  ArchiveSource,
  ArchiveSourceType,
  BuildJob,
+  FingerprintSourceType,
  Metadata,
  Platform,
 } from '@expo/eas-build-job';
@@ -12,6 +13,8 @@ import cliProgress from 'cli-progress';
 import fs from 'fs-extra';
 import { GraphQLError } from 'graphql/error';
 import nullthrows from 'nullthrows';
+import path from 'path';
+import { v4 as uuidv4 } from 'uuid';

 import { BuildContext } from './context';
 import {
@@ -56,13 +59,16 @@ import { BuildQuery } from '../graphql/queries/BuildQuery';
 import Log, { learnMore, link } from '../log';
 import { Ora, ora } from '../ora';
 import {
+  RequestedPlatform,
  appPlatformDisplayNames,
  appPlatformEmojis,
  requestedPlatformDisplayNames,
 } from '../platform';
+import { resolveRuntimeVersionAsync } from '../project/resolveRuntimeVersionAsync';
 import { uploadFileAtPathToGCSAsync } from '../uploads';
 import { formatBytes } from '../utils/files';
 import { printJsonOnlyOutput } from '../utils/json';
+import { getTmpDirectory } from '../utils/paths';
 import { createProgressTracker } from '../utils/progress';
 import { sleepAsync } from '../utils/promise';

@@ -124,7 +130,9 @@ export async function prepareBuildRequestForPlatformAsync<

  await withAnalyticsAsync(
    ctx.analytics,
-    async () => await builder.syncProjectConfigurationAsync(ctx),
+    async () => {
+      await builder.syncProjectConfigurationAsync(ctx);
+    },
    {
      attemptEvent: BuildEvent.CONFIGURE_PROJECT_ATTEMPT,
      successEvent: BuildEvent.CONFIGURE_PROJECT_SUCCESS,
@@ -135,9 +143,15 @@ export async function prepareBuildRequestForPlatformAsync<

  if (await ctx.vcsClient.isCommitRequiredAsync()) {
    Log.addNewLineIfNone();
+    const platformToRequestedPlatform: Record<Platform, RequestedPlatform> = {
+      [Platform.ANDROID]: RequestedPlatform.Android,
+      [Platform.IOS]: RequestedPlatform.Ios,
+    };
    await reviewAndCommitChangesAsync(
      ctx.vcsClient,
-      `[EAS Build] Run EAS Build for ${requestedPlatformDisplayNames[ctx.platform as Platform]}`,
+      `[EAS Build] Run EAS Build for ${
+        requestedPlatformDisplayNames[platformToRequestedPlatform[ctx.platform]]
+      }`,
      { nonInteractive: ctx.nonInteractive }
    );
  }
@@ -162,7 +176,8 @@ export async function prepareBuildRequestForPlatformAsync<
  }
  assert(projectArchive);

-  const metadata = await collectMetadataAsync(ctx);
+  const runtimeMetadata = await createAndMaybeUploadFingerprintAsync(ctx);
+  const metadata = await collectMetadataAsync(ctx, runtimeMetadata);
  const buildParams = resolveBuildParamsInput(ctx, metadata);
  const job = await builder.prepareJobAsync(ctx, {
    projectArchive,
@@ -171,7 +186,7 @@ export async function prepareBuildRequestForPlatformAsync<

  return async () => {
    if (ctx.localBuildOptions.localBuildMode === LocalBuildMode.LOCAL_BUILD_PLUGIN) {
-      await runLocalBuildAsync(job, metadata, ctx.localBuildOptions);
+      await runLocalBuildAsync(job, metadata, ctx.localBuildOptions, ctx.env);
      return undefined;
    } else if (ctx.localBuildOptions.localBuildMode === LocalBuildMode.INTERNAL) {
      await BuildMutation.updateBuildMetadataAsync(ctx.graphqlClient, {
@@ -275,20 +290,23 @@ async function uploadProjectAsync<TPlatform extends Platform>(
        }

        projectTarballPath = projectTarball.path;
-        const bucketKey = await uploadFileAtPathToGCSAsync(
-          ctx.graphqlClient,
-          UploadSessionType.EasBuildGcsProjectSources,
-          projectTarball.path,
-          createProgressTracker({
-            total: projectTarball.size,
-            message: ratio =>
-              `Uploading to EAS Build (${formatBytes(projectTarball.size * ratio)} / ${formatBytes(
-                projectTarball.size
-              )})`,
-            completedMessage: (duration: string) => `Uploaded to EAS ${chalk.dim(duration)}`,
-          })
-        );
-        const { metadataLocation } = await uploadMetadataFileAsync<TPlatform>(projectTarball, ctx);
+        const [bucketKey, { metadataLocation }] = await Promise.all([
+          uploadFileAtPathToGCSAsync(
+            ctx.graphqlClient,
+            UploadSessionType.EasBuildGcsProjectSources,
+            projectTarball.path,
+            createProgressTracker({
+              total: projectTarball.size,
+              message: ratio =>
+                `Uploading to EAS Build (${formatBytes(
+                  projectTarball.size * ratio
+                )} / ${formatBytes(projectTarball.size)})`,
+              completedMessage: (duration: string) => `Uploaded to EAS ${chalk.dim(duration)}`,
+            })
+          ),
+          uploadMetadataFileAsync<TPlatform>(projectTarball, ctx),
+        ]);
+
        if (metadataLocation) {
          return { bucketKey, metadataLocation };
        }
@@ -327,15 +345,7 @@ async function uploadMetadataFileAsync<TPlatform extends Platform>(
    const metadataLocation = await uploadFileAtPathToGCSAsync(
      ctx.graphqlClient,
      UploadSessionType.EasBuildGcsProjectMetadata,
-      projectMetadataFile.path,
-      createProgressTracker({
-        total: projectMetadataFile.size,
-        message: ratio =>
-          `Uploading metadata to EAS Build (${formatBytes(
-            projectMetadataFile!.size * ratio
-          )} / ${formatBytes(projectMetadataFile!.size)})`,
-        completedMessage: (duration: string) => `Uploaded to EAS ${chalk.dim(duration)}`,
-      })
+      projectMetadataFile.path
    );
    return { metadataLocation };
  } catch (err: any) {
@@ -654,3 +664,83 @@ function formatAccountSubscriptionsUrl(accountName: string): string {
    getExpoWebsiteBaseUrl()
  ).toString();
 }
+
+async function createAndMaybeUploadFingerprintAsync<T extends Platform>(
+  ctx: BuildContext<T>
+): Promise<{
+  runtimeVersion?: string;
+  fingerprintSource?: Metadata['fingerprintSource'];
+}> {
+  const resolvedRuntimeVersion = await resolveRuntimeVersionAsync({
+    exp: ctx.exp,
+    platform: ctx.platform,
+    workflow: ctx.workflow,
+    projectDir: ctx.projectDir,
+    env: ctx.env,
+    cwd: ctx.projectDir,
+  });
+
+  if (!resolvedRuntimeVersion) {
+    return {};
+  }
+
+  /**
+   * It's ok for fingerprintSources to be empty
+   * fingerprintSources only exist if the project is using runtimeVersion.policy: fingerprint
+   */
+  if (!resolvedRuntimeVersion.fingerprint) {
+    return {
+      runtimeVersion: resolvedRuntimeVersion.runtimeVersion ?? undefined,
+    };
+  }
+
+  await fs.mkdirp(getTmpDirectory());
+  const fingerprintLocation = path.join(getTmpDirectory(), `${uuidv4()}-runtime-fingerprint.json`);
+
+  await fs.writeJSON(fingerprintLocation, {
+    hash: resolvedRuntimeVersion.runtimeVersion,
+    sources: resolvedRuntimeVersion.fingerprint.fingerprintSources,
+  });
+
+  if (ctx.localBuildOptions.localBuildMode === LocalBuildMode.LOCAL_BUILD_PLUGIN) {
+    return {
+      runtimeVersion: resolvedRuntimeVersion.runtimeVersion ?? undefined,
+      fingerprintSource: {
+        type: FingerprintSourceType.PATH,
+        path: fingerprintLocation,
+        isDebugFingerprint: resolvedRuntimeVersion.fingerprint.isDebugFingerprintSource,
+      },
+    };
+  }
+
+  let fingerprintGCSBucketKey = undefined;
+  try {
+    fingerprintGCSBucketKey = await uploadFileAtPathToGCSAsync(
+      ctx.graphqlClient,
+      UploadSessionType.EasUpdateFingerprint,
+      fingerprintLocation
+    );
+  } catch (err: any) {
+    let errMessage = 'Failed to upload fingerprint to EAS';
+
+    if (err.message) {
+      errMessage += `\n\nReason: ${err.message}`;
+    }
+
+    Log.warn(errMessage);
+    return {
+      runtimeVersion: resolvedRuntimeVersion.runtimeVersion ?? undefined,
+    };
+  } finally {
+    await fs.remove(fingerprintLocation);
+  }
+
+  return {
+    runtimeVersion: resolvedRuntimeVersion.runtimeVersion ?? undefined,
+    fingerprintSource: {
+      type: FingerprintSourceType.GCS,
+      bucketKey: fingerprintGCSBucketKey,
+      isDebugFingerprint: resolvedRuntimeVersion.fingerprint.isDebugFingerprintSource,
+    },
+  };
+}
@@ -62,4 +62,6 @@ export interface BuildContext<T extends Platform> {
  requiredPackageManager: NodePackageManager['name'] | null;
  vcsClient: Client;
  loggerLevel?: LoggerLevel;
+  repack: boolean;
+  env: Record<string, string>;
 }
@@ -10,7 +10,7 @@ import { v4 as uuidv4 } from 'uuid';
 import { createAndroidContextAsync } from './android/build';
 import { BuildContext, CommonContext } from './context';
 import { createIosContextAsync } from './ios/build';
-import { LocalBuildOptions } from './local';
+import { LocalBuildMode, LocalBuildOptions } from './local';
 import { resolveBuildResourceClassAsync } from './utils/resourceClass';
 import { Analytics, AnalyticsEventProperties, BuildEvent } from '../analytics/AnalyticsManager';
 import { DynamicConfigContextFn } from '../commandUtils/context/DynamicProjectConfigContextField';
@@ -41,6 +41,9 @@ export async function createBuildContextAsync<T extends Platform>({
  getDynamicPrivateProjectConfigAsync,
  customBuildConfigMetadata,
  buildLoggerLevel,
+  freezeCredentials,
+  repack,
+  env,
 }: {
  buildProfileName: string;
  buildProfile: BuildProfile<T>;
@@ -60,8 +63,13 @@ export async function createBuildContextAsync<T extends Platform>({
  getDynamicPrivateProjectConfigAsync: DynamicConfigContextFn;
  customBuildConfigMetadata?: CustomBuildConfigMetadata;
  buildLoggerLevel?: LoggerLevel;
+  freezeCredentials: boolean;
+  repack: boolean;
+  env: Record<string, string>;
 }): Promise<BuildContext<T>> {
-  const { exp, projectId } = await getDynamicPrivateProjectConfigAsync({ env: buildProfile.env });
+  const { exp, projectId } = await getDynamicPrivateProjectConfigAsync({
+    env,
+  });
  const projectName = exp.slug;
  const account = await getOwnerAccountForProjectIdAsync(graphqlClient, projectId);
  const workflow = await resolveWorkflowAsync(projectDir, platform, vcsClient);
@@ -83,9 +91,10 @@ export async function createBuildContextAsync<T extends Platform>({
    user: actor,
    graphqlClient,
    analytics,
-    env: buildProfile.env,
+    env,
    easJsonCliConfig,
    vcsClient,
+    freezeCredentials,
  });

  const devClientProperties = getDevClientEventProperties({
@@ -103,6 +112,7 @@ export async function createBuildContextAsync<T extends Platform>({
    ...devClientProperties,
    no_wait: noWait,
    run_from_ci: runFromCI,
+    local: localBuildOptions.localBuildMode === LocalBuildMode.LOCAL_BUILD_PLUGIN,
  };
  analytics.logEvent(BuildEvent.BUILD_COMMAND, analyticsEventProperties);

@@ -140,6 +150,8 @@ export async function createBuildContextAsync<T extends Platform>({
    developmentClient,
    requiredPackageManager,
    loggerLevel: buildLoggerLevel,
+    repack,
+    env,
  };
  if (platform === Platform.ANDROID) {
    const common = commonContext as CommonContext<Platform.ANDROID>;
@@ -0,0 +1,81 @@
+import { Env } from '@expo/eas-build-job';
+import { BuildProfile } from '@expo/eas-json';
+
+import { ExpoGraphqlClient } from '../commandUtils/context/contextUtils/createGraphqlClient';
+import { EnvironmentVariableEnvironment } from '../graphql/generated';
+import { EnvironmentVariablesQuery } from '../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../log';
+
+function isEnvironment(env: string): env is EnvironmentVariableEnvironment {
+  return Object.values(EnvironmentVariableEnvironment).includes(
+    env.toUpperCase() as EnvironmentVariableEnvironment
+  );
+}
+
+export async function evaluateConfigWithEnvVarsAsync<Config extends { projectId: string }, Opts>({
+  flags,
+  buildProfile,
+  graphqlClient,
+  getProjectConfig,
+  opts,
+}: {
+  flags: { environment?: string };
+  buildProfile: BuildProfile;
+  graphqlClient: ExpoGraphqlClient | null;
+  opts: Opts;
+  getProjectConfig(opts: Opts): Promise<Config>;
+}): Promise<Config & { env: Env }> {
+  if (!graphqlClient) {
+    Log.warn('An Expo user account is required to fetch environment variables.');
+    const config = await getProjectConfig(opts);
+    return { env: buildProfile.env ?? {}, ...config };
+  }
+  const { projectId } = await getProjectConfig({ env: buildProfile.env, ...opts });
+  const env = await resolveEnvVarsAsync({ flags, buildProfile, graphqlClient, projectId });
+  const config = await getProjectConfig({ ...opts, env });
+
+  return { env, ...config };
+}
+
+async function resolveEnvVarsAsync({
+  flags,
+  buildProfile,
+  graphqlClient,
+  projectId,
+}: {
+  flags: { environment?: string };
+  buildProfile: BuildProfile;
+  graphqlClient: ExpoGraphqlClient;
+  projectId: string;
+}): Promise<Env> {
+  const environment =
+    flags.environment ?? buildProfile.environment ?? process.env.EAS_CURRENT_ENVIRONMENT;
+
+  if (!environment || !isEnvironment(environment)) {
+    return { ...buildProfile.env };
+  }
+
+  try {
+    const environmentVariables = await EnvironmentVariablesQuery.byAppIdWithSensitiveAsync(
+      graphqlClient,
+      {
+        appId: projectId,
+        environment,
+      }
+    );
+    const envVars = Object.fromEntries(
+      environmentVariables
+        .filter(({ name, value }) => name && value)
+        .map(({ name, value }) => [name, value])
+    ) as Record<string, string>;
+
+    return { ...envVars, ...buildProfile.env };
+  } catch (e) {
+    Log.error('Failed to pull env variables for environment ${environment} from EAS servers');
+    Log.error(e);
+    Log.error(
+      'This can possibly be a bug in EAS/EAS CLI. Report it here: https://github.com/expo/eas-cli/issues'
+    );
+    return { ...buildProfile.env };
+  }
+}
@@ -42,6 +42,7 @@ export function transformProjectArchive(archiveSource: ArchiveSource): ProjectAr
 export function transformMetadata(metadata: Metadata): BuildMetadataInput {
  return {
    ...metadata,
+    fingerprintSource: metadata.fingerprintSource as BuildMetadataInput['fingerprintSource'],
    credentialsSource:
      metadata.credentialsSource && transformCredentialsSource(metadata.credentialsSource),
    distribution: metadata.distribution && transformDistribution(metadata.distribution),
@@ -94,6 +95,7 @@ const buildModeToGraphQLBuildMode: Record<BuildMode, GraphQLBuildMode> = {
  [BuildMode.BUILD]: GraphQLBuildMode.Build,
  [BuildMode.CUSTOM]: GraphQLBuildMode.Custom,
  [BuildMode.RESIGN]: GraphQLBuildMode.Resign,
+  [BuildMode.REPACK]: GraphQLBuildMode.Repack,
 };

 export function transformBuildMode(buildMode: BuildMode): GraphQLBuildMode {
@@ -24,7 +24,7 @@ import {
 export async function createIosContextAsync(
  ctx: CommonContext<Platform.IOS>
 ): Promise<IosBuildContext> {
-  const { buildProfile } = ctx;
+  const { buildProfile, env } = ctx;

  if (ctx.workflow === Workflow.MANAGED) {
    await ensureBundleIdentifierIsDefinedForManagedProjectAsync(ctx);
@@ -47,7 +47,7 @@ export async function createIosContextAsync(
    projectDir: ctx.projectDir,
    exp: ctx.exp,
    xcodeBuildContext,
-    env: buildProfile.env,
+    env,
    vcsClient: ctx.vcsClient,
  });
  const applicationTarget = findApplicationTarget(targets);
@@ -77,7 +77,7 @@ export async function prepareIosBuildAsync(
  return await prepareBuildRequestForPlatformAsync({
    ctx,
    ensureCredentialsAsync: async (ctx: BuildContext<Platform.IOS>) => {
-      return ensureIosCredentialsAsync(ctx, ctx.ios.targets);
+      return await ensureIosCredentialsAsync(ctx, ctx.ios.targets);
    },
    syncProjectConfigurationAsync: async () => {
      await syncProjectConfigurationAsync({
@@ -89,6 +89,7 @@ export async function prepareIosBuildAsync(
            ? false
            : ctx.buildProfile.autoIncrement,
        vcsClient: ctx.vcsClient,
+        env: ctx.env,
      });
    },
    prepareJobAsync: async (
@@ -16,7 +16,6 @@ export function transformJob(job: Ios.Job): IosJobInput {
    triggeredBy: transformBuildTrigger(job.triggeredBy),
    projectArchive: transformProjectArchive(job.projectArchive),
    projectRootDirectory: nullthrows(job.projectRootDirectory),
-    releaseChannel: job.releaseChannel,
    updates: job.updates,
    secrets: job.secrets ? transformIosSecrets(job.secrets) : undefined,
    builderEnvironment: job.builderEnvironment,
@@ -48,6 +48,15 @@ export async function prepareJobAsync(
    ? getCustomBuildConfigPathForJob(buildProfile.config)
    : undefined;

+  let buildMode;
+  if (ctx.repack) {
+    buildMode = BuildMode.REPACK;
+  } else if (buildProfile.config) {
+    buildMode = BuildMode.CUSTOM;
+  } else {
+    buildMode = BuildMode.BUILD;
+  }
+
  const job: Ios.Job = {
    type: ctx.workflow,
    platform: Platform.IOS,
@@ -62,7 +71,6 @@ export async function prepareJobAsync(
      bundler: buildProfile.bundler,
      cocoapods: buildProfile.cocoapods,
      fastlane: buildProfile.fastlane,
-      expoCli: buildProfile.expoCli,
      env: buildProfile.env,
    },
    cache: {
@@ -73,7 +81,6 @@ export async function prepareJobAsync(
    secrets: {
      buildCredentials,
    },
-    releaseChannel: buildProfile.releaseChannel,
    updates: { channel: buildProfile.channel },
    developmentClient: buildProfile.developmentClient,
    simulator: buildProfile.simulator,
@@ -90,13 +97,18 @@ export async function prepareJobAsync(
    experimental: {
      prebuildCommand: buildProfile.prebuildCommand,
    },
-    mode: buildProfile.config ? BuildMode.CUSTOM : BuildMode.BUILD,
+    mode: buildMode,
    triggeredBy: BuildTrigger.EAS_CLI,
    ...(maybeCustomBuildConfigPath && {
      customBuildConfig: {
        path: maybeCustomBuildConfigPath,
      },
    }),
+    ...(ctx.repack && {
+      customBuildConfig: {
+        path: '__eas/repack.yml',
+      },
+    }),
    loggerLevel: ctx.loggerLevel,
  };
  return sanitizeBuildJob(job) as Ios.Job;
@@ -1,5 +1,5 @@
 import { ExpoConfig } from '@expo/config';
-import { Platform, Workflow } from '@expo/eas-build-job';
+import { Env, Platform, Workflow } from '@expo/eas-build-job';
 import { IosVersionAutoIncrement } from '@expo/eas-json';

 import { BumpStrategy, bumpVersionAsync, bumpVersionInAppJsonAsync } from './version';
@@ -15,19 +15,21 @@ export async function syncProjectConfigurationAsync({
  targets,
  localAutoIncrement,
  vcsClient,
+  env,
 }: {
  projectDir: string;
  exp: ExpoConfig;
  targets: Target[];
  localAutoIncrement?: IosVersionAutoIncrement;
  vcsClient: Client;
+  env: Env | undefined;
 }): Promise<void> {
  const workflow = await resolveWorkflowAsync(projectDir, Platform.IOS, vcsClient);
  const versionBumpStrategy = resolveVersionBumpStrategy(localAutoIncrement ?? false);

  if (workflow === Workflow.GENERIC) {
    if (isExpoUpdatesInstalled(projectDir)) {
-      await syncUpdatesConfigurationAsync(vcsClient, projectDir, exp);
+      await syncUpdatesConfigurationAsync({ vcsClient, projectDir, exp, workflow, env });
    }
    await bumpVersionAsync({ projectDir, exp, bumpStrategy: versionBumpStrategy, targets });
  } else {
@@ -6,7 +6,7 @@ import semver from 'semver';
 import { ora } from '../ora';

 const PLUGIN_PACKAGE_NAME = 'eas-cli-local-build-plugin';
-const PLUGIN_PACKAGE_VERSION = '1.0.96';
+const PLUGIN_PACKAGE_VERSION = '1.0.131';

 export enum LocalBuildMode {
  /**
@@ -39,7 +39,8 @@ export interface LocalBuildOptions {
 export async function runLocalBuildAsync(
  job: Job,
  metadata: Metadata,
-  options: LocalBuildOptions
+  options: LocalBuildOptions,
+  env: Record<string, string>
 ): Promise<void> {
  const { command, args } = await getCommandAndArgsAsync(job, metadata);
  let spinner;
@@ -57,6 +58,7 @@ export async function runLocalBuildAsync(
    const spawnPromise = spawnAsync(command, args, {
      stdio: options.verbose ? 'inherit' : 'pipe',
      env: {
+        ...env,
        ...process.env,
        EAS_LOCAL_BUILD_WORKINGDIR: options.workingdir ?? process.env.EAS_LOCAL_BUILD_WORKINGDIR,
        ...(options.skipCleanup || options.skipNativeBuild
@@ -1,4 +1,4 @@
-import { Metadata, Platform, sanitizeMetadata } from '@expo/eas-build-job';
+import { FingerprintSource, Metadata, Platform, sanitizeMetadata } from '@expo/eas-build-job';
 import { IosEnterpriseProvisioning } from '@expo/eas-json';
 import fs from 'fs-extra';
 import resolveFrom from 'resolve-from';
@@ -9,26 +9,19 @@ import { maybeResolveVersionsAsync as maybeResolveIosVersionsAsync } from './ios
 import { LocalBuildMode } from './local';
 import { BuildDistributionType } from './types';
 import Log from '../log';
-import {
-  getUsername,
-  isClassicUpdatesSupportedAsync,
-  isExpoUpdatesInstalled,
-} from '../project/projectUtils';
-import { resolveRuntimeVersionAsync } from '../project/resolveRuntimeVersionAsync';
-import {
-  readChannelSafelyAsync as readAndroidChannelSafelyAsync,
-  readReleaseChannelSafelyAsync as readAndroidReleaseChannelSafelyAsync,
-} from '../update/android/UpdatesModule';
-import {
-  readChannelSafelyAsync as readIosChannelSafelyAsync,
-  readReleaseChannelSafelyAsync as readIosReleaseChannelSafelyAsync,
-} from '../update/ios/UpdatesModule';
+import { getUsername, isExpoUpdatesInstalled } from '../project/projectUtils';
+import { readChannelSafelyAsync as readAndroidChannelSafelyAsync } from '../update/android/UpdatesModule';
+import { readChannelSafelyAsync as readIosChannelSafelyAsync } from '../update/ios/UpdatesModule';
 import { easCliVersion } from '../utils/easCli';

 export async function collectMetadataAsync<T extends Platform>(
-  ctx: BuildContext<T>
+  ctx: BuildContext<T>,
+  runtimeMetadata: {
+    runtimeVersion?: string | undefined;
+    fingerprintSource?: FingerprintSource | undefined;
+  }
 ): Promise<Metadata> {
-  const channelOrReleaseChannel = await resolveChannelOrReleaseChannelAsync(ctx);
+  const channelObject = await resolveChannelAsync(ctx);
  const distribution = ctx.buildProfile.distribution ?? BuildDistributionType.STORE;
  const metadata: Metadata = {
    trackingContext: ctx.analyticsEventProperties,
@@ -37,9 +30,10 @@ export async function collectMetadataAsync<T extends Platform>(
    workflow: ctx.workflow,
    credentialsSource: ctx.buildProfile.credentialsSource,
    sdkVersion: ctx.exp.sdkVersion,
-    runtimeVersion: (await resolveRuntimeVersionAsync(ctx)) ?? undefined,
+    runtimeVersion: runtimeMetadata?.runtimeVersion,
+    fingerprintSource: runtimeMetadata?.fingerprintSource,
    reactNativeVersion: await getReactNativeVersionAsync(ctx.projectDir),
-    ...channelOrReleaseChannel,
+    ...channelObject,
    distribution,
    appName: ctx.exp.name,
    appIdentifier: resolveAppIdentifier(ctx),
@@ -66,6 +60,7 @@ export async function collectMetadataAsync<T extends Platform>(
    requiredPackageManager: ctx.requiredPackageManager ?? undefined,
    selectedImage: ctx.buildProfile.image,
    customNodeVersion: ctx.buildProfile.node,
+    environment: ctx.buildProfile.environment,
    simulator: 'simulator' in ctx.buildProfile && ctx.buildProfile.simulator,
  };
  return sanitizeMetadata(metadata);
@@ -117,9 +112,9 @@ function resolveAppIdentifier<T extends Platform>(ctx: BuildContext<T>): string
  }
 }

-async function resolveChannelOrReleaseChannelAsync<T extends Platform>(
+async function resolveChannelAsync<T extends Platform>(
  ctx: BuildContext<T>
-): Promise<{ channel: string } | { releaseChannel: string } | null> {
+): Promise<{ channel: string } | null> {
  if (!isExpoUpdatesInstalled(ctx.projectDir)) {
    return null;
  }
@@ -131,31 +126,7 @@ async function resolveChannelOrReleaseChannelAsync<T extends Platform>(
    return { channel };
  }

-  if (!(await isClassicUpdatesSupportedAsync(ctx.projectDir))) {
-    return null;
-  }
-
-  if (ctx.buildProfile.releaseChannel) {
-    return { releaseChannel: ctx.buildProfile.releaseChannel };
-  }
-
-  const releaseChannel = await getNativeReleaseChannelAsync(ctx);
-  return { releaseChannel };
-}
-
-async function getNativeReleaseChannelAsync<T extends Platform>(
-  ctx: BuildContext<T>
-): Promise<string> {
-  switch (ctx.platform) {
-    case Platform.ANDROID: {
-      return (await readAndroidReleaseChannelSafelyAsync(ctx.projectDir)) ?? 'default';
-    }
-    case Platform.IOS: {
-      return (await readIosReleaseChannelSafelyAsync(ctx.projectDir)) ?? 'default';
-    }
-    default:
-      return 'default';
-  }
+  return null;
 }

 async function getNativeChannelAsync<T extends Platform>(
@@ -50,8 +50,9 @@ export async function listAndRenderBuildsOnAppAsync(
        }),
      promptOptions: {
        title: 'Load more builds?',
-        renderListItems: builds =>
-          renderPageOfBuilds({ builds, projectDisplayName, paginatedQueryOptions }),
+        renderListItems: builds => {
+          renderPageOfBuilds({ builds, projectDisplayName, paginatedQueryOptions });
+        },
      },
    });
  }
@@ -1,8 +1,7 @@
 import { ExpoConfig } from '@expo/config-types';
-import { Platform, Workflow } from '@expo/eas-build-job';
+import { Env, Platform, Workflow } from '@expo/eas-build-job';
 import {
  AppVersionSource,
-  BuildProfile,
  EasJson,
  EasJsonAccessor,
  EasJsonUtils,
@@ -19,6 +18,7 @@ import { BuildRequestSender, MaybeBuildFragment, waitForBuildEndAsync } from './
 import { ensureProjectConfiguredAsync } from './configure';
 import { BuildContext } from './context';
 import { createBuildContextAsync } from './createContext';
+import { evaluateConfigWithEnvVarsAsync } from './evaluateConfigWithEnvVarsAsync';
 import { prepareIosBuildAsync } from './ios/build';
 import { LocalBuildMode, LocalBuildOptions } from './local';
 import { ensureExpoDevClientInstalledForDevClientBuildsAsync } from './utils/devClient';
@@ -33,6 +33,7 @@ import {
  BuildFragment,
  BuildStatus,
  BuildWithSubmissionsFragment,
+  EnvironmentVariableEnvironment,
  SubmissionFragment,
 } from '../graphql/generated';
 import { BuildQuery } from '../graphql/queries/BuildQuery';
@@ -71,7 +72,6 @@ import {
 } from '../submit/submit';
 import { printSubmissionDetailsUrls } from '../submit/utils/urls';
 import { ensureEASUpdateIsConfiguredAsync } from '../update/configure';
-import { validateBuildProfileConfigMatchesProjectConfigAsync } from '../update/utils';
 import { Actor } from '../user/User';
 import { downloadAndMaybeExtractAppAsync } from '../utils/download';
 import { truthy } from '../utils/expodash/filter';
@@ -95,6 +95,9 @@ export interface BuildFlags {
  resourceClass?: ResourceClass;
  message?: string;
  buildLoggerLevel?: LoggerLevel;
+  freezeCredentials: boolean;
+  repack: boolean;
+  environment?: EnvironmentVariableEnvironment;
 }

 export async function runBuildAndSubmitAsync(
@@ -105,7 +108,9 @@ export async function runBuildAndSubmitAsync(
  flags: BuildFlags,
  actor: Actor,
  getDynamicPrivateProjectConfigAsync: DynamicConfigContextFn
-): Promise<void> {
+): Promise<{
+  buildIds: string[];
+}> {
  await vcsClient.ensureRepoExistsAsync();
  await ensureRepoIsCleanAsync(vcsClient, flags.nonInteractive);

@@ -126,39 +131,28 @@ export async function runBuildAndSubmitAsync(
    profileName: flags.profile ?? undefined,
    projectDir,
  });
-  Log.log(
-    `Loaded "env" configuration for the "${buildProfiles[0].profileName}" profile: ${
-      buildProfiles[0].profile.env
-        ? Object.keys(buildProfiles[0].profile.env).join(', ')
-        : 'no environment variables specified'
-    }. ${learnMore('https://docs.expo.dev/build-reference/variables/')}`
-  );

  for (const buildProfile of buildProfiles) {
    if (buildProfile.profile.image && ['default', 'stable'].includes(buildProfile.profile.image)) {
      Log.warn(
        `The "image" field in the build profile "${buildProfile.profileName}" is set to "${buildProfile.profile.image}". This tag is deprecated and will be removed in the future. Use other images or tags listed here: https://docs.expo.dev/build-reference/infrastructure/`
      );
-    }
-
-    if (
+    } else if (
      buildProfile.profile.image &&
      [
-        'macos-monterey-12.4-xcode-13.4',
-        'macos-monterey-12.3-xcode-13.3',
-        'macos-monterey-12.1-xcode-13.2',
-        'macos-ventura-13.4-xcode-14.3.1',
-        'macos-ventura-13.3-xcode-14.3',
-        'macos-monterey-12.6-xcode-14.2',
-        'macos-monterey-12.6-xcode-14.1',
-        'macos-monterey-12.6-xcode-14.0',
+        'ubuntu-20.04-jdk-11-ndk-r19c',
+        'ubuntu-20.04-jdk-8-ndk-r19c',
+        'ubuntu-20.04-jdk-11-ndk-r21e',
+        'ubuntu-20.04-jdk-8-ndk-r21e',
+        'ubuntu-22.04-jdk-8-ndk-r21e',
+        'ubuntu-20.04-jdk-11-ndk-r23b',
      ].includes(buildProfile.profile.image)
    ) {
      Log.warn(
        `The "image" field in the build profile "${buildProfile.profileName}" is set to "${
          buildProfile.profile.image
-        }". This image is using Xcode in version lower then 15. Apple's new requirement states that starting on April 29th, 2024, apps uploaded to App Store Connect must be built with Xcode 15 for iOS 17, iPadOS 17, tvOS 17, or watchOS 10. Start using Xcode 15 image today by setting "macos-sonoma-14.4-xcode-15.3" or "latest" as your image value. This image will be removed from EAS Build on May 29th, 2024. ${learnMore(
-          'https://expo.dev/changelog/2024/03-29-eas-build-upcoming-ios-images-updates'
+        }". This image is deprecated and will be removed on September 1st, 2024. ${learnMore(
+          'https://expo.dev/changelog/2024/07-12-eas-build-upcoming-android-images-updates'
        )}`
      );
    }
@@ -193,6 +187,21 @@ export async function runBuildAndSubmitAsync(

  for (const buildProfile of buildProfiles) {
    const platform = toAppPlatform(buildProfile.platform);
+
+    const { env } = await evaluateConfigWithEnvVarsAsync({
+      flags,
+      buildProfile: buildProfile.profile,
+      graphqlClient,
+      getProjectConfig: getDynamicPrivateProjectConfigAsync,
+      opts: { env: buildProfile.profile.env },
+    });
+
+    Log.log(
+      `Loaded "env" configuration for the "${buildProfile.profileName}" profile: ${
+        env ? Object.keys(env).join(', ') : 'no environment variables specified'
+      }. ${learnMore('https://docs.expo.dev/build-reference/variables/')}`
+    );
+
    const { build: maybeBuild, buildCtx } = await prepareAndStartBuildAsync({
      projectDir,
      flags,
@@ -205,6 +214,7 @@ export async function runBuildAndSubmitAsync(
      vcsClient,
      getDynamicPrivateProjectConfigAsync,
      customBuildConfigMetadata: customBuildConfigMetadataByPlatform[platform],
+      env,
    });
    if (maybeBuild) {
      startedBuilds.push({ build: maybeBuild, buildProfile });
@@ -213,7 +223,9 @@ export async function runBuildAndSubmitAsync(
  }

  if (flags.localBuildOptions.localBuildMode === LocalBuildMode.LOCAL_BUILD_PLUGIN) {
-    return;
+    return {
+      buildIds: startedBuilds.map(({ build }) => build.id),
+    };
  }

  if (flags.localBuildOptions.localBuildMode === LocalBuildMode.INTERNAL) {
@@ -250,9 +262,9 @@ export async function runBuildAndSubmitAsync(
        buildCtx: nullthrows(buildCtxByPlatform[startedBuild.build.platform]),
        moreBuilds: startedBuilds.length > 1,
        projectDir,
-        buildProfile: startedBuild.buildProfile.profile,
        submitProfile,
        nonInteractive: flags.nonInteractive,
+        selectedSubmitProfileName: flags.submitProfile,
      });
      startedBuild.build = await BuildQuery.withSubmissionsByIdAsync(
        graphqlClient,
@@ -269,14 +281,18 @@ export async function runBuildAndSubmitAsync(
  }

  if (flags.localBuildOptions.localBuildMode) {
-    return;
+    return {
+      buildIds: startedBuilds.map(({ build }) => build.id),
+    };
  }

  if (!flags.wait) {
    if (flags.json) {
      printJsonOnlyOutput(startedBuilds.map(buildInfo => buildInfo.build));
    }
-    return;
+    return {
+      buildIds: startedBuilds.map(({ build }) => build.id),
+    };
  }

  const { accountName } = Object.values(buildCtxByPlatform)[0];
@@ -317,6 +333,9 @@ export async function runBuildAndSubmitAsync(
    }
    exitWithNonZeroCodeIfSomeSubmissionsDidntFinish(completedSubmissions);
  }
+  return {
+    buildIds: startedBuilds.map(({ build }) => build.id),
+  };
 }

 async function prepareAndStartBuildAsync({
@@ -331,6 +350,7 @@ async function prepareAndStartBuildAsync({
  vcsClient,
  getDynamicPrivateProjectConfigAsync,
  customBuildConfigMetadata,
+  env,
 }: {
  projectDir: string;
  flags: BuildFlags;
@@ -343,6 +363,7 @@ async function prepareAndStartBuildAsync({
  vcsClient: Client;
  getDynamicPrivateProjectConfigAsync: DynamicConfigContextFn;
  customBuildConfigMetadata?: CustomBuildConfigMetadata;
+  env: Env;
 }): Promise<{ build: BuildFragment | undefined; buildCtx: BuildContext<Platform> }> {
  const buildCtx = await createBuildContextAsync({
    buildProfileName: buildProfile.profileName,
@@ -363,6 +384,9 @@ async function prepareAndStartBuildAsync({
    getDynamicPrivateProjectConfigAsync,
    customBuildConfigMetadata,
    buildLoggerLevel: flags.buildLoggerLevel,
+    freezeCredentials: flags.freezeCredentials,
+    repack: flags.repack,
+    env,
  });

  if (moreBuilds) {
@@ -375,12 +399,6 @@ async function prepareAndStartBuildAsync({
    );
  }

-  await validateBuildProfileConfigMatchesProjectConfigAsync(
-    buildCtx.exp,
-    buildProfile,
-    buildCtx.projectId,
-    flags.nonInteractive
-  );
  if (buildProfile.profile.channel) {
    await validateExpoUpdatesInstalledAsProjectDependencyAsync({
      exp: buildCtx.exp,
@@ -390,6 +408,7 @@ async function prepareAndStartBuildAsync({
      sdkVersion: buildCtx.exp.sdkVersion,
      nonInteractive: flags.nonInteractive,
      buildProfile,
+      env: buildProfile.profile.env,
    });
    if (isUsingEASUpdate(buildCtx.exp, buildCtx.projectId)) {
      const doesChannelExist = await doesChannelExistAsync(graphqlClient, {
@@ -442,16 +461,16 @@ async function prepareAndStartSubmissionAsync({
  buildCtx,
  moreBuilds,
  projectDir,
-  buildProfile,
  submitProfile,
+  selectedSubmitProfileName,
  nonInteractive,
 }: {
  build: BuildFragment;
  buildCtx: BuildContext<Platform>;
  moreBuilds: boolean;
  projectDir: string;
-  buildProfile: BuildProfile;
  submitProfile: SubmitProfile;
+  selectedSubmitProfileName?: string;
  nonInteractive: boolean;
 }): Promise<SubmissionFragment> {
  const platform = toPlatform(build.platform);
@@ -461,7 +480,7 @@ async function prepareAndStartSubmissionAsync({
    profile: submitProfile,
    archiveFlags: { id: build.id },
    nonInteractive,
-    env: buildProfile.env,
+    env: buildCtx.env,
    credentialsCtx: buildCtx.credentialsCtx,
    applicationIdentifier: buildCtx.android?.applicationId ?? buildCtx.ios?.bundleIdentifier,
    actor: buildCtx.user,
@@ -471,6 +490,7 @@ async function prepareAndStartSubmissionAsync({
    exp: buildCtx.exp,
    vcsClient: buildCtx.vcsClient,
    isVerboseFastlaneEnabled: false,
+    specifiedProfile: selectedSubmitProfileName,
  });

  if (moreBuilds) {
@@ -534,6 +554,7 @@ async function validateExpoUpdatesInstalledAsProjectDependencyAsync({
  buildProfile,
  nonInteractive,
  sdkVersion,
+  env,
 }: {
  exp: ExpoConfig;
  projectId: string;
@@ -542,6 +563,7 @@ async function validateExpoUpdatesInstalledAsProjectDependencyAsync({
  buildProfile: ProfileData<'build'>;
  nonInteractive: boolean;
  sdkVersion?: string;
+  env: Env | undefined;
 }): Promise<void> {
  if (isExpoUpdatesInstalledOrAvailable(projectDir, sdkVersion)) {
    return;
@@ -569,6 +591,7 @@ async function validateExpoUpdatesInstalledAsProjectDependencyAsync({
        projectDir,
        platform: RequestedPlatform.All,
        vcsClient,
+        env,
      });
      Log.withTick('Installed expo-updates and configured EAS Update.');
      throw new Error('Command must be re-run to pick up new updates configuration.');
@@ -39,6 +39,10 @@ export function formatGraphQLBuild(build: BuildFragment): string {
        }
      },
    },
+    {
+      label: 'Profile',
+      value: build.buildProfile,
+    },
    {
      label: 'Message',
      value: build.message,
@@ -51,10 +55,6 @@ export function formatGraphQLBuild(build: BuildFragment): string {
      label: 'Enterprise Provisioning',
      value: build.iosEnterpriseProvisioning?.toLowerCase(),
    },
-    {
-      label: 'Release Channel',
-      value: build.releaseChannel,
-    },
    {
      label: 'Channel',
      value: build.channel,
@@ -62,7 +62,9 @@ export function printBuildResults(builds: (BuildFragment | null)[]): void {
    assert(build, 'Build should be defined');
    printBuildResult(build);
  } else {
-    (builds.filter(i => i) as BuildFragment[]).forEach(build => printBuildResult(build));
+    (builds.filter(i => i) as BuildFragment[]).forEach(build => {
+      printBuildResult(build);
+    });
  }
 }

@@ -97,9 +99,9 @@ function printBuildResult(build: BuildFragment): void {
    // to the build details page and let people press the button to download there
    const qrcodeUrl =
      build.platform === AppPlatform.Ios ? getInternalDistributionInstallUrl(build) : logsUrl;
-    qrcodeTerminal.generate(qrcodeUrl, { small: true }, code =>
-      Log.log(`${indentString(code, 2)}\n`)
-    );
+    qrcodeTerminal.generate(qrcodeUrl, { small: true }, code => {
+      Log.log(`${indentString(code, 2)}\n`);
+    });
    Log.log(
      `${appPlatformEmojis[build.platform]} Open this link on your ${
        appPlatformDisplayNames[build.platform]
@@ -100,44 +100,22 @@ export type LocalFile = {
 };

 export async function makeProjectMetadataFileAsync(archivePath: string): Promise<LocalFile> {
-  const spinner = ora('Creating project metadata file');
-  const timerLabel = 'makeProjectMetadataFileAsync';
-  const timer = setTimeout(
-    () => {
-      spinner.start();
-    },
-    Log.isDebug ? 1 : 1000
-  );
-  startTimer(timerLabel);
-
+  await fs.mkdirp(getTmpDirectory());
  const metadataLocation = path.join(getTmpDirectory(), `${uuidv4()}-eas-build-metadata.json`);
  const archiveContent: string[] = [];

-  try {
-    await tar.list({
-      file: archivePath,
-      onentry: (entry: tar.ReadEntry) => {
-        if (entry.type === 'File' && !entry.path.includes('.git/')) {
-          archiveContent.push(entry.path);
-        }
-      },
-    });
+  await tar.list({
+    file: archivePath,
+    onentry: (entry: tar.ReadEntry) => {
+      if (entry.type === 'File' && !entry.path.includes('.git/')) {
+        archiveContent.push(entry.path);
+      }
+    },
+  });

-    await fs.writeJSON(metadataLocation, {
-      archiveContent,
-    });
-  } catch (e) {
-    clearTimeout(timer);
-    if (spinner.isSpinning) {
-      spinner.fail();
-    }
-    throw e;
-  }
-  clearTimeout(timer);
-
-  const duration = endTimer(timerLabel);
-  const prettyTime = formatMilliseconds(duration);
-  spinner.succeed(`Created project metadata file ${chalk.dim(prettyTime)}`);
+  await fs.writeJSON(metadataLocation, {
+    archiveContent,
+  });

  return { path: metadataLocation, size: await fs.stat(metadataLocation).then(stat => stat.size) };
 }
@@ -9,9 +9,9 @@ import Log, { learnMore } from '../log';
 import { isPNGAsync } from '../utils/image';

 export function checkNodeEnvVariable(ctx: CommonContext<Platform>): void {
-  if (ctx.buildProfile.env?.NODE_ENV === 'production') {
+  if (ctx.env?.NODE_ENV === 'production') {
    Log.warn(
-      'You set NODE_ENV=production in the build profile. Remember that it will be available during the entire build process. In particular, it will make yarn/npm install only production packages.'
+      'You set NODE_ENV=production in the build profile or environment variables. Remember that it will be available during the entire build process. In particular, it will make yarn/npm install only production packages.'
    );
    Log.newLine();
  }
@@ -17,7 +17,9 @@ import {

 describe(assertVersion, () => {
  it('throws if the branch mapping is not the correct version', () => {
-    expect(() => assertVersion(testChannelBasicInfo, 5)).toThrowError(BranchMappingValidationError);
+    expect(() => {
+      assertVersion(testChannelBasicInfo, 5);
+    }).toThrowError(BranchMappingValidationError);
  });
  it('asserts the correct version', () => {
    assertVersion(testChannelBasicInfo, 0);
@@ -28,7 +28,7 @@ import {
 */
 export class SelectChannel implements EASUpdateAction<UpdateChannelBasicInfoFragment | null> {
  constructor(
-    private options: {
+    private readonly options: {
      filterPredicate?: (channelInfo: UpdateChannelBasicInfoFragment) => boolean;
      printedType?: string;
      pageSize?: number;
@@ -91,8 +91,8 @@ export class SelectChannel implements EASUpdateAction<UpdateChannelBasicInfoFrag
      queryParams: QueryParams
    ): Promise<Connection<UpdateChannelBasicInfoFragment>> =>
      filterPredicate
-        ? this.filterQueryAsync(ctx, queryParams, filterPredicate)
-        : this.queryAsync(ctx, queryParams);
+        ? await this.filterQueryAsync(ctx, queryParams, filterPredicate)
+        : await this.queryAsync(ctx, queryParams);

    const getTitleAsync = async (channelInfo: UpdateChannelBasicInfoFragment): Promise<string> =>
      channelInfo.name;
@@ -89,7 +89,9 @@ export async function listAndRenderChannelsOnAppAsync(
        queryChannelsOnAppAsync(graphqlClient, { limit, offset, appId: projectId }),
      promptOptions: {
        title: 'Load more channels?',
-        renderListItems: channels => renderPageOfChannels(channels, paginatedQueryOptions),
+        renderListItems: channels => {
+          renderPageOfChannels(channels, paginatedQueryOptions);
+        },
      },
    });
  }
@@ -131,8 +133,9 @@ export async function listAndRenderBranchesAndUpdatesOnChannelAsync(
        }),
      promptOptions: {
        title: 'Load more channels?',
-        renderListItems: branches =>
-          renderPageOfBranchesOnChannel(channel, branches, paginatedQueryOptions),
+        renderListItems: branches => {
+          renderPageOfBranchesOnChannel(channel, branches, paginatedQueryOptions);
+        },
      },
    });
  }
@@ -1,5 +1,6 @@
 import { Command } from '@oclif/core';
 import { CombinedError } from '@urql/core';
+import chalk from 'chalk';
 import { GraphQLError } from 'graphql/error';
 import nullthrows from 'nullthrows';

@@ -186,13 +187,13 @@ export default abstract class EasCommand extends Command {
      action: `eas ${this.id}`,
    });

-    return this.runAsync();
+    return await this.runAsync();
  }

  // eslint-disable-next-line async-protect/async-suffix
  override async finally(err: Error): Promise<any> {
    await this.analytics.flushAsync();
-    return super.finally(err);
+    return await super.finally(err);
  }

  protected override catch(err: Error): Promise<any> {
@@ -200,7 +201,7 @@ export default abstract class EasCommand extends Command {
    if (err instanceof EasCommandError) {
      Log.error(err.message);
    } else if (err instanceof CombinedError && err?.graphQLErrors) {
-      const cleanMessage = err?.graphQLErrors
+      const cleanGQLErrorsMessage = err?.graphQLErrors
        .map((graphQLError: GraphQLError) => {
          const messageLine = graphQLError.message.replace('[GraphQL] ', '');
          const requestIdLine = graphQLError.extensions?.requestId
@@ -210,12 +211,21 @@ export default abstract class EasCommand extends Command {
          const defaultMsg = `${messageLine}${requestIdLine}`;

          if (graphQLError.extensions?.errorCode === 'UNAUTHORIZED_ERROR') {
-            return `You don't have the required permissions to perform this operation.\n\n${defaultMsg}`;
+            return `${chalk.bold(
+              `You don't have the required permissions to perform this operation.`
+            )}\n\nThis can sometimes happen if you are logged in as incorrect user.\nRun ${chalk.bold(
+              'eas whoami'
+            )} to check the username you are logged in as.\nRun ${chalk.bold(
+              'eas login'
+            )} to change the account.\n\nOriginal error message: ${defaultMsg}`;
          }

          return defaultMsg;
        })
        .join('\n');
+      const cleanMessage = err.networkError
+        ? `${cleanGQLErrorsMessage}\n${err.networkError.message}`
+        : cleanGQLErrorsMessage;
      Log.error(cleanMessage);
      baseMessage = BASE_GRAPHQL_ERROR_MESSAGE;
    } else {
@@ -55,6 +55,7 @@ describe(getProjectIdAsync, () => {
        ],
        isExpoAdmin: false,
        featureGates: {},
+        preferences: {},
      },
      authenticationInfo: { accessToken: 'fake', sessionSecret: null },
    });
@@ -79,6 +80,7 @@ describe(getProjectIdAsync, () => {
    jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
      id: '1234',
      fullName: '@notnotbrent/test',
+      name: 'test',
      slug: 'test',
      ownerAccount: { name: 'notnotbrent' } as any,
    });
@@ -99,6 +101,7 @@ describe(getProjectIdAsync, () => {
    jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
      id: '1234',
      fullName: '@notnotbrent/test',
+      name: 'test',
      slug: 'test',
      ownerAccount: { name: 'notnotbrent' } as any,
    });
@@ -123,6 +126,7 @@ describe(getProjectIdAsync, () => {
    jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
      id: '1234',
      fullName: '@totallybrent/test',
+      name: 'test',
      slug: 'test',
      ownerAccount: { name: 'totallybrent' } as any,
    });
@@ -171,6 +175,7 @@ describe(getProjectIdAsync, () => {
    jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
      id: '1234',
      fullName: '@totallybrent/test',
+      name: 'test',
      slug: 'test',
      ownerAccount: { name: 'totallybrent' } as any,
    });
@@ -195,6 +200,7 @@ describe(getProjectIdAsync, () => {
    jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
      id: '1234',
      fullName: '@notnotbrent/test',
+      name: 'test',
      slug: 'test',
      ownerAccount: { name: 'notnotbrent' } as any,
    });
@@ -264,6 +270,7 @@ describe(getProjectIdAsync, () => {
    jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
      id: '1234',
      fullName: '@notnotbrent/test',
+      name: 'test',
      slug: 'test',
      ownerAccount: { name: 'notnotbrent' } as any,
    });
@@ -38,7 +38,7 @@ export function createGraphqlClient(authInfo: {
          return !!(
            err &&
            !operation.context.noRetry &&
-            (err.networkError || err.graphQLErrors.some(e => e?.extensions?.isTransient))
+            (err.networkError ?? err.graphQLErrors.some(e => e?.extensions?.isTransient))
          );
        },
      }),
@@ -15,7 +15,11 @@ async function applyCliConfigAsync(projectDir: string): Promise<void> {
  const config = await EasJsonUtils.getCliConfigAsync(easJsonAccessor);
  if (config?.version && !semver.satisfies(easCliVersion, config.version)) {
    throw new Error(
-      `You are on eas-cli@${easCliVersion} which does not satisfy the CLI version constraint in eas.json (${config.version})`
+      `You are on eas-cli@${easCliVersion} which does not satisfy the CLI version constraint defined in eas.json (${
+        config.version
+      }).\n\nThis error probably means that you need update your eas-cli to a newer version.\nRun ${chalk.bold(
+        'npm install -g eas-cli'
+      )} to update the eas-cli to the latest version.`
    );
  }
 }
@@ -3,7 +3,7 @@ import { ExpoConfig } from '@expo/config-types';
 import { Env } from '@expo/eas-build-job';
 import chalk from 'chalk';

-import { createGraphqlClient } from './createGraphqlClient';
+import { ExpoGraphqlClient, createGraphqlClient } from './createGraphqlClient';
 import { findProjectRootAsync } from './findProjectDirAndVerifyProjectSetupAsync';
 import { AppQuery } from '../../../graphql/queries/AppQuery';
 import Log, { learnMore } from '../../../log';
@@ -87,6 +87,23 @@ export async function getProjectIdAsync(
  });
  const graphqlClient = createGraphqlClient(authenticationInfo);

+  const projectId = await validateOrSetProjectIdAsync({ exp, graphqlClient, actor, options });
+  return projectId;
+}
+
+export async function validateOrSetProjectIdAsync({
+  exp,
+  graphqlClient,
+  actor,
+  options,
+  cwd,
+}: {
+  exp: ExpoConfig;
+  graphqlClient: ExpoGraphqlClient;
+  actor: Actor;
+  options: { env?: Env; nonInteractive: boolean };
+  cwd?: string;
+}): Promise<string> {
  const localProjectId = exp.extra?.eas?.projectId;
  if (localProjectId) {
    if (typeof localProjectId !== 'string') {
@@ -146,7 +163,9 @@ export async function getProjectIdAsync(
    return localProjectId;
  }

-  const projectDir = await findProjectRootAsync();
+  const projectDir = await findProjectRootAsync({
+    cwd,
+  });
  if (!projectDir) {
    throw new Error('This command must be run inside a project directory.');
  }
@@ -1,5 +1,21 @@
 import { Flags } from '@oclif/core';

+import {
+  EnvironmentVariableEnvironment,
+  EnvironmentVariableScope,
+  EnvironmentVariableVisibility,
+} from '../graphql/generated';
+
+// NOTE: not exactly true, but, provided mapToLowercase and upperCaseAsync
+// are used in tandem, it saves on unnecessary typying in commands
+async function upperCaseAsync<T>(input: string): Promise<T> {
+  return input.toUpperCase() as T;
+}
+
+function mapToLowercase<T extends string>(options: T[]): T[] {
+  return options.map(option => option.toLowerCase()) as T[];
+}
+
 export const EasNonInteractiveAndJsonFlags = {
  json: Flags.boolean({
    description: 'Enable JSON output, non-JSON messages will be printed to stderr.',
@@ -10,6 +26,62 @@ export const EasNonInteractiveAndJsonFlags = {
  }),
 };

+export const EASEnvironmentFlag = {
+  environment: Flags.enum<EnvironmentVariableEnvironment>({
+    description: "Environment variable's environment",
+    parse: upperCaseAsync,
+    options: mapToLowercase([
+      EnvironmentVariableEnvironment.Development,
+      EnvironmentVariableEnvironment.Preview,
+      EnvironmentVariableEnvironment.Production,
+    ]),
+  }),
+};
+
+// NOTE: Used in build commands, should be replaced with EASEnvironmentFlag when
+// the feature is public
+export const EASEnvironmentFlagHidden = {
+  environment: Flags.enum<EnvironmentVariableEnvironment>({
+    description: "Environment variable's environment",
+    parse: upperCaseAsync,
+    hidden: true,
+    options: mapToLowercase([
+      EnvironmentVariableEnvironment.Development,
+      EnvironmentVariableEnvironment.Preview,
+      EnvironmentVariableEnvironment.Production,
+    ]),
+  }),
+};
+
+export const EASVariableFormatFlag = {
+  format: Flags.enum({
+    description: 'Output format',
+    options: ['long', 'short'],
+    default: 'short',
+  }),
+};
+
+export const EASVariableVisibilityFlag = {
+  visibility: Flags.enum<EnvironmentVariableVisibility>({
+    description: 'Visibility of the variable',
+    options: mapToLowercase([
+      EnvironmentVariableVisibility.Secret,
+      EnvironmentVariableVisibility.Sensitive,
+      EnvironmentVariableVisibility.Public,
+    ]),
+    parse: upperCaseAsync,
+  }),
+};
+
+export const EASVariableScopeFlag = {
+  scope: Flags.enum<EnvironmentVariableScope>({
+    description: 'Scope for the variable',
+    options: mapToLowercase([EnvironmentVariableScope.Shared, EnvironmentVariableScope.Project]),
+    parse: upperCaseAsync,
+    default: EnvironmentVariableScope.Project,
+  }),
+};
+
 export const EASNonInteractiveFlag = {
  'non-interactive': Flags.boolean({
    description: 'Run the command in non-interactive mode.',
@@ -63,7 +63,11 @@ export default class FeatureGating {
  }

  public static overrideKeyForEachInTest(key: FeatureGateKey, enabled: boolean): void {
-    beforeEach(() => FeatureGateTestOverrides.setOverride(key, enabled));
-    afterEach(() => FeatureGateTestOverrides.removeOverride(key));
+    beforeEach(() => {
+      FeatureGateTestOverrides.setOverride(key, enabled);
+    });
+    afterEach(() => {
+      FeatureGateTestOverrides.removeOverride(key);
+    });
  }
 }
@@ -1,7 +1,10 @@
-import { Flags } from '@oclif/core';
+import { Errors, Flags } from '@oclif/core';
+import chalk from 'chalk';

 import EasCommand from '../../commandUtils/EasCommand';
 import Log from '../../log';
+import { confirmAsync } from '../../prompts';
+import { getActorDisplayName } from '../../user/User';

 export default class AccountLogin extends EasCommand {
  static override description = 'log in with your Expo account';
@@ -13,11 +16,11 @@ export default class AccountLogin extends EasCommand {
      description: 'Login with SSO',
      char: 's',
      default: false,
-      hidden: true,
    }),
  };

  static override contextDefinition = {
+    ...this.ContextOptions.MaybeLoggedIn,
    ...this.ContextOptions.SessionManagment,
  };

@@ -26,7 +29,28 @@ export default class AccountLogin extends EasCommand {
      flags: { sso },
    } = await this.parse(AccountLogin);

-    const { sessionManager } = await this.getContextAsync(AccountLogin, { nonInteractive: false });
+    const {
+      sessionManager,
+      maybeLoggedIn: { actor },
+    } = await this.getContextAsync(AccountLogin, { nonInteractive: false });
+
+    if (sessionManager.getAccessToken()) {
+      throw new Error(
+        'EXPO_TOKEN is set in your environment, and is being used for all EAS authentication. To use username/password authentication, unset EXPO_TOKEN in your environment and re-run the command.'
+      );
+    }
+
+    if (actor) {
+      Log.warn(`You are already logged in as ${chalk.bold(getActorDisplayName(actor))}.`);
+
+      const shouldContinue = await confirmAsync({
+        message: 'Do you want to continue?',
+      });
+      if (!shouldContinue) {
+        Errors.error('Aborted', { exit: 1 });
+      }
+    }
+
    await sessionManager.showLoginPromptAsync({ sso });
    Log.log('Logged in');
  }
@@ -12,14 +12,19 @@ export default class AccountView extends EasCommand {

  static override contextDefinition = {
    ...this.ContextOptions.MaybeLoggedIn,
+    ...this.ContextOptions.SessionManagment,
  };

  async runAsync(): Promise<void> {
    const {
      maybeLoggedIn: { actor },
+      sessionManager,
    } = await this.getContextAsync(AccountView, { nonInteractive: true });
    if (actor) {
-      Log.log(chalk.green(getActorDisplayName(actor)));
+      const loggedInAs = sessionManager.getAccessToken()
+        ? `${getActorDisplayName(actor)} (authenticated using EXPO_TOKEN)`
+        : getActorDisplayName(actor);
+      Log.log(chalk.green(loggedInAs));

      // personal account is included, only show if more accounts that personal account
      // but do show personal account in list if there are more
@@ -10,7 +10,7 @@ export default class AnalyticsView extends EasCommand {
  async runAsync(): Promise<void> {
    const { STATUS: status } = (await this.parse(AnalyticsView)).args;
    if (status) {
-      setAnalyticsEnabledAsync(status === 'on');
+      await setAnalyticsEnabledAsync(status === 'on');
      Log.withTick(`${status === 'on' ? 'Enabling' : 'Disabling'} analytics.`);
    } else {
      const analyticsEnabled = await getAnalyticsEnabledAsync();
@@ -39,7 +39,7 @@ async function cancelBuildAsync(
      )
      .toPromise()
  );
-  return data.build!.cancel;
+  return data.build.cancel;
 }

 export async function selectBuildToCancelAsync(
@@ -74,14 +74,20 @@ export default class BuildConfigure extends EasCommand {
      if ([RequestedPlatform.Android, RequestedPlatform.All].includes(platform)) {
        const workflow = await resolveWorkflowAsync(projectDir, Platform.ANDROID, vcsClient);
        if (workflow === Workflow.GENERIC) {
-          await syncAndroidUpdatesConfigurationAsync(projectDir, exp);
+          await syncAndroidUpdatesConfigurationAsync({ projectDir, exp, workflow, env: undefined });
        }
      }

      if ([RequestedPlatform.Ios, RequestedPlatform.All].includes(platform)) {
        const workflow = await resolveWorkflowAsync(projectDir, Platform.IOS, vcsClient);
        if (workflow === Workflow.GENERIC) {
-          await syncIosUpdatesConfigurationAsync(vcsClient, projectDir, exp);
+          await syncIosUpdatesConfigurationAsync({
+            vcsClient,
+            projectDir,
+            exp,
+            workflow,
+            env: undefined,
+          });
        }
      }
    }
@@ -33,7 +33,7 @@ async function deleteBuildAsync(
      )
      .toPromise()
  );
-  return data.build!.deleteBuild;
+  return data.build.deleteBuild;
 }

 export async function selectBuildToDeleteAsync(
@@ -10,8 +10,8 @@ import path from 'path';
 import { LocalBuildMode } from '../../build/local';
 import { BuildFlags, runBuildAndSubmitAsync } from '../../build/runBuildAndSubmit';
 import EasCommand from '../../commandUtils/EasCommand';
-import { EasNonInteractiveAndJsonFlags } from '../../commandUtils/flags';
-import { StatuspageServiceName } from '../../graphql/generated';
+import { EASEnvironmentFlagHidden, EasNonInteractiveAndJsonFlags } from '../../commandUtils/flags';
+import { EnvironmentVariableEnvironment, StatuspageServiceName } from '../../graphql/generated';
 import Log, { link } from '../../log';
 import { RequestedPlatform, selectRequestedPlatformAsync } from '../../platform';
 import { selectAsync } from '../../prompts';
@@ -35,6 +35,9 @@ interface RawBuildFlags {
  'resource-class'?: ResourceClass;
  message?: string;
  'build-logger-level'?: LoggerLevel;
+  'freeze-credentials': boolean;
+  repack: boolean;
+  environment?: EnvironmentVariableEnvironment;
 }

 export default class Build extends EasCommand {
@@ -104,13 +107,24 @@ export default class Build extends EasCommand {
      description: 'The level of logs to output during the build process. Defaults to "info".',
      options: Object.values(LoggerLevel),
    }),
+    'freeze-credentials': Flags.boolean({
+      default: false,
+      description: 'Prevent the build from updating credentials in non-interactive mode',
+    }),
+    repack: Flags.boolean({
+      default: false,
+      hidden: true,
+      description: 'Use the golden dev client build repack flow as it works for onboarding',
+    }),
    ...EasNonInteractiveAndJsonFlags,
+    ...EASEnvironmentFlagHidden,
  };

  static override contextDefinition = {
    ...this.ContextOptions.LoggedIn,
    ...this.ContextOptions.DynamicProjectConfig,
    ...this.ContextOptions.ProjectDir,
+    ...this.ContextOptions.ProjectConfig,
    ...this.ContextOptions.Analytics,
    ...this.ContextOptions.Vcs,
  };
@@ -217,6 +231,9 @@ export default class Build extends EasCommand {
      resourceClass: flags['resource-class'],
      message,
      buildLoggerLevel: flags['build-logger-level'],
+      freezeCredentials: flags['freeze-credentials'],
+      repack: flags.repack,
+      environment: flags.environment,
    };
  }

@@ -105,6 +105,7 @@ export default class BuildInspect extends EasCommand {
          projectDir,
          {
            nonInteractive: false,
+            freezeCredentials: false,
            wait: true,
            clearCache: false,
            json: false,
@@ -119,6 +120,7 @@ export default class BuildInspect extends EasCommand {
              workingdir: tmpWorkingdir,
              artifactsDir: path.join(tmpWorkingdir, 'artifacts'),
            },
+            repack: false,
          },
          actor,
          getDynamicPrivateProjectConfigAsync
@@ -77,6 +77,7 @@ export default class BuildInternal extends EasCommand {
        requestedPlatform: flags.platform as RequestedPlatform,
        profile: flags.profile,
        nonInteractive: true,
+        freezeCredentials: false,
        wait: false,
        clearCache: false,
        json: true,
@@ -85,6 +86,7 @@ export default class BuildInternal extends EasCommand {
          localBuildMode: LocalBuildMode.INTERNAL,
        },
        submitProfile: flags['auto-submit-with-profile'] ?? flags.profile,
+        repack: false,
      },
      actor,
      getDynamicPrivateProjectConfigAsync
@@ -21,34 +21,47 @@ export default class BuildList extends EasCommand {

  static override flags = {
    platform: Flags.enum({
-      options: [RequestedPlatform.All, RequestedPlatform.Android, RequestedPlatform.Ios],
+      options: Object.values(RequestedPlatform),
+      char: 'p',
    }),
    status: Flags.enum({
-      options: [
-        BuildStatus.NEW,
-        BuildStatus.IN_QUEUE,
-        BuildStatus.IN_PROGRESS,
-        BuildStatus.PENDING_CANCEL,
-        BuildStatus.ERRORED,
-        BuildStatus.FINISHED,
-        BuildStatus.CANCELED,
-      ],
+      options: Object.values(BuildStatus),
+      description: 'Filter only builds with the specified status',
    }),
    distribution: Flags.enum({
-      options: [
-        BuildDistributionType.STORE,
-        BuildDistributionType.INTERNAL,
-        BuildDistributionType.SIMULATOR,
-      ],
+      options: Object.values(BuildDistributionType),
+      description: 'Filter only builds with the specified distribution type',
    }),
    channel: Flags.string(),
-    appVersion: Flags.string(),
-    appBuildVersion: Flags.string(),
-    sdkVersion: Flags.string(),
-    runtimeVersion: Flags.string(),
-    appIdentifier: Flags.string(),
-    buildProfile: Flags.string(),
-    gitCommitHash: Flags.string(),
+    'app-version': Flags.string({
+      aliases: ['appVersion'],
+      description: 'Filter only builds created with the specified main app version',
+    }),
+    'app-build-version': Flags.string({
+      aliases: ['appBuildVersion'],
+      description: 'Filter only builds created with the specified app build version',
+    }),
+    'sdk-version': Flags.string({
+      aliases: ['sdkVersion'],
+      description: 'Filter only builds created with the specified Expo SDK version',
+    }),
+    'runtime-version': Flags.string({
+      aliases: ['runtimeVersion'],
+      description: 'Filter only builds created with the specified runtime version',
+    }),
+    'app-identifier': Flags.string({
+      aliases: ['appIdentifier'],
+      description: 'Filter only builds created with the specified app identifier',
+    }),
+    'build-profile': Flags.string({
+      char: 'e',
+      aliases: ['profile', 'buildProfile'],
+      description: 'Filter only builds created with the specified build profile',
+    }),
+    'git-commit-hash': Flags.string({
+      aliases: ['gitCommitHash'],
+      description: 'Filter only builds created with the specified git commit hash',
+    }),
    ...EasPaginatedQueryFlags,
    limit: getLimitFlagWithCustomValues({ defaultTo: 10, limit: BUILDS_LIMIT }),
    ...EasNonInteractiveAndJsonFlags,
@@ -109,13 +122,13 @@ export default class BuildList extends EasCommand {
        status: graphqlBuildStatus,
        distribution: graphqlBuildDistribution,
        channel: flags.channel,
-        appVersion: flags.appVersion,
-        appBuildVersion: flags.appBuildVersion,
-        sdkVersion: flags.sdkVersion,
-        runtimeVersion: flags.runtimeVersion,
-        appIdentifier: flags.appIdentifier,
-        buildProfile: flags.buildProfile,
-        gitCommitHash: flags.gitCommitHash,
+        appVersion: flags['app-version'],
+        appBuildVersion: flags['app-build-version'],
+        sdkVersion: flags['sdk-version'],
+        runtimeVersion: flags['runtime-version'],
+        appIdentifier: flags['app-identifier'],
+        buildProfile: flags['build-profile'],
+        gitCommitHash: flags['git-commit-hash'],
        simulator: flags.simulator,
      },
      paginatedQueryOptions,
@@ -6,13 +6,14 @@ import chalk from 'chalk';

 import { handleDeprecatedEasJsonAsync } from '.';
 import { waitForBuildEndAsync } from '../../build/build';
+import { evaluateConfigWithEnvVarsAsync } from '../../build/evaluateConfigWithEnvVarsAsync';
 import { ensureIosCredentialsForBuildResignAsync } from '../../build/ios/credentials';
 import { prepareCredentialsToResign } from '../../build/ios/prepareJob';
 import { listAndSelectBuildOnAppAsync } from '../../build/queries';
 import { printBuildResults, printLogsUrls } from '../../build/utils/printBuildInfo';
 import EasCommand from '../../commandUtils/EasCommand';
 import { ExpoGraphqlClient } from '../../commandUtils/context/contextUtils/createGraphqlClient';
-import { EasNonInteractiveAndJsonFlags } from '../../commandUtils/flags';
+import { EASEnvironmentFlagHidden, EasNonInteractiveAndJsonFlags } from '../../commandUtils/flags';
 import { EasPaginatedQueryFlags } from '../../commandUtils/pagination';
 import { CredentialsContext } from '../../credentials/context';
 import {
@@ -21,6 +22,7 @@ import {
  BuildStatus,
  BuildWorkflow,
  DistributionType,
+  EnvironmentVariableEnvironment,
  IosJobOverridesInput,
  ProjectArchiveSourceType,
  StatuspageServiceName,
@@ -42,9 +44,11 @@ interface BuildResignFlags {
  offset?: number;
  limit?: number;
  platform?: Platform;
-  profile?: string;
+  targetProfile?: string;
+  sourceProfile?: string;
  maybeBuildId?: string;
  wait: boolean;
+  environment?: EnvironmentVariableEnvironment;
 }
 interface RawBuildResignFlags {
  json: boolean;
@@ -52,9 +56,11 @@ interface RawBuildResignFlags {
  offset: number | undefined;
  limit: number | undefined;
  platform: 'android' | 'ios' | undefined;
-  profile: string | undefined;
+  'target-profile': string | undefined;
+  'source-profile': string | undefined;
  wait: boolean;
  id: string | undefined;
+  environment: EnvironmentVariableEnvironment | undefined;
 }

 export default class BuildResign extends EasCommand {
@@ -65,10 +71,16 @@ export default class BuildResign extends EasCommand {
      char: 'p',
      options: ['android', 'ios'],
    }),
-    profile: Flags.string({
+    'target-profile': Flags.string({
      char: 'e',
      description:
-        'Name of the build profile from eas.json. Defaults to "production" if defined in eas.json.',
+        'Name of the target build profile from eas.json. Credentials and environment variables from this profile will be used when re-signing. Defaults to "production" if defined in eas.json.',
+      helpValue: 'PROFILE_NAME',
+      aliases: ['profile'],
+    }),
+    'source-profile': Flags.string({
+      description:
+        'Name of the source build profile from eas.json. Used to filter builds eligible for re-signing.',
      helpValue: 'PROFILE_NAME',
    }),
    wait: Flags.boolean({
@@ -81,6 +93,7 @@ export default class BuildResign extends EasCommand {
    }),
    ...EasPaginatedQueryFlags,
    ...EasNonInteractiveAndJsonFlags,
+    ...EASEnvironmentFlagHidden,
  };

  static override contextDefinition = {
@@ -130,12 +143,28 @@ export default class BuildResign extends EasCommand {
    const buildProfile = await EasJsonUtils.getBuildProfileAsync(
      easJsonAccessor,
      platform,
-      flags.profile ?? 'production'
+      flags.targetProfile ?? 'production'
    );
-    const { exp, projectId } = await getDynamicPrivateProjectConfigAsync({ env: buildProfile.env });
+
+    const { exp, projectId, env } = await evaluateConfigWithEnvVarsAsync({
+      flags,
+      buildProfile,
+      graphqlClient,
+      getProjectConfig: getDynamicPrivateProjectConfigAsync,
+      opts: { env: buildProfile.env },
+    });
+
    const account = await getOwnerAccountForProjectIdAsync(graphqlClient, projectId);
    const build = await this.ensureBuildSelectedAsync(
-      { graphqlClient, projectId, platform, nonInteractive, limit, offset },
+      {
+        graphqlClient,
+        projectId,
+        platform,
+        nonInteractive,
+        limit,
+        offset,
+        buildProfile: flags.sourceProfile,
+      },
      maybeBuild
    );
    const credentialsCtx = new CredentialsContext({
@@ -145,7 +174,7 @@ export default class BuildResign extends EasCommand {
      user: actor,
      graphqlClient,
      analytics,
-      env: buildProfile.env,
+      env,
      easJsonCliConfig,
      vcsClient,
    });
@@ -165,7 +194,7 @@ export default class BuildResign extends EasCommand {
      projectDir,
      exp,
      xcodeBuildContext,
-      env: buildProfile.env,
+      env,
      vcsClient,
    });
    const credentialsResult = await ensureIosCredentialsForBuildResignAsync(
@@ -228,9 +257,11 @@ export default class BuildResign extends EasCommand {
      offset: flags.offset,
      limit: flags.limit,
      platform: flags.platform as Platform | undefined,
-      profile: flags.profile,
+      sourceProfile: flags['source-profile'],
+      targetProfile: flags['target-profile'],
      maybeBuildId: flags.id,
      wait: flags.wait,
+      environment: flags.environment,
    };
  }

@@ -242,6 +273,7 @@ export default class BuildResign extends EasCommand {
      nonInteractive,
      limit,
      offset,
+      buildProfile,
    }: {
      graphqlClient: ExpoGraphqlClient;
      projectId: string;
@@ -249,6 +281,7 @@ export default class BuildResign extends EasCommand {
      nonInteractive: boolean;
      limit?: number;
      offset?: number;
+      buildProfile?: string;
    },
    maybeBuild?: BuildFragment
  ): Promise<BuildFragment> {
@@ -268,6 +301,7 @@ export default class BuildResign extends EasCommand {
        distribution: DistributionType.Internal,
        platform: toAppPlatform(platform),
        status: BuildStatus.Finished,
+        buildProfile,
      },
    });
    if (!build) {
@@ -3,8 +3,12 @@ import { EasJsonAccessor } from '@expo/eas-json';
 import { Flags } from '@oclif/core';
 import chalk from 'chalk';

+import { evaluateConfigWithEnvVarsAsync } from '../../../build/evaluateConfigWithEnvVarsAsync';
 import EasCommand from '../../../commandUtils/EasCommand';
-import { EasNonInteractiveAndJsonFlags } from '../../../commandUtils/flags';
+import {
+  EASEnvironmentFlagHidden,
+  EasNonInteractiveAndJsonFlags,
+} from '../../../commandUtils/flags';
 import { AppVersionQuery } from '../../../graphql/queries/AppVersionQuery';
 import { toAppPlatform } from '../../../graphql/types/AppPlatform';
 import Log from '../../../log';
@@ -31,6 +35,7 @@ export default class BuildVersionGetView extends EasCommand {
        'Name of the build profile from eas.json. Defaults to "production" if defined in eas.json.',
      helpValue: 'PROFILE_NAME',
    }),
+    ...EASEnvironmentFlagHidden,
    ...EasNonInteractiveAndJsonFlags,
  };

@@ -74,8 +79,12 @@ export default class BuildVersionGetView extends EasCommand {
    });
    const results: { [key in Platform]?: string } = {};
    for (const { profile, platform } of buildProfiles) {
-      const { exp, projectId } = await getDynamicPrivateProjectConfigAsync({
-        env: profile.env,
+      const { exp, projectId, env } = await evaluateConfigWithEnvVarsAsync({
+        flags,
+        buildProfile: profile,
+        graphqlClient,
+        getProjectConfig: getDynamicPrivateProjectConfigAsync,
+        opts: { env: profile.env },
      });

      validateAppConfigForRemoteVersionSource(exp, platform);
@@ -88,6 +97,8 @@ export default class BuildVersionGetView extends EasCommand {
        buildProfile: profile,
        platform,
        vcsClient,
+        nonInteractive: flags['non-interactive'],
+        env,
      });
      const remoteVersions = await AppVersionQuery.latestVersionAsync(
        graphqlClient,
@@ -4,7 +4,9 @@ import { EasJsonAccessor, EasJsonUtils } from '@expo/eas-json';
 import { Flags } from '@oclif/core';
 import chalk from 'chalk';

+import { evaluateConfigWithEnvVarsAsync } from '../../../build/evaluateConfigWithEnvVarsAsync';
 import EasCommand from '../../../commandUtils/EasCommand';
+import { EASEnvironmentFlagHidden } from '../../../commandUtils/flags';
 import { AppVersionMutation } from '../../../graphql/mutations/AppVersionMutation';
 import { AppVersionQuery } from '../../../graphql/queries/AppVersionQuery';
 import { toAppPlatform } from '../../../graphql/types/AppPlatform';
@@ -35,6 +37,7 @@ export default class BuildVersionSetView extends EasCommand {
        'Name of the build profile from eas.json. Defaults to "production" if defined in eas.json.',
      helpValue: 'PROFILE_NAME',
    }),
+    ...EASEnvironmentFlagHidden,
  };

  static override contextDefinition = {
@@ -64,7 +67,13 @@ export default class BuildVersionSetView extends EasCommand {
      flags.profile ?? undefined
    );

-    const { exp, projectId } = await getDynamicPrivateProjectConfigAsync({ env: profile.env });
+    const { exp, projectId, env } = await evaluateConfigWithEnvVarsAsync({
+      flags,
+      buildProfile: profile,
+      graphqlClient,
+      getProjectConfig: getDynamicPrivateProjectConfigAsync,
+      opts: { env: profile.env },
+    });
    const displayName = await getDisplayNameForProjectIdAsync(graphqlClient, projectId);

    validateAppConfigForRemoteVersionSource(exp, platform);
@@ -77,6 +86,8 @@ export default class BuildVersionSetView extends EasCommand {
      buildProfile: profile,
      platform,
      vcsClient,
+      nonInteractive: false,
+      env,
    });
    const remoteVersions = await AppVersionQuery.latestVersionAsync(
      graphqlClient,
@@ -5,8 +5,10 @@ import { Flags } from '@oclif/core';
 import chalk from 'chalk';

 import { updateNativeVersionsAsync as updateAndroidNativeVersionsAsync } from '../../../build/android/version';
+import { evaluateConfigWithEnvVarsAsync } from '../../../build/evaluateConfigWithEnvVarsAsync';
 import { updateNativeVersionsAsync as updateIosNativeVersionsAsync } from '../../../build/ios/version';
 import EasCommand from '../../../commandUtils/EasCommand';
+import { EASEnvironmentFlagHidden } from '../../../commandUtils/flags';
 import { AppVersionQuery } from '../../../graphql/queries/AppVersionQuery';
 import { toAppPlatform } from '../../../graphql/types/AppPlatform';
 import Log from '../../../log';
@@ -54,6 +56,7 @@ export default class BuildVersionSyncView extends EasCommand {
        'Name of the build profile from eas.json. Defaults to "production" if defined in eas.json.',
      helpValue: 'PROFILE_NAME',
    }),
+    ...EASEnvironmentFlagHidden,
  };

  static override contextDefinition = {
@@ -87,8 +90,12 @@ export default class BuildVersionSyncView extends EasCommand {
      projectDir,
    });
    for (const profileInfo of buildProfiles) {
-      const { exp, projectId } = await getDynamicPrivateProjectConfigAsync({
-        env: profileInfo.profile.env,
+      const { exp, projectId, env } = await evaluateConfigWithEnvVarsAsync({
+        flags,
+        buildProfile: profileInfo.profile,
+        graphqlClient,
+        getProjectConfig: getDynamicPrivateProjectConfigAsync,
+        opts: { env: profileInfo.profile.env },
      });

      validateAppConfigForRemoteVersionSource(exp, profileInfo.platform);
@@ -102,6 +109,8 @@ export default class BuildVersionSyncView extends EasCommand {
        buildProfile: profileInfo.profile,
        platform: profileInfo.platform,
        vcsClient,
+        nonInteractive: false,
+        env,
      });
      const remoteVersions = await AppVersionQuery.latestVersionAsync(
        graphqlClient,
@@ -127,7 +136,7 @@ export default class BuildVersionSyncView extends EasCommand {
        continue;
      }
      if (profileInfo.platform === Platform.ANDROID) {
-        this.syncAndroidAsync({
+        await this.syncAndroidAsync({
          projectDir,
          exp,
          profile: profileInfo.profile as BuildProfile<Platform.ANDROID>,
@@ -136,7 +145,7 @@ export default class BuildVersionSyncView extends EasCommand {
          vcsClient,
        });
      } else {
-        this.syncIosAsync({
+        await this.syncIosAsync({
          projectDir,
          exp,
          profile: profileInfo.profile as BuildProfile<Platform.IOS>,
@@ -198,7 +207,7 @@ export default class BuildVersionSyncView extends EasCommand {
    if (workflow === Workflow.GENERIC) {
      const buildGradle = await getAppBuildGradleAsync(projectDir);
      const isMultiFlavor =
-        buildGradle.android?.productFlavors || buildGradle.android?.flavorDimensions;
+        buildGradle.android?.productFlavors ?? buildGradle.android?.flavorDimensions;
      if (isMultiFlavor) {
        throw new Error(
          "Versions in native code can't be automatically synced in multi-flavor Android projects. If you are using EAS Build with app version source set to remote, the correct values will be injected at the build time."
@@ -117,7 +117,7 @@ export default class ChannelRollout extends EasCommand {
      required: false,
    }),
    'private-key-path': Flags.string({
-      description: `File containing the PEM-encoded private key corresponding to the certificate in expo-updates' configuration. Defaults to a file named "private-key.pem" in the certificate's directory.`,
+      description: `File containing the PEM-encoded private key corresponding to the certificate in expo-updates' configuration. Defaults to a file named "private-key.pem" in the certificate's directory. Only relevant if you are using code signing: https://docs.expo.dev/eas-update/code-signing/`,
      required: false,
    }),
    ...EasNonInteractiveAndJsonFlags,
@@ -125,6 +125,7 @@ export default class ChannelRollout extends EasCommand {

  static override contextDefinition = {
    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.Vcs,
    ...this.ContextOptions.LoggedIn,
  };

@@ -133,6 +134,7 @@ export default class ChannelRollout extends EasCommand {
    const argsAndFlags = this.sanitizeArgsAndFlags({ ...flags, ...args });
    const {
      privateProjectConfig: { exp, projectId, projectDir },
+      vcsClient,
      loggedIn: { graphqlClient },
    } = await this.getContextAsync(ChannelRollout, {
      nonInteractive: argsAndFlags.nonInteractive,
@@ -146,6 +148,7 @@ export default class ChannelRollout extends EasCommand {
      nonInteractive: argsAndFlags.nonInteractive,
      graphqlClient,
      app,
+      vcsClient,
    };
    if (argsAndFlags.nonInteractive) {
      await new NonInteractiveRollout(argsAndFlags).runAsync(ctx);
@@ -4,8 +4,10 @@ import { EasJsonAccessor, EasJsonUtils } from '@expo/eas-json';
 import { Flags } from '@oclif/core';
 import chalk from 'chalk';

+import { evaluateConfigWithEnvVarsAsync } from '../build/evaluateConfigWithEnvVarsAsync';
 import EasCommand from '../commandUtils/EasCommand';
-import { EasNonInteractiveAndJsonFlags } from '../commandUtils/flags';
+import { createGraphqlClient } from '../commandUtils/context/contextUtils/createGraphqlClient';
+import { EASEnvironmentFlagHidden, EasNonInteractiveAndJsonFlags } from '../commandUtils/flags';
 import { toAppPlatform } from '../graphql/types/AppPlatform';
 import Log from '../log';
 import { appPlatformEmojis } from '../platform';
@@ -27,12 +29,14 @@ export default class Config extends EasCommand {
    'eas-json-only': Flags.boolean({
      hidden: true,
    }),
+    ...EASEnvironmentFlagHidden,
    ...EasNonInteractiveAndJsonFlags,
  };

  static override contextDefinition = {
    ...this.ContextOptions.DynamicProjectConfig,
    ...this.ContextOptions.ProjectDir,
+    ...this.ContextOptions.SessionManagment,
  };

  async runAsync(): Promise<void> {
@@ -40,10 +44,15 @@ export default class Config extends EasCommand {
    if (flags.json) {
      enableJsonOutput();
    }
-    const { platform: maybePlatform, profile: maybeProfile } = flags;
-    const { getDynamicPublicProjectConfigAsync, projectDir } = await this.getContextAsync(Config, {
-      nonInteractive: false,
-    });
+    const {
+      platform: maybePlatform,
+      profile: maybeProfile,
+      'non-interactive': nonInteractive,
+    } = flags;
+    const { getDynamicPublicProjectConfigAsync, projectDir, sessionManager } =
+      await this.getContextAsync(Config, {
+        nonInteractive,
+      });

    const accessor = EasJsonAccessor.fromProjectPath(projectDir);
    const profileName =
@@ -80,8 +89,16 @@ export default class Config extends EasCommand {
        Log.log(JSON.stringify(profile, null, 2));
      }
    } else {
-      const { exp: appConfig } = await getDynamicPublicProjectConfigAsync({
-        env: profile.env,
+      const { authenticationInfo } = await sessionManager.ensureLoggedInAsync({
+        nonInteractive,
+      });
+      const graphqlClient = createGraphqlClient(authenticationInfo);
+      const { exp: appConfig } = await evaluateConfigWithEnvVarsAsync({
+        flags,
+        buildProfile: profile,
+        graphqlClient,
+        getProjectConfig: getDynamicPublicProjectConfigAsync,
+        opts: { env: profile.env },
      });

      if (flags.json) {
@@ -58,7 +58,8 @@ export default class InitializeBuildCredentials extends EasCommand {
      privateProjectConfig ?? null,
      getDynamicPrivateProjectConfigAsync,
      platform,
-      buildProfile
+      buildProfile,
+      process.cwd()
    ).runAsync();
  }
 }
@@ -170,7 +170,7 @@ export default class DeviceDelete extends EasCommand {
      Log.log(
        formatDevice(device, {
          appleTeamName,
-          appleTeamIdentifier: appleTeamIdentifier!,
+          appleTeamIdentifier,
        })
      );
      Log.newLine();
@@ -159,7 +159,7 @@ export default class DeviceRename extends EasCommand {
      Log.log(
        formatDevice(device, {
          appleTeamName,
-          appleTeamIdentifier: appleTeamIdentifier!,
+          appleTeamIdentifier,
        })
      );
      Log.newLine();
@@ -1,8 +1,10 @@
 import { Platform } from '@expo/eas-build-job';
+import chalk from 'chalk';
 import envinfo from 'envinfo';

 import EasCommand from '../commandUtils/EasCommand';
 import Log from '../log';
+import { ora } from '../ora';
 import { resolveWorkflowAsync } from '../project/workflow';
 import { easCliVersion } from '../utils/easCli';
 import { Client } from '../vcs/vcs';
@@ -20,6 +22,7 @@ export default class Diagnostics extends EasCommand {
      nonInteractive: true,
    });

+    const spinner = ora().start(`Gathering diagnostic information...`);
    const info = await envinfo.run(
      {
        System: ['OS', 'Shell'],
@@ -40,9 +43,10 @@ export default class Diagnostics extends EasCommand {
        npmGlobalPackages: ['eas-cli', 'expo-cli'],
      },
      {
-        title: `EAS CLI ${easCliVersion} environment info`,
+        title: chalk.bold(`EAS CLI ${easCliVersion} environment info`),
      }
    );
+    spinner.succeed('All needed information gathered!');

    Log.log(info.trimEnd());
    await this.printWorkflowAsync(projectDir, vcsClient);
@@ -56,7 +60,7 @@ export default class Diagnostics extends EasCommand {
    if (androidWorkflow === iosWorkflow) {
      Log.log(`    Project workflow: ${androidWorkflow}`);
    } else {
-      Log.log(`    Project Workflow:`);
+      Log.log(`    Project workflow:`);
      Log.log(`      Android: ${androidWorkflow}`);
      Log.log(`      iOS: ${iosWorkflow}`);
    }
@@ -0,0 +1,276 @@
+import { Flags } from '@oclif/core';
+import chalk from 'chalk';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import {
+  EASEnvironmentFlag,
+  EASNonInteractiveFlag,
+  EASVariableScopeFlag,
+  EASVariableVisibilityFlag,
+} from '../../commandUtils/flags';
+import {
+  EnvironmentVariableEnvironment,
+  EnvironmentVariableScope,
+  EnvironmentVariableVisibility,
+} from '../../graphql/generated';
+import { EnvironmentVariableMutation } from '../../graphql/mutations/EnvironmentVariableMutation';
+import { EnvironmentVariablesQuery } from '../../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../../log';
+import {
+  getDisplayNameForProjectIdAsync,
+  getOwnerAccountForProjectIdAsync,
+} from '../../project/projectUtils';
+import { confirmAsync } from '../../prompts';
+import {
+  promptVariableEnvironmentAsync,
+  promptVariableNameAsync,
+  promptVariableValueAsync,
+} from '../../utils/prompts';
+
+type CreateFlags = {
+  name?: string;
+  value?: string;
+  link?: boolean;
+  force?: boolean;
+  visibility?: EnvironmentVariableVisibility;
+  scope?: EnvironmentVariableScope;
+  environment?: EnvironmentVariableEnvironment;
+  'non-interactive': boolean;
+};
+
+export default class EnvironmentVariableCreate extends EasCommand {
+  static override description =
+    'create an environment variable on the current project or owner account';
+
+  static override hidden = true;
+
+  static override flags = {
+    name: Flags.string({
+      description: 'Name of the variable',
+    }),
+    value: Flags.string({
+      description: 'Text value or the variable',
+    }),
+    link: Flags.boolean({
+      description: 'Link shared variable to the current project',
+    }),
+    force: Flags.boolean({
+      description: 'Overwrite existing variable',
+      default: false,
+    }),
+    ...EASVariableVisibilityFlag,
+    ...EASVariableScopeFlag,
+    ...EASEnvironmentFlag,
+    ...EASNonInteractiveFlag,
+  };
+
+  static override contextDefinition = {
+    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.Analytics,
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  async runAsync(): Promise<void> {
+    const { flags } = await this.parse(EnvironmentVariableCreate);
+
+    let {
+      name,
+      value,
+      scope,
+      'non-interactive': nonInteractive,
+      environment,
+      visibility,
+      link,
+      force,
+    } = this.validateFlags(flags);
+
+    const {
+      privateProjectConfig: { projectId },
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(EnvironmentVariableCreate, {
+      nonInteractive,
+    });
+
+    const [projectDisplayName, ownerAccount] = await Promise.all([
+      getDisplayNameForProjectIdAsync(graphqlClient, projectId),
+      getOwnerAccountForProjectIdAsync(graphqlClient, projectId),
+    ]);
+
+    if (!name) {
+      name = await promptVariableNameAsync(nonInteractive);
+    }
+
+    let overwrite = false;
+    visibility = visibility ?? EnvironmentVariableVisibility.Public;
+
+    if (!value) {
+      value = await promptVariableValueAsync({
+        nonInteractive,
+        hidden: visibility !== EnvironmentVariableVisibility.Public,
+      });
+    }
+
+    if (scope === EnvironmentVariableScope.Project) {
+      if (!environment) {
+        environment = await promptVariableEnvironmentAsync(nonInteractive);
+      }
+      const existingVariables = await EnvironmentVariablesQuery.byAppIdAsync(graphqlClient, {
+        appId: projectId,
+        environment,
+      });
+      const existingVariable = existingVariables.find(variable => variable.name === name);
+
+      if (existingVariable) {
+        if (existingVariable.scope === EnvironmentVariableScope.Shared) {
+          if (!nonInteractive) {
+            const confirmation = await confirmAsync({
+              message: `Shared variable ${name} already exists on this project. Do you want to unlink it first?`,
+            });
+
+            if (!confirmation) {
+              Log.log('Aborting');
+              throw new Error(`Shared variable ${name} already exists on this project.`);
+            }
+          } else if (!force) {
+            throw new Error(
+              `Shared variable ${name} already exists on this project. Use --force to overwrite it.`
+            );
+          }
+
+          await EnvironmentVariableMutation.unlinkSharedEnvironmentVariableAsync(
+            graphqlClient,
+            existingVariable.id,
+            projectId,
+            environment
+          );
+          Log.withTick(
+            `Unlinking shared variable ${chalk.bold(name)} on project ${chalk.bold(
+              projectDisplayName
+            )}.`
+          );
+        } else {
+          if (!nonInteractive) {
+            const confirmation = await confirmAsync({
+              message: `Variable ${name} already exists on this project. Do you want to overwrite it?`,
+            });
+
+            if (!confirmation) {
+              Log.log('Aborting');
+              throw new Error(
+                `Variable ${name} already exists on this project.  Use --force to overwrite it.`
+              );
+            }
+          } else if (!force) {
+            throw new Error(
+              `Variable ${name} already exists on this project. Use --force to overwrite it.`
+            );
+          }
+          overwrite = true;
+        }
+      }
+
+      const variable = await EnvironmentVariableMutation.createForAppAsync(
+        graphqlClient,
+        {
+          name,
+          value,
+          environment,
+          visibility,
+          overwrite,
+        },
+        projectId
+      );
+      if (!variable) {
+        throw new Error(
+          `Could not create variable with name ${name} on project ${projectDisplayName}`
+        );
+      }
+
+      Log.withTick(
+        `Created a new variable ${chalk.bold(name)} on project ${chalk.bold(projectDisplayName)}.`
+      );
+    } else if (scope === EnvironmentVariableScope.Shared) {
+      const sharedVariables = await EnvironmentVariablesQuery.sharedAsync(graphqlClient, {
+        appId: projectId,
+      });
+      const existingVariable = sharedVariables.find(variable => variable.name === name);
+      if (existingVariable) {
+        throw new Error(
+          `Shared variable with ${name} name already exists on this account.\n` +
+            `Use a different name or delete the existing variable  on website or by using eas env:delete --name ${name} --scope shared command.`
+        );
+      }
+
+      if (environment && !link) {
+        const confirmation = await confirmAsync({
+          message: `Unexpected argument: --environment can only be used with --link flag. Do you want to link the variable to the current project?`,
+        });
+
+        if (!confirmation) {
+          Log.log('Aborting');
+          throw new Error('Unexpected argument: --environment can only be used with --link flag.');
+        }
+      }
+
+      if (!environment && link) {
+        environment = await promptVariableEnvironmentAsync(nonInteractive);
+      }
+
+      const variable = await EnvironmentVariableMutation.createSharedVariableAsync(
+        graphqlClient,
+        {
+          name,
+          value,
+          visibility,
+        },
+        ownerAccount.id
+      );
+
+      if (!variable) {
+        throw new Error(
+          `Could not create variable with name ${name} on account ${ownerAccount.name}`
+        );
+      }
+
+      Log.withTick(
+        `Created a new variable ${chalk.bold(name)} on account ${chalk.bold(ownerAccount.name)}.`
+      );
+
+      if (link && environment) {
+        Log.withTick(
+          `Linking shared variable ${chalk.bold(name)} to project ${chalk.bold(
+            projectDisplayName
+          )}.`
+        );
+        await EnvironmentVariableMutation.linkSharedEnvironmentVariableAsync(
+          graphqlClient,
+          variable.id,
+          projectId,
+          environment
+        );
+        Log.withTick(
+          `Linked shared variable ${chalk.bold(name)} to project ${chalk.bold(projectDisplayName)}.`
+        );
+      }
+    }
+  }
+
+  private validateFlags(flags: CreateFlags): CreateFlags {
+    if (flags.scope !== EnvironmentVariableScope.Shared && flags.link) {
+      throw new Error(
+        `Unexpected argument: --link can only be used when creating  shared variables`
+      );
+    }
+    if (
+      flags.scope === EnvironmentVariableScope.Shared &&
+      flags.environment &&
+      !flags.link &&
+      flags['non-interactive']
+    ) {
+      throw new Error(
+        'Unexpected argument: --environment in non-interactive mode can only be used with --link flag.'
+      );
+    }
+    return flags;
+  }
+}
@@ -0,0 +1,131 @@
+import { Flags } from '@oclif/core';
+import chalk from 'chalk';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import {
+  EASEnvironmentFlag,
+  EASNonInteractiveFlag,
+  EASVariableScopeFlag,
+} from '../../commandUtils/flags';
+import { EnvironmentVariableEnvironment, EnvironmentVariableScope } from '../../graphql/generated';
+import { EnvironmentVariableMutation } from '../../graphql/mutations/EnvironmentVariableMutation';
+import { EnvironmentVariablesQuery } from '../../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../../log';
+import { promptAsync, toggleConfirmAsync } from '../../prompts';
+import { promptVariableEnvironmentAsync } from '../../utils/prompts';
+
+type DeleteFlags = {
+  name?: string;
+  environment?: EnvironmentVariableEnvironment;
+  'non-interactive': boolean;
+  scope?: EnvironmentVariableScope;
+};
+
+export default class EnvironmentVariableDelete extends EasCommand {
+  static override description = 'delete an environment variable by name';
+
+  static override hidden = true;
+
+  static override flags = {
+    name: Flags.string({
+      description: 'Name of the variable to delete',
+    }),
+    ...EASVariableScopeFlag,
+    ...EASEnvironmentFlag,
+    ...EASNonInteractiveFlag,
+  };
+
+  static override contextDefinition = {
+    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  async runAsync(): Promise<void> {
+    const { flags } = await this.parse(EnvironmentVariableDelete);
+    let { name, environment, 'non-interactive': nonInteractive, scope } = this.validateFlags(flags);
+    const {
+      privateProjectConfig: { projectId },
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(EnvironmentVariableDelete, {
+      nonInteractive,
+    });
+
+    if (scope === EnvironmentVariableScope.Project) {
+      if (!environment) {
+        environment = await promptVariableEnvironmentAsync(nonInteractive);
+      }
+    }
+
+    const variables =
+      scope === EnvironmentVariableScope.Project && environment
+        ? await EnvironmentVariablesQuery.byAppIdAsync(graphqlClient, {
+            appId: projectId,
+            environment,
+          })
+        : await EnvironmentVariablesQuery.sharedAsync(graphqlClient, { appId: projectId });
+
+    if (!name) {
+      ({ name } = await promptAsync({
+        type: 'select',
+        name: 'name',
+        message: 'Pick the variable to be deleted:',
+        choices: variables
+          .filter(({ scope: variableScope }) => scope === variableScope)
+          .map(variable => ({
+            title: variable.name,
+            value: variable.name,
+          })),
+      }));
+
+      if (!name) {
+        throw new Error(
+          `Environment variable wasn't selected. Run the command again and select existing variable or run it with ${chalk.bold(
+            '--name VARIABLE_NAME'
+          )} flag to fix the issue.`
+        );
+      }
+    }
+
+    const selectedVariable = variables.find(variable => variable.name === name);
+
+    if (!selectedVariable) {
+      throw new Error(`Variable "${name}" not found.`);
+    }
+
+    if (!nonInteractive) {
+      Log.addNewLineIfNone();
+      Log.warn(`You are about to permanently delete variable ${selectedVariable.name}.`);
+      Log.warn('This action is irreversible.');
+      Log.newLine();
+      const confirmed = await toggleConfirmAsync({
+        message: `Are you sure you wish to proceed?${
+          selectedVariable.scope === EnvironmentVariableScope.Shared
+            ? ' This variable is applied across your whole account and may affect multiple apps.'
+            : ''
+        }`,
+      });
+      if (!confirmed) {
+        Log.error(`Canceled deletion of variable ${selectedVariable.name}.`);
+        throw new Error(`Variable "${name}" not deleted.`);
+      }
+    }
+
+    await EnvironmentVariableMutation.deleteAsync(graphqlClient, selectedVariable.id);
+
+    Log.withTick(`️Deleted variable ${selectedVariable.name}".`);
+  }
+
+  private validateFlags(flags: DeleteFlags): DeleteFlags {
+    if (flags['non-interactive']) {
+      if (!flags.name) {
+        throw new Error(
+          `Environment variable needs 'name' to be specified when running in non-interactive mode. Run the command with ${chalk.bold(
+            '--name VARIABLE_NAME'
+          )} flag to fix the issue`
+        );
+      }
+    }
+
+    return flags;
+  }
+}
@@ -0,0 +1,149 @@
+import { Flags } from '@oclif/core';
+import chalk from 'chalk';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import { ExpoGraphqlClient } from '../../commandUtils/context/contextUtils/createGraphqlClient';
+import {
+  EASEnvironmentFlag,
+  EASNonInteractiveFlag,
+  EASVariableFormatFlag,
+  EASVariableScopeFlag,
+} from '../../commandUtils/flags';
+import {
+  EnvironmentVariableEnvironment,
+  EnvironmentVariableFragment,
+  EnvironmentVariableScope,
+} from '../../graphql/generated';
+import { EnvironmentVariablesQuery } from '../../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../../log';
+import { formatVariable } from '../../utils/formatVariable';
+import { promptVariableEnvironmentAsync, promptVariableNameAsync } from '../../utils/prompts';
+
+type GetFlags = {
+  name?: string;
+  environment?: EnvironmentVariableEnvironment;
+  'non-interactive': boolean;
+  format?: string;
+  scope: EnvironmentVariableScope;
+};
+
+export default class EnvironmentVariableGet extends EasCommand {
+  static override description = 'get environment variable';
+
+  static override hidden = true;
+
+  static override contextDefinition = {
+    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  static override flags = {
+    name: Flags.string({
+      description: 'Name of the variable',
+    }),
+    ...EASVariableFormatFlag,
+    ...EASVariableScopeFlag,
+    ...EASNonInteractiveFlag,
+    ...EASEnvironmentFlag,
+  };
+
+  async runAsync(): Promise<void> {
+    const { flags } = await this.parse(EnvironmentVariableGet);
+
+    let {
+      environment,
+      name,
+      'non-interactive': nonInteractive,
+      format,
+      scope,
+    } = this.validateFlags(flags);
+
+    const {
+      privateProjectConfig: { projectId },
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(EnvironmentVariableGet, {
+      nonInteractive,
+    });
+
+    if (!name) {
+      name = await promptVariableNameAsync(nonInteractive);
+    }
+
+    if (!environment && scope === EnvironmentVariableScope.Project) {
+      environment = await promptVariableEnvironmentAsync(nonInteractive);
+    }
+    const variable = await getVariableAsync(graphqlClient, scope, projectId, name, environment);
+
+    if (!variable) {
+      Log.error(`Variable with name "${name}" not found`);
+      return;
+    }
+    if (!variable.value) {
+      throw new Error(
+        `${chalk.bold(
+          variable.name
+        )} is a secret variable and cannot be displayed once it has been created.`
+      );
+    }
+
+    if (format === 'short') {
+      Log.log(`${chalk.bold(variable.name)}=${variable.value}`);
+    } else {
+      Log.log(formatVariable(variable));
+    }
+  }
+
+  private validateFlags(flags: GetFlags): GetFlags {
+    if (flags.environment && flags.scope === EnvironmentVariableScope.Shared) {
+      throw new Error(`Unexpected argument: --environment can only be used with project variables`);
+    }
+    if (flags['non-interactive']) {
+      if (!flags.name) {
+        throw new Error('Variable name is required. Run the command with --name flag.');
+      }
+      if (!flags.scope) {
+        throw new Error('Scope is required. Run the command with --scope flag.');
+      }
+      if (!flags.environment && flags.scope === EnvironmentVariableScope.Project) {
+        throw new Error('Environment is required.');
+      }
+    }
+    return flags;
+  }
+}
+
+async function getVariableAsync(
+  graphqlClient: ExpoGraphqlClient,
+  scope: string,
+  projectId: string,
+  name: string | undefined,
+  environment: string | undefined
+): Promise<EnvironmentVariableFragment | null> {
+  if (!environment && scope === EnvironmentVariableScope.Project) {
+    throw new Error('Environment is required.');
+  }
+  if (!name) {
+    throw new Error("Variable name is required. Run the command with '--name VARIABLE_NAME' flag.");
+  }
+  if (environment && scope === EnvironmentVariableScope.Project) {
+    const appVariables = await EnvironmentVariablesQuery.byAppIdWithSensitiveAsync(graphqlClient, {
+      appId: projectId,
+      environment,
+      filterNames: [name],
+    });
+    return appVariables[0];
+  }
+
+  if (scope === EnvironmentVariableScope.Shared) {
+    const sharedVariables = await EnvironmentVariablesQuery.sharedWithSensitiveAsync(
+      graphqlClient,
+      {
+        appId: projectId,
+        filterNames: [name],
+      }
+    );
+    return sharedVariables[0];
+  }
+
+  return null;
+}
@@ -0,0 +1,85 @@
+import { Flags } from '@oclif/core';
+import chalk from 'chalk';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import { EASEnvironmentFlag, EASNonInteractiveFlag } from '../../commandUtils/flags';
+import { EnvironmentVariableMutation } from '../../graphql/mutations/EnvironmentVariableMutation';
+import { EnvironmentVariablesQuery } from '../../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../../log';
+import { getDisplayNameForProjectIdAsync } from '../../project/projectUtils';
+import { selectAsync } from '../../prompts';
+import { promptVariableEnvironmentAsync } from '../../utils/prompts';
+
+export default class EnvironmentVariableLink extends EasCommand {
+  static override description = 'link a shared environment variable to the current project';
+
+  static override hidden = true;
+
+  static override flags = {
+    name: Flags.string({
+      description: 'Name of the variable',
+    }),
+    ...EASEnvironmentFlag,
+    ...EASNonInteractiveFlag,
+  };
+
+  static override contextDefinition = {
+    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  async runAsync(): Promise<void> {
+    let {
+      flags: { name, 'non-interactive': nonInteractive, environment },
+    } = await this.parse(EnvironmentVariableLink);
+    const {
+      privateProjectConfig: { projectId },
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(EnvironmentVariableLink, {
+      nonInteractive,
+    });
+
+    const projectDisplayName = await getDisplayNameForProjectIdAsync(graphqlClient, projectId);
+    const variables = await EnvironmentVariablesQuery.sharedAsync(graphqlClient, {
+      appId: projectId,
+    });
+
+    if (!name) {
+      name = await selectAsync(
+        'Select shared variable',
+        variables.map(variable => ({
+          title: variable.name,
+          value: variable.name,
+        }))
+      );
+    }
+
+    const selectedVariable = variables.find(variable => variable.name === name);
+
+    if (!selectedVariable) {
+      throw new Error(`Shared variable ${name} doesn't exist`);
+    }
+
+    if (!environment) {
+      environment = await promptVariableEnvironmentAsync(nonInteractive);
+    }
+
+    const linkedVariable = await EnvironmentVariableMutation.linkSharedEnvironmentVariableAsync(
+      graphqlClient,
+      selectedVariable.id,
+      projectId,
+      environment
+    );
+    if (!linkedVariable) {
+      throw new Error(
+        `Could not link variable with name ${selectedVariable.name} to project with id ${projectId}`
+      );
+    }
+
+    Log.withTick(
+      `Linked variable ${chalk.bold(linkedVariable.name)} to project ${chalk.bold(
+        projectDisplayName
+      )}.`
+    );
+  }
+}
@@ -0,0 +1,118 @@
+import { Flags } from '@oclif/core';
+import chalk from 'chalk';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import { ExpoGraphqlClient } from '../../commandUtils/context/contextUtils/createGraphqlClient';
+import {
+  EASEnvironmentFlag,
+  EASVariableFormatFlag,
+  EASVariableScopeFlag,
+} from '../../commandUtils/flags';
+import {
+  EnvironmentVariableEnvironment,
+  EnvironmentVariableFragment,
+  EnvironmentVariableScope,
+} from '../../graphql/generated';
+import { EnvironmentVariablesQuery } from '../../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../../log';
+import { formatVariable } from '../../utils/formatVariable';
+import { promptVariableEnvironmentAsync } from '../../utils/prompts';
+
+export default class EnvironmentValueList extends EasCommand {
+  static override description = 'list environment variables for the current project';
+
+  static override hidden = true;
+
+  static override contextDefinition = {
+    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  static override flags = {
+    'include-sensitive': Flags.boolean({
+      description: 'Display sensitive values in the output',
+      default: false,
+    }),
+    ...EASVariableFormatFlag,
+    ...EASVariableScopeFlag,
+    ...EASEnvironmentFlag,
+  };
+
+  async runAsync(): Promise<void> {
+    let {
+      flags: { environment, format, scope, 'include-sensitive': includeSensitive },
+    } = await this.parse(EnvironmentValueList);
+    const {
+      privateProjectConfig: { projectId },
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(EnvironmentValueList, {
+      nonInteractive: true,
+    });
+
+    if (scope === EnvironmentVariableScope.Project && !environment) {
+      environment = await promptVariableEnvironmentAsync(false);
+    }
+
+    const variables = await this.getVariablesForScopeAsync(graphqlClient, {
+      scope,
+      includingSensitive: includeSensitive,
+      environment,
+      projectId,
+    });
+
+    if (format === 'short') {
+      for (const variable of variables) {
+        // TODO: Add Learn more link
+        Log.log(
+          `${chalk.bold(variable.name)}=${
+            variable.value ??
+            "***** (This is a secret env variable that can only be accessed on EAS builder and can't be read in any UI. Learn more.)"
+          }`
+        );
+      }
+    } else {
+      if (scope === EnvironmentVariableScope.Shared) {
+        Log.log(chalk.bold('Shared variables for this account:'));
+      } else {
+        Log.log(chalk.bold(`Variables for this project for environment ${environment}:`));
+      }
+      Log.log(
+        variables.map(variable => formatVariable(variable)).join(`\n\n${chalk.dim('———')}\n\n`)
+      );
+    }
+  }
+
+  private async getVariablesForScopeAsync(
+    graphqlClient: ExpoGraphqlClient,
+    {
+      scope,
+      includingSensitive,
+      environment,
+      projectId,
+    }: {
+      scope: EnvironmentVariableScope;
+      includingSensitive: boolean;
+      environment?: EnvironmentVariableEnvironment;
+      projectId: string;
+    }
+  ): Promise<EnvironmentVariableFragment[]> {
+    if (scope === EnvironmentVariableScope.Project && environment) {
+      if (includingSensitive) {
+        return await EnvironmentVariablesQuery.byAppIdWithSensitiveAsync(graphqlClient, {
+          appId: projectId,
+          environment,
+        });
+      }
+      return await EnvironmentVariablesQuery.byAppIdAsync(graphqlClient, {
+        appId: projectId,
+        environment,
+      });
+    }
+
+    return includingSensitive
+      ? await EnvironmentVariablesQuery.sharedWithSensitiveAsync(graphqlClient, {
+          appId: projectId,
+        })
+      : await EnvironmentVariablesQuery.sharedAsync(graphqlClient, { appId: projectId });
+  }
+}
@@ -0,0 +1,80 @@
+import { Flags } from '@oclif/core';
+import * as fs from 'fs-extra';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import { EASEnvironmentFlag, EASNonInteractiveFlag } from '../../commandUtils/flags';
+import { EnvironmentVariableFragment } from '../../graphql/generated';
+import { EnvironmentVariablesQuery } from '../../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../../log';
+import { confirmAsync } from '../../prompts';
+import { promptVariableEnvironmentAsync } from '../../utils/prompts';
+
+export default class EnvironmentValuePull extends EasCommand {
+  static override description = 'pull env file';
+
+  static override hidden = true;
+
+  static override contextDefinition = {
+    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  static override flags = {
+    ...EASEnvironmentFlag,
+    ...EASNonInteractiveFlag,
+    path: Flags.string({
+      description: 'Path to the result `.env` file',
+      default: '.env.local',
+    }),
+  };
+
+  async runAsync(): Promise<void> {
+    let {
+      flags: { environment, path: targetPath, 'non-interactive': nonInteractive },
+    } = await this.parse(EnvironmentValuePull);
+
+    if (!environment) {
+      environment = await promptVariableEnvironmentAsync(nonInteractive);
+    }
+    const {
+      privateProjectConfig: { projectId },
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(EnvironmentValuePull, {
+      nonInteractive,
+    });
+
+    targetPath = targetPath ?? '.env.local';
+
+    const environmentVariables = await EnvironmentVariablesQuery.byAppIdWithSensitiveAsync(
+      graphqlClient,
+      {
+        appId: projectId,
+        environment,
+      }
+    );
+
+    if (!nonInteractive && (await fs.exists(targetPath))) {
+      const result = await confirmAsync({
+        message: `File ${targetPath} already exists. Do you want to overwrite it?`,
+      });
+      if (!result) {
+        Log.log('Aborting...');
+        throw new Error(`File ${targetPath} already exists.`);
+      }
+    }
+
+    const filePrefix = `# Environment: ${environment}\n\n`;
+
+    const envFileContent = environmentVariables
+      .map((variable: EnvironmentVariableFragment) => {
+        if (variable.value === null) {
+          return `# ${variable.name}=***** (secret variables are not available for reading)`;
+        }
+        return `${variable.name}=${variable.value}`;
+      })
+      .join('\n');
+    await fs.writeFile(targetPath, filePrefix + envFileContent);
+
+    Log.log(`Pulled environment variables from ${environment} environment to ${targetPath}.`);
+  }
+}
@@ -0,0 +1,210 @@
+import { Flags } from '@oclif/core';
+import dotenv from 'dotenv';
+import fs from 'fs-extra';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import { EASEnvironmentFlag } from '../../commandUtils/flags';
+import {
+  EnvironmentVariableEnvironment,
+  EnvironmentVariableFragment,
+  EnvironmentVariableScope,
+  EnvironmentVariableVisibility,
+} from '../../graphql/generated';
+import {
+  EnvironmentVariableMutation,
+  EnvironmentVariablePushInput,
+} from '../../graphql/mutations/EnvironmentVariableMutation';
+import { EnvironmentVariablesQuery } from '../../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../../log';
+import { confirmAsync, promptAsync } from '../../prompts';
+
+type PushFlags = {
+  environment?: EnvironmentVariableEnvironment;
+  path: string;
+};
+
+export default class EnvironmentVariablePush extends EasCommand {
+  static override description = 'push env file';
+
+  static override hidden = true;
+
+  static override contextDefinition = {
+    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  static override flags = {
+    ...EASEnvironmentFlag,
+    path: Flags.string({
+      description: 'Path to the input `.env` file',
+      default: '.env.local',
+    }),
+  };
+
+  async runAsync(): Promise<void> {
+    const { flags } = await this.parse(EnvironmentVariablePush);
+
+    const { environment, path: envPath } = this.validateFlags(flags);
+    const {
+      privateProjectConfig: { projectId },
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(EnvironmentVariablePush, {
+      nonInteractive: false,
+    });
+
+    const updateVariables: Record<string, EnvironmentVariablePushInput> =
+      await this.parseEnvFileAsync(envPath, environment);
+
+    const variableNames = Object.keys(updateVariables);
+
+    const existingVariables = await EnvironmentVariablesQuery.byAppIdAsync(graphqlClient, {
+      appId: projectId,
+      environment,
+      filterNames: variableNames,
+    });
+
+    const existingDifferentVariables: EnvironmentVariableFragment[] = [];
+    // Remove variables that are the same as the ones in the environment
+    existingVariables.forEach(variable => {
+      const existingVariableUpdate = updateVariables[variable.name];
+      if (existingVariableUpdate && existingVariableUpdate.value !== variable.value) {
+        existingDifferentVariables.push(variable);
+      } else {
+        delete updateVariables[variable.name];
+      }
+    });
+
+    const existingDifferentSharedVariables = existingDifferentVariables.filter(
+      variable => variable.scope === EnvironmentVariableScope.Shared
+    );
+
+    if (existingDifferentSharedVariables.length > 0) {
+      const existingDifferentSharedVariablesNames = existingDifferentSharedVariables.map(
+        variable => variable.name
+      );
+      Log.error('Shared variables cannot be overwritten by eas env:push command.');
+      Log.error('Remove them from the env file or unlink them from the project to continue:');
+      existingDifferentSharedVariablesNames.forEach(name => {
+        Log.error(`- ${name}`);
+      });
+      throw new Error('Shared variables cannot be overwritten by eas env:push command');
+    }
+
+    if (existingDifferentVariables.length > 0) {
+      Log.warn('Some variables already exist in the environment.');
+      const variableNames = existingDifferentVariables.map(variable => variable.name);
+
+      const confirmationMessage =
+        variableNames.length > 1
+          ? `The ${variableNames.join(
+              ', '
+            )} environment variables already exist in ${environment} environment. Do you want to override them all?`
+          : `The ${variableNames[0]} environment variable already exists in ${environment} environment. Do you want to override it?`;
+
+      const confirm = await confirmAsync({
+        message: confirmationMessage,
+      });
+
+      let variablesToOverwrite: string[] = [];
+
+      if (!confirm && existingDifferentVariables.length === 1) {
+        throw new Error('No new variables to push.');
+      }
+
+      if (confirm) {
+        variablesToOverwrite = existingDifferentVariables.map(variable => variable.name);
+      } else {
+        const promptResult = await promptAsync({
+          type: 'multiselect',
+          name: 'variablesToOverwrite',
+          message: 'Select variables to overwrite:',
+          // @ts-expect-error property missing from `@types/prompts`
+          optionsPerPage: 20,
+          choices: existingDifferentVariables.map(variable => ({
+            title: `${variable.name}: ${updateVariables[variable.name].value} (was ${
+              variable.value ?? '(secret)'
+            })`,
+            value: variable.name,
+          })),
+        });
+        variablesToOverwrite = promptResult.variablesToOverwrite;
+      }
+
+      for (const existingVariable of existingVariables) {
+        const name = existingVariable.name;
+        if (variablesToOverwrite.includes(name)) {
+          updateVariables[name]['overwrite'] = true;
+        } else {
+          delete updateVariables[name];
+        }
+      }
+    }
+
+    // Check if any of the sensitive variables already exist in the environment. Prompt the user to overwrite them.
+    const existingSensitiveVariables = existingVariables.filter(
+      variable => variable.value === null
+    );
+
+    if (existingSensitiveVariables.length > 0) {
+      const existingSensitiveVariablesNames = existingSensitiveVariables.map(
+        variable => `- ${variable.name}`
+      );
+      const confirm = await confirmAsync({
+        message: `You are about to overwrite sensitive variables.\n${existingSensitiveVariablesNames.join(
+          '\n'
+        )}\n Do you want to continue?`,
+      });
+      if (!confirm) {
+        throw new Error('Aborting...');
+      }
+    }
+
+    const variablesToPush = Object.values(updateVariables);
+
+    if (variablesToPush.length === 0) {
+      Log.log('No new variables to push.');
+      return;
+    }
+
+    await EnvironmentVariableMutation.createBulkEnvironmentVariablesForAppAsync(
+      graphqlClient,
+      variablesToPush,
+      projectId
+    );
+
+    Log.log(`Uploaded env file to ${environment} environment.`);
+  }
+
+  private async parseEnvFileAsync(
+    envPath: string,
+    environment: string
+  ): Promise<Record<string, EnvironmentVariablePushInput>> {
+    if (!(await fs.exists(envPath))) {
+      throw new Error(`File ${envPath} does not exist.`);
+    }
+    const pushInput: Record<string, EnvironmentVariablePushInput> = {};
+
+    const variables: Record<string, string> = dotenv.parse(await fs.readFile(envPath, 'utf8'));
+
+    for (const [name, value] of Object.entries(variables)) {
+      pushInput[name] = {
+        name,
+        value,
+        environment,
+        visibility: name.startsWith('EXPO_SENSITIVE')
+          ? EnvironmentVariableVisibility.Sensitive
+          : EnvironmentVariableVisibility.Public,
+      };
+    }
+
+    return pushInput;
+  }
+
+  private validateFlags(flags: PushFlags): Required<PushFlags> {
+    if (!flags.environment) {
+      throw new Error('Please provide an environment to push the env file to.');
+    }
+
+    return { ...flags, environment: flags.environment };
+  }
+}
@@ -0,0 +1,96 @@
+import { Flags } from '@oclif/core';
+import chalk from 'chalk';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import { EASEnvironmentFlag, EASNonInteractiveFlag } from '../../commandUtils/flags';
+import { EnvironmentVariableScope } from '../../graphql/generated';
+import { EnvironmentVariableMutation } from '../../graphql/mutations/EnvironmentVariableMutation';
+import { EnvironmentVariablesQuery } from '../../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../../log';
+import { getDisplayNameForProjectIdAsync } from '../../project/projectUtils';
+import { selectAsync } from '../../prompts';
+import { promptVariableEnvironmentAsync } from '../../utils/prompts';
+
+export default class EnvironmentVariableUnlink extends EasCommand {
+  static override description = 'unlink a shared environment variable to the current project';
+
+  static override hidden = true;
+
+  static override flags = {
+    name: Flags.string({
+      description: 'Name of the variable',
+    }),
+    ...EASEnvironmentFlag,
+    ...EASNonInteractiveFlag,
+  };
+
+  static override contextDefinition = {
+    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  async runAsync(): Promise<void> {
+    let {
+      flags: { name, 'non-interactive': nonInteractive, environment },
+    } = await this.parse(EnvironmentVariableUnlink);
+    const {
+      privateProjectConfig: { projectId },
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(EnvironmentVariableUnlink, {
+      nonInteractive,
+    });
+
+    if (!environment) {
+      environment = await promptVariableEnvironmentAsync(nonInteractive);
+    }
+
+    const projectDisplayName = await getDisplayNameForProjectIdAsync(graphqlClient, projectId);
+
+    const appVariables = await EnvironmentVariablesQuery.byAppIdAsync(graphqlClient, {
+      appId: projectId,
+      environment,
+    });
+    const linkedVariables = appVariables.filter(
+      ({ scope }) => scope === EnvironmentVariableScope.Shared
+    );
+
+    if (linkedVariables.length === 0) {
+      throw new Error(`There are no linked shared env variables for project ${projectDisplayName}`);
+    }
+
+    if (!name) {
+      name = await selectAsync(
+        'Select shared variable to unlink',
+        linkedVariables.map(variable => ({
+          title: variable.name,
+          value: variable.name,
+        }))
+      );
+    }
+
+    const selectedVariable = linkedVariables.find(variable => variable.name === name);
+
+    if (!selectedVariable) {
+      throw new Error(`Shared variable ${name} doesn't exist`);
+    }
+
+    const unlinkedVariable = await EnvironmentVariableMutation.unlinkSharedEnvironmentVariableAsync(
+      graphqlClient,
+      selectedVariable.id,
+      projectId,
+      environment
+    );
+
+    if (!unlinkedVariable) {
+      throw new Error(
+        `Could not unlink variable with name ${selectedVariable.name} from project ${projectDisplayName}`
+      );
+    }
+
+    Log.withTick(
+      `Unlinked variable ${chalk.bold(unlinkedVariable.name)} from the project ${chalk.bold(
+        projectDisplayName
+      )}.`
+    );
+  }
+}
@@ -0,0 +1,207 @@
+import { Flags } from '@oclif/core';
+import chalk from 'chalk';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import {
+  EASEnvironmentFlag,
+  EASNonInteractiveFlag,
+  EASVariableScopeFlag,
+  EASVariableVisibilityFlag,
+} from '../../commandUtils/flags';
+import { EnvironmentVariableScope, EnvironmentVariableVisibility } from '../../graphql/generated';
+import { EnvironmentVariableMutation } from '../../graphql/mutations/EnvironmentVariableMutation';
+import { EnvironmentVariablesQuery } from '../../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../../log';
+import {
+  getDisplayNameForProjectIdAsync,
+  getOwnerAccountForProjectIdAsync,
+} from '../../project/projectUtils';
+import { selectAsync } from '../../prompts';
+import { promptVariableEnvironmentAsync, promptVariableValueAsync } from '../../utils/prompts';
+
+type UpdateFlags = {
+  name?: string;
+  value?: string;
+  scope?: EnvironmentVariableScope;
+  environment?: string;
+  visibility?: EnvironmentVariableVisibility;
+  'non-interactive': boolean;
+};
+
+export default class EnvironmentVariableUpdate extends EasCommand {
+  static override description =
+    'update an environment variable on the current project or owner account';
+
+  static override hidden = true;
+
+  static override flags = {
+    name: Flags.string({
+      description: 'Name of the variable',
+    }),
+    value: Flags.string({
+      description: 'Text value or the variable',
+    }),
+    ...EASVariableVisibilityFlag,
+    ...EASVariableScopeFlag,
+    ...EASEnvironmentFlag,
+    ...EASNonInteractiveFlag,
+  };
+
+  static override contextDefinition = {
+    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.Analytics,
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  async runAsync(): Promise<void> {
+    const { flags } = await this.parse(EnvironmentVariableUpdate);
+    let {
+      name,
+      value,
+      scope,
+      'non-interactive': nonInteractive,
+      environment,
+      visibility,
+    } = this.validateFlags(flags);
+
+    const {
+      privateProjectConfig: { projectId },
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(EnvironmentVariableUpdate, {
+      nonInteractive,
+    });
+
+    const [projectDisplayName, ownerAccount] = await Promise.all([
+      getDisplayNameForProjectIdAsync(graphqlClient, projectId),
+      getOwnerAccountForProjectIdAsync(graphqlClient, projectId),
+    ]);
+
+    if (scope === EnvironmentVariableScope.Project) {
+      if (!environment) {
+        environment = await promptVariableEnvironmentAsync(nonInteractive);
+      }
+      const existingVariables = await EnvironmentVariablesQuery.byAppIdAsync(graphqlClient, {
+        appId: projectId,
+        environment,
+      });
+      if (!name) {
+        name = await selectAsync(
+          'Select variable',
+          existingVariables.map(variable => ({
+            title: variable.name,
+            value: variable.name,
+          }))
+        );
+      }
+
+      const existingVariable = existingVariables.find(variable => variable.name === name);
+      if (!existingVariable) {
+        throw new Error(
+          `Variable with name ${name} does not exist on project ${projectDisplayName}`
+        );
+      }
+
+      if (!value) {
+        value = await promptVariableValueAsync({
+          nonInteractive,
+          required: false,
+          initial: existingVariable.value,
+        });
+        if (!value || value.length === 0) {
+          value = '';
+        }
+      }
+
+      const variable = await EnvironmentVariableMutation.createForAppAsync(
+        graphqlClient,
+        {
+          name,
+          value,
+          environment,
+          visibility,
+          overwrite: true,
+        },
+        projectId
+      );
+      if (!variable) {
+        throw new Error(
+          `Could not update variable with name ${name} on project ${projectDisplayName}`
+        );
+      }
+
+      Log.withTick(
+        `Updated variable ${chalk.bold(name)} on project ${chalk.bold(projectDisplayName)}.`
+      );
+    } else if (scope === EnvironmentVariableScope.Shared) {
+      const sharedVariables = await EnvironmentVariablesQuery.sharedAsync(graphqlClient, {
+        appId: projectId,
+      });
+
+      if (!name) {
+        name = await selectAsync(
+          'Select variable',
+          sharedVariables.map(variable => ({
+            title: variable.name,
+            value: variable.name,
+          }))
+        );
+      }
+
+      const existingVariable = sharedVariables.find(variable => variable.name === name);
+      if (!existingVariable) {
+        throw new Error(
+          "Variable with this name  doesn't exist on this account. Use a different name."
+        );
+      }
+
+      if (!value) {
+        value = await promptVariableValueAsync({
+          nonInteractive,
+          required: false,
+          initial: existingVariable.value,
+        });
+        if (!value || value.length === 0) {
+          value = '';
+        }
+      }
+
+      const variable = await EnvironmentVariableMutation.createSharedVariableAsync(
+        graphqlClient,
+        {
+          name,
+          value,
+          visibility,
+          overwrite: true,
+        },
+        ownerAccount.id
+      );
+
+      if (!variable) {
+        throw new Error(
+          `Could not update variable with name ${name} on account ${ownerAccount.name}`
+        );
+      }
+
+      Log.withTick(
+        `Updated shared variable ${chalk.bold(name)} on account ${chalk.bold(ownerAccount.name)}.`
+      );
+    }
+  }
+  private validateFlags(flags: UpdateFlags): UpdateFlags {
+    if (flags['non-interactive']) {
+      if (!flags.name) {
+        throw new Error(
+          'Variable name is required in non-interactive mode. Run the command with --name flag.'
+        );
+      }
+
+      if (flags.scope === EnvironmentVariableScope.Project && !flags.environment) {
+        throw new Error(
+          'Environment is required when updating project-wide variable in non-interactive mode. Run the command with --environment flag.'
+        );
+      }
+    }
+
+    return flags;
+  }
+}
@@ -60,7 +60,8 @@ export default class MetadataLint extends EasCommand {
      await loadConfigAsync({ projectDir, profile: submitProfile });

      if (flags.json) {
-        return printJsonOnlyOutput([]);
+        printJsonOnlyOutput([]);
+        return;
      }

      Log.log('✅ Store configuration is valid.');
@@ -70,7 +71,8 @@ export default class MetadataLint extends EasCommand {
      }

      if (flags.json) {
-        return printJsonOnlyOutput(error.errors);
+        printJsonOnlyOutput(error.errors);
+        return;
      }

      logMetadataValidationError(error);
@@ -110,6 +110,7 @@ describe(ProjectInit.name, () => {
        it('is no-op if already configured for id', async () => {
          jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
            id: '1234',
+            name: 'testing-123',
            slug: 'testing-123',
            fullName: '@jester/testing-123',
            ownerAccount: jester.accounts[0],
@@ -121,6 +122,7 @@ describe(ProjectInit.name, () => {
        it('prompts to overwrite when different', async () => {
          jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
            id: '1234',
+            name: 'testing-123',
            slug: 'testing-123',
            fullName: '@jester/testing-123',
            ownerAccount: jester.accounts[0],
@@ -135,6 +137,7 @@ describe(ProjectInit.name, () => {
          jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
            id: '1234',
            slug: 'testing-123',
+            name: 'testing-123',
            fullName: '@jester/testing-123',
            ownerAccount: jester.accounts[0],
          });
@@ -152,6 +155,7 @@ describe(ProjectInit.name, () => {
          jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
            id: '1234',
            slug: 'testing-123',
+            name: 'testing-123',
            fullName: '@jester/testing-123',
            ownerAccount: jester.accounts[0],
          });
@@ -186,6 +190,7 @@ describe(ProjectInit.name, () => {
          jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
            id: '1234',
            slug: 'testing-123',
+            name: 'testing-123',
            fullName: '@jester/testing-123',
            ownerAccount: jester.accounts[0],
          });
@@ -198,6 +203,7 @@ describe(ProjectInit.name, () => {
          jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
            id: '1234',
            slug: 'testing-124',
+            name: 'testing-123',
            fullName: '@jester2/testing-124',
            ownerAccount: jester2.accounts[0],
          });
@@ -223,6 +229,7 @@ describe(ProjectInit.name, () => {
          jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
            id: '1234',
            slug: 'testing-124',
+            name: 'testing-123',
            fullName: '@jester2/testing-124',
            ownerAccount: jester2.accounts[0],
          });
@@ -247,6 +254,7 @@ describe(ProjectInit.name, () => {
          jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
            id: '1234',
            slug: 'testing-124',
+            name: 'testing-123',
            fullName: '@jester2/testing-124',
            ownerAccount: jester2.accounts[0],
          });
@@ -273,6 +281,7 @@ describe(ProjectInit.name, () => {
        jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
          id: '1234',
          slug: 'testing-123',
+          name: 'testing-123',
          fullName: '@jester/testing-123',
          ownerAccount: jester.accounts[0],
        });
@@ -288,6 +297,7 @@ describe(ProjectInit.name, () => {
          jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
            id: '1234',
            slug: 'testing-123',
+            name: 'testing-123',
            fullName: '@jester/testing-123',
            ownerAccount: jester.accounts[0],
          });
@@ -302,6 +312,7 @@ describe(ProjectInit.name, () => {
          jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
            id: '1234',
            slug: 'testing-124',
+            name: 'testing-123',
            fullName: '@jester2/testing-124',
            ownerAccount: jester2.accounts[0],
          });
@@ -329,6 +340,7 @@ describe(ProjectInit.name, () => {
          jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
            id: '1234',
            slug: 'testing-124',
+            name: 'testing-123',
            fullName: '@jester2/testing-124',
            ownerAccount: jester2.accounts[0],
          });
@@ -355,6 +367,7 @@ describe(ProjectInit.name, () => {
          jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
            id: '1234',
            slug: 'testing-124',
+            name: 'testing-123',
            fullName: '@jester2/testing-124',
            ownerAccount: jester2.accounts[0],
          });
@@ -384,6 +397,7 @@ describe(ProjectInit.name, () => {
        jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
          id: '1234',
          slug: 'testing-123',
+          name: 'testing-123',
          fullName: '@jester/testing-123',
          ownerAccount: jester.accounts[0],
        });
@@ -398,6 +412,7 @@ describe(ProjectInit.name, () => {
        jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
          id: '1234',
          slug: 'testing-124',
+          name: 'testing-123',
          fullName: '@jester2/testing-124',
          ownerAccount: jester2.accounts[0],
        });
@@ -437,6 +452,7 @@ describe(ProjectInit.name, () => {
            jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
              id: '1234',
              slug: 'testing-123',
+              name: 'testing-123',
              fullName: '@jester/testing-123',
              ownerAccount: jester.accounts[0],
            });
@@ -464,6 +480,7 @@ describe(ProjectInit.name, () => {
            jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
              id: '0129',
              slug: 'testing-123',
+              name: 'testing-123',
              fullName: '@jester/testing-123',
              ownerAccount: jester.accounts[0],
            });
@@ -0,0 +1,494 @@
+import { ExpoConfig } from '@expo/config-types';
+import { Platform } from '@expo/eas-build-job';
+import { EasJson } from '@expo/eas-json';
+import chalk from 'chalk';
+import fs from 'fs-extra';
+import path from 'path';
+
+import { getEASUpdateURL, getExpoWebsiteBaseUrl } from '../../api';
+import { runBuildAndSubmitAsync } from '../../build/runBuildAndSubmit';
+import { reviewAndCommitChangesAsync } from '../../build/utils/repository';
+import EasCommand from '../../commandUtils/EasCommand';
+import { DynamicConfigContextFn } from '../../commandUtils/context/DynamicProjectConfigContextField';
+import { ExpoGraphqlClient } from '../../commandUtils/context/contextUtils/createGraphqlClient';
+import { validateOrSetProjectIdAsync } from '../../commandUtils/context/contextUtils/getProjectIdAsync';
+import { CredentialsContextProjectInfo } from '../../credentials/context';
+import { SetUpBuildCredentialsCommandAction } from '../../credentials/manager/SetUpBuildCredentialsCommandAction';
+import {
+  AppFragment,
+  AppPlatform,
+  OnboardingDeviceType,
+  OnboardingEnvironment,
+} from '../../graphql/generated';
+import { UserPreferencesMutation } from '../../graphql/mutations/UserPreferencesMutation';
+import { AppQuery } from '../../graphql/queries/AppQuery';
+import Log, { learnMore, link } from '../../log';
+import {
+  canAccessRepositoryUsingSshAsync,
+  runGitCloneAsync,
+  runGitPushAsync,
+} from '../../onboarding/git';
+import { installDependenciesAsync } from '../../onboarding/installDependencies';
+import { runCommandAsync } from '../../onboarding/runCommand';
+import { RequestedPlatform } from '../../platform';
+import { ExpoConfigOptions, getPrivateExpoConfig } from '../../project/expoConfig';
+import { promptAsync } from '../../prompts';
+import { Actor } from '../../user/User';
+import { easCliVersion } from '../../utils/easCli';
+import GitClient from '../../vcs/clients/git';
+
+export default class Onboarding extends EasCommand {
+  static override aliases = ['init:onboarding', 'onboarding'];
+
+  static override description =
+    'continue onboarding process started on the https://expo.new website.';
+
+  static override flags = {};
+
+  static override args = [{ name: 'TARGET_PROJECT_DIRECTORY' }];
+
+  static override contextDefinition = {
+    ...this.ContextOptions.LoggedIn,
+    ...this.ContextOptions.Analytics,
+  };
+
+  async runAsync(): Promise<void> {
+    const {
+      args: { TARGET_PROJECT_DIRECTORY: targetProjectDirInput },
+    } = await this.parse(Onboarding);
+
+    const {
+      loggedIn: { actor, graphqlClient },
+      analytics,
+    } = await this.getContextAsync(Onboarding, {
+      nonInteractive: false,
+    });
+
+    if (actor.__typename === 'Robot') {
+      throw new Error(
+        'This command is not available for robot users. Make sure you are not using a robot token and try again.'
+      );
+    }
+
+    if (!actor.preferences.onboarding) {
+      throw new Error(
+        'This command can only be run as part of the onboarding process started on the Expo website. Visit https://expo.new to start a new project.'
+      );
+    }
+
+    if (!actor.preferences.onboarding.platform) {
+      throw new Error(
+        'This command can only be run as part of the onboarding process started on the Expo website. It seems like you started an onboarding process, but we are missing some information needed to be filled in before running the eas init:onboarding command (selected platform). Continue the onboarding process on the Expo website.'
+      );
+    }
+    if (!actor.preferences.onboarding.environment) {
+      throw new Error(
+        'This command can only be run as part of the onboarding process started on the Expo website. It seems like you started an onboarding process, but we are missing some information needed to be filled in before running the eas init:onboarding command (selected environment). Continue the onboarding process on the Expo website.'
+      );
+    }
+    if (!actor.preferences.onboarding.deviceType) {
+      throw new Error(
+        'This command can only be run as part of the onboarding process started on the Expo website. It seems like you started an onboarding process, but we are missing some information needed to be filled in before running the eas init:onboarding command (selected device type). Continue the onboarding process on the Expo website.'
+      );
+    }
+
+    if (
+      new Date(actor.preferences.onboarding.lastUsed) < new Date(Date.now() - 1000 * 60 * 60 * 24)
+    ) {
+      Log.warn(
+        'It seems like you started an onboarding process, but it has been a while since you last used it. If you want to start a new onboarding process, visit https://expo.new.'
+      );
+      Log.log();
+    }
+
+    const platform =
+      actor.preferences.onboarding.platform === AppPlatform.Android
+        ? Platform.ANDROID
+        : Platform.IOS;
+
+    const app = await AppQuery.byIdAsync(graphqlClient, actor.preferences.onboarding.appId);
+
+    const githubUsername = app.githubRepository
+      ? app.githubRepository.metadata.githubRepoOwnerName
+      : 'expo';
+    const githubRepositoryName = app.githubRepository
+      ? app.githubRepository.metadata.githubRepoName
+      : 'expo-template-default';
+
+    Log.log(`👋 Welcome to Expo, ${actor.username}!`);
+    Log.log();
+    Log.log('✨ We will continue your onboarding process in EAS CLI');
+    Log.log();
+    Log.log(
+      `🚚 Let's start by cloning ${
+        app.githubRepository
+          ? `your project (${githubUsername}/${githubRepositoryName})`
+          : `default Expo template project (${githubUsername}/${githubRepositoryName})`
+      } from GitHub and installing dependencies.`
+    );
+    Log.log();
+    let initialTargetProjectDirectory: string;
+    if (targetProjectDirInput) {
+      initialTargetProjectDirectory = targetProjectDirInput;
+      Log.log(`📂 Cloning the project to ${initialTargetProjectDirectory}`);
+    } else {
+      const { selectedTargetProjectDirectory } = await promptAsync({
+        type: 'text',
+        name: 'selectedTargetProjectDirectory',
+        message: app.githubRepository
+          ? '📂 Where would you like to clone the project to?'
+          : '📂 Where would you like to create your new project directory?',
+        initial: app.githubRepository
+          ? path.join(process.cwd(), githubRepositoryName)
+          : path.join(process.cwd(), `${actor.username}-first-project`),
+      });
+      initialTargetProjectDirectory = selectedTargetProjectDirectory;
+    }
+    Log.log();
+
+    const cloneMethod = (await canAccessRepositoryUsingSshAsync({
+      githubUsername,
+      githubRepositoryName,
+    }))
+      ? 'ssh'
+      : 'https';
+    Log.log(chalk.dim(`We detected that ${cloneMethod} is your preffered git clone method`));
+    Log.log();
+
+    const { targetProjectDir: finalTargetProjectDirectory } = await runGitCloneAsync({
+      githubUsername,
+      githubRepositoryName,
+      targetProjectDir: initialTargetProjectDirectory,
+      cloneMethod,
+    });
+
+    const vcsClient = new GitClient(finalTargetProjectDirectory);
+    if (!app.githubRepository) {
+      await fs.remove(path.join(finalTargetProjectDirectory, '.git'));
+      await runCommandAsync({
+        cwd: finalTargetProjectDirectory,
+        command: 'git',
+        args: ['init'],
+      });
+      Log.log();
+      await configureProjectFromBareDefaultExpoTemplateAsync({
+        app,
+        vcsClient,
+        targetDir: finalTargetProjectDirectory,
+      });
+    }
+
+    await installDependenciesAsync({
+      projectDir: finalTargetProjectDirectory,
+    });
+    const exp = await getPrivateExpoConfigWithProjectIdAsync({
+      projectDir: finalTargetProjectDirectory,
+      graphqlClient,
+      actor,
+    });
+    const getDynamicProjectConfigFn = getDynamicPrivateProjectConfigGetter({
+      projectDir: finalTargetProjectDirectory,
+      graphqlClient,
+      actor,
+    });
+
+    if (!app.githubRepository) {
+      await runCommandAsync({
+        cwd: finalTargetProjectDirectory,
+        command: 'npx',
+        args: ['expo', 'install', 'expo-updates'],
+      });
+      Log.log();
+      await runCommandAsync({
+        cwd: finalTargetProjectDirectory,
+        command: 'npx',
+        args: ['expo', 'install', 'expo-insights'],
+      });
+      Log.log();
+      await runCommandAsync({
+        cwd: finalTargetProjectDirectory,
+        command: 'npx',
+        args: ['expo', 'install', 'expo-dev-client'],
+      });
+      Log.log();
+    }
+    await vcsClient.trackFileAsync('package-lock.json');
+
+    const shouldSetupCredentials =
+      ((platform === Platform.IOS &&
+        actor.preferences.onboarding.deviceType === OnboardingDeviceType.Device) ||
+        platform === Platform.ANDROID) &&
+      actor.preferences.onboarding.environment === OnboardingEnvironment.DevBuild;
+    if (shouldSetupCredentials) {
+      Log.log('🔑 Now we need to set up build credentials for your project:');
+      await new SetUpBuildCredentialsCommandAction(
+        actor,
+        graphqlClient,
+        vcsClient,
+        analytics,
+        exp,
+        getDynamicProjectConfigFn,
+        platform,
+        actor.preferences.onboarding.deviceType === OnboardingDeviceType.Simulator
+          ? 'development-simulator'
+          : 'development',
+        finalTargetProjectDirectory
+      ).runAsync();
+    }
+
+    if (app.githubRepository && (await vcsClient.hasUncommittedChangesAsync())) {
+      Log.log(
+        '📦 We will now commit the changes made by the configuration process and push them to GitHub:'
+      );
+      Log.log();
+      Log.log('🔍 Checking for changes in the repository...');
+      await vcsClient.showChangedFilesAsync();
+      await reviewAndCommitChangesAsync(
+        vcsClient,
+        `[eas-onboarding] Install dependencies${
+          shouldSetupCredentials ? ' and set up build credentials' : ''
+        }`,
+        { nonInteractive: false }
+      );
+      Log.log('📤 Pushing changes to GitHub...');
+      await runGitPushAsync({
+        targetProjectDir: finalTargetProjectDirectory,
+      });
+    } else if (!app.githubRepository) {
+      await runCommandAsync({
+        cwd: finalTargetProjectDirectory,
+        command: 'git',
+        args: ['add', '.'],
+      });
+      Log.log();
+      await runCommandAsync({
+        cwd: finalTargetProjectDirectory,
+        command: 'git',
+        args: ['commit', '-m', 'Initial commit'],
+      });
+      Log.log();
+    }
+
+    Log.log();
+    Log.log('🎉 We finished configuring your project.');
+    Log.log();
+    if (
+      !!app.githubRepository ||
+      actor.preferences.onboarding.environment === OnboardingEnvironment.ExpoGo
+    ) {
+      Log.log('🚀 You can now go back to the website to continue:');
+      const url = new URL(
+        `/onboarding/develop/set-up-project-on-your-machine?project=${app.slug}&accountId=${app.ownerAccount.id}`,
+        getExpoWebsiteBaseUrl()
+      ).toString();
+      Log.log(`👉 ${link(url)}`);
+    } else {
+      Log.log('🚀 Now we are going to trigger your first build');
+      Log.log();
+      const { buildIds } = await runBuildAndSubmitAsync(
+        graphqlClient,
+        analytics,
+        vcsClient,
+        finalTargetProjectDirectory,
+        {
+          nonInteractive: true,
+          requestedPlatform:
+            platform === Platform.ANDROID ? RequestedPlatform.Android : RequestedPlatform.Ios,
+          profile:
+            actor.preferences.onboarding.deviceType === OnboardingDeviceType.Simulator
+              ? 'development-simulator'
+              : 'development',
+          wait: false,
+          clearCache: false,
+          json: false,
+          autoSubmit: false,
+          localBuildOptions: {},
+          freezeCredentials: false,
+          repack: true,
+        },
+        actor,
+        getDynamicProjectConfigFn
+      );
+      const buildId = buildIds[0];
+      Log.log();
+      Log.log('🚀 You can now go back to the website to continue:');
+      const url = new URL(
+        `/onboarding/develop/set-up-project-on-your-machine?project=${app.slug}&accountId=${app.ownerAccount.id}&buildId=${buildId}`,
+        getExpoWebsiteBaseUrl()
+      ).toString();
+      Log.log(`👉 ${link(url)}`);
+    }
+
+    const { __typename, ...previousPreferences } = actor.preferences.onboarding;
+    await UserPreferencesMutation.markCliDoneInOnboardingUserPreferencesAsync(graphqlClient, {
+      ...previousPreferences,
+      appId: app.id,
+    });
+  }
+}
+
+// we can't get this automated by using command context because when we run a command the project directory doesn't exist yet
+async function getPrivateExpoConfigWithProjectIdAsync({
+  projectDir,
+  graphqlClient,
+  actor,
+  options,
+}: {
+  projectDir: string;
+  graphqlClient: ExpoGraphqlClient;
+  actor: Actor;
+  options?: ExpoConfigOptions;
+}): Promise<CredentialsContextProjectInfo> {
+  const expBefore = getPrivateExpoConfig(projectDir, options);
+  const projectId = await validateOrSetProjectIdAsync({
+    exp: expBefore,
+    graphqlClient,
+    actor,
+    options: {
+      nonInteractive: false,
+    },
+    cwd: projectDir,
+  });
+  const exp = getPrivateExpoConfig(projectDir, options);
+  return {
+    exp,
+    projectId,
+  };
+}
+
+// we can't get this automated by using command context because when we run a command the project directory doesn't exist yet
+function getDynamicPrivateProjectConfigGetter({
+  projectDir,
+  graphqlClient,
+  actor,
+}: {
+  projectDir: string;
+  graphqlClient: ExpoGraphqlClient;
+  actor: Actor;
+}): DynamicConfigContextFn {
+  return async (options?: ExpoConfigOptions) => {
+    return {
+      ...(await getPrivateExpoConfigWithProjectIdAsync({
+        projectDir,
+        graphqlClient,
+        actor,
+        options,
+      })),
+      projectDir,
+    };
+  };
+}
+
+async function configureProjectFromBareDefaultExpoTemplateAsync({
+  app,
+  vcsClient,
+  targetDir,
+}: {
+  app: AppFragment;
+  vcsClient: GitClient;
+  targetDir: string;
+}): Promise<void> {
+  // Android package name requires each component to start with a lowercase letter.
+  const isUsernameValidSegment = /^[^a-z]/.test(app.ownerAccount.name);
+  const userPrefix = isUsernameValidSegment ? 'user' : '';
+  const isSlugValidSegment = /^[^a-z]/.test(app.slug);
+  const slugPrefix = isSlugValidSegment ? 'app' : '';
+
+  const bundleIdentifier = `com.${userPrefix}${stripInvalidCharactersForBundleIdentifier(
+    app.ownerAccount.name
+  )}.${slugPrefix}${stripInvalidCharactersForBundleIdentifier(app.slug)}`;
+  const updateUrl = getEASUpdateURL(app.id);
+
+  const easBuildGitHubConfig = {
+    android: {
+      image: 'latest',
+    },
+    ios: {
+      image: 'latest',
+    },
+  };
+
+  const easJson: EasJson = {
+    cli: {
+      version: `>= ${easCliVersion}`,
+    },
+    build: {
+      development: {
+        developmentClient: true,
+        distribution: 'internal',
+        ...easBuildGitHubConfig,
+      },
+      'development-simulator': {
+        extends: 'development',
+        ios: {
+          simulator: true,
+        },
+      },
+      preview: {
+        distribution: 'internal',
+        channel: 'main',
+        ...easBuildGitHubConfig,
+      },
+      production: {
+        channel: 'production',
+        ...easBuildGitHubConfig,
+      },
+    },
+    submit: {
+      production: {},
+    },
+  };
+
+  const easJsonPath = path.join(targetDir, 'eas.json');
+  await fs.writeFile(easJsonPath, `${JSON.stringify(easJson, null, 2)}\n`);
+  await vcsClient.trackFileAsync(easJsonPath);
+  Log.log(
+    `✅ Generated ${chalk.bold('eas.json')}. ${learnMore(
+      'https://docs.expo.dev/build-reference/eas-json/'
+    )}`
+  );
+  Log.log();
+
+  const baseExpoConfig = JSON.parse(await fs.readFile(path.join(targetDir, 'app.json'), 'utf8'))
+    .expo as ExpoConfig;
+
+  const expoConfig: ExpoConfig = {
+    ...baseExpoConfig,
+    name: app.name ?? app.slug,
+    slug: app.slug,
+    extra: {
+      eas: {
+        projectId: app.id,
+      },
+    },
+    owner: app.ownerAccount.name,
+    updates: {
+      url: updateUrl,
+    },
+    runtimeVersion: {
+      policy: 'appVersion',
+    },
+    ios: {
+      ...baseExpoConfig.ios,
+      bundleIdentifier,
+    },
+    android: {
+      ...baseExpoConfig.android,
+      package: bundleIdentifier,
+    },
+  };
+
+  const appJsonPath = path.join(targetDir, 'app.json');
+  await fs.writeFile(appJsonPath, `${JSON.stringify({ expo: expoConfig }, null, 2)}\n`);
+  await vcsClient.trackFileAsync(appJsonPath);
+  Log.log(
+    `✅ Generated ${chalk.bold('app.json')}. ${learnMore(
+      'https://docs.expo.dev/versions/latest/config/app/'
+    )}`
+  );
+  Log.log();
+}
+
+function stripInvalidCharactersForBundleIdentifier(string: string): string {
+  return string.replaceAll(/[^A-Za-z0-9]/g, '');
+}
@@ -70,20 +70,6 @@ describe(UpdatePublish.name, () => {
    jest.mocked(PublishMutation.publishUpdateGroupAsync).mockClear();
  });

-  // Deprecated and split to a new command: update:republish
-  it('errors with --republish', async () => {
-    await expect(new UpdatePublish(['--republish'], commandOptions).run()).rejects.toThrow(
-      '--group and --republish flags are deprecated'
-    );
-  });
-
-  // Deprecated and split to a new command: update:republish
-  it('errors with --group', async () => {
-    await expect(new UpdatePublish(['--group=abc123'], commandOptions).run()).rejects.toThrow(
-      '--group and --republish flags are deprecated'
-    );
-  });
-
  it('errors with both --channel and --branch', async () => {
    const flags = ['--channel=channel123', '--branch=branch123'];

@@ -152,16 +138,7 @@ describe(UpdatePublish.name, () => {

    // Add configuration to the project that should not be included in the update
    const { appJson } = mockTestProject({
-      expoConfig: {
-        hooks: {
-          postPublish: [
-            {
-              file: 'custom-hook.js',
-              config: { some: 'config' },
-            },
-          ],
-        },
-      },
+      expoConfig: {},
    });

    const { platforms, runtimeVersion } = mockTestExport({ platforms: ['ios'] });
@@ -274,6 +251,7 @@ function mockTestProject({
  jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
    id: '1234',
    slug: 'testing-123',
+    name: 'testing-123',
    fullName: '@jester/testing-123',
    ownerAccount: jester.accounts[0],
  });
@@ -55,7 +55,9 @@ jest.mock('../../../utils/code-signing');
 jest.mock('../../../fetch');

 describe(UpdateRepublish.name, () => {
-  afterEach(() => vol.reset());
+  afterEach(() => {
+    vol.reset();
+  });

  it('errors when providing both --group and --branch', async () => {
    const flags = ['--group=1234', '--branch=main'];
@@ -367,6 +369,7 @@ function mockTestProject({
  jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
    id: '1234',
    slug: 'testing-123',
+    name: 'testing-123',
    fullName: '@jester/testing-123',
    ownerAccount: jester.accounts[0],
  });
@@ -68,7 +68,9 @@ jest.mock('../../../project/publish', () => ({
 }));

 describe(UpdateRollBackToEmbedded.name, () => {
-  afterEach(() => vol.reset());
+  afterEach(() => {
+    vol.reset();
+  });

  it('errors with both --channel and --branch', async () => {
    const flags = ['--channel=channel123', '--branch=branch123'];
@@ -142,16 +144,7 @@ describe(UpdateRollBackToEmbedded.name, () => {

    // Add configuration to the project that should not be included in the update
    mockTestProject({
-      expoConfig: {
-        hooks: {
-          postPublish: [
-            {
-              file: 'custom-hook.js',
-              config: { some: 'config' },
-            },
-          ],
-        },
-      },
+      expoConfig: {},
    });

    const platforms = ['ios'];
@@ -259,6 +252,7 @@ function mockTestProject({
  jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
    id: '1234',
    slug: 'testing-123',
+    name: 'testing-123',
    fullName: '@jester/testing-123',
    ownerAccount: jester.accounts[0],
  });
@@ -52,6 +52,7 @@ export default class UpdateConfigure extends EasCommand {
      projectDir,
      platform,
      vcsClient,
+      env: undefined,
    });

    await ensureEASUpdateIsConfiguredInEasJsonAsync(projectDir);
@@ -0,0 +1,143 @@
+import { Flags } from '@oclif/core';
+import assert from 'assert';
+import chalk from 'chalk';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import { EasNonInteractiveAndJsonFlags } from '../../commandUtils/flags';
+import { PublishMutation } from '../../graphql/mutations/PublishMutation';
+import { UpdateQuery } from '../../graphql/queries/UpdateQuery';
+import Log from '../../log';
+import { promptAsync } from '../../prompts';
+import {
+  formatUpdateGroup,
+  getUpdateGroupDescriptions,
+  getUpdateJsonInfosForUpdates,
+} from '../../update/utils';
+import { enableJsonOutput, printJsonOnlyOutput } from '../../utils/json';
+
+export default class UpdateEdit extends EasCommand {
+  static override description = 'edit all the updates in an update group';
+  static override hidden = true;
+
+  static override args = [
+    {
+      name: 'groupId',
+      required: true,
+      description: 'The ID of an update group to edit.',
+    },
+  ];
+
+  static override flags = {
+    'rollout-percentage': Flags.integer({
+      description: `Rollout percentage to set for a rollout update. The specified number must be an integer between 1 and 100.`,
+      required: false,
+      min: 0,
+      max: 100,
+    }),
+    ...EasNonInteractiveAndJsonFlags,
+  };
+
+  static override contextDefinition = {
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  async runAsync(): Promise<void> {
+    const {
+      args: { groupId },
+      flags: {
+        'rollout-percentage': rolloutPercentage,
+        json: jsonFlag,
+        'non-interactive': nonInteractive,
+      },
+    } = await this.parse(UpdateEdit);
+
+    const {
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(UpdateEdit, { nonInteractive });
+
+    if (jsonFlag) {
+      enableJsonOutput();
+    }
+
+    const proposedUpdatesToEdit = (
+      await UpdateQuery.viewUpdateGroupAsync(graphqlClient, { groupId })
+    ).map(u => ({ updateId: u.id, rolloutPercentage: u.rolloutPercentage }));
+
+    const updatesToEdit = proposedUpdatesToEdit.filter(
+      (u): u is { updateId: string; rolloutPercentage: number } =>
+        u.rolloutPercentage !== null && u.rolloutPercentage !== undefined
+    );
+
+    if (updatesToEdit.length === 0) {
+      throw new Error('Cannot edit rollout percentage on update group that is not a rollout.');
+    }
+
+    const rolloutPercentagesSet = new Set(updatesToEdit.map(u => u.rolloutPercentage));
+    if (rolloutPercentagesSet.size !== 1) {
+      throw new Error(
+        'Cannot edit rollout percentage for a group with non-equal percentages for updates in the group.'
+      );
+    }
+
+    const previousPercentage = updatesToEdit[0].rolloutPercentage;
+
+    if (nonInteractive && rolloutPercentage === undefined) {
+      throw new Error('Must specify --rollout-percentage in non-interactive mode');
+    }
+
+    let rolloutPercentageToSet = rolloutPercentage;
+    if (rolloutPercentageToSet === undefined) {
+      const { percentage } = await promptAsync({
+        type: 'number',
+        message: `New rollout percentage (min: ${previousPercentage}, max: 100)`,
+        validate: value => {
+          if (value <= previousPercentage) {
+            return `Rollout percentage must be greater than previous rollout percentage (${previousPercentage})`;
+          } else if (value > 100) {
+            return `Rollout percentage must not be greater than 100`;
+          } else {
+            return true;
+          }
+        },
+        name: 'percentage',
+      });
+
+      if (!percentage) {
+        Log.log('Aborted.');
+        return;
+      }
+
+      rolloutPercentageToSet = percentage;
+    }
+
+    assert(rolloutPercentageToSet !== undefined);
+
+    if (rolloutPercentageToSet < previousPercentage) {
+      throw new Error(
+        `Rollout percentage must be greater than previous rollout percentage (${previousPercentage})`
+      );
+    } else if (rolloutPercentageToSet > 100) {
+      throw new Error('Rollout percentage must not be greater than 100');
+    }
+
+    const updatedUpdates = await Promise.all(
+      updatesToEdit.map(async u => {
+        return await PublishMutation.setRolloutPercentageAsync(
+          graphqlClient,
+          u.updateId,
+          rolloutPercentageToSet!
+        );
+      })
+    );
+
+    if (jsonFlag) {
+      printJsonOnlyOutput(getUpdateJsonInfosForUpdates(updatedUpdates));
+    } else {
+      const [updateGroupDescription] = getUpdateGroupDescriptions([updatedUpdates]);
+
+      Log.log(chalk.bold('Update group:'));
+
+      Log.log(formatUpdateGroup(updateGroupDescription));
+    }
+  }
+}
@@ -1,4 +1,4 @@
-import { Platform as PublishPlatform } from '@expo/config';
+import { Workflow } from '@expo/eas-build-job';
 import { Errors, Flags } from '@oclif/core';
 import chalk from 'chalk';
 import nullthrows from 'nullthrows';
@@ -6,7 +6,6 @@ import nullthrows from 'nullthrows';
 import { ensureBranchExistsAsync } from '../../branch/queries';
 import { ensureRepoIsCleanAsync } from '../../build/utils/repository';
 import { getUpdateGroupUrl } from '../../build/utils/url';
-import { ensureChannelExistsAsync } from '../../channel/queries';
 import EasCommand from '../../commandUtils/EasCommand';
 import { EasNonInteractiveAndJsonFlags } from '../../commandUtils/flags';
 import { getPaginatedQueryOptions } from '../../commandUtils/pagination';
@@ -16,6 +15,7 @@ import {
  StatuspageServiceName,
  UpdateInfoGroup,
  UpdatePublishMutation,
+  UpdateRolloutInfoGroup,
 } from '../../graphql/generated';
 import { PublishMutation } from '../../graphql/mutations/PublishMutation';
 import Log, { learnMore, link } from '../../log';
@@ -23,16 +23,17 @@ import { ora } from '../../ora';
 import { RequestedPlatform } from '../../platform';
 import { getOwnerAccountForProjectIdAsync } from '../../project/projectUtils';
 import {
-  ExpoCLIExportPlatformFlag,
  RawAsset,
+  UpdatePublishPlatform,
  buildBundlesAsync,
  buildUnsortedUpdateInfoGroupAsync,
  collectAssetsAsync,
  defaultPublishPlatforms,
-  filterExportedPlatformsByFlag,
+  filterCollectedAssetsByRequestedPlatforms,
+  generateEasMetadataAsync,
  getBranchNameForCommandAsync,
-  getRequestedPlatform,
  getRuntimeToPlatformMappingFromRuntimeVersions,
+  getRuntimeToUpdateRolloutInfoGroupMappingAsync,
  getRuntimeVersionObjectAsync,
  getUpdateMessageForCommandAsync,
  isUploadedAssetCountAboveWarningThreshold,
@@ -40,6 +41,7 @@ import {
  resolveInputDirectoryAsync,
  uploadAssetsAsync,
 } from '../../project/publish';
+import { resolveWorkflowPerPlatformAsync } from '../../project/workflow';
 import { ensureEASUpdateIsConfiguredAsync } from '../../update/configure';
 import { getUpdateJsonInfosForUpdates } from '../../update/utils';
 import {
@@ -64,17 +66,15 @@ type RawUpdateFlags = {
  'skip-bundler': boolean;
  'clear-cache': boolean;
  'private-key-path'?: string;
+  'emit-metadata': boolean;
+  'rollout-percentage'?: number;
  'non-interactive': boolean;
  json: boolean;
-  /** @deprecated see UpdateRepublish command */
-  group?: string;
-  /** @deprecated see UpdateRepublish command */
-  republish?: boolean;
 };

 type UpdateFlags = {
  auto: boolean;
-  platform: ExpoCLIExportPlatformFlag;
+  platform: RequestedPlatform;
  branchName?: string;
  channelName?: string;
  updateMessage?: string;
@@ -82,6 +82,8 @@ type UpdateFlags = {
  skipBundler: boolean;
  clearCache: boolean;
  privateKeyPath?: string;
+  emitMetadata: boolean;
+  rolloutPercentage?: number;
  json: boolean;
  nonInteractive: boolean;
 };
@@ -103,14 +105,6 @@ export default class UpdatePublish extends EasCommand {
      description: 'A short message describing the update',
      required: false,
    }),
-    republish: Flags.boolean({
-      description: 'Republish an update group (deprecated, see republish command)',
-      exclusive: ['input-dir', 'skip-bundler'],
-    }),
-    group: Flags.string({
-      description: 'Update group to republish (deprecated, see republish command)',
-      exclusive: ['input-dir', 'skip-bundler'],
-    }),
    'input-dir': Flags.string({
      description: 'Location of the bundle',
      default: 'dist',
@@ -124,6 +118,17 @@ export default class UpdatePublish extends EasCommand {
      description: `Clear the bundler cache before publishing`,
      default: false,
    }),
+    'emit-metadata': Flags.boolean({
+      description: `Emit "eas-update-metadata.json" in the bundle folder with detailed information about the generated updates`,
+      default: false,
+    }),
+    'rollout-percentage': Flags.integer({
+      description: `Percentage of users this update should be immediately available to. Users not in the rollout will be served the previous latest update on the branch, even if that update is itself being rolled out. The specified number must be an integer between 1 and 100. When not specified, this defaults to 100.`,
+      required: false,
+      hidden: true,
+      min: 0,
+      max: 100,
+    }),
    platform: Flags.enum({
      char: 'p',
      options: [
@@ -140,7 +145,7 @@ export default class UpdatePublish extends EasCommand {
      default: false,
    }),
    'private-key-path': Flags.string({
-      description: `File containing the PEM-encoded private key corresponding to the certificate in expo-updates' configuration. Defaults to a file named "private-key.pem" in the certificate's directory.`,
+      description: `File containing the PEM-encoded private key corresponding to the certificate in expo-updates' configuration. Defaults to a file named "private-key.pem" in the certificate's directory. Only relevant if you are using code signing: https://docs.expo.dev/eas-update/code-signing/`,
      required: false,
    }),
    ...EasNonInteractiveAndJsonFlags,
@@ -157,7 +162,7 @@ export default class UpdatePublish extends EasCommand {
    const paginatedQueryOptions = getPaginatedQueryOptions(rawFlags);
    const {
      auto: autoFlag,
-      platform: platformFlag,
+      platform: requestedPlatform,
      channelName: channelNameArg,
      updateMessage: updateMessageArg,
      inputDir,
@@ -167,6 +172,8 @@ export default class UpdatePublish extends EasCommand {
      json: jsonFlag,
      nonInteractive,
      branchName: branchNameArg,
+      emitMetadata,
+      rolloutPercentage,
    } = this.sanitizeFlags(rawFlags);

    const {
@@ -195,10 +202,11 @@ export default class UpdatePublish extends EasCommand {

    await ensureEASUpdateIsConfiguredAsync({
      exp: expPossiblyWithoutEasUpdateConfigured,
-      platform: getRequestedPlatform(platformFlag),
+      platform: requestedPlatform,
      projectDir,
      projectId,
      vcsClient,
+      env: undefined,
    });

    const { exp } = await getDynamicPublicProjectConfigAsync();
@@ -227,7 +235,13 @@ export default class UpdatePublish extends EasCommand {
    if (!skipBundler) {
      const bundleSpinner = ora().start('Exporting...');
      try {
-        await buildBundlesAsync({ projectDir, inputDir, exp, platformFlag, clearCache });
+        await buildBundlesAsync({
+          projectDir,
+          inputDir,
+          exp,
+          platformFlag: requestedPlatform,
+          clearCache,
+        });
        bundleSpinner.succeed('Exported bundle(s)');
      } catch (e) {
        bundleSpinner.fail('Export failed');
@@ -242,15 +256,15 @@ export default class UpdatePublish extends EasCommand {
    let unsortedUpdateInfoGroups: UpdateInfoGroup = {};
    let uploadedAssetCount = 0;
    let assetLimitPerUpdateGroup = 0;
-    let realizedPlatforms: PublishPlatform[] = [];
+    let realizedPlatforms: UpdatePublishPlatform[] = [];

    try {
      const collectedAssets = await collectAssetsAsync(distRoot);
-      const assets = filterExportedPlatformsByFlag(collectedAssets, platformFlag);
-      realizedPlatforms = Object.keys(assets) as PublishPlatform[];
+      const assets = filterCollectedAssetsByRequestedPlatforms(collectedAssets, requestedPlatform);
+      realizedPlatforms = Object.keys(assets) as UpdatePublishPlatform[];

      // Timeout mechanism:
-      // - Start with NO_ACTIVITY_TIMEOUT. 90 seconds is chosen because the cloud function that processes
+      // - Start with NO_ACTIVITY_TIMEOUT. 180 seconds is chosen because the cloud function that processes
      //   uploaded assets has a timeout of 60 seconds and uploading can take some time on a slow connection.
      // - Each time one or more assets reports as ready, reset the timeout.
      // - Each time an asset upload begins, reset the timeout. This includes retries.
@@ -259,7 +273,7 @@ export default class UpdatePublish extends EasCommand {
      // - At the same time as upload is started, start timeout checker which checks every 1 second to see
      //   if timeout has been reached. When timeout expires, send a cancellation signal to currently running
      //   upload function call to instruct it to stop uploading or checking for successful processing.
-      const NO_ACTIVITY_TIMEOUT = 90 * 1000; // 90 seconds
+      const NO_ACTIVITY_TIMEOUT = 180 * 1000; // 180 seconds
      let lastUploadedStorageKeys = new Set<string>();
      let lastAssetUploadResults: {
        asset: RawAsset & { storageKey: string };
@@ -340,7 +354,7 @@ export default class UpdatePublish extends EasCommand {
        Log.debug(chalk.dim(`- ${uploadedAssetPath}`));
      }

-      const platformString = (Object.keys(assets) as PublishPlatform[])
+      const platformString = realizedPlatforms
        .map(platform => {
          const collectedAssetForPlatform = nullthrows(assets[platform]);
          const totalAssetsForPlatform = collectedAssetForPlatform.assets.length + 1; // launch asset
@@ -359,29 +373,34 @@ export default class UpdatePublish extends EasCommand {
      throw e;
    }

+    const workflows = await resolveWorkflowPerPlatformAsync(projectDir, vcsClient);
    const runtimeVersions = await getRuntimeVersionObjectAsync({
      exp,
      platforms: realizedPlatforms,
      projectDir,
-      vcsClient,
+      workflows: {
+        ...workflows,
+        web: Workflow.UNKNOWN,
+      },
+      env: undefined,
    });
    const runtimeToPlatformMapping =
      getRuntimeToPlatformMappingFromRuntimeVersions(runtimeVersions);

-    const { branchId, createdBranch } = await ensureBranchExistsAsync(graphqlClient, {
+    const { branchId } = await ensureBranchExistsAsync(graphqlClient, {
      appId: projectId,
      branchName,
    });
-    if (createdBranch) {
-      await ensureChannelExistsAsync(graphqlClient, {
-        appId: projectId,
-        branchId,
-        channelName: branchName,
-      });
-      Log.withTick(
-        `Channel: ${chalk.bold(branchName)} pointed at branch: ${chalk.bold(branchName)}`
-      );
-    }
+
+    const runtimeVersionToRolloutInfoGroup =
+      rolloutPercentage !== undefined
+        ? await getRuntimeToUpdateRolloutInfoGroupMappingAsync(graphqlClient, {
+            appId: projectId,
+            branchName,
+            rolloutPercentage,
+            runtimeToPlatformMapping,
+          })
+        : undefined;

    const gitCommitHash = await vcsClient.getCommitHashAsync();
    const isGitWorkingTreeDirty = await vcsClient.hasUncommittedChangesAsync();
@@ -396,9 +415,22 @@ export default class UpdatePublish extends EasCommand {
          ])
        );

+        const rolloutInfoGroupForRuntimeVersion = runtimeVersionToRolloutInfoGroup
+          ? runtimeVersionToRolloutInfoGroup.get(runtimeVersion)
+          : null;
+        const localRolloutInfoGroup = rolloutInfoGroupForRuntimeVersion
+          ? Object.fromEntries(
+              platforms.map(platform => [
+                platform,
+                rolloutInfoGroupForRuntimeVersion[platform as keyof UpdateRolloutInfoGroup],
+              ])
+            )
+          : null;
+
        return {
          branchId,
          updateInfoGroup: localUpdateInfoGroup,
+          rolloutInfoGroup: localRolloutInfoGroup,
          runtimeVersion,
          message: updateMessage,
          gitCommitHash,
@@ -465,6 +497,10 @@ export default class UpdatePublish extends EasCommand {
      throw e;
    }

+    if (!skipBundler && emitMetadata) {
+      Log.log('Generating eas-update-metadata.json');
+      await generateEasMetadataAsync(distRoot, getUpdateJsonInfosForUpdates(newUpdates));
+    }
    if (jsonFlag) {
      printJsonOnlyOutput(getUpdateJsonInfosForUpdates(newUpdates));
    } else {
@@ -508,6 +544,22 @@ export default class UpdatePublish extends EasCommand {
              ? [{ label: 'Android update ID', value: newAndroidUpdate.id }]
              : []),
            ...(newIosUpdate ? [{ label: 'iOS update ID', value: newIosUpdate.id }] : []),
+            ...(newAndroidUpdate?.rolloutControlUpdate
+              ? [
+                  {
+                    label: 'Android Rollout',
+                    value: `${newAndroidUpdate.rolloutPercentage}% (Base update ID: ${newAndroidUpdate.rolloutControlUpdate.id})`,
+                  },
+                ]
+              : []),
+            ...(newIosUpdate?.rolloutControlUpdate
+              ? [
+                  {
+                    label: 'iOS Rollout',
+                    value: `${newIosUpdate.rolloutPercentage}% (Base update ID: ${newIosUpdate.rolloutControlUpdate.id})`,
+                  },
+                ]
+              : []),
            { label: 'Message', value: updateMessage ?? '' },
            ...(gitCommitHash
              ? [
@@ -517,7 +569,7 @@ export default class UpdatePublish extends EasCommand {
                  },
                ]
              : []),
-            { label: 'Website link', value: updateGroupLink },
+            { label: 'EAS Dashboard', value: updateGroupLink },
          ])
        );
        Log.addNewLineIfNone();
@@ -548,21 +600,14 @@ export default class UpdatePublish extends EasCommand {
      );
    }

-    if (flags.group || flags.republish) {
-      // Pick the first flag set that is defined, in this specific order
-      const args = [
-        ['--group', flags.group],
-        ['--branch', flags.branch],
-      ].filter(([_, value]) => value)[0];
+    const skipBundler = flags['skip-bundler'] ?? false;
+    let emitMetadata = flags['emit-metadata'] ?? false;

-      Log.newLine();
+    if (skipBundler && emitMetadata) {
+      emitMetadata = false;
      Log.warn(
-        'The --group and --republish flags are deprecated, use the republish command instead:'
+        'ignoring flag --emit-metadata as metadata cannot be generated when skipping bundle generation'
      );
-      Log.warn(`  ${chalk.bold([`eas update:republish`, ...(args ?? [])].join(' '))}`);
-      Log.newLine();
-
-      Errors.error('--group and --republish flags are deprecated', { exit: 1 });
    }

    return {
@@ -571,11 +616,13 @@ export default class UpdatePublish extends EasCommand {
      channelName,
      updateMessage,
      inputDir: flags['input-dir'],
-      skipBundler: flags['skip-bundler'],
+      skipBundler,
      clearCache: flags['clear-cache'],
      platform: flags.platform as RequestedPlatform,
      privateKeyPath: flags['private-key-path'],
+      rolloutPercentage: flags['rollout-percentage'],
      nonInteractive,
+      emitMetadata,
      json: flags.json ?? false,
    };
  }
@@ -53,10 +53,13 @@ export default class UpdateList extends EasCommand {
    }

    if (all) {
-      listAndRenderUpdateGroupsOnAppAsync(graphqlClient, { projectId, paginatedQueryOptions });
+      await listAndRenderUpdateGroupsOnAppAsync(graphqlClient, {
+        projectId,
+        paginatedQueryOptions,
+      });
    } else {
      if (branchFlag) {
-        listAndRenderUpdateGroupsOnBranchAsync(graphqlClient, {
+        await listAndRenderUpdateGroupsOnBranchAsync(graphqlClient, {
          projectId,
          branchName: branchFlag,
          paginatedQueryOptions,
@@ -81,7 +84,7 @@ export default class UpdateList extends EasCommand {
              offset: 0,
            },
        });
-        listAndRenderUpdateGroupsOnBranchAsync(graphqlClient, {
+        await listAndRenderUpdateGroupsOnBranchAsync(graphqlClient, {
          projectId,
          branchName: selectedBranch.name,
          paginatedQueryOptions,
@@ -69,7 +69,7 @@ export default class UpdateRepublish extends EasCommand {
      required: false,
    }),
    'private-key-path': Flags.string({
-      description: `File containing the PEM-encoded private key corresponding to the certificate in expo-updates' configuration. Defaults to a file named "private-key.pem" in the certificate's directory.`,
+      description: `File containing the PEM-encoded private key corresponding to the certificate in expo-updates' configuration. Defaults to a file named "private-key.pem" in the certificate's directory. Only relevant if you are using code signing: https://docs.expo.dev/eas-update/code-signing/`,
      required: false,
    }),
    ...EasNonInteractiveAndJsonFlags,
@@ -1,11 +1,10 @@
 import { Platform as PublishPlatform } from '@expo/config';
+import { Workflow } from '@expo/eas-build-job';
 import { Errors, Flags } from '@oclif/core';
-import chalk from 'chalk';
 import nullthrows from 'nullthrows';

 import { ensureBranchExistsAsync } from '../../branch/queries';
 import { getUpdateGroupUrl } from '../../build/utils/url';
-import { ensureChannelExistsAsync } from '../../channel/queries';
 import EasCommand from '../../commandUtils/EasCommand';
 import { ExpoGraphqlClient } from '../../commandUtils/context/contextUtils/createGraphqlClient';
 import { EasNonInteractiveAndJsonFlags } from '../../commandUtils/flags';
@@ -25,14 +24,14 @@ import {
  getOwnerAccountForProjectIdAsync,
 } from '../../project/projectUtils';
 import {
-  ExpoCLIExportPlatformFlag,
+  UpdatePublishPlatform,
  defaultPublishPlatforms,
  getBranchNameForCommandAsync,
-  getRequestedPlatform,
  getRuntimeToPlatformMappingFromRuntimeVersions,
  getRuntimeVersionObjectAsync,
  getUpdateMessageForCommandAsync,
 } from '../../project/publish';
+import { resolveWorkflowPerPlatformAsync } from '../../project/workflow';
 import { ensureEASUpdateIsConfiguredAsync } from '../../update/configure';
 import { getUpdateJsonInfosForUpdates } from '../../update/utils';
 import {
@@ -60,7 +59,7 @@ type RawUpdateFlags = {

 type UpdateFlags = {
  auto: boolean;
-  platform: ExpoCLIExportPlatformFlag;
+  platform: RequestedPlatform;
  branchName?: string;
  channelName?: string;
  updateMessage?: string;
@@ -101,7 +100,7 @@ export default class UpdateRollBackToEmbedded extends EasCommand {
      default: false,
    }),
    'private-key-path': Flags.string({
-      description: `File containing the PEM-encoded private key corresponding to the certificate in expo-updates' configuration. Defaults to a file named "private-key.pem" in the certificate's directory.`,
+      description: `File containing the PEM-encoded private key corresponding to the certificate in expo-updates' configuration. Defaults to a file named "private-key.pem" in the certificate's directory. Only relevant if you are using code signing: https://docs.expo.dev/eas-update/code-signing/`,
      required: false,
    }),
    ...EasNonInteractiveAndJsonFlags,
@@ -150,10 +149,11 @@ export default class UpdateRollBackToEmbedded extends EasCommand {

    await ensureEASUpdateIsConfiguredAsync({
      exp: expPossiblyWithoutEasUpdateConfigured,
-      platform: getRequestedPlatform(platformFlag),
+      platform: platformFlag,
      projectDir,
      projectId,
      vcsClient,
+      env: undefined,
    });

    // check that the expo-updates package version supports roll back to embedded
@@ -181,31 +181,27 @@ export default class UpdateRollBackToEmbedded extends EasCommand {
      jsonFlag,
    });

-    const realizedPlatforms: PublishPlatform[] =
+    const realizedPlatforms: UpdatePublishPlatform[] =
      platformFlag === 'all' ? defaultPublishPlatforms : [platformFlag];

-    const { branchId, createdBranch } = await ensureBranchExistsAsync(graphqlClient, {
+    const { branchId } = await ensureBranchExistsAsync(graphqlClient, {
      appId: projectId,
      branchName,
    });
-    if (createdBranch) {
-      await ensureChannelExistsAsync(graphqlClient, {
-        appId: projectId,
-        branchId,
-        channelName: branchName,
-      });
-    }
-
-    Log.withTick(`Channel: ${chalk.bold(branchName)} pointed at branch: ${chalk.bold(branchName)}`);

    const gitCommitHash = await vcsClient.getCommitHashAsync();
    const isGitWorkingTreeDirty = await vcsClient.hasUncommittedChangesAsync();

+    const workflows = await resolveWorkflowPerPlatformAsync(projectDir, vcsClient);
    const runtimeVersions = await getRuntimeVersionObjectAsync({
      exp,
      platforms: realizedPlatforms,
      projectDir,
-      vcsClient,
+      workflows: {
+        ...workflows,
+        web: Workflow.UNKNOWN,
+      },
+      env: undefined,
    });

    let newUpdates: UpdatePublishMutation['updateBranch']['publishUpdateGroups'];
@@ -279,7 +275,7 @@ export default class UpdateRollBackToEmbedded extends EasCommand {
                  },
                ]
              : []),
-            { label: 'Website link', value: updateGroupLink },
+            { label: 'EAS Dashboard', value: updateGroupLink },
          ])
        );
        Log.addNewLineIfNone();
@@ -303,7 +299,7 @@ export default class UpdateRollBackToEmbedded extends EasCommand {
    updateMessage: string | undefined;
    branchId: string;
    codeSigningInfo: CodeSigningInfo | undefined;
-    runtimeVersions: { platform: string; runtimeVersion: string }[];
+    runtimeVersions: { platform: UpdatePublishPlatform; runtimeVersion: string }[];
    realizedPlatforms: PublishPlatform[];
  }): Promise<UpdatePublishMutation['updateBranch']['publishUpdateGroups']> {
    const runtimeToPlatformMapping =
@@ -10,7 +10,7 @@ export default class UpdateRollback extends EasCommand {

  static override flags = {
    'private-key-path': Flags.string({
-      description: `File containing the PEM-encoded private key corresponding to the certificate in expo-updates' configuration. Defaults to a file named "private-key.pem" in the certificate's directory.`,
+      description: `File containing the PEM-encoded private key corresponding to the certificate in expo-updates' configuration. Defaults to a file named "private-key.pem" in the certificate's directory. Only relevant if you are using code signing: https://docs.expo.dev/eas-update/code-signing/`,
      required: false,
    }),
  };
@@ -55,6 +55,7 @@ export const testPKCS12EmptyPasswordKeystore: Keystore = {
 export const testAppFragment: AppFragment = {
  id: 'test-app-id',
  fullName: '@testuser/testapp',
+  name: 'testapp',
  slug: 'testapp',
  ownerAccount: {
    id: 'test-account-id',
@@ -1,5 +1,5 @@
 import AppStoreApi from '../ios/appstore/AppStoreApi';
-import { AuthCtx } from '../ios/appstore/authenticateTypes';
+import { AuthCtx, AuthenticationMode } from '../ios/appstore/authenticateTypes';

 export const testAuthCtx: AuthCtx = {
  appleId: 'test-apple-id',
@@ -9,6 +9,7 @@ export const testAuthCtx: AuthCtx = {

 export function getAppstoreMock(): AppStoreApi {
  return {
+    defaultAuthenticationMode: AuthenticationMode.USER,
    ensureAuthenticatedAsync: jest.fn(),
    ensureBundleIdExistsAsync: jest.fn(),
    listDistributionCertificatesAsync: jest.fn(),
@@ -1,3 +1,5 @@
+import assert from 'node:assert';
+
 import { AppFragment, Role } from '../../graphql/generated';
 import { Actor } from '../../user/User';

@@ -24,6 +26,7 @@ export const jester: Actor = {
  ],
  isExpoAdmin: false,
  featureGates: {},
+  preferences: {},
 };

 export const jester2 = {
@@ -41,6 +44,7 @@ export const jester2 = {
  featureGates: {},
 };

+assert(jester.__typename === 'User');
 export const testUsername = jester.username;
 export const testSlug = 'testApp';
 export const testProjectId = '7ef93448-3bc7-4b57-be32-99326dcf24f0';
@@ -76,6 +80,7 @@ export const testAppJsonWithDifferentOwner = {
 export const testAppQueryByIdResponse: AppFragment = {
  id: testProjectId,
  slug: testSlug,
+  name: 'testing 123',
  fullName: testExperienceName,
  ownerAccount: jester.accounts[0],
 };
@@ -55,6 +55,7 @@ export const testAppleAppIdentifierFragment: AppleAppIdentifierFragment = {
 export const testAppFragment: AppFragment = {
  id: 'test-app-id',
  fullName: '@testuser/testapp',
+  name: 'testapp',
  slug: 'testapp',
  ownerAccount: {
    id: 'test-account-id',
@@ -21,8 +21,8 @@ export default class AndroidCredentialsProvider {
  public readonly platform = Platform.ANDROID;

  constructor(
-    private ctx: CredentialsContext,
-    private options: Options
+    private readonly ctx: CredentialsContext,
+    private readonly options: Options
  ) {}

  public async getCredentialsAsync(
@@ -7,7 +7,7 @@ import { CredentialsContext } from '../../context';
 import { AppLookupParams } from '../api/GraphqlClient';

 export class AssignFcm {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}

  public async runAsync(
    ctx: CredentialsContext,
@@ -7,7 +7,7 @@ import { CredentialsContext } from '../../context';
 import { AppLookupParams } from '../api/GraphqlClient';

 export class AssignGoogleServiceAccountKeyForFcmV1 {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}

  public async runAsync(
    ctx: CredentialsContext,
@@ -7,7 +7,7 @@ import { CredentialsContext } from '../../context';
 import { AppLookupParams } from '../api/GraphqlClient';

 export class AssignGoogleServiceAccountKeyForSubmissions {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}

  public async runAsync(
    ctx: CredentialsContext,
@@ -4,7 +4,7 @@ import { promptAsync } from '../../../prompts';
 import { CredentialsContext } from '../../context';

 export class CreateFcm {
-  constructor(private account: AccountFragment) {}
+  constructor(private readonly account: AccountFragment) {}

  public async runAsync(ctx: CredentialsContext): Promise<AndroidFcmFragment> {
    if (ctx.nonInteractive) {