v9.0.2

[eas-cli] make sure that spinner is not used for interactive git clone command in inint:onboarding and fallback to cloning via https (#2368 )
* [eas-cli] make sure that spinner is not used for interactive `git clone` command in `inint:onboarding` * fallback to https
2026-11-14 10:08:06 -10:00 · 2024-05-09 19:39:29 +02:00 · 2024-05-09 19:38:48 +02:00 · 2024-05-09 18:47:49 +02:00 · 2024-05-09 14:12:44 +00:00 · 2024-05-09 16:07:32 +02:00
138 changed files with 8233 additions and 2449 deletions
@@ -69,16 +69,22 @@ jobs:
      - uses: actions/setup-node@v2
        with:
          node-version: 20
+      - run: brew install python-setuptools
+        env:
+          HOMEBREW_NO_AUTO_UPDATE: 1
      - run: yarn install --frozen-lockfile --check-files
      - run: yarn build
      - name: Build tarballs
        working-directory: ${{ github.workspace }}/packages/eas-cli
        run: |
          yarn pretarball-ci
-          yarn oclif pack:tarballs --no-xz --targets darwin-x64
+          yarn oclif pack:tarballs --no-xz --targets darwin-x64,darwin-arm64
      - id: x64
        run: echo "filename=$(ls eas-*-x64.tar.gz)" >> $GITHUB_OUTPUT
        working-directory: ${{ github.workspace }}/packages/eas-cli/dist
+      - id: arm64
+        run: echo "filename=$(ls eas-*-arm64.tar.gz)" >> $GITHUB_OUTPUT
+        working-directory: ${{ github.workspace }}/packages/eas-cli/dist
      - name: Upload darwin-x64 tarball
        uses: actions/upload-release-asset@v1
        env:
@@ -88,6 +94,15 @@ jobs:
          asset_path: packages/eas-cli/dist/${{ steps.x64.outputs.filename }}
          asset_name: ${{ steps.x64.outputs.filename }}
          asset_content_type: application/gzip
+      - name: Upload darwin-arm64 tarball
+        uses: actions/upload-release-asset@v1
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          upload_url: ${{ needs.release.outputs.upload_url }}
+          asset_path: packages/eas-cli/dist/${{ steps.arm64.outputs.filename }}
+          asset_name: ${{ steps.arm64.outputs.filename }}
+          asset_content_type: application/gzip
  build-windows:
    name: Build for Windows
    runs-on: ubuntu-latest
@@ -211,3 +226,16 @@ jobs:
          SLACK_USERNAME: 'EAS CLI CI'
          SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }}
          SLACK_FOOTER: ''
+  open-pr-in-universe:
+    name: Open a PR with `@expo/eas-json` bump in universe
+    needs: publish-to-npm
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: Open a PR with `@expo/eas-json` version bump in universe
+        uses: benc-uk/workflow-dispatch@v1
+        with:
+          repo: expo/universe
+          ref: main
+          workflow: update-eas-json.yml
+          token: ${{ secrets.EXPO_BOT_PAT }}
@@ -0,0 +1,10 @@
+{
+  "eslint.enable": true,
+  "search.exclude": {
+    "**/node_modules": true,
+    "**/bower_components": true,
+    "**/*.code-search": true,
+    "**/src/**/build/**": false,
+    "**/src/build/**": false,
+  }
+}
@@ -8,6 +8,206 @@ This is the log of notable changes to EAS CLI and related packages.

 ### 🎉 New features

+### 🐛 Bug fixes
+
+### 🧹 Chores
+
+## [9.0.1](https://github.com/expo/eas-cli/releases/tag/v9.0.1) - 2024-05-09
+
+### 🧹 Chores
+
+- Update image tags in `eas.schema.json`. ([#2363](https://github.com/expo/eas-cli/pull/2363) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [9.0.0](https://github.com/expo/eas-cli/releases/tag/v9.0.0) - 2024-05-08
+
+### 🛠 Breaking changes
+
+- Allow modification of provisioning profile in CI, add --freeze-credentials flag. ([#2347](https://github.com/expo/eas-cli/pull/2347) by [@quinlanj](https://github.com/quinlanj))
+
+### 🐛 Bug fixes
+
+- Pass env from process.env and build profile to expo-updates CLI calls where applicable. ([#2359](https://github.com/expo/eas-cli/pull/2359) by [@wschurman](https://github.com/wschurman))
+
+### 🧹 Chores
+
+- Remove more classic updates code. ([#2357](https://github.com/expo/eas-cli/pull/2357) by [@wschurman](https://github.com/wschurman))
+- Upgrade [`eas-build`](https://github.com/expo/eas-build) dependencies. ([#2360](https://github.com/expo/eas-cli/pull/2360) by [@expo-bot](https://github.com/expo-bot))
+- Don't pass custom global `"expoCli"` version set in `eas.json` to EAS Build process and warn users when setting it. ([#2361](https://github.com/expo/eas-cli/pull/2361) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [8.0.0](https://github.com/expo/eas-cli/releases/tag/v8.0.0) - 2024-05-01
+
+### 🛠 Breaking changes
+
+- Stop creating a channel on `eas update` and `eas update:roll-back-to-embedded` unless the `--channel` flag is specified. ([#2346](https://github.com/expo/eas-cli/pull/2346) by [@quinlanj](https://github.com/quinlanj))
+
+### 🐛 Bug fixes
+
+- Improve login info message for other login options. ([#2352](https://github.com/expo/eas-cli/pull/2352) by [@wschurman](https://github.com/wschurman))
+- Show the -s, --sso option in the login command help. ([#2353](https://github.com/expo/eas-cli/pull/2353) by [@lzkb](https://github.com/lzkb))
+
+### 🧹 Chores
+
+- Upgrade [`eas-build`](https://github.com/expo/eas-build) dependencies. ([#2351](https://github.com/expo/eas-cli/pull/2351) by [@expo-bot](https://github.com/expo-bot))
+- Don't prompt users to set push notifications by default if they don't have the `expo-notifications` installed. ([#2343](https://github.com/expo/eas-cli/pull/2343) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [7.8.5](https://github.com/expo/eas-cli/releases/tag/v7.8.5) - 2024-04-26
+
+### 🐛 Bug fixes
+
+- Add explicit workflow arg to expo-update CLI calls. ([#2340](https://github.com/expo/eas-cli/pull/2340) by [@wschurman](https://github.com/wschurman))
+
+### 🧹 Chores
+
+- Improve error message if the server returns `UNAUTHORIZED_ERROR`. ([#2345](https://github.com/expo/eas-cli/pull/2345) by [@szdziedzic](https://github.com/szdziedzic))
+- Fill in min expo-updates version for expo-updates CLI. ([#2344](https://github.com/expo/eas-cli/pull/2344) by [@wschurman](https://github.com/wschurman))
+
+## [7.8.4](https://github.com/expo/eas-cli/releases/tag/v7.8.4) - 2024-04-24
+
+### 🧹 Chores
+
+- Update the list of available Android images. ([#2337](https://github.com/expo/eas-cli/pull/2337) by [@radoslawkrzemien](https://github.com/radoslawkrzemien))
+- Make multi-select for revoking distribution certificates more readable. ([#2342](https://github.com/expo/eas-cli/pull/2342) by [@szdziedzic](https://github.com/szdziedzic))
+- Improve error message displayed when EAS CLI version doesn't satisfy minimal version required specified in eas.json. ([#2341](https://github.com/expo/eas-cli/pull/2341) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [7.8.3](https://github.com/expo/eas-cli/releases/tag/v7.8.3) - 2024-04-23
+
+### 🐛 Bug fixes
+
+- Don't prompt to set `android.package` and `ios.bundleIdentifier` values when running in non-interactive mode. ([#2336](https://github.com/expo/eas-cli/pull/2336) by [@szdziedzic](https://github.com/szdziedzic))
+
+### 🧹 Chores
+
+- Amend credential removal wording. ([#2334](https://github.com/expo/eas-cli/pull/2334) by [@quinlanj](https://github.com/quinlanj))
+
+## [7.8.2](https://github.com/expo/eas-cli/releases/tag/v7.8.2) - 2024-04-15
+
+### 🐛 Bug fixes
+
+- Fix display of errors when expo-updates CLI command fails. ([#2324](https://github.com/expo/eas-cli/pull/2324) by [@wschurman](https://github.com/wschurman))
+- Move credentials endpoints to paginated counterparts. ([#2327](https://github.com/expo/eas-cli/pull/2327) by [@quinlanj](https://github.com/quinlanj))
+
+### 🧹 Chores
+
+- Add progress bar for fetching paginated datasets. ([#2326](https://github.com/expo/eas-cli/pull/2326) by [@quinlanj](https://github.com/quinlanj))
+
+## [7.8.1](https://github.com/expo/eas-cli/releases/tag/v7.8.1) - 2024-04-11
+
+### 🐛 Bug fixes
+
+- Fix command source files URLs in autogenerated `README`. ([#2318](https://github.com/expo/eas-cli/pull/2318) by [@szdziedzic](https://github.com/szdziedzic))
+
+### 🧹 Chores
+
+- Upgrade [`eas-build`](https://github.com/expo/eas-build) dependencies. ([#2316](https://github.com/expo/eas-cli/pull/2316) by [@expo-bot](https://github.com/expo-bot))
+- Stop querying `Build.resourceClass` field. ([#2320](https://github.com/expo/eas-cli/pull/2320) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [7.8.0](https://github.com/expo/eas-cli/releases/tag/v7.8.0) - 2024-04-08
+
+### 🎉 New features
+
+- Add `auto`, `sdk-50` and `sdk-49` image tags. ([#2298](https://github.com/expo/eas-cli/pull/2298) by [@szdziedzic](https://github.com/szdziedzic))
+- Add `--build-logger-level` flag to `eas build` command. ([#2313](https://github.com/expo/eas-cli/pull/2313) by [@szdziedzic](https://github.com/szdziedzic))
+
+### 🧹 Chores
+
+- Deprecate the `default` image tag. ([#2298](https://github.com/expo/eas-cli/pull/2298) by [@szdziedzic](https://github.com/szdziedzic))
+- Deprecate iOS images with Xcode version lower then 15. ([#2298](https://github.com/expo/eas-cli/pull/2298) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [7.7.0](https://github.com/expo/eas-cli/releases/tag/v7.7.0) - 2024-04-05
+
+### 🎉 New features
+
+- Generate metadata file for project archive ([#2149](https://github.com/expo/eas-cli/pull/2149) by [@khamilowicz](https://github.com/khamilowicz))
+- Add --verbose-fastlane flag to eas submit command for more robust fastlane pilot logs. ([#2276](https://github.com/expo/eas-cli/pull/2276) by [@khamilowicz](https://github.com/khamilowicz))
+- Add `eas credentials:configure-build` subcommand. ([#2282](https://github.com/expo/eas-cli/pull/2282) by [@fiberjw](https://github.com/fiberjw))
+
+### 🧹 Chores
+
+- Add info about the Xcode 15.3 image to `eas.schema.json`. ([#2312](https://github.com/expo/eas-cli/pull/2312) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [7.6.2](https://github.com/expo/eas-cli/releases/tag/v7.6.2) - 2024-03-27
+
+### 🧹 Chores
+
+- Upgrade [`eas-build`](https://github.com/expo/eas-build) dependencies. ([#2301](https://github.com/expo/eas-cli/pull/2301) by [@expo-bot](https://github.com/expo-bot))
+- Upgrade [`eas-build`](https://github.com/expo/eas-build) dependencies. ([#2304](https://github.com/expo/eas-cli/pull/2304) by [@expo-bot](https://github.com/expo-bot))
+
+## [7.6.1](https://github.com/expo/eas-cli/releases/tag/v7.6.1) - 2024-03-25
+
+### 🧹 Chores
+
+- Upgrade [`eas-build`](https://github.com/expo/eas-build) dependencies. ([#2291](https://github.com/expo/eas-cli/pull/2291) by [@expo-bot](https://github.com/expo-bot))
+- Fix asset limit punctuation. ([#2296](https://github.com/expo/eas-cli/pull/2296) by [@quinlanj](https://github.com/quinlanj))
+- Upgrade [`eas-build`](https://github.com/expo/eas-build) dependencies. ([#2293](https://github.com/expo/eas-cli/pull/2293) by [@expo-bot](https://github.com/expo-bot))
+
+## [7.6.0](https://github.com/expo/eas-cli/releases/tag/v7.6.0) - 2024-03-18
+
+### 🎉 New features
+
+- Print uncommitted files in non-interactive mode if they fail the execution. ([#2288](https://github.com/expo/eas-cli/pull/2288) by [@sjchmiela](https://github.com/sjchmiela))
+
+### 🐛 Bug fixes
+
+- Use a custom build config path with POSIX separator when sending data to the EAS Build server. ([#2285](https://github.com/expo/eas-cli/pull/2285) by [@szdziedzic](https://github.com/szdziedzic))
+- Improve resolving vcsClient as a part of the project context. ([#2295](https://github.com/expo/eas-cli/pull/2295) by [@szdziedzic](https://github.com/szdziedzic))
+
+### 🧹 Chores
+
+- Upgrade [`eas-build`](https://github.com/expo/eas-build) dependencies. ([#2277](https://github.com/expo/eas-cli/pull/2277) by [@expo-bot](https://github.com/expo-bot))
+- Upgrade [`eas-build`](https://github.com/expo/eas-build) dependencies. ([#2283](https://github.com/expo/eas-cli/pull/2283) by [@expo-bot](https://github.com/expo-bot))
+- Bump the `@expo/apple-utils` version to switch between the `developer.apple.com` and `developer-mdn.apple.com` domains when one of them doesn't work. ([#2290](https://github.com/expo/eas-cli/pull/2290) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [7.5.0](https://github.com/expo/eas-cli/releases/tag/v7.5.0) - 2024-03-11
+
+### 🎉 New features
+
+- Add `--auto-submit` option to `eas build:internal` command. ([#2271](https://github.com/expo/eas-cli/pull/2271) by [@szdziedzic](https://github.com/szdziedzic))
+
+### 🧹 Chores
+
+- Upgrade [`eas-build`](https://github.com/expo/eas-build) dependencies. ([#2274](https://github.com/expo/eas-cli/pull/2274) by [@expo-bot](https://github.com/expo-bot))
+
+## [7.4.0](https://github.com/expo/eas-cli/releases/tag/v7.4.0) - 2024-03-10
+
+### 🎉 New features
+
+- Use new expo-updates configuration:syncnative for versioned native sync. ([#2269](https://github.com/expo/eas-cli/pull/2269) by [@wschurman](https://github.com/wschurman))
+
+### 🐛 Bug fixes
+
+- Fix expo-updates package version detection for canaries. ([#2243](https://github.com/expo/eas-cli/pull/2243) by [@wschurman](https://github.com/wschurman))
+- Add missing `config` property to `eas.json` schema. ([#2248](https://github.com/expo/eas-cli/pull/2248) by [@sjchmiela](https://github.com/sjchmiela))
+- Use expo-updates runtime version CLI to generate runtime versions. ([#2251](https://github.com/expo/eas-cli/pull/2251) by [@wschurman](https://github.com/wschurman))
+- Update @expo/apple-utils to handle changes in API. ([73ba19de6662763cc6bff9fac6b7700ffbd0e88a](https://github.com/expo/eas-cli/commit/73ba19de6662763cc6bff9fac6b7700ffbd0e88a) by [@brentvatne](https://github.com/brentvatne))
+
+### 🧹 Chores
+
+- Upgrade [`eas-build`](https://github.com/expo/eas-build) dependencies. ([#2237](https://github.com/expo/eas-cli/pull/2237) by [@expo-bot](https://github.com/expo-bot))
+- Upgrade [`eas-build`](https://github.com/expo/eas-build) dependencies. ([#2240](https://github.com/expo/eas-cli/pull/2240) by [@expo-bot](https://github.com/expo-bot))
+- Upgrade [`eas-build`](https://github.com/expo/eas-build) dependencies. ([#2253](https://github.com/expo/eas-cli/pull/2253) by [@expo-bot](https://github.com/expo-bot))
+- Include src/\*\*/build directories in vscode search and replace. ([#2250](https://github.com/expo/eas-cli/pull/2250) by [@wschurman](https://github.com/wschurman))
+- Upgrade [`eas-build`](https://github.com/expo/eas-build) dependencies. ([#2259](https://github.com/expo/eas-cli/pull/2259) by [@expo-bot](https://github.com/expo-bot))
+
+## [7.3.0](https://github.com/expo/eas-cli/releases/tag/v7.3.0) - 2024-02-19
+
+### 🎉 New features
+
+- Fix expo-updates fingerprinting during update. ([#2231](https://github.com/expo/eas-cli/pull/2231) by [@wschurman](https://github.com/wschurman))
+
+### 🐛 Bug fixes
+
+- Don't require expo on fresh react-native project. ([#2235](https://github.com/expo/eas-cli/pull/2235) by [@radoslawkrzemien](https://github.com/radoslawkrzemien))
+
+### 🧹 Chores
+
+- Upgrade [`eas-build`](https://github.com/expo/eas-build) dependencies. ([#2229](https://github.com/expo/eas-cli/pull/2229) by [@expo-bot](https://github.com/expo-bot))
+- Upgrade [`eas-build`](https://github.com/expo/eas-build) dependencies. ([#2230](https://github.com/expo/eas-cli/pull/2230) by [@expo-bot](https://github.com/expo-bot))
+- Reword update configuration warning. ([#2234](https://github.com/expo/eas-cli/pull/2234) by [@quinlanj](https://github.com/quinlanj))
+
+## [7.2.0](https://github.com/expo/eas-cli/releases/tag/v7.2.0) - 2024-02-11
+
+### 🎉 New features
+
 - Support configuring a Google Service Account Key via eas credentials, for sending Android Notifications via FCM V1. ([#2197](https://github.com/expo/eas-cli/pull/2197) by [@christopherwalter](https://github.com/christopherwalter))

 ### 🐛 Bug fixes
@@ -1,5 +1,5 @@
 {
  "npmClient": "yarn",
-  "version": "7.2.0",
+  "version": "9.0.2",
  "$schema": "node_modules/lerna/schemas/lerna-schema.json"
 }
@@ -85,6 +85,7 @@ eas --help COMMAND
 * [`eas channel:view [NAME]`](#eas-channelview-name)
 * [`eas config`](#eas-config)
 * [`eas credentials`](#eas-credentials)
+* [`eas credentials:configure-build`](#eas-credentialsconfigure-build)
 * [`eas device:create`](#eas-devicecreate)
 * [`eas device:delete`](#eas-devicedelete)
 * [`eas device:list`](#eas-devicelist)
@@ -127,7 +128,10 @@ log in with your Expo account

 ```
 USAGE
-  $ eas account:login
+  $ eas account:login [-s]
+
+FLAGS
+  -s, --sso  Login with SSO

 DESCRIPTION
  log in with your Expo account
@@ -136,7 +140,7 @@ ALIASES
  $ eas login
 ```

-_See code: [src/commands/account/login.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/account/login.ts)_
+_See code: [packages/eas-cli/src/commands/account/login.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/account/login.ts)_

 ## `eas account:logout`

@@ -153,7 +157,7 @@ ALIASES
  $ eas logout
 ```

-_See code: [src/commands/account/logout.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/account/logout.ts)_
+_See code: [packages/eas-cli/src/commands/account/logout.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/account/logout.ts)_

 ## `eas account:view`

@@ -170,7 +174,7 @@ ALIASES
  $ eas whoami
 ```

-_See code: [src/commands/account/view.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/account/view.ts)_
+_See code: [packages/eas-cli/src/commands/account/view.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/account/view.ts)_

 ## `eas analytics [STATUS]`

@@ -184,7 +188,7 @@ DESCRIPTION
  display or change analytics settings
 ```

-_See code: [src/commands/analytics.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/analytics.ts)_
+_See code: [packages/eas-cli/src/commands/analytics.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/analytics.ts)_

 ## `eas autocomplete [SHELL]`

@@ -215,7 +219,7 @@ EXAMPLES
  $ eas autocomplete --refresh-cache
 ```

-_See code: [@oclif/plugin-autocomplete](https://github.com/oclif/plugin-autocomplete/blob/v2.3.10/src/commands/autocomplete/index.ts)_
+_See code: [@oclif/plugin-autocomplete](https://github.com/oclif/plugin-autocomplete/blob/v2.3.10/packages/eas-cli/src/commands/autocomplete/index.ts)_

 ## `eas branch:create [NAME]`

@@ -236,7 +240,7 @@ DESCRIPTION
  create a branch
 ```

-_See code: [src/commands/branch/create.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/branch/create.ts)_
+_See code: [packages/eas-cli/src/commands/branch/create.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/branch/create.ts)_

 ## `eas branch:delete [NAME]`

@@ -257,7 +261,7 @@ DESCRIPTION
  delete a branch
 ```

-_See code: [src/commands/branch/delete.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/branch/delete.ts)_
+_See code: [packages/eas-cli/src/commands/branch/delete.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/branch/delete.ts)_

 ## `eas branch:list`

@@ -277,7 +281,7 @@ DESCRIPTION
  list all branches
 ```

-_See code: [src/commands/branch/list.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/branch/list.ts)_
+_See code: [packages/eas-cli/src/commands/branch/list.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/branch/list.ts)_

 ## `eas branch:rename`

@@ -297,7 +301,7 @@ DESCRIPTION
  rename a branch
 ```

-_See code: [src/commands/branch/rename.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/branch/rename.ts)_
+_See code: [packages/eas-cli/src/commands/branch/rename.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/branch/rename.ts)_

 ## `eas branch:view [NAME]`

@@ -320,7 +324,7 @@ DESCRIPTION
  view a branch
 ```

-_See code: [src/commands/branch/view.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/branch/view.ts)_
+_See code: [packages/eas-cli/src/commands/branch/view.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/branch/view.ts)_

 ## `eas build`

@@ -329,28 +333,35 @@ start a build
 ```
 USAGE
  $ eas build [-p android|ios|all] [-e <value>] [--local] [--output <value>] [--wait] [--clear-cache]
-    [--auto-submit | --auto-submit-with-profile <value>] [-m <value>] [--json --non-interactive]
+    [--auto-submit | --auto-submit-with-profile <value>] [-m <value>] [--build-logger-level
+    trace|debug|info|warn|error|fatal] [--freeze-credentials] [--json --non-interactive]

 FLAGS
-  -e, --profile=PROFILE_NAME               Name of the build profile from eas.json. Defaults to "production" if defined
-                                           in eas.json.
-  -m, --message=<value>                    A short message describing the build
+  -e, --profile=PROFILE_NAME                                Name of the build profile from eas.json. Defaults to
+                                                            "production" if defined in eas.json.
+  -m, --message=<value>                                     A short message describing the build
  -p, --platform=(android|ios|all)
-  --auto-submit                            Submit on build complete using the submit profile with the same name as the
-                                           build profile
-  --auto-submit-with-profile=PROFILE_NAME  Submit on build complete using the submit profile with provided name
-  --clear-cache                            Clear cache before the build
-  --json                                   Enable JSON output, non-JSON messages will be printed to stderr.
-  --local                                  Run build locally [experimental]
-  --non-interactive                        Run the command in non-interactive mode.
-  --output=<value>                         Output path for local build
-  --[no-]wait                              Wait for build(s) to complete
+  --auto-submit                                             Submit on build complete using the submit profile with the
+                                                            same name as the build profile
+  --auto-submit-with-profile=PROFILE_NAME                   Submit on build complete using the submit profile with
+                                                            provided name
+  --build-logger-level=(trace|debug|info|warn|error|fatal)  The level of logs to output during the build process.
+                                                            Defaults to "info".
+  --clear-cache                                             Clear cache before the build
+  --freeze-credentials                                      Prevent the build from updating credentials in
+                                                            non-interactive mode
+  --json                                                    Enable JSON output, non-JSON messages will be printed to
+                                                            stderr.
+  --local                                                   Run build locally [experimental]
+  --non-interactive                                         Run the command in non-interactive mode.
+  --output=<value>                                          Output path for local build
+  --[no-]wait                                               Wait for build(s) to complete

 DESCRIPTION
  start a build
 ```

-_See code: [src/commands/build/index.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/build/index.ts)_
+_See code: [packages/eas-cli/src/commands/build/index.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/build/index.ts)_

 ## `eas build:cancel [BUILD_ID]`

@@ -369,7 +380,7 @@ DESCRIPTION
  cancel a build
 ```

-_See code: [src/commands/build/cancel.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/build/cancel.ts)_
+_See code: [packages/eas-cli/src/commands/build/cancel.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/build/cancel.ts)_

 ## `eas build:configure`

@@ -386,7 +397,7 @@ DESCRIPTION
  configure the project to support EAS Build
 ```

-_See code: [src/commands/build/configure.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/build/configure.ts)_
+_See code: [packages/eas-cli/src/commands/build/configure.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/build/configure.ts)_

 ## `eas build:delete [BUILD_ID]`

@@ -405,7 +416,7 @@ DESCRIPTION
  delete a build
 ```

-_See code: [src/commands/build/delete.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/build/delete.ts)_
+_See code: [packages/eas-cli/src/commands/build/delete.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/build/delete.ts)_

 ## `eas build:inspect`

@@ -440,7 +451,7 @@ DESCRIPTION
  inspect the state of the project at specific build stages, useful for troubleshooting
 ```

-_See code: [src/commands/build/inspect.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/build/inspect.ts)_
+_See code: [packages/eas-cli/src/commands/build/inspect.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/build/inspect.ts)_

 ## `eas build:list`

@@ -481,7 +492,7 @@ DESCRIPTION
  list all builds for your project
 ```

-_See code: [src/commands/build/list.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/build/list.ts)_
+_See code: [packages/eas-cli/src/commands/build/list.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/build/list.ts)_

 ## `eas build:resign`

@@ -507,7 +518,7 @@ DESCRIPTION
  re-sign a build archive
 ```

-_See code: [src/commands/build/resign.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/build/resign.ts)_
+_See code: [packages/eas-cli/src/commands/build/resign.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/build/resign.ts)_

 ## `eas build:run`

@@ -533,7 +544,7 @@ DESCRIPTION
  run simulator/emulator builds from eas-cli
 ```

-_See code: [src/commands/build/run.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/build/run.ts)_
+_See code: [packages/eas-cli/src/commands/build/run.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/build/run.ts)_

 ## `eas build:submit`

@@ -542,7 +553,7 @@ submit app binary to App Store and/or Play Store
 ```
 USAGE
  $ eas build:submit [-p android|ios|all] [-e <value>] [--latest | --id <value> | --path <value> | --url <value>]
-    [--verbose] [--wait] [--non-interactive]
+    [--verbose] [--wait] [--verbose-fastlane] [--non-interactive]

 FLAGS
  -e, --profile=<value>             Name of the submit profile from eas.json. Defaults to "production" if defined in
@@ -554,6 +565,7 @@ FLAGS
  --path=<value>                    Path to the .apk/.aab/.ipa file
  --url=<value>                     App archive url
  --verbose                         Always print logs from EAS Submit
+  --verbose-fastlane                Enable verbose logging for the submission process
  --[no-]wait                       Wait for submission to complete

 DESCRIPTION
@@ -582,7 +594,7 @@ DESCRIPTION
  get the latest version from EAS servers
 ```

-_See code: [src/commands/build/version/get.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/build/version/get.ts)_
+_See code: [packages/eas-cli/src/commands/build/version/get.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/build/version/get.ts)_

 ## `eas build:version:set`

@@ -601,7 +613,7 @@ DESCRIPTION
  update version of an app
 ```

-_See code: [src/commands/build/version/set.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/build/version/set.ts)_
+_See code: [packages/eas-cli/src/commands/build/version/set.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/build/version/set.ts)_

 ## `eas build:version:sync`

@@ -620,7 +632,7 @@ DESCRIPTION
  update a version in native code with a value stored on EAS servers
 ```

-_See code: [src/commands/build/version/sync.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/build/version/sync.ts)_
+_See code: [packages/eas-cli/src/commands/build/version/sync.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/build/version/sync.ts)_

 ## `eas build:view [BUILD_ID]`

@@ -637,7 +649,7 @@ DESCRIPTION
  view a build for your project
 ```

-_See code: [src/commands/build/view.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/build/view.ts)_
+_See code: [packages/eas-cli/src/commands/build/view.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/build/view.ts)_

 ## `eas channel:create [NAME]`

@@ -658,7 +670,7 @@ DESCRIPTION
  create a channel
 ```

-_See code: [src/commands/channel/create.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/channel/create.ts)_
+_See code: [packages/eas-cli/src/commands/channel/create.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/channel/create.ts)_

 ## `eas channel:edit [NAME]`

@@ -680,7 +692,7 @@ DESCRIPTION
  point a channel at a new branch
 ```

-_See code: [src/commands/channel/edit.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/channel/edit.ts)_
+_See code: [packages/eas-cli/src/commands/channel/edit.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/channel/edit.ts)_

 ## `eas channel:list`

@@ -700,7 +712,7 @@ DESCRIPTION
  list all channels
 ```

-_See code: [src/commands/channel/list.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/channel/list.ts)_
+_See code: [packages/eas-cli/src/commands/channel/list.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/channel/list.ts)_

 ## `eas channel:rollout [CHANNEL]`

@@ -732,7 +744,7 @@ DESCRIPTION
  Roll a new branch out on a channel incrementally.
 ```

-_See code: [src/commands/channel/rollout.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/channel/rollout.ts)_
+_See code: [packages/eas-cli/src/commands/channel/rollout.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/channel/rollout.ts)_

 ## `eas channel:view [NAME]`

@@ -755,7 +767,7 @@ DESCRIPTION
  view a channel
 ```

-_See code: [src/commands/channel/view.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/channel/view.ts)_
+_See code: [packages/eas-cli/src/commands/channel/view.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/channel/view.ts)_

 ## `eas config`

@@ -776,7 +788,7 @@ DESCRIPTION
  display project configuration (app.json + eas.json)
 ```

-_See code: [src/commands/config.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/config.ts)_
+_See code: [packages/eas-cli/src/commands/config.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/config.ts)_

 ## `eas credentials`

@@ -793,7 +805,25 @@ DESCRIPTION
  manage credentials
 ```

-_See code: [src/commands/credentials.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/credentials.ts)_
+_See code: [packages/eas-cli/src/commands/credentials/index.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/credentials/index.ts)_
+
+## `eas credentials:configure-build`
+
+Set up credentials for building your project.
+
+```
+USAGE
+  $ eas credentials:configure-build [-p android|ios] [-e <value>]
+
+FLAGS
+  -e, --profile=PROFILE_NAME    The name of the build profile in eas.json.
+  -p, --platform=(android|ios)
+
+DESCRIPTION
+  Set up credentials for building your project.
+```
+
+_See code: [packages/eas-cli/src/commands/credentials/configure-build.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/credentials/configure-build.ts)_

 ## `eas device:create`

@@ -807,7 +837,7 @@ DESCRIPTION
  register new Apple Devices to use for internal distribution
 ```

-_See code: [src/commands/device/create.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/device/create.ts)_
+_See code: [packages/eas-cli/src/commands/device/create.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/device/create.ts)_

 ## `eas device:delete`

@@ -827,7 +857,7 @@ DESCRIPTION
  remove a registered device from your account
 ```

-_See code: [src/commands/device/delete.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/device/delete.ts)_
+_See code: [packages/eas-cli/src/commands/device/delete.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/device/delete.ts)_

 ## `eas device:list`

@@ -848,7 +878,7 @@ DESCRIPTION
  list all registered devices for your account
 ```

-_See code: [src/commands/device/list.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/device/list.ts)_
+_See code: [packages/eas-cli/src/commands/device/list.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/device/list.ts)_

 ## `eas device:rename`

@@ -869,7 +899,7 @@ DESCRIPTION
  rename a registered device
 ```

-_See code: [src/commands/device/rename.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/device/rename.ts)_
+_See code: [packages/eas-cli/src/commands/device/rename.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/device/rename.ts)_

 ## `eas device:view [UDID]`

@@ -883,7 +913,7 @@ DESCRIPTION
  view a device for your project
 ```

-_See code: [src/commands/device/view.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/device/view.ts)_
+_See code: [packages/eas-cli/src/commands/device/view.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/device/view.ts)_

 ## `eas diagnostics`

@@ -897,7 +927,7 @@ DESCRIPTION
  display environment info
 ```

-_See code: [src/commands/diagnostics.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/diagnostics.ts)_
+_See code: [packages/eas-cli/src/commands/diagnostics.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/diagnostics.ts)_

 ## `eas help [COMMAND]`

@@ -917,7 +947,7 @@ DESCRIPTION
  Display help for eas.
 ```

-_See code: [@expo/plugin-help](https://github.com/expo/oclif-plugin-help/blob/v5.1.23/src/commands/help.ts)_
+_See code: [@expo/plugin-help](https://github.com/expo/oclif-plugin-help/blob/v5.1.23/packages/eas-cli/src/commands/help.ts)_

 ## `eas init`

@@ -945,7 +975,10 @@ log in with your Expo account

 ```
 USAGE
-  $ eas login
+  $ eas login [-s]
+
+FLAGS
+  -s, --sso  Login with SSO

 DESCRIPTION
  log in with your Expo account
@@ -985,7 +1018,7 @@ DESCRIPTION
  validate the local store configuration
 ```

-_See code: [src/commands/metadata/lint.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/metadata/lint.ts)_
+_See code: [packages/eas-cli/src/commands/metadata/lint.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/metadata/lint.ts)_

 ## `eas metadata:pull`

@@ -1002,7 +1035,7 @@ DESCRIPTION
  generate the local store configuration from the app stores
 ```

-_See code: [src/commands/metadata/pull.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/metadata/pull.ts)_
+_See code: [packages/eas-cli/src/commands/metadata/pull.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/metadata/pull.ts)_

 ## `eas metadata:push`

@@ -1019,7 +1052,7 @@ DESCRIPTION
  sync the local store configuration to the app stores
 ```

-_See code: [src/commands/metadata/push.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/metadata/push.ts)_
+_See code: [packages/eas-cli/src/commands/metadata/push.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/metadata/push.ts)_

 ## `eas open`

@@ -1033,7 +1066,7 @@ DESCRIPTION
  open the project page in a web browser
 ```

-_See code: [src/commands/open.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/open.ts)_
+_See code: [packages/eas-cli/src/commands/open.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/open.ts)_

 ## `eas project:info`

@@ -1047,7 +1080,7 @@ DESCRIPTION
  information about the current project
 ```

-_See code: [src/commands/project/info.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/project/info.ts)_
+_See code: [packages/eas-cli/src/commands/project/info.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/project/info.ts)_

 ## `eas project:init`

@@ -1069,7 +1102,7 @@ ALIASES
  $ eas init
 ```

-_See code: [src/commands/project/init.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/project/init.ts)_
+_See code: [packages/eas-cli/src/commands/project/init.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/project/init.ts)_

 ## `eas secret:create`

@@ -1092,7 +1125,7 @@ DESCRIPTION
  create an environment secret on the current project or owner account
 ```

-_See code: [src/commands/secret/create.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/secret/create.ts)_
+_See code: [packages/eas-cli/src/commands/secret/create.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/secret/create.ts)_

 ## `eas secret:delete`

@@ -1110,7 +1143,7 @@ DESCRIPTION
  delete an environment secret by ID
 ```

-_See code: [src/commands/secret/delete.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/secret/delete.ts)_
+_See code: [packages/eas-cli/src/commands/secret/delete.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/secret/delete.ts)_

 ## `eas secret:list`

@@ -1124,7 +1157,7 @@ DESCRIPTION
  list environment secrets available for your current app
 ```

-_See code: [src/commands/secret/list.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/secret/list.ts)_
+_See code: [packages/eas-cli/src/commands/secret/list.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/secret/list.ts)_

 ## `eas secret:push`

@@ -1144,7 +1177,7 @@ DESCRIPTION
  read environment secrets from env file and store on the server
 ```

-_See code: [src/commands/secret/push.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/secret/push.ts)_
+_See code: [packages/eas-cli/src/commands/secret/push.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/secret/push.ts)_

 ## `eas submit`

@@ -1153,7 +1186,7 @@ submit app binary to App Store and/or Play Store
 ```
 USAGE
  $ eas submit [-p android|ios|all] [-e <value>] [--latest | --id <value> | --path <value> | --url <value>]
-    [--verbose] [--wait] [--non-interactive]
+    [--verbose] [--wait] [--verbose-fastlane] [--non-interactive]

 FLAGS
  -e, --profile=<value>             Name of the submit profile from eas.json. Defaults to "production" if defined in
@@ -1165,6 +1198,7 @@ FLAGS
  --path=<value>                    Path to the .apk/.aab/.ipa file
  --url=<value>                     App archive url
  --verbose                         Always print logs from EAS Submit
+  --verbose-fastlane                Enable verbose logging for the submission process
  --[no-]wait                       Wait for submission to complete

 DESCRIPTION
@@ -1174,7 +1208,7 @@ ALIASES
  $ eas build:submit
 ```

-_See code: [src/commands/submit.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/submit.ts)_
+_See code: [packages/eas-cli/src/commands/submit.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/submit.ts)_

 ## `eas update`

@@ -1207,7 +1241,7 @@ DESCRIPTION
  publish an update group
 ```

-_See code: [src/commands/update/index.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/update/index.ts)_
+_See code: [packages/eas-cli/src/commands/update/index.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/update/index.ts)_

 ## `eas update:configure`

@@ -1225,7 +1259,7 @@ DESCRIPTION
  configure the project to support EAS Update
 ```

-_See code: [src/commands/update/configure.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/update/configure.ts)_
+_See code: [packages/eas-cli/src/commands/update/configure.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/update/configure.ts)_

 ## `eas update:delete GROUPID`

@@ -1246,7 +1280,7 @@ DESCRIPTION
  delete all the updates in an update group
 ```

-_See code: [src/commands/update/delete.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/update/delete.ts)_
+_See code: [packages/eas-cli/src/commands/update/delete.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/update/delete.ts)_

 ## `eas update:list`

@@ -1268,7 +1302,7 @@ DESCRIPTION
  view the recent updates
 ```

-_See code: [src/commands/update/list.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/update/list.ts)_
+_See code: [packages/eas-cli/src/commands/update/list.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/update/list.ts)_

 ## `eas update:republish`

@@ -1295,7 +1329,7 @@ DESCRIPTION
  roll back to an existing update
 ```

-_See code: [src/commands/update/republish.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/update/republish.ts)_
+_See code: [packages/eas-cli/src/commands/update/republish.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/update/republish.ts)_

 ## `eas update:roll-back-to-embedded`

@@ -1322,7 +1356,7 @@ DESCRIPTION
  roll back to the embedded update
 ```

-_See code: [src/commands/update/roll-back-to-embedded.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/update/roll-back-to-embedded.ts)_
+_See code: [packages/eas-cli/src/commands/update/roll-back-to-embedded.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/update/roll-back-to-embedded.ts)_

 ## `eas update:rollback`

@@ -1341,7 +1375,7 @@ DESCRIPTION
  roll back to an embedded update or an existing update
 ```

-_See code: [src/commands/update/rollback.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/update/rollback.ts)_
+_See code: [packages/eas-cli/src/commands/update/rollback.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/update/rollback.ts)_

 ## `eas update:view GROUPID`

@@ -1361,7 +1395,7 @@ DESCRIPTION
  update group details
 ```

-_See code: [src/commands/update/view.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/update/view.ts)_
+_See code: [packages/eas-cli/src/commands/update/view.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/update/view.ts)_

 ## `eas webhook:create`

@@ -1382,7 +1416,7 @@ DESCRIPTION
  create a webhook
 ```

-_See code: [src/commands/webhook/create.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/webhook/create.ts)_
+_See code: [packages/eas-cli/src/commands/webhook/create.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/webhook/create.ts)_

 ## `eas webhook:delete [ID]`

@@ -1402,7 +1436,7 @@ DESCRIPTION
  delete a webhook
 ```

-_See code: [src/commands/webhook/delete.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/webhook/delete.ts)_
+_See code: [packages/eas-cli/src/commands/webhook/delete.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/webhook/delete.ts)_

 ## `eas webhook:list`

@@ -1420,7 +1454,7 @@ DESCRIPTION
  list webhooks
 ```

-_See code: [src/commands/webhook/list.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/webhook/list.ts)_
+_See code: [packages/eas-cli/src/commands/webhook/list.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/webhook/list.ts)_

 ## `eas webhook:update`

@@ -1442,7 +1476,7 @@ DESCRIPTION
  update a webhook
 ```

-_See code: [src/commands/webhook/update.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/webhook/update.ts)_
+_See code: [packages/eas-cli/src/commands/webhook/update.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/webhook/update.ts)_

 ## `eas webhook:view ID`

@@ -1459,7 +1493,7 @@ DESCRIPTION
  view a webhook
 ```

-_See code: [src/commands/webhook/view.ts](https://github.com/expo/eas-cli/blob/v7.2.0/src/commands/webhook/view.ts)_
+_See code: [packages/eas-cli/src/commands/webhook/view.ts](https://github.com/expo/eas-cli/blob/v9.0.2/packages/eas-cli/src/commands/webhook/view.ts)_

 ## `eas whoami`

@@ -1,21 +1,22 @@
 {
  "name": "eas-cli",
  "description": "EAS command line tool",
-  "version": "7.2.0",
+  "version": "9.0.2",
  "author": "Expo <[email protected]>",
  "bin": {
    "eas": "./bin/run"
  },
  "bugs": "https://github.com/expo/eas-cli/issues",
  "dependencies": {
-    "@expo/apple-utils": "1.4.0",
+    "@expo/apple-utils": "1.7.0",
    "@expo/code-signing-certificates": "0.0.5",
    "@expo/config": "8.5.4",
    "@expo/config-plugins": "7.8.4",
    "@expo/config-types": "50.0.0",
-    "@expo/eas-build-job": "1.0.61",
-    "@expo/eas-json": "7.1.3",
+    "@expo/eas-build-job": "1.0.107",
+    "@expo/eas-json": "9.0.1",
    "@expo/json-file": "8.2.37",
+    "@expo/logger": "1.0.57",
    "@expo/multipart-body-parser": "1.1.0",
    "@expo/osascript": "2.0.33",
    "@expo/package-manager": "1.1.2",
@@ -27,7 +28,7 @@
    "@expo/results": "1.0.0",
    "@expo/rudder-sdk-node": "1.1.1",
    "@expo/spawn-async": "1.7.0",
-    "@expo/steps": "1.0.67",
+    "@expo/steps": "1.0.107",
    "@expo/timeago.js": "1.0.0",
    "@oclif/core": "^1.26.2",
    "@oclif/plugin-autocomplete": "^2.3.10",
@@ -76,7 +77,7 @@
    "resolve-from": "5.0.0",
    "semver": "7.5.4",
    "slash": "3.0.0",
-    "tar": "6.2.0",
+    "tar": "6.2.1",
    "terminal-link": "2.1.1",
    "tslib": "2.6.2",
    "turndown": "7.1.2",
@@ -109,7 +110,7 @@
    "@types/wrap-ansi": "3.0.0",
    "axios": "0.27.2",
    "eslint-plugin-graphql": "4.0.0",
-    "express": "4.18.2",
+    "express": "4.19.2",
    "memfs": "3.4.13",
    "mockdate": "3.0.5",
    "nock": "13.4.0",
@@ -3,8 +3,7 @@ const fs = require('fs/promises');
 (async () => {
  // Patch `oclif readme` path and link generation
  let readmeContent = await fs.readFile('README.md', 'utf8');
-  readmeContent = readmeContent.replace(/\[build\//g, '[src/');
-  readmeContent = readmeContent.replace(/build\/commands/g, 'packages/eas-cli/src/commands');
+  readmeContent = readmeContent.replace(/src\/commands/g, 'packages/eas-cli/src/commands');
  await fs.writeFile('README.md', readmeContent);

  // eslint-disable-next-line no-console
@@ -3,13 +3,7 @@ import { v4 as uuid } from 'uuid';

 import { ExpoGraphqlClient } from '../../commandUtils/context/contextUtils/createGraphqlClient';
 import { selectBuildToCancelAsync } from '../../commands/build/cancel';
-import {
-  AppPlatform,
-  BuildFragment,
-  BuildPriority,
-  BuildResourceClass,
-  BuildStatus,
-} from '../../graphql/generated';
+import { AppPlatform, BuildFragment, BuildPriority, BuildStatus } from '../../graphql/generated';
 import { BuildQuery } from '../../graphql/queries/BuildQuery';
 import { confirmAsync, selectAsync } from '../../prompts';

@@ -91,7 +85,6 @@ function createMockBuildFragment({
      },
    },
    status: BuildStatus.InQueue,
-    resourceClass: BuildResourceClass.AndroidMedium,
    isForIosSimulator: false,
  };
 }
@@ -3,13 +3,7 @@ import { v4 as uuid } from 'uuid';

 import { ExpoGraphqlClient } from '../../commandUtils/context/contextUtils/createGraphqlClient';
 import { selectBuildToDeleteAsync } from '../../commands/build/delete';
-import {
-  AppPlatform,
-  BuildFragment,
-  BuildPriority,
-  BuildResourceClass,
-  BuildStatus,
-} from '../../graphql/generated';
+import { AppPlatform, BuildFragment, BuildPriority, BuildStatus } from '../../graphql/generated';
 import { BuildQuery } from '../../graphql/queries/BuildQuery';
 import { confirmAsync, selectAsync } from '../../prompts';

@@ -91,7 +85,6 @@ function createMockBuildFragment({
      },
    },
    status: BuildStatus.InQueue,
-    resourceClass: BuildResourceClass.AndroidMedium,
    isForIosSimulator: false,
  };
 }
@@ -8,7 +8,7 @@ import os from 'os';
 import path from 'path';

 import { getAppBuildGradleAsync, resolveConfigValue } from '../../../project/android/gradleUtils';
-import { getVcsClient } from '../../../vcs';
+import { resolveVcsClient } from '../../../vcs';
 import {
  BumpStrategy,
  bumpVersionAsync,
@@ -19,7 +19,7 @@ import {
 const fsReal = jest.requireActual('fs').promises as typeof fs;
 jest.mock('fs');

-const vcsClient = getVcsClient();
+const vcsClient = resolveVcsClient();

 afterAll(async () => {
  // do not remove the following line
@@ -1,4 +1,4 @@
-import { Android, Job, Metadata, Platform, Workflow } from '@expo/eas-build-job';
+import { Android, Metadata, Platform, Workflow } from '@expo/eas-build-job';
 import { AppVersionSource } from '@expo/eas-json';
 import chalk from 'chalk';
 import nullthrows from 'nullthrows';
@@ -107,12 +107,13 @@ export async function prepareAndroidBuildAsync(
            ? false
            : ctx.buildProfile.autoIncrement,
        vcsClient: ctx.vcsClient,
+        env: ctx.buildProfile.env,
      });
    },
    prepareJobAsync: async (
      ctx: BuildContext<Platform.ANDROID>,
      jobData: JobData<AndroidCredentials>
-    ): Promise<Job> => {
+    ): Promise<Android.Job> => {
      return await prepareJobAsync(ctx, jobData);
    },
    sendBuildRequestAsync: async (
@@ -2,6 +2,7 @@ import { Android } from '@expo/eas-build-job';

 import { AndroidBuildType, AndroidJobInput } from '../../graphql/generated';
 import {
+  loggerLevelToGraphQLWorkerLoggerLevel,
  transformBuildMode,
  transformBuildTrigger,
  transformProjectArchive,
@@ -14,7 +15,6 @@ export function transformJob(job: Android.Job): AndroidJobInput {
    triggeredBy: transformBuildTrigger(job.triggeredBy),
    projectArchive: transformProjectArchive(job.projectArchive),
    projectRootDirectory: job.projectRootDirectory,
-    releaseChannel: job.releaseChannel,
    updates: job.updates,
    secrets: job.secrets,
    builderEnvironment: job.builderEnvironment,
@@ -29,6 +29,9 @@ export function transformJob(job: Android.Job): AndroidJobInput {
    experimental: job.experimental,
    mode: transformBuildMode(job.mode),
    customBuildConfig: job.customBuildConfig,
+    loggerLevel: job.loggerLevel
+      ? loggerLevelToGraphQLWorkerLoggerLevel[job.loggerLevel]
+      : undefined,
  };
 }

@@ -3,16 +3,15 @@ import {
  ArchiveSource,
  BuildMode,
  BuildTrigger,
-  Job,
  Platform,
-  sanitizeJob,
+  sanitizeBuildJob,
 } from '@expo/eas-build-job';
 import { BuildProfile } from '@expo/eas-json';
 import path from 'path';
 import slash from 'slash';

 import { AndroidCredentials } from '../../credentials/android/AndroidCredentialsProvider';
-import { getCustomBuildConfigPath } from '../../project/customBuildConfig';
+import { getCustomBuildConfigPathForJob } from '../../project/customBuildConfig';
 import { getUsername } from '../../project/projectUtils';
 import { BuildContext } from '../context';

@@ -29,7 +28,7 @@ const cacheDefaults = {
 export async function prepareJobAsync(
  ctx: BuildContext<Platform.ANDROID>,
  jobData: JobData
-): Promise<Job> {
+): Promise<Android.Job> {
  const username = getUsername(ctx.exp, ctx.user);
  const buildProfile: BuildProfile<Platform.ANDROID> = ctx.buildProfile;
  const projectRootDirectory =
@@ -54,7 +53,7 @@ export async function prepareJobAsync(
  }

  const maybeCustomBuildConfigPath = buildProfile.config
-    ? getCustomBuildConfigPath(buildProfile.config)
+    ? getCustomBuildConfigPathForJob(buildProfile.config)
    : undefined;

  const job: Android.Job = {
@@ -69,7 +68,6 @@ export async function prepareJobAsync(
      bun: buildProfile.bun,
      yarn: buildProfile.yarn,
      ndk: buildProfile.ndk,
-      expoCli: buildProfile.expoCli,
      env: buildProfile.env,
    },
    cache: {
@@ -80,7 +78,6 @@ export async function prepareJobAsync(
    secrets: {
      ...buildCredentials,
    },
-    releaseChannel: buildProfile.releaseChannel,
    updates: { channel: buildProfile.channel },
    developmentClient: buildProfile.developmentClient,
    gradleCommand: buildProfile.gradleCommand,
@@ -103,7 +100,8 @@ export async function prepareJobAsync(
        path: maybeCustomBuildConfigPath,
      },
    }),
+    loggerLevel: ctx.loggerLevel,
  };

-  return sanitizeJob(job);
+  return sanitizeBuildJob(job) as Android.Job;
 }
@@ -1,6 +1,6 @@
 import { ExpoConfig } from '@expo/config';
 import { AndroidConfig } from '@expo/config-plugins';
-import { Platform, Workflow } from '@expo/eas-build-job';
+import { Env, Platform, Workflow } from '@expo/eas-build-job';
 import { AndroidVersionAutoIncrement } from '@expo/eas-json';
 import chalk from 'chalk';
 import fs from 'fs-extra';
@@ -18,11 +18,13 @@ export async function syncProjectConfigurationAsync({
  exp,
  localAutoIncrement,
  vcsClient,
+  env,
 }: {
  projectDir: string;
  exp: ExpoConfig;
  localAutoIncrement?: AndroidVersionAutoIncrement;
  vcsClient: Client;
+  env: Env | undefined;
 }): Promise<void> {
  const workflow = await resolveWorkflowAsync(projectDir, Platform.ANDROID, vcsClient);
  const versionBumpStrategy = resolveVersionBumpStrategy(localAutoIncrement ?? false);
@@ -30,7 +32,7 @@ export async function syncProjectConfigurationAsync({
  if (workflow === Workflow.GENERIC) {
    await cleanUpOldEasBuildGradleScriptAsync(projectDir);
    if (isExpoUpdatesInstalled(projectDir)) {
-      await syncUpdatesConfigurationAsync(projectDir, exp);
+      await syncUpdatesConfigurationAsync({ projectDir, exp, workflow, env });
    }
    await bumpVersionAsync({ projectDir, exp, bumpStrategy: versionBumpStrategy });
  } else {
@@ -1,4 +1,10 @@
-import { ArchiveSource, ArchiveSourceType, Job, Metadata, Platform } from '@expo/eas-build-job';
+import {
+  ArchiveSource,
+  ArchiveSourceType,
+  BuildJob,
+  Metadata,
+  Platform,
+} from '@expo/eas-build-job';
 import { CredentialsSource } from '@expo/eas-json';
 import assert from 'assert';
 import chalk from 'chalk';
@@ -26,7 +32,12 @@ import { transformMetadata } from './graphql';
 import { LocalBuildMode, runLocalBuildAsync } from './local';
 import { collectMetadataAsync } from './metadata';
 import { printDeprecationWarnings } from './utils/printBuildInfo';
-import { makeProjectTarballAsync, reviewAndCommitChangesAsync } from './utils/repository';
+import {
+  LocalFile,
+  makeProjectMetadataFileAsync,
+  makeProjectTarballAsync,
+  reviewAndCommitChangesAsync,
+} from './utils/repository';
 import { BuildEvent } from '../analytics/AnalyticsManager';
 import { withAnalyticsAsync } from '../analytics/common';
 import { getExpoWebsiteBaseUrl } from '../api';
@@ -65,14 +76,14 @@ export interface JobData<Credentials> {
  projectArchive: ArchiveSource;
 }

-interface Builder<TPlatform extends Platform, Credentials, TJob extends Job> {
+interface Builder<TPlatform extends Platform, Credentials, TJob extends BuildJob> {
  ctx: BuildContext<TPlatform>;

  ensureCredentialsAsync(
    ctx: BuildContext<TPlatform>
  ): Promise<CredentialsResult<Credentials> | undefined>;
  syncProjectConfigurationAsync(ctx: BuildContext<TPlatform>): Promise<void>;
-  prepareJobAsync(ctx: BuildContext<TPlatform>, jobData: JobData<Credentials>): Promise<Job>;
+  prepareJobAsync(ctx: BuildContext<TPlatform>, jobData: JobData<Credentials>): Promise<BuildJob>;
  sendBuildRequestAsync(
    appId: string,
    job: TJob,
@@ -97,7 +108,7 @@ function resolveBuildParamsInput<T extends Platform>(
 export async function prepareBuildRequestForPlatformAsync<
  TPlatform extends Platform,
  Credentials,
-  TJob extends Job,
+  TJob extends BuildJob,
 >(builder: Builder<TPlatform, Credentials, TJob>): Promise<BuildRequestSender> {
  const { ctx } = builder;
  const credentialsResult = await withAnalyticsAsync(
@@ -133,9 +144,10 @@ export async function prepareBuildRequestForPlatformAsync<

  let projectArchive: ArchiveSource | undefined;
  if (ctx.localBuildOptions.localBuildMode === LocalBuildMode.LOCAL_BUILD_PLUGIN) {
+    const projectPath = (await makeProjectTarballAsync(ctx.vcsClient)).path;
    projectArchive = {
      type: ArchiveSourceType.PATH,
-      path: (await makeProjectTarballAsync(ctx.vcsClient)).path,
+      path: projectPath,
    };
  } else if (ctx.localBuildOptions.localBuildMode === LocalBuildMode.INTERNAL) {
    projectArchive = {
@@ -145,7 +157,7 @@ export async function prepareBuildRequestForPlatformAsync<
  } else if (!ctx.localBuildOptions.localBuildMode) {
    projectArchive = {
      type: ArchiveSourceType.GCS,
-      bucketKey: await uploadProjectAsync(ctx),
+      ...(await uploadProjectAsync(ctx)),
    };
  }
  assert(projectArchive);
@@ -231,7 +243,10 @@ export function handleBuildRequestError(error: any, platform: Platform): never {

 async function uploadProjectAsync<TPlatform extends Platform>(
  ctx: BuildContext<TPlatform>
-): Promise<string> {
+): Promise<{
+  bucketKey: string;
+  metadataLocation?: string;
+}> {
  let projectTarballPath;
  try {
    return await withAnalyticsAsync(
@@ -260,7 +275,6 @@ async function uploadProjectAsync<TPlatform extends Platform>(
        }

        projectTarballPath = projectTarball.path;
-
        const bucketKey = await uploadFileAtPathToGCSAsync(
          ctx.graphqlClient,
          UploadSessionType.EasBuildGcsProjectSources,
@@ -274,7 +288,11 @@ async function uploadProjectAsync<TPlatform extends Platform>(
            completedMessage: (duration: string) => `Uploaded to EAS ${chalk.dim(duration)}`,
          })
        );
-        return bucketKey;
+        const { metadataLocation } = await uploadMetadataFileAsync<TPlatform>(projectTarball, ctx);
+        if (metadataLocation) {
+          return { bucketKey, metadataLocation };
+        }
+        return { bucketKey };
      },
      {
        attemptEvent: BuildEvent.PROJECT_UPLOAD_ATTEMPT,
@@ -285,9 +303,11 @@ async function uploadProjectAsync<TPlatform extends Platform>(
    );
  } catch (err: any) {
    let errMessage = 'Failed to upload the project tarball to EAS Build';
+
    if (err.message) {
      errMessage += `\n\nReason: ${err.message}`;
    }
+
    throw new EasBuildProjectArchiveUploadError(errMessage);
  } finally {
    if (projectTarballPath) {
@@ -296,7 +316,49 @@ async function uploadProjectAsync<TPlatform extends Platform>(
  }
 }

-async function sendBuildRequestAsync<TPlatform extends Platform, Credentials, TJob extends Job>(
+async function uploadMetadataFileAsync<TPlatform extends Platform>(
+  projectTarball: LocalFile,
+  ctx: BuildContext<TPlatform>
+): Promise<{ metadataLocation: string | null }> {
+  let projectMetadataFile: LocalFile | null = null;
+  try {
+    projectMetadataFile = await makeProjectMetadataFileAsync(projectTarball.path);
+
+    const metadataLocation = await uploadFileAtPathToGCSAsync(
+      ctx.graphqlClient,
+      UploadSessionType.EasBuildGcsProjectMetadata,
+      projectMetadataFile.path,
+      createProgressTracker({
+        total: projectMetadataFile.size,
+        message: ratio =>
+          `Uploading metadata to EAS Build (${formatBytes(
+            projectMetadataFile!.size * ratio
+          )} / ${formatBytes(projectMetadataFile!.size)})`,
+        completedMessage: (duration: string) => `Uploaded to EAS ${chalk.dim(duration)}`,
+      })
+    );
+    return { metadataLocation };
+  } catch (err: any) {
+    let errMessage = 'Failed to upload metadata to EAS Build';
+
+    if (err.message) {
+      errMessage += `\n\nReason: ${err.message}`;
+    }
+
+    Log.warn(errMessage);
+    return { metadataLocation: null };
+  } finally {
+    if (projectMetadataFile) {
+      await fs.remove(projectMetadataFile.path);
+    }
+  }
+}
+
+async function sendBuildRequestAsync<
+  TPlatform extends Platform,
+  Credentials,
+  TJob extends BuildJob,
+>(
  builder: Builder<TPlatform, Credentials, TJob>,
  job: TJob,
  metadata: Metadata,
@@ -40,7 +40,7 @@ async function configureAsync({
  nonInteractive,
  vcsClient,
 }: ConfigureParams): Promise<void> {
-  await maybeBailOnRepoStatusAsync(vcsClient);
+  await maybeBailOnRepoStatusAsync(vcsClient, nonInteractive);

  await createEasJsonAsync(projectDir, vcsClient);

@@ -1,6 +1,7 @@
 import { ExpoConfig } from '@expo/config';
 import { Platform, Workflow } from '@expo/eas-build-job';
 import { BuildProfile, EasJson } from '@expo/eas-json';
+import { LoggerLevel } from '@expo/logger';
 import { NodePackageManager } from '@expo/package-manager';

 import { LocalBuildOptions } from './local';
@@ -60,4 +61,5 @@ export interface BuildContext<T extends Platform> {
  developmentClient: boolean;
  requiredPackageManager: NodePackageManager['name'] | null;
  vcsClient: Client;
+  loggerLevel?: LoggerLevel;
 }
@@ -1,6 +1,7 @@
 import { Platform } from '@expo/eas-build-job';
 import { BuildProfile, EasJson, ResourceClass } from '@expo/eas-json';
 import JsonFile from '@expo/json-file';
+import { LoggerLevel } from '@expo/logger';
 import { resolvePackageManager } from '@expo/package-manager';
 import getenv from 'getenv';
 import resolveFrom from 'resolve-from';
@@ -39,6 +40,8 @@ export async function createBuildContextAsync<T extends Platform>({
  vcsClient,
  getDynamicPrivateProjectConfigAsync,
  customBuildConfigMetadata,
+  buildLoggerLevel,
+  freezeCredentials,
 }: {
  buildProfileName: string;
  buildProfile: BuildProfile<T>;
@@ -57,6 +60,8 @@ export async function createBuildContextAsync<T extends Platform>({
  vcsClient: Client;
  getDynamicPrivateProjectConfigAsync: DynamicConfigContextFn;
  customBuildConfigMetadata?: CustomBuildConfigMetadata;
+  buildLoggerLevel?: LoggerLevel;
+  freezeCredentials: boolean;
 }): Promise<BuildContext<T>> {
  const { exp, projectId } = await getDynamicPrivateProjectConfigAsync({ env: buildProfile.env });
  const projectName = exp.slug;
@@ -83,6 +88,7 @@ export async function createBuildContextAsync<T extends Platform>({
    env: buildProfile.env,
    easJsonCliConfig,
    vcsClient,
+    freezeCredentials,
  });

  const devClientProperties = getDevClientEventProperties({
@@ -136,6 +142,7 @@ export async function createBuildContextAsync<T extends Platform>({
    customBuildConfigMetadata,
    developmentClient,
    requiredPackageManager,
+    loggerLevel: buildLoggerLevel,
  };
  if (platform === Platform.ANDROID) {
    const common = commonContext as CommonContext<Platform.ANDROID>;
@@ -6,6 +6,7 @@ import {
  Metadata,
  Workflow,
 } from '@expo/eas-build-job';
+import { LoggerLevel } from '@expo/logger';
 import assert from 'assert';

 import {
@@ -18,6 +19,7 @@ import {
  BuildTrigger as GraphQLBuildTrigger,
  ProjectArchiveSourceInput,
  ProjectArchiveSourceType,
+  WorkerLoggerLevel,
 } from '../graphql/generated';

 export function transformProjectArchive(archiveSource: ArchiveSource): ProjectArchiveSourceInput {
@@ -25,6 +27,7 @@ export function transformProjectArchive(archiveSource: ArchiveSource): ProjectAr
    return {
      type: ProjectArchiveSourceType.Gcs,
      bucketKey: archiveSource.bucketKey,
+      metadataLocation: archiveSource.metadataLocation,
    };
  } else if (archiveSource.type === ArchiveSourceType.URL) {
    return {
@@ -107,3 +110,12 @@ export function transformBuildTrigger(buildTrigger: BuildTrigger): GraphQLBuildT
  }
  throw new Error('Unknown build trigger');
 }
+
+export const loggerLevelToGraphQLWorkerLoggerLevel: Record<LoggerLevel, WorkerLoggerLevel> = {
+  [LoggerLevel.TRACE]: WorkerLoggerLevel.Trace,
+  [LoggerLevel.DEBUG]: WorkerLoggerLevel.Debug,
+  [LoggerLevel.INFO]: WorkerLoggerLevel.Info,
+  [LoggerLevel.WARN]: WorkerLoggerLevel.Warn,
+  [LoggerLevel.ERROR]: WorkerLoggerLevel.Error,
+  [LoggerLevel.FATAL]: WorkerLoggerLevel.Fatal,
+};
@@ -6,7 +6,7 @@ import os from 'os';
 import type { XCBuildConfiguration } from 'xcode';

 import { readPlistAsync } from '../../../utils/plist';
-import { getVcsClient } from '../../../vcs';
+import { resolveVcsClient } from '../../../vcs';
 import {
  BumpStrategy,
  bumpVersionAsync,
@@ -19,7 +19,7 @@ import {

 jest.mock('fs');

-const vcsClient = getVcsClient();
+const vcsClient = resolveVcsClient();

 const getXCBuildConfigurationFromPbxproj = jest.spyOn(
  IOSConfig.Target,
@@ -1,4 +1,4 @@
-import { Ios, Job, Metadata, Platform, Workflow } from '@expo/eas-build-job';
+import { Ios, Metadata, Platform, Workflow } from '@expo/eas-build-job';
 import { AppVersionSource } from '@expo/eas-json';

 import { ensureIosCredentialsAsync } from './credentials';
@@ -89,12 +89,13 @@ export async function prepareIosBuildAsync(
            ? false
            : ctx.buildProfile.autoIncrement,
        vcsClient: ctx.vcsClient,
+        env: ctx.buildProfile.env,
      });
    },
    prepareJobAsync: async (
      ctx: BuildContext<Platform.IOS>,
      jobData: JobData<IosCredentials>
-    ): Promise<Job> => {
+    ): Promise<Ios.Job> => {
      return await prepareJobAsync(ctx, {
        ...jobData,
        buildScheme: ctx.ios.xcodeBuildContext.buildScheme,
@@ -3,6 +3,7 @@ import nullthrows from 'nullthrows';

 import { IosJobInput, IosJobSecretsInput } from '../../graphql/generated';
 import {
+  loggerLevelToGraphQLWorkerLoggerLevel,
  transformBuildMode,
  transformBuildTrigger,
  transformProjectArchive,
@@ -15,7 +16,6 @@ export function transformJob(job: Ios.Job): IosJobInput {
    triggeredBy: transformBuildTrigger(job.triggeredBy),
    projectArchive: transformProjectArchive(job.projectArchive),
    projectRootDirectory: nullthrows(job.projectRootDirectory),
-    releaseChannel: job.releaseChannel,
    updates: job.updates,
    secrets: job.secrets ? transformIosSecrets(job.secrets) : undefined,
    builderEnvironment: job.builderEnvironment,
@@ -31,6 +31,9 @@ export function transformJob(job: Ios.Job): IosJobInput {
    experimental: job.experimental,
    mode: transformBuildMode(job.mode),
    customBuildConfig: job.customBuildConfig,
+    loggerLevel: job.loggerLevel
+      ? loggerLevelToGraphQLWorkerLoggerLevel[job.loggerLevel]
+      : undefined,
  };
 }

@@ -3,9 +3,8 @@ import {
  BuildMode,
  BuildTrigger,
  Ios,
-  Job,
  Platform,
-  sanitizeJob,
+  sanitizeBuildJob,
 } from '@expo/eas-build-job';
 import { BuildProfile } from '@expo/eas-json';
 import nullthrows from 'nullthrows';
@@ -14,7 +13,7 @@ import slash from 'slash';

 import { IosCredentials, TargetCredentials } from '../../credentials/ios/types';
 import { IosJobSecretsInput } from '../../graphql/generated';
-import { getCustomBuildConfigPath } from '../../project/customBuildConfig';
+import { getCustomBuildConfigPathForJob } from '../../project/customBuildConfig';
 import { getUsername } from '../../project/projectUtils';
 import { BuildContext } from '../context';

@@ -32,7 +31,7 @@ const cacheDefaults = {
 export async function prepareJobAsync(
  ctx: BuildContext<Platform.IOS>,
  jobData: JobData
-): Promise<Job> {
+): Promise<Ios.Job> {
  const username = getUsername(ctx.exp, ctx.user);
  const buildProfile: BuildProfile<Platform.IOS> = ctx.buildProfile;
  const projectRootDirectory =
@@ -46,7 +45,7 @@ export async function prepareJobAsync(
  }

  const maybeCustomBuildConfigPath = buildProfile.config
-    ? getCustomBuildConfigPath(buildProfile.config)
+    ? getCustomBuildConfigPathForJob(buildProfile.config)
    : undefined;

  const job: Ios.Job = {
@@ -63,7 +62,6 @@ export async function prepareJobAsync(
      bundler: buildProfile.bundler,
      cocoapods: buildProfile.cocoapods,
      fastlane: buildProfile.fastlane,
-      expoCli: buildProfile.expoCli,
      env: buildProfile.env,
    },
    cache: {
@@ -74,7 +72,6 @@ export async function prepareJobAsync(
    secrets: {
      buildCredentials,
    },
-    releaseChannel: buildProfile.releaseChannel,
    updates: { channel: buildProfile.channel },
    developmentClient: buildProfile.developmentClient,
    simulator: buildProfile.simulator,
@@ -98,8 +95,9 @@ export async function prepareJobAsync(
        path: maybeCustomBuildConfigPath,
      },
    }),
+    loggerLevel: ctx.loggerLevel,
  };
-  return sanitizeJob(job);
+  return sanitizeBuildJob(job) as Ios.Job;
 }

 export function prepareCredentialsToResign(credentials: IosCredentials): IosJobSecretsInput {
@@ -1,5 +1,5 @@
 import { ExpoConfig } from '@expo/config';
-import { Platform, Workflow } from '@expo/eas-build-job';
+import { Env, Platform, Workflow } from '@expo/eas-build-job';
 import { IosVersionAutoIncrement } from '@expo/eas-json';

 import { BumpStrategy, bumpVersionAsync, bumpVersionInAppJsonAsync } from './version';
@@ -15,19 +15,21 @@ export async function syncProjectConfigurationAsync({
  targets,
  localAutoIncrement,
  vcsClient,
+  env,
 }: {
  projectDir: string;
  exp: ExpoConfig;
  targets: Target[];
  localAutoIncrement?: IosVersionAutoIncrement;
  vcsClient: Client;
+  env: Env | undefined;
 }): Promise<void> {
  const workflow = await resolveWorkflowAsync(projectDir, Platform.IOS, vcsClient);
  const versionBumpStrategy = resolveVersionBumpStrategy(localAutoIncrement ?? false);

  if (workflow === Workflow.GENERIC) {
    if (isExpoUpdatesInstalled(projectDir)) {
-      await syncUpdatesConfigurationAsync(vcsClient, projectDir, exp);
+      await syncUpdatesConfigurationAsync({ vcsClient, projectDir, exp, workflow, env });
    }
    await bumpVersionAsync({ projectDir, exp, bumpStrategy: versionBumpStrategy, targets });
  } else {
@@ -6,7 +6,7 @@ import semver from 'semver';
 import { ora } from '../ora';

 const PLUGIN_PACKAGE_NAME = 'eas-cli-local-build-plugin';
-const PLUGIN_PACKAGE_VERSION = '1.0.60';
+const PLUGIN_PACKAGE_VERSION = '1.0.107';

 export enum LocalBuildMode {
  /**
@@ -1,4 +1,3 @@
-import { Updates } from '@expo/config-plugins';
 import { Metadata, Platform, sanitizeMetadata } from '@expo/eas-build-job';
 import { IosEnterpriseProvisioning } from '@expo/eas-json';
 import fs from 'fs-extra';
@@ -10,25 +9,16 @@ import { maybeResolveVersionsAsync as maybeResolveIosVersionsAsync } from './ios
 import { LocalBuildMode } from './local';
 import { BuildDistributionType } from './types';
 import Log from '../log';
-import {
-  getUsername,
-  isClassicUpdatesSupportedAsync,
-  isExpoUpdatesInstalled,
-} from '../project/projectUtils';
-import {
-  readChannelSafelyAsync as readAndroidChannelSafelyAsync,
-  readReleaseChannelSafelyAsync as readAndroidReleaseChannelSafelyAsync,
-} from '../update/android/UpdatesModule';
-import {
-  readChannelSafelyAsync as readIosChannelSafelyAsync,
-  readReleaseChannelSafelyAsync as readIosReleaseChannelSafelyAsync,
-} from '../update/ios/UpdatesModule';
+import { getUsername, isExpoUpdatesInstalled } from '../project/projectUtils';
+import { resolveRuntimeVersionAsync } from '../project/resolveRuntimeVersionAsync';
+import { readChannelSafelyAsync as readAndroidChannelSafelyAsync } from '../update/android/UpdatesModule';
+import { readChannelSafelyAsync as readIosChannelSafelyAsync } from '../update/ios/UpdatesModule';
 import { easCliVersion } from '../utils/easCli';

 export async function collectMetadataAsync<T extends Platform>(
  ctx: BuildContext<T>
 ): Promise<Metadata> {
-  const channelOrReleaseChannel = await resolveChannelOrReleaseChannelAsync(ctx);
+  const channelObject = await resolveChannelAsync(ctx);
  const distribution = ctx.buildProfile.distribution ?? BuildDistributionType.STORE;
  const metadata: Metadata = {
    trackingContext: ctx.analyticsEventProperties,
@@ -38,10 +28,15 @@ export async function collectMetadataAsync<T extends Platform>(
    credentialsSource: ctx.buildProfile.credentialsSource,
    sdkVersion: ctx.exp.sdkVersion,
    runtimeVersion:
-      (await Updates.getRuntimeVersionNullableAsync(ctx.projectDir, ctx.exp, ctx.platform)) ??
-      undefined,
+      (await resolveRuntimeVersionAsync({
+        exp: ctx.exp,
+        platform: ctx.platform,
+        workflow: ctx.workflow,
+        projectDir: ctx.projectDir,
+        env: ctx.buildProfile.env,
+      })) ?? undefined,
    reactNativeVersion: await getReactNativeVersionAsync(ctx.projectDir),
-    ...channelOrReleaseChannel,
+    ...channelObject,
    distribution,
    appName: ctx.exp.name,
    appIdentifier: resolveAppIdentifier(ctx),
@@ -119,9 +114,9 @@ function resolveAppIdentifier<T extends Platform>(ctx: BuildContext<T>): string
  }
 }

-async function resolveChannelOrReleaseChannelAsync<T extends Platform>(
+async function resolveChannelAsync<T extends Platform>(
  ctx: BuildContext<T>
-): Promise<{ channel: string } | { releaseChannel: string } | null> {
+): Promise<{ channel: string } | null> {
  if (!isExpoUpdatesInstalled(ctx.projectDir)) {
    return null;
  }
@@ -133,31 +128,7 @@ async function resolveChannelOrReleaseChannelAsync<T extends Platform>(
    return { channel };
  }

-  if (!(await isClassicUpdatesSupportedAsync(ctx.projectDir))) {
-    return null;
-  }
-
-  if (ctx.buildProfile.releaseChannel) {
-    return { releaseChannel: ctx.buildProfile.releaseChannel };
-  }
-
-  const releaseChannel = await getNativeReleaseChannelAsync(ctx);
-  return { releaseChannel };
-}
-
-async function getNativeReleaseChannelAsync<T extends Platform>(
-  ctx: BuildContext<T>
-): Promise<string> {
-  switch (ctx.platform) {
-    case Platform.ANDROID: {
-      return (await readAndroidReleaseChannelSafelyAsync(ctx.projectDir)) ?? 'default';
-    }
-    case Platform.IOS: {
-      return (await readIosReleaseChannelSafelyAsync(ctx.projectDir)) ?? 'default';
-    }
-    default:
-      return 'default';
-  }
+  return null;
 }

 async function getNativeChannelAsync<T extends Platform>(
@@ -1,5 +1,5 @@
 import { ExpoConfig } from '@expo/config-types';
-import { Platform, Workflow } from '@expo/eas-build-job';
+import { Env, Platform, Workflow } from '@expo/eas-build-job';
 import {
  AppVersionSource,
  BuildProfile,
@@ -9,6 +9,7 @@ import {
  ResourceClass,
  SubmitProfile,
 } from '@expo/eas-json';
+import { LoggerLevel } from '@expo/logger';
 import assert from 'assert';
 import chalk from 'chalk';
 import nullthrows from 'nullthrows';
@@ -19,7 +20,7 @@ import { ensureProjectConfiguredAsync } from './configure';
 import { BuildContext } from './context';
 import { createBuildContextAsync } from './createContext';
 import { prepareIosBuildAsync } from './ios/build';
-import { LocalBuildOptions } from './local';
+import { LocalBuildMode, LocalBuildOptions } from './local';
 import { ensureExpoDevClientInstalledForDevClientBuildsAsync } from './utils/devClient';
 import { printBuildResults, printLogsUrls } from './utils/printBuildInfo';
 import { ensureRepoIsCleanAsync } from './utils/repository';
@@ -70,7 +71,6 @@ import {
 } from '../submit/submit';
 import { printSubmissionDetailsUrls } from '../submit/utils/urls';
 import { ensureEASUpdateIsConfiguredAsync } from '../update/configure';
-import { validateBuildProfileConfigMatchesProjectConfigAsync } from '../update/utils';
 import { Actor } from '../user/User';
 import { downloadAndMaybeExtractAppAsync } from '../utils/download';
 import { truthy } from '../utils/expodash/filter';
@@ -93,6 +93,8 @@ export interface BuildFlags {
  localBuildOptions: LocalBuildOptions;
  resourceClass?: ResourceClass;
  message?: string;
+  buildLoggerLevel?: LoggerLevel;
+  freezeCredentials: boolean;
 }

 export async function runBuildAndSubmitAsync(
@@ -132,6 +134,36 @@ export async function runBuildAndSubmitAsync(
    }. ${learnMore('https://docs.expo.dev/build-reference/variables/')}`
  );

+  for (const buildProfile of buildProfiles) {
+    if (buildProfile.profile.image && ['default', 'stable'].includes(buildProfile.profile.image)) {
+      Log.warn(
+        `The "image" field in the build profile "${buildProfile.profileName}" is set to "${buildProfile.profile.image}". This tag is deprecated and will be removed in the future. Use other images or tags listed here: https://docs.expo.dev/build-reference/infrastructure/`
+      );
+    }
+
+    if (
+      buildProfile.profile.image &&
+      [
+        'macos-monterey-12.4-xcode-13.4',
+        'macos-monterey-12.3-xcode-13.3',
+        'macos-monterey-12.1-xcode-13.2',
+        'macos-ventura-13.4-xcode-14.3.1',
+        'macos-ventura-13.3-xcode-14.3',
+        'macos-monterey-12.6-xcode-14.2',
+        'macos-monterey-12.6-xcode-14.1',
+        'macos-monterey-12.6-xcode-14.0',
+      ].includes(buildProfile.profile.image)
+    ) {
+      Log.warn(
+        `The "image" field in the build profile "${buildProfile.profileName}" is set to "${
+          buildProfile.profile.image
+        }". This image is using Xcode in version lower then 15. Apple's new requirement states that starting on April 29th, 2024, apps uploaded to App Store Connect must be built with Xcode 15 for iOS 17, iPadOS 17, tvOS 17, or watchOS 10. Start using Xcode 15 image today by setting "macos-sonoma-14.4-xcode-15.3" or "latest" as your image value. This image will be removed from EAS Build on May 29th, 2024. ${learnMore(
+          'https://expo.dev/changelog/2024/03-29-eas-build-upcoming-ios-images-updates'
+        )}`
+      );
+    }
+  }
+
  await ensureExpoDevClientInstalledForDevClientBuildsAsync({
    projectDir,
    nonInteractive: flags.nonInteractive,
@@ -180,13 +212,23 @@ export async function runBuildAndSubmitAsync(
    buildCtxByPlatform[platform] = buildCtx;
  }

-  if (flags.localBuildOptions.localBuildMode) {
+  if (flags.localBuildOptions.localBuildMode === LocalBuildMode.LOCAL_BUILD_PLUGIN) {
    return;
  }

-  Log.newLine();
-  printLogsUrls(startedBuilds.map(startedBuild => startedBuild.build));
-  Log.newLine();
+  if (flags.localBuildOptions.localBuildMode === LocalBuildMode.INTERNAL) {
+    const startedBuild = await BuildQuery.byIdAsync(
+      graphqlClient,
+      nullthrows(process.env.EAS_BUILD_ID, 'EAS_BUILD_ID is not defined')
+    );
+    startedBuilds.push({ build: startedBuild, buildProfile: buildProfiles[0] });
+  }
+
+  if (!flags.localBuildOptions.localBuildMode) {
+    Log.newLine();
+    printLogsUrls(startedBuilds.map(startedBuild => startedBuild.build));
+    Log.newLine();
+  }

  const submissions: SubmissionFragment[] = [];
  if (flags.autoSubmit) {
@@ -219,9 +261,15 @@ export async function runBuildAndSubmitAsync(
      submissions.push(submission);
    }

-    Log.newLine();
-    printSubmissionDetailsUrls(submissions);
-    Log.newLine();
+    if (!flags.localBuildOptions.localBuildMode) {
+      Log.newLine();
+      printSubmissionDetailsUrls(submissions);
+      Log.newLine();
+    }
+  }
+
+  if (flags.localBuildOptions.localBuildMode) {
+    return;
  }

  if (!flags.wait) {
@@ -314,6 +362,8 @@ async function prepareAndStartBuildAsync({
    vcsClient,
    getDynamicPrivateProjectConfigAsync,
    customBuildConfigMetadata,
+    buildLoggerLevel: flags.buildLoggerLevel,
+    freezeCredentials: flags.freezeCredentials,
  });

  if (moreBuilds) {
@@ -326,12 +376,6 @@ async function prepareAndStartBuildAsync({
    );
  }

-  await validateBuildProfileConfigMatchesProjectConfigAsync(
-    buildCtx.exp,
-    buildProfile,
-    buildCtx.projectId,
-    flags.nonInteractive
-  );
  if (buildProfile.profile.channel) {
    await validateExpoUpdatesInstalledAsProjectDependencyAsync({
      exp: buildCtx.exp,
@@ -341,6 +385,7 @@ async function prepareAndStartBuildAsync({
      sdkVersion: buildCtx.exp.sdkVersion,
      nonInteractive: flags.nonInteractive,
      buildProfile,
+      env: buildProfile.profile.env,
    });
    if (isUsingEASUpdate(buildCtx.exp, buildCtx.projectId)) {
      const doesChannelExist = await doesChannelExistAsync(graphqlClient, {
@@ -421,6 +466,7 @@ async function prepareAndStartSubmissionAsync({
    projectId: buildCtx.projectId,
    exp: buildCtx.exp,
    vcsClient: buildCtx.vcsClient,
+    isVerboseFastlaneEnabled: false,
  });

  if (moreBuilds) {
@@ -484,6 +530,7 @@ async function validateExpoUpdatesInstalledAsProjectDependencyAsync({
  buildProfile,
  nonInteractive,
  sdkVersion,
+  env,
 }: {
  exp: ExpoConfig;
  projectId: string;
@@ -492,6 +539,7 @@ async function validateExpoUpdatesInstalledAsProjectDependencyAsync({
  buildProfile: ProfileData<'build'>;
  nonInteractive: boolean;
  sdkVersion?: string;
+  env: Env | undefined;
 }): Promise<void> {
  if (isExpoUpdatesInstalledOrAvailable(projectDir, sdkVersion)) {
    return;
@@ -519,6 +567,7 @@ async function validateExpoUpdatesInstalledAsProjectDependencyAsync({
        projectDir,
        platform: RequestedPlatform.All,
        vcsClient,
+        env,
      });
      Log.withTick('Installed expo-updates and configured EAS Update.');
      throw new Error('Command must be re-run to pick up new updates configuration.');
@@ -51,10 +51,6 @@ export function formatGraphQLBuild(build: BuildFragment): string {
      label: 'Enterprise Provisioning',
      value: build.iosEnterpriseProvisioning?.toLowerCase(),
    },
-    {
-      label: 'Release Channel',
-      value: build.releaseChannel,
-    },
    {
      label: 'Channel',
      value: build.channel,
@@ -12,7 +12,10 @@ import { getTmpDirectory } from '../../utils/paths';
 import { endTimer, formatMilliseconds, startTimer } from '../../utils/timer';
 import { Client } from '../../vcs/vcs';

-export async function maybeBailOnRepoStatusAsync(vcsClient: Client): Promise<void> {
+export async function maybeBailOnRepoStatusAsync(
+  vcsClient: Client,
+  nonInteractive: boolean
+): Promise<void> {
  if (!(await vcsClient.isCommitRequiredAsync())) {
    return;
  }
@@ -28,6 +31,11 @@ export async function maybeBailOnRepoStatusAsync(vcsClient: Client): Promise<voi
  });

  if (!answer) {
+    if (nonInteractive) {
+      Log.log('The following files need to be committed:');
+      await vcsClient.showChangedFilesAsync();
+    }
+
    throw new Error('Commit all changes. Aborting...');
  }
 }
@@ -47,6 +55,9 @@ export async function ensureRepoIsCleanAsync(
    )}.`
  );
  if (nonInteractive) {
+    Log.log('The following files need to be committed:');
+    await vcsClient.showChangedFilesAsync();
+
    throw new Error('Commit all changes. Aborting...');
  }
  const answer = await confirmAsync({
@@ -83,9 +94,55 @@ export async function commitPromptAsync(
  });
 }

-export async function makeProjectTarballAsync(
-  vcsClient: Client
-): Promise<{ path: string; size: number }> {
+export type LocalFile = {
+  path: string;
+  size: number;
+};
+
+export async function makeProjectMetadataFileAsync(archivePath: string): Promise<LocalFile> {
+  const spinner = ora('Creating project metadata file');
+  const timerLabel = 'makeProjectMetadataFileAsync';
+  const timer = setTimeout(
+    () => {
+      spinner.start();
+    },
+    Log.isDebug ? 1 : 1000
+  );
+  startTimer(timerLabel);
+
+  const metadataLocation = path.join(getTmpDirectory(), `${uuidv4()}-eas-build-metadata.json`);
+  const archiveContent: string[] = [];
+
+  try {
+    await tar.list({
+      file: archivePath,
+      onentry: (entry: tar.ReadEntry) => {
+        if (entry.type === 'File' && !entry.path.includes('.git/')) {
+          archiveContent.push(entry.path);
+        }
+      },
+    });
+
+    await fs.writeJSON(metadataLocation, {
+      archiveContent,
+    });
+  } catch (e) {
+    clearTimeout(timer);
+    if (spinner.isSpinning) {
+      spinner.fail();
+    }
+    throw e;
+  }
+  clearTimeout(timer);
+
+  const duration = endTimer(timerLabel);
+  const prettyTime = formatMilliseconds(duration);
+  spinner.succeed(`Created project metadata file ${chalk.dim(prettyTime)}`);
+
+  return { path: metadataLocation, size: await fs.stat(metadataLocation).then(stat => stat.size) };
+}
+
+export async function makeProjectTarballAsync(vcsClient: Client): Promise<LocalFile> {
  const spinner = ora('Compressing project files');

  await fs.mkdirp(getTmpDirectory());
@@ -1,5 +1,6 @@
 import { Command } from '@oclif/core';
 import { CombinedError } from '@urql/core';
+import chalk from 'chalk';
 import { GraphQLError } from 'graphql/error';
 import nullthrows from 'nullthrows';

@@ -24,6 +25,7 @@ import {
 } from '../analytics/AnalyticsManager';
 import Log from '../log';
 import SessionManager from '../user/SessionManager';
+import { Client } from '../vcs/vcs';

 export type ContextInput<
  T extends {
@@ -139,7 +141,7 @@ export default abstract class EasCommand extends Command {
    } = object,
  >(
    commandClass: { contextDefinition: ContextInput<C> },
-    { nonInteractive }: { nonInteractive: boolean }
+    { nonInteractive, vcsClientOverride }: { nonInteractive: boolean; vcsClientOverride?: Client }
  ): Promise<ContextOutput<C>> {
    const contextDefinition = commandClass.contextDefinition;

@@ -152,6 +154,7 @@ export default abstract class EasCommand extends Command {
          nonInteractive,
          sessionManager: this.sessionManager,
          analytics: this.analytics,
+          vcsClientOverride,
        }),
      ]);
    }
@@ -208,7 +211,13 @@ export default abstract class EasCommand extends Command {
          const defaultMsg = `${messageLine}${requestIdLine}`;

          if (graphQLError.extensions?.errorCode === 'UNAUTHORIZED_ERROR') {
-            return `You don't have the required permissions to perform this operation.\n\n${defaultMsg}`;
+            return `${chalk.bold(
+              `You don't have the required permissions to perform this operation.`
+            )}\n\nThis can sometimes happen if you are logged in as incorrect user.\nRun ${chalk.bold(
+              'eas whoami'
+            )} to check the username you are logged in as.\nRun ${chalk.bold(
+              'eas login'
+            )} to change the account.\n\nOriginal error message: ${defaultMsg}`;
          }

          return defaultMsg;
@@ -1,10 +1,12 @@
 import { Analytics } from '../../analytics/AnalyticsManager';
 import SessionManager from '../../user/SessionManager';
+import { Client } from '../../vcs/vcs';

 export interface ContextOptions {
  sessionManager: SessionManager;
  analytics: Analytics;
  nonInteractive: boolean;
+  vcsClientOverride?: Client;
 }

 export default abstract class ContextField<T> {
@@ -1,9 +1,18 @@
+import { EasJsonAccessor, EasJsonUtils } from '@expo/eas-json';
+
 import ContextField from './ContextField';
-import { getVcsClient } from '../../vcs';
+import { findProjectDirAndVerifyProjectSetupAsync } from './contextUtils/findProjectDirAndVerifyProjectSetupAsync';
+import { resolveVcsClient } from '../../vcs';
 import { Client } from '../../vcs/vcs';

 export default class VcsClientContextField extends ContextField<Client> {
-  async getValueAsync(): Promise<Client> {
-    return getVcsClient();
+  async getValueAsync({ vcsClientOverride }: { vcsClientOverride?: Client }): Promise<Client> {
+    if (vcsClientOverride) {
+      return vcsClientOverride;
+    }
+    const projectDir = await findProjectDirAndVerifyProjectSetupAsync();
+    const easJsonAccessor = EasJsonAccessor.fromProjectPath(projectDir);
+    const config = await EasJsonUtils.getCliConfigAsync(easJsonAccessor);
+    return resolveVcsClient(config?.requireCommit);
  }
 }
@@ -55,6 +55,7 @@ describe(getProjectIdAsync, () => {
        ],
        isExpoAdmin: false,
        featureGates: {},
+        preferences: {},
      },
      authenticationInfo: { accessToken: 'fake', sessionSecret: null },
    });
@@ -8,20 +8,20 @@ import semver from 'semver';

 import { learnMore } from '../../../log';
 import { easCliVersion } from '../../../utils/easCli';
-import { getVcsClient, setVcsClient } from '../../../vcs';
-import GitClient from '../../../vcs/clients/git';
+import { resolveVcsClient } from '../../../vcs';

 async function applyCliConfigAsync(projectDir: string): Promise<void> {
  const easJsonAccessor = EasJsonAccessor.fromProjectPath(projectDir);
  const config = await EasJsonUtils.getCliConfigAsync(easJsonAccessor);
  if (config?.version && !semver.satisfies(easCliVersion, config.version)) {
    throw new Error(
-      `You are on eas-cli@${easCliVersion} which does not satisfy the CLI version constraint in eas.json (${config.version})`
+      `You are on eas-cli@${easCliVersion} which does not satisfy the CLI version constraint defined in eas.json (${
+        config.version
+      }).\n\nThis error probably means that you need update your eas-cli to a newer version.\nRun ${chalk.bold(
+        'npm install -g eas-cli'
+      )} to update the eas-cli to the latest version.`
    );
  }
-  if (config?.requireCommit) {
-    setVcsClient(new GitClient());
-  }
 }

 async function ensureEasCliIsNotInDependenciesAsync(projectDir: string): Promise<void> {
@@ -92,7 +92,7 @@ export async function findProjectRootAsync({
  } else {
    let vcsRoot;
    try {
-      vcsRoot = path.normalize(await getVcsClient().getRootPathAsync());
+      vcsRoot = path.normalize(await resolveVcsClient().getRootPathAsync());
    } catch {}
    if (vcsRoot && vcsRoot.startsWith(projectRootDir) && vcsRoot !== projectRootDir) {
      throw new Error(
@@ -3,7 +3,7 @@ import { ExpoConfig } from '@expo/config-types';
 import { Env } from '@expo/eas-build-job';
 import chalk from 'chalk';

-import { createGraphqlClient } from './createGraphqlClient';
+import { ExpoGraphqlClient, createGraphqlClient } from './createGraphqlClient';
 import { findProjectRootAsync } from './findProjectDirAndVerifyProjectSetupAsync';
 import { AppQuery } from '../../../graphql/queries/AppQuery';
 import Log, { learnMore } from '../../../log';
@@ -87,6 +87,21 @@ export async function getProjectIdAsync(
  });
  const graphqlClient = createGraphqlClient(authenticationInfo);

+  const projectId = await validateOrSetProjectIdAsync({ exp, graphqlClient, actor, options });
+  return projectId;
+}
+
+export async function validateOrSetProjectIdAsync({
+  exp,
+  graphqlClient,
+  actor,
+  options,
+}: {
+  exp: ExpoConfig;
+  graphqlClient: ExpoGraphqlClient;
+  actor: Actor;
+  options: { env?: Env; nonInteractive: boolean };
+}): Promise<string> {
  const localProjectId = exp.extra?.eas?.projectId;
  if (localProjectId) {
    if (typeof localProjectId !== 'string') {
@@ -13,7 +13,6 @@ export default class AccountLogin extends EasCommand {
      description: 'Login with SSO',
      char: 's',
      default: false,
-      hidden: true,
    }),
  };

@@ -74,14 +74,20 @@ export default class BuildConfigure extends EasCommand {
      if ([RequestedPlatform.Android, RequestedPlatform.All].includes(platform)) {
        const workflow = await resolveWorkflowAsync(projectDir, Platform.ANDROID, vcsClient);
        if (workflow === Workflow.GENERIC) {
-          await syncAndroidUpdatesConfigurationAsync(projectDir, exp);
+          await syncAndroidUpdatesConfigurationAsync({ projectDir, exp, workflow, env: undefined });
        }
      }

      if ([RequestedPlatform.Ios, RequestedPlatform.All].includes(platform)) {
        const workflow = await resolveWorkflowAsync(projectDir, Platform.IOS, vcsClient);
        if (workflow === Workflow.GENERIC) {
-          await syncIosUpdatesConfigurationAsync(vcsClient, projectDir, exp);
+          await syncIosUpdatesConfigurationAsync({
+            vcsClient,
+            projectDir,
+            exp,
+            workflow,
+            env: undefined,
+          });
        }
      }
    }
@@ -1,5 +1,6 @@
 import { Platform } from '@expo/eas-build-job';
 import { EasJsonAccessor, EasJsonUtils, ResourceClass } from '@expo/eas-json';
+import { LoggerLevel } from '@expo/logger';
 import { Errors, Flags } from '@oclif/core';
 import chalk from 'chalk';
 import figures from 'figures';
@@ -33,6 +34,8 @@ interface RawBuildFlags {
  'auto-submit-with-profile'?: string;
  'resource-class'?: ResourceClass;
  message?: string;
+  'build-logger-level'?: LoggerLevel;
+  'freeze-credentials': boolean;
 }

 export default class Build extends EasCommand {
@@ -98,6 +101,14 @@ export default class Build extends EasCommand {
      char: 'm',
      description: 'A short message describing the build',
    }),
+    'build-logger-level': Flags.enum({
+      description: 'The level of logs to output during the build process. Defaults to "info".',
+      options: Object.values(LoggerLevel),
+    }),
+    'freeze-credentials': Flags.boolean({
+      default: false,
+      description: 'Prevent the build from updating credentials in non-interactive mode',
+    }),
    ...EasNonInteractiveAndJsonFlags,
  };

@@ -210,6 +221,8 @@ export default class Build extends EasCommand {
      submitProfile: flags['auto-submit-with-profile'] ?? profile,
      resourceClass: flags['resource-class'],
      message,
+      buildLoggerLevel: flags['build-logger-level'],
+      freezeCredentials: flags['freeze-credentials'],
    };
  }

@@ -105,6 +105,7 @@ export default class BuildInspect extends EasCommand {
          projectDir,
          {
            nonInteractive: false,
+            freezeCredentials: false,
            wait: true,
            clearCache: false,
            json: false,
@@ -6,7 +6,6 @@ import { runBuildAndSubmitAsync } from '../../build/runBuildAndSubmit';
 import EasCommand from '../../commandUtils/EasCommand';
 import { RequestedPlatform } from '../../platform';
 import { enableJsonOutput } from '../../utils/json';
-import { setVcsClient } from '../../vcs';
 import GitNoCommitClient from '../../vcs/clients/gitNoCommit';

 /**
@@ -30,6 +29,17 @@ export default class BuildInternal extends EasCommand {
        'Name of the build profile from eas.json. Defaults to "production" if defined in eas.json.',
      helpValue: 'PROFILE_NAME',
    }),
+    'auto-submit': Flags.boolean({
+      default: false,
+      description:
+        'Submit on build complete using the submit profile with the same name as the build profile',
+      exclusive: ['auto-submit-with-profile'],
+    }),
+    'auto-submit-with-profile': Flags.string({
+      description: 'Submit on build complete using the submit profile with provided name',
+      helpValue: 'PROFILE_NAME',
+      exclusive: ['auto-submit'],
+    }),
  };

  static override contextDefinition = {
@@ -53,10 +63,9 @@ export default class BuildInternal extends EasCommand {
      vcsClient,
    } = await this.getContextAsync(BuildInternal, {
      nonInteractive: true,
+      vcsClientOverride: new GitNoCommitClient(),
    });

-    setVcsClient(new GitNoCommitClient());
-
    await handleDeprecatedEasJsonAsync(projectDir, flags.nonInteractive);

    await runBuildAndSubmitAsync(
@@ -68,13 +77,15 @@ export default class BuildInternal extends EasCommand {
        requestedPlatform: flags.platform as RequestedPlatform,
        profile: flags.profile,
        nonInteractive: true,
+        freezeCredentials: false,
        wait: false,
        clearCache: false,
        json: true,
-        autoSubmit: false,
+        autoSubmit: flags['auto-submit'] || flags['auto-submit-with-profile'] !== undefined,
        localBuildOptions: {
          localBuildMode: LocalBuildMode.INTERNAL,
        },
+        submitProfile: flags['auto-submit-with-profile'] ?? flags.profile,
      },
      actor,
      getDynamicPrivateProjectConfigAsync
@@ -88,6 +88,7 @@ export default class BuildVersionGetView extends EasCommand {
        buildProfile: profile,
        platform,
        vcsClient,
+        nonInteractive: flags['non-interactive'],
      });
      const remoteVersions = await AppVersionQuery.latestVersionAsync(
        graphqlClient,
@@ -77,6 +77,7 @@ export default class BuildVersionSetView extends EasCommand {
      buildProfile: profile,
      platform,
      vcsClient,
+      nonInteractive: false,
    });
    const remoteVersions = await AppVersionQuery.latestVersionAsync(
      graphqlClient,
@@ -102,6 +102,7 @@ export default class BuildVersionSyncView extends EasCommand {
        buildProfile: profileInfo.profile,
        platform: profileInfo.platform,
        vcsClient,
+        nonInteractive: false,
      });
      const remoteVersions = await AppVersionQuery.latestVersionAsync(
        graphqlClient,
@@ -125,6 +125,7 @@ export default class ChannelRollout extends EasCommand {

  static override contextDefinition = {
    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.Vcs,
    ...this.ContextOptions.LoggedIn,
  };

@@ -133,6 +134,7 @@ export default class ChannelRollout extends EasCommand {
    const argsAndFlags = this.sanitizeArgsAndFlags({ ...flags, ...args });
    const {
      privateProjectConfig: { exp, projectId, projectDir },
+      vcsClient,
      loggedIn: { graphqlClient },
    } = await this.getContextAsync(ChannelRollout, {
      nonInteractive: argsAndFlags.nonInteractive,
@@ -146,6 +148,7 @@ export default class ChannelRollout extends EasCommand {
      nonInteractive: argsAndFlags.nonInteractive,
      graphqlClient,
      app,
+      vcsClient,
    };
    if (argsAndFlags.nonInteractive) {
      await new NonInteractiveRollout(argsAndFlags).runAsync(ctx);
@@ -0,0 +1,65 @@
+import { Platform } from '@expo/eas-build-job';
+import { Flags } from '@oclif/core';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import { SelectBuildProfileFromEasJson } from '../../credentials/manager/SelectBuildProfileFromEasJson';
+import { SetUpBuildCredentialsCommandAction } from '../../credentials/manager/SetUpBuildCredentialsCommandAction';
+import { selectPlatformAsync } from '../../platform';
+
+export default class InitializeBuildCredentials extends EasCommand {
+  static override description = 'Set up credentials for building your project.';
+
+  static override flags = {
+    platform: Flags.enum({
+      char: 'p',
+      options: [Platform.ANDROID, Platform.IOS],
+    }),
+    profile: Flags.string({
+      char: 'e',
+      description: 'The name of the build profile in eas.json.',
+      helpValue: 'PROFILE_NAME',
+    }),
+  };
+
+  static override contextDefinition = {
+    ...this.ContextOptions.LoggedIn,
+    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.DynamicProjectConfig,
+    ...this.ContextOptions.Analytics,
+    ...this.ContextOptions.Vcs,
+  };
+
+  async runAsync(): Promise<void> {
+    const { flags } = await this.parse(InitializeBuildCredentials);
+    const {
+      loggedIn: { actor, graphqlClient },
+      privateProjectConfig,
+      getDynamicPrivateProjectConfigAsync,
+      analytics,
+      vcsClient,
+    } = await this.getContextAsync(InitializeBuildCredentials, {
+      nonInteractive: false,
+    });
+
+    const platform = await selectPlatformAsync(flags.platform);
+
+    const buildProfile =
+      flags.profile ??
+      (await new SelectBuildProfileFromEasJson(
+        privateProjectConfig.projectDir,
+        Platform.IOS
+      ).getProfileNameFromEasConfigAsync());
+
+    await new SetUpBuildCredentialsCommandAction(
+      actor,
+      graphqlClient,
+      vcsClient,
+      analytics,
+      privateProjectConfig ?? null,
+      getDynamicPrivateProjectConfigAsync,
+      platform,
+      buildProfile,
+      process.cwd()
+    ).runAsync();
+  }
+}
@@ -1,7 +1,7 @@
 import { Flags } from '@oclif/core';

-import EasCommand from '../commandUtils/EasCommand';
-import { SelectPlatform } from '../credentials/manager/SelectPlatform';
+import EasCommand from '../../commandUtils/EasCommand';
+import { SelectPlatform } from '../../credentials/manager/SelectPlatform';

 export default class Credentials extends EasCommand {
  static override description = 'manage credentials';
@@ -1,4 +1,4 @@
-import { getProjectConfigDescription } from '@expo/config';
+import { ConfigError, getProjectConfigDescription } from '@expo/config';
 import { ExpoConfig } from '@expo/config-types';
 import { Flags } from '@oclif/core';
 import chalk from 'chalk';
@@ -60,7 +60,19 @@ export default class ProjectInit extends EasCommand {
    projectDir: string,
    modifications: Partial<ExpoConfig>
  ): Promise<void> {
-    const result = await createOrModifyExpoConfigAsync(projectDir, modifications);
+    let result;
+    try {
+      result = await createOrModifyExpoConfigAsync(projectDir, modifications);
+    } catch (error) {
+      if (error instanceof ConfigError && error.code === 'MODULE_NOT_FOUND') {
+        Log.warn(
+          'Cannot determine which native SDK version your project uses because the module `expo` is not installed.'
+        );
+        return;
+      } else {
+        throw error;
+      }
+    }
    switch (result.type) {
      case 'success':
        break;
@@ -0,0 +1,255 @@
+import { Platform } from '@expo/eas-build-job';
+
+import { getExpoWebsiteBaseUrl } from '../../api';
+import { reviewAndCommitChangesAsync } from '../../build/utils/repository';
+import EasCommand from '../../commandUtils/EasCommand';
+import { DynamicConfigContextFn } from '../../commandUtils/context/DynamicProjectConfigContextField';
+import { ExpoGraphqlClient } from '../../commandUtils/context/contextUtils/createGraphqlClient';
+import { validateOrSetProjectIdAsync } from '../../commandUtils/context/contextUtils/getProjectIdAsync';
+import { CredentialsContextProjectInfo } from '../../credentials/context';
+import { SetUpBuildCredentialsCommandAction } from '../../credentials/manager/SetUpBuildCredentialsCommandAction';
+import { AppPlatform, OnboardingDeviceType, OnboardingEnvironment } from '../../graphql/generated';
+import { UserPreferencesMutation } from '../../graphql/mutations/UserPreferencesMutation';
+import { AppQuery } from '../../graphql/queries/AppQuery';
+import Log, { link } from '../../log';
+import { runGitCloneAsync, runGitPushAsync } from '../../onboarding/git';
+import { installDependenciesAsync } from '../../onboarding/installDependencies';
+import { ExpoConfigOptions, getPrivateExpoConfig } from '../../project/expoConfig';
+import { confirmAsync, promptAsync } from '../../prompts';
+import { Actor } from '../../user/User';
+import GitClient from '../../vcs/clients/git';
+
+export default class Onboarding extends EasCommand {
+  static override hidden = true;
+
+  static override aliases = ['init:onboarding', 'onboarding'];
+
+  static override description = 'continue onboarding process started on the expo.dev website';
+
+  static override flags = {};
+
+  static override args = [{ name: 'TARGET_PROJECT_DIRECTORY' }];
+
+  static override contextDefinition = {
+    ...this.ContextOptions.LoggedIn,
+    ...this.ContextOptions.Analytics,
+  };
+
+  async runAsync(): Promise<void> {
+    const {
+      args: { TARGET_PROJECT_DIRECTORY: targetProjectDirInput },
+    } = await this.parse(Onboarding);
+
+    const {
+      loggedIn: { actor, graphqlClient },
+      analytics,
+    } = await this.getContextAsync(Onboarding, {
+      nonInteractive: false,
+    });
+
+    if (actor.__typename === 'Robot') {
+      throw new Error(
+        'This command is not available for robot users. Make sure you are not using a robot token and try again.'
+      );
+    }
+
+    if (!actor.preferences.onboarding) {
+      throw new Error(
+        'This command can only be run as part of the onboarding process started on the Expo website. Visit https://expo.new to start a new project.'
+      );
+    }
+
+    if (!actor.preferences.onboarding.platform) {
+      throw new Error(
+        'This command can only be run as part of the onboarding process started on the Expo website. It seems like you started an onboarding process, but we are missing some information needed to be filled in before running the eas init:onboarding command (selected platform). Continue the onboarding process on the Expo website.'
+      );
+    }
+    if (!actor.preferences.onboarding.environment) {
+      throw new Error(
+        'This command can only be run as part of the onboarding process started on the Expo website. It seems like you started an onboarding process, but we are missing some information needed to be filled in before running the eas init:onboarding command (selected environment). Continue the onboarding process on the Expo website.'
+      );
+    }
+    if (!actor.preferences.onboarding.deviceType) {
+      throw new Error(
+        'This command can only be run as part of the onboarding process started on the Expo website. It seems like you started an onboarding process, but we are missing some information needed to be filled in before running the eas init:onboarding command (selected device type). Continue the onboarding process on the Expo website.'
+      );
+    }
+
+    if (
+      new Date(actor.preferences.onboarding.lastUsed) < new Date(Date.now() - 1000 * 60 * 60 * 24)
+    ) {
+      Log.warn(
+        'It seems like you started an onboarding process, but it has been a while since you last used it. If you want to start a new onboarding process, visit https://expo.new.'
+      );
+      Log.log();
+      return;
+    }
+
+    const platform =
+      actor.preferences.onboarding.platform === AppPlatform.Android
+        ? Platform.ANDROID
+        : Platform.IOS;
+
+    const app = await AppQuery.byIdAsync(graphqlClient, actor.preferences.onboarding.appId);
+
+    const githubUsername = app.githubRepository
+      ? app.githubRepository.metadata.githubRepoOwnerName
+      : 'expo';
+    const githubRepositoryName = app.githubRepository
+      ? app.githubRepository.metadata.githubRepoName
+      : 'expo-default-template';
+    const initialTargetProjectDir = targetProjectDirInput ?? `./${githubRepositoryName}`;
+
+    Log.log(`👋 Welcome to Expo, ${actor.username}!`);
+    Log.log();
+    Log.log('✨ We will continue your onboarding process in EAS CLI');
+    Log.log();
+    Log.log(
+      `🚚 Let's start by cloning ${
+        app.githubRepository
+          ? `your project (${githubUsername}/${githubRepositoryName})`
+          : `default Expo template project (${githubUsername}/${githubRepositoryName})`
+      } from GitHub and installing dependencies.`
+    );
+    Log.log();
+    const shouldContinueWithDefaultTargetDirectory = await confirmAsync({
+      message: `Do you want to clone your project into ${initialTargetProjectDir}?`,
+    });
+    let targetProjectDir = initialTargetProjectDir;
+    if (!shouldContinueWithDefaultTargetDirectory) {
+      const { newTargetProjectDir } = await promptAsync({
+        type: 'text',
+        name: 'newTargetProjectDir',
+        message: 'Provide a new target directory path:',
+        validate: (input: string) => input !== '',
+      });
+      targetProjectDir = newTargetProjectDir;
+    }
+    Log.log();
+
+    const { targetProjectDir: finalTargetProjectDirectory } = await runGitCloneAsync({
+      githubUsername,
+      githubRepositoryName,
+      targetProjectDir,
+    });
+
+    const vcsClient = new GitClient(finalTargetProjectDirectory);
+    await installDependenciesAsync({
+      projectDir: finalTargetProjectDirectory,
+    });
+    await vcsClient.trackFileAsync('package-lock.json');
+
+    const shouldSetupCredentials =
+      actor.preferences.onboarding.deviceType === OnboardingDeviceType.Device &&
+      actor.preferences.onboarding.environment === OnboardingEnvironment.DevBuild;
+    if (shouldSetupCredentials) {
+      Log.log('🔑 Now we need to set up build credentials for your project:');
+      await new SetUpBuildCredentialsCommandAction(
+        actor,
+        graphqlClient,
+        vcsClient,
+        analytics,
+        await getPrivateExpoConfigWithProjectIdAsync({
+          projectDir: finalTargetProjectDirectory,
+          graphqlClient,
+          actor,
+        }),
+        getDynamicPrivateProjectConfigGetter({
+          projectDir: finalTargetProjectDirectory,
+          graphqlClient,
+          actor,
+        }),
+        platform,
+        'development',
+        finalTargetProjectDirectory
+      ).runAsync();
+    }
+
+    if (await vcsClient.hasUncommittedChangesAsync()) {
+      Log.log(
+        '📦 We will now commit the changes made by the configuration process and push them to GitHub:'
+      );
+      Log.log();
+      Log.log('🔍 Checking for changes in the repository...');
+      await vcsClient.showChangedFilesAsync();
+      await reviewAndCommitChangesAsync(
+        vcsClient,
+        `[eas-onboarding] Install dependencies${
+          shouldSetupCredentials ? 'and set up build credentials' : ''
+        }`,
+        { nonInteractive: false }
+      );
+      Log.log('📤 Pushing changes to GitHub...');
+      await runGitPushAsync({
+        targetProjectDir: finalTargetProjectDirectory,
+      });
+    }
+
+    const { __typename, ...previousPreferences } = actor.preferences.onboarding;
+    await UserPreferencesMutation.markCliDoneInOnboardingUserPreferencesAsync(graphqlClient, {
+      ...previousPreferences,
+      appId: app.id,
+    });
+
+    Log.log();
+    Log.log('🎉 We finished configuring your project.');
+    Log.log();
+    Log.log('🚀 You can now go back to the website to continue:');
+    const url = new URL(
+      `/onboarding/develop/set-up-project-on-your-machine?project=${app.slug}&accountId=${app.ownerAccount.id}`,
+      getExpoWebsiteBaseUrl()
+    ).toString();
+    Log.log(`👉 ${link(url)}`);
+  }
+}
+
+// we can't get this automated by using command context because when we run a command the project directory doesn't exist yet
+async function getPrivateExpoConfigWithProjectIdAsync({
+  projectDir,
+  graphqlClient,
+  actor,
+  options,
+}: {
+  projectDir: string;
+  graphqlClient: ExpoGraphqlClient;
+  actor: Actor;
+  options?: ExpoConfigOptions;
+}): Promise<CredentialsContextProjectInfo> {
+  const expBefore = getPrivateExpoConfig(projectDir, options);
+  const projectId = await validateOrSetProjectIdAsync({
+    exp: expBefore,
+    graphqlClient,
+    actor,
+    options: {
+      nonInteractive: false,
+    },
+  });
+  const exp = getPrivateExpoConfig(projectDir, options);
+  return {
+    exp,
+    projectId,
+  };
+}
+
+// we can't get this automated by using command context because when we run a command the project directory doesn't exist yet
+function getDynamicPrivateProjectConfigGetter({
+  projectDir,
+  graphqlClient,
+  actor,
+}: {
+  projectDir: string;
+  graphqlClient: ExpoGraphqlClient;
+  actor: Actor;
+}): DynamicConfigContextFn {
+  return async (options?: ExpoConfigOptions) => {
+    return {
+      ...(await getPrivateExpoConfigWithProjectIdAsync({
+        projectDir,
+        graphqlClient,
+        actor,
+        options,
+      })),
+      projectDir,
+    };
+  };
+}
@@ -33,6 +33,7 @@ interface RawCommandFlags {
  verbose: boolean;
  wait: boolean;
  'non-interactive': boolean;
+  'verbose-fastlane': boolean;
 }

 interface CommandFlags {
@@ -42,6 +43,7 @@ interface CommandFlags {
  verbose: boolean;
  wait: boolean;
  nonInteractive: boolean;
+  isVerboseFastlaneEnabled: boolean;
 }

 export default class Submit extends EasCommand {
@@ -83,6 +85,10 @@ export default class Submit extends EasCommand {
      default: true,
      allowNo: true,
    }),
+    'verbose-fastlane': Flags.boolean({
+      default: false,
+      description: 'Enable verbose logging for the submission process',
+    }),
    'non-interactive': Flags.boolean({
      default: false,
      description: 'Run command in non-interactive mode',
@@ -132,6 +138,7 @@ export default class Submit extends EasCommand {
        profile: submissionProfile.profile,
        archiveFlags: flagsWithPlatform.archiveFlags,
        nonInteractive: flagsWithPlatform.nonInteractive,
+        isVerboseFastlaneEnabled: flagsWithPlatform.isVerboseFastlaneEnabled,
        actor,
        graphqlClient,
        analytics,
@@ -175,6 +182,7 @@ export default class Submit extends EasCommand {
      wait,
      profile,
      'non-interactive': nonInteractive,
+      'verbose-fastlane': isVerboseFastlaneEnabled,
      ...archiveFlags
    } = flags;

@@ -195,6 +203,7 @@ export default class Submit extends EasCommand {
      wait,
      profile,
      nonInteractive,
+      isVerboseFastlaneEnabled,
    };
  }

@@ -12,6 +12,7 @@ import {
  DynamicPublicProjectConfigContextField,
 } from '../../../commandUtils/context/DynamicProjectConfigContextField';
 import LoggedInContextField from '../../../commandUtils/context/LoggedInContextField';
+import VcsClientContextField from '../../../commandUtils/context/VcsClientContextField';
 import { ExpoGraphqlClient } from '../../../commandUtils/context/contextUtils/createGraphqlClient';
 import FeatureGateEnvOverrides from '../../../commandUtils/gating/FeatureGateEnvOverrides';
 import FeatureGating from '../../../commandUtils/gating/FeatureGating';
@@ -21,6 +22,7 @@ import { PublishMutation } from '../../../graphql/mutations/PublishMutation';
 import { AppQuery } from '../../../graphql/queries/AppQuery';
 import { collectAssetsAsync, uploadAssetsAsync } from '../../../project/publish';
 import { getBranchNameFromChannelNameAsync } from '../../../update/getBranchNameFromChannelNameAsync';
+import { resolveVcsClient } from '../../../vcs';

 const projectRoot = '/test-project';
 const commandOptions = { root: projectRoot } as any;
@@ -265,6 +267,9 @@ function mockTestProject({
    featureGating: new FeatureGating({}, new FeatureGateEnvOverrides()),
    graphqlClient,
  });
+  jest
+    .spyOn(VcsClientContextField.prototype, 'getValueAsync')
+    .mockResolvedValue(resolveVcsClient());

  jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
    id: '1234',
@@ -11,6 +11,7 @@ import {
  DynamicPublicProjectConfigContextField,
 } from '../../../commandUtils/context/DynamicProjectConfigContextField';
 import LoggedInContextField from '../../../commandUtils/context/LoggedInContextField';
+import VcsClientContextField from '../../../commandUtils/context/VcsClientContextField';
 import { ExpoGraphqlClient } from '../../../commandUtils/context/contextUtils/createGraphqlClient';
 import FeatureGateEnvOverrides from '../../../commandUtils/gating/FeatureGateEnvOverrides';
 import FeatureGating from '../../../commandUtils/gating/FeatureGating';
@@ -19,6 +20,7 @@ import { UpdateFragment } from '../../../graphql/generated';
 import { PublishMutation } from '../../../graphql/mutations/PublishMutation';
 import { AppQuery } from '../../../graphql/queries/AppQuery';
 import { getBranchNameFromChannelNameAsync } from '../../../update/getBranchNameFromChannelNameAsync';
+import { resolveVcsClient } from '../../../vcs';
 import UpdateRollBackToEmbedded from '../roll-back-to-embedded';

 const projectRoot = '/test-project';
@@ -250,6 +252,9 @@ function mockTestProject({
    featureGating: new FeatureGating({}, new FeatureGateEnvOverrides()),
    graphqlClient,
  });
+  jest
+    .spyOn(VcsClientContextField.prototype, 'getValueAsync')
+    .mockResolvedValue(resolveVcsClient());

  jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
    id: '1234',
@@ -52,6 +52,7 @@ export default class UpdateConfigure extends EasCommand {
      projectDir,
      platform,
      vcsClient,
+      env: undefined,
    });

    await ensureEASUpdateIsConfiguredInEasJsonAsync(projectDir);
@@ -1,4 +1,5 @@
 import { Platform as PublishPlatform } from '@expo/config';
+import { Workflow } from '@expo/eas-build-job';
 import { Errors, Flags } from '@oclif/core';
 import chalk from 'chalk';
 import nullthrows from 'nullthrows';
@@ -6,7 +7,6 @@ import nullthrows from 'nullthrows';
 import { ensureBranchExistsAsync } from '../../branch/queries';
 import { ensureRepoIsCleanAsync } from '../../build/utils/repository';
 import { getUpdateGroupUrl } from '../../build/utils/url';
-import { ensureChannelExistsAsync } from '../../channel/queries';
 import EasCommand from '../../commandUtils/EasCommand';
 import { EasNonInteractiveAndJsonFlags } from '../../commandUtils/flags';
 import { getPaginatedQueryOptions } from '../../commandUtils/pagination';
@@ -40,6 +40,7 @@ import {
  resolveInputDirectoryAsync,
  uploadAssetsAsync,
 } from '../../project/publish';
+import { resolveWorkflowPerPlatformAsync } from '../../project/workflow';
 import { ensureEASUpdateIsConfiguredAsync } from '../../update/configure';
 import { getUpdateJsonInfosForUpdates } from '../../update/utils';
 import {
@@ -199,6 +200,7 @@ export default class UpdatePublish extends EasCommand {
      projectDir,
      projectId,
      vcsClient,
+      env: undefined,
    });

    const { exp } = await getDynamicPublicProjectConfigAsync();
@@ -351,7 +353,7 @@ export default class UpdatePublish extends EasCommand {
      Log.withInfo(
        `${platformString} (maximum: ${assetLimitPerUpdateGroup} total per update). ${learnMore(
          'https://expo.fyi/eas-update-asset-limits',
-          { learnMoreMessage: 'Learn more about asset limits.' }
+          { learnMoreMessage: 'Learn more about asset limits' }
        )}`
      );
    } catch (e) {
@@ -359,29 +361,24 @@ export default class UpdatePublish extends EasCommand {
      throw e;
    }

-    const runtimeVersions = await getRuntimeVersionObjectAsync(
+    const workflows = await resolveWorkflowPerPlatformAsync(projectDir, vcsClient);
+    const runtimeVersions = await getRuntimeVersionObjectAsync({
      exp,
-      realizedPlatforms,
+      platforms: realizedPlatforms,
      projectDir,
-      vcsClient
-    );
+      workflows: {
+        ...workflows,
+        web: Workflow.UNKNOWN,
+      },
+      env: undefined,
+    });
    const runtimeToPlatformMapping =
      getRuntimeToPlatformMappingFromRuntimeVersions(runtimeVersions);

-    const { branchId, createdBranch } = await ensureBranchExistsAsync(graphqlClient, {
+    const { branchId } = await ensureBranchExistsAsync(graphqlClient, {
      appId: projectId,
      branchName,
    });
-    if (createdBranch) {
-      await ensureChannelExistsAsync(graphqlClient, {
-        appId: projectId,
-        branchId,
-        channelName: branchName,
-      });
-      Log.withTick(
-        `Channel: ${chalk.bold(branchName)} pointed at branch: ${chalk.bold(branchName)}`
-      );
-    }

    const gitCommitHash = await vcsClient.getCommitHashAsync();
    const isGitWorkingTreeDirty = await vcsClient.hasUncommittedChangesAsync();
@@ -1,11 +1,10 @@
 import { Platform as PublishPlatform } from '@expo/config';
+import { Workflow } from '@expo/eas-build-job';
 import { Errors, Flags } from '@oclif/core';
-import chalk from 'chalk';
 import nullthrows from 'nullthrows';

 import { ensureBranchExistsAsync } from '../../branch/queries';
 import { getUpdateGroupUrl } from '../../build/utils/url';
-import { ensureChannelExistsAsync } from '../../channel/queries';
 import EasCommand from '../../commandUtils/EasCommand';
 import { ExpoGraphqlClient } from '../../commandUtils/context/contextUtils/createGraphqlClient';
 import { EasNonInteractiveAndJsonFlags } from '../../commandUtils/flags';
@@ -33,6 +32,7 @@ import {
  getRuntimeVersionObjectAsync,
  getUpdateMessageForCommandAsync,
 } from '../../project/publish';
+import { resolveWorkflowPerPlatformAsync } from '../../project/workflow';
 import { ensureEASUpdateIsConfiguredAsync } from '../../update/configure';
 import { getUpdateJsonInfosForUpdates } from '../../update/utils';
 import {
@@ -154,6 +154,7 @@ export default class UpdateRollBackToEmbedded extends EasCommand {
      projectDir,
      projectId,
      vcsClient,
+      env: undefined,
    });

    // check that the expo-updates package version supports roll back to embedded
@@ -184,29 +185,25 @@ export default class UpdateRollBackToEmbedded extends EasCommand {
    const realizedPlatforms: PublishPlatform[] =
      platformFlag === 'all' ? defaultPublishPlatforms : [platformFlag];

-    const { branchId, createdBranch } = await ensureBranchExistsAsync(graphqlClient, {
+    const { branchId } = await ensureBranchExistsAsync(graphqlClient, {
      appId: projectId,
      branchName,
    });
-    if (createdBranch) {
-      await ensureChannelExistsAsync(graphqlClient, {
-        appId: projectId,
-        branchId,
-        channelName: branchName,
-      });
-    }
-
-    Log.withTick(`Channel: ${chalk.bold(branchName)} pointed at branch: ${chalk.bold(branchName)}`);

    const gitCommitHash = await vcsClient.getCommitHashAsync();
    const isGitWorkingTreeDirty = await vcsClient.hasUncommittedChangesAsync();

-    const runtimeVersions = await getRuntimeVersionObjectAsync(
+    const workflows = await resolveWorkflowPerPlatformAsync(projectDir, vcsClient);
+    const runtimeVersions = await getRuntimeVersionObjectAsync({
      exp,
-      realizedPlatforms,
+      platforms: realizedPlatforms,
      projectDir,
-      vcsClient
-    );
+      workflows: {
+        ...workflows,
+        web: Workflow.UNKNOWN,
+      },
+      env: undefined,
+    });

    let newUpdates: UpdatePublishMutation['updateBranch']['publishUpdateGroups'];
    const publishSpinner = ora('Publishing...').start();
@@ -1,5 +1,5 @@
 import AppStoreApi from '../ios/appstore/AppStoreApi';
-import { AuthCtx } from '../ios/appstore/authenticateTypes';
+import { AuthCtx, AuthenticationMode } from '../ios/appstore/authenticateTypes';

 export const testAuthCtx: AuthCtx = {
  appleId: 'test-apple-id',
@@ -9,6 +9,7 @@ export const testAuthCtx: AuthCtx = {

 export function getAppstoreMock(): AppStoreApi {
  return {
+    defaultAuthenticationMode: AuthenticationMode.USER,
    ensureAuthenticatedAsync: jest.fn(),
    ensureBundleIdExistsAsync: jest.fn(),
    listDistributionCertificatesAsync: jest.fn(),
@@ -1,3 +1,5 @@
+import assert from 'node:assert';
+
 import { AppFragment, Role } from '../../graphql/generated';
 import { Actor } from '../../user/User';

@@ -24,6 +26,7 @@ export const jester: Actor = {
  ],
  isExpoAdmin: false,
  featureGates: {},
+  preferences: {},
 };

 export const jester2 = {
@@ -41,6 +44,7 @@ export const jester2 = {
  featureGates: {},
 };

+assert(jester.__typename === 'User');
 export const testUsername = jester.username;
 export const testSlug = 'testApp';
 export const testProjectId = '7ef93448-3bc7-4b57-be32-99326dcf24f0';
@@ -4,27 +4,76 @@ import gql from 'graphql-tag';
 import { ExpoGraphqlClient } from '../../../../../commandUtils/context/contextUtils/createGraphqlClient';
 import { withErrorHandlingAsync } from '../../../../../graphql/client';
 import {
-  GoogleServiceAccountKeyByAccountQuery,
  GoogleServiceAccountKeyFragment,
+  GoogleServiceAccountKeysPaginatedByAccountQuery,
 } from '../../../../../graphql/generated';
 import { GoogleServiceAccountKeyFragmentNode } from '../../../../../graphql/types/credentials/GoogleServiceAccountKey';
+import { Connection, QueryParams, fetchEntireDatasetAsync } from '../../../../../utils/relay';

 export const GoogleServiceAccountKeyQuery = {
  async getAllForAccountAsync(
    graphqlClient: ExpoGraphqlClient,
    accountName: string
  ): Promise<GoogleServiceAccountKeyFragment[]> {
+    const paginatedGetterAsync = async (
+      relayArgs: QueryParams
+    ): Promise<Connection<GoogleServiceAccountKeyFragment>> => {
+      return await GoogleServiceAccountKeyQuery.getAllForAccountPaginatedAsync(
+        graphqlClient,
+        accountName,
+        relayArgs
+      );
+    };
+    return await fetchEntireDatasetAsync({
+      paginatedGetterAsync,
+      progressBarLabel: 'fetching Google Service Account Keys...',
+    });
+  },
+  async getAllForAccountPaginatedAsync(
+    graphqlClient: ExpoGraphqlClient,
+    accountName: string,
+    {
+      after,
+      first,
+      before,
+      last,
+    }: { after?: string; first?: number; before?: string; last?: number }
+  ): Promise<
+    GoogleServiceAccountKeysPaginatedByAccountQuery['account']['byName']['googleServiceAccountKeysPaginated']
+  > {
    const data = await withErrorHandlingAsync(
      graphqlClient
-        .query<GoogleServiceAccountKeyByAccountQuery>(
+        .query<GoogleServiceAccountKeysPaginatedByAccountQuery>(
          gql`
-            query GoogleServiceAccountKeyByAccountQuery($accountName: String!) {
+            query GoogleServiceAccountKeysPaginatedByAccountQuery(
+              $accountName: String!
+              $after: String
+              $first: Int
+              $before: String
+              $last: Int
+            ) {
              account {
                byName(accountName: $accountName) {
                  id
-                  googleServiceAccountKeys {
-                    id
-                    ...GoogleServiceAccountKeyFragment
+                  googleServiceAccountKeysPaginated(
+                    after: $after
+                    first: $first
+                    before: $before
+                    last: $last
+                  ) {
+                    edges {
+                      cursor
+                      node {
+                        id
+                        ...GoogleServiceAccountKeyFragment
+                      }
+                    }
+                    pageInfo {
+                      hasNextPage
+                      hasPreviousPage
+                      startCursor
+                      endCursor
+                    }
                  }
                }
              }
@@ -33,6 +82,10 @@ export const GoogleServiceAccountKeyQuery = {
          `,
          {
            accountName,
+            after,
+            first,
+            before,
+            last,
          },
          {
            additionalTypenames: ['GoogleServiceAccountKey'],
@@ -40,6 +93,6 @@ export const GoogleServiceAccountKeyQuery = {
        )
        .toPromise()
    );
-    return data.account.byName.googleServiceAccountKeys;
+    return data.account.byName.googleServiceAccountKeysPaginated;
  },
 };
@@ -25,6 +25,7 @@ export class CredentialsContext {
  public readonly appStore = new AppStoreApi();
  public readonly ios = IosGraphqlClient;
  public readonly nonInteractive: boolean;
+  public readonly freezeCredentials: boolean = false;
  public readonly projectDir: string;
  public readonly user: Actor;
  public readonly graphqlClient: ExpoGraphqlClient;
@@ -47,6 +48,7 @@ export class CredentialsContext {
      graphqlClient: ExpoGraphqlClient;
      analytics: Analytics;
      vcsClient: Client;
+      freezeCredentials?: boolean;
      env?: Env;
    }
  ) {
@@ -58,6 +60,7 @@ export class CredentialsContext {
    this.vcsClient = options.vcsClient;
    this.nonInteractive = options.nonInteractive ?? false;
    this.projectInfo = options.projectInfo;
+    this.freezeCredentials = options.freezeCredentials ?? false;
  }

  get hasProjectContext(): boolean {
@@ -1,9 +1,31 @@
+import { learnMore } from '../log';
+
 export class MissingCredentialsNonInteractiveError extends Error {
  constructor(message?: string) {
    super(message ?? 'Credentials are not set up. Run this command again in interactive mode.');
  }
 }

+export class InsufficientAuthenticationNonInteractiveError extends Error {
+  constructor(message?: string) {
+    super(
+      message ??
+        `Authentication with an ASC API key is required in non-interactive mode. ${learnMore(
+          'https://docs.expo.dev/build/building-on-ci/#optional-provide-an-asc-api-token-for-your-apple-team'
+        )}`
+    );
+  }
+}
+
+export class ForbidCredentialModificationError extends Error {
+  constructor(message?: string) {
+    super(
+      message ??
+        'Credentials cannot be modified. Run this command again without the --freeze-credentials flag.'
+    );
+  }
+}
+
 export class MissingCredentialsError extends Error {
  constructor(message?: string) {
    super(message ?? 'Credentials are not set up.');
@@ -14,6 +14,7 @@ import { isAdHocProfile, isEnterpriseUniversalProfile } from './utils/provisioni
 import { CommonIosAppCredentialsFragment } from '../../graphql/generated';
 import Log from '../../log';
 import { findApplicationTarget } from '../../project/ios/target';
+import { isExpoNotificationsInstalled } from '../../project/projectUtils';
 import { selectAsync } from '../../prompts';
 import { CredentialsContext } from '../context';
 import * as credentialsJsonReader from '../credentialsJson/read';
@@ -105,6 +106,11 @@ export default class IosCredentialsProvider {

    if (ctx.easJsonCliConfig?.promptToConfigurePushNotifications === false) {
      return null;
+    } else if (
+      ctx.easJsonCliConfig?.promptToConfigurePushNotifications === undefined &&
+      !(await isExpoNotificationsInstalled(ctx.projectDir))
+    ) {
+      return null;
    }

    const setupOption = await selectAsync(
@@ -5,15 +5,18 @@ import {
  AppleDistributionCertificateFragment,
  AppleProvisioningProfileFragment,
 } from '../../../graphql/generated';
-import Log from '../../../log';
+import Log, { learnMore } from '../../../log';
 import { ora } from '../../../ora';
 import { getApplePlatformFromTarget } from '../../../project/ios/target';
 import { CredentialsContext } from '../../context';
-import { MissingCredentialsNonInteractiveError } from '../../errors';
+import {
+  ForbidCredentialModificationError,
+  InsufficientAuthenticationNonInteractiveError,
+} from '../../errors';
 import { AppleProvisioningProfileMutationResult } from '../api/graphql/mutations/AppleProvisioningProfileMutation';
 import { AppLookupParams } from '../api/graphql/types/AppLookupParams';
 import { ProvisioningProfileStoreInfo } from '../appstore/Credentials.types';
-import { AuthCtx } from '../appstore/authenticateTypes';
+import { AuthCtx, AuthenticationMode } from '../appstore/authenticateTypes';
 import { Target } from '../types';

 export class ConfigureProvisioningProfile {
@@ -27,9 +30,18 @@ export class ConfigureProvisioningProfile {
  public async runAsync(
    ctx: CredentialsContext
  ): Promise<AppleProvisioningProfileMutationResult | null> {
-    if (ctx.nonInteractive) {
-      throw new MissingCredentialsNonInteractiveError(
-        'Configuring Provisioning Profiles is only supported in interactive mode.'
+    if (ctx.freezeCredentials) {
+      throw new ForbidCredentialModificationError(
+        'Remove the --freeze-credentials flag to configure a Provisioning Profile.'
+      );
+    } else if (
+      ctx.nonInteractive &&
+      ctx.appStore.defaultAuthenticationMode !== AuthenticationMode.API_KEY
+    ) {
+      throw new InsufficientAuthenticationNonInteractiveError(
+        `In order to configure your Provisioning Profile, authentication with an ASC API key is required in non-interactive mode. ${learnMore(
+          'https://docs.expo.dev/build/building-on-ci/#optional-provide-an-asc-api-token-for-your-apple-team'
+        )}`
      );
    }
    const { developerPortalIdentifier, provisioningProfile } = this.originalProvisioningProfile;
@@ -46,7 +58,7 @@ export class ConfigureProvisioningProfile {
      return null;
    }

-    const applePlatform = await getApplePlatformFromTarget(this.target);
+    const applePlatform = getApplePlatformFromTarget(this.target);
    const profilesFromApple = await ctx.appStore.listProvisioningProfilesAsync(
      this.app.bundleIdentifier,
      applePlatform
@@ -4,14 +4,17 @@ import nullthrows from 'nullthrows';
 import { resolveAppleTeamIfAuthenticatedAsync } from './AppleTeamUtils';
 import { generateProvisioningProfileAsync } from './ProvisioningProfileUtils';
 import { AppleDistributionCertificateFragment } from '../../../graphql/generated';
-import Log from '../../../log';
+import Log, { learnMore } from '../../../log';
 import { CredentialsContext } from '../../context';
-import { MissingCredentialsNonInteractiveError } from '../../errors';
+import {
+  ForbidCredentialModificationError,
+  InsufficientAuthenticationNonInteractiveError,
+} from '../../errors';
 import { askForUserProvidedAsync } from '../../utils/promptForCredentials';
 import { AppleProvisioningProfileMutationResult } from '../api/graphql/mutations/AppleProvisioningProfileMutation';
 import { AppLookupParams } from '../api/graphql/types/AppLookupParams';
 import { ProvisioningProfile } from '../appstore/Credentials.types';
-import { AuthCtx } from '../appstore/authenticateTypes';
+import { AuthCtx, AuthenticationMode } from '../appstore/authenticateTypes';
 import { provisioningProfileSchema } from '../credentials';
 import { Target } from '../types';

@@ -23,9 +26,18 @@ export class CreateProvisioningProfile {
  ) {}

  async runAsync(ctx: CredentialsContext): Promise<AppleProvisioningProfileMutationResult> {
-    if (ctx.nonInteractive) {
-      throw new MissingCredentialsNonInteractiveError(
-        'Creating Provisioning Profiles is only supported in interactive mode.'
+    if (ctx.freezeCredentials) {
+      throw new ForbidCredentialModificationError(
+        'Run this command again without the --freeze-credentials flag in order to generate a new Provisioning Profile.'
+      );
+    } else if (
+      ctx.nonInteractive &&
+      ctx.appStore.defaultAuthenticationMode !== AuthenticationMode.API_KEY
+    ) {
+      throw new InsufficientAuthenticationNonInteractiveError(
+        `In order to generate a new Provisioning Profile, authentication with an ASC API key is required in non-interactive mode. ${learnMore(
+          'https://docs.expo.dev/build/building-on-ci/#optional-provide-an-asc-api-token-for-your-apple-team'
+        )}`
      );
    }
    const appleAuthCtx = await ctx.appStore.ensureAuthenticatedAsync();
@@ -49,16 +61,31 @@ export class CreateProvisioningProfile {
    return provisioningProfileMutationResult;
  }

-  private async provideOrGenerateAsync(
-    ctx: CredentialsContext,
-    appleAuthCtx: AuthCtx
-  ): Promise<ProvisioningProfile> {
+  private async maybeGetUserProvidedAsync(
+    ctx: CredentialsContext
+  ): Promise<ProvisioningProfile | null> {
+    if (ctx.nonInteractive) {
+      return null;
+    }
    const userProvided = await askForUserProvidedAsync(provisioningProfileSchema);
    if (userProvided) {
      // userProvided profiles don't come with ProvisioningProfileId's (only accessible from Apple Portal API)
      Log.warn('Provisioning profile: Unable to validate specified profile.');
      return userProvided;
    }
+    return null;
+  }
+
+  private async provideOrGenerateAsync(
+    ctx: CredentialsContext,
+    appleAuthCtx: AuthCtx
+  ): Promise<ProvisioningProfile> {
+    const maybeUserProvided = await this.maybeGetUserProvidedAsync(ctx);
+    if (maybeUserProvided) {
+      // userProvided profiles don't come with ProvisioningProfileId's (only accessible from Apple Portal API)
+      Log.warn('Provisioning profile: Unable to validate specified profile.');
+      return maybeUserProvided;
+    }
    assert(
      this.distributionCertificate.certificateP12,
      'Distribution Certificate must have p12 certificate'
@@ -48,8 +48,13 @@ export function formatDistributionCertificate(
    buildCredentials => buildCredentials.iosAppCredentials.app
  );
  if (apps.length) {
-    const appFullNames = apps.map(app => app.fullName).join(',');
-    line += chalk.gray(`\n    📲 Used by: ${appFullNames}`);
+    // iosAppBuildCredentialsList is capped at 20 on www
+    const appFullNames = apps
+      .map(app => app.fullName)
+      .slice(0, 19)
+      .join(',');
+    const andMaybeMore = apps.length > 19 ? ' (and more)' : '';
+    line += chalk.gray(`\n    📲 Used by: ${appFullNames}${andMaybeMore}`);
  }

  if (validSerialNumbers?.includes(serialNumber)) {
@@ -254,6 +259,10 @@ function formatDistributionCertificateFromApple(
  const { name, status, id, expires, created, ownerName, serialNumber } = appleInfo;
  const expiresDate = new Date(expires * 1000).toDateString();
  const createdDate = new Date(created * 1000).toDateString();
-  return `${name} (${status}) - Cert ID: ${id}, Serial number: ${serialNumber}, Team ID: ${appleInfo.ownerId}, Team name: ${ownerName}
-    expires: ${expiresDate}, created: ${createdDate}`;
+  return [
+    `🍏 ${chalk.bold(name)} (${status})`,
+    `${chalk.bold('ID:')} ${id} ${chalk.bold('Serial Number:')} ${serialNumber}`,
+    `${chalk.bold('Apple Team:')} ${appleInfo.ownerId} (${ownerName})`,
+    `${chalk.bold('Expires:')} ${expiresDate} ${chalk.bold('Created:')} ${createdDate}`,
+  ].join('\n\t');
 }
@@ -185,8 +185,13 @@ export function formatPushKey(

  const apps = pushKey.iosAppCredentialsList.map(appCredentials => appCredentials.app);
  if (apps.length) {
-    const appFullNames = apps.map(app => app.fullName).join(',');
-    line += chalk.gray(`\n    📲 Used by: ${appFullNames}`);
+    // iosAppCredentialsList is capped at 20 on www
+    const appFullNames = apps
+      .map(app => app.fullName)
+      .slice(0, 19)
+      .join(',');
+    const andMaybeMore = apps.length > 19 ? ' (and more)' : '';
+    line += chalk.gray(`\n    📲 Used by: ${appFullNames}${andMaybeMore}`);
  }

  if (validPushKeyIdentifiers?.includes(keyIdentifier)) {
@@ -34,14 +34,20 @@ export class RemoveDistributionCertificate {
      buildCredentials => buildCredentials.iosAppCredentials.app
    );
    if (apps.length !== 0) {
-      const appFullNames = apps.map(app => app.fullName).join(',');
+      // iosAppBuildCredentialsList is capped at 20 on www
+      const appFullNames = apps
+        .map(app => app.fullName)
+        .slice(0, 19)
+        .join(',');
+      const andMaybeMore = apps.length > 19 ? ' (and more)' : '';
+
      if (ctx.nonInteractive) {
        throw new Error(
-          `Certificate is currently used by ${appFullNames} and cannot be deleted in non-interactive mode.`
+          `Certificate is currently used by ${appFullNames}${andMaybeMore} and cannot be deleted in non-interactive mode.`
        );
      }
      const confirm = await confirmAsync({
-        message: `You are removing certificate used by ${appFullNames}. Do you want to continue?`,
+        message: `You are removing certificate used by ${appFullNames}${andMaybeMore}. Do you want to continue?`,
      });
      if (!confirm) {
        Log.log('Aborting');
@@ -27,9 +27,14 @@ export class RemovePushKey {

    const apps = this.pushKey.iosAppCredentialsList.map(appCredentials => appCredentials.app);
    if (apps.length !== 0) {
-      const appFullNames = apps.map(app => app.fullName).join(',');
+      // iosAppCredentialsList is capped at 20 on www
+      const appFullNames = apps
+        .map(app => app.fullName)
+        .slice(0, 19)
+        .join(',');
+      const andMaybeMore = apps.length > 19 ? ' (and more)' : '';
      const confirm = await confirmAsync({
-        message: `Removing this push key will disable push notifications for ${appFullNames}. Do you want to continue?`,
+        message: `Removing this push key will disable push notifications for ${appFullNames}${andMaybeMore}. Do you want to continue?`,
      });
      if (!confirm) {
        Log.log('Aborting');
@@ -15,12 +15,17 @@ import {
  IosAppBuildCredentialsFragment,
  IosDistributionType,
 } from '../../../graphql/generated';
+import { learnMore } from '../../../log';
 import { getApplePlatformFromTarget } from '../../../project/ios/target';
 import { confirmAsync } from '../../../prompts';
 import { CredentialsContext } from '../../context';
-import { MissingCredentialsNonInteractiveError } from '../../errors';
+import {
+  ForbidCredentialModificationError,
+  InsufficientAuthenticationNonInteractiveError,
+} from '../../errors';
 import { AppLookupParams } from '../api/graphql/types/AppLookupParams';
 import { ProvisioningProfileStoreInfo } from '../appstore/Credentials.types';
+import { AuthenticationMode } from '../appstore/authenticateTypes';
 import { Target } from '../types';
 import { validateProvisioningProfileAsync } from '../validators/validateProvisioningProfile';

@@ -102,9 +107,18 @@ export class SetUpProvisioningProfile {
    if (areBuildCredentialsSetup) {
      return nullthrows(await getBuildCredentialsAsync(ctx, this.app, this.distributionType));
    }
-    if (ctx.nonInteractive) {
-      throw new MissingCredentialsNonInteractiveError(
-        'Provisioning profile is not configured correctly. Run this command again in interactive mode.'
+    if (ctx.freezeCredentials) {
+      throw new ForbidCredentialModificationError(
+        'Provisioning profile is not configured correctly. Remove the --freeze-credentials flag to configure it.'
+      );
+    } else if (
+      ctx.nonInteractive &&
+      ctx.appStore.defaultAuthenticationMode !== AuthenticationMode.API_KEY
+    ) {
+      throw new InsufficientAuthenticationNonInteractiveError(
+        `In order to configure your Provisioning Profile, authentication with an ASC API key is required in non-interactive mode. ${learnMore(
+          'https://docs.expo.dev/build/building-on-ci/#optional-provide-an-asc-api-token-for-your-apple-team'
+        )}`
      );
    }

@@ -127,11 +141,18 @@ export class SetUpProvisioningProfile {
      return await this.assignNewAndDeleteOldProfileAsync(ctx, distCert, currentProfile);
    }

-    const confirm = await confirmAsync({
-      message: `${formatProvisioningProfileFromApple(
-        currentProfileFromServer
-      )} \n  Would you like to reuse the original profile?`,
-    });
+    const isNonInteractiveOrUserDidConfirmAsync = async (): Promise<boolean> => {
+      if (ctx.nonInteractive) {
+        return true;
+      }
+      return await confirmAsync({
+        message: `${formatProvisioningProfileFromApple(
+          currentProfileFromServer
+        )} \n  Would you like to reuse the original profile?`,
+      });
+    };
+
+    const confirm = await isNonInteractiveOrUserDidConfirmAsync();
    if (!confirm) {
      return await this.assignNewAndDeleteOldProfileAsync(ctx, distCert, currentProfile);
    }
@@ -11,7 +11,11 @@ import {
  testTarget,
  testTargets,
 } from '../../../__tests__/fixtures-ios';
-import { MissingCredentialsNonInteractiveError } from '../../../errors';
+import {
+  ForbidCredentialModificationError,
+  InsufficientAuthenticationNonInteractiveError,
+} from '../../../errors';
+import { AuthenticationMode } from '../../appstore/authenticateTypes';
 import { getAppLookupParamsFromContextAsync } from '../BuildCredentialsUtils';
 import { ConfigureProvisioningProfile } from '../ConfigureProvisioningProfile';

@@ -24,15 +28,18 @@ describe('ConfigureProvisioningProfile', () => {
  beforeEach(() => {
    jest.mocked(AppQuery.byIdAsync).mockResolvedValue(testAppQueryByIdResponse);
  });
-  it('configures a Provisioning Profile in Interactive Mode', async () => {
+  const testCases = ['NON_INTERACTIVE', 'INTERACTIVE'];
+  test.each(testCases)('configures a Provisioning Profile in %s Mode', async mode => {
    const mockProvisioningProfileFromApple = {
      provisioningProfileId: testProvisioningProfileFragment.developerPortalIdentifier,
      provisioningProfile: testProvisioningProfileFragment.provisioningProfile,
    };
    const ctx = createCtxMock({
-      nonInteractive: false,
+      nonInteractive: mode === 'NON_INTERACTIVE',
      appStore: {
        ...getAppstoreMock(),
+        defaultAuthenticationMode:
+          mode === 'NON_INTERACTIVE' ? AuthenticationMode.API_KEY : AuthenticationMode.USER,
        ensureAuthenticatedAsync: jest.fn(() => testAuthCtx),
        authCtx: testAuthCtx,
        createProvisioningProfileAsync: jest.fn(() => testProvisioningProfile),
@@ -57,7 +64,30 @@ describe('ConfigureProvisioningProfile', () => {
    // expect provisioning profile not to be updated on apple portal
    expect(jest.mocked(ctx.appStore.useExistingProvisioningProfileAsync).mock.calls.length).toBe(1);
  });
-  it('errors in Non Interactive Mode', async () => {
+  it('errors with --freeze-credentials flag', async () => {
+    const ctx = createCtxMock({
+      freezeCredentials: true,
+    });
+    const appLookupParams = await getAppLookupParamsFromContextAsync(
+      ctx,
+      findApplicationTarget(testTargets)
+    );
+    const provProfConfigurator = new ConfigureProvisioningProfile(
+      appLookupParams,
+      testTarget,
+      testDistCertFragmentNoDependencies,
+      testProvisioningProfileFragment
+    );
+    await expect(provProfConfigurator.runAsync(ctx)).rejects.toThrowError(
+      ForbidCredentialModificationError
+    );
+
+    // expect provisioning profile not to be updated on expo servers
+    expect(jest.mocked(ctx.ios.updateProvisioningProfileAsync).mock.calls.length).toBe(0);
+    // expect provisioning profile not to be updated on apple portal
+    expect(jest.mocked(ctx.appStore.useExistingProvisioningProfileAsync).mock.calls.length).toBe(0);
+  });
+  it('errors with wrong authentication type in nonInteractive mode', async () => {
    const ctx = createCtxMock({
      nonInteractive: true,
    });
@@ -72,7 +102,7 @@ describe('ConfigureProvisioningProfile', () => {
      testProvisioningProfileFragment
    );
    await expect(provProfConfigurator.runAsync(ctx)).rejects.toThrowError(
-      MissingCredentialsNonInteractiveError
+      InsufficientAuthenticationNonInteractiveError
    );

    // expect provisioning profile not to be updated on expo servers
@@ -10,7 +10,11 @@ import {
  testTarget,
  testTargets,
 } from '../../../__tests__/fixtures-ios';
-import { MissingCredentialsNonInteractiveError } from '../../../errors';
+import {
+  ForbidCredentialModificationError,
+  InsufficientAuthenticationNonInteractiveError,
+} from '../../../errors';
+import { AuthenticationMode } from '../../appstore/authenticateTypes';
 import { getAppLookupParamsFromContextAsync } from '../BuildCredentialsUtils';
 import { CreateProvisioningProfile } from '../CreateProvisioningProfile';

@@ -22,11 +26,15 @@ describe('CreateProvisioningProfile', () => {
  beforeEach(() => {
    jest.mocked(AppQuery.byIdAsync).mockResolvedValue(testAppQueryByIdResponse);
  });
-  it('creates a Provisioning Profile in Interactive Mode', async () => {
+
+  const testCases = ['NON_INTERACTIVE', 'INTERACTIVE'];
+  test.each(testCases)('creates a Provisioning Profile in in %s Mode', async mode => {
    const ctx = createCtxMock({
-      nonInteractive: false,
+      nonInteractive: mode === 'NON_INTERACTIVE',
      appStore: {
        ...getAppstoreMock(),
+        defaultAuthenticationMode:
+          mode === 'NON_INTERACTIVE' ? AuthenticationMode.API_KEY : AuthenticationMode.USER,
        ensureAuthenticatedAsync: jest.fn(() => testAuthCtx),
        authCtx: testAuthCtx,
        createProvisioningProfileAsync: jest.fn(() => testProvisioningProfile),
@@ -48,7 +56,29 @@ describe('CreateProvisioningProfile', () => {
    // expect provisioning profile to be created on apple portal
    expect(jest.mocked(ctx.appStore.createProvisioningProfileAsync).mock.calls.length).toBe(1);
  });
-  it('errors in Non Interactive Mode', async () => {
+  it('errors with --freeze-credentials flag', async () => {
+    const ctx = createCtxMock({
+      freezeCredentials: true,
+    });
+    const appLookupParams = await getAppLookupParamsFromContextAsync(
+      ctx,
+      findApplicationTarget(testTargets)
+    );
+    const createProvProfAction = new CreateProvisioningProfile(
+      appLookupParams,
+      testTarget,
+      testDistCertFragmentNoDependencies
+    );
+    await expect(createProvProfAction.runAsync(ctx)).rejects.toThrowError(
+      ForbidCredentialModificationError
+    );
+
+    // expect provisioning profile not to be created on expo servers
+    expect(jest.mocked(ctx.ios.createProvisioningProfileAsync).mock.calls.length).toBe(0);
+    // expect provisioning profile not to be created on apple portal
+    expect(jest.mocked(ctx.appStore.createProvisioningProfileAsync).mock.calls.length).toBe(0);
+  });
+  it('errors with wrong authentication type in nonInteractive mode', async () => {
    const ctx = createCtxMock({
      nonInteractive: true,
    });
@@ -62,7 +92,7 @@ describe('CreateProvisioningProfile', () => {
      testDistCertFragmentNoDependencies
    );
    await expect(createProvProfAction.runAsync(ctx)).rejects.toThrowError(
-      MissingCredentialsNonInteractiveError
+      InsufficientAuthenticationNonInteractiveError
    );

    // expect provisioning profile not to be created on expo servers
@@ -15,7 +15,11 @@ import {
  testTarget,
  testTargets,
 } from '../../../__tests__/fixtures-ios';
-import { MissingCredentialsNonInteractiveError } from '../../../errors';
+import {
+  ForbidCredentialModificationError,
+  InsufficientAuthenticationNonInteractiveError,
+} from '../../../errors';
+import { AuthenticationMode } from '../../appstore/authenticateTypes';
 import { validateProvisioningProfileAsync } from '../../validators/validateProvisioningProfile';
 import { getAppLookupParamsFromContextAsync } from '../BuildCredentialsUtils';
 import { SetUpProvisioningProfile } from '../SetUpProvisioningProfile';
@@ -32,32 +36,185 @@ describe('SetUpProvisioningProfile', () => {
  beforeEach(() => {
    jest.mocked(AppQuery.byIdAsync).mockResolvedValue(testAppQueryByIdResponse);
  });
-  it('repairs existing Provisioning Profile with bad build credentials in Interactive Mode', async () => {
+
+  const testCases = ['NON_INTERACTIVE', 'INTERACTIVE'];
+  test.each(testCases)(
+    'repairs existing Provisioning Profile with bad build credentials in %s Mode',
+    async mode => {
+      jest.mocked(validateProvisioningProfileAsync).mockImplementation(async () => false);
+      const ctx = createCtxMock({
+        nonInteractive: mode === 'NON_INTERACTIVE',
+        appStore: {
+          ...getAppstoreMock(),
+          defaultAuthenticationMode:
+            mode === 'NON_INTERACTIVE' ? AuthenticationMode.API_KEY : AuthenticationMode.USER,
+          ensureAuthenticatedAsync: jest.fn(() => testAuthCtx),
+          authCtx: testAuthCtx,
+          listProvisioningProfilesAsync: jest.fn(() => [
+            {
+              provisioningProfileId: nullthrows(
+                testCommonIosAppCredentialsFragment.iosAppBuildCredentialsList[0]
+                  .provisioningProfile
+              ).developerPortalIdentifier,
+            },
+          ]),
+        },
+        ios: {
+          ...getNewIosApiMock(),
+          getIosAppCredentialsWithBuildCredentialsAsync: jest.fn(
+            () => testCommonIosAppCredentialsFragment
+          ),
+          createOrGetExistingAppleAppIdentifierAsync: jest.fn(() => testAppleAppIdentifierFragment),
+          createOrUpdateIosAppBuildCredentialsAsync: jest.fn(
+            () => testIosAppBuildCredentialsFragment
+          ),
+        },
+      });
+      const appLookupParams = await getAppLookupParamsFromContextAsync(
+        ctx,
+        findApplicationTarget(testTargets)
+      );
+      const setupProvisioningProfileAction = new SetUpProvisioningProfile(
+        appLookupParams,
+        testTarget,
+        IosDistributionType.AppStore
+      );
+      await setupProvisioningProfileAction.runAsync(ctx);
+
+      // expect build credentials to be created or updated on expo servers
+      expect(jest.mocked(ctx.ios.createOrUpdateIosAppBuildCredentialsAsync).mock.calls.length).toBe(
+        1
+      );
+      // expect provisioning profile not to be deleted on expo servers
+      expect(jest.mocked(ctx.ios.deleteProvisioningProfilesAsync).mock.calls.length).toBe(0);
+    }
+  );
+
+  test.each(testCases)(
+    'sets up a new Provisioning Profile with bad build credentials in %s Mode',
+    async mode => {
+      jest.mocked(validateProvisioningProfileAsync).mockImplementation(async () => false);
+      const ctx = createCtxMock({
+        nonInteractive: mode === 'NON_INTERACTIVE',
+        appStore: {
+          ...getAppstoreMock(),
+          defaultAuthenticationMode:
+            mode === 'NON_INTERACTIVE' ? AuthenticationMode.API_KEY : AuthenticationMode.USER,
+          ensureAuthenticatedAsync: jest.fn(() => testAuthCtx),
+          authCtx: testAuthCtx,
+          listProvisioningProfilesAsync: jest.fn(() => []),
+        },
+        ios: {
+          ...getNewIosApiMock(),
+          getIosAppCredentialsWithBuildCredentialsAsync: jest.fn(
+            () => testCommonIosAppCredentialsFragment
+          ),
+          createOrGetExistingAppleAppIdentifierAsync: jest.fn(() => testAppleAppIdentifierFragment),
+        },
+      });
+      const appLookupParams = await getAppLookupParamsFromContextAsync(
+        ctx,
+        findApplicationTarget(testTargets)
+      );
+      const setupProvisioningProfileAction = new SetUpProvisioningProfile(
+        appLookupParams,
+        testTarget,
+        IosDistributionType.AppStore
+      );
+      await setupProvisioningProfileAction.runAsync(ctx);
+
+      // expect build credentials to be created or updated on expo servers
+      expect(jest.mocked(ctx.ios.createOrUpdateIosAppBuildCredentialsAsync).mock.calls.length).toBe(
+        1
+      );
+      // expect provisioning profile to be deleted on expo servers
+      expect(jest.mocked(ctx.ios.deleteProvisioningProfilesAsync).mock.calls.length).toBe(1);
+    }
+  );
+
+  test.each(testCases)(
+    'skips setting up a Provisioning Profile with prior build credentials configured properly in %s Mode',
+    async mode => {
+      jest.mocked(validateProvisioningProfileAsync).mockImplementation(async () => true);
+      const ctx = createCtxMock({
+        nonInteractive: mode === 'NON_INTERACTIVE',
+        appStore: {
+          ...getAppstoreMock(),
+          defaultAuthenticationMode:
+            mode === 'NON_INTERACTIVE' ? AuthenticationMode.API_KEY : AuthenticationMode.USER,
+          ensureAuthenticatedAsync: jest.fn(() => testAuthCtx),
+          authCtx: testAuthCtx,
+        },
+        ios: {
+          ...getNewIosApiMock(),
+          getIosAppCredentialsWithBuildCredentialsAsync: jest.fn(
+            () => testCommonIosAppCredentialsFragment
+          ),
+          createOrGetExistingAppleAppIdentifierAsync: jest.fn(() => testAppleAppIdentifierFragment),
+        },
+      });
+      const appLookupParams = await getAppLookupParamsFromContextAsync(
+        ctx,
+        findApplicationTarget(testTargets)
+      );
+      const setupProvisioningProfileAction = new SetUpProvisioningProfile(
+        appLookupParams,
+        testTarget,
+        IosDistributionType.AppStore
+      );
+      await setupProvisioningProfileAction.runAsync(ctx);
+
+      // expect build credentials not to be created or updated on expo servers
+      expect(jest.mocked(ctx.ios.createOrUpdateIosAppBuildCredentialsAsync).mock.calls.length).toBe(
+        0
+      );
+      // expect provisioning profile not to be deleted on expo servers
+      expect(jest.mocked(ctx.ios.deleteProvisioningProfilesAsync).mock.calls.length).toBe(0);
+    }
+  );
+
+  test.each(testCases)(
+    'sets up a Provisioning Profile with no prior build credentials configured in %s Mode',
+    async mode => {
+      jest.mocked(validateProvisioningProfileAsync).mockImplementation(async () => false);
+      const ctx = createCtxMock({
+        nonInteractive: mode === 'NON_INTERACTIVE',
+        appStore: {
+          ...getAppstoreMock(),
+          defaultAuthenticationMode:
+            mode === 'NON_INTERACTIVE' ? AuthenticationMode.API_KEY : AuthenticationMode.USER,
+          ensureAuthenticatedAsync: jest.fn(() => testAuthCtx),
+          authCtx: testAuthCtx,
+        },
+        ios: {
+          ...getNewIosApiMock(),
+          createOrGetExistingAppleAppIdentifierAsync: jest.fn(() => testAppleAppIdentifierFragment),
+        },
+      });
+      const appLookupParams = await getAppLookupParamsFromContextAsync(
+        ctx,
+        findApplicationTarget(testTargets)
+      );
+      const setupProvisioningProfileAction = new SetUpProvisioningProfile(
+        appLookupParams,
+        testTarget,
+        IosDistributionType.AppStore
+      );
+      await setupProvisioningProfileAction.runAsync(ctx);
+
+      // expect build credentials to be created or updated on expo servers
+      expect(jest.mocked(ctx.ios.createOrUpdateIosAppBuildCredentialsAsync).mock.calls.length).toBe(
+        1
+      );
+      // expect provisioning profile not to be deleted on expo servers
+      expect(jest.mocked(ctx.ios.deleteProvisioningProfilesAsync).mock.calls.length).toBe(0);
+    }
+  );
+
+  it('errors with --freeze-credentials flag', async () => {
    jest.mocked(validateProvisioningProfileAsync).mockImplementation(async () => false);
    const ctx = createCtxMock({
-      nonInteractive: false,
-      appStore: {
-        ...getAppstoreMock(),
-        ensureAuthenticatedAsync: jest.fn(() => testAuthCtx),
-        authCtx: testAuthCtx,
-        listProvisioningProfilesAsync: jest.fn(() => [
-          {
-            provisioningProfileId: nullthrows(
-              testCommonIosAppCredentialsFragment.iosAppBuildCredentialsList[0].provisioningProfile
-            ).developerPortalIdentifier,
-          },
-        ]),
-      },
-      ios: {
-        ...getNewIosApiMock(),
-        getIosAppCredentialsWithBuildCredentialsAsync: jest.fn(
-          () => testCommonIosAppCredentialsFragment
-        ),
-        createOrGetExistingAppleAppIdentifierAsync: jest.fn(() => testAppleAppIdentifierFragment),
-        createOrUpdateIosAppBuildCredentialsAsync: jest.fn(
-          () => testIosAppBuildCredentialsFragment
-        ),
-      },
+      freezeCredentials: true,
    });
    const appLookupParams = await getAppLookupParamsFromContextAsync(
      ctx,
@@ -68,79 +225,9 @@ describe('SetUpProvisioningProfile', () => {
      testTarget,
      IosDistributionType.AppStore
    );
-    await setupProvisioningProfileAction.runAsync(ctx);
-
-    // expect build credentials to be created or updated on expo servers
-    expect(jest.mocked(ctx.ios.createOrUpdateIosAppBuildCredentialsAsync).mock.calls.length).toBe(
-      1
+    await expect(setupProvisioningProfileAction.runAsync(ctx)).rejects.toThrowError(
+      ForbidCredentialModificationError
    );
-    // expect provisioning profile not to be deleted on expo servers
-    expect(jest.mocked(ctx.ios.deleteProvisioningProfilesAsync).mock.calls.length).toBe(0);
-  });
-  it('sets up a new Provisioning Profile with bad build credentials in Interactive Mode', async () => {
-    jest.mocked(validateProvisioningProfileAsync).mockImplementation(async () => false);
-    const ctx = createCtxMock({
-      nonInteractive: false,
-      appStore: {
-        ...getAppstoreMock(),
-        ensureAuthenticatedAsync: jest.fn(() => testAuthCtx),
-        authCtx: testAuthCtx,
-        listProvisioningProfilesAsync: jest.fn(() => []),
-      },
-      ios: {
-        ...getNewIosApiMock(),
-        getIosAppCredentialsWithBuildCredentialsAsync: jest.fn(
-          () => testCommonIosAppCredentialsFragment
-        ),
-        createOrGetExistingAppleAppIdentifierAsync: jest.fn(() => testAppleAppIdentifierFragment),
-      },
-    });
-    const appLookupParams = await getAppLookupParamsFromContextAsync(
-      ctx,
-      findApplicationTarget(testTargets)
-    );
-    const setupProvisioningProfileAction = new SetUpProvisioningProfile(
-      appLookupParams,
-      testTarget,
-      IosDistributionType.AppStore
-    );
-    await setupProvisioningProfileAction.runAsync(ctx);
-
-    // expect build credentials to be created or updated on expo servers
-    expect(jest.mocked(ctx.ios.createOrUpdateIosAppBuildCredentialsAsync).mock.calls.length).toBe(
-      1
-    );
-    // expect provisioning profile to be deleted on expo servers
-    expect(jest.mocked(ctx.ios.deleteProvisioningProfilesAsync).mock.calls.length).toBe(1);
-  });
-  it('skips setting up a Provisioning Profile with prior build credentials configured properly in Interactive Mode', async () => {
-    jest.mocked(validateProvisioningProfileAsync).mockImplementation(async () => true);
-    const ctx = createCtxMock({
-      nonInteractive: false,
-      appStore: {
-        ...getAppstoreMock(),
-        ensureAuthenticatedAsync: jest.fn(() => testAuthCtx),
-        authCtx: testAuthCtx,
-        //listProvisioningProfilesAsync: jest.fn(() => []),
-      },
-      ios: {
-        ...getNewIosApiMock(),
-        getIosAppCredentialsWithBuildCredentialsAsync: jest.fn(
-          () => testCommonIosAppCredentialsFragment
-        ),
-        createOrGetExistingAppleAppIdentifierAsync: jest.fn(() => testAppleAppIdentifierFragment),
-      },
-    });
-    const appLookupParams = await getAppLookupParamsFromContextAsync(
-      ctx,
-      findApplicationTarget(testTargets)
-    );
-    const setupProvisioningProfileAction = new SetUpProvisioningProfile(
-      appLookupParams,
-      testTarget,
-      IosDistributionType.AppStore
-    );
-    await setupProvisioningProfileAction.runAsync(ctx);

    // expect build credentials not to be created or updated on expo servers
    expect(jest.mocked(ctx.ios.createOrUpdateIosAppBuildCredentialsAsync).mock.calls.length).toBe(
@@ -149,39 +236,8 @@ describe('SetUpProvisioningProfile', () => {
    // expect provisioning profile not to be deleted on expo servers
    expect(jest.mocked(ctx.ios.deleteProvisioningProfilesAsync).mock.calls.length).toBe(0);
  });
-  it('sets up a Provisioning Profile with no prior build credentials configured in Interactive Mode', async () => {
-    jest.mocked(validateProvisioningProfileAsync).mockImplementation(async () => false);
-    const ctx = createCtxMock({
-      nonInteractive: false,
-      appStore: {
-        ...getAppstoreMock(),
-        ensureAuthenticatedAsync: jest.fn(() => testAuthCtx),
-        authCtx: testAuthCtx,
-      },
-      ios: {
-        ...getNewIosApiMock(),
-        createOrGetExistingAppleAppIdentifierAsync: jest.fn(() => testAppleAppIdentifierFragment),
-      },
-    });
-    const appLookupParams = await getAppLookupParamsFromContextAsync(
-      ctx,
-      findApplicationTarget(testTargets)
-    );
-    const setupProvisioningProfileAction = new SetUpProvisioningProfile(
-      appLookupParams,
-      testTarget,
-      IosDistributionType.AppStore
-    );
-    await setupProvisioningProfileAction.runAsync(ctx);

-    // expect build credentials to be created or updated on expo servers
-    expect(jest.mocked(ctx.ios.createOrUpdateIosAppBuildCredentialsAsync).mock.calls.length).toBe(
-      1
-    );
-    // expect provisioning profile not to be deleted on expo servers
-    expect(jest.mocked(ctx.ios.deleteProvisioningProfilesAsync).mock.calls.length).toBe(0);
-  });
-  it('errors in Non Interactive Mode', async () => {
+  it('errors with wrong authentication type in nonInteractive mode', async () => {
    jest.mocked(validateProvisioningProfileAsync).mockImplementation(async () => false);
    const ctx = createCtxMock({
      nonInteractive: true,
@@ -196,7 +252,7 @@ describe('SetUpProvisioningProfile', () => {
      IosDistributionType.AppStore
    );
    await expect(setupProvisioningProfileAction.runAsync(ctx)).rejects.toThrowError(
-      MissingCredentialsNonInteractiveError
+      InsufficientAuthenticationNonInteractiveError
    );

    // expect build credentials not to be created or updated on expo servers
@@ -326,7 +326,7 @@ export async function getDevicesForAppleTeamAsync(
 ): Promise<AppleDeviceFragment[]> {
  return await AppleDeviceQuery.getAllByAppleTeamIdentifierAsync(
    graphqlClient,
-    account.id,
+    account.name,
    appleTeamIdentifier,
    {
      useCache,
@@ -4,27 +4,76 @@ import gql from 'graphql-tag';
 import { ExpoGraphqlClient } from '../../../../../commandUtils/context/contextUtils/createGraphqlClient';
 import { withErrorHandlingAsync } from '../../../../../graphql/client';
 import {
-  AppStoreConnectApiKeyByAccountQuery,
  AppStoreConnectApiKeyFragment,
+  AppStoreConnectApiKeysPaginatedByAccountQuery,
 } from '../../../../../graphql/generated';
 import { AppStoreConnectApiKeyFragmentNode } from '../../../../../graphql/types/credentials/AppStoreConnectApiKey';
+import { Connection, QueryParams, fetchEntireDatasetAsync } from '../../../../../utils/relay';

 export const AppStoreConnectApiKeyQuery = {
  async getAllForAccountAsync(
    graphqlClient: ExpoGraphqlClient,
    accountName: string
  ): Promise<AppStoreConnectApiKeyFragment[]> {
+    const paginatedGetterAsync = async (
+      relayArgs: QueryParams
+    ): Promise<Connection<AppStoreConnectApiKeyFragment>> => {
+      return await AppStoreConnectApiKeyQuery.getAllForAccountPaginatedAsync(
+        graphqlClient,
+        accountName,
+        relayArgs
+      );
+    };
+    return await fetchEntireDatasetAsync({
+      paginatedGetterAsync,
+      progressBarLabel: 'fetching ASC Keys...',
+    });
+  },
+  async getAllForAccountPaginatedAsync(
+    graphqlClient: ExpoGraphqlClient,
+    accountName: string,
+    {
+      after,
+      first,
+      before,
+      last,
+    }: { after?: string; first?: number; before?: string; last?: number }
+  ): Promise<
+    AppStoreConnectApiKeysPaginatedByAccountQuery['account']['byName']['appStoreConnectApiKeysPaginated']
+  > {
    const data = await withErrorHandlingAsync(
      graphqlClient
-        .query<AppStoreConnectApiKeyByAccountQuery>(
+        .query<AppStoreConnectApiKeysPaginatedByAccountQuery>(
          gql`
-            query AppStoreConnectApiKeyByAccountQuery($accountName: String!) {
+            query AppStoreConnectApiKeysPaginatedByAccountQuery(
+              $accountName: String!
+              $after: String
+              $first: Int
+              $before: String
+              $last: Int
+            ) {
              account {
                byName(accountName: $accountName) {
                  id
-                  appStoreConnectApiKeys {
-                    id
-                    ...AppStoreConnectApiKeyFragment
+                  appStoreConnectApiKeysPaginated(
+                    after: $after
+                    first: $first
+                    before: $before
+                    last: $last
+                  ) {
+                    edges {
+                      cursor
+                      node {
+                        id
+                        ...AppStoreConnectApiKeyFragment
+                      }
+                    }
+                    pageInfo {
+                      hasNextPage
+                      hasPreviousPage
+                      startCursor
+                      endCursor
+                    }
                  }
                }
              }
@@ -33,6 +82,10 @@ export const AppStoreConnectApiKeyQuery = {
          `,
          {
            accountName,
+            after,
+            first,
+            before,
+            last,
          },
          {
            additionalTypenames: ['AppStoreConnectApiKey'],
@@ -40,6 +93,6 @@ export const AppStoreConnectApiKeyQuery = {
        )
        .toPromise()
    );
-    return data.account.byName.appStoreConnectApiKeys;
+    return data.account.byName.appStoreConnectApiKeysPaginated;
  },
 };
@@ -1,4 +1,3 @@
-import assert from 'assert';
 import { print } from 'graphql';
 import gql from 'graphql-tag';

@@ -7,15 +6,16 @@ import { DeviceNotFoundError } from '../../../../../devices/utils/errors';
 import { withErrorHandlingAsync } from '../../../../../graphql/client';
 import {
  AppleDevice,
+  AppleDeviceFilterInput,
  AppleDeviceFragment,
-  AppleDevicesByAppleTeamQuery,
-  AppleDevicesByIdentifierQuery,
  AppleDevicesByTeamIdentifierQuery,
  AppleDevicesByTeamIdentifierQueryVariables,
+  AppleDevicesPaginatedByAccountQuery,
  AppleTeamFragment,
 } from '../../../../../graphql/generated';
 import { AppleDeviceFragmentNode } from '../../../../../graphql/types/credentials/AppleDevice';
 import { AppleTeamFragmentNode } from '../../../../../graphql/types/credentials/AppleTeam';
+import { Connection, QueryParams, fetchEntireDatasetAsync } from '../../../../../utils/relay';
 import { formatAppleTeam } from '../../../actions/AppleTeamFormatting';

 export type AppleDeviceFragmentWithAppleTeam = AppleDeviceFragment & {
@@ -38,51 +38,25 @@ export type AppleDevicesByIdentifierQueryResult = AppleDeviceQueryResult & {
 export const AppleDeviceQuery = {
  async getAllByAppleTeamIdentifierAsync(
    graphqlClient: ExpoGraphqlClient,
-    accountId: string,
+    accountName: string,
    appleTeamIdentifier: string,
    { useCache = true }: { useCache?: boolean } = {}
  ): Promise<AppleDeviceFragmentWithAppleTeam[]> {
-    const data = await withErrorHandlingAsync(
-      graphqlClient
-        .query<AppleDevicesByAppleTeamQuery>(
-          gql`
-            query AppleDevicesByAppleTeamQuery($accountId: ID!, $appleTeamIdentifier: String!) {
-              appleTeam {
-                byAppleTeamIdentifier(accountId: $accountId, identifier: $appleTeamIdentifier) {
-                  id
-                  ...AppleTeamFragment
-                  appleDevices {
-                    id
-                    ...AppleDeviceFragment
-                    appleTeam {
-                      id
-                      ...AppleTeamFragment
-                    }
-                  }
-                }
-              }
-            }
-            ${print(AppleTeamFragmentNode)}
-            ${print(AppleDeviceFragmentNode)}
-          `,
-          {
-            accountId,
-            appleTeamIdentifier,
-          },
-          {
-            additionalTypenames: ['AppleDevice'],
-            requestPolicy: useCache ? 'cache-first' : 'network-only',
-          }
-        )
-        .toPromise()
-    );
-    assert(
-      data.appleTeam.byAppleTeamIdentifier,
-      'byAppleTeamIdentifier should be defined in this context - enforced by GraphQL'
-    );
-    const { appleDevices } = data.appleTeam.byAppleTeamIdentifier;
-    assert(appleDevices, 'Apple Devices should be defined in this context - enforced by GraphQL');
-    return appleDevices;
+    const paginatedGetterAsync = async (
+      relayArgs: QueryParams
+    ): Promise<Connection<AppleDeviceFragmentWithAppleTeam>> => {
+      return await AppleDeviceQuery.getAllForAccountPaginatedAsync(graphqlClient, accountName, {
+        ...relayArgs,
+        filter: {
+          appleTeamIdentifier,
+        },
+        useCache,
+      });
+    };
+    return await fetchEntireDatasetAsync({
+      paginatedGetterAsync,
+      progressBarLabel: 'Fetching Apple devices...',
+    });
  },

  async getAllForAppleTeamAsync(
@@ -113,6 +87,7 @@ export const AppleDeviceQuery = {
                      deviceClass
                      enabled
                      model
+                      createdAt
                    }
                  }
                }
@@ -138,41 +113,21 @@ export const AppleDeviceQuery = {
    graphqlClient: ExpoGraphqlClient,
    accountName: string,
    identifier: string
-  ): Promise<AppleDevicesByIdentifierQueryResult> {
-    const data = await withErrorHandlingAsync(
-      graphqlClient
-        .query<AppleDevicesByIdentifierQuery>(
-          gql`
-            query AppleDevicesByIdentifier($accountName: String!, $identifier: String!) {
-              account {
-                byName(accountName: $accountName) {
-                  id
-                  appleDevices(identifier: $identifier) {
-                    id
-                    model
-                    identifier
-                    name
-                    deviceClass
-                    enabled
-                    appleTeam {
-                      id
-                      appleTeamIdentifier
-                      appleTeamName
-                    }
-                  }
-                }
-              }
-            }
-          `,
-          { accountName, identifier },
-          {
-            additionalTypenames: ['AppleDevice', 'AppleTeam'],
-          }
-        )
-        .toPromise()
-    );
-
-    const device = data.account.byName.appleDevices[0];
+  ): Promise<AppleDeviceFragmentWithAppleTeam> {
+    const paginatedGetterAsync = async (
+      relayArgs: QueryParams
+    ): Promise<Connection<AppleDeviceFragmentWithAppleTeam>> => {
+      return await AppleDeviceQuery.getAllForAccountPaginatedAsync(graphqlClient, accountName, {
+        ...relayArgs,
+        filter: {
+          identifier,
+        },
+      });
+    };
+    const devices = await fetchEntireDatasetAsync({
+      paginatedGetterAsync,
+    });
+    const device = devices[0];
    if (!device) {
      throw new DeviceNotFoundError(
        `Device with id ${identifier} was not found on account ${accountName}.`
@@ -180,4 +135,86 @@ export const AppleDeviceQuery = {
    }
    return device;
  },
+  async getAllForAccountPaginatedAsync(
+    graphqlClient: ExpoGraphqlClient,
+    accountName: string,
+    {
+      after,
+      first,
+      before,
+      last,
+      filter,
+      useCache = true,
+    }: {
+      after?: string;
+      first?: number;
+      before?: string;
+      last?: number;
+      filter?: AppleDeviceFilterInput;
+      useCache?: boolean;
+    }
+  ): Promise<AppleDevicesPaginatedByAccountQuery['account']['byName']['appleDevicesPaginated']> {
+    const data = await withErrorHandlingAsync(
+      graphqlClient
+        .query<AppleDevicesPaginatedByAccountQuery>(
+          gql`
+            query AppleDevicesPaginatedByAccountQuery(
+              $accountName: String!
+              $after: String
+              $first: Int
+              $before: String
+              $last: Int
+              $filter: AppleDeviceFilterInput
+            ) {
+              account {
+                byName(accountName: $accountName) {
+                  id
+                  appleDevicesPaginated(
+                    after: $after
+                    first: $first
+                    before: $before
+                    last: $last
+                    filter: $filter
+                  ) {
+                    edges {
+                      cursor
+                      node {
+                        id
+                        ...AppleDeviceFragment
+                        appleTeam {
+                          id
+                          ...AppleTeamFragment
+                        }
+                      }
+                    }
+                    pageInfo {
+                      hasNextPage
+                      hasPreviousPage
+                      startCursor
+                      endCursor
+                    }
+                  }
+                }
+              }
+            }
+            ${print(AppleTeamFragmentNode)}
+            ${print(AppleDeviceFragmentNode)}
+          `,
+          {
+            accountName,
+            after,
+            first,
+            before,
+            last,
+            filter,
+          },
+          {
+            additionalTypenames: ['AppleDevice'],
+            requestPolicy: useCache ? 'cache-first' : 'network-only',
+          }
+        )
+        .toPromise()
+    );
+    return data.account.byName.appleDevicesPaginated;
+  },
 };
@@ -5,13 +5,14 @@ import gql from 'graphql-tag';
 import { ExpoGraphqlClient } from '../../../../../commandUtils/context/contextUtils/createGraphqlClient';
 import { withErrorHandlingAsync } from '../../../../../graphql/client';
 import {
-  AppleDistributionCertificateByAccountQuery,
  AppleDistributionCertificateByAppQuery,
  AppleDistributionCertificateFragment,
+  AppleDistributionCertificatesPaginatedByAccountQuery,
  IosDistributionType,
 } from '../../../../../graphql/generated';
 import { AppleDistributionCertificateFragmentNode } from '../../../../../graphql/types/credentials/AppleDistributionCertificate';
 import { AppleTeamFragmentNode } from '../../../../../graphql/types/credentials/AppleTeam';
+import { Connection, QueryParams, fetchEntireDatasetAsync } from '../../../../../utils/relay';

 export const AppleDistributionCertificateQuery = {
  async getForAppAsync(
@@ -81,17 +82,65 @@ export const AppleDistributionCertificateQuery = {
    graphqlClient: ExpoGraphqlClient,
    accountName: string
  ): Promise<AppleDistributionCertificateFragment[]> {
+    const paginatedGetterAsync = async (
+      relayArgs: QueryParams
+    ): Promise<Connection<AppleDistributionCertificateFragment>> => {
+      return await AppleDistributionCertificateQuery.getAllForAccountPaginatedAsync(
+        graphqlClient,
+        accountName,
+        relayArgs
+      );
+    };
+    return await fetchEntireDatasetAsync({
+      paginatedGetterAsync,
+      progressBarLabel: 'fetching Apple Distribution Certificates...',
+    });
+  },
+  async getAllForAccountPaginatedAsync(
+    graphqlClient: ExpoGraphqlClient,
+    accountName: string,
+    {
+      after,
+      first,
+      before,
+      last,
+    }: { after?: string; first?: number; before?: string; last?: number }
+  ): Promise<
+    AppleDistributionCertificatesPaginatedByAccountQuery['account']['byName']['appleDistributionCertificatesPaginated']
+  > {
    const data = await withErrorHandlingAsync(
      graphqlClient
-        .query<AppleDistributionCertificateByAccountQuery>(
+        .query<AppleDistributionCertificatesPaginatedByAccountQuery>(
          gql`
-            query AppleDistributionCertificateByAccountQuery($accountName: String!) {
+            query AppleDistributionCertificatesPaginatedByAccountQuery(
+              $accountName: String!
+              $after: String
+              $first: Int
+              $before: String
+              $last: Int
+            ) {
              account {
                byName(accountName: $accountName) {
                  id
-                  appleDistributionCertificates {
-                    id
-                    ...AppleDistributionCertificateFragment
+                  appleDistributionCertificatesPaginated(
+                    after: $after
+                    first: $first
+                    before: $before
+                    last: $last
+                  ) {
+                    edges {
+                      cursor
+                      node {
+                        id
+                        ...AppleDistributionCertificateFragment
+                      }
+                    }
+                    pageInfo {
+                      hasNextPage
+                      hasPreviousPage
+                      startCursor
+                      endCursor
+                    }
                  }
                }
              }
@@ -100,6 +149,10 @@ export const AppleDistributionCertificateQuery = {
          `,
          {
            accountName,
+            after,
+            first,
+            before,
+            last,
          },
          {
            additionalTypenames: ['AppleDistributionCertificate'],
@@ -107,6 +160,6 @@ export const AppleDistributionCertificateQuery = {
        )
        .toPromise()
    );
-    return data.account.byName.appleDistributionCertificates;
+    return data.account.byName.appleDistributionCertificatesPaginated;
  },
 };
@@ -3,25 +3,75 @@ import gql from 'graphql-tag';

 import { ExpoGraphqlClient } from '../../../../../commandUtils/context/contextUtils/createGraphqlClient';
 import { withErrorHandlingAsync } from '../../../../../graphql/client';
-import { ApplePushKeyByAccountQuery, ApplePushKeyFragment } from '../../../../../graphql/generated';
+import {
+  ApplePushKeyFragment,
+  ApplePushKeysPaginatedByAccountQuery,
+} from '../../../../../graphql/generated';
 import { ApplePushKeyFragmentNode } from '../../../../../graphql/types/credentials/ApplePushKey';
+import { Connection, QueryParams, fetchEntireDatasetAsync } from '../../../../../utils/relay';

 export const ApplePushKeyQuery = {
  async getAllForAccountAsync(
    graphqlClient: ExpoGraphqlClient,
    accountName: string
  ): Promise<ApplePushKeyFragment[]> {
+    const paginatedGetterAsync = async (
+      relayArgs: QueryParams
+    ): Promise<Connection<ApplePushKeyFragment>> => {
+      return await ApplePushKeyQuery.getAllForAccountPaginatedAsync(
+        graphqlClient,
+        accountName,
+        relayArgs
+      );
+    };
+    return await fetchEntireDatasetAsync({
+      paginatedGetterAsync,
+      progressBarLabel: 'fetching Apple Push Keys...',
+    });
+  },
+  async getAllForAccountPaginatedAsync(
+    graphqlClient: ExpoGraphqlClient,
+    accountName: string,
+    {
+      after,
+      first,
+      before,
+      last,
+    }: { after?: string; first?: number; before?: string; last?: number }
+  ): Promise<ApplePushKeysPaginatedByAccountQuery['account']['byName']['applePushKeysPaginated']> {
    const data = await withErrorHandlingAsync(
      graphqlClient
-        .query<ApplePushKeyByAccountQuery>(
+        .query<ApplePushKeysPaginatedByAccountQuery>(
          gql`
-            query ApplePushKeyByAccountQuery($accountName: String!) {
+            query ApplePushKeysPaginatedByAccountQuery(
+              $accountName: String!
+              $after: String
+              $first: Int
+              $before: String
+              $last: Int
+            ) {
              account {
                byName(accountName: $accountName) {
                  id
-                  applePushKeys {
-                    id
-                    ...ApplePushKeyFragment
+                  applePushKeysPaginated(
+                    after: $after
+                    first: $first
+                    before: $before
+                    last: $last
+                  ) {
+                    edges {
+                      cursor
+                      node {
+                        id
+                        ...ApplePushKeyFragment
+                      }
+                    }
+                    pageInfo {
+                      hasNextPage
+                      hasPreviousPage
+                      startCursor
+                      endCursor
+                    }
                  }
                }
              }
@@ -30,6 +80,10 @@ export const ApplePushKeyQuery = {
          `,
          {
            accountName,
+            after,
+            first,
+            before,
+            last,
          },
          {
            additionalTypenames: ['ApplePushKey'],
@@ -37,6 +91,6 @@ export const ApplePushKeyQuery = {
        )
        .toPromise()
    );
-    return data.account.byName.applePushKeys;
+    return data.account.byName.applePushKeysPaginated;
  },
 };
@@ -35,6 +35,7 @@ export enum AndroidActionType {
  SetUpGsaKeyForFcmV1,
  UpdateCredentialsJson,
  SetUpBuildCredentialsFromCredentialsJson,
+  SetUpBuildCredentials,
 }

 export enum IosActionType {
@@ -0,0 +1,46 @@
+import { Platform } from '@expo/eas-build-job';
+import { BuildProfile, EasJsonAccessor, EasJsonUtils } from '@expo/eas-json';
+
+import Log from '../../log';
+
+export class CheckBuildProfileFlagAgainstEasJson<T extends Platform> {
+  private easJsonAccessor: EasJsonAccessor;
+
+  constructor(
+    projectDir: string,
+    private platform: T,
+    private profileNameFromFlag: string
+  ) {
+    this.easJsonAccessor = EasJsonAccessor.fromProjectPath(projectDir);
+  }
+
+  async runAsync(): Promise<BuildProfile<T>> {
+    const profileName = await this.getProfileNameFromEasConfigAsync();
+    const easConfig = await EasJsonUtils.getBuildProfileAsync<T>(
+      this.easJsonAccessor,
+      this.platform,
+      profileName
+    );
+    Log.succeed(`Using build profile: ${profileName}`);
+    return easConfig;
+  }
+
+  async getProfileNameFromEasConfigAsync(): Promise<string> {
+    const buildProfileNames = await EasJsonUtils.getBuildProfileNamesAsync(this.easJsonAccessor);
+    if (buildProfileNames.length === 0) {
+      throw new Error(
+        'You need at least one iOS build profile declared in eas.json. Go to https://docs.expo.dev/build/eas-json/ for more details'
+      );
+    } else if (buildProfileNames.length === 1) {
+      return buildProfileNames[0];
+    }
+
+    if (buildProfileNames.includes(this.profileNameFromFlag)) {
+      return this.profileNameFromFlag;
+    } else {
+      throw new Error(
+        `Build profile ${this.profileNameFromFlag} does not exist in eas.json. Go to https://docs.expo.dev/build/eas-json/ for more details`
+      );
+    }
+  }
+}
@@ -34,6 +34,7 @@ import { DownloadKeystore } from '../android/actions/DownloadKeystore';
 import { RemoveFcm } from '../android/actions/RemoveFcm';
 import { SelectAndRemoveGoogleServiceAccountKey } from '../android/actions/RemoveGoogleServiceAccountKey';
 import { RemoveKeystore } from '../android/actions/RemoveKeystore';
+import { SetUpBuildCredentials } from '../android/actions/SetUpBuildCredentials';
 import { SetUpBuildCredentialsFromCredentialsJson } from '../android/actions/SetUpBuildCredentialsFromCredentialsJson';
 import { SetUpGoogleServiceAccountKeyForFcmV1 } from '../android/actions/SetUpGoogleServiceAccountKeyForFcmV1';
 import { SetUpGoogleServiceAccountKeyForSubmissions } from '../android/actions/SetUpGoogleServiceAccountKeyForSubmissions';
@@ -48,8 +49,8 @@ import { AndroidPackageNotDefinedError } from '../errors';

 export class ManageAndroid {
  constructor(
-    private callingAction: Action,
-    private projectDir: string
+    protected callingAction: Action,
+    protected projectDir: string
  ) {}

  async runAsync(currentActions: ActionInfo[] = highLevelActions): Promise<void> {
@@ -164,7 +165,7 @@ export class ManageAndroid {
    }
  }

-  private async createProjectContextAsync(
+  protected async createProjectContextAsync(
    ctx: CredentialsContext,
    buildProfile: BuildProfile<Platform.ANDROID>
  ): Promise<GradleBuildContext | undefined> {
@@ -172,7 +173,7 @@ export class ManageAndroid {
    return await resolveGradleBuildContextAsync(ctx.projectDir, buildProfile, ctx.vcsClient);
  }

-  private async runProjectSpecificActionAsync(
+  protected async runProjectSpecificActionAsync(
    ctx: CredentialsContext,
    action: AndroidActionType,
    gradleContext?: GradleBuildContext
@@ -239,6 +240,8 @@ export class ManageAndroid {
      }
    } else if (action === AndroidActionType.SetUpBuildCredentialsFromCredentialsJson) {
      await new SetUpBuildCredentialsFromCredentialsJson(appLookupParams).runAsync(ctx);
+    } else if (action === AndroidActionType.SetUpBuildCredentials) {
+      await new SetUpBuildCredentials({ app: appLookupParams }).runAsync(ctx);
    }
  }
 }
@@ -56,8 +56,8 @@ import { displayIosCredentials } from '../ios/utils/printCredentials';

 export class ManageIos {
  constructor(
-    private callingAction: Action,
-    private projectDir: string
+    protected callingAction: Action,
+    protected projectDir: string
  ) {}

  async runAsync(currentActions: ActionInfo[] = highLevelActions): Promise<void> {
@@ -182,7 +182,7 @@ export class ManageIos {
    }
  }

-  private async createProjectContextAsync(
+  protected async createProjectContextAsync(
    ctx: CredentialsContext,
    account: AccountFragment,
    buildProfile: BuildProfile<Platform.IOS>
@@ -215,7 +215,7 @@ export class ManageIos {
    };
  }

-  private async runAccountSpecificActionAsync(
+  protected async runAccountSpecificActionAsync(
    ctx: CredentialsContext,
    account: AccountFragment,
    action: IosActionType
@@ -235,7 +235,7 @@ export class ManageIos {
    }
  }

-  private async runProjectSpecificActionAsync(
+  protected async runProjectSpecificActionAsync(
    ctx: CredentialsContext,
    app: App,
    targets: Target[],
@@ -396,7 +396,7 @@ export class ManageIos {
    }
  }

-  private async setupProvisioningProfileWithSpecificDistCertAsync(
+  protected async setupProvisioningProfileWithSpecificDistCertAsync(
    ctx: CredentialsContext,
    target: Target,
    appLookupParams: AppLookupParams,
@@ -419,7 +419,7 @@ export class ManageIos {
    }
  }

-  private async selectTargetAsync(targets: Target[]): Promise<Target> {
+  protected async selectTargetAsync(targets: Target[]): Promise<Target> {
    if (targets.length === 1) {
      return targets[0];
    }
@@ -0,0 +1,60 @@
+import { Platform } from '@expo/eas-build-job';
+import assert from 'assert';
+
+import { AndroidActionType } from './Actions';
+import { CheckBuildProfileFlagAgainstEasJson } from './CheckBuildProfileFlagAgainstEasJson';
+import { Action } from './HelperActions';
+import { ManageAndroid } from './ManageAndroid';
+import { CredentialsContext, CredentialsContextProjectInfo } from '../context';
+
+export class SetUpAndroidBuildCredentials extends ManageAndroid {
+  constructor(
+    callingAction: Action,
+    projectDir: string,
+    private setUpBuildCredentialsWithProfileNameFromFlag: string
+  ) {
+    super(callingAction, projectDir);
+  }
+
+  override async runAsync(): Promise<void> {
+    const hasProjectContext = !!this.callingAction.projectInfo;
+    const buildProfile = hasProjectContext
+      ? await new CheckBuildProfileFlagAgainstEasJson(
+          this.projectDir,
+          Platform.ANDROID,
+          this.setUpBuildCredentialsWithProfileNameFromFlag
+        ).runAsync()
+      : null;
+    let projectInfo: CredentialsContextProjectInfo | null = null;
+    if (hasProjectContext) {
+      const { exp, projectId } = await this.callingAction.getDynamicPrivateProjectConfigAsync({
+        env: buildProfile?.env,
+      });
+      projectInfo = { exp, projectId };
+    }
+    const ctx = new CredentialsContext({
+      projectDir: process.cwd(),
+      projectInfo,
+      user: this.callingAction.actor,
+      graphqlClient: this.callingAction.graphqlClient,
+      analytics: this.callingAction.analytics,
+      env: buildProfile?.env,
+      nonInteractive: false,
+      vcsClient: this.callingAction.vcsClient,
+    });
+
+    let gradleContext;
+    if (ctx.hasProjectContext) {
+      assert(buildProfile, 'buildProfile must be defined in a project context');
+      gradleContext = await this.createProjectContextAsync(ctx, buildProfile);
+    }
+
+    if (this.setUpBuildCredentialsWithProfileNameFromFlag) {
+      await this.runProjectSpecificActionAsync(
+        ctx,
+        AndroidActionType.SetUpBuildCredentials,
+        gradleContext
+      );
+    }
+  }
+}
@@ -0,0 +1,35 @@
+import { Platform } from '@expo/eas-build-job';
+
+import { Analytics } from '../../analytics/AnalyticsManager';
+import { DynamicConfigContextFn } from '../../commandUtils/context/DynamicProjectConfigContextField';
+import { ExpoGraphqlClient } from '../../commandUtils/context/contextUtils/createGraphqlClient';
+import { Actor } from '../../user/User';
+import { Client } from '../../vcs/vcs';
+import { CredentialsContextProjectInfo } from '../context';
+import { SetUpAndroidBuildCredentials } from '../manager/SetUpAndroidBuildCredentials';
+import { SetUpIosBuildCredentials } from '../manager/SetUpIosBuildCredentials';
+
+export class SetUpBuildCredentialsCommandAction {
+  constructor(
+    public readonly actor: Actor,
+    public readonly graphqlClient: ExpoGraphqlClient,
+    public readonly vcsClient: Client,
+    public readonly analytics: Analytics,
+    public readonly projectInfo: CredentialsContextProjectInfo | null,
+    public readonly getDynamicPrivateProjectConfigAsync: DynamicConfigContextFn,
+    private readonly platform: Platform,
+    private readonly profileName: string,
+    private readonly projectDir: string
+  ) {}
+
+  async runAsync(): Promise<void> {
+    if (this.platform === Platform.IOS) {
+      return await new SetUpIosBuildCredentials(this, this.projectDir, this.profileName).runAsync();
+    }
+    return await new SetUpAndroidBuildCredentials(
+      this,
+      this.projectDir,
+      this.profileName
+    ).runAsync();
+  }
+}
@@ -0,0 +1,78 @@
+import { Platform } from '@expo/eas-build-job';
+import assert from 'assert';
+import nullthrows from 'nullthrows';
+
+import { IosActionType } from './Actions';
+import { CheckBuildProfileFlagAgainstEasJson } from './CheckBuildProfileFlagAgainstEasJson';
+import { Action } from './HelperActions';
+import { ManageIos } from './ManageIos';
+import { AccountFragment } from '../../graphql/generated';
+import { getOwnerAccountForProjectIdAsync } from '../../project/projectUtils';
+import { ensureActorHasPrimaryAccount } from '../../user/actions';
+import { CredentialsContext, CredentialsContextProjectInfo } from '../context';
+
+export class SetUpIosBuildCredentials extends ManageIos {
+  constructor(
+    callingAction: Action,
+    projectDir: string,
+    private setUpBuildCredentialsWithProfileNameFromFlag: string
+  ) {
+    super(callingAction, projectDir);
+  }
+
+  override async runAsync(): Promise<void> {
+    const buildProfile = this.callingAction.projectInfo
+      ? await new CheckBuildProfileFlagAgainstEasJson(
+          this.projectDir,
+          Platform.IOS,
+          this.setUpBuildCredentialsWithProfileNameFromFlag
+        ).runAsync()
+      : null;
+
+    let projectInfo: CredentialsContextProjectInfo | null = null;
+    if (this.callingAction.projectInfo) {
+      const { exp, projectId } = await this.callingAction.getDynamicPrivateProjectConfigAsync({
+        env: buildProfile?.env,
+      });
+      projectInfo = { exp, projectId };
+    }
+
+    const ctx = new CredentialsContext({
+      projectDir: this.projectDir,
+      projectInfo,
+      user: this.callingAction.actor,
+      graphqlClient: this.callingAction.graphqlClient,
+      analytics: this.callingAction.analytics,
+      env: buildProfile?.env,
+      nonInteractive: false,
+      vcsClient: this.callingAction.vcsClient,
+    });
+
+    await ctx.bestEffortAppStoreAuthenticateAsync();
+
+    const getAccountForProjectAsync = async (projectId: string): Promise<AccountFragment> => {
+      return await getOwnerAccountForProjectIdAsync(ctx.graphqlClient, projectId);
+    };
+
+    const account = ctx.hasProjectContext
+      ? await getAccountForProjectAsync(ctx.projectId)
+      : ensureActorHasPrimaryAccount(ctx.user);
+
+    let app = null;
+    let targets = null;
+    if (ctx.hasProjectContext) {
+      assert(buildProfile, 'buildProfile must be defined in project context');
+      const projectContext = await this.createProjectContextAsync(ctx, account, buildProfile);
+      app = projectContext.app;
+      targets = projectContext.targets;
+    }
+
+    await this.runProjectSpecificActionAsync(
+      ctx,
+      nullthrows(app, 'app must be defined in project context'),
+      nullthrows(targets, 'targets must be defined in project context'),
+      nullthrows(buildProfile, 'buildProfile must be defined in project context'),
+      IosActionType.SetUpBuildCredentials
+    );
+  }
+}
@@ -44,6 +44,7 @@ describe(AccountResolver, () => {
      ],
      isExpoAdmin: false,
      featureGates: {},
+      preferences: {},
    };

    describe('when inside project dir', () => {
@@ -34,7 +34,7 @@ export default class DeviceCreateAction {
      await runDeveloperPortalMethodAsync(
        this.graphqlClient,
        this.appStoreApi,
-        this.account.id,
+        this.account,
        this.appleTeam
      );
    } else if (method === RegistrationMethod.INPUT) {
@@ -9,7 +9,7 @@ import {
 import AppStoreApi from '../../../credentials/ios/appstore/AppStoreApi';
 import { getRequestContext } from '../../../credentials/ios/appstore/authenticate';
 import { AuthCtx } from '../../../credentials/ios/appstore/authenticateTypes';
-import { AppleDeviceClass, AppleTeam } from '../../../graphql/generated';
+import { AccountFragment, AppleDeviceClass, AppleTeam } from '../../../graphql/generated';
 import Log from '../../../log';
 import { ora } from '../../../ora';
 import { promptAsync } from '../../../prompts';
@@ -25,14 +25,14 @@ const DEVICE_CLASS_TO_GRAPHQL_TYPE: Partial<Record<DeviceClass, AppleDeviceClass
 export async function runDeveloperPortalMethodAsync(
  graphqlClient: ExpoGraphqlClient,
  appStoreApi: AppStoreApi,
-  accountId: string,
+  account: AccountFragment,
  appleTeam: Pick<AppleTeam, 'appleTeamIdentifier' | 'appleTeamName' | 'id'>
 ): Promise<void> {
  const appleAuthCtx = await appStoreApi.ensureAuthenticatedAsync();
  const unregisteredPortalDevices = await findUnregisteredPortalDevicesAsync(
    graphqlClient,
    appleAuthCtx,
-    accountId,
+    account.name,
    appleTeam
  );
  if (unregisteredPortalDevices.length === 0) {
@@ -40,7 +40,7 @@ export async function runDeveloperPortalMethodAsync(
    return;
  }
  const devicesToImport = await chooseDevicesToImportAsync(unregisteredPortalDevices);
-  await importDevicesAsync(graphqlClient, accountId, appleTeam, devicesToImport);
+  await importDevicesAsync(graphqlClient, account.id, appleTeam, devicesToImport);
 }

 async function importDevicesAsync(
@@ -88,12 +88,12 @@ async function importDeviceChunkAsync(
 async function findUnregisteredPortalDevicesAsync(
  graphqlClient: ExpoGraphqlClient,
  appleAuthCtx: AuthCtx,
-  accountId: string,
+  accountName: string,
  appleTeam: Pick<AppleTeam, 'appleTeamIdentifier' | 'appleTeamName' | 'id'>
 ): Promise<Device[]> {
  const expoRegisteredDevices = await AppleDeviceQuery.getAllByAppleTeamIdentifierAsync(
    graphqlClient,
-    accountId,
+    accountName,
    appleTeam.appleTeamIdentifier,
    { useCache: false }
  );
@@ -10,6 +10,7 @@ const DEVICE_CLASS_DISPLAY_NAMES: Record<AppleDeviceClass, string> = {
  [AppleDeviceClass.Iphone]: 'iPhone',
  [AppleDeviceClass.Ipad]: 'iPad',
  [AppleDeviceClass.Mac]: 'Mac',
+  [AppleDeviceClass.Unknown]: 'Unknown',
 };

 function formatDeviceClass(device: Device | NewDevice): string {
@@ -6,5 +6,6 @@ export function createCtxMock(options: { nonInteractive?: boolean } = {}): EASUp
    graphqlClient: jest.fn() as any,
    nonInteractive: options.nonInteractive ?? false,
    app: { exp: testAppJson, projectId: 'test-project-id', projectDir: '/' },
+    vcsClient: jest.fn() as any,
  };
 }
@@ -1,11 +1,13 @@
 import { ExpoConfig } from '@expo/config-types';

 import { ExpoGraphqlClient } from '../commandUtils/context/contextUtils/createGraphqlClient';
+import { Client } from '../vcs/vcs';

 export type EASUpdateContext = {
  graphqlClient: ExpoGraphqlClient;
  nonInteractive: boolean;
  app: { exp: ExpoConfig; projectId: string; projectDir: string };
+  vcsClient: Client;
 };

 export interface EASUpdateAction<T = any> {
@@ -0,0 +1,61 @@
+import assert from 'assert';
+import gql from 'graphql-tag';
+
+import { ExpoGraphqlClient } from '../../commandUtils/context/contextUtils/createGraphqlClient';
+import { withErrorHandlingAsync } from '../client';
+import {
+  MarkCliDoneInOnboardingUserPreferencesMutation,
+  MarkCliDoneInOnboardingUserPreferencesMutationVariables,
+  UserPreferencesOnboardingInput,
+} from '../generated';
+
+export const UserPreferencesMutation = {
+  async markCliDoneInOnboardingUserPreferencesAsync(
+    graphqlClient: ExpoGraphqlClient,
+    userPreferencesData: Partial<UserPreferencesOnboardingInput> & { appId: string }
+  ): Promise<{
+    isCLIDone: boolean;
+    appId: string;
+  }> {
+    const data = await withErrorHandlingAsync(
+      graphqlClient
+        .mutation<
+          MarkCliDoneInOnboardingUserPreferencesMutation,
+          MarkCliDoneInOnboardingUserPreferencesMutationVariables
+        >(
+          gql`
+            mutation MarkCliDoneInOnboardingUserPreferencesMutation(
+              $preferences: UserPreferencesInput!
+            ) {
+              me {
+                setPreferences(preferences: $preferences) {
+                  onboarding {
+                    appId
+                    isCLIDone
+                  }
+                }
+              }
+            }
+          `,
+          {
+            preferences: {
+              onboarding: {
+                ...userPreferencesData,
+                isCLIDone: true,
+                lastUsed: new Date().toISOString(),
+              },
+            },
+          }
+        )
+        .toPromise()
+    );
+    const appId = data.me.setPreferences.onboarding?.appId;
+    assert(appId, 'App ID must be defined');
+    const isCLIDone = data.me.setPreferences.onboarding?.isCLIDone;
+    assert(isCLIDone, 'isCLIDone must be defined and true');
+    return {
+      appId,
+      isCLIDone,
+    };
+  },
+};
@@ -22,6 +22,16 @@ export const UserQuery = {
                    id
                    ...AccountFragment
                  }
+                  preferences {
+                    onboarding {
+                      appId
+                      platform
+                      deviceType
+                      environment
+                      isCLIDone
+                      lastUsed
+                    }
+                  }
                }
                ... on Robot {
                  firstName
@@ -12,6 +12,13 @@ export const AppFragmentNode = gql`
      name
      ...AccountFragment
    }
+    githubRepository {
+      id
+      metadata {
+        githubRepoOwnerName
+        githubRepoName
+      }
+    }
  }
  ${AccountFragmentNode}
 `;
@@ -37,7 +37,6 @@ export const BuildFragmentNode = gql`
      }
    }
    channel
-    releaseChannel
    distribution
    iosEnterpriseProvisioning
    buildProfile
@@ -55,7 +54,6 @@ export const BuildFragmentNode = gql`
    updatedAt
    message
    completedAt
-    resourceClass
    expirationDate
    isForIosSimulator
  }
@@ -6,6 +6,7 @@ export const APPLE_DEVICE_CLASS_LABELS: Record<AppleDeviceClass, string> = {
  [AppleDeviceClass.Ipad]: 'iPad',
  [AppleDeviceClass.Iphone]: 'iPhone',
  [AppleDeviceClass.Mac]: 'Mac',
+  [AppleDeviceClass.Unknown]: 'Unknown',
 };

 export const AppleDeviceFragmentNode = gql`
@@ -0,0 +1,81 @@
+import { runCommandAsync } from './runCommand';
+import Log from '../log';
+import { confirmAsync, promptAsync } from '../prompts';
+
+export async function runGitCloneAsync({
+  targetProjectDir,
+  githubRepositoryName,
+  githubUsername,
+  useSsh = true,
+}: {
+  githubUsername: string;
+  githubRepositoryName: string;
+  targetProjectDir: string;
+  useSsh?: boolean;
+}): Promise<{
+  targetProjectDir: string;
+}> {
+  const url = useSsh
+    ? `[email protected]:${githubUsername}/${githubRepositoryName}.git`
+    : `https://github.com/${githubUsername}/${githubRepositoryName}.git`;
+  try {
+    await runCommandAsync({
+      command: 'git',
+      args: ['clone', url, targetProjectDir],
+      shouldPrintStderrLineAsStdout: line => {
+        return line.includes('Cloning into');
+      },
+      showSpinner: false,
+    });
+    return { targetProjectDir };
+  } catch (error: any) {
+    if (error.stderr.includes('already exists')) {
+      Log.warn(`Directory ${targetProjectDir} already exists.`);
+      const shouldContinue = await confirmAsync({
+        message: 'Do you want to clone your project to some other destination?',
+      });
+      if (!shouldContinue) {
+        throw new Error('Directory already exists. Aborting...');
+      }
+      const { newTargetProjectDir } = await promptAsync({
+        type: 'text',
+        name: 'newTargetProjectDir',
+        message: 'New target directory path:',
+        validate: (input: string) => input !== '',
+      });
+      return await runGitCloneAsync({
+        githubRepositoryName,
+        githubUsername,
+        targetProjectDir: newTargetProjectDir,
+      });
+    } else if (useSsh && error.stderr.includes('Permission denied')) {
+      Log.warn('It seems like you do not have permission to clone the repository using SSH.');
+      const shouldContinue = await confirmAsync({
+        message: 'Do you want to clone the repository using HTTPS instead?',
+      });
+      if (!shouldContinue) {
+        throw new Error('Permission denied. Aborting...');
+      }
+      return await runGitCloneAsync({
+        githubRepositoryName,
+        githubUsername,
+        targetProjectDir,
+        useSsh: false,
+      });
+    } else {
+      throw error;
+    }
+  }
+}
+
+export async function runGitPushAsync({
+  targetProjectDir,
+}: {
+  targetProjectDir: string;
+}): Promise<void> {
+  await runCommandAsync({
+    command: 'git',
+    args: ['push'],
+    cwd: targetProjectDir,
+  });
+}
@@ -0,0 +1,23 @@
+import { runCommandAsync } from './runCommand';
+
+export async function installDependenciesAsync({
+  projectDir,
+}: {
+  projectDir: string;
+}): Promise<void> {
+  // TODO: add support for other package managers
+  await runCommandAsync({
+    command: 'npm',
+    args: ['install'],
+    cwd: projectDir,
+    shouldShowStderrLine: line => {
+      return (
+        !line.includes('WARN') &&
+        !line.includes('deprecated') &&
+        !line.includes('no longer maintained') &&
+        !line.includes('has been moved') &&
+        !(line === 'npm')
+      );
+    },
+  });
+}
@@ -0,0 +1,75 @@
+import spawnAsync from '@expo/spawn-async';
+import chalk from 'chalk';
+
+import Log from '../log';
+import { Ora, ora } from '../ora';
+
+export async function runCommandAsync({
+  cwd,
+  args,
+  command,
+  shouldShowStderrLine,
+  shouldPrintStderrLineAsStdout,
+  showSpinner = true,
+}: {
+  cwd?: string;
+  args: string[];
+  command: string;
+  shouldShowStderrLine?: (line: string) => boolean;
+  shouldPrintStderrLineAsStdout?: (line: string) => boolean;
+  showSpinner?: boolean;
+}): Promise<void> {
+  Log.log(`🏗️  Running ${chalk.bold(`${command} ${args.join(' ')}`)}...`);
+  let spinner: Ora | undefined;
+  if (showSpinner) {
+    spinner = ora(`${chalk.bold(`${command} ${args.join(' ')}`)}`).start();
+  }
+  const spawnPromise = spawnAsync(command, args, {
+    stdio: ['inherit', 'pipe', 'pipe'],
+    cwd,
+  });
+  const {
+    child: { stdout, stderr },
+  } = spawnPromise;
+  if (!stdout || !stderr) {
+    throw new Error(`Failed to spawn ${command}`);
+  }
+
+  stdout.on('data', data => {
+    for (const line of data.toString().trim().split('\n')) {
+      Log.log(`${chalk.gray(`[${command}]`)} ${line}`);
+    }
+  });
+  stderr.on('data', data => {
+    for (const line of data.toString().trim().split('\n')) {
+      if (shouldShowStderrLine && !shouldShowStderrLine(line)) {
+        continue;
+      }
+
+      const log = `${chalk.gray(`[${command}]`)} ${line}`;
+      if (shouldPrintStderrLineAsStdout && shouldPrintStderrLineAsStdout(line)) {
+        Log.log(log);
+      } else {
+        Log.warn(`${chalk.gray(`[${command}]`)} ${line}`);
+      }
+    }
+  });
+
+  try {
+    await spawnPromise;
+  } catch (error) {
+    if (showSpinner) {
+      spinner?.fail(`${chalk.bold(`${command} ${args.join(' ')}`)} failed`);
+    } else {
+      Log.error(`❌ ${chalk.bold(`${command} ${args.join(' ')}`)} failed`);
+    }
+    throw error;
+  }
+
+  if (showSpinner) {
+    spinner?.succeed(`✅ ${chalk.bold(`${command} ${args.join(' ')}`)} succeeded`);
+  } else {
+    Log.log(`✅ ${chalk.bold(`${command} ${args.join(' ')}`)} succeeded`);
+  }
+  Log.log('');
+}
@@ -1,13 +1,13 @@
 import { Platform, Workflow } from '@expo/eas-build-job';
 import { vol } from 'memfs';

-import { getVcsClient } from '../../vcs';
+import { resolveVcsClient } from '../../vcs';
 import { resolveWorkflowAsync, resolveWorkflowPerPlatformAsync } from '../workflow';

 jest.mock('fs');

 const projectDir = '/app';
-const vcsClient = getVcsClient();
+const vcsClient = resolveVcsClient();

 describe(resolveWorkflowAsync, () => {
  beforeEach(() => {
@@ -7,7 +7,7 @@ import { ExpoGraphqlClient } from '../../../commandUtils/context/contextUtils/cr
 import { jester, jester as mockJester } from '../../../credentials/__tests__/fixtures-constants';
 import { AppQuery } from '../../../graphql/queries/AppQuery';
 import { promptAsync } from '../../../prompts';
-import { getVcsClient } from '../../../vcs';
+import { resolveVcsClient } from '../../../vcs';
 import {
  ensureApplicationIdIsDefinedForManagedProjectAsync,
  getApplicationIdAsync,
@@ -18,7 +18,7 @@ jest.mock('../../../prompts');
 jest.mock('../../../graphql/queries/AppQuery');
 jest.mock('../../../user/actions', () => ({ ensureLoggedInAsync: jest.fn(() => mockJester) }));

-const vcsClient = getVcsClient();
+const vcsClient = resolveVcsClient();

 beforeEach(async () => {
  vol.reset();
@@ -133,9 +133,30 @@ describe(ensureApplicationIdIsDefinedForManagedProjectAsync, () => {
          projectId: '',
          exp: {} as any,
          vcsClient,
+          nonInteractive: false,
        })
      ).rejects.toThrowError(/we can't update this file programmatically/);
    });
+    it('throws an error in non-interactive mode', async () => {
+      const graphqlClient = instance(mock<ExpoGraphqlClient>());
+
+      vol.fromJSON(
+        {
+          'app.json': '{ "blah": {} }',
+        },
+        '/app'
+      );
+      await expect(
+        ensureApplicationIdIsDefinedForManagedProjectAsync({
+          graphqlClient,
+          projectDir: '/app',
+          projectId: '',
+          exp: {} as any,
+          vcsClient,
+          nonInteractive: true,
+        })
+      ).rejects.toThrowError(/non-interactive/);
+    });
    it('prompts for the Android package if using app.json', async () => {
      const graphqlClient = instance(mock<ExpoGraphqlClient>());
      jest.mocked(AppQuery.byIdAsync).mockResolvedValue({
@@ -163,6 +184,7 @@ describe(ensureApplicationIdIsDefinedForManagedProjectAsync, () => {
          projectId: '',
          exp: {} as any,
          vcsClient,
+          nonInteractive: false,
        })
      ).resolves.toBe('com.expo.notdominik');
      expect(promptAsync).toHaveBeenCalled();
@@ -196,6 +218,7 @@ describe(ensureApplicationIdIsDefinedForManagedProjectAsync, () => {
          projectId: '',
          exp: {} as any,
          vcsClient,
+          nonInteractive: false,
        })
      ).resolves.toBe('com.expo.notdominik');
      const appJson = JSON.parse(await fs.readFile('/app/app.json', 'utf-8'));