@better-update/cli 0.6.4 → 0.7.0

package/dist/index.mjs

@@ -21,7 +21,12 @@ var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 //#endregion
 //#region package.json
-var version = "0.6.4";
+var version = "0.7.0";
+
+//#endregion
+//#region ../../packages/type-guards/src/index.ts
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const asRecord = (value) => isRecord(value) ? value : void 0;
 
 //#endregion
 //#region src/lib/exit-codes.ts
@@ -61,11 +66,6 @@ const formatCause = (cause) => {
 	return String(cause);
 };
 
-//#endregion
-//#region src/lib/record.ts
-const isRecord = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-const asRecord = (value) => isRecord(value) ? value : void 0;
-
 //#endregion
 //#region src/lib/app-json.ts
 const readAppJson = Effect.gen(function* () {
@@ -139,6 +139,14 @@ const PaginationParams = Schema.Struct({
 	page: Schema.optional(Schema.NumberFromString),
 	limit: Schema.optional(Schema.NumberFromString)
 });
+const CursorPaginationParams = Schema.Struct({
+	cursor: Schema.optional(Schema.String),
+	limit: Schema.optional(Schema.NumberFromString)
+});
+const cursorPageResult = (itemSchema) => Schema.Struct({
+	items: Schema.Array(itemSchema),
+	nextCursor: Schema.NullOr(Schema.String)
+});
 const UpdateRolloutBody = Schema.Struct({ percentage: Schema.Number.pipe(Schema.int(), Schema.between(1, 100)) });
 const UploadHeaders = Schema.Record({
 	key: Schema.String,
@@ -638,18 +646,11 @@ var AuditLog = class extends Schema.Class("AuditLog")({
 //#region ../../packages/api/src/groups/audit-logs.ts
 var AuditLogsGroup = class extends HttpApiGroup.make("audit-logs").add(HttpApiEndpoint.get("list", "/api/audit-logs").setUrlParams(Schema.Struct({
 	projectId: Schema.optional(Schema.String),
-	action: Schema.optional(Schema.String),
 	resourceType: Schema.optional(Schema.String),
-	actorId: Schema.optional(Schema.String),
 	from: Schema.optional(Schema.String),
 	to: Schema.optional(Schema.String),
-	...PaginationParams.fields
-})).addSuccess(Schema.Struct({
-	items: Schema.Array(AuditLog),
-	total: Schema.Number,
-	page: Schema.Number,
-	limit: Schema.Number
-})).annotateContext(OpenApi.annotations({
+	...CursorPaginationParams.fields
+})).addSuccess(cursorPageResult(AuditLog)).annotateContext(OpenApi.annotations({
 	title: "List audit logs",
 	description: "List audit log entries with optional filters"
 }))).addError(Forbidden).annotateContext(OpenApi.annotations({
@@ -680,13 +681,8 @@ var BranchesGroup = class extends HttpApiGroup.make("branches").add(HttpApiEndpo
 	description: "Create a new branch within a project"
 }))).add(HttpApiEndpoint.get("list", "/api/branches").setUrlParams(Schema.Struct({
 	projectId: Id,
-	...PaginationParams.fields
-})).addSuccess(Schema.Struct({
-	items: Schema.Array(Branch),
-	total: Schema.Number,
-	page: Schema.Number,
-	limit: Schema.Number
-})).annotateContext(OpenApi.annotations({
+	...CursorPaginationParams.fields
+})).addSuccess(cursorPageResult(Branch)).annotateContext(OpenApi.annotations({
 	title: "List branches",
 	description: "List all branches for a project"
 }))).add(HttpApiEndpoint.patch("rename")`/api/branches/${idParam$8}`.setPayload(UpdateBranchBody).addSuccess(Branch).addError(Conflict).annotateContext(OpenApi.annotations({
@@ -856,15 +852,17 @@ const InstallLinkResult = Schema.Struct({
 //#region ../../packages/api/src/domain/build-compatibility.ts
 var BuildCompatibilityChannel = class extends Schema.Class("BuildCompatibilityChannel")({
 	channelId: Id,
-	channelName: Schema.String,
 	updateCount: Schema.Number,
 	latestUpdateId: Schema.NullOr(Id),
 	latestUpdateMessage: Schema.NullOr(Schema.String),
-	latestUpdateCreatedAt: Schema.NullOr(DateTimeString),
+	latestUpdateCreatedAt: Schema.NullOr(DateTimeString)
+}) {};
+var CompatibilityChannelInfo = class extends Schema.Class("CompatibilityChannelInfo")({
+	channelId: Id,
+	channelName: Schema.String,
 	isPaused: Schema.Boolean,
 	rolloutActive: Schema.Boolean
 }) {};
-var BuildCompatibilityRow = class extends BuildWithArtifact.extend("BuildCompatibilityRow")({ channels: Schema.Array(BuildCompatibilityChannel) }) {};
 var MissingRuntimeVersionBuild = class extends Schema.Class("MissingRuntimeVersionBuild")({
 	channelId: Id,
 	channelName: Schema.String,
@@ -877,7 +875,11 @@ var MissingRuntimeVersionBuild = class extends Schema.Class("MissingRuntimeVersi
 	rolloutActive: Schema.Boolean
 }) {};
 const BuildCompatibilityMatrixResult = Schema.Struct({
-	rows: Schema.Array(BuildCompatibilityRow),
+	channels: Schema.Array(CompatibilityChannelInfo),
+	channelStatusByKey: Schema.Record({
+		key: Schema.String,
+		value: Schema.Array(BuildCompatibilityChannel)
+	}),
 	missingRuntimeVersions: Schema.Array(MissingRuntimeVersionBuild)
 });
 
@@ -895,13 +897,8 @@ var BuildsGroup = class extends HttpApiGroup.make("builds").add(HttpApiEndpoint.
 	platform: Schema.optional(Platform),
 	profile: Schema.optional(Schema.String),
 	runtimeVersion: Schema.optional(Schema.String),
-	...PaginationParams.fields
-})).addSuccess(Schema.Struct({
-	items: Schema.Array(BuildWithArtifact),
-	total: Schema.Number,
-	page: Schema.Number,
-	limit: Schema.Number
-})).annotateContext(OpenApi.annotations({
+	...CursorPaginationParams.fields
+})).addSuccess(cursorPageResult(BuildWithArtifact)).annotateContext(OpenApi.annotations({
 	title: "List builds",
 	description: "List builds for a project with optional filters"
 }))).add(HttpApiEndpoint.get("compatibilityMatrix", "/api/builds/compatibility-matrix").setUrlParams(Schema.Struct({ projectId: Id })).addSuccess(BuildCompatibilityMatrixResult).annotateContext(OpenApi.annotations({
@@ -956,13 +953,8 @@ var ChannelsGroup = class extends HttpApiGroup.make("channels").add(HttpApiEndpo
 	description: "Relink channel to a different branch"
 }))).add(HttpApiEndpoint.get("list", "/api/channels").setUrlParams(Schema.Struct({
 	projectId: Id,
-	...PaginationParams.fields
-})).addSuccess(Schema.Struct({
-	items: Schema.Array(Channel),
-	total: Schema.Number,
-	page: Schema.Number,
-	limit: Schema.Number
-})).annotateContext(OpenApi.annotations({
+	...CursorPaginationParams.fields
+})).addSuccess(cursorPageResult(Channel)).annotateContext(OpenApi.annotations({
 	title: "List channels",
 	description: "List all channels for a project"
 }))).add(HttpApiEndpoint.post("pause")`/api/channels/${idParam$6}/pause`.addSuccess(Channel).annotateContext(OpenApi.annotations({
@@ -1023,10 +1015,10 @@ const UpdateDeviceBody = Schema.Struct({
 });
 const DeleteDeviceResult = Schema.Struct({ deleted: Schema.Number });
 const ListDevicesParams = Schema.Struct({
-	...PaginationParams.fields,
-	search: Schema.optional(Schema.String),
+	...CursorPaginationParams.fields,
 	deviceClass: Schema.optional(DeviceClass),
-	appleTeamId: Schema.optional(Id)
+	appleTeamId: Schema.optional(Id),
+	query: Schema.optional(Schema.String)
 });
 var DeviceRegistrationRequest = class extends Schema.Class("DeviceRegistrationRequest")({
 	id: Id,
@@ -1057,12 +1049,7 @@ const idParam$5 = HttpApiSchema.param("id", Schema.String);
 var DevicesGroup = class extends HttpApiGroup.make("devices").add(HttpApiEndpoint.post("register", "/api/devices").setPayload(RegisterDeviceBody).addSuccess(Device, { status: 201 }).annotateContext(OpenApi.annotations({
 	title: "Register device",
 	description: "Register an Apple device UDID in the caller's active organization"
-}))).add(HttpApiEndpoint.get("list", "/api/devices").setUrlParams(ListDevicesParams).addSuccess(Schema.Struct({
-	items: Schema.Array(Device),
-	total: Schema.Number,
-	page: Schema.Number,
-	limit: Schema.Number
-})).annotateContext(OpenApi.annotations({
+}))).add(HttpApiEndpoint.get("list", "/api/devices").setUrlParams(ListDevicesParams).addSuccess(cursorPageResult(Device)).annotateContext(OpenApi.annotations({
 	title: "List devices",
 	description: "List registered Apple devices in the caller's active organization"
 }))).add(HttpApiEndpoint.get("get")`/api/devices/${idParam$5}`.addSuccess(Device).annotateContext(OpenApi.annotations({
@@ -1145,12 +1132,7 @@ var EnvVarsGroup = class extends HttpApiGroup.make("env-vars").add(HttpApiEndpoi
 	projectId: Id,
 	environment: Schema.optional(Schema.String),
 	...PaginationParams.fields
-})).addSuccess(Schema.Struct({
-	items: Schema.Array(EnvVar),
-	total: Schema.Number,
-	page: Schema.Number,
-	limit: Schema.Number
-})).annotateContext(OpenApi.annotations({
+})).addSuccess(Schema.Struct({ items: Schema.Array(EnvVar) })).annotateContext(OpenApi.annotations({
 	title: "List environment variables",
 	description: "List environment variables with optional filters"
 }))).add(HttpApiEndpoint.get("get")`/api/env-vars/${idParam$4}`.addSuccess(EnvVar).annotateContext(OpenApi.annotations({
@@ -1269,8 +1251,17 @@ var Project = class extends Schema.Class("Project")({
 	name: Schema.String,
 	slug: Schema.String,
 	createdAt: DateTimeString,
-	lastActivityAt: DateTimeString
+	lastActivityAt: DateTimeString,
+	branchCount: Schema.Number,
+	channelCount: Schema.Number,
+	updateCount: Schema.Number
 }) {};
+const ProjectSort = Schema.Literal("lastActivityAt", "name");
+const ListProjectsParams = Schema.Struct({
+	...PaginationParams.fields,
+	query: Schema.optional(Schema.String),
+	sort: Schema.optional(ProjectSort)
+});
 const CreateProjectBody = Schema.Struct({
 	name: Schema.String.pipe(Schema.minLength(1)),
 	slug: Schema.String.pipe(Schema.minLength(1))
@@ -1285,7 +1276,7 @@ const slugParam = HttpApiSchema.param("slug", Schema.String);
 var ProjectsGroup = class extends HttpApiGroup.make("projects").add(HttpApiEndpoint.post("create", "/api/projects").setPayload(CreateProjectBody).addSuccess(Project, { status: 201 }).annotateContext(OpenApi.annotations({
 	title: "Create project",
 	description: "Create a new project in the caller's active organization"
-}))).add(HttpApiEndpoint.get("list", "/api/projects").setUrlParams(PaginationParams).addSuccess(Schema.Struct({
+}))).add(HttpApiEndpoint.get("list", "/api/projects").setUrlParams(ListProjectsParams).addSuccess(Schema.Struct({
 	items: Schema.Array(Project),
 	total: Schema.Number,
 	page: Schema.Number,
@@ -1384,13 +1375,9 @@ var UpdatesGroup = class extends HttpApiGroup.make("updates").add(HttpApiEndpoin
 }))).add(HttpApiEndpoint.get("list", "/api/updates").setUrlParams(Schema.Struct({
 	projectId: Id,
 	branchId: Schema.optional(Id),
-	...PaginationParams.fields
-})).addSuccess(Schema.Struct({
-	items: Schema.Array(Update),
-	total: Schema.Number,
-	page: Schema.Number,
-	limit: Schema.Number
-})).annotateContext(OpenApi.annotations({
+	platform: Schema.optional(Platform),
+	...CursorPaginationParams.fields
+})).addSuccess(cursorPageResult(Update)).annotateContext(OpenApi.annotations({
 	title: "List updates",
 	description: "List updates for a project, optionally filtered by branch"
 }))).add(HttpApiEndpoint.del("deleteGroup")`/api/updates/${groupIdParam}`.addSuccess(DeleteUpdateResult).annotateContext(OpenApi.annotations({
@@ -1501,7 +1488,7 @@ const AuthStoreLive = Layer.effect(AuthStore, Effect.gen(function* () {
 //#endregion
 //#region src/services/config-store.ts
 const DEFAULT_BASE_URL = "https://graph.better-update.dev";
-const DEFAULT_ACCOUNTS_URL = "https://accounts.better-update.dev";
+const DEFAULT_WEB_URL = "https://better-update.dev";
 var ConfigStoreParseError = class extends Data.TaggedError("ConfigStoreParseError") {};
 const normalizeUrl = (value) => value.replace(/\/$/, "");
 var ConfigStore = class extends Context.Tag("cli/ConfigStore")() {};
@@ -1525,12 +1512,12 @@ const ConfigStoreLive = Layer.effect(ConfigStore, Effect.gen(function* () {
 			if (typeof baseUrl === "string") return normalizeUrl(baseUrl);
 			return DEFAULT_BASE_URL;
 		}),
-		getAccountsUrl: Effect.gen(function* () {
-			const envUrl = yield* runtime.getEnv("BETTER_UPDATE_ACCOUNTS_URL");
+		getWebUrl: Effect.gen(function* () {
+			const envUrl = yield* runtime.getEnv("BETTER_UPDATE_WEB_URL");
 			if (envUrl) return normalizeUrl(envUrl);
-			const accountsUrl = (yield* readConfig)?.["accountsUrl"];
-			if (typeof accountsUrl === "string") return normalizeUrl(accountsUrl);
-			return DEFAULT_ACCOUNTS_URL;
+			const webUrl = (yield* readConfig)?.["webUrl"];
+			if (typeof webUrl === "string") return normalizeUrl(webUrl);
+			return DEFAULT_WEB_URL;
 		})
 	};
 }));
@@ -1556,11 +1543,20 @@ const ApiClientLive = Layer.effect(ApiClientService, Effect.gen(function* () {
 
 //#endregion
 //#region ../../packages/safe-json/src/index.ts
-var SafeJsonParseError = class extends Data.TaggedError("SafeJsonParseError") {};
-const safeJsonParse = (text) => Effect.runSync(Effect.orElseSucceed(Effect.try({
-	try: () => JSON.parse(text),
-	catch: () => new SafeJsonParseError({ message: "Invalid JSON" })
-}), () => null));
+const parseJsonResult = (text) => {
+	try {
+		return {
+			ok: true,
+			value: JSON.parse(text)
+		};
+	} catch {
+		return { ok: false };
+	}
+};
+const safeJsonParse = (text) => {
+	const result = parseJsonResult(text);
+	return result.ok ? result.value : null;
+};
 
 //#endregion
 //#region src/services/apple-session-store.ts
@@ -1898,6 +1894,43 @@ const analyticsCommand = defineCommand({
 	}
 });
 
+//#endregion
+//#region src/lib/cli-schemas.ts
+const RolloutPercentage = Schema.Number.pipe(Schema.int(), Schema.between(1, 100)).annotations({
+	message: () => "Rollout percentage must be between 1 and 100.",
+	identifier: "RolloutPercentage"
+});
+const KeyValuePair = Schema.Struct({
+	key: Schema.String,
+	value: Schema.String
+});
+const KeyValueFromString = Schema.transformOrFail(Schema.String, KeyValuePair, {
+	strict: true,
+	decode: (input, _options, ast) => {
+		const eqIndex = input.indexOf("=");
+		if (eqIndex <= 0) return ParseResult.fail(new ParseResult.Type(ast, input, "Invalid format. Use KEY=VALUE (e.g. API_KEY=abc123)"));
+		return ParseResult.succeed({
+			key: input.slice(0, eqIndex),
+			value: input.slice(eqIndex + 1)
+		});
+	},
+	encode: ({ key, value }) => ParseResult.succeed(`${key}=${value}`)
+});
+const parseRolloutPercentage = (raw, flag) => Effect.try({
+	try: () => Schema.decodeUnknownSync(RolloutPercentage)(Number(raw)),
+	catch: () => new InvalidArgumentError({ message: `--${flag} must be an integer between 1 and 100, got "${raw}".` })
+});
+const parseKeyValue = (raw) => Effect.try({
+	try: () => Schema.decodeUnknownSync(KeyValueFromString)(raw),
+	catch: () => new InvalidArgumentError({ message: "Invalid format. Use KEY=VALUE (e.g. API_KEY=abc123)" })
+});
+const parseLimit = (raw, defaultValue) => {
+	if (raw === void 0) return Effect.succeed(defaultValue);
+	const parsed = Number(raw);
+	if (!Number.isInteger(parsed) || parsed < 1) return Effect.fail(new InvalidArgumentError({ message: `--limit must be a positive integer, got "${raw}".` }));
+	return Effect.succeed(parsed);
+};
+
 //#endregion
 //#region src/commands/audit-logs/list.ts
 const listCommand$7 = defineCommand({
@@ -1906,18 +1939,10 @@ const listCommand$7 = defineCommand({
 		description: "List audit log entries"
 	},
 	args: {
-		action: {
-			type: "string",
-			description: "Filter by action"
-		},
 		"resource-type": {
 			type: "string",
 			description: "Filter by resource type"
 		},
-		"actor-id": {
-			type: "string",
-			description: "Filter by actor ID"
-		},
 		from: {
 			type: "string",
 			description: "ISO timestamp lower bound"
@@ -1925,20 +1950,23 @@ const listCommand$7 = defineCommand({
 		to: {
 			type: "string",
 			description: "ISO timestamp upper bound"
+		},
+		limit: {
+			type: "string",
+			default: "100",
+			description: "Max rows (default 100)"
 		}
 	},
 	run: async ({ args }) => runEffect(Effect.gen(function* () {
+		const limit = yield* parseLimit(args.limit, 100);
 		const api = yield* apiClient;
 		const filters = {};
-		if (args.action) filters["action"] = args.action;
 		if (args["resource-type"]) filters["resourceType"] = args["resource-type"];
-		if (args["actor-id"]) filters["actorId"] = args["actor-id"];
 		if (args.from) filters["from"] = args.from;
 		if (args.to) filters["to"] = args.to;
 		const { items } = yield* api["audit-logs"].list({ urlParams: {
 			...filters,
-			page: 1,
-			limit: 100
+			limit
 		} });
 		if (items.length === 0) {
 			yield* Console.log("No audit log entries found.");
@@ -1974,6 +2002,25 @@ const auditLogsCommand = defineCommand({
 	subCommands: { list: listCommand$7 }
 });
 
+//#endregion
+//#region src/lib/drain-cursor.ts
+const PAGE_SIZE = 100;
+const MAX_PAGES = 100;
+/**
+* Drain a cursor-paginated list endpoint into a single array. CLI commands
+* that resolve names → IDs (e.g. branch lookup) need the full set, not a
+* page slice.
+*/
+const drainCursor = (fetchPage) => {
+	const loop = (accumulator, cursor, pages) => fetchPage(cursor).pipe(Effect.flatMap((page) => {
+		const next = [...accumulator, ...page.items];
+		const { nextCursor } = page;
+		const reachedLimit = pages + 1 >= MAX_PAGES || next.length >= PAGE_SIZE * MAX_PAGES;
+		return nextCursor === null || reachedLimit ? Effect.succeed(next) : loop(next, nextCursor, pages + 1);
+	}));
+	return loop([], void 0, 0);
+};
+
 //#endregion
 //#region src/commands/branches.ts
 const listCommand$6 = defineCommand({
@@ -1983,11 +2030,12 @@ const listCommand$6 = defineCommand({
 	},
 	run: async () => runEffect(Effect.gen(function* () {
 		const projectId = yield* readProjectId;
-		const { items } = yield* (yield* apiClient).branches.list({ urlParams: {
+		const api = yield* apiClient;
+		const items = yield* drainCursor((cursor) => api.branches.list({ urlParams: {
 			projectId,
-			page: 1,
-			limit: 1e3
-		} });
+			limit: 100,
+			...cursor ? { cursor } : {}
+		} }));
 		if (items.length === 0) {
 			yield* Console.log("No branches found.");
 			return;
@@ -2170,14 +2218,25 @@ const findAndroidArtifact = ({ projectRoot, format, flavor, buildType, minMtimeM
 //#endregion
 //#region ../../packages/encoding/src/index.ts
 const asUint8Array = (data) => data instanceof Uint8Array ? data : new Uint8Array(data);
-const toBinaryString = (data) => [...asUint8Array(data)].map((byte) => String.fromCodePoint(byte)).join("");
+const toBinaryString = (data) => Array.from(asUint8Array(data), (byte) => String.fromCodePoint(byte)).join("");
+const padBase64 = (value) => value.padEnd(value.length + (4 - value.length % 4) % 4, "=");
+const BASE64_PATTERN = /^[A-Za-z0-9+/]*={0,2}$/u;
+const HEX_PATTERN = /^(?:[0-9A-Fa-f]{2})*$/u;
+const normalizeBase64 = (value) => {
+	const compact = value.replaceAll(/\s+/gu, "");
+	if (!BASE64_PATTERN.test(compact) || compact.length % 4 === 1) throw new RangeError("Invalid base64 string");
+	return padBase64(compact);
+};
 const toBase64 = (data) => btoa(toBinaryString(data));
 const fromBase64 = (str) => {
-	const binary = atob(str);
-	return new Uint8Array(Array.from({ length: binary.length }, (_, idx) => binary.codePointAt(idx) ?? 0));
+	const binary = atob(normalizeBase64(str));
+	return Uint8Array.from(binary, (char) => char.codePointAt(0) ?? 0);
 };
 const toBase64Url = (data) => toBase64(data).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/u, "");
-const fromHex = (hex) => new Uint8Array((hex.match(/.{2}/g) ?? []).map((byte) => Number.parseInt(byte, 16)));
+const fromHex = (hex) => {
+	if (!HEX_PATTERN.test(hex)) throw new RangeError("Invalid hex string");
+	return Uint8Array.from(hex.match(/.{2}/gu) ?? [], (byte) => Number.parseInt(byte, 16));
+};
 
 //#endregion
 //#region src/lib/credentials-downloader.ts
@@ -2227,9 +2286,9 @@ const downloadIosCredentials = (api, options) => Effect.gen(function* () {
 		message: "Server returned non-iOS credentials for an iOS build request",
 		hint: bindHint
 	}));
-	const p12Path = `${options.tempDir}/signing.p12`;
+	const p12Path = path.join(options.tempDir, "signing.p12");
 	const profileFilename = `${resolved.provisioningProfile.uuid ?? "profile"}.mobileprovision`;
-	const profilePath = `${options.tempDir}/${profileFilename}`;
+	const profilePath = path.join(options.tempDir, profileFilename);
 	yield* fs.writeFile(p12Path, fromBase64(resolved.distributionCertificate.p12Base64));
 	yield* fs.writeFile(profilePath, fromBase64(resolved.provisioningProfile.mobileprovisionBase64));
 	return {
@@ -2253,7 +2312,7 @@ const downloadAndroidCredentials = (api, options) => Effect.gen(function* () {
 		message: "Server returned non-Android credentials for an Android build request",
 		hint: androidBindHint
 	}));
-	const keystorePath = `${options.tempDir}/upload.keystore`;
+	const keystorePath = path.join(options.tempDir, "upload.keystore");
 	yield* fs.writeFile(keystorePath, fromBase64(resolved.keystore.keystoreBase64));
 	return {
 		keystorePath,
@@ -3287,23 +3346,23 @@ const compatibilityMatrixCommand = defineCommand({
 	run: async () => runEffect(Effect.gen(function* () {
 		const projectId = yield* readProjectId;
 		const result = yield* (yield* apiClient).builds.compatibilityMatrix({ urlParams: { projectId } });
-		if (result.rows.length === 0 && result.missingRuntimeVersions.length === 0) {
+		const matrixKeys = Object.keys(result.channelStatusByKey);
+		if (matrixKeys.length === 0 && result.missingRuntimeVersions.length === 0) {
 			yield* Console.log("No compatibility data found.");
 			return;
 		}
-		if (result.rows.length > 0) {
-			yield* Console.log("Build-to-Channel Compatibility:");
+		const channelLookup = Object.fromEntries(result.channels.map((channel) => [channel.channelId, channel.channelName]));
+		if (matrixKeys.length > 0) {
+			yield* Console.log("Channel Status by (Platform / Runtime Version):");
 			yield* printTable([
-				"Build ID",
-				"Platform",
-				"Runtime Version",
-				"Channels"
-			], result.rows.map((row) => [
-				row.id,
-				row.platform,
-				row.runtimeVersion ?? "-",
-				row.channels.map((channel) => channel.channelName).join(", ") || "-"
-			]));
+				"Platform / Runtime",
+				"Channel",
+				"Updates"
+			], matrixKeys.flatMap((key) => (result.channelStatusByKey[key] ?? []).filter((entry) => entry.updateCount > 0).map((entry) => [
+				key,
+				channelLookup[entry.channelId] ?? entry.channelId,
+				String(entry.updateCount)
+			])));
 		}
 		if (result.missingRuntimeVersions.length > 0) {
 			yield* Console.log("\nMissing Runtime Versions:");
@@ -3393,43 +3452,6 @@ const installLinkCommand = defineCommand({
 	}))
 });
 
-//#endregion
-//#region src/lib/cli-schemas.ts
-const RolloutPercentage = Schema.Number.pipe(Schema.int(), Schema.between(1, 100)).annotations({
-	message: () => "Rollout percentage must be between 1 and 100.",
-	identifier: "RolloutPercentage"
-});
-const KeyValuePair = Schema.Struct({
-	key: Schema.String,
-	value: Schema.String
-});
-const KeyValueFromString = Schema.transformOrFail(Schema.String, KeyValuePair, {
-	strict: true,
-	decode: (input, _options, ast) => {
-		const eqIndex = input.indexOf("=");
-		if (eqIndex <= 0) return ParseResult.fail(new ParseResult.Type(ast, input, "Invalid format. Use KEY=VALUE (e.g. API_KEY=abc123)"));
-		return ParseResult.succeed({
-			key: input.slice(0, eqIndex),
-			value: input.slice(eqIndex + 1)
-		});
-	},
-	encode: ({ key, value }) => ParseResult.succeed(`${key}=${value}`)
-});
-const parseRolloutPercentage = (raw, flag) => Effect.try({
-	try: () => Schema.decodeUnknownSync(RolloutPercentage)(Number(raw)),
-	catch: () => new InvalidArgumentError({ message: `--${flag} must be an integer between 1 and 100, got "${raw}".` })
-});
-const parseKeyValue = (raw) => Effect.try({
-	try: () => Schema.decodeUnknownSync(KeyValueFromString)(raw),
-	catch: () => new InvalidArgumentError({ message: "Invalid format. Use KEY=VALUE (e.g. API_KEY=abc123)" })
-});
-const parseLimit = (raw, defaultValue) => {
-	if (raw === void 0) return Effect.succeed(defaultValue);
-	const parsed = Number(raw);
-	if (!Number.isInteger(parsed) || parsed < 1) return Effect.fail(new InvalidArgumentError({ message: `--limit must be a positive integer, got "${raw}".` }));
-	return Effect.succeed(parsed);
-};
-
 //#endregion
 //#region src/commands/builds/list.ts
 const listCommand$5 = defineCommand({
@@ -3457,7 +3479,6 @@ const listCommand$5 = defineCommand({
 		const { items } = yield* api.builds.list({ urlParams: {
 			projectId,
 			...platformFilter,
-			page: 1,
 			limit
 		} });
 		yield* printTable([
@@ -3664,13 +3685,12 @@ const createCommand$2 = defineCommand({
 	run: async ({ args }) => runEffect(Effect.gen(function* () {
 		const projectId = yield* readProjectId;
 		const api = yield* apiClient;
-		const { items: branches } = yield* api.branches.list({ urlParams: {
-			projectId,
-			page: 1,
-			limit: 1e3
-		} });
 		const branchId = yield* resolveNamedResourceId$1({
-			items: branches,
+			items: yield* drainCursor((cursor) => api.branches.list({ urlParams: {
+				projectId,
+				limit: 100,
+				...cursor ? { cursor } : {}
+			} })),
 			kind: "Branch",
 			name: args.branch
 		});
@@ -3716,15 +3736,15 @@ const listCommand$4 = defineCommand({
 	run: async () => runEffect(Effect.gen(function* () {
 		const projectId = yield* readProjectId;
 		const api = yield* apiClient;
-		const [{ items }, { items: branches }] = yield* Effect.all([api.channels.list({ urlParams: {
+		const [items, branches] = yield* Effect.all([drainCursor((cursor) => api.channels.list({ urlParams: {
 			projectId,
-			page: 1,
-			limit: 1e3
-		} }), api.branches.list({ urlParams: {
+			limit: 100,
+			...cursor ? { cursor } : {}
+		} })), drainCursor((cursor) => api.branches.list({ urlParams: {
 			projectId,
-			page: 1,
-			limit: 1e3
-		} })]);
+			limit: 100,
+			...cursor ? { cursor } : {}
+		} }))]);
 		if (items.length === 0) {
 			yield* Console.log("No channels found.");
 			return;
@@ -3830,13 +3850,12 @@ const createCommand$1 = defineCommand({
 		const percentage = yield* parseRolloutPercentage(args.percentage, "percentage");
 		const projectId = yield* readProjectId;
 		const api = yield* apiClient;
-		const { items: branches } = yield* api.branches.list({ urlParams: {
-			projectId,
-			page: 1,
-			limit: 1e3
-		} });
 		const newBranchId = yield* resolveNamedResourceId$1({
-			items: branches,
+			items: yield* drainCursor((cursor) => api.branches.list({ urlParams: {
+				projectId,
+				limit: 100,
+				...cursor ? { cursor } : {}
+			} })),
 			kind: "Branch",
 			name: args.branch
 		});
@@ -3935,13 +3954,12 @@ const updateCommand$1 = defineCommand({
 	run: async ({ args }) => runEffect(Effect.gen(function* () {
 		const projectId = yield* readProjectId;
 		const api = yield* apiClient;
-		const { items: branches } = yield* api.branches.list({ urlParams: {
-			projectId,
-			page: 1,
-			limit: 1e3
-		} });
 		const branchId = yield* resolveNamedResourceId$1({
-			items: branches,
+			items: yield* drainCursor((cursor) => api.branches.list({ urlParams: {
+				projectId,
+				limit: 100,
+				...cursor ? { cursor } : {}
+			} })),
 			kind: "Branch",
 			name: args.branch
 		});
@@ -4894,9 +4912,9 @@ const openBrowser = (url) => Effect.gen(function* () {
 const browserLogin = Effect.scoped(Effect.gen(function* () {
 	const configStore = yield* ConfigStore;
 	const authStore = yield* AuthStore;
-	const accountsUrl = yield* configStore.getAccountsUrl;
+	const webUrl = yield* configStore.getWebUrl;
 	const loginServer = yield* Effect.acquireRelease(Effect.sync(createBrowserLoginServer), (server) => Effect.sync(server.stop));
-	const loginUrl = `${accountsUrl}/cli-login?callbackUrl=${encodeURIComponent(loginServer.callbackUrl)}`;
+	const loginUrl = `${webUrl}/auth/cli-login?callbackUrl=${encodeURIComponent(loginServer.callbackUrl)}`;
 	yield* Console.log("Opening browser for better-update login...");
 	yield* Console.log("");
 	yield* openBrowser(loginUrl);
@@ -4954,12 +4972,37 @@ const logoutCommand = defineCommand({
 const listCommand$1 = defineCommand({
 	meta: {
 		name: "list",
-		description: "List all projects"
+		description: "List projects (most recently active first)"
 	},
-	run: async () => runEffect(Effect.gen(function* () {
-		const { items } = yield* (yield* apiClient).projects.list({ urlParams: {
-			page: 1,
-			limit: 1e3
+	args: {
+		query: {
+			type: "string",
+			description: "Substring search on name or slug"
+		},
+		sort: {
+			type: "string",
+			description: "Sort key: lastActivityAt (default) or name",
+			default: "lastActivityAt"
+		},
+		limit: {
+			type: "string",
+			description: "Page size (default 50, max 100)",
+			default: "50"
+		},
+		page: {
+			type: "string",
+			description: "1-based page number",
+			default: "1"
+		}
+	},
+	run: async ({ args }) => runEffect(Effect.gen(function* () {
+		const api = yield* apiClient;
+		const sort = args.sort === "name" ? "name" : "lastActivityAt";
+		const { items, total, page } = yield* api.projects.list({ urlParams: {
+			page: Number(args.page),
+			limit: Number(args.limit),
+			sort,
+			...args.query ? { query: args.query } : {}
 		} });
 		if (items.length === 0) {
 			yield* Console.log("No projects found.");
@@ -4969,13 +5012,14 @@ const listCommand$1 = defineCommand({
 			"ID",
 			"Name",
 			"Slug",
-			"Created"
+			"Last activity"
 		], items.map((project) => [
 			project.id,
 			project.name,
 			project.slug,
-			project.createdAt
+			project.lastActivityAt
 		]));
+		yield* Console.log(`Page ${page} · ${items.length} of ${total} project(s)`);
 	}))
 });
 const createCommand = defineCommand({
@@ -5118,7 +5162,8 @@ const statusCommand = defineCommand({
 		yield* Console.log("");
 		yield* Console.log("Builds");
 		yield* Console.log("------");
-		yield* printKeyValue([["Total", String(builds.total)]]);
+		const moreSuffix = builds.nextCursor === null ? "" : "+";
+		yield* printKeyValue([["Recent", `${String(builds.items.length)}${moreSuffix}`]]);
 	}))
 });
 
@@ -5174,11 +5219,11 @@ const listCommand = defineCommand({
 		const limit = yield* parseLimit(args.limit, 20);
 		const projectId = yield* readProjectId;
 		const api = yield* apiClient;
-		const { items: branches } = yield* api.branches.list({ urlParams: {
+		const branches = yield* drainCursor((cursor) => api.branches.list({ urlParams: {
 			projectId,
-			page: 1,
-			limit: 1e3
-		} });
+			limit: 100,
+			...cursor ? { cursor } : {}
+		} }));
 		const branchId = args.branch ? yield* resolveNamedResourceId({
 			items: branches,
 			kind: "Branch",
@@ -5187,7 +5232,6 @@ const listCommand = defineCommand({
 		const { items } = yield* api.updates.list({ urlParams: {
 			projectId,
 			...branchId === void 0 ? {} : { branchId },
-			page: 1,
 			limit
 		} });
 		if (items.length === 0) {