@ship-et/buildatlas-cli 0.12.0 → 0.14.0

package/dist/commands/migrate/eas-client.js

@@ -0,0 +1,186 @@
+/**
+ * Listing an Expo account's EAS projects.
+ *
+ * `meActor` and `app.byId` are proven elsewhere in this repo — BuildAtlas's own
+ * server (`packages/shared/src/expo-auth.ts`) uses both to validate a token and
+ * check project ownership. `account.byName(...).apps` is not proven anywhere in
+ * this repo; it matches the pattern eas-cli itself uses, but if Expo's schema
+ * has drifted this throws the raw GraphQL error rather than a wrong-looking
+ * empty list.
+ */
+const EXPO_GRAPHQL_URL = 'https://api.expo.dev/graphql';
+async function expoGraphQL(auth, query, variables) {
+    let res;
+    try {
+        res = await fetch(EXPO_GRAPHQL_URL, {
+            method: 'POST',
+            headers: {
+                ...(auth.kind === 'token'
+                    ? { authorization: `Bearer ${auth.token}` }
+                    : { 'expo-session': auth.sessionSecret }),
+                'content-type': 'application/json',
+            },
+            body: JSON.stringify({ query, variables }),
+            signal: AbortSignal.timeout(15_000),
+        });
+    }
+    catch (err) {
+        throw new Error(`Could not reach api.expo.dev: ${err.message}`);
+    }
+    if (res.status === 401 || res.status === 403) {
+        throw new Error(auth.kind === 'token' ? 'Expo rejected this token.' : 'Expo rejected this session.');
+    }
+    const body = (await res.json().catch(() => undefined));
+    const error = body?.errors?.[0];
+    if (error)
+        throw new Error(`Expo API: ${error.message ?? 'unknown error'}`);
+    if (!body?.data)
+        throw new Error(`Expo API returned no data (HTTP ${res.status}).`);
+    return body.data;
+}
+/**
+ * The last version Expo submitted to a store for this app, per platform — mirrors
+ * eas-cli's own `AppVersionQuery.latestVersionAsync` query (`latestAppVersionByPlatformAndApplicationIdentifier`).
+ * `applicationIdentifier` is the bundle id (iOS) or package name (Android); Expo
+ * tracks versions per identifier since an app can rebrand its bundle id over time.
+ */
+export async function getLatestBuildVersion(auth, appId, platform, applicationIdentifier) {
+    const { app } = await expoGraphQL(auth, `query LatestAppVersion($appId: String!, $platform: AppPlatform!, $applicationIdentifier: String!) {
+      app {
+        byId(appId: $appId) {
+          id
+          latestAppVersionByPlatformAndApplicationIdentifier(
+            platform: $platform
+            applicationIdentifier: $applicationIdentifier
+          ) {
+            id
+            buildVersion
+          }
+        }
+      }
+    }`, { appId, platform: platform === 'ios' ? 'IOS' : 'ANDROID', applicationIdentifier });
+    const raw = app.byId.latestAppVersionByPlatformAndApplicationIdentifier?.buildVersion;
+    if (!raw)
+        return undefined;
+    const parsed = Number.parseInt(raw, 10);
+    return Number.isFinite(parsed) ? parsed : undefined;
+}
+/**
+ * The bundle id / package name EAS already has on file for this app, read off its
+ * credentials (`appleAppIdentifier.bundleIdentifier`, `androidAppCredentials.applicationIdentifier`)
+ * rather than a local app.json — so migrate works from any directory, not just
+ * the project's own checkout. Empty when the app has never had credentials
+ * generated on EAS for that platform.
+ */
+export async function getAppIdentifiers(auth, appId) {
+    const { app } = await expoGraphQL(auth, `query AppIdentifiers($appId: String!) {
+      app {
+        byId(appId: $appId) {
+          id
+          iosAppCredentials { appleAppIdentifier { bundleIdentifier } }
+          androidAppCredentials { applicationIdentifier }
+        }
+      }
+    }`, { appId });
+    return {
+        bundleIdentifier: app.byId.iosAppCredentials[0]?.appleAppIdentifier.bundleIdentifier,
+        androidPackage: app.byId.androidAppCredentials.find((c) => c.applicationIdentifier)?.applicationIdentifier ?? undefined,
+    };
+}
+/**
+ * The actual signing material EAS holds for this app — a distribution cert
+ * (+ its provisioning profile) for iOS, a keystore for Android, and an APNs
+ * push key if one was ever generated for push notifications — in the same
+ * base64 shape `buildatlas credentials add` already expects (`ios_dist_cert`,
+ * `ios_provisioning_profile`, `android_keystore`, `ios_push_key`), so it can be
+ * forwarded as-is.
+ *
+ * Picks the App Store build credentials for iOS (ad-hoc/enterprise/development
+ * profiles are for internal testing, not what a migrated app should ship with)
+ * and whichever Android keystore is marked default. Omits a platform, or the
+ * push key, entirely rather than guessing when EAS has never generated one.
+ *
+ * The push key is unrelated to whether OneSignal is used: OneSignal does not
+ * read from EAS at all — it needs the same .p8 uploaded to its own dashboard,
+ * which this only pulls into BuildAtlas's vault for safekeeping and for the
+ * worker to warn about when a project looks push-capable but has none stored.
+ */
+export async function getEasCredentials(auth, appId) {
+    const { app } = await expoGraphQL(auth, `query AppCredentials($appId: String!) {
+      app {
+        byId(appId: $appId) {
+          id
+          iosAppCredentials {
+            pushKey { keyIdentifier keyP8 }
+            iosAppBuildCredentialsList {
+              iosDistributionType
+              distributionCertificate { certificateP12 certificatePassword }
+              provisioningProfile { provisioningProfile }
+            }
+          }
+          androidAppCredentials {
+            androidAppBuildCredentialsList {
+              isDefault
+              androidKeystore { keystore keystorePassword keyAlias keyPassword }
+            }
+          }
+        }
+      }
+    }`, { appId });
+    const iosBuildCredentials = app.byId.iosAppCredentials.flatMap((c) => c.iosAppBuildCredentialsList);
+    const iosEntry = iosBuildCredentials.find((c) => c.iosDistributionType === 'APP_STORE' && c.distributionCertificate?.certificateP12) ??
+        iosBuildCredentials.find((c) => c.distributionCertificate?.certificateP12);
+    const androidBuildCredentials = app.byId.androidAppCredentials.flatMap((c) => c.androidAppBuildCredentialsList);
+    const androidEntry = androidBuildCredentials.find((c) => c.isDefault && c.androidKeystore) ??
+        androidBuildCredentials.find((c) => c.androidKeystore);
+    const pushKeyEntry = app.byId.iosAppCredentials.find((c) => c.pushKey)?.pushKey;
+    return {
+        ios: iosEntry?.distributionCertificate?.certificateP12
+            ? {
+                p12Base64: iosEntry.distributionCertificate.certificateP12,
+                password: iosEntry.distributionCertificate.certificatePassword ?? undefined,
+                profileBase64: iosEntry.provisioningProfile?.provisioningProfile ?? undefined,
+            }
+            : undefined,
+        android: androidEntry?.androidKeystore
+            ? {
+                keystoreBase64: androidEntry.androidKeystore.keystore,
+                keystorePassword: androidEntry.androidKeystore.keystorePassword,
+                keyAlias: androidEntry.androidKeystore.keyAlias,
+                keyPassword: androidEntry.androidKeystore.keyPassword ?? undefined,
+            }
+            : undefined,
+        iosPushKey: pushKeyEntry
+            ? { keyId: pushKeyEntry.keyIdentifier, p8Base64: pushKeyEntry.keyP8 }
+            : undefined,
+    };
+}
+/** Every app in every account this token or session can see. */
+export async function listExpoApps(auth) {
+    const { meActor } = await expoGraphQL(auth, `{ meActor { accounts { id name } } }`);
+    if (!meActor)
+        throw new Error('Expo did not recognise this token.');
+    if (meActor.accounts.length === 0)
+        return [];
+    const PAGE_SIZE = 50;
+    const apps = [];
+    for (const account of meActor.accounts) {
+        for (let offset = 0;; offset += PAGE_SIZE) {
+            const { account: acc } = await expoGraphQL(auth, `query AppsForAccount($accountName: String!, $limit: Int!, $offset: Int!) {
+          account {
+            byName(accountName: $accountName) {
+              apps(limit: $limit, offset: $offset) { id name slug fullName }
+            }
+          }
+        }`, { accountName: account.name, limit: PAGE_SIZE, offset });
+            const page = acc.byName?.apps ?? [];
+            for (const app of page) {
+                apps.push({ ...app, accountName: account.name });
+            }
+            if (page.length < PAGE_SIZE)
+                break;
+        }
+    }
+    return apps;
+}
+//# sourceMappingURL=eas-client.js.map

package/dist/commands/migrate/eas-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eas-client.js","sourceRoot":"","sources":["../../../src/commands/migrate/eas-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,gBAAgB,GAAG,8BAA8B,CAAC;AAiBxD,KAAK,UAAU,WAAW,CACxB,IAAc,EACd,KAAa,EACb,SAAmC;IAEnC,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE;YAClC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO;oBACvB,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE;oBAC3C,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC3C,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YAC1C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,iCAAkC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC;IACvG,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAExC,CAAC;IAEd,MAAM,KAAK,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC,IAAI,EAAE,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;IACpF,OAAO,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAc,EACd,KAAa,EACb,QAA2B,EAC3B,qBAA6B;IAE7B,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,WAAW,CAO/B,IAAI,EACJ;;;;;;;;;;;;;MAaE,EACF,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,qBAAqB,EAAE,CACnF,CAAC;IAEF,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,kDAAkD,EAAE,YAAY,CAAC;IACtF,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAc,EACd,KAAa;IAEb,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,WAAW,CAQ/B,IAAI,EACJ;;;;;;;;MAQE,EACF,EAAE,KAAK,EAAE,CACV,CAAC;IAEF,OAAO;QACL,gBAAgB,EAAE,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,gBAAgB;QACpF,cAAc,EAAE,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,EAAE,qBAAqB,IAAI,SAAS;KACxH,CAAC;AACJ,CAAC;AAoBD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAc,EACd,KAAa;IAEb,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,WAAW,CAyB/B,IAAI,EACJ;;;;;;;;;;;;;;;;;;;;MAoBE,EACF,EAAE,KAAK,EAAE,CACV,CAAC;IAEF,MAAM,mBAAmB,GAAG,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;IACpG,MAAM,QAAQ,GACZ,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,KAAK,WAAW,IAAI,CAAC,CAAC,uBAAuB,EAAE,cAAc,CAAC;QACnH,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,uBAAuB,EAAE,cAAc,CAAC,CAAC;IAE7E,MAAM,uBAAuB,GAAG,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC;IAChH,MAAM,YAAY,GAChB,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,eAAe,CAAC;QACrE,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAEzD,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAEhF,OAAO;QACL,GAAG,EAAE,QAAQ,EAAE,uBAAuB,EAAE,cAAc;YACpD,CAAC,CAAC;gBACE,SAAS,EAAE,QAAQ,CAAC,uBAAuB,CAAC,cAAc;gBAC1D,QAAQ,EAAE,QAAQ,CAAC,uBAAuB,CAAC,mBAAmB,IAAI,SAAS;gBAC3E,aAAa,EAAE,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,IAAI,SAAS;aAC9E;YACH,CAAC,CAAC,SAAS;QACb,OAAO,EAAE,YAAY,EAAE,eAAe;YACpC,CAAC,CAAC;gBACE,cAAc,EAAE,YAAY,CAAC,eAAe,CAAC,QAAQ;gBACrD,gBAAgB,EAAE,YAAY,CAAC,eAAe,CAAC,gBAAgB;gBAC/D,QAAQ,EAAE,YAAY,CAAC,eAAe,CAAC,QAAQ;gBAC/C,WAAW,EAAE,YAAY,CAAC,eAAe,CAAC,WAAW,IAAI,SAAS;aACnE;YACH,CAAC,CAAC,SAAS;QACb,UAAU,EAAE,YAAY;YACtB,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,aAAa,EAAE,QAAQ,EAAE,YAAY,CAAC,KAAK,EAAE;YACrE,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAc;IAC/C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,WAAW,CAElC,IAAI,EAAE,sCAAsC,CAAC,CAAC;IAEjD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE7C,MAAM,SAAS,GAAG,EAAE,CAAC;IACrB,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,KAAK,IAAI,MAAM,GAAG,CAAC,GAAI,MAAM,IAAI,SAAS,EAAE,CAAC;YAC3C,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,WAAW,CAOxC,IAAI,EACJ;;;;;;UAME,EACF,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CACxD,CAAC;YACF,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;YACpC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS;gBAAE,MAAM;QACrC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/commands/migrate/expo-session.d.ts

@@ -0,0 +1,10 @@
+/**
+ * An existing EAS/Expo session, or runs `eas login` interactively and reads
+ * the session it leaves behind. Lets this script skip the "paste a personal
+ * access token" step for anyone who already has `eas-cli` set up.
+ */
+export declare function getExpoSession(): Promise<{
+    sessionSecret: string;
+    username?: string;
+}>;
+//# sourceMappingURL=expo-session.d.ts.map

package/dist/commands/migrate/expo-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"expo-session.d.ts","sourceRoot":"","sources":["../../../src/commands/migrate/expo-session.ts"],"names":[],"mappings":"AAqCA;;;;GAIG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAc5F"}

package/dist/commands/migrate/expo-session.js

@@ -0,0 +1,51 @@
+import { spawn } from 'node:child_process';
+import { readFile } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+/**
+ * `eas login` / `expo login` both write here. This is the same file `eas
+ * whoami` reads to work without EXPO_TOKEN — the GraphQL API accepts a
+ * session secret via the `expo-session` header exactly like it accepts a
+ * personal access token via `Authorization: Bearer`.
+ */
+async function readExpoState() {
+    try {
+        const raw = await readFile(join(homedir(), '.expo', 'state.json'), 'utf8');
+        const parsed = JSON.parse(raw);
+        return parsed.auth?.sessionSecret ? parsed.auth : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function runEasLogin() {
+    return new Promise((resolve, reject) => {
+        const child = spawn('npx', ['--yes', 'eas-cli', 'login'], { stdio: 'inherit' });
+        child.on('error', reject);
+        child.on('exit', (code) => {
+            if (code === 0)
+                resolve();
+            else
+                reject(new Error(`\`eas login\` exited with code ${code}`));
+        });
+    });
+}
+/**
+ * An existing EAS/Expo session, or runs `eas login` interactively and reads
+ * the session it leaves behind. Lets this script skip the "paste a personal
+ * access token" step for anyone who already has `eas-cli` set up.
+ */
+export async function getExpoSession() {
+    const existing = await readExpoState();
+    if (existing?.sessionSecret) {
+        return { sessionSecret: existing.sessionSecret, username: existing.username };
+    }
+    console.log('Not logged in to Expo — running `eas login`…');
+    await runEasLogin();
+    const after = await readExpoState();
+    if (!after?.sessionSecret) {
+        throw new Error('`eas login` finished but left no session. Pass --expo-token instead.');
+    }
+    return { sessionSecret: after.sessionSecret, username: after.username };
+}
+//# sourceMappingURL=expo-session.js.map

package/dist/commands/migrate/expo-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expo-session.js","sourceRoot":"","sources":["../../../src/commands/migrate/expo-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAOjC;;;;;GAKG;AACH,KAAK,UAAU,aAAa;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6B,CAAC;QAC3D,OAAO,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAChF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;;gBACrB,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,IAAI,EAAE,CAAC,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,MAAM,QAAQ,GAAG,MAAM,aAAa,EAAE,CAAC;IACvC,IAAI,QAAQ,EAAE,aAAa,EAAE,CAAC;QAC5B,OAAO,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAChF,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;IAC5D,MAAM,WAAW,EAAE,CAAC;IAEpB,MAAM,KAAK,GAAG,MAAM,aAAa,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;AAC1E,CAAC"}

package/dist/commands/migrate/index.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from 'commander';
+export declare function registerMigrateCommand(program: Command): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/commands/migrate/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/migrate/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAkBzC,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA4F7D"}

package/dist/commands/migrate/index.js

@@ -0,0 +1,117 @@
+import { resolve } from 'node:path';
+import pc from 'picocolors';
+import { AtlasApiError, apiRequest } from '../../client.js';
+import { readResolvedAppConfig } from '../../config.js';
+import { withPrompter } from '../../prompt.js';
+import { withSpinner } from '../../spinner.js';
+import { requireAuth } from './auth.js';
+import { continueBuildNumbers } from './build-numbers.js';
+import { migrateCredentials } from './credentials.js';
+import { getAppIdentifiers, listExpoApps } from './eas-client.js';
+import { getExpoSession } from './expo-session.js';
+import { offerToLinkProject } from './link-project.js';
+export function registerMigrateCommand(program) {
+    program
+        .command('migrate')
+        .description('Pick an EAS project and create the matching BuildAtlas project')
+        .option('--expo-token <token>', 'Expo access token. Skips using an `eas login` session.')
+        .option('--slug <slug>', 'BuildAtlas slug to use (default: the EAS project slug)')
+        .option('--dir <path>', 'Project directory to read app.json / app.config from', process.cwd())
+        .action(async (opts) => {
+        await run(async () => {
+            const config = await requireAuth();
+            const dir = resolve(opts.dir);
+            const local = await readResolvedAppConfig(dir);
+            // A token, if given, is the explicit override. Otherwise reuse whatever
+            // `eas login` already set up rather than making someone paste a personal
+            // access token they may not even have handy.
+            const auth = opts.expoToken
+                ? { kind: 'token', token: opts.expoToken }
+                : process.env.EXPO_TOKEN
+                    ? { kind: 'token', token: process.env.EXPO_TOKEN }
+                    : await (async () => {
+                        const session = await getExpoSession();
+                        if (session.username) {
+                            console.log(pc.dim(`  using EAS session for ${session.username}`));
+                        }
+                        return { kind: 'session', sessionSecret: session.sessionSecret };
+                    })();
+            const apps = await withSpinner('fetching EAS projects', () => listExpoApps(auth));
+            if (apps.length === 0)
+                throw new Error('That account has no EAS projects.');
+            const app = await pickApp(apps, local);
+            const slug = opts.slug ?? app.slug;
+            // Local app.json wins when it disagrees — it's the current source of truth for
+            // this checkout — but EAS's own credentials fill in whatever local didn't have,
+            // so migrate doesn't need to run from inside a fully-configured project dir.
+            const remote = await withSpinner('reading EAS credentials', () => getAppIdentifiers(auth, app.id)).catch(() => ({}));
+            const bundleIdentifier = local?.bundleIdentifier ?? remote.bundleIdentifier;
+            const androidPackage = local?.androidPackage ?? remote.androidPackage;
+            const existing = await apiRequest(config, `/projects/${slug}`, {
+                token: config.token,
+            }).catch((err) => {
+                if (err instanceof AtlasApiError && err.code === 'not_found')
+                    return undefined;
+                throw err;
+            });
+            // Either way, end up with a project to migrate credentials into. A project
+            // that already exists is not a reason to stop — it is the common case for
+            // someone re-running `migrate` after rotating a certificate on EAS, and
+            // stopping here used to skip credentials entirely.
+            let project;
+            if (existing) {
+                console.log(`${pc.dim('already exists —')} ${pc.bold(existing.project.slug)}`);
+                project = existing.project;
+            }
+            else {
+                project = (await withSpinner('creating BuildAtlas project', () => apiRequest(config, '/projects', {
+                    method: 'POST',
+                    token: config.token,
+                    body: JSON.stringify({
+                        slug,
+                        name: app.name,
+                        easProjectId: app.id,
+                        bundleIdentifier,
+                        androidPackage,
+                    }),
+                }))).project;
+                console.log(`${pc.green('✔')} created project ${pc.bold(project.slug)} from ${app.fullName}`);
+            }
+            await continueBuildNumbers(config, project.slug, auth, app.id, { bundleIdentifier, androidPackage });
+            await migrateCredentials(config, project.slug, auth, app.id, app.fullName);
+            if (!bundleIdentifier || !androidPackage) {
+                console.log(pc.dim(`  Bundle id / package name were not both found in ${dir} or on EAS — fill in what's ` +
+                    `missing with \`buildatlas projects set --project ${project.slug}\`.`));
+            }
+            await offerToLinkProject(dir, project.slug);
+        });
+    });
+}
+/**
+ * Skips the menu when the directory this ran from already points at one of the
+ * visible apps — matched by EAS project id first, since a slug is only unique
+ * within an account and `app.json` does not say which account it belongs to.
+ */
+async function pickApp(apps, local) {
+    const detected = (local?.easProjectId && apps.find((a) => a.id === local.easProjectId)) ||
+        (local?.slug && apps.find((a) => a.slug === local.slug));
+    if (detected) {
+        console.log(pc.dim(`  detected ${detected.fullName} from app config`));
+        return detected;
+    }
+    return withPrompter(async (p) => {
+        const chosen = await p.select('Which EAS project?', apps.map((a) => ({ value: a.fullName, label: a.fullName, hint: a.name })));
+        return apps.find((a) => a.fullName === chosen);
+    });
+}
+async function run(fn) {
+    try {
+        await fn();
+    }
+    catch (err) {
+        const message = err instanceof AtlasApiError ? `${err.message} (${err.code})` : err.message;
+        console.error(pc.red('✖'), message);
+        process.exitCode = 1;
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/commands/migrate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/migrate/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAA+B,iBAAiB,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/F,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAOvD,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,gEAAgE,CAAC;SAC7E,MAAM,CAAC,sBAAsB,EAAE,wDAAwD,CAAC;SACxF,MAAM,CAAC,eAAe,EAAE,wDAAwD,CAAC;SACjF,MAAM,CAAC,cAAc,EAAE,sDAAsD,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;SAC7F,MAAM,CAAC,KAAK,EAAE,IAAwD,EAAE,EAAE;QACzE,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE;YACnB,MAAM,MAAM,GAAG,MAAM,WAAW,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;YAE/C,wEAAwE;YACxE,yEAAyE;YACzE,6CAA6C;YAC7C,MAAM,IAAI,GAAa,IAAI,CAAC,SAAS;gBACnC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE;gBAC1C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU;oBACtB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE;oBAClD,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;wBAChB,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC;wBACvC,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;4BACrB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,2BAA2B,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;wBACrE,CAAC;wBACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAW,CAAC;oBAC5E,CAAC,CAAC,EAAE,CAAC;YAEX,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;YAClF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YAE5E,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC;YAEnC,+EAA+E;YAC/E,gFAAgF;YAChF,6EAA6E;YAC7E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,yBAAyB,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CACtG,GAAG,EAAE,CAAC,CAAC,EAAE,CAAkD,CAC5D,CAAC;YACF,MAAM,gBAAgB,GAAG,KAAK,EAAE,gBAAgB,IAAI,MAAM,CAAC,gBAAgB,CAAC;YAC5E,MAAM,cAAc,GAAG,KAAK,EAAE,cAAc,IAAI,MAAM,CAAC,cAAc,CAAC;YAEtE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAuB,MAAM,EAAE,aAAa,IAAI,EAAE,EAAE;gBACnF,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACf,IAAI,GAAG,YAAY,aAAa,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW;oBAAE,OAAO,SAAS,CAAC;gBAC/E,MAAM,GAAG,CAAC;YACZ,CAAC,CAAC,CAAC;YAEH,2EAA2E;YAC3E,0EAA0E;YAC1E,wEAAwE;YACxE,mDAAmD;YACnD,IAAI,OAAgB,CAAC;YACrB,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC/E,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,OAAO,GAAG,CACR,MAAM,WAAW,CAAC,6BAA6B,EAAE,GAAG,EAAE,CACpD,UAAU,CAAuB,MAAM,EAAE,WAAW,EAAE;oBACpD,MAAM,EAAE,MAAM;oBACd,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,IAAI;wBACJ,IAAI,EAAE,GAAG,CAAC,IAAI;wBACd,YAAY,EAAE,GAAG,CAAC,EAAE;wBACpB,gBAAgB;wBAChB,cAAc;qBACf,CAAC;iBACH,CAAC,CACH,CACF,CAAC,OAAO,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAChG,CAAC;YAED,MAAM,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC,CAAC;YACrG,MAAM,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YAE3E,IAAI,CAAC,gBAAgB,IAAI,CAAC,cAAc,EAAE,CAAC;gBACzC,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,qDAAqD,GAAG,8BAA8B;oBACpF,oDAAoD,OAAO,CAAC,IAAI,KAAK,CACxE,CACF,CAAC;YACJ,CAAC;YAED,MAAM,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,OAAO,CACpB,IAAe,EACf,KAA2D;IAE3D,MAAM,QAAQ,GACZ,CAAC,KAAK,EAAE,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,YAAY,CAAC,CAAC;QACtE,CAAC,KAAK,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAE3D,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,QAAQ,CAAC,QAAQ,kBAAkB,CAAC,CAAC,CAAC;QACvE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,MAAM,CAC3B,oBAAoB,EACpB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAC1E,CAAC;QACF,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAE,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,EAAuB;IACxC,IAAI,CAAC;QACH,MAAM,EAAE,EAAE,CAAC;IACb,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GACX,GAAG,YAAY,aAAa,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAE,GAAa,CAAC,OAAO,CAAC;QACzF,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;QACpC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/commands/migrate/link-project.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Points a local checkout's `app.json` at the migrated BuildAtlas project, via
+ * the same `expo.extra.buildatlas.project` field `resolveProject` already reads
+ * (config.ts) — so `buildatlas build` and friends work from this directory
+ * without `--project` or `$BUILDATLAS_PROJECT` from here on.
+ *
+ * Only touches a static app.json: a dynamic `app.config.js`/`.ts` is code, not
+ * data, and rewriting it would mean guessing where to inject the field. When
+ * there is no app.json at all — a project configured purely through a dynamic
+ * config — `offerToCreateAppJson` below handles that instead.
+ */
+export declare function offerToLinkProject(dir: string, slug: string): Promise<void>;
+//# sourceMappingURL=link-project.d.ts.map

package/dist/commands/migrate/link-project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-project.d.ts","sourceRoot":"","sources":["../../../src/commands/migrate/link-project.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA6CjF"}

package/dist/commands/migrate/link-project.js

@@ -0,0 +1,74 @@
+import { readFile, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import pc from 'picocolors';
+import { dynamicConfigIn } from '../../config.js';
+import { withPrompter } from '../../prompt.js';
+/**
+ * Points a local checkout's `app.json` at the migrated BuildAtlas project, via
+ * the same `expo.extra.buildatlas.project` field `resolveProject` already reads
+ * (config.ts) — so `buildatlas build` and friends work from this directory
+ * without `--project` or `$BUILDATLAS_PROJECT` from here on.
+ *
+ * Only touches a static app.json: a dynamic `app.config.js`/`.ts` is code, not
+ * data, and rewriting it would mean guessing where to inject the field. When
+ * there is no app.json at all — a project configured purely through a dynamic
+ * config — `offerToCreateAppJson` below handles that instead.
+ */
+export async function offerToLinkProject(dir, slug) {
+    const path = join(dir, 'app.json');
+    const raw = await readFile(path, 'utf8').catch(() => undefined);
+    if (raw === undefined) {
+        await offerToCreateAppJson(dir, path, slug);
+        return;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return;
+    }
+    const expo = parsed.expo ?? {};
+    const current = expo.extra?.buildatlas?.project ?? expo.slug;
+    if (current === slug || !process.stdin.isTTY)
+        return;
+    const link = await withPrompter((p) => p.confirm(`Point app.json at BuildAtlas project "${slug}" for this directory?`, true));
+    if (!link)
+        return;
+    expo.extra = { ...expo.extra, buildatlas: { ...expo.extra?.buildatlas, project: slug } };
+    parsed.expo = expo;
+    await writeFile(path, `${JSON.stringify(parsed, null, 2)}\n`);
+    console.log(`${pc.green('✔')} app.json now points \`buildatlas\` commands at ${pc.bold(slug)}`);
+    // Both files existing is common — an app.config.js/ts that does `import base
+    // from './app.json'` and layers plugins/env on top. resolveProject reads app.json
+    // directly either way, so this write takes effect for `buildatlas` regardless —
+    // but `expo config` itself only sees it if the dynamic config actually spreads
+    // app.json's `extra`, which we cannot check without running that file's code.
+    const dynamic = await dynamicConfigIn(dir);
+    if (dynamic) {
+        console.log(pc.dim(`  Note: ${dynamic} is also here. \`buildatlas\` reads app.json directly, so this ` +
+            `takes effect either way — but if ${dynamic} sets "extra" without spreading ` +
+            `app.json's, \`expo config\` itself won't show it.`));
+    }
+}
+/**
+ * No static app.json — if there's a dynamic app.config instead, editing its
+ * JavaScript isn't safe to automate. But `resolveProject` (config.ts) checks
+ * app.json before it ever evaluates a dynamic config, and its own
+ * `noProjectAdvice` documents exactly this escape hatch: a minimal app.json
+ * holding only the buildatlas link, which reads cleanly alongside app.config.js
+ * without the two ever needing to agree on anything else.
+ */
+async function offerToCreateAppJson(dir, path, slug) {
+    const dynamic = await dynamicConfigIn(dir);
+    if (!dynamic || !process.stdin.isTTY)
+        return;
+    const create = await withPrompter((p) => p.confirm(`No app.json here (found ${dynamic} instead). Create one just to point \`buildatlas\` ` +
+        `commands at project "${slug}"?`, true));
+    if (!create)
+        return;
+    const content = { expo: { extra: { buildatlas: { project: slug } } } };
+    await writeFile(path, `${JSON.stringify(content, null, 2)}\n`);
+    console.log(`${pc.green('✔')} wrote ${pc.bold('app.json')} — \`buildatlas\` commands from here now use ${pc.bold(slug)}`);
+}
+//# sourceMappingURL=link-project.js.map

package/dist/commands/migrate/link-project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-project.js","sourceRoot":"","sources":["../../../src/commands/migrate/link-project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW,EAAE,IAAY;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAEhE,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,OAAO;IACT,CAAC;IAED,IAAI,MAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC;IAC7D,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO;IAErD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CACpC,CAAC,CAAC,OAAO,CAAC,yCAAyC,IAAI,uBAAuB,EAAE,IAAI,CAAC,CACtF,CAAC;IACF,IAAI,CAAC,IAAI;QAAE,OAAO;IAElB,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;IACzF,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,mDAAmD,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEhG,6EAA6E;IAC7E,kFAAkF;IAClF,gFAAgF;IAChF,+EAA+E;IAC/E,8EAA8E;IAC9E,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CACT,EAAE,CAAC,GAAG,CACJ,WAAW,OAAO,iEAAiE;YACjF,oCAAoC,OAAO,kCAAkC;YAC7E,mDAAmD,CACtD,CACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,oBAAoB,CAAC,GAAW,EAAE,IAAY,EAAE,IAAY;IACzE,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO;IAE7C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CACtC,CAAC,CAAC,OAAO,CACP,2BAA2B,OAAO,qDAAqD;QACrF,wBAAwB,IAAI,IAAI,EAClC,IAAI,CACL,CACF,CAAC;IACF,IAAI,CAAC,MAAM;QAAE,OAAO;IAEpB,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC;IACvE,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CACT,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,gDAAgD,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC7G,CAAC;AACJ,CAAC"}

package/dist/commands/migrate/retry.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Runs `fn` under the spinner, and on failure — a dropped connection, a 504 from
+ * a cold worker, anything transient — offers to try again rather than silently
+ * giving up on a step whose only cost of re-running is a few seconds. Skips the
+ * prompt outside a TTY (CI, piped input) since there's no one there to answer it.
+ */
+export declare function withRetry<T>(label: string, fn: () => Promise<T>): Promise<T | undefined>;
+//# sourceMappingURL=retry.d.ts.map

package/dist/commands/migrate/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../../../src/commands/migrate/retry.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAW9F"}

package/dist/commands/migrate/retry.js

@@ -0,0 +1,25 @@
+import pc from 'picocolors';
+import { withPrompter } from '../../prompt.js';
+import { withSpinner } from '../../spinner.js';
+/**
+ * Runs `fn` under the spinner, and on failure — a dropped connection, a 504 from
+ * a cold worker, anything transient — offers to try again rather than silently
+ * giving up on a step whose only cost of re-running is a few seconds. Skips the
+ * prompt outside a TTY (CI, piped input) since there's no one there to answer it.
+ */
+export async function withRetry(label, fn) {
+    for (;;) {
+        try {
+            return await withSpinner(label, fn);
+        }
+        catch (err) {
+            console.log(pc.dim(`  ${label} failed: ${err.message}`));
+            if (!process.stdin.isTTY)
+                return undefined;
+            const retry = await withPrompter((p) => p.confirm('  Try again?', true));
+            if (!retry)
+                return undefined;
+        }
+    }
+}
+//# sourceMappingURL=retry.js.map

package/dist/commands/migrate/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../../../src/commands/migrate/retry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAI,KAAa,EAAE,EAAoB;IACpE,SAAS,CAAC;QACR,IAAI,CAAC;YACH,OAAO,MAAM,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,YAAa,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACpE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;YAC3C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC;YACzE,IAAI,CAAC,KAAK;gBAAE,OAAO,SAAS,CAAC;QAC/B,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/config.d.ts

@@ -37,7 +37,7 @@ export declare function defaultProject(): string | undefined;
 export interface ResolvedProject {
     slug: string;
     /** Where the slug came from. Reported when it was inferred, not stated. */
-    source: 'flag' | 'env' | 'config' | 'app.json' | 'app.config.js';
+    source: 'flag' | 'env' | 'buildatlas.json' | 'config' | 'app.json' | 'app.config.js';
 }
 export interface ExpoConfigValues {
     slug?: string;
@@ -53,6 +53,7 @@ export interface ExpoConfigValues {
 /** Everything a caller might want from the app config, static or dynamic. */
 export declare function readResolvedAppConfig(dir: string): Promise<ExpoConfigValues | undefined>;
 export declare function resolveProject(explicit: string | undefined, dir?: string): Promise<ResolvedProject>;
+export declare function dynamicConfigIn(dir: string): Promise<string | undefined>;
 /**
  * What to tell someone whose directory has no usable static config.
  *

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB;;;;;GAKG;AACH,eAAO,MAAM,eAAe,QAAyE,CAAC;AAEtG;;;GAGG;AACH,QAAA,MAAM,YAAY;;;;iBAIhB,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAEvD,eAAO,MAAM,UAAU,cAAoD,CAAC;AAS5E;;;;;;GAMG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAUhE;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,CAqBvD;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAOnE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,IAAI,MAAM,GAAG,SAAS,CAEnD;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,UAAU,GAAG,eAAe,CAAC;CAClE;AAqFD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8DAA8D;IAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,6EAA6E;AAC7E,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAiB9F;AAED,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,GAAG,GAAE,MAAsB,GAC1B,OAAO,CAAC,eAAe,CAAC,CAgC1B;AAuBD;;;;;;;GAOG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAoBlE"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB;;;;;GAKG;AACH,eAAO,MAAM,eAAe,QAAyE,CAAC;AAEtG;;;GAGG;AACH,QAAA,MAAM,YAAY;;;;iBAIhB,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAEvD,eAAO,MAAM,UAAU,cAAoD,CAAC;AAS5E;;;;;;GAMG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAUhE;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,WAAW,CAAC,CAqBvD;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAOnE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,IAAI,MAAM,GAAG,SAAS,CAEnD;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,iBAAiB,GAAG,QAAQ,GAAG,UAAU,GAAG,eAAe,CAAC;CACtF;AAqFD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8DAA8D;IAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,6EAA6E;AAC7E,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAiB9F;AAED,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,GAAG,GAAE,MAAsB,GAC1B,OAAO,CAAC,eAAe,CAAC,CAwC1B;AAWD,wBAAsB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAU9E;AAED;;;;;;;GAOG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAoBlE"}

package/dist/config.js

@@ -5,6 +5,7 @@ import { dirname, join } from 'node:path';
 import { promisify } from 'node:util';
 import pc from 'picocolors';
 import { z } from 'zod';
+import { readDescriptor } from './build-source.js';
 const execFile = promisify(execFileCb);
 /**
  * The instance this CLI ships pointed at, so a first-time user does not have to type a
@@ -183,6 +184,13 @@ export async function resolveProject(explicit, dir = process.cwd()) {
     const fromEnv = defaultProject();
     if (fromEnv)
         return { slug: fromEnv, source: 'env' };
+    // The descriptor, before the Expo config. `project` here says which BuildAtlas
+    // project this directory builds into; `expo.slug` is a different name for a different
+    // thing that only coincided with it by habit — and a bare React Native or Flutter
+    // project has no Expo config to read at all.
+    const descriptor = await readDescriptor(dir);
+    if (descriptor?.project)
+        return { slug: descriptor.project, source: 'buildatlas.json' };
     // Only app.json. Evaluating a dynamic app.config.js means running the project's
     // own JavaScript just to learn a name, which is not a trade worth making.
     try {
@@ -204,8 +212,9 @@ export async function resolveProject(explicit, dir = process.cwd()) {
     if (dynamic?.slug) {
         return { slug: dynamic.slug, source: 'app.config.js' };
     }
-    throw new Error('No project specified. Pass --project <slug>, set BUILDATLAS_PROJECT, or run this ' +
-        `from a directory whose app.json has an "expo.slug".\n${await noProjectAdvice(dir)}`);
+    throw new Error('No project specified. Add "project" to buildatlas.json, pass --project <slug>, set ' +
+        'BUILDATLAS_PROJECT, or run this from a directory whose app.json has an ' +
+        `"expo.slug".\n${await noProjectAdvice(dir)}`);
 }
 /**
  * The dynamic config filenames Expo accepts, in its own resolution order.
@@ -215,7 +224,7 @@ export async function resolveProject(explicit, dir = process.cwd()) {
  * is exactly what the old message did.
  */
 const DYNAMIC_CONFIGS = ['app.config.ts', 'app.config.js', 'app.config.mjs', 'app.config.cjs'];
-async function dynamicConfigIn(dir) {
+export async function dynamicConfigIn(dir) {
     for (const name of DYNAMIC_CONFIGS) {
         try {
             await readFile(join(dir, name), 'utf8');