liftbay 0.5.2 → 0.7.0

package/dist/index.js

@@ -26526,6 +26526,26 @@ function emit(result) {
 var cliName = () => process.env.LIFTBAY_CLI_NAME ?? (/[\\/]_npx[\\/]/.test(process.argv[1] ?? "") || process.env.npm_command === "exec" ? "npx liftbay" : "liftbay");
 var cmd = (command) => command.replace(/^liftbay\b/, cliName());
 var withCliName = (text2) => cliName() === "liftbay" ? text2 : text2.replace(/`liftbay /g, `\`${cliName()} `);
+function isTransient(e) {
+  if (e instanceof LiftbayApiError) return e.status >= 500 || e.status === 429;
+  const err = e;
+  const code = err?.cause?.code ?? err?.code ?? "";
+  return err?.name === "TypeError" && err.message === "fetch failed" || /^(ECONN|EADDR|ETIMEDOUT|ENOTFOUND|EAI_AGAIN|EPIPE|ENETUNREACH|EHOSTUNREACH|UND_ERR)/.test(code);
+}
+async function poll(fn, onRetry) {
+  const until = Date.now() + 5 * 6e4;
+  for (let attempt = 1; ; attempt++) {
+    try {
+      return await fn();
+    } catch (e) {
+      if (!isTransient(e) || Date.now() > until) throw e;
+      if (attempt === 1) process.stderr.write(`${import_picocolors.default.yellow("!")} Connection to Liftbay lost; retrying\u2026
+`);
+      onRetry?.(attempt);
+      await new Promise((r2) => setTimeout(r2, Math.min(15e3, 1e3 * 2 ** Math.min(attempt, 4))));
+    }
+  }
+}
 function reportError(e) {
   if (json) {
     const error = e instanceof LiftbayApiError ? { code: e.code, message: e.message, status: e.status, fields: e.fields } : e instanceof CliError ? { code: "cli_error", message: e.message } : { code: "internal", message: e instanceof Error ? e.message : String(e) };
@@ -26541,15 +26561,19 @@ function reportError(e) {
   } else console.error(e);
   process.exit(1);
 }
-var isInteractive = () => !json && !!process.stdin.isTTY && !!process.stdout.isTTY && !process.env.CI;
+var promptsOff = false;
+function disablePrompts() {
+  promptsOff = true;
+}
+var isInteractive = () => !json && !promptsOff && !!process.stdin.isTTY && !!process.stdout.isTTY && !process.env.CI;
 function needInteractive(instead) {
   if (!isInteractive()) fail(instead);
 }
 
 // src/commands/auth.ts
-import { spawn } from "child_process";
-import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "fs";
-import { join as join3 } from "path";
+import { spawn as spawn2 } from "child_process";
+import { mkdirSync as mkdirSync2, readFileSync as readFileSync3, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "fs";
+import { join as join4 } from "path";
 
 // node_modules/@clack/core/dist/index.mjs
 import { styleText } from "util";
@@ -27886,29 +27910,279 @@ ${i2}
 }).prompt();
 
 // src/commands/auth.ts
+var import_picocolors3 = __toESM(require_picocolors(), 1);
+
+// src/commands/link.ts
 var import_picocolors2 = __toESM(require_picocolors(), 1);
+
+// src/project.ts
+import { execFile, spawn } from "child_process";
+import { promisify } from "util";
+import { existsSync as existsSync3, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
+import { join as join3 } from "path";
+var execFileAsync = promisify(execFile);
+var CONFIG_FILE = "liftbay.json";
+function readConfig(cwd = process.cwd()) {
+  const path2 = join3(cwd, CONFIG_FILE);
+  return existsSync3(path2) ? JSON.parse(readFileSync2(path2, "utf8")) : null;
+}
+function requireConfig(cwd = process.cwd()) {
+  return readConfig(cwd) ?? fail(`No ${CONFIG_FILE} here. Run \`liftbay init\` in your app's folder.`);
+}
+function writeConfig(config, cwd = process.cwd()) {
+  writeFileSync2(join3(cwd, CONFIG_FILE), `${JSON.stringify({ $schema: "https://liftbay.dev/schema/liftbay.json", ...config }, null, 2)}
+`);
+}
+function readJson(path2) {
+  return existsSync3(path2) ? JSON.parse(readFileSync2(path2, "utf8")) : null;
+}
+function packageManager(cwd = process.cwd()) {
+  if (existsSync3(join3(cwd, "bun.lock")) || existsSync3(join3(cwd, "bun.lockb"))) return "bun";
+  if (existsSync3(join3(cwd, "pnpm-lock.yaml"))) return "pnpm";
+  if (existsSync3(join3(cwd, "yarn.lock"))) return "yarn";
+  return "npm";
+}
+async function output(cmd2, args, cwd = process.cwd()) {
+  const { stdout: stdout2 } = await execFileAsync(cmd2, args, { cwd, encoding: "utf8", maxBuffer: 50 * 1024 * 1024 });
+  return stdout2;
+}
+async function expoConfig(cwd = process.cwd()) {
+  return JSON.parse(await output("npx", ["expo", "config", "--json", "--type", "public"], cwd));
+}
+async function detectApp(cwd = process.cwd()) {
+  const pkg = readJson(join3(cwd, "package.json"));
+  if (!pkg) fail("No package.json here. Run this in your React Native app's folder.");
+  const deps = { ...pkg.dependencies, ...pkg.devDependencies };
+  if (!deps["react-native"]) fail("This doesn't look like a React Native app (react-native is not a dependency).");
+  const hasExpo = !!deps.expo;
+  let name = pkg.name ?? "app";
+  let slug = name;
+  let version = pkg.version ?? null;
+  let bundleId = null;
+  let androidPackage = null;
+  if (hasExpo) {
+    const cfg = await expoConfig(cwd);
+    name = cfg.name ?? name;
+    slug = cfg.slug ?? slug;
+    version = cfg.version ?? version;
+    bundleId = cfg.ios?.bundleIdentifier ?? null;
+    androidPackage = cfg.android?.package ?? null;
+  } else {
+    const gradle = join3(cwd, "android/app/build.gradle");
+    if (existsSync3(gradle)) androidPackage = readFileSync2(gradle, "utf8").match(/applicationId\s+["']([^"']+)["']/)?.[1] ?? null;
+  }
+  return {
+    framework: hasExpo ? "expo" : "react-native",
+    name,
+    slug: String(slug).toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48) || "app",
+    version,
+    bundleId,
+    androidPackage,
+    hasExpoModules: hasExpo,
+    hasExpoUpdates: !!deps["expo-updates"],
+    packageManager: packageManager(cwd),
+    appJson: existsSync3(join3(cwd, "app.json"))
+  };
+}
+async function run(cmd2, args, cwd = process.cwd(), env2 = {}) {
+  const code = await new Promise((resolve4, reject) => {
+    const child = spawn(cmd2, args, { cwd, stdio: "inherit", env: { ...process.env, ...env2 } });
+    child.on("error", reject);
+    child.on("close", resolve4);
+  });
+  if (code !== 0) fail(`\`${cmd2} ${args.join(" ")}\` failed (exit ${code})`);
+}
+async function runQuiet(label, cmd2, args, cwd = process.cwd()) {
+  const spin = spinner();
+  spin.start(label);
+  const lines = [];
+  const code = await new Promise((resolve4, reject) => {
+    const child = spawn(cmd2, args, {
+      cwd,
+      stdio: ["ignore", "pipe", "pipe"],
+      env: { ...process.env, npm_config_audit: "false", npm_config_fund: "false", npm_config_update_notifier: "false" }
+    });
+    const keep = (chunk) => lines.push(...chunk.toString().split(/\r?\n/).filter(Boolean));
+    child.stdout.on("data", keep);
+    child.stderr.on("data", keep);
+    child.on("error", reject);
+    child.on("close", resolve4);
+  });
+  if (code === 0) return spin.stop(label.replace(/^Installing/, "Installed").replace(/^Setting up/, "Set up"));
+  spin.error(`${label} failed`);
+  console.error(lines.slice(-40).join("\n"));
+  fail(`\`${cmd2} ${args.join(" ")}\` failed (exit ${code})`);
+}
+function readAppJson(cwd = process.cwd()) {
+  return readJson(join3(cwd, "app.json"));
+}
+function writeAppJson(data, cwd = process.cwd()) {
+  writeFileSync2(join3(cwd, "app.json"), `${JSON.stringify(data, null, 2)}
+`);
+}
+
+// src/commands/link.ts
+function cancelled(value) {
+  if (isCancel(value)) {
+    cancel("Cancelled");
+    process.exit(0);
+  }
+  return value;
+}
+var slugifyProject = (s) => s.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48);
+var slugify = (s) => s.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40);
+async function createFirstOrg(lb, given) {
+  const me = await unwrap(lb.GET("/v1/auth/me"));
+  const suggested = given ?? (me.user.name?.trim() || me.user.email.split("@")[0]);
+  const name = isInteractive() && !given ? cancelled(await text({ message: "Name your organization", initialValue: suggested, validate: (v) => slugify(v ?? "").length >= 2 ? void 0 : "At least 2 letters or digits" })) : suggested;
+  const base = slugify(name).padEnd(2, "0");
+  for (const slug of [base, `${base.slice(0, 35)}-${Math.random().toString(36).slice(2, 6)}`]) {
+    const res = await lb.POST("/v1/orgs", { body: { name: name.slice(0, 64), slug } });
+    if (res.data) {
+      log.success(`Created organization ${import_picocolors2.default.bold(res.data.name)} ${import_picocolors2.default.dim(`(liftbay.dev/${res.data.slug})`)}`);
+      return res.data;
+    }
+    if (res.response.status !== 409) await unwrap(Promise.resolve(res));
+  }
+  return fail("Couldn't pick a free organization URL. Pass --org <slug>.");
+}
+async function ensureLinked(app, opts) {
+  const existing = readConfig();
+  if (existing) {
+    log.success(`Linked to ${import_picocolors2.default.bold(`${existing.org}/${existing.project}`)}`);
+    return existing;
+  }
+  const lb = client();
+  const orgs = await unwrap(lb.GET("/v1/orgs"));
+  let org;
+  if (opts.newOrg || !orgs.length) {
+    const created = await createFirstOrg(lb, opts.newOrg ?? opts.org);
+    orgs.push(created);
+    org = created.slug;
+  }
+  org ??= opts.org ?? (orgs.length === 1 ? orgs[0].slug : void 0);
+  if (opts.org && !orgs.some((o) => o.slug === org)) fail(`You're not in an organization "${opts.org}" (${orgs.map((o) => o.slug).join(", ")}). To create one, pass --new-org "<name>".`);
+  if (!org) {
+    if (!isInteractive()) fail(`Several organizations available; pass --org (${orgs.map((o) => o.slug).join(", ")})`);
+    org = cancelled(await select({ message: "Organization", options: orgs.map((o) => ({ value: o.slug, label: o.name, hint: o.slug })) }));
+  }
+  const projects = await unwrap(lb.GET("/v1/orgs/{org}/projects", { params: { path: { org } } }));
+  let projectName = opts.projectName;
+  let slug = opts.project ?? (projectName ? slugifyProject(projectName) : void 0);
+  if (!slug) {
+    const match = projects.find((pr) => pr.slug === app.slug);
+    if (opts.yes || !isInteractive()) slug = match?.slug ?? app.slug;
+    else {
+      const taken = projects.some((pr) => pr.slug === app.slug);
+      const choice = cancelled(
+        await select({
+          message: "Liftbay project",
+          options: [
+            ...taken ? [] : [{ value: "__new__", label: `Create "${app.name}"`, hint: `new project \xB7 liftbay.dev/${org}/${app.slug}` }],
+            { value: "__named__", label: "Create a project with another name" },
+            ...projects.map((pr) => ({ value: pr.slug, label: pr.name, hint: `existing \xB7 ${pr.slug}` }))
+          ],
+          initialValue: match?.slug ?? (taken ? "__named__" : "__new__")
+        })
+      );
+      if (choice === "__named__") {
+        projectName = cancelled(
+          await text({
+            message: "Project name",
+            initialValue: app.name,
+            validate: (v) => {
+              const s = slugifyProject(v ?? "");
+              if (s.length < 2) return "At least 2 letters or digits";
+              if (projects.some((pr) => pr.slug === s)) return `${s} already exists: pick it from the list instead`;
+            }
+          })
+        );
+        slug = slugifyProject(projectName);
+      } else slug = choice === "__new__" ? app.slug : choice;
+    }
+  }
+  let project2 = projects.find((pr) => pr.slug === slug);
+  if (!project2) {
+    project2 = await unwrap(
+      lb.POST("/v1/orgs/{org}/projects", {
+        params: { path: { org } },
+        body: { name: projectName ?? app.name, slug, framework: app.framework, bundleId: app.bundleId, androidPackage: app.androidPackage }
+      })
+    );
+    log.success(`Created project ${import_picocolors2.default.bold(`${org}/${project2.slug}`)} with development, preview and production environments`);
+  } else {
+    log.success(`Linked to existing project ${import_picocolors2.default.bold(`${org}/${project2.slug}`)}`);
+  }
+  const config = { org, project: project2.slug, projectId: project2.id };
+  writeConfig(config);
+  log.info(`Wrote ${import_picocolors2.default.cyan(cmd("liftbay.json"))} ${import_picocolors2.default.dim("(commit it: it links this repository to the project)")}`);
+  return config;
+}
+
+// src/commands/auth.ts
 var sleep = (ms) => new Promise((r2) => setTimeout(r2, ms));
 function openBrowser(url) {
   const cmd2 = process.platform === "darwin" ? "open" : process.platform === "win32" ? "cmd" : "xdg-open";
   const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
   try {
-    spawn(cmd2, args, { stdio: "ignore", detached: true }).unref();
+    spawn2(cmd2, args, { stdio: "ignore", detached: true }).unref();
   } catch {
   }
 }
-var PENDING = join3(CONFIG_DIR, "pending-login.json");
+var PENDING = join4(CONFIG_DIR, "pending-login.json");
 function readPending(api) {
   try {
-    const pending = JSON.parse(readFileSync2(PENDING, "utf8"));
+    const pending = JSON.parse(readFileSync3(PENDING, "utf8"));
     return pending.apiUrl === api && Date.parse(pending.expiresAt) > Date.now() + 5e3 ? pending : null;
   } catch {
     return null;
   }
 }
 var clearPending = () => rmSync2(PENDING, { force: true });
+async function loginWithEmail(opts, api, dashboard) {
+  const anon = createLiftbayClient({ baseUrl: api });
+  const email = opts.email.trim();
+  if (!/^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(email)) fail(`"${email}" isn't an email address`);
+  let code = opts.code?.replace(/\s/g, "");
+  if (!code) {
+    await unwrap(anon.POST("/v1/auth/email/start", { body: { email } }));
+    if (!isInteractive()) {
+      log.info(`Sent a 6-digit sign-in code to ${import_picocolors3.default.bold(email)}.`);
+      return {
+        status: "code_sent",
+        email,
+        next: `Ask the person for the 6-digit code from the email, then run: liftbay login --email ${email} --code <code>`
+      };
+    }
+    log.info(`Sent a 6-digit code to ${import_picocolors3.default.bold(email)}. ${import_picocolors3.default.dim("New to Liftbay? Signing in creates your account.")}`);
+    code = cancelled(await text({ message: "Code from the email", validate: (v) => /^\d{6}$/.test((v ?? "").replace(/\s/g, "")) ? void 0 : "Enter the 6-digit code" })).replace(/\s/g, "");
+  }
+  const res = await unwrap(anon.POST("/v1/auth/email/token", { body: { email, code } }));
+  clearPending();
+  saveCredentials({ apiUrl: api, dashboardUrl: dashboard, token: res.token, email: res.user.email });
+  log.success(`Signed in as ${import_picocolors3.default.bold(res.user.email)}`);
+  return { status: "signed_in", user: res.user };
+}
 async function login(opts) {
   const api = opts.apiUrl ?? apiUrl();
   const dashboard = opts.dashboardUrl ?? dashboardUrl();
+  if (opts.code && !opts.email) fail("Pass --email with --code");
+  if (opts.email) return loginWithEmail(opts, api, dashboard);
+  if (isInteractive() && !readPending(api)) {
+    const how = cancelled(
+      await select({
+        message: "How do you want to sign in?",
+        options: [
+          { value: "browser", label: "In the browser", hint: "Google, GitHub or email" },
+          { value: "email", label: "With a code sent to my email", hint: "all in this terminal" }
+        ]
+      })
+    );
+    if (how === "email") {
+      const email = cancelled(await text({ message: "Email", validate: (v) => /^[^@\s]+@[^@\s]+\.[^@\s]+$/.test((v ?? "").trim()) ? void 0 : "Enter your email address" }));
+      return loginWithEmail({ ...opts, email }, api, dashboard);
+    }
+  }
   const anon = createLiftbayClient({ baseUrl: api });
   let pending = readPending(api);
   if (!pending) {
@@ -27923,15 +28197,15 @@ async function login(opts) {
       interval: start.interval
     };
     mkdirSync2(CONFIG_DIR, { recursive: true, mode: 448 });
-    writeFileSync2(PENDING, JSON.stringify(pending), { mode: 384 });
+    writeFileSync3(PENDING, JSON.stringify(pending), { mode: 384 });
     if (opts.open !== false) openBrowser(pending.url);
   }
-  note(`${import_picocolors2.default.bold(pending.userCode)}
+  note(`${import_picocolors3.default.bold(pending.userCode)}
 
-${import_picocolors2.default.dim("Confirm this code in your browser:")}
+${import_picocolors3.default.dim("Confirm this code in your browser:")}
 ${pending.url}`, "Sign in");
   if (opts.wait === false) {
-    log.info(`Approve it in the browser, then run ${import_picocolors2.default.cyan(cmd("liftbay login"))} again to finish.`);
+    log.info(`Approve it in the browser, then run ${import_picocolors3.default.cyan(cmd("liftbay login"))} again to finish.`);
     return { status: "pending", userCode: pending.userCode, url: pending.url, expiresAt: pending.expiresAt, next: "Approve in the browser, then run `liftbay login` to finish signing in" };
   }
   const spin = spinner();
@@ -27941,10 +28215,10 @@ ${pending.url}`, "Sign in");
       const res = await unwrap(anon.POST("/v1/auth/device/token", { body: { deviceCode: pending.deviceCode } }));
       clearPending();
       saveCredentials({ apiUrl: api, dashboardUrl: pending.dashboardUrl, token: res.token, email: res.user.email });
-      spin.stop(`Signed in as ${import_picocolors2.default.bold(res.user.email)}`);
+      spin.stop(`Signed in as ${import_picocolors3.default.bold(res.user.email)}`);
       return { status: "signed_in", user: res.user };
     } catch (e) {
-      if (e instanceof LiftbayApiError && e.code === "authorization_pending") {
+      if (e instanceof LiftbayApiError && e.code === "authorization_pending" || isTransient(e)) {
         await sleep(pending.interval * 1e3);
         continue;
       }
@@ -27975,8 +28249,8 @@ async function whoami() {
     return { kind: "org_token", orgs: orgs.map((o) => ({ slug: o.slug, name: o.name })) };
   }
   const me = await unwrap(client().GET("/v1/auth/me"));
-  console.log(`${import_picocolors2.default.bold(me.user.email)}${me.user.name ? ` (${me.user.name})` : ""}`);
-  for (const m of me.memberships) console.log(`  ${m.orgSlug.padEnd(24)} ${import_picocolors2.default.dim(m.role)}`);
+  console.log(`${import_picocolors3.default.bold(me.user.email)}${me.user.name ? ` (${me.user.name})` : ""}`);
+  for (const m of me.memberships) console.log(`  ${m.orgSlug.padEnd(24)} ${import_picocolors3.default.dim(m.role)}`);
   return { kind: "user", user: me.user, memberships: me.memberships };
 }
 async function ensureSignedIn(opts) {
@@ -27984,13 +28258,15 @@ async function ensureSignedIn(opts) {
     try {
       if (process.env.LIFTBAY_TOKEN) return;
       const me = await unwrap(client().GET("/v1/auth/me"));
-      log.success(`Signed in as ${import_picocolors2.default.bold(me.user.email)}`);
+      log.success(`Signed in as ${import_picocolors3.default.bold(me.user.email)}`);
       return;
     } catch (e) {
       if (!(e instanceof LiftbayApiError && e.status === 401)) throw e;
     }
   }
-  if (!isInteractive()) fail("Not signed in. Run `liftbay login --no-wait`, approve in the browser, run `liftbay login`, then run this again (or set LIFTBAY_TOKEN).");
+  if (!isInteractive()) {
+    fail("Not signed in. Sign in with an email code: `liftbay login --email <address>`, then `liftbay login --email <address> --code <code>` (or approve in the browser: `liftbay login --no-wait`, then `liftbay login`; or set LIFTBAY_TOKEN). Then run this again.");
+  }
   await login(opts);
 }
 
@@ -27998,33 +28274,217 @@ async function ensureSignedIn(opts) {
 var import_picocolors7 = __toESM(require_picocolors(), 1);
 var import_qrcode = __toESM(require_lib(), 1);
 import { execFileSync } from "child_process";
+import { existsSync as existsSync6, mkdirSync as mkdirSync4, readFileSync as readFileSync6, writeFileSync as writeFileSync6 } from "fs";
+import { dirname as dirname3 } from "path";
 
-// src/commands/credentials.ts
-import { chmodSync as chmodSync3, existsSync as existsSync5, readdirSync as readdirSync2, readFileSync as readFileSync5, writeFileSync as writeFileSync5 } from "fs";
-import { basename, dirname as dirname2, extname, join as join6, resolve } from "path";
-var import_picocolors5 = __toESM(require_picocolors(), 1);
+// src/generated/workflow.ts
+var WORKFLOW_YAML = `# Liftbay builds on your own GitHub Actions minutes.
+# Liftbay starts this workflow; it does nothing on your own pushes or pull requests. With this file on the
+# default branch, Liftbay uses workflow_dispatch. Otherwise (a branch you're trying out), Liftbay points a
+# temporary liftbay/build/<platform>/<build id> branch at your commit, which runs this file from that commit,
+# and deletes it once the build has started.
+# The build gets no repository secrets: the runner exchanges this run's GitHub OIDC token for a
+# one-time Liftbay job token, checked against this repository and this workflow file.
+# Docs: https://github.com/liftbay/runner
+name: Liftbay build
+run-name: Liftbay build \${{ inputs.build_id || github.ref_name }}
 
-// src/apple/session.ts
-import { createHash as createHash3 } from "crypto";
-import { chmodSync as chmodSync2, existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, rmSync as rmSync3, writeFileSync as writeFileSync3 } from "fs";
-import { homedir as homedir2 } from "os";
-import { join as join4 } from "path";
+on:
+  workflow_dispatch:
+    inputs:
+      build_id:
+        description: Liftbay build id
+        required: true
+        type: string
+      platform:
+        description: Platform
+        required: true
+        type: choice
+        options: [android, ios]
+      api_url:
+        description: Liftbay API
+        required: false
+        type: string
+        default: https://api.liftbay.dev
+  push:
+    branches: ["liftbay/build/**"]
 
-// src/apple/cookies.ts
-var CookieJar = class {
-  cookies = [];
-  constructor(saved = []) {
-    this.cookies = saved.filter((c2) => !isExpired(c2));
-  }
-  /** Stores every Set-Cookie of a response from `url`. */
-  store(url, setCookies, now = Date.now()) {
-    const { hostname, pathname } = new URL(url);
-    for (const header of setCookies) {
-      const c2 = parse(header, hostname, pathname, now);
-      if (!c2 || !domainMatches(hostname, c2)) continue;
-      this.cookies = this.cookies.filter((o) => !(o.name === c2.name && o.domain === c2.domain && o.path === c2.path));
-      if (!isExpired(c2, now)) this.cookies.push(c2);
-    }
+permissions:
+  contents: read
+  id-token: write
+
+env:
+  # Pinned runner release. The archive's SHA-256 is checked before the runner starts.
+  # Release notes and provenance: https://github.com/liftbay/runner/releases/tag/v0.1.2
+  RUNNER_VERSION: "0.1.2"
+  RUNNER_SHA256_LINUX_AMD64: "9b37bfe534b6dc40f81182bdb9dc46461a672f2c28f048743dc8f13f630909b1"
+  RUNNER_SHA256_DARWIN_ARM64: "301bf09358a47b48df0cdbd6f60edbac1227e4d7f61e037959d4009ed6ae7f27"
+
+jobs:
+  android:
+    if: inputs.platform == 'android' || startsWith(github.ref_name, 'liftbay/build/android/')
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    steps:
+      # GitHub's Linux runners start with about 14 GB free; a React Native release build (NDKs, CMake, four
+      # architectures, Gradle caches) can use more. Remove preinstalled toolchains no app build uses.
+      - name: Free disk space
+        run: |
+          df -h / | tail -1
+          sudo rm -rf /usr/share/dotnet /usr/local/.ghcup /opt/ghc /opt/hostedtoolcache/CodeQL /usr/local/share/boost /usr/share/swift /usr/local/lib/node_modules /usr/local/share/powershell /usr/local/share/chromium /opt/microsoft /opt/google/chrome || true
+          sudo docker image prune --all --force >/dev/null 2>&1 || true
+          df -h / | tail -1
+
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: "17"
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+
+      - name: Cache JavaScript dependencies
+        uses: actions/cache@v4
+        with:
+          path: |
+            node_modules
+            ~/.npm
+            ~/.cache/yarn
+            ~/.local/share/pnpm/store
+            ~/.bun/install/cache
+          key: js-\${{ runner.os }}-\${{ hashFiles('package-lock.json', 'yarn.lock', 'pnpm-lock.yaml', 'bun.lock', 'bun.lockb') }}
+          restore-keys: js-\${{ runner.os }}-
+
+      - name: Cache Gradle
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-\${{ runner.os }}-\${{ hashFiles('package-lock.json', 'yarn.lock', 'pnpm-lock.yaml', 'bun.lock', 'bun.lockb', 'android/**/*.gradle*', 'android/gradle/wrapper/gradle-wrapper.properties') }}
+          restore-keys: gradle-\${{ runner.os }}-
+
+      - name: Install the Liftbay runner
+        env:
+          # Bring your own runner: set the repository variables LIFTBAY_RUNNER_URL (a
+          # liftbay-runner tar.gz you built) and LIFTBAY_RUNNER_SHA256.
+          RUNNER_URL: \${{ vars.LIFTBAY_RUNNER_URL }}
+          RUNNER_SHA256: \${{ vars.LIFTBAY_RUNNER_SHA256 || env.RUNNER_SHA256_LINUX_AMD64 }}
+        run: |
+          set -euo pipefail
+          url="\${RUNNER_URL:-https://github.com/liftbay/runner/releases/download/v\${RUNNER_VERSION}/liftbay-runner_\${RUNNER_VERSION}_linux_amd64.tar.gz}"
+          curl -fsSL --retry 3 -o "$RUNNER_TEMP/liftbay-runner.tar.gz" "$url"
+          echo "\${RUNNER_SHA256}  $RUNNER_TEMP/liftbay-runner.tar.gz" | sha256sum -c -
+          tar -xzf "$RUNNER_TEMP/liftbay-runner.tar.gz" -C "$RUNNER_TEMP" liftbay-runner
+          "$RUNNER_TEMP/liftbay-runner" version
+
+      - name: Build
+        env:
+          LIFTBAY_BUILD_ID: \${{ inputs.build_id }}
+          LIFTBAY_API_URL: \${{ inputs.api_url || vars.LIFTBAY_API_URL || 'https://api.liftbay.dev' }}
+        # On a liftbay/build/<platform>/<build id> branch, the build id is the branch name's last part.
+        run: 'LIFTBAY_BUILD_ID="\${LIFTBAY_BUILD_ID:-\${GITHUB_REF_NAME##*/}}" "$RUNNER_TEMP/liftbay-runner" run'
+
+  ios:
+    if: inputs.platform == 'ios' || startsWith(github.ref_name, 'liftbay/build/ios/')
+    runs-on: macos-15
+    timeout-minutes: 90
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: maxim-lobanov/setup-xcode@v1
+        with:
+          xcode-version: latest-stable
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+
+      - name: Cache JavaScript dependencies
+        uses: actions/cache@v4
+        with:
+          path: |
+            node_modules
+            ~/.npm
+            ~/Library/Caches/Yarn
+            ~/Library/pnpm/store
+            ~/.bun/install/cache
+          key: js-\${{ runner.os }}-\${{ hashFiles('package-lock.json', 'yarn.lock', 'pnpm-lock.yaml', 'bun.lock', 'bun.lockb') }}
+          restore-keys: js-\${{ runner.os }}-
+
+      # Only the download caches: a restored ios/Pods would make expo prebuild see a half project.
+      - name: Cache CocoaPods
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/Library/Caches/CocoaPods
+            ~/.cocoapods
+          key: pods-\${{ runner.os }}-\${{ hashFiles('ios/Podfile.lock', 'package-lock.json', 'yarn.lock', 'pnpm-lock.yaml', 'bun.lock', 'bun.lockb') }}
+          restore-keys: pods-\${{ runner.os }}-
+
+      - name: Install the Liftbay runner
+        env:
+          RUNNER_URL: \${{ vars.LIFTBAY_RUNNER_URL_MACOS }}
+          RUNNER_SHA256: \${{ vars.LIFTBAY_RUNNER_SHA256_MACOS || env.RUNNER_SHA256_DARWIN_ARM64 }}
+        run: |
+          set -euo pipefail
+          url="\${RUNNER_URL:-https://github.com/liftbay/runner/releases/download/v\${RUNNER_VERSION}/liftbay-runner_\${RUNNER_VERSION}_darwin_arm64.tar.gz}"
+          curl -fsSL --retry 3 -o "$RUNNER_TEMP/liftbay-runner.tar.gz" "$url"
+          echo "\${RUNNER_SHA256}  $RUNNER_TEMP/liftbay-runner.tar.gz" | shasum -a 256 -c -
+          tar -xzf "$RUNNER_TEMP/liftbay-runner.tar.gz" -C "$RUNNER_TEMP" liftbay-runner
+          "$RUNNER_TEMP/liftbay-runner" version
+
+      - name: Build
+        env:
+          LIFTBAY_BUILD_ID: \${{ inputs.build_id }}
+          LIFTBAY_API_URL: \${{ inputs.api_url || vars.LIFTBAY_API_URL || 'https://api.liftbay.dev' }}
+        # On a liftbay/build/<platform>/<build id> branch, the build id is the branch name's last part.
+        run: 'LIFTBAY_BUILD_ID="\${LIFTBAY_BUILD_ID:-\${GITHUB_REF_NAME##*/}}" "$RUNNER_TEMP/liftbay-runner" run'
+`;
+
+// src/workflow.ts
+var WORKFLOW_PATH = ".github/workflows/liftbay.yml";
+async function currentWorkflow() {
+  try {
+    const res = await fetch(`${apiUrl()}/v1/github/workflow`, { signal: AbortSignal.timeout(5e3) });
+    if (res.ok) {
+      const body = await res.json();
+      if (typeof body.content === "string" && body.content.includes("liftbay")) return body.content;
+    }
+  } catch {
+  }
+  return WORKFLOW_YAML;
+}
+
+// src/commands/credentials.ts
+import { chmodSync as chmodSync3, existsSync as existsSync5, readdirSync as readdirSync2, readFileSync as readFileSync5, writeFileSync as writeFileSync5 } from "fs";
+import { basename, dirname as dirname2, extname, join as join6, resolve } from "path";
+var import_picocolors5 = __toESM(require_picocolors(), 1);
+
+// src/apple/session.ts
+import { createHash as createHash3 } from "crypto";
+import { chmodSync as chmodSync2, existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync4, rmSync as rmSync3, writeFileSync as writeFileSync4 } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join5 } from "path";
+
+// src/apple/cookies.ts
+var CookieJar = class {
+  cookies = [];
+  constructor(saved = []) {
+    this.cookies = saved.filter((c2) => !isExpired(c2));
+  }
+  /** Stores every Set-Cookie of a response from `url`. */
+  store(url, setCookies, now = Date.now()) {
+    const { hostname, pathname } = new URL(url);
+    for (const header of setCookies) {
+      const c2 = parse(header, hostname, pathname, now);
+      if (!c2 || !domainMatches(hostname, c2)) continue;
+      this.cookies = this.cookies.filter((o) => !(o.name === c2.name && o.domain === c2.domain && o.path === c2.path));
+      if (!isExpired(c2, now)) this.cookies.push(c2);
+    }
   }
   /** The Cookie header for a request to `url`, or "" when none apply. */
   header(url, now = Date.now()) {
@@ -28186,9 +28646,9 @@ var IDMSA = "https://idmsa.apple.com/appleauth";
 var ASC = "https://appstoreconnect.apple.com";
 var PORTALS = ["https://developer.apple.com", "https://developer-mdn.apple.com"];
 var MAX_CODE_ATTEMPTS = 3;
-var sessionDir = (configDir) => configDir ?? join4(process.env.LIFTBAY_CONFIG_DIR ?? join4(homedir2(), ".liftbay"), "apple");
+var sessionDir = (configDir) => configDir ?? join5(process.env.LIFTBAY_CONFIG_DIR ?? join5(homedir2(), ".liftbay"), "apple");
 var accountName = (appleId) => appleId.trim().toLowerCase();
-var sessionFile = (appleId, configDir) => join4(sessionDir(configDir), `${createHash3("sha256").update(accountName(appleId)).digest("hex")}.json`);
+var sessionFile = (appleId, configDir) => join5(sessionDir(configDir), `${createHash3("sha256").update(accountName(appleId)).digest("hex")}.json`);
 var b64 = (b) => Buffer.from(b).toString("base64");
 function serviceError(data) {
   if (!data || typeof data !== "object") return null;
@@ -28211,9 +28671,9 @@ var AppleSession = class _AppleSession {
   /** Signs in (SRP + hashcash + 2FA), reusing a saved session from ~/.liftbay/apple/<sha256(appleId)>.json (0600) when still valid. */
   static async signIn(appleId, prompts, opts = {}) {
     const file2 = sessionFile(appleId, opts.configDir);
-    if (existsSync3(file2)) {
+    if (existsSync4(file2)) {
       try {
-        const saved = JSON.parse(readFileSync3(file2, "utf8"));
+        const saved = JSON.parse(readFileSync4(file2, "utf8"));
         const restored = new _AppleSession(appleId, new CookieJar(saved.cookies), opts);
         if (await restored.fetchOlympus()) {
           opts.log?.(`Using the saved Apple session for ${appleId}`);
@@ -28242,7 +28702,7 @@ var AppleSession = class _AppleSession {
     const dir = sessionDir(this.opts.configDir);
     mkdirSync3(dir, { recursive: true, mode: 448 });
     const file2 = sessionFile(this.appleId, this.opts.configDir);
-    writeFileSync3(file2, JSON.stringify({ appleId: accountName(this.appleId), cookies: this.jar.toJSON() }), { mode: 384 });
+    writeFileSync4(file2, JSON.stringify({ appleId: accountName(this.appleId), cookies: this.jar.toJSON() }), { mode: 384 });
     chmodSync2(file2, 384);
   }
   async login(password2, prompts) {
@@ -28474,120 +28934,14 @@ function apiKeyError(r2) {
   return new AppleAuthError("unexpected", `App Store Connect refused to create an API key (${r2.status})${text2.trim() ? `: ${text2.trim()}` : ""}`);
 }
 
-// src/project.ts
-import { execFile, spawn as spawn2 } from "child_process";
-import { promisify } from "util";
-import { existsSync as existsSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
-import { join as join5 } from "path";
-var execFileAsync = promisify(execFile);
-var CONFIG_FILE = "liftbay.json";
-function readConfig(cwd = process.cwd()) {
-  const path2 = join5(cwd, CONFIG_FILE);
-  return existsSync4(path2) ? JSON.parse(readFileSync4(path2, "utf8")) : null;
-}
-function requireConfig(cwd = process.cwd()) {
-  return readConfig(cwd) ?? fail(`No ${CONFIG_FILE} here. Run \`liftbay init\` in your app's folder.`);
-}
-function writeConfig(config, cwd = process.cwd()) {
-  writeFileSync4(join5(cwd, CONFIG_FILE), `${JSON.stringify({ $schema: "https://liftbay.dev/schema/liftbay.json", ...config }, null, 2)}
-`);
-}
-function readJson(path2) {
-  return existsSync4(path2) ? JSON.parse(readFileSync4(path2, "utf8")) : null;
-}
-function packageManager(cwd = process.cwd()) {
-  if (existsSync4(join5(cwd, "bun.lock")) || existsSync4(join5(cwd, "bun.lockb"))) return "bun";
-  if (existsSync4(join5(cwd, "pnpm-lock.yaml"))) return "pnpm";
-  if (existsSync4(join5(cwd, "yarn.lock"))) return "yarn";
-  return "npm";
-}
-async function output(cmd2, args, cwd = process.cwd()) {
-  const { stdout: stdout2 } = await execFileAsync(cmd2, args, { cwd, encoding: "utf8", maxBuffer: 50 * 1024 * 1024 });
-  return stdout2;
-}
-async function expoConfig(cwd = process.cwd()) {
-  return JSON.parse(await output("npx", ["expo", "config", "--json", "--type", "public"], cwd));
-}
-async function detectApp(cwd = process.cwd()) {
-  const pkg = readJson(join5(cwd, "package.json"));
-  if (!pkg) fail("No package.json here. Run this in your React Native app's folder.");
-  const deps = { ...pkg.dependencies, ...pkg.devDependencies };
-  if (!deps["react-native"]) fail("This doesn't look like a React Native app (react-native is not a dependency).");
-  const hasExpo = !!deps.expo;
-  let name = pkg.name ?? "app";
-  let slug = name;
-  let version = pkg.version ?? null;
-  let bundleId = null;
-  let androidPackage = null;
-  if (hasExpo) {
-    const cfg = await expoConfig(cwd);
-    name = cfg.name ?? name;
-    slug = cfg.slug ?? slug;
-    version = cfg.version ?? version;
-    bundleId = cfg.ios?.bundleIdentifier ?? null;
-    androidPackage = cfg.android?.package ?? null;
-  } else {
-    const gradle = join5(cwd, "android/app/build.gradle");
-    if (existsSync4(gradle)) androidPackage = readFileSync4(gradle, "utf8").match(/applicationId\s+["']([^"']+)["']/)?.[1] ?? null;
-  }
-  return {
-    framework: hasExpo ? "expo" : "react-native",
-    name,
-    slug: String(slug).toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48) || "app",
-    version,
-    bundleId,
-    androidPackage,
-    hasExpoModules: hasExpo,
-    hasExpoUpdates: !!deps["expo-updates"],
-    packageManager: packageManager(cwd),
-    appJson: existsSync4(join5(cwd, "app.json"))
-  };
-}
-async function run(cmd2, args, cwd = process.cwd(), env2 = {}) {
-  const code = await new Promise((resolve4, reject) => {
-    const child = spawn2(cmd2, args, { cwd, stdio: "inherit", env: { ...process.env, ...env2 } });
-    child.on("error", reject);
-    child.on("close", resolve4);
-  });
-  if (code !== 0) fail(`\`${cmd2} ${args.join(" ")}\` failed (exit ${code})`);
-}
-async function runQuiet(label, cmd2, args, cwd = process.cwd()) {
-  const spin = spinner();
-  spin.start(label);
-  const lines = [];
-  const code = await new Promise((resolve4, reject) => {
-    const child = spawn2(cmd2, args, {
-      cwd,
-      stdio: ["ignore", "pipe", "pipe"],
-      env: { ...process.env, npm_config_audit: "false", npm_config_fund: "false", npm_config_update_notifier: "false" }
-    });
-    const keep = (chunk) => lines.push(...chunk.toString().split(/\r?\n/).filter(Boolean));
-    child.stdout.on("data", keep);
-    child.stderr.on("data", keep);
-    child.on("error", reject);
-    child.on("close", resolve4);
-  });
-  if (code === 0) return spin.stop(label.replace(/^Installing/, "Installed").replace(/^Setting up/, "Set up"));
-  spin.error(`${label} failed`);
-  console.error(lines.slice(-40).join("\n"));
-  fail(`\`${cmd2} ${args.join(" ")}\` failed (exit ${code})`);
-}
-function readAppJson(cwd = process.cwd()) {
-  return readJson(join5(cwd, "app.json"));
-}
-function writeAppJson(data, cwd = process.cwd()) {
-  writeFileSync4(join5(cwd, "app.json"), `${JSON.stringify(data, null, 2)}
-`);
-}
-
 // src/prompts.ts
-var import_picocolors3 = __toESM(require_picocolors(), 1);
+var import_picocolors4 = __toESM(require_picocolors(), 1);
 function fit(text2, reserve = 8) {
   const width = Math.max(20, (process.stdout.columns || 80) - reserve);
   const plain = text2.replace(/\x1b\[[0-9;]*m/g, "");
   return plain.length <= width ? text2 : `${plain.slice(0, width - 1)}\u2026`;
 }
-var symbol2 = (state) => state === "submit" ? import_picocolors3.default.green("\u25C7") : state === "cancel" ? import_picocolors3.default.red("\u25A0") : state === "error" ? import_picocolors3.default.yellow("\u25B2") : import_picocolors3.default.cyan("\u25C6");
+var symbol2 = (state) => state === "submit" ? import_picocolors4.default.green("\u25C7") : state === "cancel" ? import_picocolors4.default.red("\u25A0") : state === "error" ? import_picocolors4.default.yellow("\u25B2") : import_picocolors4.default.cyan("\u25C6");
 function checkboxes(opts) {
   const required = opts.required ?? true;
   return new a({
@@ -28599,121 +28953,28 @@ function checkboxes(opts) {
     },
     render() {
       const selected = this.value ?? [];
-      const bar = this.state === "error" ? import_picocolors3.default.yellow("\u2502") : this.state === "submit" || this.state === "cancel" ? import_picocolors3.default.gray("\u2502") : import_picocolors3.default.cyan("\u2502");
-      const title = `${import_picocolors3.default.gray("\u2502")}
+      const bar = this.state === "error" ? import_picocolors4.default.yellow("\u2502") : this.state === "submit" || this.state === "cancel" ? import_picocolors4.default.gray("\u2502") : import_picocolors4.default.cyan("\u2502");
+      const title = `${import_picocolors4.default.gray("\u2502")}
 ${symbol2(this.state)}  ${opts.message}
 `;
       if (this.state === "submit" || this.state === "cancel") {
         const chosen = this.options.filter((o) => selected.includes(o.value)).map((o) => o.label);
-        const text2 = chosen.join(", ") || "none";
-        return `${title}${bar}  ${this.state === "cancel" ? import_picocolors3.default.strikethrough(import_picocolors3.default.dim(text2)) : import_picocolors3.default.dim(text2)}`;
-      }
-      const lines = this.options.map((o, i2) => {
-        const on = selected.includes(o.value);
-        const active = i2 === this.cursor;
-        const box = on ? import_picocolors3.default.green("[\u2714]") : active ? import_picocolors3.default.cyan("[ ]") : import_picocolors3.default.dim("[ ]");
-        const label = active ? import_picocolors3.default.bold(o.label) : o.label;
-        return `${bar}  ${box} ${label}${o.hint ? ` ${import_picocolors3.default.dim(`(${o.hint})`)}` : ""}`;
-      });
-      const footer = this.state === "error" ? `${import_picocolors3.default.yellow("\u2514")}  ${import_picocolors3.default.yellow(this.error)}` : `${import_picocolors3.default.cyan("\u2514")}  ${import_picocolors3.default.dim("\u2191/\u2193 move \xB7 space select \xB7 enter confirm")}`;
-      return `${title}${lines.join("\n")}
-${footer}
-`;
-    }
-  }).prompt();
-}
-
-// src/commands/link.ts
-var import_picocolors4 = __toESM(require_picocolors(), 1);
-function cancelled(value) {
-  if (isCancel(value)) {
-    cancel("Cancelled");
-    process.exit(0);
-  }
-  return value;
-}
-var slugifyProject = (s) => s.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48);
-var slugify = (s) => s.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40);
-async function createFirstOrg(lb, given) {
-  const me = await unwrap(lb.GET("/v1/auth/me"));
-  const suggested = given ?? (me.user.name?.trim() || me.user.email.split("@")[0]);
-  const name = isInteractive() && !given ? cancelled(await text({ message: "Name your organization", initialValue: suggested, validate: (v) => slugify(v ?? "").length >= 2 ? void 0 : "At least 2 letters or digits" })) : suggested;
-  const base = slugify(name).padEnd(2, "0");
-  for (const slug of [base, `${base.slice(0, 35)}-${Math.random().toString(36).slice(2, 6)}`]) {
-    const res = await lb.POST("/v1/orgs", { body: { name: name.slice(0, 64), slug } });
-    if (res.data) {
-      log.success(`Created organization ${import_picocolors4.default.bold(res.data.name)} ${import_picocolors4.default.dim(`(liftbay.dev/${res.data.slug})`)}`);
-      return res.data;
-    }
-    if (res.response.status !== 409) await unwrap(Promise.resolve(res));
-  }
-  return fail("Couldn't pick a free organization URL. Pass --org <slug>.");
-}
-async function ensureLinked(app, opts) {
-  const existing = readConfig();
-  if (existing) {
-    log.success(`Linked to ${import_picocolors4.default.bold(`${existing.org}/${existing.project}`)}`);
-    return existing;
-  }
-  const lb = client();
-  const orgs = await unwrap(lb.GET("/v1/orgs"));
-  if (!orgs.length) orgs.push(await createFirstOrg(lb, opts.org));
-  let org = opts.org ?? (orgs.length === 1 ? orgs[0].slug : void 0);
-  if (!org) {
-    if (!isInteractive()) fail(`Several organizations available; pass --org (${orgs.map((o) => o.slug).join(", ")})`);
-    org = cancelled(await select({ message: "Organization", options: orgs.map((o) => ({ value: o.slug, label: o.name, hint: o.slug })) }));
-  }
-  const projects = await unwrap(lb.GET("/v1/orgs/{org}/projects", { params: { path: { org } } }));
-  let slug = opts.project;
-  let projectName;
-  if (!slug) {
-    const match = projects.find((pr) => pr.slug === app.slug);
-    if (opts.yes || !isInteractive()) slug = match?.slug ?? app.slug;
-    else {
-      const taken = projects.some((pr) => pr.slug === app.slug);
-      const choice = cancelled(
-        await select({
-          message: "Liftbay project",
-          options: [
-            ...taken ? [] : [{ value: "__new__", label: `Create "${app.name}"`, hint: `new project \xB7 liftbay.dev/${org}/${app.slug}` }],
-            { value: "__named__", label: "Create a project with another name" },
-            ...projects.map((pr) => ({ value: pr.slug, label: pr.name, hint: `existing \xB7 ${pr.slug}` }))
-          ],
-          initialValue: match?.slug ?? (taken ? "__named__" : "__new__")
-        })
-      );
-      if (choice === "__named__") {
-        projectName = cancelled(
-          await text({
-            message: "Project name",
-            initialValue: app.name,
-            validate: (v) => {
-              const s = slugifyProject(v ?? "");
-              if (s.length < 2) return "At least 2 letters or digits";
-              if (projects.some((pr) => pr.slug === s)) return `${s} already exists: pick it from the list instead`;
-            }
-          })
-        );
-        slug = slugifyProject(projectName);
-      } else slug = choice === "__new__" ? app.slug : choice;
-    }
-  }
-  let project2 = projects.find((pr) => pr.slug === slug);
-  if (!project2) {
-    project2 = await unwrap(
-      lb.POST("/v1/orgs/{org}/projects", {
-        params: { path: { org } },
-        body: { name: projectName ?? app.name, slug, framework: app.framework, bundleId: app.bundleId, androidPackage: app.androidPackage }
-      })
-    );
-    log.success(`Created project ${import_picocolors4.default.bold(`${org}/${project2.slug}`)} with development, preview and production environments`);
-  } else {
-    log.success(`Linked to existing project ${import_picocolors4.default.bold(`${org}/${project2.slug}`)}`);
-  }
-  const config = { org, project: project2.slug, projectId: project2.id };
-  writeConfig(config);
-  log.info(`Wrote ${import_picocolors4.default.cyan(cmd("liftbay.json"))} ${import_picocolors4.default.dim("(commit it: it links this repository to the project)")}`);
-  return config;
+        const text2 = chosen.join(", ") || "none";
+        return `${title}${bar}  ${this.state === "cancel" ? import_picocolors4.default.strikethrough(import_picocolors4.default.dim(text2)) : import_picocolors4.default.dim(text2)}`;
+      }
+      const lines = this.options.map((o, i2) => {
+        const on = selected.includes(o.value);
+        const active = i2 === this.cursor;
+        const box = on ? import_picocolors4.default.green("[\u2714]") : active ? import_picocolors4.default.cyan("[ ]") : import_picocolors4.default.dim("[ ]");
+        const label = active ? import_picocolors4.default.bold(o.label) : o.label;
+        return `${bar}  ${box} ${label}${o.hint ? ` ${import_picocolors4.default.dim(`(${o.hint})`)}` : ""}`;
+      });
+      const footer = this.state === "error" ? `${import_picocolors4.default.yellow("\u2514")}  ${import_picocolors4.default.yellow(this.error)}` : `${import_picocolors4.default.cyan("\u2514")}  ${import_picocolors4.default.dim("\u2191/\u2193 move \xB7 space select \xB7 enter confirm")}`;
+      return `${title}${lines.join("\n")}
+${footer}
+`;
+    }
+  }).prompt();
 }
 
 // src/commands/credentials.ts
@@ -28992,7 +29253,7 @@ async function waitFor(lb, config, message, done) {
   const until = Date.now() + WAIT_MINUTES * 6e4;
   while (Date.now() < until) {
     await sleep2(4e3);
-    const s = await status(lb, config);
+    const s = await poll(() => status(lb, config));
     if (done(s)) {
       spin.stop(message.replace(/^Waiting for /, "Done: "));
       return s;
@@ -29005,7 +29266,7 @@ async function waitForInstall(lb, config, attempt) {
   const spin = spinner();
   spin.start(fit("Waiting for the GitHub App to be installed"));
   const explain = (text2, spinnerText) => {
-    spin.stop(import_picocolors6.default.dim("\u2026"));
+    spin.clear();
     log.info(text2);
     spin.start(fit(spinnerText));
   };
@@ -29014,7 +29275,7 @@ async function waitForInstall(lb, config, attempt) {
   let last = "waiting";
   while (Date.now() < until) {
     await sleep2(3e3);
-    const a2 = attempt ? (await lb.GET("/v1/orgs/{org}/github/install/{attempt}", { params: { path: { org: config.org, attempt } } })).data : void 0;
+    const a2 = attempt ? (await poll(() => lb.GET("/v1/orgs/{org}/github/install/{attempt}", { params: { path: { org: config.org, attempt } } }))).data : void 0;
     if (a2 && a2.status !== last) {
       last = a2.status;
       if (a2.status === "needs_sign_in") explain("GitHub is done. Sign in to Liftbay in that browser to finish linking.", "Waiting for you to sign in to Liftbay in the browser");
@@ -29023,7 +29284,7 @@ async function waitForInstall(lb, config, attempt) {
         return { ok: false, message: a2.message };
       }
     }
-    const s = await status(lb, config);
+    const s = await poll(() => status(lb, config));
     if (s.connected) {
       spin.stop(`GitHub App installed for ${s.repo}`);
       return { ok: true, status: s };
@@ -29170,9 +29431,91 @@ function pushState(branch) {
     return { upstream: true, ahead: 0 };
   }
 }
+var minutes = (sec) => sec ? sec >= 60 ? `${Math.floor(sec / 60)}m ${sec % 60}s` : `${sec}s` : "";
+function activity(b) {
+  if (b.status === "queued") return b.engine === "xcode-cloud" ? "Waiting for Xcode Cloud" : "Waiting for a runner";
+  if (b.status === "preparing") return "Starting";
+  if (b.status === "uploading") return "Uploading";
+  return b.phases.find((ph) => ph.status === "running")?.name ?? "Building";
+}
+async function followSteps(lb, path2, started) {
+  const tag = (b) => started.length > 1 ? `${b.platform === "ios" ? "iOS" : "Android"} \xB7 ` : "";
+  const shown = new Map(started.map((b) => [b.number, /* @__PURE__ */ new Set()]));
+  const latest = new Map(started.map((b) => [b.number, b]));
+  const runnerSeen = /* @__PURE__ */ new Set();
+  const spin = spinner({ withGuide: false });
+  spin.start(fit(started.map((b) => `${tag(b)}${activity(b)}`).join("   ")));
+  const say = (line) => {
+    spin.clear();
+    process.stdout.write(`${import_picocolors7.default.gray("\u2502")}  ${line}
+`);
+    spin.start(fit(started.map((b) => `${tag(b)}${activity(latest.get(b.number))}`).join("   ")));
+  };
+  for (; ; ) {
+    for (const b of started) {
+      const prev = latest.get(b.number);
+      if (FINISHED.has(prev.status)) continue;
+      const fresh = await poll(() => unwrap(lb.GET("/v1/orgs/{org}/projects/{project}/builds/{number}", { params: { path: { ...path2, number: b.number } } })));
+      latest.set(b.number, fresh);
+      if (fresh.status !== "queued" && !runnerSeen.has(b.number)) {
+        runnerSeen.add(b.number);
+        say(`${import_picocolors7.default.green("\u2714")} ${tag(b)}${fresh.engine === "xcode-cloud" ? "Xcode Cloud started" : "Runner started"}`);
+      }
+      for (const ph of fresh.phases) {
+        if (ph.status === "running" || ph.status === "queued" || shown.get(b.number).has(ph.name)) continue;
+        shown.get(b.number).add(ph.name);
+        const mark = ph.status === "succeeded" ? import_picocolors7.default.green("\u2714") : ph.status === "cancelled" ? import_picocolors7.default.yellow("\u25A0") : import_picocolors7.default.red("\u2716");
+        say(`${mark} ${tag(b)}${ph.name} ${import_picocolors7.default.dim(minutes(ph.durationSec))}`);
+      }
+    }
+    const all = [...latest.values()];
+    if (all.every((b) => FINISHED.has(b.status))) {
+      spin.stop(all.every((b) => b.status === "succeeded") ? "Finished" : "Finished with problems");
+      return all;
+    }
+    spin.message(fit(all.map((b) => `${tag(b)}${FINISHED.has(b.status) ? b.status : activity(b)}`).join("   ")));
+    await sleep3(3e3);
+  }
+}
+async function followLogs(lb, path2, started) {
+  const prefix = started.length > 1;
+  return Promise.all(
+    started.map(async (b) => {
+      let after = 0;
+      let phase = null;
+      for (; ; ) {
+        const page = await poll(() => unwrap(lb.GET("/v1/orgs/{org}/projects/{project}/builds/{number}/logs", { params: { path: { ...path2, number: b.number }, query: { after } } })));
+        for (const l2 of page.lines) {
+          const tag = prefix ? import_picocolors7.default.dim(`${b.platform.padEnd(8)}`) : "";
+          if (l2.phase && l2.phase !== phase) {
+            phase = l2.phase;
+            console.log(`${tag}${import_picocolors7.default.cyan(`==> ${phase}`)}`);
+          }
+          console.log(`${tag}${l2.stream === "stderr" ? import_picocolors7.default.red(l2.text) : l2.stream === "system" ? import_picocolors7.default.dim(l2.text) : l2.text}`);
+        }
+        after = page.nextSeq;
+        if (page.complete) break;
+        if (!page.lines.length) {
+          const fresh = await poll(() => unwrap(lb.GET("/v1/orgs/{org}/projects/{project}/builds/{number}", { params: { path: { ...path2, number: b.number } } })));
+          if (FINISHED.has(fresh.status) && fresh.logLineCount <= after) break;
+          await sleep3(2e3);
+        }
+      }
+      return poll(() => unwrap(lb.GET("/v1/orgs/{org}/projects/{project}/builds/{number}", { params: { path: { ...path2, number: b.number } } })));
+    })
+  );
+}
+async function printLogTail(lb, path2, b, tagged, count = 30) {
+  const after = Math.max(0, b.logLineCount - count);
+  const page = await unwrap(lb.GET("/v1/orgs/{org}/projects/{project}/builds/{number}/logs", { params: { path: { ...path2, number: b.number }, query: { after } } })).catch(() => null);
+  if (!page?.lines.length) return;
+  log.error(`${tagged ? `${b.platform === "ios" ? "iOS" : "Android"} \xB7 ` : ""}build #${b.number} failed. The end of its log:`);
+  console.log(page.lines.slice(-count).map((l2) => l2.stream === "stderr" ? import_picocolors7.default.red(l2.text) : import_picocolors7.default.dim(l2.text)).join("\n"));
+  log.info(`Whole log: ${import_picocolors7.default.cyan(cmd(`liftbay builds logs ${b.number}`))}`);
+}
 var SETUP_FILES = ["liftbay.json", ".github/workflows/liftbay.yml", "app.json", "package.json", "package-lock.json", "yarn.lock", "pnpm-lock.yaml", "bun.lock", "bun.lockb"];
 function git(args) {
-  return execFileSync("git", args, { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] }).trim();
+  return execFileSync("git", args, { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] }).trimEnd();
 }
 function gitLoud(args) {
   try {
@@ -29182,6 +29525,20 @@ function gitLoud(args) {
   }
 }
 async function readyToBuild(branch, interactive) {
+  const wanted = await currentWorkflow();
+  const present = existsSync6(WORKFLOW_PATH) ? readFileSync6(WORKFLOW_PATH, "utf8") : null;
+  if (present !== wanted) {
+    const what = present === null ? `${WORKFLOW_PATH} isn't in this repository` : `${WORKFLOW_PATH} is out of date`;
+    if (!interactive) fail(`${what}. Update it with \`liftbay ci init --yes\`, then commit and push it.`);
+    log.warn(`${what}${present === null ? "" : " (Liftbay changed how builds run)"}.`);
+    if (cancelled(await confirm({ message: present === null ? "Add it?" : "Update it?", initialValue: true }))) {
+      mkdirSync4(dirname3(WORKFLOW_PATH), { recursive: true });
+      writeFileSync6(WORKFLOW_PATH, wanted);
+      log.success(`${present === null ? "Added" : "Updated"} ${WORKFLOW_PATH}`);
+    } else if (present === null) {
+      fail(`Builds need ${WORKFLOW_PATH} on ${branch}. Run \`liftbay ci init\` to add it.`);
+    }
+  }
   const changed = git(["status", "--porcelain", "--", ...SETUP_FILES]).split("\n").filter(Boolean).map((l2) => l2.slice(3).replace(/^"|"$/g, ""));
   if (changed.some((f) => f === "liftbay.json" || f.startsWith(".github/"))) {
     const files = changed.filter((f) => f !== "" && SETUP_FILES.some((s) => f === s || f.startsWith(".github/")));
@@ -29337,32 +29694,8 @@ async function build(opts) {
     outro(`Queued. Follow along in the dashboard, or with ${import_picocolors7.default.cyan(cmd("liftbay builds view <number>"))}.`);
     return { builds: started.map(summary) };
   }
-  const prefix = started.length > 1;
-  const results = await Promise.all(
-    started.map(async (b) => {
-      let after = 0;
-      let phase = null;
-      for (; ; ) {
-        const page = await unwrap(lb.GET("/v1/orgs/{org}/projects/{project}/builds/{number}/logs", { params: { path: { ...path2, number: b.number }, query: { after } } }));
-        for (const l2 of page.lines) {
-          const tag = prefix ? import_picocolors7.default.dim(`${b.platform.padEnd(8)}`) : "";
-          if (l2.phase && l2.phase !== phase) {
-            phase = l2.phase;
-            console.log(`${tag}${import_picocolors7.default.cyan(`==> ${phase}`)}`);
-          }
-          console.log(`${tag}${l2.stream === "stderr" ? import_picocolors7.default.red(l2.text) : l2.stream === "system" ? import_picocolors7.default.dim(l2.text) : l2.text}`);
-        }
-        after = page.nextSeq;
-        if (page.complete) break;
-        if (!page.lines.length) {
-          const fresh = await unwrap(lb.GET("/v1/orgs/{org}/projects/{project}/builds/{number}", { params: { path: { ...path2, number: b.number } } }));
-          if (FINISHED.has(fresh.status) && fresh.logLineCount <= after) break;
-          await sleep3(2e3);
-        }
-      }
-      return unwrap(lb.GET("/v1/orgs/{org}/projects/{project}/builds/{number}", { params: { path: { ...path2, number: b.number } } }));
-    })
-  );
+  const results = opts.logs ? await followLogs(lb, path2, started) : await followSteps(lb, path2, started);
+  for (const r2 of results.filter((r3) => r3.status === "failed")) await printLogTail(lb, path2, r2, started.length > 1);
   const out = [];
   for (const r2 of results) {
     let installUrl = null;
@@ -29389,7 +29722,7 @@ async function build(opts) {
 
 // src/commands/builds.ts
 var import_picocolors8 = __toESM(require_picocolors(), 1);
-import { createWriteStream, mkdirSync as mkdirSync4 } from "fs";
+import { createWriteStream, mkdirSync as mkdirSync5 } from "fs";
 import { join as join7, resolve as resolve2 } from "path";
 import { Readable } from "stream";
 import { pipeline } from "stream/promises";
@@ -29490,7 +29823,7 @@ async function buildsDownload(number, opts) {
   const ready = b.artifacts.filter((a2) => a2.status === "ready" && (!opts.kind || a2.kind === opts.kind));
   if (!ready.length) fail(opts.kind ? `Build #${b.number} has no ready ${opts.kind} artifact` : `Build #${b.number} has no ready artifacts (${b.status})`);
   const dir = resolve2(opts.out ?? ".");
-  mkdirSync4(dir, { recursive: true });
+  mkdirSync5(dir, { recursive: true });
   const files = [];
   for (const a2 of ready) {
     const link = await unwrap(
@@ -29577,7 +29910,7 @@ async function xcodeCloudDisconnect() {
 }
 
 // src/commands/submit.ts
-import { readFileSync as readFileSync6 } from "fs";
+import { readFileSync as readFileSync7 } from "fs";
 var import_picocolors10 = __toESM(require_picocolors(), 1);
 var TRACKS2 = ["internal", "alpha", "beta", "production"];
 var DONE = /* @__PURE__ */ new Set(["succeeded", "failed"]);
@@ -29607,7 +29940,7 @@ async function submit(opts) {
     queued.map(async (s) => {
       let shown = 0;
       for (; ; ) {
-        const d = await unwrap(lb.GET("/v1/orgs/{org}/projects/{project}/submissions/{submission}", { params: { path: { ...path2, submission: s.id } } }));
+        const d = await poll(() => unwrap(lb.GET("/v1/orgs/{org}/projects/{project}/submissions/{submission}", { params: { path: { ...path2, submission: s.id } } })));
         for (const e of d.events.slice(shown)) log.message(`${import_picocolors10.default.dim(s.platform.padEnd(8))}${e.text}`);
         shown = d.events.length;
         if (DONE.has(d.status)) return d;
@@ -29637,7 +29970,7 @@ async function credentialsAndroidCommand(opts) {
   }
   let json2;
   try {
-    json2 = readFileSync6(opts.playKey.replace(/^~/, process.env.HOME ?? "~"), "utf8");
+    json2 = readFileSync7(opts.playKey.replace(/^~/, process.env.HOME ?? "~"), "utf8");
   } catch {
     fail(`Can't read ${opts.playKey}`);
   }
@@ -29688,7 +30021,7 @@ ${reg.url}`, "Scan with the iPhone's camera, or open the link in Safari on it");
   const until = Date.parse(reg.expiresAt);
   while (Date.now() < until) {
     await sleep7(2500);
-    const status2 = await unwrap(lb.GET("/v1/orgs/{org}/devices/registrations/{registration}", { params: { path: { ...org, registration: reg.id } } }));
+    const status2 = await poll(() => unwrap(lb.GET("/v1/orgs/{org}/devices/registrations/{registration}", { params: { path: { ...org, registration: reg.id } } })));
     if (status2.device) {
       spin.stop(`Registered ${import_picocolors11.default.bold(status2.device.name)} ${import_picocolors11.default.dim(`${status2.device.model ?? ""} ${status2.device.udid}`)}`);
       await nextStep(lb);
@@ -29717,171 +30050,16 @@ async function deviceRemove(id) {
 }
 
 // src/commands/setup.ts
-import { existsSync as existsSync7, mkdirSync as mkdirSync5, readFileSync as readFileSync8, writeFileSync as writeFileSync7 } from "fs";
-import { dirname as dirname3 } from "path";
-var import_picocolors13 = __toESM(require_picocolors(), 1);
-
-// src/generated/workflow.ts
-var WORKFLOW_YAML = `# Liftbay builds on your own GitHub Actions minutes.
-# Liftbay starts this workflow; it does nothing on your own pushes or pull requests. With this file on the
-# default branch, Liftbay uses workflow_dispatch. Otherwise (a branch you're trying out), Liftbay points a
-# temporary liftbay/build/<platform>/<build id> branch at your commit, which runs this file from that commit,
-# and deletes it once the build has started.
-# The build gets no repository secrets: the runner exchanges this run's GitHub OIDC token for a
-# one-time Liftbay job token, checked against this repository and this workflow file.
-# Docs: https://github.com/liftbay/runner
-name: Liftbay build
-run-name: Liftbay build \${{ inputs.build_id || github.ref_name }}
-
-on:
-  workflow_dispatch:
-    inputs:
-      build_id:
-        description: Liftbay build id
-        required: true
-        type: string
-      platform:
-        description: Platform
-        required: true
-        type: choice
-        options: [android, ios]
-      api_url:
-        description: Liftbay API
-        required: false
-        type: string
-        default: https://api.liftbay.dev
-  push:
-    branches: ["liftbay/build/**"]
-
-permissions:
-  contents: read
-  id-token: write
-
-env:
-  # Pinned runner release. The archive's SHA-256 is checked before the runner starts.
-  # Release notes and provenance: https://github.com/liftbay/runner/releases/tag/v0.1.2
-  RUNNER_VERSION: "0.1.2"
-  RUNNER_SHA256_LINUX_AMD64: "9b37bfe534b6dc40f81182bdb9dc46461a672f2c28f048743dc8f13f630909b1"
-  RUNNER_SHA256_DARWIN_ARM64: "301bf09358a47b48df0cdbd6f60edbac1227e4d7f61e037959d4009ed6ae7f27"
-
-jobs:
-  android:
-    if: inputs.platform == 'android' || startsWith(github.ref_name, 'liftbay/build/android/')
-    runs-on: ubuntu-latest
-    timeout-minutes: 60
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/setup-java@v4
-        with:
-          distribution: temurin
-          java-version: "17"
-
-      - uses: actions/setup-node@v4
-        with:
-          node-version: "22"
-
-      - name: Cache JavaScript dependencies
-        uses: actions/cache@v4
-        with:
-          path: |
-            node_modules
-            ~/.npm
-            ~/.cache/yarn
-            ~/.local/share/pnpm/store
-            ~/.bun/install/cache
-          key: js-\${{ runner.os }}-\${{ hashFiles('package-lock.json', 'yarn.lock', 'pnpm-lock.yaml', 'bun.lock', 'bun.lockb') }}
-          restore-keys: js-\${{ runner.os }}-
-
-      - name: Cache Gradle
-        uses: actions/cache@v4
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: gradle-\${{ runner.os }}-\${{ hashFiles('package-lock.json', 'yarn.lock', 'pnpm-lock.yaml', 'bun.lock', 'bun.lockb', 'android/**/*.gradle*', 'android/gradle/wrapper/gradle-wrapper.properties') }}
-          restore-keys: gradle-\${{ runner.os }}-
-
-      - name: Install the Liftbay runner
-        env:
-          # Bring your own runner: set the repository variables LIFTBAY_RUNNER_URL (a
-          # liftbay-runner tar.gz you built) and LIFTBAY_RUNNER_SHA256.
-          RUNNER_URL: \${{ vars.LIFTBAY_RUNNER_URL }}
-          RUNNER_SHA256: \${{ vars.LIFTBAY_RUNNER_SHA256 || env.RUNNER_SHA256_LINUX_AMD64 }}
-        run: |
-          set -euo pipefail
-          url="\${RUNNER_URL:-https://github.com/liftbay/runner/releases/download/v\${RUNNER_VERSION}/liftbay-runner_\${RUNNER_VERSION}_linux_amd64.tar.gz}"
-          curl -fsSL --retry 3 -o "$RUNNER_TEMP/liftbay-runner.tar.gz" "$url"
-          echo "\${RUNNER_SHA256}  $RUNNER_TEMP/liftbay-runner.tar.gz" | sha256sum -c -
-          tar -xzf "$RUNNER_TEMP/liftbay-runner.tar.gz" -C "$RUNNER_TEMP" liftbay-runner
-          "$RUNNER_TEMP/liftbay-runner" version
-
-      - name: Build
-        env:
-          LIFTBAY_BUILD_ID: \${{ inputs.build_id }}
-          LIFTBAY_API_URL: \${{ inputs.api_url || vars.LIFTBAY_API_URL || 'https://api.liftbay.dev' }}
-        # On a liftbay/build/<platform>/<build id> branch, the build id is the branch name's last part.
-        run: 'LIFTBAY_BUILD_ID="\${LIFTBAY_BUILD_ID:-\${GITHUB_REF_NAME##*/}}" "$RUNNER_TEMP/liftbay-runner" run'
-
-  ios:
-    if: inputs.platform == 'ios' || startsWith(github.ref_name, 'liftbay/build/ios/')
-    runs-on: macos-15
-    timeout-minutes: 90
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: maxim-lobanov/setup-xcode@v1
-        with:
-          xcode-version: latest-stable
-
-      - uses: actions/setup-node@v4
-        with:
-          node-version: "22"
-
-      - name: Cache JavaScript dependencies
-        uses: actions/cache@v4
-        with:
-          path: |
-            node_modules
-            ~/.npm
-            ~/Library/Caches/Yarn
-            ~/Library/pnpm/store
-            ~/.bun/install/cache
-          key: js-\${{ runner.os }}-\${{ hashFiles('package-lock.json', 'yarn.lock', 'pnpm-lock.yaml', 'bun.lock', 'bun.lockb') }}
-          restore-keys: js-\${{ runner.os }}-
-
-      # Only the download caches: a restored ios/Pods would make expo prebuild see a half project.
-      - name: Cache CocoaPods
-        uses: actions/cache@v4
-        with:
-          path: |
-            ~/Library/Caches/CocoaPods
-            ~/.cocoapods
-          key: pods-\${{ runner.os }}-\${{ hashFiles('ios/Podfile.lock', 'package-lock.json', 'yarn.lock', 'pnpm-lock.yaml', 'bun.lock', 'bun.lockb') }}
-          restore-keys: pods-\${{ runner.os }}-
-
-      - name: Install the Liftbay runner
-        env:
-          RUNNER_URL: \${{ vars.LIFTBAY_RUNNER_URL_MACOS }}
-          RUNNER_SHA256: \${{ vars.LIFTBAY_RUNNER_SHA256_MACOS || env.RUNNER_SHA256_DARWIN_ARM64 }}
-        run: |
-          set -euo pipefail
-          url="\${RUNNER_URL:-https://github.com/liftbay/runner/releases/download/v\${RUNNER_VERSION}/liftbay-runner_\${RUNNER_VERSION}_darwin_arm64.tar.gz}"
-          curl -fsSL --retry 3 -o "$RUNNER_TEMP/liftbay-runner.tar.gz" "$url"
-          echo "\${RUNNER_SHA256}  $RUNNER_TEMP/liftbay-runner.tar.gz" | shasum -a 256 -c -
-          tar -xzf "$RUNNER_TEMP/liftbay-runner.tar.gz" -C "$RUNNER_TEMP" liftbay-runner
-          "$RUNNER_TEMP/liftbay-runner" version
+import { existsSync as existsSync9, mkdirSync as mkdirSync6, readFileSync as readFileSync10, writeFileSync as writeFileSync8 } from "fs";
+import { dirname as dirname4 } from "path";
+var import_picocolors14 = __toESM(require_picocolors(), 1);
 
-      - name: Build
-        env:
-          LIFTBAY_BUILD_ID: \${{ inputs.build_id }}
-          LIFTBAY_API_URL: \${{ inputs.api_url || vars.LIFTBAY_API_URL || 'https://api.liftbay.dev' }}
-        # On a liftbay/build/<platform>/<build id> branch, the build id is the branch name's last part.
-        run: 'LIFTBAY_BUILD_ID="\${LIFTBAY_BUILD_ID:-\${GITHUB_REF_NAME##*/}}" "$RUNNER_TEMP/liftbay-runner" run'
-`;
+// src/commands/answers.ts
+import { existsSync as existsSync8, readdirSync as readdirSync3, readFileSync as readFileSync9 } from "fs";
+var import_picocolors13 = __toESM(require_picocolors(), 1);
 
 // src/commands/env.ts
-import { existsSync as existsSync6, readFileSync as readFileSync7, writeFileSync as writeFileSync6 } from "fs";
+import { existsSync as existsSync7, readFileSync as readFileSync8, writeFileSync as writeFileSync7 } from "fs";
 import { basename as basename2, join as join8, resolve as resolve3 } from "path";
 var import_picocolors12 = __toESM(require_picocolors(), 1);
 var VISIBILITIES = ["plain", "sensitive", "secret"];
@@ -29925,10 +30103,10 @@ function parseVisibility(v) {
 var slugify2 = (name) => name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48) || "default";
 function readEasProfiles(cwd = process.cwd()) {
   const path2 = join8(cwd, "eas.json");
-  if (!existsSync6(path2)) return null;
+  if (!existsSync7(path2)) return null;
   let eas;
   try {
-    eas = JSON.parse(readFileSync7(path2, "utf8"));
+    eas = JSON.parse(readFileSync8(path2, "utf8"));
   } catch {
     fail("eas.json isn't valid JSON");
   }
@@ -30049,7 +30227,7 @@ async function envImport(files, opts) {
   const results = [];
   for (const file2 of files) {
     const abs = resolve3(file2.replace(/^~/, process.env.HOME ?? "~"));
-    if (!existsSync6(abs)) fail(`No file at ${file2}`);
+    if (!existsSync7(abs)) fail(`No file at ${file2}`);
     if (basename2(abs) === "eas.json") {
       const profiles = readEasProfiles(resolve3(abs, ".."));
       if (!profiles.length) fail("eas.json has no build profiles");
@@ -30067,7 +30245,7 @@ async function envImport(files, opts) {
       }
       continue;
     }
-    const { vars, invalid } = parseEnv(readFileSync7(abs, "utf8"));
+    const { vars, invalid } = parseEnv(readFileSync8(abs, "utf8"));
     if (invalid.length) log.warn(`${file2}: skipped unreadable line${invalid.length > 1 ? "s" : ""} ${invalid.join(", ")}`);
     const { slug } = await pickEnvironment(lb, path2, opts.environment, file2);
     const r2 = await importVariables(lb, path2, slug, vars, { visibility, overwrite });
@@ -30086,13 +30264,165 @@ async function envExport(opts) {
 `);
     return { environment: slug, content };
   }
-  if (existsSync6(opts.out) && !opts.force) fail(`${opts.out} exists. Pass --force to overwrite it.`);
-  writeFileSync6(opts.out, `${content.trimEnd()}
+  if (existsSync7(opts.out) && !opts.force) fail(`${opts.out} exists. Pass --force to overwrite it.`);
+  writeFileSync7(opts.out, `${content.trimEnd()}
 `, { mode: 384 });
   log.success(`Wrote ${opts.out} ${import_picocolors12.default.dim("(secret values are not exported)")}`);
   return { environment: slug, file: resolve3(opts.out) };
 }
 
+// src/commands/answers.ts
+var KEYS = ["org", "newOrg", "project", "newProject", "platforms", "iosEngine", "eas", "ota", "runtimePolicy", "envFiles"];
+function readAnswers(path2) {
+  if (!existsSync8(path2)) fail(`No answers file at ${path2}`);
+  let a2;
+  try {
+    a2 = JSON.parse(readFileSync9(path2, "utf8"));
+  } catch {
+    fail(`${path2} isn't valid JSON`);
+  }
+  const problems = [];
+  const unknown = Object.keys(a2).filter((k2) => !KEYS.includes(k2));
+  if (unknown.length) problems.push(`unknown field${unknown.length > 1 ? "s" : ""} ${unknown.join(", ")} (allowed: ${KEYS.join(", ")})`);
+  const str = (k2) => a2[k2] !== void 0 && (typeof a2[k2] !== "string" || !a2[k2].trim()) && problems.push(`${k2} must be a non-empty string`);
+  const bool = (k2) => a2[k2] !== void 0 && typeof a2[k2] !== "boolean" && problems.push(`${k2} must be true or false`);
+  const oneOf = (k2, values) => a2[k2] !== void 0 && !values.includes(a2[k2]) && problems.push(`${k2} must be ${values.join(" or ")}`);
+  ["org", "newOrg", "project", "newProject"].forEach(str);
+  ["eas", "ota"].forEach(bool);
+  oneOf("iosEngine", ["github-actions", "xcode-cloud"]);
+  oneOf("runtimePolicy", ["appVersion", "fingerprint"]);
+  if (a2.org && a2.newOrg) problems.push("give org or newOrg, not both");
+  if (a2.project && a2.newProject) problems.push("give project or newProject, not both");
+  if (a2.platforms !== void 0 && (!Array.isArray(a2.platforms) || !a2.platforms.length || !a2.platforms.every((x) => x === "ios" || x === "android"))) {
+    problems.push(`platforms must be a list of "ios" and/or "android"`);
+  }
+  if (a2.envFiles !== void 0) {
+    const ok = typeof a2.envFiles === "object" && a2.envFiles !== null && Object.values(a2.envFiles).every((v) => Array.isArray(v) && v.every((f) => typeof f === "string"));
+    if (!ok) problems.push(`envFiles must look like { "production": [".env.production"] }`);
+    else for (const f of Object.values(a2.envFiles).flat()) if (!existsSync8(f)) problems.push(`envFiles: no file at ${f}`);
+  }
+  if (problems.length) fail(`${path2}:
+  ${problems.join("\n  ")}`);
+  return a2;
+}
+function answersToOptions(a2) {
+  return {
+    org: a2.org,
+    newOrg: a2.newOrg,
+    project: a2.project,
+    projectName: a2.newProject,
+    platforms: a2.platforms?.join(","),
+    iosEngine: a2.iosEngine,
+    eas: a2.eas,
+    ota: a2.ota,
+    runtimePolicy: a2.runtimePolicy,
+    yes: true
+  };
+}
+async function initQuestions() {
+  const app = await detectApp();
+  const linked = readConfig();
+  const signedIn = !!(process.env.LIFTBAY_TOKEN || readCredentials());
+  let orgs = [];
+  const projects = {};
+  if (signedIn) {
+    const lb = client();
+    orgs = await unwrap(lb.GET("/v1/orgs")).catch(() => []);
+    for (const o of orgs) projects[o.slug] = await unwrap(lb.GET("/v1/orgs/{org}/projects", { params: { path: { org: o.slug } } })).catch(() => []);
+  }
+  const eas = readEasProfiles();
+  const envFiles = readdirSync3(".").filter((f) => /^\.env(\..+)?$/.test(f) && !/\.(example|sample|template)$/.test(f));
+  const policy = readAppJson()?.expo?.runtimeVersion?.policy;
+  const questions = [];
+  if (!linked) {
+    questions.push(
+      orgs.length ? {
+        id: "org",
+        question: "Which Liftbay organization should own this app?",
+        type: "choice",
+        choices: orgs.map((o) => ({ value: o.slug, label: o.name })),
+        default: orgs.length === 1 ? orgs[0].slug : void 0,
+        note: "Or answer newOrg with a name to create another organization."
+      } : {
+        id: "newOrg",
+        question: "What should the new Liftbay organization be called?",
+        type: "text",
+        note: signedIn ? "This account has no organization yet; init creates it." : "Not signed in yet, so existing organizations can't be listed. Sign in first to see them."
+      },
+      {
+        id: "project",
+        question: "Use an existing Liftbay project, or create a new one?",
+        type: "choice",
+        choices: Object.values(projects).flat().map((pr) => ({ value: pr.slug, label: pr.name })),
+        default: void 0,
+        note: `For a new project, answer newProject with its name instead (suggested: "${app.name}").`
+      }
+    );
+  }
+  questions.push({ id: "platforms", question: "Which platforms should Liftbay build?", type: "multi", choices: [{ value: "ios", label: "iOS" }, { value: "android", label: "Android" }], default: ["ios", "android"] });
+  questions.push({
+    id: "iosEngine",
+    question: "Where should iOS store builds run by default?",
+    type: "choice",
+    when: "platforms includes ios",
+    choices: [
+      { value: "github-actions", label: "GitHub Actions (macOS runners on your GitHub minutes; ready now)" },
+      { value: "xcode-cloud", label: "Xcode Cloud (25 free hours a month with the Apple Developer Program; one-time setup after iOS signing)" }
+    ],
+    default: "github-actions"
+  });
+  if (eas?.length) {
+    questions.push({
+      id: "eas",
+      question: `Use eas.json's build profiles (${eas.map((e) => e.name).join(", ")}), their channels and env variables?`,
+      type: "boolean",
+      default: true
+    });
+  }
+  questions.push({ id: "ota", question: "Set up over-the-air updates (expo-updates)?", type: "boolean", default: true });
+  questions.push({
+    id: "runtimePolicy",
+    question: "Which installed apps can receive an update?",
+    type: "choice",
+    when: "ota is true",
+    choices: [
+      { value: "appVersion", label: "Same app version (bump the version when native code changes)" },
+      { value: "fingerprint", label: "Same native fingerprint (computed from native code and config)" }
+    ],
+    default: policy === "fingerprint" ? "fingerprint" : "appVersion"
+  });
+  if (envFiles.length) {
+    questions.push({
+      id: "envFiles",
+      question: `Which of these files should go into which environment? ${envFiles.join(", ")}`,
+      type: "files",
+      default: {},
+      note: 'Like { "production": [".env.production"], "preview": [".env.preview"] }. Files like .env or .env.local often hold local development values: ask before sending them.'
+    });
+  }
+  const example = {
+    ...linked ? {} : orgs.length ? { org: orgs[0].slug } : { newOrg: "Acme" },
+    ...linked ? {} : { newProject: app.name },
+    platforms: ["ios", "android"],
+    iosEngine: "github-actions",
+    ...eas?.length ? { eas: true } : {},
+    ota: true,
+    runtimePolicy: "appVersion"
+  };
+  const next = `Ask the person these questions, write their answers to a JSON file, then run: ${cmd("liftbay init --answers <file> --json")}`;
+  intro(import_picocolors13.default.bgCyan(import_picocolors13.default.black(" liftbay init --questions ")));
+  log.info(`${import_picocolors13.default.bold(app.name)} \xB7 ${app.framework === "expo" ? "Expo" : "React Native"}${app.bundleId ? ` \xB7 ${app.bundleId}` : ""}${linked ? ` \xB7 linked to ${linked.org}/${linked.project}` : ""}`);
+  if (!signedIn) log.warn(`Not signed in: ${cmd("liftbay login")} first to list organizations and projects.`);
+  for (const q of questions) {
+    const choices = q.choices?.length ? `
+${q.choices.map((c2) => `   ${import_picocolors13.default.cyan(c2.value)}  ${import_picocolors13.default.dim(c2.label)}`).join("\n")}` : "";
+    log.message(`${import_picocolors13.default.bold(q.id)}${q.when ? import_picocolors13.default.dim(` (if ${q.when})`) : ""}: ${q.question}${choices}${q.note ? `
+   ${import_picocolors13.default.dim(q.note)}` : ""}`);
+  }
+  outro(next);
+  return { app: { name: app.name, framework: app.framework, bundleId: app.bundleId, androidPackage: app.androidPackage }, linked: linked ? { org: linked.org, project: linked.project } : null, signedIn, questions, example, next };
+}
+
 // src/commands/setup.ts
 var DEFAULT_PROFILES = {
   development: { environment: "development", channel: "development", distribution: "internal" },
@@ -30135,11 +30465,11 @@ async function ciInit(app, config, opts) {
       })
     );
   }
-  if (platforms.includes("ios") && !app.bundleId) log.warn(`No iOS bundle identifier found. Set ${import_picocolors13.default.cyan("expo.ios.bundleIdentifier")} in app.json before the first iOS build.`);
-  if (platforms.includes("android") && !app.androidPackage) log.warn(`No Android package found. Set ${import_picocolors13.default.cyan("expo.android.package")} in app.json before the first Android build.`);
+  if (platforms.includes("ios") && !app.bundleId) log.warn(`No iOS bundle identifier found. Set ${import_picocolors14.default.cyan("expo.ios.bundleIdentifier")} in app.json before the first iOS build.`);
+  if (platforms.includes("android") && !app.androidPackage) log.warn(`No Android package found. Set ${import_picocolors14.default.cyan("expo.android.package")} in app.json before the first Android build.`);
   const path2 = { org: config.org, project: config.project };
   const repo = await githubRepo();
-  if (!repo) log.warn(`No GitHub remote found. Builds run on GitHub Actions: push this app to GitHub, then run ${import_picocolors13.default.cyan(cmd("liftbay ci init"))} again.`);
+  if (!repo) log.warn(`No GitHub remote found. Builds run on GitHub Actions: push this app to GitHub, then run ${import_picocolors14.default.cyan(cmd("liftbay ci init"))} again.`);
   await unwrap(
     lb.PATCH("/v1/orgs/{org}/projects/{project}", {
       params: { path: path2 },
@@ -30167,22 +30497,22 @@ async function ciInit(app, config, opts) {
       printImport(r2);
       imported.push(r2);
     }
-    log.info(import_picocolors13.default.dim("EXPO_PUBLIC_* values are plain (they're in the app bundle); names like *_TOKEN or *_SECRET are secret; the rest sensitive."));
-    log.info(import_picocolors13.default.dim(`Variables kept on expo.dev (EAS environment variables) aren't in eas.json: ${import_picocolors13.default.cyan("npx eas env:pull --environment production")}, then ${import_picocolors13.default.cyan(cmd("liftbay env import .env.local --environment production"))}.`));
+    log.info(import_picocolors14.default.dim("EXPO_PUBLIC_* values are plain (they're in the app bundle); names like *_TOKEN or *_SECRET are secret; the rest sensitive."));
+    log.info(import_picocolors14.default.dim(`Variables kept on expo.dev (EAS environment variables) aren't in eas.json: ${import_picocolors14.default.cyan("npx eas env:pull --environment production")}, then ${import_picocolors14.default.cyan(cmd("liftbay env import .env.local --environment production"))}.`));
   }
   const profiles = Object.fromEntries(Object.entries(base).map(([name, prof]) => [name, { ...prof, platforms }]));
   if (iosEngine) await unwrap(lb.PATCH("/v1/orgs/{org}/projects/{project}", { params: { path: path2 }, body: { iosEngine } }));
   const next = { ...config, build: { profiles, triggers: config.build?.triggers ?? [] } };
   writeConfig(next);
   note(
-    Object.entries(profiles).map(([name, prof]) => `${import_picocolors13.default.bold(name.padEnd(12))} env ${prof.environment.padEnd(12)} ${prof.distribution === "store" ? "store" : "internal"} \xB7 ${prof.platforms.join(", ")}`).join("\n") + (iosEngine ? `
+    Object.entries(profiles).map(([name, prof]) => `${import_picocolors14.default.bold(name.padEnd(12))} env ${prof.environment.padEnd(12)} ${prof.distribution === "store" ? "store" : "internal"} \xB7 ${prof.platforms.join(", ")}`).join("\n") + (iosEngine ? `
 
 iOS store builds run on ${iosEngine === "xcode-cloud" ? "Xcode Cloud" : "GitHub Actions"} (project setting)` : ""),
     "Build profiles"
   );
   if (iosEngine === "xcode-cloud") {
     log.info(
-      `Xcode Cloud makes iOS store builds (TestFlight); internal and simulator builds stay on GitHub Actions. It needs iOS signing first: ${import_picocolors13.default.cyan(cmd("liftbay credentials ios"))}, then ${import_picocolors13.default.cyan(cmd("liftbay xcode-cloud connect"))}.`
+      `Xcode Cloud makes iOS store builds (TestFlight); internal and simulator builds stay on GitHub Actions. It needs iOS signing first: ${import_picocolors14.default.cyan(cmd("liftbay credentials ios"))}, then ${import_picocolors14.default.cyan(cmd("liftbay xcode-cloud connect"))}.`
     );
   }
   lastImport = imported;
@@ -30197,12 +30527,11 @@ async function githubStep() {
   } catch (e) {
     if (!(e instanceof CliError)) throw e;
     log.warn(e.message);
-    log.info(`Finish any time with ${import_picocolors13.default.cyan(cmd("liftbay github connect"))}; ${cmd("liftbay build")} checks it too.`);
+    log.info(`Finish any time with ${import_picocolors14.default.cyan(cmd("liftbay github connect"))}; ${cmd("liftbay build")} checks it too.`);
     return { error: e.message };
   }
 }
 var lastImport = [];
-var WORKFLOW_PATH = ".github/workflows/liftbay.yml";
 async function githubRepo() {
   try {
     const url = (await output("git", ["remote", "get-url", "origin"])).trim();
@@ -30212,16 +30541,17 @@ async function githubRepo() {
   }
 }
 async function writeWorkflow(opts) {
-  const current = existsSync7(WORKFLOW_PATH) ? readFileSync8(WORKFLOW_PATH, "utf8") : null;
-  if (current === WORKFLOW_YAML) return;
+  const wanted = await currentWorkflow();
+  const current = existsSync9(WORKFLOW_PATH) ? readFileSync10(WORKFLOW_PATH, "utf8") : null;
+  if (current === wanted) return;
   if (current !== null) {
     const replace = opts.yes || isInteractive() && cancelled(await confirm({ message: `${WORKFLOW_PATH} differs from the current Liftbay workflow. Replace it?` }));
     if (!replace) return log.info(`Kept your ${WORKFLOW_PATH}.`);
   }
-  mkdirSync5(dirname3(WORKFLOW_PATH), { recursive: true });
-  writeFileSync7(WORKFLOW_PATH, WORKFLOW_YAML);
-  log.success(`Wrote ${import_picocolors13.default.cyan(WORKFLOW_PATH)}. Commit and push it: Liftbay starts it for every build, on your GitHub Actions minutes.`);
-  log.info(import_picocolors13.default.dim("GitHub counts macOS minutes about 10\xD7 faster than Linux; on a private repo with GitHub Free that is roughly 10 iOS builds a month."));
+  mkdirSync6(dirname4(WORKFLOW_PATH), { recursive: true });
+  writeFileSync8(WORKFLOW_PATH, wanted);
+  log.success(`Wrote ${import_picocolors14.default.cyan(WORKFLOW_PATH)}. Commit and push it: Liftbay starts it for every build, on your GitHub Actions minutes.`);
+  log.info(import_picocolors14.default.dim("GitHub counts macOS minutes about 10\xD7 faster than Linux; on a private repo with GitHub Free that is roughly 10 iOS builds a month."));
 }
 var pluginSpec = () => process.env.LIFTBAY_EXPO_PLUGIN_SPEC ?? "@liftbay/expo-plugin";
 async function addDependency(app, spec, label) {
@@ -30260,12 +30590,12 @@ async function otaInit(app, config, opts) {
     if (!env2) fail(`Environment ${prof.environment} not found; run \`liftbay ci init\` first`);
     if (!existing) {
       await unwrap(lb.POST("/v1/orgs/{org}/projects/{project}/channels", { params: { path: path2 }, body: { name: prof.channel, environmentId: env2.id, protocols: ["expo"] } }));
-      log.success(`Created channel ${import_picocolors13.default.bold(prof.channel)} \u2192 ${prof.environment}`);
+      log.success(`Created channel ${import_picocolors14.default.bold(prof.channel)} \u2192 ${prof.environment}`);
     } else if (!existing.protocols.includes("expo")) {
       await unwrap(
         lb.PATCH("/v1/orgs/{org}/projects/{project}/channels/{channel}", { params: { path: { ...path2, channel: prof.channel } }, body: { protocols: [...existing.protocols, "expo"] } })
       );
-      log.success(`Enabled expo-updates on channel ${import_picocolors13.default.bold(prof.channel)}`);
+      log.success(`Enabled expo-updates on channel ${import_picocolors14.default.bold(prof.channel)}`);
     }
   }
   channels2 = await unwrap(lb.GET("/v1/orgs/{org}/projects/{project}/channels", { params: { path: path2 } }));
@@ -30285,24 +30615,24 @@ runtimeVersion: { "policy": "${policy}" }`, "Add to your app config");
     else plugins.push(entry);
     expo.runtimeVersion = { policy };
     writeAppJson(appJson);
-    log.success(`Updated ${import_picocolors13.default.cyan("app.json")}: Liftbay plugin, runtimeVersion policy "${policy}"`);
+    log.success(`Updated ${import_picocolors14.default.cyan("app.json")}: Liftbay plugin, runtimeVersion policy "${policy}"`);
   }
   const next = { ...config, updates: { client: "expo-updates", runtimeVersion: { policy } } };
   writeConfig(next);
   return next;
 }
 async function ciInitCommand(opts) {
-  intro(import_picocolors13.default.bgCyan(import_picocolors13.default.black(" liftbay ci init ")));
+  intro(import_picocolors14.default.bgCyan(import_picocolors14.default.black(" liftbay ci init ")));
   await ensureSignedIn(opts);
   const app = await detectApp();
   const config = await ensureLinked(app, opts);
   const next = await ciInit(app, config, opts);
   const github2 = await githubStep();
-  outro(`Builds are configured. Start one with ${import_picocolors13.default.cyan(cmd("liftbay build"))}`);
+  outro(`Builds are configured. Start one with ${import_picocolors14.default.cyan(cmd("liftbay build"))}`);
   return { config: next, imported: lastImport, github: github2 };
 }
 async function otaInitCommand(opts) {
-  intro(import_picocolors13.default.bgCyan(import_picocolors13.default.black(" liftbay ota init ")));
+  intro(import_picocolors14.default.bgCyan(import_picocolors14.default.black(" liftbay ota init ")));
   await ensureSignedIn(opts);
   const app = await detectApp();
   const config = await ensureLinked(app, opts);
@@ -30313,37 +30643,49 @@ async function otaInitCommand(opts) {
 var nextStepsOta = () => `OTA updates are configured.
 
   1. Build a new binary once (the update URL and channel are baked in)
-  2. Ship JS changes with ${import_picocolors13.default.cyan(cmd("liftbay update publish --channel production"))}`;
+  2. Ship JS changes with ${import_picocolors14.default.cyan(cmd("liftbay update publish --channel production"))}`;
 async function initCommand(opts) {
-  intro(import_picocolors13.default.bgCyan(import_picocolors13.default.black(" liftbay init ")));
+  if (opts.questions) return initQuestions();
+  let envFiles;
+  if (opts.answers) {
+    const answers = readAnswers(opts.answers);
+    Object.assign(opts, answersToOptions(answers));
+    envFiles = answers.envFiles;
+    disablePrompts();
+  }
+  intro(import_picocolors14.default.bgCyan(import_picocolors14.default.black(" liftbay init ")));
   await ensureSignedIn(opts);
   const app = await detectApp();
   log.info(
-    `${import_picocolors13.default.bold(app.name)}: ${app.framework === "expo" ? "Expo" : "React Native"}${app.version ? ` ${app.version}` : ""}${app.bundleId ? ` \xB7 ${app.bundleId}` : ""}${app.androidPackage && app.androidPackage !== app.bundleId ? ` \xB7 ${app.androidPackage}` : ""}`
+    `${import_picocolors14.default.bold(app.name)}: ${app.framework === "expo" ? "Expo" : "React Native"}${app.version ? ` ${app.version}` : ""}${app.bundleId ? ` \xB7 ${app.bundleId}` : ""}${app.androidPackage && app.androidPackage !== app.bundleId ? ` \xB7 ${app.androidPackage}` : ""}`
   );
   let config = await ensureLinked(app, opts);
-  log.step(import_picocolors13.default.bold("1/3  Builds"));
+  log.step(import_picocolors14.default.bold("1/3  Builds"));
   config = await ciInit(app, config, opts);
-  log.step(import_picocolors13.default.bold("2/3  OTA updates"));
+  log.step(import_picocolors14.default.bold("2/3  OTA updates"));
   const wantOta = opts.ota ?? (opts.yes || !isInteractive() ? true : cancelled(await confirm({ message: "Set up over-the-air updates with expo-updates?", initialValue: true })));
   if (wantOta) config = await otaInit(await detectApp(), config, opts);
-  else log.info(`Skipped. Run ${import_picocolors13.default.cyan(cmd("liftbay ota init"))} any time.`);
-  log.step(import_picocolors13.default.bold("3/3  GitHub"));
+  else log.info(`Skipped. Run ${import_picocolors14.default.cyan(cmd("liftbay ota init"))} any time.`);
+  const imported = [];
+  for (const [environment, files] of Object.entries(envFiles ?? {})) {
+    if (files.length) imported.push(...(await envImport(files, { environment })).imported);
+  }
+  log.step(import_picocolors14.default.bold("3/3  GitHub"));
   const github2 = await githubStep();
   outro(
     [
-      `Done. ${import_picocolors13.default.dim(`${dashboardUrl()}/${config.org}/${config.project}`)}`,
+      `Done. ${import_picocolors14.default.dim(`${dashboardUrl()}/${config.org}/${config.project}`)}`,
       "",
       "  Next:",
-      `  1. Build:   ${import_picocolors13.default.cyan(cmd("liftbay build"))} ${import_picocolors13.default.dim("(offers to commit the setup and push this branch)")}`,
-      ...wantOta ? [`  2. Update:  ${import_picocolors13.default.cyan(cmd("liftbay update publish --channel preview"))} ${import_picocolors13.default.dim("(after a build from this setup is installed)")}`] : [],
-      ...cmd("liftbay") !== "liftbay" ? ["", import_picocolors13.default.dim(`  Tip: ${import_picocolors13.default.cyan("npm i -g liftbay")} to type ${import_picocolors13.default.cyan("liftbay")} instead of ${import_picocolors13.default.cyan("npx liftbay")}.`)] : []
+      `  1. Build:   ${import_picocolors14.default.cyan(cmd("liftbay build"))} ${import_picocolors14.default.dim("(offers to commit the setup and push this branch)")}`,
+      ...wantOta ? [`  2. Update:  ${import_picocolors14.default.cyan(cmd("liftbay update publish --channel preview"))} ${import_picocolors14.default.dim("(after a build from this setup is installed)")}`] : [],
+      ...cmd("liftbay") !== "liftbay" ? ["", import_picocolors14.default.dim(`  Tip: ${import_picocolors14.default.cyan("npm i -g liftbay")} to type ${import_picocolors14.default.cyan("liftbay")} instead of ${import_picocolors14.default.cyan("npx liftbay")}.`)] : []
     ].join("\n")
   );
   return {
     github: github2,
     config,
-    imported: lastImport,
+    imported: [...lastImport, ...imported],
     url: `${dashboardUrl()}/${config.org}/${config.project}`,
     next: ["Commit liftbay.json, .github/workflows/liftbay.yml and app.json, and push", "liftbay build --profile preview", ...wantOta ? ["liftbay update publish --channel production"] : []]
   };
@@ -30352,17 +30694,17 @@ async function initCommand(opts) {
 // src/commands/update.ts
 import { execFileSync as execFileSync2 } from "child_process";
 import { createHash as createHash4 } from "crypto";
-import { mkdtempSync, readFileSync as readFileSync10, rmSync as rmSync4 } from "fs";
+import { mkdtempSync, readFileSync as readFileSync12, rmSync as rmSync4 } from "fs";
 import { tmpdir } from "os";
 import { join as join9 } from "path";
-var import_picocolors15 = __toESM(require_picocolors(), 1);
+var import_picocolors16 = __toESM(require_picocolors(), 1);
 
 // src/commands/signing.ts
 import { createPublicKey, createSign, randomBytes as randomBytes2 } from "crypto";
-import { chmodSync as chmodSync4, existsSync as existsSync8, mkdirSync as mkdirSync6, readFileSync as readFileSync9, writeFileSync as writeFileSync8 } from "fs";
-import { dirname as dirname4, relative } from "path";
+import { chmodSync as chmodSync4, existsSync as existsSync10, mkdirSync as mkdirSync7, readFileSync as readFileSync11, writeFileSync as writeFileSync9 } from "fs";
+import { dirname as dirname5, relative } from "path";
 var import_node_forge = __toESM(require_lib2(), 1);
-var import_picocolors14 = __toESM(require_picocolors(), 1);
+var import_picocolors15 = __toESM(require_picocolors(), 1);
 var DEFAULT_PRIVATE_KEY = "keys/liftbay-private-key.pem";
 var DEFAULT_PUBLIC_KEY = "certs/liftbay-public-key.pem";
 var DEFAULT_CERTIFICATE = "certs/liftbay-certificate.pem";
@@ -30392,18 +30734,18 @@ function generateSigningCertificate(commonName, years = 10) {
 var signRsaSha256 = (privateKeyPem, data) => createSign("RSA-SHA256").update(data).sign(privateKeyPem, "base64");
 function loadPrivateKey(path2) {
   const read = (file2, label) => {
-    if (!existsSync8(file2)) fail(`No private key at ${file2} (${label})`);
-    return { pem: readFileSync9(file2, "utf8"), source: file2 };
+    if (!existsSync10(file2)) fail(`No private key at ${file2} (${label})`);
+    return { pem: readFileSync11(file2, "utf8"), source: file2 };
   };
   if (path2) return read(path2, "--private-key");
   const env2 = process.env.LIFTBAY_UPDATE_PRIVATE_KEY;
   if (env2) return env2.includes("PRIVATE KEY") ? { pem: env2.replace(/\\n/g, "\n"), source: "LIFTBAY_UPDATE_PRIVATE_KEY" } : read(env2, "LIFTBAY_UPDATE_PRIVATE_KEY");
-  return existsSync8(DEFAULT_PRIVATE_KEY) ? { pem: readFileSync9(DEFAULT_PRIVATE_KEY, "utf8"), source: DEFAULT_PRIVATE_KEY } : null;
+  return existsSync10(DEFAULT_PRIVATE_KEY) ? { pem: readFileSync11(DEFAULT_PRIVATE_KEY, "utf8"), source: DEFAULT_PRIVATE_KEY } : null;
 }
 function ensureIgnored(entry) {
-  const current = existsSync8(".gitignore") ? readFileSync9(".gitignore", "utf8") : "";
+  const current = existsSync10(".gitignore") ? readFileSync11(".gitignore", "utf8") : "";
   if (current.split("\n").some((l2) => l2.trim() === entry || l2.trim() === entry.replace(/\/$/, ""))) return false;
-  writeFileSync8(".gitignore", `${current}${current && !current.endsWith("\n") ? "\n" : ""}
+  writeFileSync9(".gitignore", `${current}${current && !current.endsWith("\n") ? "\n" : ""}
 # Liftbay update signing key: never commit it
 ${entry}
 `);
@@ -30425,7 +30767,7 @@ async function signingInit(opts) {
   const config = requireConfig();
   const lb = client();
   const path2 = { org: config.org, project: config.project };
-  intro(import_picocolors14.default.bgCyan(import_picocolors14.default.black(" liftbay update signing init ")));
+  intro(import_picocolors15.default.bgCyan(import_picocolors15.default.black(" liftbay update signing init ")));
   const { signing: signing2 } = await unwrap(lb.GET("/v1/orgs/{org}/projects/{project}/updates/signing", { params: { path: path2 } }));
   if (signing2 && !opts.force) {
     fail(
@@ -30434,16 +30776,16 @@ async function signingInit(opts) {
   }
   const privateKeyPath = opts.privateKey ?? DEFAULT_PRIVATE_KEY;
   const certificatePath = opts.certificate ?? DEFAULT_CERTIFICATE;
-  if (existsSync8(privateKeyPath) && !opts.force) fail(`${privateKeyPath} already exists. Pass --force to overwrite it, or --private-key for another path.`);
+  if (existsSync10(privateKeyPath) && !opts.force) fail(`${privateKeyPath} already exists. Pass --force to overwrite it, or --private-key for another path.`);
   const generated = generateSigningCertificate(opts.commonName ?? config.project);
-  for (const dir of /* @__PURE__ */ new Set([dirname4(privateKeyPath), dirname4(certificatePath), dirname4(DEFAULT_PUBLIC_KEY)])) mkdirSync6(dir, { recursive: true });
-  writeFileSync8(privateKeyPath, generated.privateKeyPem, { mode: 384 });
+  for (const dir of /* @__PURE__ */ new Set([dirname5(privateKeyPath), dirname5(certificatePath), dirname5(DEFAULT_PUBLIC_KEY)])) mkdirSync7(dir, { recursive: true });
+  writeFileSync9(privateKeyPath, generated.privateKeyPem, { mode: 384 });
   chmodSync4(privateKeyPath, 384);
-  writeFileSync8(certificatePath, generated.certificatePem);
-  writeFileSync8(DEFAULT_PUBLIC_KEY, generated.publicKeyPem);
-  if (ensureIgnored(`${dirname4(relative(".", privateKeyPath))}/`)) log.info(`Added ${import_picocolors14.default.cyan(`${dirname4(privateKeyPath)}/`)} to .gitignore`);
-  log.success(`Private key: ${import_picocolors14.default.cyan(privateKeyPath)} (stays on this machine)
-  Certificate: ${import_picocolors14.default.cyan(certificatePath)} (commit it; it's embedded in your app)`);
+  writeFileSync9(certificatePath, generated.certificatePem);
+  writeFileSync9(DEFAULT_PUBLIC_KEY, generated.publicKeyPem);
+  if (ensureIgnored(`${dirname5(relative(".", privateKeyPath))}/`)) log.info(`Added ${import_picocolors15.default.cyan(`${dirname5(privateKeyPath)}/`)} to .gitignore`);
+  log.success(`Private key: ${import_picocolors15.default.cyan(privateKeyPath)} (stays on this machine)
+  Certificate: ${import_picocolors15.default.cyan(certificatePath)} (commit it; it's embedded in your app)`);
   await unwrap(
     lb.PUT("/v1/orgs/{org}/projects/{project}/updates/signing", {
       params: { path: path2 },
@@ -30451,7 +30793,7 @@ async function signingInit(opts) {
     })
   );
   log.success("Certificate saved to Liftbay");
-  if (configureAppJson(certificatePath)) log.success(`Updated ${import_picocolors14.default.cyan("app.json")}: the Liftbay plugin embeds the certificate in your app`);
+  if (configureAppJson(certificatePath)) log.success(`Updated ${import_picocolors15.default.cyan("app.json")}: the Liftbay plugin embeds the certificate in your app`);
   else note(`plugins: [["@liftbay/expo-plugin", { "codeSigningCertificate": "./${certificatePath}" }]]`, "Add to your app config");
   const channels2 = await unwrap(lb.GET("/v1/orgs/{org}/projects/{project}/channels", { params: { path: path2 } }));
   const signedOnly = !!channels2.length && (opts.yes || !isInteractive() || cancelled(await confirm({ message: "Require signed updates on every channel? Unsigned publishes will be refused.", initialValue: true })));
@@ -30464,12 +30806,12 @@ async function signingInit(opts) {
   note(
     [
       `1. Rebuild your apps once: the certificate is part of the binary.`,
-      `2. ${import_picocolors14.default.cyan(cmd("liftbay update publish"))} signs automatically with ${privateKeyPath}.`,
-      `3. In CI, store the private key as a secret named ${import_picocolors14.default.cyan("LIFTBAY_UPDATE_PRIVATE_KEY")}.`,
+      `2. ${import_picocolors15.default.cyan(cmd("liftbay update publish"))} signs automatically with ${privateKeyPath}.`,
+      `3. In CI, store the private key as a secret named ${import_picocolors15.default.cyan("LIFTBAY_UPDATE_PRIVATE_KEY")}.`,
       `4. Back the key up somewhere safe. If it's lost, apps need a rebuild with a new certificate.`,
       ``,
-      `hot-updater: set ${import_picocolors14.default.cyan("HOT_UPDATER_PUBLIC_KEY")} (iOS Info.plist) / ${import_picocolors14.default.cyan("com.hotupdater.PUBLIC_KEY")} (Android) to ${DEFAULT_PUBLIC_KEY}.`,
-      `CodePush: set ${import_picocolors14.default.cyan("CodePushPublicKey")} (iOS) / ${import_picocolors14.default.cyan("CodePushPublicKey")} string resource (Android) to ${DEFAULT_PUBLIC_KEY}.`
+      `hot-updater: set ${import_picocolors15.default.cyan("HOT_UPDATER_PUBLIC_KEY")} (iOS Info.plist) / ${import_picocolors15.default.cyan("com.hotupdater.PUBLIC_KEY")} (Android) to ${DEFAULT_PUBLIC_KEY}.`,
+      `CodePush: set ${import_picocolors15.default.cyan("CodePushPublicKey")} (iOS) / ${import_picocolors15.default.cyan("CodePushPublicKey")} string resource (Android) to ${DEFAULT_PUBLIC_KEY}.`
     ].join("\n"),
     "Next"
   );
@@ -30500,13 +30842,13 @@ var contentTypes = {
   mp4: "video/mp4"
 };
 function file(dir, rel, virtualPath, contentType) {
-  const data = readFileSync10(join9(dir, rel));
+  const data = readFileSync12(join9(dir, rel));
   return { path: virtualPath, abs: join9(dir, rel), sha256: createHash4("sha256").update(data).digest("hex"), sizeBytes: data.length, contentType };
 }
 async function exportBundles(platforms) {
   const out = mkdtempSync(join9(tmpdir(), "liftbay-export-"));
   await run("npx", ["expo", "export", "--output-dir", out, "--dump-assetmap", ...platforms.flatMap((pl) => ["--platform", pl])]);
-  const meta = JSON.parse(readFileSync10(join9(out, "metadata.json"), "utf8"));
+  const meta = JSON.parse(readFileSync12(join9(out, "metadata.json"), "utf8"));
   const bundles = {};
   for (const pl of platforms) {
     const m = meta.fileMetadata[pl];
@@ -30545,7 +30887,7 @@ async function publish(opts) {
       return null;
     }
   })();
-  intro(import_picocolors15.default.bgCyan(import_picocolors15.default.black(" liftbay update publish ")));
+  intro(import_picocolors16.default.bgCyan(import_picocolors16.default.black(" liftbay update publish ")));
   if (!platforms.every((x) => x === "ios" || x === "android")) fail("--platform must be ios, android or all");
   log.step(`Exporting ${platforms.join(" and ")} bundles`);
   const { out, bundles } = await exportBundles(platforms);
@@ -30567,13 +30909,13 @@ async function publish(opts) {
     for (const m of prep.missing) {
       const f = bySha.get(m.sha256);
       spin.message(fit(`Uploading ${++done}/${prep.missing.length}: ${f.path}`));
-      const res = await fetch(m.uploadUrl, { method: "PUT", body: readFileSync10(f.abs), headers: { "Content-Type": f.contentType } });
+      const res = await fetch(m.uploadUrl, { method: "PUT", body: readFileSync12(f.abs), headers: { "Content-Type": f.contentType } });
       if (!res.ok) fail(`Upload failed for ${f.path} (${res.status})`);
     }
     spin.stop(`${all.length} files: ${prep.missing.length} uploaded, ${prep.alreadyStored} already stored`);
     const key = loadPrivateKey(opts.privateKey);
     const published = [];
-    if (key) log.info(`Signing with ${import_picocolors15.default.cyan(key.source)}`);
+    if (key) log.info(`Signing with ${import_picocolors16.default.cyan(key.source)}`);
     for (const [runtime, group] of groups) {
       const body = {
         message,
@@ -30599,11 +30941,11 @@ async function publish(opts) {
       if (notice) log.warn(notice);
       published.push({ id: release.id, channel, runtimeVersion: runtime, platforms: group, rolloutPercent: release.rolloutPercent, signed: release.signed, message, notice });
       log.success(
-        `Published to ${import_picocolors15.default.bold(channel)} \xB7 runtime ${runtime} \xB7 ${group.join(", ")}${release.rolloutPercent < 100 ? ` \xB7 ${release.rolloutPercent}% rollout` : ""}${release.signed ? " \xB7 signed" : ""}`
+        `Published to ${import_picocolors16.default.bold(channel)} \xB7 runtime ${runtime} \xB7 ${group.join(", ")}${release.rolloutPercent < 100 ? ` \xB7 ${release.rolloutPercent}% rollout` : ""}${release.signed ? " \xB7 signed" : ""}`
       );
     }
     const url = `${dashboardUrl()}/${config.org}/${config.project}/updates/${channel}`;
-    outro(import_picocolors15.default.dim(url));
+    outro(import_picocolors16.default.dim(url));
     return { releases: published, url };
   } finally {
     rmSync4(out, { recursive: true, force: true });
@@ -30615,8 +30957,8 @@ async function list(opts) {
   const releases = await unwrap(client().GET("/v1/orgs/{org}/projects/{project}/channels/{channel}/releases", { params: { path: { org: config.org, project: config.project, channel } } }));
   if (!releases.length) console.log(`No releases on ${channel} yet.`);
   for (const r2 of releases.slice(0, 20)) {
-    const status2 = r2.status === "active" ? import_picocolors15.default.green("active") : r2.status === "rolled_back" ? import_picocolors15.default.red("rolled back") : import_picocolors15.default.dim("superseded");
-    console.log(`${new Date(r2.createdAt).toLocaleString().padEnd(24)} ${status2.padEnd(22)} ${String(r2.rolloutPercent).padStart(3)}%  ${import_picocolors15.default.dim(r2.runtimeVersion.padEnd(10))} ${r2.message}`);
+    const status2 = r2.status === "active" ? import_picocolors16.default.green("active") : r2.status === "rolled_back" ? import_picocolors16.default.red("rolled back") : import_picocolors16.default.dim("superseded");
+    console.log(`${new Date(r2.createdAt).toLocaleString().padEnd(24)} ${status2.padEnd(22)} ${String(r2.rolloutPercent).padStart(3)}%  ${import_picocolors16.default.dim(r2.runtimeVersion.padEnd(10))} ${r2.message}`);
   }
   return { channel, releases: releases.slice(0, 20) };
 }
@@ -30631,9 +30973,9 @@ async function rollback(opts) {
   const { path: path2, active } = await activeRelease(opts.channel ?? "production");
   const request = client().POST("/v1/orgs/{org}/projects/{project}/channels/{channel}/releases/{release}/rollback", { params: { path: { ...path2, release: active.id } } });
   const res = await unwrap(request);
-  console.log(`${import_picocolors15.default.green("\u2714")} Rolled back "${active.message}". ${res.active ? "The previous release is active again." : "Devices return to the bundle built into the app."}`);
+  console.log(`${import_picocolors16.default.green("\u2714")} Rolled back "${active.message}". ${res.active ? "The previous release is active again." : "Devices return to the bundle built into the app."}`);
   const notice = (await request).response.headers.get("Liftbay-Notice");
-  if (notice) console.log(`${import_picocolors15.default.yellow("!")} ${notice}`);
+  if (notice) console.log(`${import_picocolors16.default.yellow("!")} ${notice}`);
   return { rolledBack: { id: active.id, message: active.message }, active: res.active, notice };
 }
 async function rollout(percent, opts) {
@@ -30641,18 +30983,18 @@ async function rollout(percent, opts) {
   const r2 = await unwrap(
     client().PATCH("/v1/orgs/{org}/projects/{project}/channels/{channel}/releases/{release}/rollout", { params: { path: { ...path2, release: active.id } }, body: { rolloutPercent: Number(percent) } })
   );
-  console.log(`${import_picocolors15.default.green("\u2714")} "${r2.message}" now rolls out to ${r2.rolloutPercent}%`);
+  console.log(`${import_picocolors16.default.green("\u2714")} "${r2.message}" now rolls out to ${r2.rolloutPercent}%`);
   return { id: r2.id, message: r2.message, rolloutPercent: r2.rolloutPercent };
 }
 async function channels() {
   const config = requireConfig();
   const list2 = await unwrap(client().GET("/v1/orgs/{org}/projects/{project}/channels", { params: { path: { org: config.org, project: config.project } } }));
-  for (const c2 of list2) console.log(`${import_picocolors15.default.bold(c2.name.padEnd(16))} env ${c2.environmentSlug.padEnd(12)} ${c2.protocols.join(", ").padEnd(32)} ${import_picocolors15.default.dim(c2.currentRelease?.message ?? "no active release")}`);
+  for (const c2 of list2) console.log(`${import_picocolors16.default.bold(c2.name.padEnd(16))} env ${c2.environmentSlug.padEnd(12)} ${c2.protocols.join(", ").padEnd(32)} ${import_picocolors16.default.dim(c2.currentRelease?.message ?? "no active release")}`);
   return { channels: list2 };
 }
 
 // src/index.ts
-var program2 = new Command("liftbay").description("Build, ship and update React Native apps").version("0.5.2").option("--json", "print the result as JSON on stdout (progress goes to stderr; never prompts). Also LIFTBAY_JSON=1").hook("preAction", () => {
+var program2 = new Command("liftbay").description("Build, ship and update React Native apps").version("0.7.0").option("--json", "print the result as JSON on stdout (progress goes to stderr; never prompts). Also LIFTBAY_JSON=1").hook("preAction", () => {
   if (program2.opts().json || process.env.LIFTBAY_JSON === "1") enableJson();
 });
 var wrap = (fn) => async (...args) => {
@@ -30663,13 +31005,15 @@ var wrap = (fn) => async (...args) => {
   }
 };
 var setupOptions = (cmd2) => cmd2.option("--org <slug>", "organization").option("--project <slug>", "project slug (created if it doesn't exist)").option("--platforms <list>", "ios, android or all").option("--runtime-policy <policy>", "appVersion or fingerprint").option("--ios-engine <engine>", "project setting: where iOS store builds run, github-actions or xcode-cloud").option("--no-eas", "don't use eas.json's build profiles and env, even if there is one").option("-y, --yes", "accept defaults, no prompts").option("--api-url <url>", "API URL (for self-hosted or local development)").option("--dashboard-url <url>", "dashboard URL");
-program2.command("login").description("Sign in through the browser").option("--api-url <url>", "API URL").option("--dashboard-url <url>", "dashboard URL").option("--no-open", "don't open the browser").option("--no-wait", "start the sign-in and exit; run `liftbay login` again after approving to finish (for agents)").action(wrap(login));
+program2.command("login").description("Sign in through the browser").option("--api-url <url>", "API URL").option("--dashboard-url <url>", "dashboard URL").option("--no-open", "don't open the browser").option("--no-wait", "start the sign-in and exit; run `liftbay login` again after approving to finish (for agents)").option("--email <address>", "sign in with a code sent to this email, in the terminal (creates the account the first time)").option("--code <code>", "with --email: the 6-digit code from the email").action(wrap(login));
 program2.command("logout").description("Sign out and remove the saved token").action(wrap(logout));
 program2.command("whoami").description("Show the signed-in user and organizations").action(wrap(whoami));
-setupOptions(program2.command("init").description("Set up this app: link the project, builds, then OTA updates").option("--no-ota", "skip OTA updates")).action(wrap(initCommand));
+setupOptions(
+  program2.command("init").description("Set up this app: link the project, builds, then OTA updates").option("--no-ota", "skip OTA updates").option("--new-org <name>", "create an organization with this name").option("--project-name <name>", "create the project with this name").option("--questions", "list every question init would ask, with the choices for this app, and exit (for agents: interview the person)").option("--answers <file>", "run with the answers in this JSON file, without any prompts (see --questions)")
+).action(wrap(initCommand));
 var ci = program2.command("ci").description("Builds");
 setupOptions(ci.command("init").description("Set up build profiles, environments and app identifiers")).action(wrap(ciInitCommand));
-program2.command("build").description("Build on your GitHub Actions (Android on Linux, iOS on macOS) and follow the logs").option("--platform <platform>", "ios, android or all (asked in a terminal; otherwise the profile's platforms)").option("--profile <name>", "build profile from liftbay.json (asked in a terminal; otherwise production)").option("--ref <ref>", "branch, tag or commit to build (default: current branch)").option("-m, --message <text>", "build message").option("--simulator", "iOS: build for the simulator instead of a signed .ipa").option("--no-wait", "queue and exit without following the logs").option("--submit", "submit store builds when they succeed: TestFlight, or a Google Play track").option("--track <track>", "Play track for --submit: internal, alpha, beta or production").option("--engine <engine>", "where this iOS store build runs: github-actions or xcode-cloud (asked in a terminal; otherwise the project's setting)").action(wrap(build));
+program2.command("build").description("Build on your GitHub Actions (Android on Linux, iOS on macOS) and follow the logs").option("--platform <platform>", "ios, android or all (asked in a terminal; otherwise the profile's platforms)").option("--profile <name>", "build profile from liftbay.json (asked in a terminal; otherwise production)").option("--ref <ref>", "branch, tag or commit to build (default: current branch)").option("-m, --message <text>", "build message").option("--simulator", "iOS: build for the simulator instead of a signed .ipa").option("--no-wait", "queue and exit without following the build").option("--logs", "show the whole build log as it runs, instead of just the steps").option("--submit", "submit store builds when they succeed: TestFlight, or a Google Play track").option("--track <track>", "Play track for --submit: internal, alpha, beta or production").option("--engine <engine>", "where this iOS store build runs: github-actions or xcode-cloud (asked in a terminal; otherwise the project's setting)").action(wrap(build));
 var builds = program2.command("builds").description("Look at builds: list, status, logs, artifacts");
 builds.command("list").description("Recent builds, newest first").option("--platform <platform>", "ios or android").option("--status <list>", "comma-separated: queued, preparing, running, uploading, succeeded, failed, cancelled").option("--limit <n>", "how many", "20").action(wrap(buildsList));
 builds.command("view <number>").description("Status, phases and artifacts of one build").action(wrap(buildsView));