v12.3.0

<!-- If this PR requires a changelog entry, add it by commenting the PR with the command `/changelog-entry [breaking-change|new-feature|bug-fix|chore] [message]`. -->
<!-- You can skip the changelog check by labeling the PR with "no changelog". -->

# Why

https://exponent-internal.slack.com/archives/C06FK950085/p1725586296781109

# How

warn people if pulling secret env vars in env:pull command

# Test Plan

![Screenshot 2024-09-06 at 15.36.44.png](https://graphite-user-uploaded-assets-prod.s3.amazonaws.com/9YRXgAETSTRMfjZ0IP35/d1ecf95a-a9f4-4d01-b24e-5b2e9ea5e31c.png)

.eslintignore

@@ -5,3 +5,4 @@
 packages/eas-cli/src/graphql/generated.ts
 
 node_modules
+ts-declarations

.eslintrc.js

@@ -30,12 +30,6 @@ module.exports = {
       },
     ],
     'no-underscore-dangle': ['error', { allow: ['__typename'] }],
-    '@typescript-eslint/explicit-function-return-type': [
-      'warn',
-      {
-        allowExpressions: true,
-      },
-    ],
     'async-protect/async-suffix': 'error',
     'node/no-sync': 'error',
   },

CHANGELOG.md

@@ -8,6 +8,80 @@ This is the log of notable changes to EAS CLI and related packages.
 
 ### 🎉 New features
 
+- Add `--non-interactive` and `--force` support when `--id` is not passed to the `eas init` command. ([#1983](https://github.com/expo/eas-cli/pull/1983) by [@mymattcarroll](https://github.com/mymattcarroll))
+
+### 🐛 Bug fixes
+
+### 🧹 Chores
+
+## [12.1.1](https://github.com/expo/eas-cli/releases/tag/v12.1.1) - 2024-09-09
+
+### 🐛 Bug fixes
+
+- Fixed an issue where extensions retrieved the main app's entitlements instead of their own. ([#2532](https://github.com/expo/eas-cli/pull/2532) by [@HarrisHan](https://github.com/HarrisHan))
+
+## [12.1.0](https://github.com/expo/eas-cli/releases/tag/v12.1.0) - 2024-09-06
+
+### 🎉 New features
+
+- **Internal/Experimental:** Add EAS Worker command ([#2447](https://github.com/expo/eas-cli/pull/2447) by [@kitten](https://github.com/kitten))
+- Upload fingeprint source as part of eas update command. ([#2533](https://github.com/expo/eas-cli/pull/2533) by [@wschurman](https://github.com/wschurman))
+
+## [12.0.0](https://github.com/expo/eas-cli/releases/tag/v12.0.0) - 2024-09-04
+
+### 🛠 Breaking changes
+
+- Prompt the users to set `appVersionSource`, while mentioning that `remote` is the default. ([#2411](https://github.com/expo/eas-cli/pull/2411) by [@radoslawkrzemien](https://github.com/radoslawkrzemien))
+
+### 🎉 New features
+
+- Add support for syncing Journaling Suggestions, Managed App Installation UI, and 5G Network Slicing capabilities. ([#2525](https://github.com/expo/eas-cli/pull/2525) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [11.0.3](https://github.com/expo/eas-cli/releases/tag/v11.0.3) - 2024-08-31
+
+### 🐛 Bug fixes
+
+- Revert config-related packages to SDK 50 version from SDK 51 version to fix broken entitlements behavior for older SDKs. ([#2524](https://github.com/expo/eas-cli/pull/2524) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [11.0.2](https://github.com/expo/eas-cli/releases/tag/v11.0.2) - 2024-08-27
+
+### 🐛 Bug fixes
+
+- Remove unncessary static project config context definition from `eas build` command context, to fix resolving dynamic projest ID and slug for dynamic app configs. ([#2521](https://github.com/expo/eas-cli/pull/2521) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [11.0.1](https://github.com/expo/eas-cli/releases/tag/v11.0.1) - 2024-08-26
+
+### 🐛 Bug fixes
+
+- Make `eas config` command not require authentication when running in `--eas-json-only` mode. ([#2517](https://github.com/expo/eas-cli/pull/2517) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [11.0.0](https://github.com/expo/eas-cli/releases/tag/v11.0.0) - 2024-08-26
+
+### 🛠 Breaking changes
+
+- Remove long-deprecated `eas update` flags. ([#2501](https://github.com/expo/eas-cli/pull/2501) by [@wschurman](https://github.com/wschurman))
+
+### 🎉 New features
+
+- Add new rollout update type for `eas update` and `eas update:edit`. ([#2502](https://github.com/expo/eas-cli/pull/2502), [#2503](https://github.com/expo/eas-cli/pull/2503) by [@wschurman](https://github.com/wschurman))
+
+### 🧹 Chores
+
+- Upgrade packages to SDK 51 release. ([#2498](https://github.com/expo/eas-cli/pull/2498) by [@wschurman](https://github.com/wschurman))
+- Enable typescript linting and various lint rules. ([#2505](https://github.com/expo/eas-cli/pull/2505), [#2507](https://github.com/expo/eas-cli/pull/2507), [#2508](https://github.com/expo/eas-cli/pull/2508), [#2509](https://github.com/expo/eas-cli/pull/2509), [#2510](https://github.com/expo/eas-cli/pull/2510) by [@wschurman](https://github.com/wschurman))
+- Include debug info in fingerprint metadata during build. ([#2513](https://github.com/expo/eas-cli/pull/2513) by [@wschurman](https://github.com/wschurman))
+
+## [10.2.4](https://github.com/expo/eas-cli/releases/tag/v10.2.4) - 2024-08-19
+
+## [10.2.3](https://github.com/expo/eas-cli/releases/tag/v10.2.3) - 2024-08-13
+
+### 🧹 Chores
+
+- Add support for `EAS_DANGEROUS_OVERRIDE_IOS_BUNDLE_IDENTIFIER` for bare workflow iOS builds. ([#2469](https://github.com/expo/eas-cli/pull/2469) by [@szdziedzic](https://github.com/szdziedzic))
+- Update images list in `eas.schema.json` and warn users when using the deprecated Android images. ([#2450](https://github.com/expo/eas-cli/pull/2450) by [@szdziedzic](https://github.com/szdziedzic))
+
+## [10.2.2](https://github.com/expo/eas-cli/releases/tag/v10.2.2) - 2024-07-31
+
 ### 🐛 Bug fixes
 
 - Pass correct path to `vcsClient.isFileIgnoredAsync` check for monorepos to validate that custom build config file is not ignored. ([#2470](https://github.com/expo/eas-cli/pull/2470) by [@szdziedzic](https://github.com/szdziedzic))

lerna.json

@@ -1,5 +1,5 @@
 {
   "npmClient": "yarn",
-  "version": "10.2.2",
+  "version": "12.3.0",
   "$schema": "node_modules/lerna/schemas/lerna-schema.json"
 }

package.json

@@ -23,7 +23,7 @@
     "@types/jest": "29.5.11",
     "@types/node": "20.11.0",
     "eslint": "8.56.0",
-    "eslint-config-universe": "12.0.0",
+    "eslint-config-universe": "13.0.0",
     "eslint-plugin-async-protect": "3.1.0",
     "eslint-plugin-node": "11.1.0",
     "jest": "29.7.0",

packages/eas-cli/README.md

@@ -143,7 +143,7 @@ ALIASES
   $ eas login
 ```
 
-_See code: [packages/eas-cli/src/commands/account/login.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/account/login.ts)_
+_See code: [packages/eas-cli/src/commands/account/login.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/account/login.ts)_
 
 ## `eas account:logout`
 
@@ -160,7 +160,7 @@ ALIASES
   $ eas logout
 ```
 
-_See code: [packages/eas-cli/src/commands/account/logout.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/account/logout.ts)_
+_See code: [packages/eas-cli/src/commands/account/logout.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/account/logout.ts)_
 
 ## `eas account:view`
 
@@ -177,7 +177,7 @@ ALIASES
   $ eas whoami
 ```
 
-_See code: [packages/eas-cli/src/commands/account/view.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/account/view.ts)_
+_See code: [packages/eas-cli/src/commands/account/view.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/account/view.ts)_
 
 ## `eas analytics [STATUS]`
 
@@ -191,7 +191,7 @@ DESCRIPTION
   display or change analytics settings
 ```
 
-_See code: [packages/eas-cli/src/commands/analytics.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/analytics.ts)_
+_See code: [packages/eas-cli/src/commands/analytics.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/analytics.ts)_
 
 ## `eas autocomplete [SHELL]`
 
@@ -243,7 +243,7 @@ DESCRIPTION
   create a branch
 ```
 
-_See code: [packages/eas-cli/src/commands/branch/create.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/branch/create.ts)_
+_See code: [packages/eas-cli/src/commands/branch/create.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/branch/create.ts)_
 
 ## `eas branch:delete [NAME]`
 
@@ -264,7 +264,7 @@ DESCRIPTION
   delete a branch
 ```
 
-_See code: [packages/eas-cli/src/commands/branch/delete.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/branch/delete.ts)_
+_See code: [packages/eas-cli/src/commands/branch/delete.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/branch/delete.ts)_
 
 ## `eas branch:list`
 
@@ -284,7 +284,7 @@ DESCRIPTION
   list all branches
 ```
 
-_See code: [packages/eas-cli/src/commands/branch/list.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/branch/list.ts)_
+_See code: [packages/eas-cli/src/commands/branch/list.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/branch/list.ts)_
 
 ## `eas branch:rename`
 
@@ -304,7 +304,7 @@ DESCRIPTION
   rename a branch
 ```
 
-_See code: [packages/eas-cli/src/commands/branch/rename.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/branch/rename.ts)_
+_See code: [packages/eas-cli/src/commands/branch/rename.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/branch/rename.ts)_
 
 ## `eas branch:view [NAME]`
 
@@ -327,7 +327,7 @@ DESCRIPTION
   view a branch
 ```
 
-_See code: [packages/eas-cli/src/commands/branch/view.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/branch/view.ts)_
+_See code: [packages/eas-cli/src/commands/branch/view.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/branch/view.ts)_
 
 ## `eas build`
 
@@ -364,7 +364,7 @@ DESCRIPTION
   start a build
 ```
 
-_See code: [packages/eas-cli/src/commands/build/index.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/build/index.ts)_
+_See code: [packages/eas-cli/src/commands/build/index.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/build/index.ts)_
 
 ## `eas build:cancel [BUILD_ID]`
 
@@ -383,7 +383,7 @@ DESCRIPTION
   cancel a build
 ```
 
-_See code: [packages/eas-cli/src/commands/build/cancel.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/build/cancel.ts)_
+_See code: [packages/eas-cli/src/commands/build/cancel.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/build/cancel.ts)_
 
 ## `eas build:configure`
 
@@ -400,7 +400,7 @@ DESCRIPTION
   configure the project to support EAS Build
 ```
 
-_See code: [packages/eas-cli/src/commands/build/configure.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/build/configure.ts)_
+_See code: [packages/eas-cli/src/commands/build/configure.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/build/configure.ts)_
 
 ## `eas build:delete [BUILD_ID]`
 
@@ -419,7 +419,7 @@ DESCRIPTION
   delete a build
 ```
 
-_See code: [packages/eas-cli/src/commands/build/delete.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/build/delete.ts)_
+_See code: [packages/eas-cli/src/commands/build/delete.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/build/delete.ts)_
 
 ## `eas build:inspect`
 
@@ -454,7 +454,7 @@ DESCRIPTION
   inspect the state of the project at specific build stages, useful for troubleshooting
 ```
 
-_See code: [packages/eas-cli/src/commands/build/inspect.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/build/inspect.ts)_
+_See code: [packages/eas-cli/src/commands/build/inspect.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/build/inspect.ts)_
 
 ## `eas build:list`
 
@@ -504,7 +504,7 @@ DESCRIPTION
   list all builds for your project
 ```
 
-_See code: [packages/eas-cli/src/commands/build/list.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/build/list.ts)_
+_See code: [packages/eas-cli/src/commands/build/list.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/build/list.ts)_
 
 ## `eas build:resign`
 
@@ -533,7 +533,7 @@ DESCRIPTION
   re-sign a build archive
 ```
 
-_See code: [packages/eas-cli/src/commands/build/resign.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/build/resign.ts)_
+_See code: [packages/eas-cli/src/commands/build/resign.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/build/resign.ts)_
 
 ## `eas build:run`
 
@@ -559,7 +559,7 @@ DESCRIPTION
   run simulator/emulator builds from eas-cli
 ```
 
-_See code: [packages/eas-cli/src/commands/build/run.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/build/run.ts)_
+_See code: [packages/eas-cli/src/commands/build/run.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/build/run.ts)_
 
 ## `eas build:submit`
 
@@ -609,7 +609,7 @@ DESCRIPTION
   get the latest version from EAS servers
 ```
 
-_See code: [packages/eas-cli/src/commands/build/version/get.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/build/version/get.ts)_
+_See code: [packages/eas-cli/src/commands/build/version/get.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/build/version/get.ts)_
 
 ## `eas build:version:set`
 
@@ -628,7 +628,7 @@ DESCRIPTION
   update version of an app
 ```
 
-_See code: [packages/eas-cli/src/commands/build/version/set.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/build/version/set.ts)_
+_See code: [packages/eas-cli/src/commands/build/version/set.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/build/version/set.ts)_
 
 ## `eas build:version:sync`
 
@@ -647,7 +647,7 @@ DESCRIPTION
   update a version in native code with a value stored on EAS servers
 ```
 
-_See code: [packages/eas-cli/src/commands/build/version/sync.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/build/version/sync.ts)_
+_See code: [packages/eas-cli/src/commands/build/version/sync.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/build/version/sync.ts)_
 
 ## `eas build:view [BUILD_ID]`
 
@@ -664,7 +664,7 @@ DESCRIPTION
   view a build for your project
 ```
 
-_See code: [packages/eas-cli/src/commands/build/view.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/build/view.ts)_
+_See code: [packages/eas-cli/src/commands/build/view.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/build/view.ts)_
 
 ## `eas channel:create [NAME]`
 
@@ -685,7 +685,7 @@ DESCRIPTION
   create a channel
 ```
 
-_See code: [packages/eas-cli/src/commands/channel/create.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/channel/create.ts)_
+_See code: [packages/eas-cli/src/commands/channel/create.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/channel/create.ts)_
 
 ## `eas channel:edit [NAME]`
 
@@ -707,7 +707,7 @@ DESCRIPTION
   point a channel at a new branch
 ```
 
-_See code: [packages/eas-cli/src/commands/channel/edit.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/channel/edit.ts)_
+_See code: [packages/eas-cli/src/commands/channel/edit.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/channel/edit.ts)_
 
 ## `eas channel:list`
 
@@ -727,7 +727,7 @@ DESCRIPTION
   list all channels
 ```
 
-_See code: [packages/eas-cli/src/commands/channel/list.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/channel/list.ts)_
+_See code: [packages/eas-cli/src/commands/channel/list.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/channel/list.ts)_
 
 ## `eas channel:rollout [CHANNEL]`
 
@@ -760,7 +760,7 @@ DESCRIPTION
   Roll a new branch out on a channel incrementally.
 ```
 
-_See code: [packages/eas-cli/src/commands/channel/rollout.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/channel/rollout.ts)_
+_See code: [packages/eas-cli/src/commands/channel/rollout.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/channel/rollout.ts)_
 
 ## `eas channel:view [NAME]`
 
@@ -783,7 +783,7 @@ DESCRIPTION
   view a channel
 ```
 
-_See code: [packages/eas-cli/src/commands/channel/view.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/channel/view.ts)_
+_See code: [packages/eas-cli/src/commands/channel/view.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/channel/view.ts)_
 
 ## `eas config`
 
@@ -804,7 +804,7 @@ DESCRIPTION
   display project configuration (app.json + eas.json)
 ```
 
-_See code: [packages/eas-cli/src/commands/config.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/config.ts)_
+_See code: [packages/eas-cli/src/commands/config.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/config.ts)_
 
 ## `eas credentials`
 
@@ -821,7 +821,7 @@ DESCRIPTION
   manage credentials
 ```
 
-_See code: [packages/eas-cli/src/commands/credentials/index.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/credentials/index.ts)_
+_See code: [packages/eas-cli/src/commands/credentials/index.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/credentials/index.ts)_
 
 ## `eas credentials:configure-build`
 
@@ -839,7 +839,7 @@ DESCRIPTION
   Set up credentials for building your project.
 ```
 
-_See code: [packages/eas-cli/src/commands/credentials/configure-build.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/credentials/configure-build.ts)_
+_See code: [packages/eas-cli/src/commands/credentials/configure-build.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/credentials/configure-build.ts)_
 
 ## `eas device:create`
 
@@ -853,7 +853,7 @@ DESCRIPTION
   register new Apple Devices to use for internal distribution
 ```
 
-_See code: [packages/eas-cli/src/commands/device/create.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/device/create.ts)_
+_See code: [packages/eas-cli/src/commands/device/create.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/device/create.ts)_
 
 ## `eas device:delete`
 
@@ -873,7 +873,7 @@ DESCRIPTION
   remove a registered device from your account
 ```
 
-_See code: [packages/eas-cli/src/commands/device/delete.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/device/delete.ts)_
+_See code: [packages/eas-cli/src/commands/device/delete.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/device/delete.ts)_
 
 ## `eas device:list`
 
@@ -894,7 +894,7 @@ DESCRIPTION
   list all registered devices for your account
 ```
 
-_See code: [packages/eas-cli/src/commands/device/list.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/device/list.ts)_
+_See code: [packages/eas-cli/src/commands/device/list.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/device/list.ts)_
 
 ## `eas device:rename`
 
@@ -915,7 +915,7 @@ DESCRIPTION
   rename a registered device
 ```
 
-_See code: [packages/eas-cli/src/commands/device/rename.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/device/rename.ts)_
+_See code: [packages/eas-cli/src/commands/device/rename.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/device/rename.ts)_
 
 ## `eas device:view [UDID]`
 
@@ -929,7 +929,7 @@ DESCRIPTION
   view a device for your project
 ```
 
-_See code: [packages/eas-cli/src/commands/device/view.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/device/view.ts)_
+_See code: [packages/eas-cli/src/commands/device/view.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/device/view.ts)_
 
 ## `eas diagnostics`
 
@@ -943,7 +943,7 @@ DESCRIPTION
   display environment info
 ```
 
-_See code: [packages/eas-cli/src/commands/diagnostics.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/diagnostics.ts)_
+_See code: [packages/eas-cli/src/commands/diagnostics.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/diagnostics.ts)_
 
 ## `eas help [COMMAND]`
 
@@ -971,10 +971,11 @@ create or link an EAS project
 
 ```
 USAGE
-  $ eas init [--force --id <value>] [--non-interactive ]
+  $ eas init [--id <value>] [--force] [--non-interactive]
 
 FLAGS
-  --force            Whether to overwrite any existing project ID
+  --force            Whether to create a new project/link an existing project without additional prompts or overwrite
+                     any existing project ID when running with --id flag
   --id=<value>       ID of the EAS project to link
   --non-interactive  Run the command in non-interactive mode.
 
@@ -1050,7 +1051,7 @@ DESCRIPTION
   validate the local store configuration
 ```
 
-_See code: [packages/eas-cli/src/commands/metadata/lint.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/metadata/lint.ts)_
+_See code: [packages/eas-cli/src/commands/metadata/lint.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/metadata/lint.ts)_
 
 ## `eas metadata:pull`
 
@@ -1067,7 +1068,7 @@ DESCRIPTION
   generate the local store configuration from the app stores
 ```
 
-_See code: [packages/eas-cli/src/commands/metadata/pull.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/metadata/pull.ts)_
+_See code: [packages/eas-cli/src/commands/metadata/pull.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/metadata/pull.ts)_
 
 ## `eas metadata:push`
 
@@ -1084,7 +1085,7 @@ DESCRIPTION
   sync the local store configuration to the app stores
 ```
 
-_See code: [packages/eas-cli/src/commands/metadata/push.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/metadata/push.ts)_
+_See code: [packages/eas-cli/src/commands/metadata/push.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/metadata/push.ts)_
 
 ## `eas onboarding [TARGET_PROJECT_DIRECTORY]`
 
@@ -1114,7 +1115,7 @@ DESCRIPTION
   open the project page in a web browser
 ```
 
-_See code: [packages/eas-cli/src/commands/open.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/open.ts)_
+_See code: [packages/eas-cli/src/commands/open.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/open.ts)_
 
 ## `eas project:info`
 
@@ -1128,7 +1129,7 @@ DESCRIPTION
   information about the current project
 ```
 
-_See code: [packages/eas-cli/src/commands/project/info.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/project/info.ts)_
+_See code: [packages/eas-cli/src/commands/project/info.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/project/info.ts)_
 
 ## `eas project:init`
 
@@ -1136,10 +1137,11 @@ create or link an EAS project
 
 ```
 USAGE
-  $ eas project:init [--force --id <value>] [--non-interactive ]
+  $ eas project:init [--id <value>] [--force] [--non-interactive]
 
 FLAGS
-  --force            Whether to overwrite any existing project ID
+  --force            Whether to create a new project/link an existing project without additional prompts or overwrite
+                     any existing project ID when running with --id flag
   --id=<value>       ID of the EAS project to link
   --non-interactive  Run the command in non-interactive mode.
 
@@ -1150,7 +1152,7 @@ ALIASES
   $ eas init
 ```
 
-_See code: [packages/eas-cli/src/commands/project/init.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/project/init.ts)_
+_See code: [packages/eas-cli/src/commands/project/init.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/project/init.ts)_
 
 ## `eas project:onboarding [TARGET_PROJECT_DIRECTORY]`
 
@@ -1168,7 +1170,7 @@ ALIASES
   $ eas onboarding
 ```
 
-_See code: [packages/eas-cli/src/commands/project/onboarding.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/project/onboarding.ts)_
+_See code: [packages/eas-cli/src/commands/project/onboarding.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/project/onboarding.ts)_
 
 ## `eas secret:create`
 
@@ -1191,7 +1193,7 @@ DESCRIPTION
   create an environment secret on the current project or owner account
 ```
 
-_See code: [packages/eas-cli/src/commands/secret/create.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/secret/create.ts)_
+_See code: [packages/eas-cli/src/commands/secret/create.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/secret/create.ts)_
 
 ## `eas secret:delete`
 
@@ -1209,7 +1211,7 @@ DESCRIPTION
   delete an environment secret by ID
 ```
 
-_See code: [packages/eas-cli/src/commands/secret/delete.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/secret/delete.ts)_
+_See code: [packages/eas-cli/src/commands/secret/delete.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/secret/delete.ts)_
 
 ## `eas secret:list`
 
@@ -1223,7 +1225,7 @@ DESCRIPTION
   list environment secrets available for your current app
 ```
 
-_See code: [packages/eas-cli/src/commands/secret/list.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/secret/list.ts)_
+_See code: [packages/eas-cli/src/commands/secret/list.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/secret/list.ts)_
 
 ## `eas secret:push`
 
@@ -1243,7 +1245,7 @@ DESCRIPTION
   read environment secrets from env file and store on the server
 ```
 
-_See code: [packages/eas-cli/src/commands/secret/push.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/secret/push.ts)_
+_See code: [packages/eas-cli/src/commands/secret/push.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/secret/push.ts)_
 
 ## `eas submit`
 
@@ -1274,7 +1276,7 @@ ALIASES
   $ eas build:submit
 ```
 
-_See code: [packages/eas-cli/src/commands/submit.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/submit.ts)_
+_See code: [packages/eas-cli/src/commands/submit.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/submit.ts)_
 
 ## `eas update`
 
@@ -1282,9 +1284,9 @@ publish an update group
 
 ```
 USAGE
-  $ eas update [--branch <value>] [--channel <value>] [-m <value>] [--republish | --input-dir <value> |
-    --skip-bundler] [--group <value> |  | ] [--clear-cache] [--emit-metadata] [-p android|ios|all] [--auto]
-    [--private-key-path <value>] [--json --non-interactive]
+  $ eas update [--branch <value>] [--channel <value>] [-m <value>] [--input-dir <value>] [--skip-bundler]
+    [--clear-cache] [--emit-metadata] [-p android|ios|all] [--auto] [--private-key-path <value>] [--json
+    --non-interactive]
 
 FLAGS
   -m, --message=<value>             A short message describing the update
@@ -1295,7 +1297,6 @@ FLAGS
   --clear-cache                     Clear the bundler cache before publishing
   --emit-metadata                   Emit "eas-update-metadata.json" in the bundle folder with detailed information about
                                     the generated updates
-  --group=<value>                   Update group to republish (deprecated, see republish command)
   --input-dir=<value>               [default: dist] Location of the bundle
   --json                            Enable JSON output, non-JSON messages will be printed to stderr.
   --non-interactive                 Run the command in non-interactive mode.
@@ -1303,14 +1304,13 @@ FLAGS
                                     expo-updates' configuration. Defaults to a file named "private-key.pem" in the
                                     certificate's directory. Only relevant if you are using code signing:
                                     https://docs.expo.dev/eas-update/code-signing/
-  --republish                       Republish an update group (deprecated, see republish command)
   --skip-bundler                    Skip running Expo CLI to bundle the app before publishing
 
 DESCRIPTION
   publish an update group
 ```
 
-_See code: [packages/eas-cli/src/commands/update/index.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/update/index.ts)_
+_See code: [packages/eas-cli/src/commands/update/index.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/update/index.ts)_
 
 ## `eas update:configure`
 
@@ -1328,7 +1328,7 @@ DESCRIPTION
   configure the project to support EAS Update
 ```
 
-_See code: [packages/eas-cli/src/commands/update/configure.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/update/configure.ts)_
+_See code: [packages/eas-cli/src/commands/update/configure.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/update/configure.ts)_
 
 ## `eas update:delete GROUPID`
 
@@ -1349,7 +1349,7 @@ DESCRIPTION
   delete all the updates in an update group
 ```
 
-_See code: [packages/eas-cli/src/commands/update/delete.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/update/delete.ts)_
+_See code: [packages/eas-cli/src/commands/update/delete.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/update/delete.ts)_
 
 ## `eas update:list`
 
@@ -1371,7 +1371,7 @@ DESCRIPTION
   view the recent updates
 ```
 
-_See code: [packages/eas-cli/src/commands/update/list.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/update/list.ts)_
+_See code: [packages/eas-cli/src/commands/update/list.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/update/list.ts)_
 
 ## `eas update:republish`
 
@@ -1399,7 +1399,7 @@ DESCRIPTION
   roll back to an existing update
 ```
 
-_See code: [packages/eas-cli/src/commands/update/republish.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/update/republish.ts)_
+_See code: [packages/eas-cli/src/commands/update/republish.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/update/republish.ts)_
 
 ## `eas update:roll-back-to-embedded`
 
@@ -1427,7 +1427,7 @@ DESCRIPTION
   roll back to the embedded update
 ```
 
-_See code: [packages/eas-cli/src/commands/update/roll-back-to-embedded.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/update/roll-back-to-embedded.ts)_
+_See code: [packages/eas-cli/src/commands/update/roll-back-to-embedded.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/update/roll-back-to-embedded.ts)_
 
 ## `eas update:rollback`
 
@@ -1447,7 +1447,7 @@ DESCRIPTION
   roll back to an embedded update or an existing update
 ```
 
-_See code: [packages/eas-cli/src/commands/update/rollback.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/update/rollback.ts)_
+_See code: [packages/eas-cli/src/commands/update/rollback.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/update/rollback.ts)_
 
 ## `eas update:view GROUPID`
 
@@ -1467,7 +1467,7 @@ DESCRIPTION
   update group details
 ```
 
-_See code: [packages/eas-cli/src/commands/update/view.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/update/view.ts)_
+_See code: [packages/eas-cli/src/commands/update/view.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/update/view.ts)_
 
 ## `eas webhook:create`
 
@@ -1488,7 +1488,7 @@ DESCRIPTION
   create a webhook
 ```
 
-_See code: [packages/eas-cli/src/commands/webhook/create.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/webhook/create.ts)_
+_See code: [packages/eas-cli/src/commands/webhook/create.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/webhook/create.ts)_
 
 ## `eas webhook:delete [ID]`
 
@@ -1508,7 +1508,7 @@ DESCRIPTION
   delete a webhook
 ```
 
-_See code: [packages/eas-cli/src/commands/webhook/delete.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/webhook/delete.ts)_
+_See code: [packages/eas-cli/src/commands/webhook/delete.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/webhook/delete.ts)_
 
 ## `eas webhook:list`
 
@@ -1526,7 +1526,7 @@ DESCRIPTION
   list webhooks
 ```
 
-_See code: [packages/eas-cli/src/commands/webhook/list.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/webhook/list.ts)_
+_See code: [packages/eas-cli/src/commands/webhook/list.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/webhook/list.ts)_
 
 ## `eas webhook:update`
 
@@ -1548,7 +1548,7 @@ DESCRIPTION
   update a webhook
 ```
 
-_See code: [packages/eas-cli/src/commands/webhook/update.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/webhook/update.ts)_
+_See code: [packages/eas-cli/src/commands/webhook/update.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/webhook/update.ts)_
 
 ## `eas webhook:view ID`
 
@@ -1565,7 +1565,7 @@ DESCRIPTION
   view a webhook
 ```
 
-_See code: [packages/eas-cli/src/commands/webhook/view.ts](https://github.com/expo/eas-cli/blob/v10.2.2/packages/eas-cli/src/commands/webhook/view.ts)_
+_See code: [packages/eas-cli/src/commands/webhook/view.ts](https://github.com/expo/eas-cli/blob/v12.3.0/packages/eas-cli/src/commands/webhook/view.ts)_
 
 ## `eas whoami`
 

packages/eas-cli/graphql-codegen.yml

@@ -7,6 +7,7 @@ documents:
   - 'src/commands/**/*.ts'
   - 'src/branch/**/*.ts'
   - 'src/channel/**/*.ts'
+  - 'src/worker/**/*.ts'
 generates:
   src/graphql/generated.ts:
     plugins:

packages/eas-cli/package.json

@@ -1,20 +1,20 @@
 {
   "name": "eas-cli",
   "description": "EAS command line tool",
-  "version": "10.2.2",
+  "version": "12.3.0",
   "author": "Expo <[email protected]>",
   "bin": {
     "eas": "./bin/run"
   },
   "bugs": "https://github.com/expo/eas-cli/issues",
   "dependencies": {
-    "@expo/apple-utils": "1.7.1",
+    "@expo/apple-utils": "1.8.0",
     "@expo/code-signing-certificates": "0.0.5",
     "@expo/config": "8.5.4",
     "@expo/config-plugins": "7.8.4",
     "@expo/config-types": "50.0.0",
-    "@expo/eas-build-job": "1.0.129",
-    "@expo/eas-json": "10.2.2",
+    "@expo/eas-build-job": "1.0.133",
+    "@expo/eas-json": "12.0.0",
     "@expo/json-file": "8.2.37",
     "@expo/logger": "1.0.117",
     "@expo/multipart-body-parser": "1.1.0",
@@ -28,7 +28,7 @@
     "@expo/results": "1.0.0",
     "@expo/rudder-sdk-node": "1.1.1",
     "@expo/spawn-async": "1.7.0",
-    "@expo/steps": "1.0.129",
+    "@expo/steps": "1.0.134",
     "@expo/timeago.js": "1.0.0",
     "@oclif/core": "^1.26.2",
     "@oclif/plugin-autocomplete": "^2.3.10",
@@ -63,6 +63,7 @@
     "log-symbols": "4.1.0",
     "mime": "3.0.0",
     "minimatch": "5.1.2",
+    "minizlib": "3.0.1",
     "nanoid": "3.3.4",
     "node-fetch": "2.6.7",
     "node-forge": "1.3.1",
@@ -78,6 +79,7 @@
     "semver": "7.5.4",
     "slash": "3.0.0",
     "tar": "6.2.1",
+    "tar-stream": "3.1.7",
     "terminal-link": "2.1.1",
     "tslib": "2.6.2",
     "turndown": "7.1.2",
@@ -105,6 +107,7 @@
     "@types/prompts": "2.4.2",
     "@types/semver": "7.5.6",
     "@types/tar": "6.1.10",
+    "@types/tar-stream": "3.1.3",
     "@types/tough-cookie": "4.0.2",
     "@types/uuid": "9.0.7",
     "@types/wrap-ansi": "3.0.0",

packages/eas-cli/src/.eslintrc.js

@@ -0,0 +1,40 @@
+module.exports = {
+  extends: ['universe/shared/typescript-analysis'],
+  overrides: [
+    {
+      files: ['*.ts', '*.d.ts'],
+      parserOptions: {
+        project: './packages/eas-cli/tsconfig.json',
+      },
+      rules: {
+        '@typescript-eslint/explicit-function-return-type': [
+          'warn',
+          {
+            allowExpressions: true,
+          },
+        ],
+        '@typescript-eslint/prefer-nullish-coalescing': ['warn', { ignorePrimitives: true }],
+        '@typescript-eslint/no-confusing-void-expression': 'warn',
+        '@typescript-eslint/await-thenable': 'error',
+        '@typescript-eslint/no-misused-promises': [
+          'error',
+          {
+            checksVoidReturn: false,
+          },
+        ],
+        '@typescript-eslint/no-floating-promises': 'error',
+        'no-void': ['warn', { allowAsStatement: true }],
+        'no-return-await': 'off',
+        '@typescript-eslint/return-await': ['error', 'always'],
+        '@typescript-eslint/no-confusing-non-null-assertion': 'warn',
+        '@typescript-eslint/no-extra-non-null-assertion': 'warn',
+        '@typescript-eslint/prefer-as-const': 'warn',
+        '@typescript-eslint/prefer-includes': 'warn',
+        '@typescript-eslint/prefer-readonly': 'warn',
+        '@typescript-eslint/prefer-string-starts-ends-with': 'warn',
+        '@typescript-eslint/prefer-ts-expect-error': 'warn',
+        '@typescript-eslint/no-unnecessary-type-assertion': 'warn',
+      },
+    },
+  ],
+};

packages/eas-cli/src/__tests__/commands/__snapshots__/build-version-get-test.ts.snap

@@ -1,3 +1,5 @@
 // Jest Snapshot v1, https://goo.gl/fbAQLP
 
+exports[`BuildVersionGetView reading version aborts when the appVersionSource is not specified and the user chooses to set it to LOCAL 1`] = `"Aborting..."`;
+
 exports[`BuildVersionGetView reading version when appVersionSource is set to local  1`] = `"This project is not configured for using remote version source. Add {"cli": { "appVersionSource": "remote" }} in eas.json or re-run this command without "--non-interactive" flag."`;

packages/eas-cli/src/__tests__/commands/build-version-get-test.ts

@@ -1,10 +1,18 @@
-import { AppVersionSource, EasJson } from '@expo/eas-json';
 import chalk from 'chalk';
 
-import { getMockEasJson, mockCommandContext, mockProjectId, mockTestCommand } from './utils';
+import {
+  getMockEasJson,
+  mockCommandContext,
+  mockProjectId,
+  mockTestCommand,
+  withLocalVersionSource,
+  withRemoteVersionSource,
+} from './utils';
 import BuildVersionGetView from '../../commands/build/version/get';
 import { AppVersionQuery } from '../../graphql/queries/AppVersionQuery';
 import Log from '../../log';
+import { AppVersionSourceUpdateOption } from '../../project/remoteVersionSource';
+import * as prompts from '../../prompts';
 import { enableJsonOutput, printJsonOnlyOutput } from '../../utils/json';
 
 jest.mock('../../project/applicationIdentifier');
@@ -12,16 +20,7 @@ jest.mock('fs');
 jest.mock('../../log');
 jest.mock('../../utils/json');
 jest.mock('../../graphql/queries/AppVersionQuery');
-
-function withRemoteVersionSource(easJson: EasJson): EasJson {
-  return {
-    ...easJson,
-    cli: {
-      ...easJson.cli,
-      appVersionSource: AppVersionSource.REMOTE,
-    },
-  };
-}
+jest.mock('../../prompts');
 
 describe(BuildVersionGetView, () => {
   afterEach(() => {
@@ -49,6 +48,29 @@ describe(BuildVersionGetView, () => {
     expect(printJsonOnlyOutput).not.toHaveBeenCalled();
   });
 
+  test('reading version for platform android when the appVersionSource is not specified and the user chooses to set it to REMOTE', async () => {
+    const ctx = mockCommandContext(BuildVersionGetView, {});
+    jest.mocked(AppVersionQuery.latestVersionAsync).mockImplementation(async () => ({
+      buildVersion: '100',
+      storeVersion: '1.0.0',
+    }));
+    const cmd = mockTestCommand(BuildVersionGetView, ['--platform=android'], ctx);
+    jest
+      .mocked(prompts.selectAsync)
+      .mockImplementationOnce(async () => AppVersionSourceUpdateOption.SET_TO_REMOTE);
+
+    await cmd.run();
+    expect(AppVersionQuery.latestVersionAsync).toHaveBeenCalledWith(
+      ctx.loggedIn.graphqlClient,
+      mockProjectId,
+      'ANDROID',
+      'eas.test.com'
+    );
+    expect(Log.log).toHaveBeenCalledWith(`Android versionCode - ${chalk.bold('100')}`);
+    expect(enableJsonOutput).not.toHaveBeenCalled();
+    expect(printJsonOnlyOutput).not.toHaveBeenCalled();
+  });
+
   test('reading version for platform android when no remote version is set', async () => {
     const ctx = mockCommandContext(BuildVersionGetView, {
       easJson: withRemoteVersionSource(getMockEasJson()),
@@ -145,7 +167,9 @@ describe(BuildVersionGetView, () => {
   });
 
   test('reading version when appVersionSource is set to local ', async () => {
-    const ctx = mockCommandContext(BuildVersionGetView, {});
+    const ctx = mockCommandContext(BuildVersionGetView, {
+      easJson: withLocalVersionSource(getMockEasJson()),
+    });
     jest.mocked(AppVersionQuery.latestVersionAsync).mockImplementation(async () => ({
       buildVersion: '100',
       storeVersion: '1.0.0',
@@ -158,4 +182,51 @@ describe(BuildVersionGetView, () => {
     );
     await expect(cmd.run()).rejects.toThrowErrorMatchingSnapshot();
   });
+
+  test('reading version aborts when the appVersionSource is not specified and the user chooses to set it to LOCAL', async () => {
+    const ctx = mockCommandContext(BuildVersionGetView, {});
+    jest.mocked(AppVersionQuery.latestVersionAsync).mockImplementation(async () => ({
+      buildVersion: '100',
+      storeVersion: '1.0.0',
+    }));
+    jest
+      .mocked(prompts.selectAsync)
+      .mockImplementationOnce(async () => AppVersionSourceUpdateOption.SET_TO_LOCAL);
+
+    const cmd = mockTestCommand(BuildVersionGetView, ['--platform=android'], ctx);
+    await expect(cmd.run()).rejects.toThrowErrorMatchingSnapshot();
+  });
+
+  test('reading version aborts when the appVersionSource is not specified and the user chooses to configure it manually', async () => {
+    const ctx = mockCommandContext(BuildVersionGetView, {});
+    jest.mocked(AppVersionQuery.latestVersionAsync).mockImplementation(async () => ({
+      buildVersion: '100',
+      storeVersion: '1.0.0',
+    }));
+    jest
+      .mocked(prompts.selectAsync)
+      .mockImplementationOnce(async () => AppVersionSourceUpdateOption.ABORT);
+
+    const cmd = mockTestCommand(BuildVersionGetView, ['--platform=android'], ctx);
+    await expect(cmd.run()).rejects.toThrowError('Aborted.');
+  });
+
+  test('reading version sets appVersionSource to LOCAL and aborts when the appVersionSource is not specified and is run in non-interactive mode', async () => {
+    const ctx = mockCommandContext(BuildVersionGetView, {});
+    jest.mocked(AppVersionQuery.latestVersionAsync).mockImplementation(async () => ({
+      buildVersion: '100',
+      storeVersion: '1.0.0',
+    }));
+
+    const cmd = mockTestCommand(
+      BuildVersionGetView,
+      ['--non-interactive', '--json', '--platform=android'],
+      ctx
+    );
+    await expect(cmd.run()).rejects.toThrowError(
+      `This project is not configured for using remote version source. Add ${chalk.bold(
+        '{"cli": { "appVersionSource": "remote" }}'
+      )} in eas.json or re-run this command without "--non-interactive" flag.`
+    );
+  });
 });

packages/eas-cli/src/__tests__/commands/build-version-set-test.ts

@@ -1,4 +1,3 @@
-import { AppVersionSource, EasJson } from '@expo/eas-json';
 import fs from 'fs-extra';
 import path from 'path';
 
@@ -8,12 +7,15 @@ import {
   mockCommandContext,
   mockProjectId,
   mockTestCommand,
+  withLocalVersionSource,
+  withRemoteVersionSource,
 } from './utils';
 import BuildVersionSetView from '../../commands/build/version/set';
 import { AppVersionMutation } from '../../graphql/mutations/AppVersionMutation';
 import { AppQuery } from '../../graphql/queries/AppQuery';
 import { AppVersionQuery } from '../../graphql/queries/AppVersionQuery';
 import Log from '../../log';
+import { AppVersionSourceUpdateOption } from '../../project/remoteVersionSource';
 import * as prompts from '../../prompts';
 
 jest.mock('../../project/applicationIdentifier');
@@ -25,16 +27,6 @@ jest.mock('../../log');
 jest.mock('../../prompts');
 jest.mock('../../utils/json');
 
-function withRemoteVersionSource(easJson: EasJson): EasJson {
-  return {
-    ...easJson,
-    cli: {
-      ...easJson.cli,
-      appVersionSource: AppVersionSource.REMOTE,
-    },
-  };
-}
-
 describe(BuildVersionSetView, () => {
   afterEach(() => {
     jest.clearAllMocks();
@@ -67,6 +59,34 @@ describe(BuildVersionSetView, () => {
     );
   });
 
+  test('setting version for platform android when the appVersionSource is not specified and the user chooses to set it to REMOTE', async () => {
+    const ctx = mockCommandContext(BuildVersionSetView, {});
+    jest.mocked(AppQuery.byIdAsync).mockImplementation(async () => getMockAppFragment());
+    jest.mocked(AppVersionQuery.latestVersionAsync).mockImplementation(async () => null);
+    jest.mocked(prompts.promptAsync).mockImplementationOnce(async () => ({
+      version: '1000',
+    }));
+    jest
+      .mocked(prompts.selectAsync)
+      .mockImplementationOnce(async () => AppVersionSourceUpdateOption.SET_TO_REMOTE);
+
+    const cmd = mockTestCommand(BuildVersionSetView, ['--platform=android'], ctx);
+    await cmd.run();
+    expect(AppVersionQuery.latestVersionAsync).toHaveBeenCalledWith(
+      ctx.loggedIn.graphqlClient,
+      mockProjectId,
+      'ANDROID',
+      'eas.test.com'
+    );
+    expect(AppVersionMutation.createAppVersionAsync).toHaveBeenCalledWith(
+      ctx.loggedIn.graphqlClient,
+      expect.objectContaining({
+        buildVersion: '1000',
+        storeVersion: '1.0.0',
+      })
+    );
+  });
+
   test('printing current remote version before prompting for a new one', async () => {
     const ctx = mockCommandContext(BuildVersionSetView, {
       easJson: withRemoteVersionSource(getMockEasJson()),
@@ -115,7 +135,9 @@ describe(BuildVersionSetView, () => {
   });
 
   test('setting version aborts when appVersionSource is set to local and users refuse auto configuration', async () => {
-    const ctx = mockCommandContext(BuildVersionSetView, {});
+    const ctx = mockCommandContext(BuildVersionSetView, {
+      easJson: withLocalVersionSource(getMockEasJson()),
+    });
     jest.mocked(AppVersionQuery.latestVersionAsync).mockImplementation(async () => null);
     jest.mocked(AppQuery.byIdAsync).mockImplementation(async () => getMockAppFragment());
     jest.mocked(prompts.confirmAsync).mockImplementation(async () => false);
@@ -125,10 +147,26 @@ describe(BuildVersionSetView, () => {
     expect(AppVersionMutation.createAppVersionAsync).not.toHaveBeenCalledWith();
   });
 
-  test('setting version when appVersionSource is set to local and user allows auto configuration', async () => {
+  test('setting version aborts when the appVersionSource is not specified and the user chooses to set it to LOCAL, and they refuse auto configuration', async () => {
     const ctx = mockCommandContext(BuildVersionSetView, {});
     jest.mocked(AppVersionQuery.latestVersionAsync).mockImplementation(async () => null);
     jest.mocked(AppQuery.byIdAsync).mockImplementation(async () => getMockAppFragment());
+    jest
+      .mocked(prompts.selectAsync)
+      .mockImplementationOnce(async () => AppVersionSourceUpdateOption.SET_TO_LOCAL);
+    jest.mocked(prompts.confirmAsync).mockImplementationOnce(async () => false);
+
+    const cmd = mockTestCommand(BuildVersionSetView, ['--platform=android'], ctx);
+    await expect(cmd.run()).rejects.toThrowError('Aborting...');
+    expect(AppVersionMutation.createAppVersionAsync).not.toHaveBeenCalledWith();
+  });
+
+  test('setting version when appVersionSource is set to local and user allows auto configuration', async () => {
+    const ctx = mockCommandContext(BuildVersionSetView, {
+      easJson: withLocalVersionSource(getMockEasJson()),
+    });
+    jest.mocked(AppVersionQuery.latestVersionAsync).mockImplementation(async () => null);
+    jest.mocked(AppQuery.byIdAsync).mockImplementation(async () => getMockAppFragment());
     jest.mocked(prompts.confirmAsync).mockImplementation(async () => true);
 
     const cmd = mockTestCommand(BuildVersionSetView, ['--platform=android'], ctx);
@@ -137,4 +175,33 @@ describe(BuildVersionSetView, () => {
     const easJsonAfterCmd = await fs.readJson(path.join(ctx.projectDir, 'eas.json'));
     expect(easJsonAfterCmd.cli.appVersionSource).toBe('remote');
   });
+
+  test('setting version when the appVersionSource is not specified and the user chooses to set it to LOCAL, and they allow auto configuration', async () => {
+    const ctx = mockCommandContext(BuildVersionSetView, {});
+    jest.mocked(AppVersionQuery.latestVersionAsync).mockImplementation(async () => null);
+    jest.mocked(AppQuery.byIdAsync).mockImplementation(async () => getMockAppFragment());
+    jest
+      .mocked(prompts.selectAsync)
+      .mockImplementationOnce(async () => AppVersionSourceUpdateOption.SET_TO_LOCAL);
+    jest.mocked(prompts.confirmAsync).mockImplementationOnce(async () => true);
+
+    const cmd = mockTestCommand(BuildVersionSetView, ['--platform=android'], ctx);
+    await cmd.run();
+
+    const easJsonAfterCmd = await fs.readJson(path.join(ctx.projectDir, 'eas.json'));
+    expect(easJsonAfterCmd.cli.appVersionSource).toBe('remote');
+  });
+
+  test('setting version aborts when the appVersionSource is not specified and the user chooses to configure manually', async () => {
+    const ctx = mockCommandContext(BuildVersionSetView, {});
+    jest.mocked(AppVersionQuery.latestVersionAsync).mockImplementation(async () => null);
+    jest.mocked(AppQuery.byIdAsync).mockImplementation(async () => getMockAppFragment());
+    jest
+      .mocked(prompts.selectAsync)
+      .mockImplementationOnce(async () => AppVersionSourceUpdateOption.ABORT);
+
+    const cmd = mockTestCommand(BuildVersionSetView, ['--platform=android'], ctx);
+    await expect(cmd.run()).rejects.toThrowError('Aborted.');
+    expect(AppVersionMutation.createAppVersionAsync).not.toHaveBeenCalledWith();
+  });
 });

packages/eas-cli/src/__tests__/commands/build-version-sync-test.ts

@@ -1,5 +1,4 @@
 import { Workflow } from '@expo/eas-build-job';
-import { AppVersionSource, EasJson } from '@expo/eas-json';
 import fs from 'fs-extra';
 import path from 'path';
 
@@ -9,6 +8,8 @@ import {
   mockCommandContext,
   mockProjectId,
   mockTestCommand,
+  withLocalVersionSource,
+  withRemoteVersionSource,
 } from './utils';
 import { updateNativeVersionsAsync as updateAndroidNativeVersionsAsync } from '../../build/android/version';
 import { updateNativeVersionsAsync as updateIosNativeVersionsAsync } from '../../build/ios/version';
@@ -19,6 +20,7 @@ import { AppQuery } from '../../graphql/queries/AppQuery';
 import { AppVersionQuery } from '../../graphql/queries/AppVersionQuery';
 import { getAppBuildGradleAsync } from '../../project/android/gradleUtils';
 import { resolveTargetsAsync } from '../../project/ios/target';
+import { AppVersionSourceUpdateOption } from '../../project/remoteVersionSource';
 import { resolveWorkflowAsync } from '../../project/workflow';
 import * as prompts from '../../prompts';
 
@@ -37,16 +39,6 @@ jest.mock('../../log');
 jest.mock('../../prompts');
 jest.mock('../../utils/json');
 
-function withRemoteVersionSource(easJson: EasJson): EasJson {
-  return {
-    ...easJson,
-    cli: {
-      ...easJson.cli,
-      appVersionSource: AppVersionSource.REMOTE,
-    },
-  };
-}
-
 describe(BuildVersionSyncView, () => {
   afterEach(() => {
     jest.clearAllMocks();
@@ -79,6 +71,34 @@ describe(BuildVersionSyncView, () => {
     expect(syncAndroidAsync).not.toHaveBeenCalled();
   });
 
+  test('syncing version for managed project on platform android when appVersionSource is not set and the user chooses to set it to REMOTE', async () => {
+    const ctx = mockCommandContext(BuildVersionSyncView, {});
+    jest.mocked(AppQuery.byIdAsync).mockImplementation(async () => getMockAppFragment());
+    jest.mocked(AppVersionQuery.latestVersionAsync).mockImplementation(async () => ({
+      buildVersion: '1000',
+      storeVersion: '0.0.1',
+    }));
+    jest.mocked(prompts.promptAsync).mockImplementationOnce(async () => ({
+      version: '1000',
+    }));
+    jest
+      .mocked(prompts.selectAsync)
+      .mockImplementationOnce(async () => AppVersionSourceUpdateOption.SET_TO_REMOTE);
+    jest.mocked(resolveWorkflowAsync).mockImplementation(async () => Workflow.MANAGED);
+
+    const cmd = mockTestCommand(BuildVersionSyncView, ['--platform=android'], ctx);
+    const syncAndroidAsync = jest.spyOn(cmd, 'syncAndroidAsync' as any);
+
+    await cmd.run();
+    expect(AppVersionQuery.latestVersionAsync).toHaveBeenCalledWith(
+      ctx.loggedIn.graphqlClient,
+      mockProjectId,
+      'ANDROID',
+      'eas.test.com'
+    );
+    expect(syncAndroidAsync).not.toHaveBeenCalled();
+  });
+
   test('syncing version for bare project on platform android', async () => {
     const ctx = mockCommandContext(BuildVersionSyncView, {
       easJson: withRemoteVersionSource(getMockEasJson()),
@@ -179,7 +199,9 @@ describe(BuildVersionSyncView, () => {
   });
 
   test('syncing version aborts when appVersionSource is set to local and users refuse auto configuration', async () => {
-    const ctx = mockCommandContext(BuildVersionSyncView, {});
+    const ctx = mockCommandContext(BuildVersionSyncView, {
+      easJson: withLocalVersionSource(getMockEasJson()),
+    });
     jest.mocked(AppVersionQuery.latestVersionAsync).mockImplementation(async () => null);
     jest.mocked(AppQuery.byIdAsync).mockImplementation(async () => getMockAppFragment());
     jest.mocked(prompts.confirmAsync).mockImplementation(async () => false);
@@ -189,10 +211,26 @@ describe(BuildVersionSyncView, () => {
     expect(AppVersionMutation.createAppVersionAsync).not.toHaveBeenCalledWith();
   });
 
-  test('syncing version when appVersionSource is set to local and user allows auto configuration', async () => {
+  test('syncing version aborts when appVersionSource is not set and the user chooses to set it to LOCAL, and they refuse auto configuration', async () => {
     const ctx = mockCommandContext(BuildVersionSyncView, {});
     jest.mocked(AppVersionQuery.latestVersionAsync).mockImplementation(async () => null);
     jest.mocked(AppQuery.byIdAsync).mockImplementation(async () => getMockAppFragment());
+    jest
+      .mocked(prompts.selectAsync)
+      .mockImplementationOnce(async () => AppVersionSourceUpdateOption.SET_TO_LOCAL);
+    jest.mocked(prompts.confirmAsync).mockImplementation(async () => false);
+
+    const cmd = mockTestCommand(BuildVersionSyncView, ['--platform=android'], ctx);
+    await expect(cmd.run()).rejects.toThrowError('Aborting...');
+    expect(AppVersionMutation.createAppVersionAsync).not.toHaveBeenCalledWith();
+  });
+
+  test('syncing version when appVersionSource is set to local and user allows auto configuration', async () => {
+    const ctx = mockCommandContext(BuildVersionSyncView, {
+      easJson: withLocalVersionSource(getMockEasJson()),
+    });
+    jest.mocked(AppVersionQuery.latestVersionAsync).mockImplementation(async () => null);
+    jest.mocked(AppQuery.byIdAsync).mockImplementation(async () => getMockAppFragment());
     jest.mocked(prompts.confirmAsync).mockImplementation(async () => true);
 
     const cmd = mockTestCommand(BuildVersionSyncView, ['--platform=android'], ctx);
@@ -201,4 +239,33 @@ describe(BuildVersionSyncView, () => {
     const easJsonAfterCmd = await fs.readJson(path.join(ctx.projectDir, 'eas.json'));
     expect(easJsonAfterCmd.cli.appVersionSource).toBe('remote');
   });
+
+  test('syncing version when appVersionSource is not set and the user chooses to set it to LOCAL and they allow auto configuration', async () => {
+    const ctx = mockCommandContext(BuildVersionSyncView, {});
+    jest.mocked(AppVersionQuery.latestVersionAsync).mockImplementation(async () => null);
+    jest.mocked(AppQuery.byIdAsync).mockImplementation(async () => getMockAppFragment());
+    jest
+      .mocked(prompts.selectAsync)
+      .mockImplementationOnce(async () => AppVersionSourceUpdateOption.SET_TO_LOCAL);
+    jest.mocked(prompts.confirmAsync).mockImplementation(async () => true);
+
+    const cmd = mockTestCommand(BuildVersionSyncView, ['--platform=android'], ctx);
+    await cmd.run();
+
+    const easJsonAfterCmd = await fs.readJson(path.join(ctx.projectDir, 'eas.json'));
+    expect(easJsonAfterCmd.cli.appVersionSource).toBe('remote');
+  });
+
+  test('syncing version aborts when appVersionSource is not set and the user chooses to configure manually', async () => {
+    const ctx = mockCommandContext(BuildVersionSyncView, {});
+    jest.mocked(AppVersionQuery.latestVersionAsync).mockImplementation(async () => null);
+    jest.mocked(AppQuery.byIdAsync).mockImplementation(async () => getMockAppFragment());
+    jest
+      .mocked(prompts.selectAsync)
+      .mockImplementationOnce(async () => AppVersionSourceUpdateOption.ABORT);
+
+    const cmd = mockTestCommand(BuildVersionSyncView, ['--platform=android'], ctx);
+    await expect(cmd.run()).rejects.toThrowError('Aborted.');
+    expect(AppVersionMutation.createAppVersionAsync).not.toHaveBeenCalledWith();
+  });
 });

packages/eas-cli/src/__tests__/commands/utils.ts

@@ -1,5 +1,5 @@
 import { ExpoConfig } from '@expo/config-types';
-import { EasJson } from '@expo/eas-json';
+import { AppVersionSource, EasJson } from '@expo/eas-json';
 import { Command, Config } from '@oclif/core';
 import { vol } from 'memfs';
 import path from 'path';
@@ -148,3 +148,23 @@ export const getError = <TError = any>(call: () => unknown): TError | NoErrorThr
     return error as TError;
   }
 };
+
+export function withRemoteVersionSource(easJson: EasJson): EasJson {
+  return {
+    ...easJson,
+    cli: {
+      ...easJson.cli,
+      appVersionSource: AppVersionSource.REMOTE,
+    },
+  };
+}
+
+export function withLocalVersionSource(easJson: EasJson): EasJson {
+  return {
+    ...easJson,
+    cli: {
+      ...easJson.cli,
+      appVersionSource: AppVersionSource.LOCAL,
+    },
+  };
+}

packages/eas-cli/src/branch/actions/SelectBranch.ts

@@ -28,7 +28,7 @@ import {
  */
 export class SelectBranch implements EASUpdateAction<UpdateBranchBasicInfoFragment | null> {
   constructor(
-    private options: {
+    private readonly options: {
       filterPredicate?: (branchInfo: UpdateBranchBasicInfoFragment) => boolean;
       printedType?: string;
       pageSize?: number;
@@ -91,8 +91,8 @@ export class SelectBranch implements EASUpdateAction<UpdateBranchBasicInfoFragme
       queryParams: QueryParams
     ): Promise<Connection<UpdateBranchBasicInfoFragment>> =>
       filterPredicate
-        ? this.filterQueryAsync(ctx, queryParams, filterPredicate)
-        : this.queryAsync(ctx, queryParams);
+        ? await this.filterQueryAsync(ctx, queryParams, filterPredicate)
+        : await this.queryAsync(ctx, queryParams);
 
     const getTitleAsync = async (branchInfo: UpdateBranchBasicInfoFragment): Promise<string> =>
       branchInfo.name;

packages/eas-cli/src/branch/queries.ts

@@ -84,7 +84,9 @@ export async function listAndRenderBranchesOnAppAsync(
         queryBranchesOnProjectAsync(graphqlClient, limit, offset, projectId),
       promptOptions: {
         title: 'Load more branches?',
-        renderListItems: branches => renderPageOfBranches(branches, paginatedQueryOptions),
+        renderListItems: branches => {
+          renderPageOfBranches(branches, paginatedQueryOptions);
+        },
       },
     });
   }

packages/eas-cli/src/build/__tests__/cancel-test.ts

@@ -47,14 +47,14 @@ describe(selectBuildToCancelAsync.name, () => {
   it('does not return build id when confirmation is rejected', async () => {
     const graphqlClient = instance(mock<ExpoGraphqlClient>());
     jest.mocked(confirmAsync).mockResolvedValueOnce(false);
-    expect(selectBuildToCancelAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(null);
+    await expect(selectBuildToCancelAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(null);
   });
 
   it('returns build id when confirmation is confirmed', async () => {
     const graphqlClient = instance(mock<ExpoGraphqlClient>());
     jest.mocked(selectAsync).mockResolvedValueOnce(selectedBuildId);
     jest.mocked(confirmAsync).mockResolvedValueOnce(true);
-    expect(selectBuildToCancelAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(
+    await expect(selectBuildToCancelAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(
       selectedBuildId
     );
   });

packages/eas-cli/src/build/__tests__/configure-test.ts

@@ -0,0 +1,77 @@
+import { AppVersionSource, EasJsonAccessor } from '@expo/eas-json';
+import fs from 'fs-extra';
+import { vol } from 'memfs';
+
+import { easCliVersion } from '../../utils/easCli';
+import GitClient from '../../vcs/clients/git';
+import { Client } from '../../vcs/vcs';
+import { ensureProjectConfiguredAsync } from '../configure';
+
+jest.mock('fs');
+jest.mock('../../vcs/vcs');
+jest.mock('../../vcs/clients/git');
+
+beforeEach(async () => {
+  vol.reset();
+});
+
+describe(ensureProjectConfiguredAsync, () => {
+  it('returns false and does not configure if eas.json exists', async () => {
+    vol.fromJSON({
+      './eas.json': JSON.stringify({
+        cli: {
+          version: `>= ${easCliVersion}`,
+        },
+        build: {
+          development: {
+            developmentClient: true,
+            distribution: 'internal',
+          },
+          preview: {
+            distribution: 'internal',
+          },
+          production: {},
+        },
+        submit: {
+          production: {},
+        },
+      }),
+    });
+    await expect(fs.pathExists(EasJsonAccessor.formatEasJsonPath('.'))).resolves.toBeTruthy();
+    const vcsClientMock = jest.mocked(new GitClient());
+    vcsClientMock.showChangedFilesAsync.mockImplementation(async () => {});
+    vcsClientMock.isCommitRequiredAsync.mockImplementation(async () => false);
+    vcsClientMock.trackFileAsync.mockImplementation(async () => {});
+    const result = await ensureProjectConfiguredAsync({
+      projectDir: '.',
+      nonInteractive: false,
+      vcsClient: vcsClientMock as unknown as Client,
+    });
+    expect(result).toBeFalsy();
+    await expect(fs.pathExists(EasJsonAccessor.formatEasJsonPath('.'))).resolves.toBeTruthy();
+  });
+  it('returns true and configures if eas.json does not exist', async () => {
+    const writeFileMock = jest.spyOn(fs, 'writeFile');
+    writeFileMock.mockImplementation(async (...args) => {
+      const easJsonPath = args[0] as string;
+      const easJsonData = args[1] as string;
+      vol.fromJSON({
+        [easJsonPath]: easJsonData,
+      });
+    });
+    await expect(fs.pathExists(EasJsonAccessor.formatEasJsonPath('.'))).resolves.toBeFalsy();
+    const vcsClientMock = jest.mocked(new GitClient());
+    vcsClientMock.showChangedFilesAsync.mockImplementation(async () => {});
+    vcsClientMock.isCommitRequiredAsync.mockImplementation(async () => false);
+    vcsClientMock.trackFileAsync.mockImplementation(async () => {});
+    const result = await ensureProjectConfiguredAsync({
+      projectDir: '.',
+      nonInteractive: false,
+      vcsClient: vcsClientMock as unknown as Client,
+    });
+    expect(result).toBeTruthy();
+    await expect(fs.pathExists(EasJsonAccessor.formatEasJsonPath('.'))).resolves.toBeTruthy();
+    const easJson = await EasJsonAccessor.fromProjectPath('.').readAsync();
+    expect(easJson.cli?.appVersionSource).toEqual(AppVersionSource.REMOTE);
+  });
+});

packages/eas-cli/src/build/__tests__/delete-test.ts

@@ -47,14 +47,14 @@ describe(selectBuildToDeleteAsync.name, () => {
   it('does not return build id when confirmation is rejected', async () => {
     const graphqlClient = instance(mock<ExpoGraphqlClient>());
     jest.mocked(confirmAsync).mockResolvedValueOnce(false);
-    expect(selectBuildToDeleteAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(null);
+    await expect(selectBuildToDeleteAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(null);
   });
 
   it('returns build id when confirmation is confirmed', async () => {
     const graphqlClient = instance(mock<ExpoGraphqlClient>());
     jest.mocked(selectAsync).mockResolvedValueOnce(selectedBuildId);
     jest.mocked(confirmAsync).mockResolvedValueOnce(true);
-    expect(selectBuildToDeleteAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(
+    await expect(selectBuildToDeleteAsync(graphqlClient, projectId, 'blah')).resolves.toEqual(
       selectedBuildId
     );
   });

packages/eas-cli/src/build/android/build.ts

@@ -107,7 +107,7 @@ export async function prepareAndroidBuildAsync(
             ? false
             : ctx.buildProfile.autoIncrement,
         vcsClient: ctx.vcsClient,
-        env: ctx.buildProfile.env,
+        env: ctx.env,
       });
     },
     prepareJobAsync: async (

packages/eas-cli/src/build/android/version.ts

@@ -44,7 +44,7 @@ export async function bumpVersionAsync({
 
   const buildGradle = await getAppBuildGradleAsync(projectDir);
   const isMultiFlavor =
-    buildGradle.android?.productFlavors || buildGradle.android?.flavorDimensions;
+    buildGradle.android?.productFlavors ?? buildGradle.android?.flavorDimensions;
   if (isMultiFlavor) {
     throw new Error(
       'Automatic version bumping is not supported for multi-flavor Android projects.'

packages/eas-cli/src/build/build.ts

@@ -2,7 +2,7 @@ import {
   ArchiveSource,
   ArchiveSourceType,
   BuildJob,
-  FingerprintSourceType,
+  FingerprintSource,
   Metadata,
   Platform,
 } from '@expo/eas-build-job';
@@ -13,8 +13,6 @@ import cliProgress from 'cli-progress';
 import fs from 'fs-extra';
 import { GraphQLError } from 'graphql/error';
 import nullthrows from 'nullthrows';
-import path from 'path';
-import { v4 as uuidv4 } from 'uuid';
 
 import { BuildContext } from './context';
 import {
@@ -59,15 +57,16 @@ import { BuildQuery } from '../graphql/queries/BuildQuery';
 import Log, { learnMore, link } from '../log';
 import { Ora, ora } from '../ora';
 import {
+  RequestedPlatform,
   appPlatformDisplayNames,
   appPlatformEmojis,
   requestedPlatformDisplayNames,
 } from '../platform';
+import { maybeUploadFingerprintAsync } from '../project/maybeUploadFingerprintAsync';
 import { resolveRuntimeVersionAsync } from '../project/resolveRuntimeVersionAsync';
 import { uploadFileAtPathToGCSAsync } from '../uploads';
 import { formatBytes } from '../utils/files';
 import { printJsonOnlyOutput } from '../utils/json';
-import { getTmpDirectory } from '../utils/paths';
 import { createProgressTracker } from '../utils/progress';
 import { sleepAsync } from '../utils/promise';
 
@@ -129,7 +128,9 @@ export async function prepareBuildRequestForPlatformAsync<
 
   await withAnalyticsAsync(
     ctx.analytics,
-    async () => await builder.syncProjectConfigurationAsync(ctx),
+    async () => {
+      await builder.syncProjectConfigurationAsync(ctx);
+    },
     {
       attemptEvent: BuildEvent.CONFIGURE_PROJECT_ATTEMPT,
       successEvent: BuildEvent.CONFIGURE_PROJECT_SUCCESS,
@@ -140,9 +141,15 @@ export async function prepareBuildRequestForPlatformAsync<
 
   if (await ctx.vcsClient.isCommitRequiredAsync()) {
     Log.addNewLineIfNone();
+    const platformToRequestedPlatform: Record<Platform, RequestedPlatform> = {
+      [Platform.ANDROID]: RequestedPlatform.Android,
+      [Platform.IOS]: RequestedPlatform.Ios,
+    };
     await reviewAndCommitChangesAsync(
       ctx.vcsClient,
-      `[EAS Build] Run EAS Build for ${requestedPlatformDisplayNames[ctx.platform as Platform]}`,
+      `[EAS Build] Run EAS Build for ${
+        requestedPlatformDisplayNames[platformToRequestedPlatform[ctx.platform]]
+      }`,
       { nonInteractive: ctx.nonInteractive }
     );
   }
@@ -177,7 +184,7 @@ export async function prepareBuildRequestForPlatformAsync<
 
   return async () => {
     if (ctx.localBuildOptions.localBuildMode === LocalBuildMode.LOCAL_BUILD_PLUGIN) {
-      await runLocalBuildAsync(job, metadata, ctx.localBuildOptions);
+      await runLocalBuildAsync(job, metadata, ctx.localBuildOptions, ctx.env);
       return undefined;
     } else if (ctx.localBuildOptions.localBuildMode === LocalBuildMode.INTERNAL) {
       await BuildMutation.updateBuildMetadataAsync(ctx.graphqlClient, {
@@ -660,72 +667,35 @@ async function createAndMaybeUploadFingerprintAsync<T extends Platform>(
   ctx: BuildContext<T>
 ): Promise<{
   runtimeVersion?: string;
-  fingerprintSource?: Metadata['fingerprintSource'];
+  fingerprintSource?: FingerprintSource;
 }> {
   const resolvedRuntimeVersion = await resolveRuntimeVersionAsync({
     exp: ctx.exp,
     platform: ctx.platform,
     workflow: ctx.workflow,
     projectDir: ctx.projectDir,
-    env: ctx.buildProfile.env,
+    env: ctx.env,
     cwd: ctx.projectDir,
   });
 
+  if (!resolvedRuntimeVersion) {
+    return {};
+  }
+
   /**
-   * It's ok for fingerprintSources to be empty
+   * It's ok for fingerprintSources or runtimeVersion to be empty
    * fingerprintSources only exist if the project is using runtimeVersion.policy: fingerprint
    */
-  if (!resolvedRuntimeVersion?.fingerprintSources) {
+  if (!resolvedRuntimeVersion.fingerprint || !resolvedRuntimeVersion.runtimeVersion) {
     return {
-      runtimeVersion: resolvedRuntimeVersion?.runtimeVersion ?? undefined,
+      runtimeVersion: resolvedRuntimeVersion.runtimeVersion ?? undefined,
     };
   }
 
-  await fs.mkdirp(getTmpDirectory());
-  const fingerprintLocation = path.join(getTmpDirectory(), `${uuidv4()}-runtime-fingerprint.json`);
-
-  await fs.writeJSON(fingerprintLocation, {
-    hash: resolvedRuntimeVersion.runtimeVersion,
-    sources: resolvedRuntimeVersion.fingerprintSources,
+  return await maybeUploadFingerprintAsync({
+    runtimeVersion: resolvedRuntimeVersion.runtimeVersion,
+    fingerprint: resolvedRuntimeVersion.fingerprint,
+    graphqlClient: ctx.graphqlClient,
+    localBuildMode: ctx.localBuildOptions.localBuildMode,
   });
-
-  if (ctx.localBuildOptions.localBuildMode === LocalBuildMode.LOCAL_BUILD_PLUGIN) {
-    return {
-      runtimeVersion: resolvedRuntimeVersion?.runtimeVersion ?? undefined,
-      fingerprintSource: {
-        type: FingerprintSourceType.PATH,
-        path: fingerprintLocation,
-      },
-    };
-  }
-
-  let fingerprintGCSBucketKey = undefined;
-  try {
-    fingerprintGCSBucketKey = await uploadFileAtPathToGCSAsync(
-      ctx.graphqlClient,
-      UploadSessionType.EasUpdateFingerprint,
-      fingerprintLocation
-    );
-  } catch (err: any) {
-    let errMessage = 'Failed to upload fingerprint to EAS';
-
-    if (err.message) {
-      errMessage += `\n\nReason: ${err.message}`;
-    }
-
-    Log.warn(errMessage);
-    return {
-      runtimeVersion: resolvedRuntimeVersion?.runtimeVersion ?? undefined,
-    };
-  } finally {
-    await fs.remove(fingerprintLocation);
-  }
-
-  return {
-    runtimeVersion: resolvedRuntimeVersion?.runtimeVersion ?? undefined,
-    fingerprintSource: {
-      type: FingerprintSourceType.GCS,
-      bucketKey: fingerprintGCSBucketKey,
-    },
-  };
 }

packages/eas-cli/src/build/configure.ts

@@ -1,4 +1,4 @@
-import { EasJson, EasJsonAccessor } from '@expo/eas-json';
+import { AppVersionSource, EasJson, EasJsonAccessor } from '@expo/eas-json';
 import chalk from 'chalk';
 import fs from 'fs-extra';
 
@@ -55,6 +55,7 @@ async function configureAsync({
 const EAS_JSON_DEFAULT: EasJson = {
   cli: {
     version: `>= ${easCliVersion}`,
+    appVersionSource: AppVersionSource.REMOTE,
   },
   build: {
     development: {
@@ -64,7 +65,9 @@ const EAS_JSON_DEFAULT: EasJson = {
     preview: {
       distribution: 'internal',
     },
-    production: {},
+    production: {
+      autoIncrement: true,
+    },
   },
   submit: {
     production: {},

packages/eas-cli/src/build/context.ts

@@ -63,4 +63,5 @@ export interface BuildContext<T extends Platform> {
   vcsClient: Client;
   loggerLevel?: LoggerLevel;
   repack: boolean;
+  env: Record<string, string>;
 }

packages/eas-cli/src/build/createContext.ts

@@ -43,6 +43,7 @@ export async function createBuildContextAsync<T extends Platform>({
   buildLoggerLevel,
   freezeCredentials,
   repack,
+  env,
 }: {
   buildProfileName: string;
   buildProfile: BuildProfile<T>;
@@ -64,8 +65,11 @@ export async function createBuildContextAsync<T extends Platform>({
   buildLoggerLevel?: LoggerLevel;
   freezeCredentials: boolean;
   repack: boolean;
+  env: Record<string, string>;
 }): Promise<BuildContext<T>> {
-  const { exp, projectId } = await getDynamicPrivateProjectConfigAsync({ env: buildProfile.env });
+  const { exp, projectId } = await getDynamicPrivateProjectConfigAsync({
+    env,
+  });
   const projectName = exp.slug;
   const account = await getOwnerAccountForProjectIdAsync(graphqlClient, projectId);
   const workflow = await resolveWorkflowAsync(projectDir, platform, vcsClient);
@@ -87,7 +91,7 @@ export async function createBuildContextAsync<T extends Platform>({
     user: actor,
     graphqlClient,
     analytics,
-    env: buildProfile.env,
+    env,
     easJsonCliConfig,
     vcsClient,
     freezeCredentials,
@@ -147,6 +151,7 @@ export async function createBuildContextAsync<T extends Platform>({
     requiredPackageManager,
     loggerLevel: buildLoggerLevel,
     repack,
+    env,
   };
   if (platform === Platform.ANDROID) {
     const common = commonContext as CommonContext<Platform.ANDROID>;

packages/eas-cli/src/build/evaluateConfigWithEnvVarsAsync.ts

@@ -0,0 +1,116 @@
+import { Env } from '@expo/eas-build-job';
+import { BuildProfile } from '@expo/eas-json';
+
+import { ExpoGraphqlClient } from '../commandUtils/context/contextUtils/createGraphqlClient';
+import { EnvironmentVariableEnvironment } from '../graphql/generated';
+import { EnvironmentVariablesQuery } from '../graphql/queries/EnvironmentVariablesQuery';
+import Log, { learnMore } from '../log';
+
+function isEnvironment(env: string): env is EnvironmentVariableEnvironment {
+  return Object.values(EnvironmentVariableEnvironment).includes(
+    env as EnvironmentVariableEnvironment
+  );
+}
+
+export async function evaluateConfigWithEnvVarsAsync<Config extends { projectId: string }, Opts>({
+  flags,
+  buildProfile,
+  buildProfileName,
+  graphqlClient,
+  getProjectConfig,
+  opts,
+}: {
+  flags: { environment?: string };
+  buildProfile: BuildProfile;
+  buildProfileName: string;
+  graphqlClient: ExpoGraphqlClient | null;
+  opts: Opts;
+  getProjectConfig(opts: Opts): Promise<Config>;
+}): Promise<Config & { env: Env }> {
+  if (!graphqlClient) {
+    Log.warn('An Expo user account is required to fetch environment variables.');
+    const config = await getProjectConfig(opts);
+    return { env: buildProfile.env ?? {}, ...config };
+  }
+  const { projectId } = await getProjectConfig({ env: buildProfile.env, ...opts });
+  const env = await resolveEnvVarsAsync({
+    flags,
+    buildProfile,
+    buildProfileName,
+    graphqlClient,
+    projectId,
+  });
+  const config = await getProjectConfig({ ...opts, env });
+
+  return { env, ...config };
+}
+
+async function resolveEnvVarsAsync({
+  flags,
+  buildProfile,
+  buildProfileName,
+  graphqlClient,
+  projectId,
+}: {
+  flags: { environment?: string };
+  buildProfile: BuildProfile;
+  buildProfileName: string;
+  graphqlClient: ExpoGraphqlClient;
+  projectId: string;
+}): Promise<Env> {
+  const environment =
+    flags.environment ??
+    buildProfile.environment?.toUpperCase() ??
+    process.env.EAS_CURRENT_ENVIRONMENT;
+
+  if (!environment || !isEnvironment(environment)) {
+    Log.log(
+      `Loaded "env" configuration for the "${buildProfileName}" profile: ${
+        buildProfile.env && Object.keys(buildProfile.env).length > 0
+          ? Object.keys(buildProfile.env).join(', ')
+          : 'no environment variables specified'
+      }. ${learnMore('https://docs.expo.dev/build-reference/variables/')}`
+    );
+    return { ...buildProfile.env };
+  }
+
+  try {
+    const environmentVariables = await EnvironmentVariablesQuery.byAppIdWithSensitiveAsync(
+      graphqlClient,
+      {
+        appId: projectId,
+        environment,
+      }
+    );
+    const serverEnvVars = Object.fromEntries(
+      environmentVariables
+        .filter(({ name, value }) => name && value)
+        .map(({ name, value }) => [name, value])
+    ) as Record<string, string>;
+
+    const envVarsWithSource: Record<string, 'build profile' | 'EAS server'> = {
+      ...Object.fromEntries(Object.keys(serverEnvVars).map(key => [key, 'EAS server'])),
+      ...(buildProfile.env
+        ? Object.fromEntries(Object.keys(buildProfile.env).map(key => [key, 'build profile']))
+        : null),
+    };
+    Log.log(
+      `Loaded "env" configuration for the "${buildProfileName}" profile and "${environment.toLowerCase()}" environment: ${
+        Object.keys(envVarsWithSource).length > 0
+          ? Object.keys(envVarsWithSource)
+              .map(key => `${key} (source: ${envVarsWithSource[key]})`)
+              .join('\n')
+          : 'no environment variables specified'
+      }\n${learnMore('https://docs.expo.dev/build-reference/variables/')}`
+    );
+
+    return { ...serverEnvVars, ...buildProfile.env };
+  } catch (e) {
+    Log.error(`Failed to pull env variables for environment ${environment} from EAS servers`);
+    Log.error(e);
+    Log.error(
+      'This can possibly be a bug in EAS/EAS CLI. Report it here: https://github.com/expo/eas-cli/issues'
+    );
+    return { ...buildProfile.env };
+  }
+}

packages/eas-cli/src/build/graphql.ts

@@ -3,6 +3,7 @@ import {
   ArchiveSourceType,
   BuildMode,
   BuildTrigger,
+  FingerprintSourceType,
   Metadata,
   Workflow,
 } from '@expo/eas-build-job';
@@ -15,8 +16,10 @@ import {
   BuildMetadataInput,
   BuildWorkflow,
   DistributionType,
+  FingerprintSourceInput,
   BuildMode as GraphQLBuildMode,
   BuildTrigger as GraphQLBuildTrigger,
+  FingerprintSourceType as GraphQLFingeprintSourceType,
   ProjectArchiveSourceInput,
   ProjectArchiveSourceType,
   WorkerLoggerLevel,
@@ -42,7 +45,8 @@ export function transformProjectArchive(archiveSource: ArchiveSource): ProjectAr
 export function transformMetadata(metadata: Metadata): BuildMetadataInput {
   return {
     ...metadata,
-    fingerprintSource: metadata.fingerprintSource as BuildMetadataInput['fingerprintSource'],
+    fingerprintSource:
+      metadata.fingerprintSource && transformFingerprintSource(metadata.fingerprintSource),
     credentialsSource:
       metadata.credentialsSource && transformCredentialsSource(metadata.credentialsSource),
     distribution: metadata.distribution && transformDistribution(metadata.distribution),
@@ -53,6 +57,20 @@ export function transformMetadata(metadata: Metadata): BuildMetadataInput {
   };
 }
 
+export function transformFingerprintSource(
+  fingerprintSource: NonNullable<Metadata['fingerprintSource']>
+): FingerprintSourceInput | null {
+  if (fingerprintSource.type !== FingerprintSourceType.GCS) {
+    return null;
+  }
+
+  return {
+    type: GraphQLFingeprintSourceType.Gcs,
+    bucketKey: fingerprintSource.bucketKey,
+    isDebugFingerprint: fingerprintSource.isDebugFingerprint,
+  };
+}
+
 function transformCredentialsSource(
   credentialsSource: Metadata['credentialsSource']
 ): BuildCredentialsSource {

packages/eas-cli/src/build/ios/build.ts

@@ -24,7 +24,7 @@ import {
 export async function createIosContextAsync(
   ctx: CommonContext<Platform.IOS>
 ): Promise<IosBuildContext> {
-  const { buildProfile } = ctx;
+  const { buildProfile, env } = ctx;
 
   if (ctx.workflow === Workflow.MANAGED) {
     await ensureBundleIdentifierIsDefinedForManagedProjectAsync(ctx);
@@ -47,7 +47,7 @@ export async function createIosContextAsync(
     projectDir: ctx.projectDir,
     exp: ctx.exp,
     xcodeBuildContext,
-    env: buildProfile.env,
+    env,
     vcsClient: ctx.vcsClient,
   });
   const applicationTarget = findApplicationTarget(targets);
@@ -77,7 +77,7 @@ export async function prepareIosBuildAsync(
   return await prepareBuildRequestForPlatformAsync({
     ctx,
     ensureCredentialsAsync: async (ctx: BuildContext<Platform.IOS>) => {
-      return ensureIosCredentialsAsync(ctx, ctx.ios.targets);
+      return await ensureIosCredentialsAsync(ctx, ctx.ios.targets);
     },
     syncProjectConfigurationAsync: async () => {
       await syncProjectConfigurationAsync({
@@ -89,7 +89,7 @@ export async function prepareIosBuildAsync(
             ? false
             : ctx.buildProfile.autoIncrement,
         vcsClient: ctx.vcsClient,
-        env: ctx.buildProfile.env,
+        env: ctx.env,
       });
     },
     prepareJobAsync: async (

packages/eas-cli/src/build/local.ts

@@ -6,7 +6,7 @@ import semver from 'semver';
 import { ora } from '../ora';
 
 const PLUGIN_PACKAGE_NAME = 'eas-cli-local-build-plugin';
-const PLUGIN_PACKAGE_VERSION = '1.0.129';
+const PLUGIN_PACKAGE_VERSION = '1.0.135';
 
 export enum LocalBuildMode {
   /**
@@ -39,7 +39,8 @@ export interface LocalBuildOptions {
 export async function runLocalBuildAsync(
   job: Job,
   metadata: Metadata,
-  options: LocalBuildOptions
+  options: LocalBuildOptions,
+  env: Record<string, string>
 ): Promise<void> {
   const { command, args } = await getCommandAndArgsAsync(job, metadata);
   let spinner;
@@ -57,6 +58,7 @@ export async function runLocalBuildAsync(
     const spawnPromise = spawnAsync(command, args, {
       stdio: options.verbose ? 'inherit' : 'pipe',
       env: {
+        ...env,
         ...process.env,
         EAS_LOCAL_BUILD_WORKINGDIR: options.workingdir ?? process.env.EAS_LOCAL_BUILD_WORKINGDIR,
         ...(options.skipCleanup || options.skipNativeBuild

packages/eas-cli/src/build/metadata.ts

@@ -60,6 +60,7 @@ export async function collectMetadataAsync<T extends Platform>(
     requiredPackageManager: ctx.requiredPackageManager ?? undefined,
     selectedImage: ctx.buildProfile.image,
     customNodeVersion: ctx.buildProfile.node,
+    environment: ctx.buildProfile.environment,
     simulator: 'simulator' in ctx.buildProfile && ctx.buildProfile.simulator,
   };
   return sanitizeMetadata(metadata);

packages/eas-cli/src/build/queries.ts

@@ -50,8 +50,9 @@ export async function listAndRenderBuildsOnAppAsync(
         }),
       promptOptions: {
         title: 'Load more builds?',
-        renderListItems: builds =>
-          renderPageOfBuilds({ builds, projectDisplayName, paginatedQueryOptions }),
+        renderListItems: builds => {
+          renderPageOfBuilds({ builds, projectDisplayName, paginatedQueryOptions });
+        },
       },
     });
   }

packages/eas-cli/src/build/runBuildAndSubmit.ts

@@ -2,7 +2,6 @@ import { ExpoConfig } from '@expo/config-types';
 import { Env, Platform, Workflow } from '@expo/eas-build-job';
 import {
   AppVersionSource,
-  BuildProfile,
   EasJson,
   EasJsonAccessor,
   EasJsonUtils,
@@ -19,6 +18,7 @@ import { BuildRequestSender, MaybeBuildFragment, waitForBuildEndAsync } from './
 import { ensureProjectConfiguredAsync } from './configure';
 import { BuildContext } from './context';
 import { createBuildContextAsync } from './createContext';
+import { evaluateConfigWithEnvVarsAsync } from './evaluateConfigWithEnvVarsAsync';
 import { prepareIosBuildAsync } from './ios/build';
 import { LocalBuildMode, LocalBuildOptions } from './local';
 import { ensureExpoDevClientInstalledForDevClientBuildsAsync } from './utils/devClient';
@@ -33,6 +33,7 @@ import {
   BuildFragment,
   BuildStatus,
   BuildWithSubmissionsFragment,
+  EnvironmentVariableEnvironment,
   SubmissionFragment,
 } from '../graphql/generated';
 import { BuildQuery } from '../graphql/queries/BuildQuery';
@@ -57,8 +58,9 @@ import {
   validateAppVersionRuntimePolicySupportAsync,
 } from '../project/projectUtils';
 import {
+  ensureAppVersionSourceIsSetAsync,
   validateAppConfigForRemoteVersionSource,
-  validateBuildProfileVersionSettings,
+  validateBuildProfileVersionSettingsAsync,
 } from '../project/remoteVersionSource';
 import { confirmAsync } from '../prompts';
 import { runAsync } from '../run/run';
@@ -96,6 +98,7 @@ export interface BuildFlags {
   buildLoggerLevel?: LoggerLevel;
   freezeCredentials: boolean;
   repack: boolean;
+  environment?: EnvironmentVariableEnvironment;
 }
 
 export async function runBuildAndSubmitAsync(
@@ -129,19 +132,30 @@ export async function runBuildAndSubmitAsync(
     profileName: flags.profile ?? undefined,
     projectDir,
   });
-  Log.log(
-    `Loaded "env" configuration for the "${buildProfiles[0].profileName}" profile: ${
-      buildProfiles[0].profile.env
-        ? Object.keys(buildProfiles[0].profile.env).join(', ')
-        : 'no environment variables specified'
-    }. ${learnMore('https://docs.expo.dev/build-reference/variables/')}`
-  );
 
   for (const buildProfile of buildProfiles) {
     if (buildProfile.profile.image && ['default', 'stable'].includes(buildProfile.profile.image)) {
       Log.warn(
         `The "image" field in the build profile "${buildProfile.profileName}" is set to "${buildProfile.profile.image}". This tag is deprecated and will be removed in the future. Use other images or tags listed here: https://docs.expo.dev/build-reference/infrastructure/`
       );
+    } else if (
+      buildProfile.profile.image &&
+      [
+        'ubuntu-20.04-jdk-11-ndk-r19c',
+        'ubuntu-20.04-jdk-8-ndk-r19c',
+        'ubuntu-20.04-jdk-11-ndk-r21e',
+        'ubuntu-20.04-jdk-8-ndk-r21e',
+        'ubuntu-22.04-jdk-8-ndk-r21e',
+        'ubuntu-20.04-jdk-11-ndk-r23b',
+      ].includes(buildProfile.profile.image)
+    ) {
+      Log.warn(
+        `The "image" field in the build profile "${buildProfile.profileName}" is set to "${
+          buildProfile.profile.image
+        }". This image is deprecated and will be removed on September 1st, 2024. ${learnMore(
+          'https://expo.dev/changelog/2024/07-12-eas-build-upcoming-android-images-updates'
+        )}`
+      );
     }
   }
 
@@ -155,7 +169,12 @@ export async function runBuildAndSubmitAsync(
   const customBuildConfigMetadataByPlatform: { [p in AppPlatform]?: CustomBuildConfigMetadata } =
     {};
   for (const buildProfile of buildProfiles) {
-    validateBuildProfileVersionSettings(buildProfile, easJsonCliConfig);
+    await validateBuildProfileVersionSettingsAsync(
+      buildProfile,
+      easJsonCliConfig,
+      projectDir,
+      flags
+    );
     const maybeMetadata = await validateCustomBuildConfigAsync({
       projectDir,
       profile: buildProfile.profile,
@@ -174,6 +193,16 @@ export async function runBuildAndSubmitAsync(
 
   for (const buildProfile of buildProfiles) {
     const platform = toAppPlatform(buildProfile.platform);
+
+    const { env } = await evaluateConfigWithEnvVarsAsync({
+      flags,
+      buildProfile: buildProfile.profile,
+      buildProfileName: buildProfile.profileName,
+      graphqlClient,
+      getProjectConfig: getDynamicPrivateProjectConfigAsync,
+      opts: { env: buildProfile.profile.env },
+    });
+
     const { build: maybeBuild, buildCtx } = await prepareAndStartBuildAsync({
       projectDir,
       flags,
@@ -186,6 +215,7 @@ export async function runBuildAndSubmitAsync(
       vcsClient,
       getDynamicPrivateProjectConfigAsync,
       customBuildConfigMetadata: customBuildConfigMetadataByPlatform[platform],
+      env,
     });
     if (maybeBuild) {
       startedBuilds.push({ build: maybeBuild, buildProfile });
@@ -233,7 +263,6 @@ export async function runBuildAndSubmitAsync(
         buildCtx: nullthrows(buildCtxByPlatform[startedBuild.build.platform]),
         moreBuilds: startedBuilds.length > 1,
         projectDir,
-        buildProfile: startedBuild.buildProfile.profile,
         submitProfile,
         nonInteractive: flags.nonInteractive,
         selectedSubmitProfileName: flags.submitProfile,
@@ -322,6 +351,7 @@ async function prepareAndStartBuildAsync({
   vcsClient,
   getDynamicPrivateProjectConfigAsync,
   customBuildConfigMetadata,
+  env,
 }: {
   projectDir: string;
   flags: BuildFlags;
@@ -334,6 +364,7 @@ async function prepareAndStartBuildAsync({
   vcsClient: Client;
   getDynamicPrivateProjectConfigAsync: DynamicConfigContextFn;
   customBuildConfigMetadata?: CustomBuildConfigMetadata;
+  env: Env;
 }): Promise<{ build: BuildFragment | undefined; buildCtx: BuildContext<Platform> }> {
   const buildCtx = await createBuildContextAsync({
     buildProfileName: buildProfile.profileName,
@@ -356,6 +387,7 @@ async function prepareAndStartBuildAsync({
     buildLoggerLevel: flags.buildLoggerLevel,
     freezeCredentials: flags.freezeCredentials,
     repack: flags.repack,
+    env,
   });
 
   if (moreBuilds) {
@@ -394,6 +426,25 @@ async function prepareAndStartBuildAsync({
   }
 
   await validateAppVersionRuntimePolicySupportAsync(buildCtx.projectDir, buildCtx.exp);
+  if (
+    easJsonCliConfig?.appVersionSource === undefined &&
+    buildProfile.profile.autoIncrement !== 'version'
+  ) {
+    if (buildProfile.profile.autoIncrement !== true) {
+      Log.warn(
+        `The field "cli.appVersionSource" is not set, but it will be required in the future. ${learnMore(
+          'https://docs.expo.dev/build-reference/app-versions/'
+        )}`
+      );
+    } else {
+      const easJsonAccessor = EasJsonAccessor.fromProjectPath(projectDir);
+      easJsonCliConfig = await ensureAppVersionSourceIsSetAsync(
+        easJsonAccessor,
+        easJsonCliConfig,
+        flags.nonInteractive
+      );
+    }
+  }
   if (easJsonCliConfig?.appVersionSource === AppVersionSource.REMOTE) {
     validateAppConfigForRemoteVersionSource(buildCtx.exp, buildProfile.platform);
   }
@@ -430,7 +481,6 @@ async function prepareAndStartSubmissionAsync({
   buildCtx,
   moreBuilds,
   projectDir,
-  buildProfile,
   submitProfile,
   selectedSubmitProfileName,
   nonInteractive,
@@ -439,7 +489,6 @@ async function prepareAndStartSubmissionAsync({
   buildCtx: BuildContext<Platform>;
   moreBuilds: boolean;
   projectDir: string;
-  buildProfile: BuildProfile;
   submitProfile: SubmitProfile;
   selectedSubmitProfileName?: string;
   nonInteractive: boolean;
@@ -451,7 +500,7 @@ async function prepareAndStartSubmissionAsync({
     profile: submitProfile,
     archiveFlags: { id: build.id },
     nonInteractive,
-    env: buildProfile.env,
+    env: buildCtx.env,
     credentialsCtx: buildCtx.credentialsCtx,
     applicationIdentifier: buildCtx.android?.applicationId ?? buildCtx.ios?.bundleIdentifier,
     actor: buildCtx.user,

packages/eas-cli/src/build/types.ts

@@ -1,3 +1,9 @@
+import { ResourceClass } from '@expo/eas-json';
+import { LoggerLevel } from '@expo/logger';
+
+import { LocalBuildOptions } from './local';
+import { RequestedPlatform } from '../platform';
+
 export enum BuildStatus {
   NEW = 'new',
   IN_QUEUE = 'in-queue',
@@ -14,3 +20,20 @@ export enum BuildDistributionType {
   /** @deprecated Use simulator flag instead */
   SIMULATOR = 'simulator',
 }
+
+export interface BuildFlags {
+  requestedPlatform: RequestedPlatform;
+  profile?: string;
+  nonInteractive: boolean;
+  wait: boolean;
+  clearCache: boolean;
+  json: boolean;
+  autoSubmit: boolean;
+  submitProfile?: string;
+  localBuildOptions: LocalBuildOptions;
+  resourceClass?: ResourceClass;
+  message?: string;
+  buildLoggerLevel?: LoggerLevel;
+  freezeCredentials: boolean;
+  repack: boolean;
+}

packages/eas-cli/src/build/utils/printBuildInfo.ts

@@ -62,7 +62,9 @@ export function printBuildResults(builds: (BuildFragment | null)[]): void {
     assert(build, 'Build should be defined');
     printBuildResult(build);
   } else {
-    (builds.filter(i => i) as BuildFragment[]).forEach(build => printBuildResult(build));
+    (builds.filter(i => i) as BuildFragment[]).forEach(build => {
+      printBuildResult(build);
+    });
   }
 }
 
@@ -97,9 +99,9 @@ function printBuildResult(build: BuildFragment): void {
     // to the build details page and let people press the button to download there
     const qrcodeUrl =
       build.platform === AppPlatform.Ios ? getInternalDistributionInstallUrl(build) : logsUrl;
-    qrcodeTerminal.generate(qrcodeUrl, { small: true }, code =>
-      Log.log(`${indentString(code, 2)}\n`)
-    );
+    qrcodeTerminal.generate(qrcodeUrl, { small: true }, code => {
+      Log.log(`${indentString(code, 2)}\n`);
+    });
     Log.log(
       `${appPlatformEmojis[build.platform]} Open this link on your ${
         appPlatformDisplayNames[build.platform]

packages/eas-cli/src/build/validate.ts

@@ -9,9 +9,9 @@ import Log, { learnMore } from '../log';
 import { isPNGAsync } from '../utils/image';
 
 export function checkNodeEnvVariable(ctx: CommonContext<Platform>): void {
-  if (ctx.buildProfile.env?.NODE_ENV === 'production') {
+  if (ctx.env?.NODE_ENV === 'production') {
     Log.warn(
-      'You set NODE_ENV=production in the build profile. Remember that it will be available during the entire build process. In particular, it will make yarn/npm install only production packages.'
+      'You set NODE_ENV=production in the build profile or environment variables. Remember that it will be available during the entire build process. In particular, it will make yarn/npm install only production packages.'
     );
     Log.newLine();
   }

packages/eas-cli/src/channel/__tests__/branch-mapping-test.ts

@@ -17,7 +17,9 @@ import {
 
 describe(assertVersion, () => {
   it('throws if the branch mapping is not the correct version', () => {
-    expect(() => assertVersion(testChannelBasicInfo, 5)).toThrowError(BranchMappingValidationError);
+    expect(() => {
+      assertVersion(testChannelBasicInfo, 5);
+    }).toThrowError(BranchMappingValidationError);
   });
   it('asserts the correct version', () => {
     assertVersion(testChannelBasicInfo, 0);

packages/eas-cli/src/channel/actions/SelectChannel.ts

@@ -28,7 +28,7 @@ import {
  */
 export class SelectChannel implements EASUpdateAction<UpdateChannelBasicInfoFragment | null> {
   constructor(
-    private options: {
+    private readonly options: {
       filterPredicate?: (channelInfo: UpdateChannelBasicInfoFragment) => boolean;
       printedType?: string;
       pageSize?: number;
@@ -91,8 +91,8 @@ export class SelectChannel implements EASUpdateAction<UpdateChannelBasicInfoFrag
       queryParams: QueryParams
     ): Promise<Connection<UpdateChannelBasicInfoFragment>> =>
       filterPredicate
-        ? this.filterQueryAsync(ctx, queryParams, filterPredicate)
-        : this.queryAsync(ctx, queryParams);
+        ? await this.filterQueryAsync(ctx, queryParams, filterPredicate)
+        : await this.queryAsync(ctx, queryParams);
 
     const getTitleAsync = async (channelInfo: UpdateChannelBasicInfoFragment): Promise<string> =>
       channelInfo.name;

packages/eas-cli/src/channel/queries.ts

@@ -89,7 +89,9 @@ export async function listAndRenderChannelsOnAppAsync(
         queryChannelsOnAppAsync(graphqlClient, { limit, offset, appId: projectId }),
       promptOptions: {
         title: 'Load more channels?',
-        renderListItems: channels => renderPageOfChannels(channels, paginatedQueryOptions),
+        renderListItems: channels => {
+          renderPageOfChannels(channels, paginatedQueryOptions);
+        },
       },
     });
   }
@@ -131,8 +133,9 @@ export async function listAndRenderBranchesAndUpdatesOnChannelAsync(
         }),
       promptOptions: {
         title: 'Load more channels?',
-        renderListItems: branches =>
-          renderPageOfBranchesOnChannel(channel, branches, paginatedQueryOptions),
+        renderListItems: branches => {
+          renderPageOfBranchesOnChannel(channel, branches, paginatedQueryOptions);
+        },
       },
     });
   }

packages/eas-cli/src/commandUtils/EasCommand.ts

@@ -187,13 +187,13 @@ export default abstract class EasCommand extends Command {
       action: `eas ${this.id}`,
     });
 
-    return this.runAsync();
+    return await this.runAsync();
   }
 
   // eslint-disable-next-line async-protect/async-suffix
   override async finally(err: Error): Promise<any> {
     await this.analytics.flushAsync();
-    return super.finally(err);
+    return await super.finally(err);
   }
 
   protected override catch(err: Error): Promise<any> {

packages/eas-cli/src/commandUtils/context/contextUtils/createGraphqlClient.ts

@@ -38,7 +38,7 @@ export function createGraphqlClient(authInfo: {
           return !!(
             err &&
             !operation.context.noRetry &&
-            (err.networkError || err.graphQLErrors.some(e => e?.extensions?.isTransient))
+            (err.networkError ?? err.graphQLErrors.some(e => e?.extensions?.isTransient))
           );
         },
       }),

packages/eas-cli/src/commandUtils/flags.ts

@@ -1,5 +1,21 @@
 import { Flags } from '@oclif/core';
 
+import {
+  EnvironmentVariableEnvironment,
+  EnvironmentVariableScope,
+  EnvironmentVariableVisibility,
+} from '../graphql/generated';
+
+// NOTE: not exactly true, but, provided mapToLowercase and upperCaseAsync
+// are used in tandem, it saves on unnecessary typying in commands
+async function upperCaseAsync<T>(input: string): Promise<T> {
+  return input.toUpperCase() as T;
+}
+
+function mapToLowercase<T extends string>(options: T[]): T[] {
+  return options.map(option => option.toLowerCase()) as T[];
+}
+
 export const EasNonInteractiveAndJsonFlags = {
   json: Flags.boolean({
     description: 'Enable JSON output, non-JSON messages will be printed to stderr.',
@@ -10,6 +26,62 @@ export const EasNonInteractiveAndJsonFlags = {
   }),
 };
 
+export const EASEnvironmentFlag = {
+  environment: Flags.enum<EnvironmentVariableEnvironment>({
+    description: "Environment variable's environment",
+    parse: upperCaseAsync,
+    options: mapToLowercase([
+      EnvironmentVariableEnvironment.Development,
+      EnvironmentVariableEnvironment.Preview,
+      EnvironmentVariableEnvironment.Production,
+    ]),
+  }),
+};
+
+// NOTE: Used in build commands, should be replaced with EASEnvironmentFlag when
+// the feature is public
+export const EASEnvironmentFlagHidden = {
+  environment: Flags.enum<EnvironmentVariableEnvironment>({
+    description: "Environment variable's environment",
+    parse: upperCaseAsync,
+    hidden: true,
+    options: mapToLowercase([
+      EnvironmentVariableEnvironment.Development,
+      EnvironmentVariableEnvironment.Preview,
+      EnvironmentVariableEnvironment.Production,
+    ]),
+  }),
+};
+
+export const EASVariableFormatFlag = {
+  format: Flags.enum({
+    description: 'Output format',
+    options: ['long', 'short'],
+    default: 'short',
+  }),
+};
+
+export const EASVariableVisibilityFlag = {
+  visibility: Flags.enum<EnvironmentVariableVisibility>({
+    description: 'Visibility of the variable',
+    options: mapToLowercase([
+      EnvironmentVariableVisibility.Secret,
+      EnvironmentVariableVisibility.Sensitive,
+      EnvironmentVariableVisibility.Public,
+    ]),
+    parse: upperCaseAsync,
+  }),
+};
+
+export const EASVariableScopeFlag = {
+  scope: Flags.enum<EnvironmentVariableScope>({
+    description: 'Scope for the variable',
+    options: mapToLowercase([EnvironmentVariableScope.Shared, EnvironmentVariableScope.Project]),
+    parse: upperCaseAsync,
+    default: EnvironmentVariableScope.Project,
+  }),
+};
+
 export const EASNonInteractiveFlag = {
   'non-interactive': Flags.boolean({
     description: 'Run the command in non-interactive mode.',

packages/eas-cli/src/commandUtils/gating/FeatureGating.ts

@@ -63,7 +63,11 @@ export default class FeatureGating {
   }
 
   public static overrideKeyForEachInTest(key: FeatureGateKey, enabled: boolean): void {
-    beforeEach(() => FeatureGateTestOverrides.setOverride(key, enabled));
-    afterEach(() => FeatureGateTestOverrides.removeOverride(key));
+    beforeEach(() => {
+      FeatureGateTestOverrides.setOverride(key, enabled);
+    });
+    afterEach(() => {
+      FeatureGateTestOverrides.removeOverride(key);
+    });
   }
 }

packages/eas-cli/src/commands/analytics.ts

@@ -10,7 +10,7 @@ export default class AnalyticsView extends EasCommand {
   async runAsync(): Promise<void> {
     const { STATUS: status } = (await this.parse(AnalyticsView)).args;
     if (status) {
-      setAnalyticsEnabledAsync(status === 'on');
+      await setAnalyticsEnabledAsync(status === 'on');
       Log.withTick(`${status === 'on' ? 'Enabling' : 'Disabling'} analytics.`);
     } else {
       const analyticsEnabled = await getAnalyticsEnabledAsync();

packages/eas-cli/src/commands/build/cancel.ts

@@ -39,7 +39,7 @@ async function cancelBuildAsync(
       )
       .toPromise()
   );
-  return data.build!.cancel;
+  return data.build.cancel;
 }
 
 export async function selectBuildToCancelAsync(

packages/eas-cli/src/commands/build/delete.ts

@@ -33,7 +33,7 @@ async function deleteBuildAsync(
       )
       .toPromise()
   );
-  return data.build!.deleteBuild;
+  return data.build.deleteBuild;
 }
 
 export async function selectBuildToDeleteAsync(

packages/eas-cli/src/commands/build/index.ts

@@ -10,8 +10,8 @@ import path from 'path';
 import { LocalBuildMode } from '../../build/local';
 import { BuildFlags, runBuildAndSubmitAsync } from '../../build/runBuildAndSubmit';
 import EasCommand from '../../commandUtils/EasCommand';
-import { EasNonInteractiveAndJsonFlags } from '../../commandUtils/flags';
-import { StatuspageServiceName } from '../../graphql/generated';
+import { EASEnvironmentFlagHidden, EasNonInteractiveAndJsonFlags } from '../../commandUtils/flags';
+import { EnvironmentVariableEnvironment, StatuspageServiceName } from '../../graphql/generated';
 import Log, { link } from '../../log';
 import { RequestedPlatform, selectRequestedPlatformAsync } from '../../platform';
 import { selectAsync } from '../../prompts';
@@ -37,6 +37,7 @@ interface RawBuildFlags {
   'build-logger-level'?: LoggerLevel;
   'freeze-credentials': boolean;
   repack: boolean;
+  environment?: EnvironmentVariableEnvironment;
 }
 
 export default class Build extends EasCommand {
@@ -116,6 +117,7 @@ export default class Build extends EasCommand {
       description: 'Use the golden dev client build repack flow as it works for onboarding',
     }),
     ...EasNonInteractiveAndJsonFlags,
+    ...EASEnvironmentFlagHidden,
   };
 
   static override contextDefinition = {
@@ -230,6 +232,7 @@ export default class Build extends EasCommand {
       buildLoggerLevel: flags['build-logger-level'],
       freezeCredentials: flags['freeze-credentials'],
       repack: flags.repack,
+      environment: flags.environment,
     };
   }
 

packages/eas-cli/src/commands/build/resign.ts

@@ -6,13 +6,14 @@ import chalk from 'chalk';
 
 import { handleDeprecatedEasJsonAsync } from '.';
 import { waitForBuildEndAsync } from '../../build/build';
+import { evaluateConfigWithEnvVarsAsync } from '../../build/evaluateConfigWithEnvVarsAsync';
 import { ensureIosCredentialsForBuildResignAsync } from '../../build/ios/credentials';
 import { prepareCredentialsToResign } from '../../build/ios/prepareJob';
 import { listAndSelectBuildOnAppAsync } from '../../build/queries';
 import { printBuildResults, printLogsUrls } from '../../build/utils/printBuildInfo';
 import EasCommand from '../../commandUtils/EasCommand';
 import { ExpoGraphqlClient } from '../../commandUtils/context/contextUtils/createGraphqlClient';
-import { EasNonInteractiveAndJsonFlags } from '../../commandUtils/flags';
+import { EASEnvironmentFlagHidden, EasNonInteractiveAndJsonFlags } from '../../commandUtils/flags';
 import { EasPaginatedQueryFlags } from '../../commandUtils/pagination';
 import { CredentialsContext } from '../../credentials/context';
 import {
@@ -21,6 +22,7 @@ import {
   BuildStatus,
   BuildWorkflow,
   DistributionType,
+  EnvironmentVariableEnvironment,
   IosJobOverridesInput,
   ProjectArchiveSourceType,
   StatuspageServiceName,
@@ -46,6 +48,7 @@ interface BuildResignFlags {
   sourceProfile?: string;
   maybeBuildId?: string;
   wait: boolean;
+  environment?: EnvironmentVariableEnvironment;
 }
 interface RawBuildResignFlags {
   json: boolean;
@@ -57,6 +60,7 @@ interface RawBuildResignFlags {
   'source-profile': string | undefined;
   wait: boolean;
   id: string | undefined;
+  environment: EnvironmentVariableEnvironment | undefined;
 }
 
 export default class BuildResign extends EasCommand {
@@ -89,6 +93,7 @@ export default class BuildResign extends EasCommand {
     }),
     ...EasPaginatedQueryFlags,
     ...EasNonInteractiveAndJsonFlags,
+    ...EASEnvironmentFlagHidden,
   };
 
   static override contextDefinition = {
@@ -140,7 +145,16 @@ export default class BuildResign extends EasCommand {
       platform,
       flags.targetProfile ?? 'production'
     );
-    const { exp, projectId } = await getDynamicPrivateProjectConfigAsync({ env: buildProfile.env });
+
+    const { exp, projectId, env } = await evaluateConfigWithEnvVarsAsync({
+      flags,
+      buildProfile,
+      buildProfileName: flags.targetProfile ?? 'production',
+      graphqlClient,
+      getProjectConfig: getDynamicPrivateProjectConfigAsync,
+      opts: { env: buildProfile.env },
+    });
+
     const account = await getOwnerAccountForProjectIdAsync(graphqlClient, projectId);
     const build = await this.ensureBuildSelectedAsync(
       {
@@ -161,7 +175,7 @@ export default class BuildResign extends EasCommand {
       user: actor,
       graphqlClient,
       analytics,
-      env: buildProfile.env,
+      env,
       easJsonCliConfig,
       vcsClient,
     });
@@ -181,7 +195,7 @@ export default class BuildResign extends EasCommand {
       projectDir,
       exp,
       xcodeBuildContext,
-      env: buildProfile.env,
+      env,
       vcsClient,
     });
     const credentialsResult = await ensureIosCredentialsForBuildResignAsync(
@@ -248,6 +262,7 @@ export default class BuildResign extends EasCommand {
       targetProfile: flags['target-profile'],
       maybeBuildId: flags.id,
       wait: flags.wait,
+      environment: flags.environment,
     };
   }
 

packages/eas-cli/src/commands/build/version/get.ts

@@ -3,8 +3,12 @@ import { EasJsonAccessor } from '@expo/eas-json';
 import { Flags } from '@oclif/core';
 import chalk from 'chalk';
 
+import { evaluateConfigWithEnvVarsAsync } from '../../../build/evaluateConfigWithEnvVarsAsync';
 import EasCommand from '../../../commandUtils/EasCommand';
-import { EasNonInteractiveAndJsonFlags } from '../../../commandUtils/flags';
+import {
+  EASEnvironmentFlagHidden,
+  EasNonInteractiveAndJsonFlags,
+} from '../../../commandUtils/flags';
 import { AppVersionQuery } from '../../../graphql/queries/AppVersionQuery';
 import { toAppPlatform } from '../../../graphql/types/AppPlatform';
 import Log from '../../../log';
@@ -31,6 +35,7 @@ export default class BuildVersionGetView extends EasCommand {
         'Name of the build profile from eas.json. Defaults to "production" if defined in eas.json.',
       helpValue: 'PROFILE_NAME',
     }),
+    ...EASEnvironmentFlagHidden,
     ...EasNonInteractiveAndJsonFlags,
   };
 
@@ -74,8 +79,13 @@ export default class BuildVersionGetView extends EasCommand {
     });
     const results: { [key in Platform]?: string } = {};
     for (const { profile, platform } of buildProfiles) {
-      const { exp, projectId } = await getDynamicPrivateProjectConfigAsync({
-        env: profile.env,
+      const { exp, projectId, env } = await evaluateConfigWithEnvVarsAsync({
+        flags,
+        buildProfile: profile,
+        buildProfileName: flags.profile ?? 'production',
+        graphqlClient,
+        getProjectConfig: getDynamicPrivateProjectConfigAsync,
+        opts: { env: profile.env },
       });
 
       validateAppConfigForRemoteVersionSource(exp, platform);
@@ -89,6 +99,7 @@ export default class BuildVersionGetView extends EasCommand {
         platform,
         vcsClient,
         nonInteractive: flags['non-interactive'],
+        env,
       });
       const remoteVersions = await AppVersionQuery.latestVersionAsync(
         graphqlClient,

packages/eas-cli/src/commands/build/version/set.ts

@@ -4,7 +4,9 @@ import { EasJsonAccessor, EasJsonUtils } from '@expo/eas-json';
 import { Flags } from '@oclif/core';
 import chalk from 'chalk';
 
+import { evaluateConfigWithEnvVarsAsync } from '../../../build/evaluateConfigWithEnvVarsAsync';
 import EasCommand from '../../../commandUtils/EasCommand';
+import { EASEnvironmentFlagHidden } from '../../../commandUtils/flags';
 import { AppVersionMutation } from '../../../graphql/mutations/AppVersionMutation';
 import { AppVersionQuery } from '../../../graphql/queries/AppVersionQuery';
 import { toAppPlatform } from '../../../graphql/types/AppPlatform';
@@ -35,6 +37,7 @@ export default class BuildVersionSetView extends EasCommand {
         'Name of the build profile from eas.json. Defaults to "production" if defined in eas.json.',
       helpValue: 'PROFILE_NAME',
     }),
+    ...EASEnvironmentFlagHidden,
   };
 
   static override contextDefinition = {
@@ -64,7 +67,14 @@ export default class BuildVersionSetView extends EasCommand {
       flags.profile ?? undefined
     );
 
-    const { exp, projectId } = await getDynamicPrivateProjectConfigAsync({ env: profile.env });
+    const { exp, projectId, env } = await evaluateConfigWithEnvVarsAsync({
+      flags,
+      buildProfile: profile,
+      buildProfileName: flags.profile ?? 'production',
+      graphqlClient,
+      getProjectConfig: getDynamicPrivateProjectConfigAsync,
+      opts: { env: profile.env },
+    });
     const displayName = await getDisplayNameForProjectIdAsync(graphqlClient, projectId);
 
     validateAppConfigForRemoteVersionSource(exp, platform);
@@ -78,6 +88,7 @@ export default class BuildVersionSetView extends EasCommand {
       platform,
       vcsClient,
       nonInteractive: false,
+      env,
     });
     const remoteVersions = await AppVersionQuery.latestVersionAsync(
       graphqlClient,

packages/eas-cli/src/commands/build/version/sync.ts

@@ -5,8 +5,10 @@ import { Flags } from '@oclif/core';
 import chalk from 'chalk';
 
 import { updateNativeVersionsAsync as updateAndroidNativeVersionsAsync } from '../../../build/android/version';
+import { evaluateConfigWithEnvVarsAsync } from '../../../build/evaluateConfigWithEnvVarsAsync';
 import { updateNativeVersionsAsync as updateIosNativeVersionsAsync } from '../../../build/ios/version';
 import EasCommand from '../../../commandUtils/EasCommand';
+import { EASEnvironmentFlagHidden } from '../../../commandUtils/flags';
 import { AppVersionQuery } from '../../../graphql/queries/AppVersionQuery';
 import { toAppPlatform } from '../../../graphql/types/AppPlatform';
 import Log from '../../../log';
@@ -54,6 +56,7 @@ export default class BuildVersionSyncView extends EasCommand {
         'Name of the build profile from eas.json. Defaults to "production" if defined in eas.json.',
       helpValue: 'PROFILE_NAME',
     }),
+    ...EASEnvironmentFlagHidden,
   };
 
   static override contextDefinition = {
@@ -87,8 +90,13 @@ export default class BuildVersionSyncView extends EasCommand {
       projectDir,
     });
     for (const profileInfo of buildProfiles) {
-      const { exp, projectId } = await getDynamicPrivateProjectConfigAsync({
-        env: profileInfo.profile.env,
+      const { exp, projectId, env } = await evaluateConfigWithEnvVarsAsync({
+        flags,
+        buildProfile: profileInfo.profile,
+        buildProfileName: profileInfo.profileName,
+        graphqlClient,
+        getProjectConfig: getDynamicPrivateProjectConfigAsync,
+        opts: { env: profileInfo.profile.env },
       });
 
       validateAppConfigForRemoteVersionSource(exp, profileInfo.platform);
@@ -103,6 +111,7 @@ export default class BuildVersionSyncView extends EasCommand {
         platform: profileInfo.platform,
         vcsClient,
         nonInteractive: false,
+        env,
       });
       const remoteVersions = await AppVersionQuery.latestVersionAsync(
         graphqlClient,
@@ -128,7 +137,7 @@ export default class BuildVersionSyncView extends EasCommand {
         continue;
       }
       if (profileInfo.platform === Platform.ANDROID) {
-        this.syncAndroidAsync({
+        await this.syncAndroidAsync({
           projectDir,
           exp,
           profile: profileInfo.profile as BuildProfile<Platform.ANDROID>,
@@ -137,7 +146,7 @@ export default class BuildVersionSyncView extends EasCommand {
           vcsClient,
         });
       } else {
-        this.syncIosAsync({
+        await this.syncIosAsync({
           projectDir,
           exp,
           profile: profileInfo.profile as BuildProfile<Platform.IOS>,
@@ -199,7 +208,7 @@ export default class BuildVersionSyncView extends EasCommand {
     if (workflow === Workflow.GENERIC) {
       const buildGradle = await getAppBuildGradleAsync(projectDir);
       const isMultiFlavor =
-        buildGradle.android?.productFlavors || buildGradle.android?.flavorDimensions;
+        buildGradle.android?.productFlavors ?? buildGradle.android?.flavorDimensions;
       if (isMultiFlavor) {
         throw new Error(
           "Versions in native code can't be automatically synced in multi-flavor Android projects. If you are using EAS Build with app version source set to remote, the correct values will be injected at the build time."

packages/eas-cli/src/commands/config.ts

@@ -4,8 +4,10 @@ import { EasJsonAccessor, EasJsonUtils } from '@expo/eas-json';
 import { Flags } from '@oclif/core';
 import chalk from 'chalk';
 
+import { evaluateConfigWithEnvVarsAsync } from '../build/evaluateConfigWithEnvVarsAsync';
 import EasCommand from '../commandUtils/EasCommand';
-import { EasNonInteractiveAndJsonFlags } from '../commandUtils/flags';
+import { createGraphqlClient } from '../commandUtils/context/contextUtils/createGraphqlClient';
+import { EASEnvironmentFlagHidden, EasNonInteractiveAndJsonFlags } from '../commandUtils/flags';
 import { toAppPlatform } from '../graphql/types/AppPlatform';
 import Log from '../log';
 import { appPlatformEmojis } from '../platform';
@@ -27,12 +29,14 @@ export default class Config extends EasCommand {
     'eas-json-only': Flags.boolean({
       hidden: true,
     }),
+    ...EASEnvironmentFlagHidden,
     ...EasNonInteractiveAndJsonFlags,
   };
 
   static override contextDefinition = {
     ...this.ContextOptions.DynamicProjectConfig,
     ...this.ContextOptions.ProjectDir,
+    ...this.ContextOptions.SessionManagment,
   };
 
   async runAsync(): Promise<void> {
@@ -40,10 +44,15 @@ export default class Config extends EasCommand {
     if (flags.json) {
       enableJsonOutput();
     }
-    const { platform: maybePlatform, profile: maybeProfile } = flags;
-    const { getDynamicPublicProjectConfigAsync, projectDir } = await this.getContextAsync(Config, {
-      nonInteractive: false,
-    });
+    const {
+      platform: maybePlatform,
+      profile: maybeProfile,
+      'non-interactive': nonInteractive,
+    } = flags;
+    const { getDynamicPublicProjectConfigAsync, projectDir, sessionManager } =
+      await this.getContextAsync(Config, {
+        nonInteractive,
+      });
 
     const accessor = EasJsonAccessor.fromProjectPath(projectDir);
     const profileName =
@@ -80,8 +89,17 @@ export default class Config extends EasCommand {
         Log.log(JSON.stringify(profile, null, 2));
       }
     } else {
-      const { exp: appConfig } = await getDynamicPublicProjectConfigAsync({
-        env: profile.env,
+      const { authenticationInfo } = await sessionManager.ensureLoggedInAsync({
+        nonInteractive,
+      });
+      const graphqlClient = createGraphqlClient(authenticationInfo);
+      const { exp: appConfig } = await evaluateConfigWithEnvVarsAsync({
+        flags,
+        buildProfile: profile,
+        buildProfileName: profileName,
+        graphqlClient,
+        getProjectConfig: getDynamicPublicProjectConfigAsync,
+        opts: { env: profile.env },
       });
 
       if (flags.json) {

packages/eas-cli/src/commands/device/delete.ts

@@ -170,7 +170,7 @@ export default class DeviceDelete extends EasCommand {
       Log.log(
         formatDevice(device, {
           appleTeamName,
-          appleTeamIdentifier: appleTeamIdentifier!,
+          appleTeamIdentifier,
         })
       );
       Log.newLine();

packages/eas-cli/src/commands/device/rename.ts

@@ -159,7 +159,7 @@ export default class DeviceRename extends EasCommand {
       Log.log(
         formatDevice(device, {
           appleTeamName,
-          appleTeamIdentifier: appleTeamIdentifier!,
+          appleTeamIdentifier,
         })
       );
       Log.newLine();

packages/eas-cli/src/commands/env/create.ts

@@ -0,0 +1,276 @@
+import { Flags } from '@oclif/core';
+import chalk from 'chalk';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import {
+  EASEnvironmentFlag,
+  EASNonInteractiveFlag,
+  EASVariableScopeFlag,
+  EASVariableVisibilityFlag,
+} from '../../commandUtils/flags';
+import {
+  EnvironmentVariableEnvironment,
+  EnvironmentVariableScope,
+  EnvironmentVariableVisibility,
+} from '../../graphql/generated';
+import { EnvironmentVariableMutation } from '../../graphql/mutations/EnvironmentVariableMutation';
+import { EnvironmentVariablesQuery } from '../../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../../log';
+import {
+  getDisplayNameForProjectIdAsync,
+  getOwnerAccountForProjectIdAsync,
+} from '../../project/projectUtils';
+import { confirmAsync } from '../../prompts';
+import {
+  promptVariableEnvironmentAsync,
+  promptVariableNameAsync,
+  promptVariableValueAsync,
+} from '../../utils/prompts';
+
+type CreateFlags = {
+  name?: string;
+  value?: string;
+  link?: boolean;
+  force?: boolean;
+  visibility?: EnvironmentVariableVisibility;
+  scope?: EnvironmentVariableScope;
+  environment?: EnvironmentVariableEnvironment;
+  'non-interactive': boolean;
+};
+
+export default class EnvironmentVariableCreate extends EasCommand {
+  static override description =
+    'create an environment variable on the current project or owner account';
+
+  static override hidden = true;
+
+  static override flags = {
+    name: Flags.string({
+      description: 'Name of the variable',
+    }),
+    value: Flags.string({
+      description: 'Text value or the variable',
+    }),
+    link: Flags.boolean({
+      description: 'Link shared variable to the current project',
+    }),
+    force: Flags.boolean({
+      description: 'Overwrite existing variable',
+      default: false,
+    }),
+    ...EASVariableVisibilityFlag,
+    ...EASVariableScopeFlag,
+    ...EASEnvironmentFlag,
+    ...EASNonInteractiveFlag,
+  };
+
+  static override contextDefinition = {
+    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.Analytics,
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  async runAsync(): Promise<void> {
+    const { flags } = await this.parse(EnvironmentVariableCreate);
+
+    let {
+      name,
+      value,
+      scope,
+      'non-interactive': nonInteractive,
+      environment,
+      visibility,
+      link,
+      force,
+    } = this.validateFlags(flags);
+
+    const {
+      privateProjectConfig: { projectId },
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(EnvironmentVariableCreate, {
+      nonInteractive,
+    });
+
+    const [projectDisplayName, ownerAccount] = await Promise.all([
+      getDisplayNameForProjectIdAsync(graphqlClient, projectId),
+      getOwnerAccountForProjectIdAsync(graphqlClient, projectId),
+    ]);
+
+    if (!name) {
+      name = await promptVariableNameAsync(nonInteractive);
+    }
+
+    let overwrite = false;
+    visibility = visibility ?? EnvironmentVariableVisibility.Public;
+
+    if (!value) {
+      value = await promptVariableValueAsync({
+        nonInteractive,
+        hidden: visibility !== EnvironmentVariableVisibility.Public,
+      });
+    }
+
+    if (scope === EnvironmentVariableScope.Project) {
+      if (!environment) {
+        environment = await promptVariableEnvironmentAsync(nonInteractive);
+      }
+      const existingVariables = await EnvironmentVariablesQuery.byAppIdAsync(graphqlClient, {
+        appId: projectId,
+        environment,
+      });
+      const existingVariable = existingVariables.find(variable => variable.name === name);
+
+      if (existingVariable) {
+        if (existingVariable.scope === EnvironmentVariableScope.Shared) {
+          if (!nonInteractive) {
+            const confirmation = await confirmAsync({
+              message: `Shared variable ${name} already exists on this project. Do you want to unlink it first?`,
+            });
+
+            if (!confirmation) {
+              Log.log('Aborting');
+              throw new Error(`Shared variable ${name} already exists on this project.`);
+            }
+          } else if (!force) {
+            throw new Error(
+              `Shared variable ${name} already exists on this project. Use --force to overwrite it.`
+            );
+          }
+
+          await EnvironmentVariableMutation.unlinkSharedEnvironmentVariableAsync(
+            graphqlClient,
+            existingVariable.id,
+            projectId,
+            environment
+          );
+          Log.withTick(
+            `Unlinking shared variable ${chalk.bold(name)} on project ${chalk.bold(
+              projectDisplayName
+            )}.`
+          );
+        } else {
+          if (!nonInteractive) {
+            const confirmation = await confirmAsync({
+              message: `Variable ${name} already exists on this project. Do you want to overwrite it?`,
+            });
+
+            if (!confirmation) {
+              Log.log('Aborting');
+              throw new Error(
+                `Variable ${name} already exists on this project.  Use --force to overwrite it.`
+              );
+            }
+          } else if (!force) {
+            throw new Error(
+              `Variable ${name} already exists on this project. Use --force to overwrite it.`
+            );
+          }
+          overwrite = true;
+        }
+      }
+
+      const variable = await EnvironmentVariableMutation.createForAppAsync(
+        graphqlClient,
+        {
+          name,
+          value,
+          environment,
+          visibility,
+          overwrite,
+        },
+        projectId
+      );
+      if (!variable) {
+        throw new Error(
+          `Could not create variable with name ${name} on project ${projectDisplayName}`
+        );
+      }
+
+      Log.withTick(
+        `Created a new variable ${chalk.bold(name)} on project ${chalk.bold(projectDisplayName)}.`
+      );
+    } else if (scope === EnvironmentVariableScope.Shared) {
+      const sharedVariables = await EnvironmentVariablesQuery.sharedAsync(graphqlClient, {
+        appId: projectId,
+      });
+      const existingVariable = sharedVariables.find(variable => variable.name === name);
+      if (existingVariable) {
+        throw new Error(
+          `Shared variable with ${name} name already exists on this account.\n` +
+            `Use a different name or delete the existing variable  on website or by using eas env:delete --name ${name} --scope shared command.`
+        );
+      }
+
+      if (environment && !link) {
+        const confirmation = await confirmAsync({
+          message: `Unexpected argument: --environment can only be used with --link flag. Do you want to link the variable to the current project?`,
+        });
+
+        if (!confirmation) {
+          Log.log('Aborting');
+          throw new Error('Unexpected argument: --environment can only be used with --link flag.');
+        }
+      }
+
+      if (!environment && link) {
+        environment = await promptVariableEnvironmentAsync(nonInteractive);
+      }
+
+      const variable = await EnvironmentVariableMutation.createSharedVariableAsync(
+        graphqlClient,
+        {
+          name,
+          value,
+          visibility,
+        },
+        ownerAccount.id
+      );
+
+      if (!variable) {
+        throw new Error(
+          `Could not create variable with name ${name} on account ${ownerAccount.name}`
+        );
+      }
+
+      Log.withTick(
+        `Created a new variable ${chalk.bold(name)} on account ${chalk.bold(ownerAccount.name)}.`
+      );
+
+      if (link && environment) {
+        Log.withTick(
+          `Linking shared variable ${chalk.bold(name)} to project ${chalk.bold(
+            projectDisplayName
+          )}.`
+        );
+        await EnvironmentVariableMutation.linkSharedEnvironmentVariableAsync(
+          graphqlClient,
+          variable.id,
+          projectId,
+          environment
+        );
+        Log.withTick(
+          `Linked shared variable ${chalk.bold(name)} to project ${chalk.bold(projectDisplayName)}.`
+        );
+      }
+    }
+  }
+
+  private validateFlags(flags: CreateFlags): CreateFlags {
+    if (flags.scope !== EnvironmentVariableScope.Shared && flags.link) {
+      throw new Error(
+        `Unexpected argument: --link can only be used when creating  shared variables`
+      );
+    }
+    if (
+      flags.scope === EnvironmentVariableScope.Shared &&
+      flags.environment &&
+      !flags.link &&
+      flags['non-interactive']
+    ) {
+      throw new Error(
+        'Unexpected argument: --environment in non-interactive mode can only be used with --link flag.'
+      );
+    }
+    return flags;
+  }
+}

packages/eas-cli/src/commands/env/delete.ts

@@ -0,0 +1,131 @@
+import { Flags } from '@oclif/core';
+import chalk from 'chalk';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import {
+  EASEnvironmentFlag,
+  EASNonInteractiveFlag,
+  EASVariableScopeFlag,
+} from '../../commandUtils/flags';
+import { EnvironmentVariableEnvironment, EnvironmentVariableScope } from '../../graphql/generated';
+import { EnvironmentVariableMutation } from '../../graphql/mutations/EnvironmentVariableMutation';
+import { EnvironmentVariablesQuery } from '../../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../../log';
+import { promptAsync, toggleConfirmAsync } from '../../prompts';
+import { promptVariableEnvironmentAsync } from '../../utils/prompts';
+
+type DeleteFlags = {
+  name?: string;
+  environment?: EnvironmentVariableEnvironment;
+  'non-interactive': boolean;
+  scope?: EnvironmentVariableScope;
+};
+
+export default class EnvironmentVariableDelete extends EasCommand {
+  static override description = 'delete an environment variable by name';
+
+  static override hidden = true;
+
+  static override flags = {
+    name: Flags.string({
+      description: 'Name of the variable to delete',
+    }),
+    ...EASVariableScopeFlag,
+    ...EASEnvironmentFlag,
+    ...EASNonInteractiveFlag,
+  };
+
+  static override contextDefinition = {
+    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  async runAsync(): Promise<void> {
+    const { flags } = await this.parse(EnvironmentVariableDelete);
+    let { name, environment, 'non-interactive': nonInteractive, scope } = this.validateFlags(flags);
+    const {
+      privateProjectConfig: { projectId },
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(EnvironmentVariableDelete, {
+      nonInteractive,
+    });
+
+    if (scope === EnvironmentVariableScope.Project) {
+      if (!environment) {
+        environment = await promptVariableEnvironmentAsync(nonInteractive);
+      }
+    }
+
+    const variables =
+      scope === EnvironmentVariableScope.Project && environment
+        ? await EnvironmentVariablesQuery.byAppIdAsync(graphqlClient, {
+            appId: projectId,
+            environment,
+          })
+        : await EnvironmentVariablesQuery.sharedAsync(graphqlClient, { appId: projectId });
+
+    if (!name) {
+      ({ name } = await promptAsync({
+        type: 'select',
+        name: 'name',
+        message: 'Pick the variable to be deleted:',
+        choices: variables
+          .filter(({ scope: variableScope }) => scope === variableScope)
+          .map(variable => ({
+            title: variable.name,
+            value: variable.name,
+          })),
+      }));
+
+      if (!name) {
+        throw new Error(
+          `Environment variable wasn't selected. Run the command again and select existing variable or run it with ${chalk.bold(
+            '--name VARIABLE_NAME'
+          )} flag to fix the issue.`
+        );
+      }
+    }
+
+    const selectedVariable = variables.find(variable => variable.name === name);
+
+    if (!selectedVariable) {
+      throw new Error(`Variable "${name}" not found.`);
+    }
+
+    if (!nonInteractive) {
+      Log.addNewLineIfNone();
+      Log.warn(`You are about to permanently delete variable ${selectedVariable.name}.`);
+      Log.warn('This action is irreversible.');
+      Log.newLine();
+      const confirmed = await toggleConfirmAsync({
+        message: `Are you sure you wish to proceed?${
+          selectedVariable.scope === EnvironmentVariableScope.Shared
+            ? ' This variable is applied across your whole account and may affect multiple apps.'
+            : ''
+        }`,
+      });
+      if (!confirmed) {
+        Log.error(`Canceled deletion of variable ${selectedVariable.name}.`);
+        throw new Error(`Variable "${name}" not deleted.`);
+      }
+    }
+
+    await EnvironmentVariableMutation.deleteAsync(graphqlClient, selectedVariable.id);
+
+    Log.withTick(`️Deleted variable ${selectedVariable.name}".`);
+  }
+
+  private validateFlags(flags: DeleteFlags): DeleteFlags {
+    if (flags['non-interactive']) {
+      if (!flags.name) {
+        throw new Error(
+          `Environment variable needs 'name' to be specified when running in non-interactive mode. Run the command with ${chalk.bold(
+            '--name VARIABLE_NAME'
+          )} flag to fix the issue`
+        );
+      }
+    }
+
+    return flags;
+  }
+}

packages/eas-cli/src/commands/env/get.ts

@@ -0,0 +1,149 @@
+import { Flags } from '@oclif/core';
+import chalk from 'chalk';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import { ExpoGraphqlClient } from '../../commandUtils/context/contextUtils/createGraphqlClient';
+import {
+  EASEnvironmentFlag,
+  EASNonInteractiveFlag,
+  EASVariableFormatFlag,
+  EASVariableScopeFlag,
+} from '../../commandUtils/flags';
+import {
+  EnvironmentVariableEnvironment,
+  EnvironmentVariableFragment,
+  EnvironmentVariableScope,
+} from '../../graphql/generated';
+import { EnvironmentVariablesQuery } from '../../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../../log';
+import { formatVariable } from '../../utils/formatVariable';
+import { promptVariableEnvironmentAsync, promptVariableNameAsync } from '../../utils/prompts';
+
+type GetFlags = {
+  name?: string;
+  environment?: EnvironmentVariableEnvironment;
+  'non-interactive': boolean;
+  format?: string;
+  scope: EnvironmentVariableScope;
+};
+
+export default class EnvironmentVariableGet extends EasCommand {
+  static override description = 'get environment variable';
+
+  static override hidden = true;
+
+  static override contextDefinition = {
+    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  static override flags = {
+    name: Flags.string({
+      description: 'Name of the variable',
+    }),
+    ...EASVariableFormatFlag,
+    ...EASVariableScopeFlag,
+    ...EASNonInteractiveFlag,
+    ...EASEnvironmentFlag,
+  };
+
+  async runAsync(): Promise<void> {
+    const { flags } = await this.parse(EnvironmentVariableGet);
+
+    let {
+      environment,
+      name,
+      'non-interactive': nonInteractive,
+      format,
+      scope,
+    } = this.validateFlags(flags);
+
+    const {
+      privateProjectConfig: { projectId },
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(EnvironmentVariableGet, {
+      nonInteractive,
+    });
+
+    if (!name) {
+      name = await promptVariableNameAsync(nonInteractive);
+    }
+
+    if (!environment && scope === EnvironmentVariableScope.Project) {
+      environment = await promptVariableEnvironmentAsync(nonInteractive);
+    }
+    const variable = await getVariableAsync(graphqlClient, scope, projectId, name, environment);
+
+    if (!variable) {
+      Log.error(`Variable with name "${name}" not found`);
+      return;
+    }
+    if (!variable.value) {
+      throw new Error(
+        `${chalk.bold(
+          variable.name
+        )} is a secret variable and cannot be displayed once it has been created.`
+      );
+    }
+
+    if (format === 'short') {
+      Log.log(`${chalk.bold(variable.name)}=${variable.value}`);
+    } else {
+      Log.log(formatVariable(variable));
+    }
+  }
+
+  private validateFlags(flags: GetFlags): GetFlags {
+    if (flags.environment && flags.scope === EnvironmentVariableScope.Shared) {
+      throw new Error(`Unexpected argument: --environment can only be used with project variables`);
+    }
+    if (flags['non-interactive']) {
+      if (!flags.name) {
+        throw new Error('Variable name is required. Run the command with --name flag.');
+      }
+      if (!flags.scope) {
+        throw new Error('Scope is required. Run the command with --scope flag.');
+      }
+      if (!flags.environment && flags.scope === EnvironmentVariableScope.Project) {
+        throw new Error('Environment is required.');
+      }
+    }
+    return flags;
+  }
+}
+
+async function getVariableAsync(
+  graphqlClient: ExpoGraphqlClient,
+  scope: string,
+  projectId: string,
+  name: string | undefined,
+  environment: string | undefined
+): Promise<EnvironmentVariableFragment | null> {
+  if (!environment && scope === EnvironmentVariableScope.Project) {
+    throw new Error('Environment is required.');
+  }
+  if (!name) {
+    throw new Error("Variable name is required. Run the command with '--name VARIABLE_NAME' flag.");
+  }
+  if (environment && scope === EnvironmentVariableScope.Project) {
+    const appVariables = await EnvironmentVariablesQuery.byAppIdWithSensitiveAsync(graphqlClient, {
+      appId: projectId,
+      environment,
+      filterNames: [name],
+    });
+    return appVariables[0];
+  }
+
+  if (scope === EnvironmentVariableScope.Shared) {
+    const sharedVariables = await EnvironmentVariablesQuery.sharedWithSensitiveAsync(
+      graphqlClient,
+      {
+        appId: projectId,
+        filterNames: [name],
+      }
+    );
+    return sharedVariables[0];
+  }
+
+  return null;
+}

packages/eas-cli/src/commands/env/link.ts

@@ -0,0 +1,85 @@
+import { Flags } from '@oclif/core';
+import chalk from 'chalk';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import { EASEnvironmentFlag, EASNonInteractiveFlag } from '../../commandUtils/flags';
+import { EnvironmentVariableMutation } from '../../graphql/mutations/EnvironmentVariableMutation';
+import { EnvironmentVariablesQuery } from '../../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../../log';
+import { getDisplayNameForProjectIdAsync } from '../../project/projectUtils';
+import { selectAsync } from '../../prompts';
+import { promptVariableEnvironmentAsync } from '../../utils/prompts';
+
+export default class EnvironmentVariableLink extends EasCommand {
+  static override description = 'link a shared environment variable to the current project';
+
+  static override hidden = true;
+
+  static override flags = {
+    name: Flags.string({
+      description: 'Name of the variable',
+    }),
+    ...EASEnvironmentFlag,
+    ...EASNonInteractiveFlag,
+  };
+
+  static override contextDefinition = {
+    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  async runAsync(): Promise<void> {
+    let {
+      flags: { name, 'non-interactive': nonInteractive, environment },
+    } = await this.parse(EnvironmentVariableLink);
+    const {
+      privateProjectConfig: { projectId },
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(EnvironmentVariableLink, {
+      nonInteractive,
+    });
+
+    const projectDisplayName = await getDisplayNameForProjectIdAsync(graphqlClient, projectId);
+    const variables = await EnvironmentVariablesQuery.sharedAsync(graphqlClient, {
+      appId: projectId,
+    });
+
+    if (!name) {
+      name = await selectAsync(
+        'Select shared variable',
+        variables.map(variable => ({
+          title: variable.name,
+          value: variable.name,
+        }))
+      );
+    }
+
+    const selectedVariable = variables.find(variable => variable.name === name);
+
+    if (!selectedVariable) {
+      throw new Error(`Shared variable ${name} doesn't exist`);
+    }
+
+    if (!environment) {
+      environment = await promptVariableEnvironmentAsync(nonInteractive);
+    }
+
+    const linkedVariable = await EnvironmentVariableMutation.linkSharedEnvironmentVariableAsync(
+      graphqlClient,
+      selectedVariable.id,
+      projectId,
+      environment
+    );
+    if (!linkedVariable) {
+      throw new Error(
+        `Could not link variable with name ${selectedVariable.name} to project with id ${projectId}`
+      );
+    }
+
+    Log.withTick(
+      `Linked variable ${chalk.bold(linkedVariable.name)} to project ${chalk.bold(
+        projectDisplayName
+      )}.`
+    );
+  }
+}

packages/eas-cli/src/commands/env/list.ts

@@ -0,0 +1,118 @@
+import { Flags } from '@oclif/core';
+import chalk from 'chalk';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import { ExpoGraphqlClient } from '../../commandUtils/context/contextUtils/createGraphqlClient';
+import {
+  EASEnvironmentFlag,
+  EASVariableFormatFlag,
+  EASVariableScopeFlag,
+} from '../../commandUtils/flags';
+import {
+  EnvironmentVariableEnvironment,
+  EnvironmentVariableFragment,
+  EnvironmentVariableScope,
+} from '../../graphql/generated';
+import { EnvironmentVariablesQuery } from '../../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../../log';
+import { formatVariable } from '../../utils/formatVariable';
+import { promptVariableEnvironmentAsync } from '../../utils/prompts';
+
+export default class EnvironmentValueList extends EasCommand {
+  static override description = 'list environment variables for the current project';
+
+  static override hidden = true;
+
+  static override contextDefinition = {
+    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  static override flags = {
+    'include-sensitive': Flags.boolean({
+      description: 'Display sensitive values in the output',
+      default: false,
+    }),
+    ...EASVariableFormatFlag,
+    ...EASVariableScopeFlag,
+    ...EASEnvironmentFlag,
+  };
+
+  async runAsync(): Promise<void> {
+    let {
+      flags: { environment, format, scope, 'include-sensitive': includeSensitive },
+    } = await this.parse(EnvironmentValueList);
+    const {
+      privateProjectConfig: { projectId },
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(EnvironmentValueList, {
+      nonInteractive: true,
+    });
+
+    if (scope === EnvironmentVariableScope.Project && !environment) {
+      environment = await promptVariableEnvironmentAsync(false);
+    }
+
+    const variables = await this.getVariablesForScopeAsync(graphqlClient, {
+      scope,
+      includingSensitive: includeSensitive,
+      environment,
+      projectId,
+    });
+
+    if (format === 'short') {
+      for (const variable of variables) {
+        // TODO: Add Learn more link
+        Log.log(
+          `${chalk.bold(variable.name)}=${
+            variable.value ??
+            "***** (This is a secret env variable that can only be accessed on EAS builder and can't be read in any UI. Learn more.)"
+          }`
+        );
+      }
+    } else {
+      if (scope === EnvironmentVariableScope.Shared) {
+        Log.log(chalk.bold('Shared variables for this account:'));
+      } else {
+        Log.log(chalk.bold(`Variables for this project for environment ${environment}:`));
+      }
+      Log.log(
+        variables.map(variable => formatVariable(variable)).join(`\n\n${chalk.dim('———')}\n\n`)
+      );
+    }
+  }
+
+  private async getVariablesForScopeAsync(
+    graphqlClient: ExpoGraphqlClient,
+    {
+      scope,
+      includingSensitive,
+      environment,
+      projectId,
+    }: {
+      scope: EnvironmentVariableScope;
+      includingSensitive: boolean;
+      environment?: EnvironmentVariableEnvironment;
+      projectId: string;
+    }
+  ): Promise<EnvironmentVariableFragment[]> {
+    if (scope === EnvironmentVariableScope.Project && environment) {
+      if (includingSensitive) {
+        return await EnvironmentVariablesQuery.byAppIdWithSensitiveAsync(graphqlClient, {
+          appId: projectId,
+          environment,
+        });
+      }
+      return await EnvironmentVariablesQuery.byAppIdAsync(graphqlClient, {
+        appId: projectId,
+        environment,
+      });
+    }
+
+    return includingSensitive
+      ? await EnvironmentVariablesQuery.sharedWithSensitiveAsync(graphqlClient, {
+          appId: projectId,
+        })
+      : await EnvironmentVariablesQuery.sharedAsync(graphqlClient, { appId: projectId });
+  }
+}

packages/eas-cli/src/commands/env/pull.ts

@@ -0,0 +1,94 @@
+import { Flags } from '@oclif/core';
+import * as fs from 'fs-extra';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import { EASEnvironmentFlag, EASNonInteractiveFlag } from '../../commandUtils/flags';
+import { EnvironmentVariableFragment } from '../../graphql/generated';
+import { EnvironmentVariablesQuery } from '../../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../../log';
+import { confirmAsync } from '../../prompts';
+import { promptVariableEnvironmentAsync } from '../../utils/prompts';
+
+export default class EnvironmentVariablePull extends EasCommand {
+  static override description = 'pull env file';
+
+  static override hidden = true;
+
+  static override contextDefinition = {
+    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  static override flags = {
+    ...EASEnvironmentFlag,
+    ...EASNonInteractiveFlag,
+    path: Flags.string({
+      description: 'Path to the result `.env` file',
+      default: '.env.local',
+    }),
+  };
+
+  async runAsync(): Promise<void> {
+    let {
+      flags: { environment, path: targetPath, 'non-interactive': nonInteractive },
+    } = await this.parse(EnvironmentVariablePull);
+
+    if (!environment) {
+      environment = await promptVariableEnvironmentAsync(nonInteractive);
+    }
+    const {
+      privateProjectConfig: { projectId },
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(EnvironmentVariablePull, {
+      nonInteractive,
+    });
+
+    targetPath = targetPath ?? '.env.local';
+
+    const environmentVariables = await EnvironmentVariablesQuery.byAppIdWithSensitiveAsync(
+      graphqlClient,
+      {
+        appId: projectId,
+        environment,
+      }
+    );
+
+    if (!nonInteractive && (await fs.exists(targetPath))) {
+      const result = await confirmAsync({
+        message: `File ${targetPath} already exists. Do you want to overwrite it?`,
+      });
+      if (!result) {
+        Log.log('Aborting...');
+        throw new Error(`File ${targetPath} already exists.`);
+      }
+    }
+
+    const filePrefix = `# Environment: ${environment}\n\n`;
+
+    const envFileContent = environmentVariables
+      .map((variable: EnvironmentVariableFragment) => {
+        if (variable.value === null) {
+          return `# ${variable.name}=***** (secret variables are not available for reading)`;
+        }
+        return `${variable.name}=${variable.value}`;
+      })
+      .join('\n');
+    await fs.writeFile(targetPath, filePrefix + envFileContent);
+
+    const secretEnvVariables = environmentVariables.filter(
+      (variable: EnvironmentVariableFragment) => variable.value === null
+    );
+    if (secretEnvVariables.length > 0) {
+      Log.warn(
+        `The eas env:pull command tried to pull environment variables with "secret" visibility. The variables with "secret" visibility are not available for reading, therefore thet were marked as "*****" in the generated .env file. Provide values for these manually in ${targetPath} if needed. Skipped variables: ${secretEnvVariables
+          .map(v => v.name)
+          .join('\n')}`
+      );
+      Log.warn();
+    }
+
+    Log.log(
+      `Pulled environment variables from ${environment.toLowerCase()} environment to ${targetPath}.`
+    );
+  }
+}

packages/eas-cli/src/commands/env/push.ts

@@ -0,0 +1,210 @@
+import { Flags } from '@oclif/core';
+import dotenv from 'dotenv';
+import fs from 'fs-extra';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import { EASEnvironmentFlag } from '../../commandUtils/flags';
+import {
+  EnvironmentVariableEnvironment,
+  EnvironmentVariableFragment,
+  EnvironmentVariableScope,
+  EnvironmentVariableVisibility,
+} from '../../graphql/generated';
+import {
+  EnvironmentVariableMutation,
+  EnvironmentVariablePushInput,
+} from '../../graphql/mutations/EnvironmentVariableMutation';
+import { EnvironmentVariablesQuery } from '../../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../../log';
+import { confirmAsync, promptAsync } from '../../prompts';
+
+type PushFlags = {
+  environment?: EnvironmentVariableEnvironment;
+  path: string;
+};
+
+export default class EnvironmentVariablePush extends EasCommand {
+  static override description = 'push env file';
+
+  static override hidden = true;
+
+  static override contextDefinition = {
+    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  static override flags = {
+    ...EASEnvironmentFlag,
+    path: Flags.string({
+      description: 'Path to the input `.env` file',
+      default: '.env.local',
+    }),
+  };
+
+  async runAsync(): Promise<void> {
+    const { flags } = await this.parse(EnvironmentVariablePush);
+
+    const { environment, path: envPath } = this.validateFlags(flags);
+    const {
+      privateProjectConfig: { projectId },
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(EnvironmentVariablePush, {
+      nonInteractive: false,
+    });
+
+    const updateVariables: Record<string, EnvironmentVariablePushInput> =
+      await this.parseEnvFileAsync(envPath, environment);
+
+    const variableNames = Object.keys(updateVariables);
+
+    const existingVariables = await EnvironmentVariablesQuery.byAppIdAsync(graphqlClient, {
+      appId: projectId,
+      environment,
+      filterNames: variableNames,
+    });
+
+    const existingDifferentVariables: EnvironmentVariableFragment[] = [];
+    // Remove variables that are the same as the ones in the environment
+    existingVariables.forEach(variable => {
+      const existingVariableUpdate = updateVariables[variable.name];
+      if (existingVariableUpdate && existingVariableUpdate.value !== variable.value) {
+        existingDifferentVariables.push(variable);
+      } else {
+        delete updateVariables[variable.name];
+      }
+    });
+
+    const existingDifferentSharedVariables = existingDifferentVariables.filter(
+      variable => variable.scope === EnvironmentVariableScope.Shared
+    );
+
+    if (existingDifferentSharedVariables.length > 0) {
+      const existingDifferentSharedVariablesNames = existingDifferentSharedVariables.map(
+        variable => variable.name
+      );
+      Log.error('Shared variables cannot be overwritten by eas env:push command.');
+      Log.error('Remove them from the env file or unlink them from the project to continue:');
+      existingDifferentSharedVariablesNames.forEach(name => {
+        Log.error(`- ${name}`);
+      });
+      throw new Error('Shared variables cannot be overwritten by eas env:push command');
+    }
+
+    if (existingDifferentVariables.length > 0) {
+      Log.warn('Some variables already exist in the environment.');
+      const variableNames = existingDifferentVariables.map(variable => variable.name);
+
+      const confirmationMessage =
+        variableNames.length > 1
+          ? `The ${variableNames.join(
+              ', '
+            )} environment variables already exist in ${environment} environment. Do you want to override them all?`
+          : `The ${variableNames[0]} environment variable already exists in ${environment} environment. Do you want to override it?`;
+
+      const confirm = await confirmAsync({
+        message: confirmationMessage,
+      });
+
+      let variablesToOverwrite: string[] = [];
+
+      if (!confirm && existingDifferentVariables.length === 1) {
+        throw new Error('No new variables to push.');
+      }
+
+      if (confirm) {
+        variablesToOverwrite = existingDifferentVariables.map(variable => variable.name);
+      } else {
+        const promptResult = await promptAsync({
+          type: 'multiselect',
+          name: 'variablesToOverwrite',
+          message: 'Select variables to overwrite:',
+          // @ts-expect-error property missing from `@types/prompts`
+          optionsPerPage: 20,
+          choices: existingDifferentVariables.map(variable => ({
+            title: `${variable.name}: ${updateVariables[variable.name].value} (was ${
+              variable.value ?? '(secret)'
+            })`,
+            value: variable.name,
+          })),
+        });
+        variablesToOverwrite = promptResult.variablesToOverwrite;
+      }
+
+      for (const existingVariable of existingVariables) {
+        const name = existingVariable.name;
+        if (variablesToOverwrite.includes(name)) {
+          updateVariables[name]['overwrite'] = true;
+        } else {
+          delete updateVariables[name];
+        }
+      }
+    }
+
+    // Check if any of the sensitive variables already exist in the environment. Prompt the user to overwrite them.
+    const existingSensitiveVariables = existingVariables.filter(
+      variable => variable.value === null
+    );
+
+    if (existingSensitiveVariables.length > 0) {
+      const existingSensitiveVariablesNames = existingSensitiveVariables.map(
+        variable => `- ${variable.name}`
+      );
+      const confirm = await confirmAsync({
+        message: `You are about to overwrite sensitive variables.\n${existingSensitiveVariablesNames.join(
+          '\n'
+        )}\n Do you want to continue?`,
+      });
+      if (!confirm) {
+        throw new Error('Aborting...');
+      }
+    }
+
+    const variablesToPush = Object.values(updateVariables);
+
+    if (variablesToPush.length === 0) {
+      Log.log('No new variables to push.');
+      return;
+    }
+
+    await EnvironmentVariableMutation.createBulkEnvironmentVariablesForAppAsync(
+      graphqlClient,
+      variablesToPush,
+      projectId
+    );
+
+    Log.log(`Uploaded env file to ${environment} environment.`);
+  }
+
+  private async parseEnvFileAsync(
+    envPath: string,
+    environment: string
+  ): Promise<Record<string, EnvironmentVariablePushInput>> {
+    if (!(await fs.exists(envPath))) {
+      throw new Error(`File ${envPath} does not exist.`);
+    }
+    const pushInput: Record<string, EnvironmentVariablePushInput> = {};
+
+    const variables: Record<string, string> = dotenv.parse(await fs.readFile(envPath, 'utf8'));
+
+    for (const [name, value] of Object.entries(variables)) {
+      pushInput[name] = {
+        name,
+        value,
+        environment,
+        visibility: name.startsWith('EXPO_SENSITIVE')
+          ? EnvironmentVariableVisibility.Sensitive
+          : EnvironmentVariableVisibility.Public,
+      };
+    }
+
+    return pushInput;
+  }
+
+  private validateFlags(flags: PushFlags): Required<PushFlags> {
+    if (!flags.environment) {
+      throw new Error('Please provide an environment to push the env file to.');
+    }
+
+    return { ...flags, environment: flags.environment };
+  }
+}

packages/eas-cli/src/commands/env/unlink.ts

@@ -0,0 +1,96 @@
+import { Flags } from '@oclif/core';
+import chalk from 'chalk';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import { EASEnvironmentFlag, EASNonInteractiveFlag } from '../../commandUtils/flags';
+import { EnvironmentVariableScope } from '../../graphql/generated';
+import { EnvironmentVariableMutation } from '../../graphql/mutations/EnvironmentVariableMutation';
+import { EnvironmentVariablesQuery } from '../../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../../log';
+import { getDisplayNameForProjectIdAsync } from '../../project/projectUtils';
+import { selectAsync } from '../../prompts';
+import { promptVariableEnvironmentAsync } from '../../utils/prompts';
+
+export default class EnvironmentVariableUnlink extends EasCommand {
+  static override description = 'unlink a shared environment variable to the current project';
+
+  static override hidden = true;
+
+  static override flags = {
+    name: Flags.string({
+      description: 'Name of the variable',
+    }),
+    ...EASEnvironmentFlag,
+    ...EASNonInteractiveFlag,
+  };
+
+  static override contextDefinition = {
+    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  async runAsync(): Promise<void> {
+    let {
+      flags: { name, 'non-interactive': nonInteractive, environment },
+    } = await this.parse(EnvironmentVariableUnlink);
+    const {
+      privateProjectConfig: { projectId },
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(EnvironmentVariableUnlink, {
+      nonInteractive,
+    });
+
+    if (!environment) {
+      environment = await promptVariableEnvironmentAsync(nonInteractive);
+    }
+
+    const projectDisplayName = await getDisplayNameForProjectIdAsync(graphqlClient, projectId);
+
+    const appVariables = await EnvironmentVariablesQuery.byAppIdAsync(graphqlClient, {
+      appId: projectId,
+      environment,
+    });
+    const linkedVariables = appVariables.filter(
+      ({ scope }) => scope === EnvironmentVariableScope.Shared
+    );
+
+    if (linkedVariables.length === 0) {
+      throw new Error(`There are no linked shared env variables for project ${projectDisplayName}`);
+    }
+
+    if (!name) {
+      name = await selectAsync(
+        'Select shared variable to unlink',
+        linkedVariables.map(variable => ({
+          title: variable.name,
+          value: variable.name,
+        }))
+      );
+    }
+
+    const selectedVariable = linkedVariables.find(variable => variable.name === name);
+
+    if (!selectedVariable) {
+      throw new Error(`Shared variable ${name} doesn't exist`);
+    }
+
+    const unlinkedVariable = await EnvironmentVariableMutation.unlinkSharedEnvironmentVariableAsync(
+      graphqlClient,
+      selectedVariable.id,
+      projectId,
+      environment
+    );
+
+    if (!unlinkedVariable) {
+      throw new Error(
+        `Could not unlink variable with name ${selectedVariable.name} from project ${projectDisplayName}`
+      );
+    }
+
+    Log.withTick(
+      `Unlinked variable ${chalk.bold(unlinkedVariable.name)} from the project ${chalk.bold(
+        projectDisplayName
+      )}.`
+    );
+  }
+}

packages/eas-cli/src/commands/env/update.ts

@@ -0,0 +1,207 @@
+import { Flags } from '@oclif/core';
+import chalk from 'chalk';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import {
+  EASEnvironmentFlag,
+  EASNonInteractiveFlag,
+  EASVariableScopeFlag,
+  EASVariableVisibilityFlag,
+} from '../../commandUtils/flags';
+import { EnvironmentVariableScope, EnvironmentVariableVisibility } from '../../graphql/generated';
+import { EnvironmentVariableMutation } from '../../graphql/mutations/EnvironmentVariableMutation';
+import { EnvironmentVariablesQuery } from '../../graphql/queries/EnvironmentVariablesQuery';
+import Log from '../../log';
+import {
+  getDisplayNameForProjectIdAsync,
+  getOwnerAccountForProjectIdAsync,
+} from '../../project/projectUtils';
+import { selectAsync } from '../../prompts';
+import { promptVariableEnvironmentAsync, promptVariableValueAsync } from '../../utils/prompts';
+
+type UpdateFlags = {
+  name?: string;
+  value?: string;
+  scope?: EnvironmentVariableScope;
+  environment?: string;
+  visibility?: EnvironmentVariableVisibility;
+  'non-interactive': boolean;
+};
+
+export default class EnvironmentVariableUpdate extends EasCommand {
+  static override description =
+    'update an environment variable on the current project or owner account';
+
+  static override hidden = true;
+
+  static override flags = {
+    name: Flags.string({
+      description: 'Name of the variable',
+    }),
+    value: Flags.string({
+      description: 'Text value or the variable',
+    }),
+    ...EASVariableVisibilityFlag,
+    ...EASVariableScopeFlag,
+    ...EASEnvironmentFlag,
+    ...EASNonInteractiveFlag,
+  };
+
+  static override contextDefinition = {
+    ...this.ContextOptions.ProjectConfig,
+    ...this.ContextOptions.Analytics,
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  async runAsync(): Promise<void> {
+    const { flags } = await this.parse(EnvironmentVariableUpdate);
+    let {
+      name,
+      value,
+      scope,
+      'non-interactive': nonInteractive,
+      environment,
+      visibility,
+    } = this.validateFlags(flags);
+
+    const {
+      privateProjectConfig: { projectId },
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(EnvironmentVariableUpdate, {
+      nonInteractive,
+    });
+
+    const [projectDisplayName, ownerAccount] = await Promise.all([
+      getDisplayNameForProjectIdAsync(graphqlClient, projectId),
+      getOwnerAccountForProjectIdAsync(graphqlClient, projectId),
+    ]);
+
+    if (scope === EnvironmentVariableScope.Project) {
+      if (!environment) {
+        environment = await promptVariableEnvironmentAsync(nonInteractive);
+      }
+      const existingVariables = await EnvironmentVariablesQuery.byAppIdAsync(graphqlClient, {
+        appId: projectId,
+        environment,
+      });
+      if (!name) {
+        name = await selectAsync(
+          'Select variable',
+          existingVariables.map(variable => ({
+            title: variable.name,
+            value: variable.name,
+          }))
+        );
+      }
+
+      const existingVariable = existingVariables.find(variable => variable.name === name);
+      if (!existingVariable) {
+        throw new Error(
+          `Variable with name ${name} does not exist on project ${projectDisplayName}`
+        );
+      }
+
+      if (!value) {
+        value = await promptVariableValueAsync({
+          nonInteractive,
+          required: false,
+          initial: existingVariable.value,
+        });
+        if (!value || value.length === 0) {
+          value = '';
+        }
+      }
+
+      const variable = await EnvironmentVariableMutation.createForAppAsync(
+        graphqlClient,
+        {
+          name,
+          value,
+          environment,
+          visibility,
+          overwrite: true,
+        },
+        projectId
+      );
+      if (!variable) {
+        throw new Error(
+          `Could not update variable with name ${name} on project ${projectDisplayName}`
+        );
+      }
+
+      Log.withTick(
+        `Updated variable ${chalk.bold(name)} on project ${chalk.bold(projectDisplayName)}.`
+      );
+    } else if (scope === EnvironmentVariableScope.Shared) {
+      const sharedVariables = await EnvironmentVariablesQuery.sharedAsync(graphqlClient, {
+        appId: projectId,
+      });
+
+      if (!name) {
+        name = await selectAsync(
+          'Select variable',
+          sharedVariables.map(variable => ({
+            title: variable.name,
+            value: variable.name,
+          }))
+        );
+      }
+
+      const existingVariable = sharedVariables.find(variable => variable.name === name);
+      if (!existingVariable) {
+        throw new Error(
+          "Variable with this name  doesn't exist on this account. Use a different name."
+        );
+      }
+
+      if (!value) {
+        value = await promptVariableValueAsync({
+          nonInteractive,
+          required: false,
+          initial: existingVariable.value,
+        });
+        if (!value || value.length === 0) {
+          value = '';
+        }
+      }
+
+      const variable = await EnvironmentVariableMutation.createSharedVariableAsync(
+        graphqlClient,
+        {
+          name,
+          value,
+          visibility,
+          overwrite: true,
+        },
+        ownerAccount.id
+      );
+
+      if (!variable) {
+        throw new Error(
+          `Could not update variable with name ${name} on account ${ownerAccount.name}`
+        );
+      }
+
+      Log.withTick(
+        `Updated shared variable ${chalk.bold(name)} on account ${chalk.bold(ownerAccount.name)}.`
+      );
+    }
+  }
+  private validateFlags(flags: UpdateFlags): UpdateFlags {
+    if (flags['non-interactive']) {
+      if (!flags.name) {
+        throw new Error(
+          'Variable name is required in non-interactive mode. Run the command with --name flag.'
+        );
+      }
+
+      if (flags.scope === EnvironmentVariableScope.Project && !flags.environment) {
+        throw new Error(
+          'Environment is required when updating project-wide variable in non-interactive mode. Run the command with --environment flag.'
+        );
+      }
+    }
+
+    return flags;
+  }
+}

packages/eas-cli/src/commands/metadata/lint.ts

@@ -60,7 +60,8 @@ export default class MetadataLint extends EasCommand {
       await loadConfigAsync({ projectDir, profile: submitProfile });
 
       if (flags.json) {
-        return printJsonOnlyOutput([]);
+        printJsonOnlyOutput([]);
+        return;
       }
 
       Log.log('✅ Store configuration is valid.');
@@ -70,7 +71,8 @@ export default class MetadataLint extends EasCommand {
       }
 
       if (flags.json) {
-        return printJsonOnlyOutput(error.errors);
+        printJsonOnlyOutput(error.errors);
+        return;
       }
 
       logMetadataValidationError(error);

packages/eas-cli/src/commands/project/init.ts

@@ -8,6 +8,7 @@ import { getProjectDashboardUrl } from '../../build/utils/url';
 import EasCommand from '../../commandUtils/EasCommand';
 import { ExpoGraphqlClient } from '../../commandUtils/context/contextUtils/createGraphqlClient';
 import { saveProjectIdToAppConfigAsync } from '../../commandUtils/context/contextUtils/getProjectIdAsync';
+import { EASNonInteractiveFlag } from '../../commandUtils/flags';
 import { AppPrivacy, Role } from '../../graphql/generated';
 import { AppMutation } from '../../graphql/mutations/AppMutation';
 import { AppQuery } from '../../graphql/queries/AppQuery';
@@ -33,14 +34,10 @@ export default class ProjectInit extends EasCommand {
       description: 'ID of the EAS project to link',
     }),
     force: Flags.boolean({
-      description: 'Whether to overwrite any existing project ID',
-      dependsOn: ['id'],
-    }),
-    // this is the same as EASNonInteractiveFlag but with the dependsOn
-    'non-interactive': Flags.boolean({
-      description: 'Run the command in non-interactive mode.',
-      dependsOn: ['id'],
+      description:
+        'Whether to create a new project/link an existing project without additional prompts or overwrite any existing project ID when running with --id flag',
     }),
+    ...EASNonInteractiveFlag,
   };
 
   static override contextDefinition = {
@@ -216,10 +213,11 @@ export default class ProjectInit extends EasCommand {
     });
   }
 
-  private static async initializeWithInteractiveSelectionAsync(
+  private static async initializeWithoutExplicitIDAsync(
     graphqlClient: ExpoGraphqlClient,
     actor: Actor,
-    projectDir: string
+    projectDir: string,
+    { force, nonInteractive }: InitializeMethodOptions
   ): Promise<string> {
     const exp = getPrivateExpoConfig(projectDir);
     const existingProjectId = exp.extra?.eas?.projectId;
@@ -245,6 +243,20 @@ export default class ProjectInit extends EasCommand {
     if (!accountName) {
       if (allAccounts.length === 1) {
         accountName = allAccounts[0].name;
+      } else if (nonInteractive) {
+        if (!force) {
+          throw new Error(
+            `There are multiple accounts that you have access to: ${allAccounts
+              .map(a => a.name)
+              .join(
+                ', '
+              )}. Explicitly set the owner property in your app config or run this command with the --force flag to proceed with a default account: ${
+              allAccounts[0].name
+            }.`
+          );
+        }
+        accountName = allAccounts[0].name;
+        Log.log(`Using default account ${accountName} for non-interactive and force mode`);
       } else {
         const choices = ProjectInit.getAccountChoices(
           actor,
@@ -274,13 +286,21 @@ export default class ProjectInit extends EasCommand {
       projectName
     );
     if (existingProjectIdOnServer) {
-      const affirmedLink = await confirmAsync({
-        message: `Existing project found: ${projectFullName} (ID: ${existingProjectIdOnServer}). Link this project?`,
-      });
-      if (!affirmedLink) {
-        throw new Error(
-          `Project ID configuration canceled. Re-run the command to select a different account/project.`
-        );
+      if (!force) {
+        if (nonInteractive) {
+          throw new Error(
+            `Existing project found: ${projectFullName} (ID: ${existingProjectIdOnServer}). Use --force flag to continue with this project.`
+          );
+        }
+
+        const affirmedLink = await confirmAsync({
+          message: `Existing project found: ${projectFullName} (ID: ${existingProjectIdOnServer}). Link this project?`,
+        });
+        if (!affirmedLink) {
+          throw new Error(
+            `Project ID configuration canceled. Re-run the command to select a different account/project.`
+          );
+        }
       }
 
       await ProjectInit.saveProjectIdAndLogSuccessAsync(projectDir, existingProjectIdOnServer);
@@ -293,11 +313,18 @@ export default class ProjectInit extends EasCommand {
       );
     }
 
-    const affirmedCreate = await confirmAsync({
-      message: `Would you like to create a project for ${projectFullName}?`,
-    });
-    if (!affirmedCreate) {
-      throw new Error(`Project ID configuration canceled for ${projectFullName}.`);
+    if (!force) {
+      if (nonInteractive) {
+        throw new Error(
+          `Project does not exist: ${projectFullName}. Use --force flag to create this project.`
+        );
+      }
+      const affirmedCreate = await confirmAsync({
+        message: `Would you like to create a project for ${projectFullName}?`,
+      });
+      if (!affirmedCreate) {
+        throw new Error(`Project ID configuration canceled for ${projectFullName}.`);
+      }
     }
 
     const projectDashboardUrl = getProjectDashboardUrl(accountName, projectName);
@@ -405,10 +432,14 @@ export default class ProjectInit extends EasCommand {
       });
       idForConsistency = idArgument;
     } else {
-      idForConsistency = await ProjectInit.initializeWithInteractiveSelectionAsync(
+      idForConsistency = await ProjectInit.initializeWithoutExplicitIDAsync(
         graphqlClient,
         actor,
-        projectDir
+        projectDir,
+        {
+          force,
+          nonInteractive,
+        }
       );
     }
 

packages/eas-cli/src/commands/project/onboarding.ts

@@ -1,6 +1,6 @@
 import { ExpoConfig } from '@expo/config-types';
 import { Platform } from '@expo/eas-build-job';
-import { EasJson } from '@expo/eas-json';
+import { AppVersionSource, EasJson } from '@expo/eas-json';
 import chalk from 'chalk';
 import fs from 'fs-extra';
 import path from 'path';
@@ -273,7 +273,7 @@ export default class Onboarding extends EasCommand {
     Log.log('🎉 We finished configuring your project.');
     Log.log();
     if (
-      app.githubRepository ||
+      !!app.githubRepository ||
       actor.preferences.onboarding.environment === OnboardingEnvironment.ExpoGo
     ) {
       Log.log('🚀 You can now go back to the website to continue:');
@@ -411,6 +411,7 @@ async function configureProjectFromBareDefaultExpoTemplateAsync({
   const easJson: EasJson = {
     cli: {
       version: `>= ${easCliVersion}`,
+      appVersionSource: AppVersionSource.REMOTE,
     },
     build: {
       development: {
@@ -431,6 +432,7 @@ async function configureProjectFromBareDefaultExpoTemplateAsync({
       },
       production: {
         channel: 'production',
+        autoIncrement: true,
         ...easBuildGitHubConfig,
       },
     },

packages/eas-cli/src/commands/update/__tests__/index.test.ts

@@ -70,20 +70,6 @@ describe(UpdatePublish.name, () => {
     jest.mocked(PublishMutation.publishUpdateGroupAsync).mockClear();
   });
 
-  // Deprecated and split to a new command: update:republish
-  it('errors with --republish', async () => {
-    await expect(new UpdatePublish(['--republish'], commandOptions).run()).rejects.toThrow(
-      '--group and --republish flags are deprecated'
-    );
-  });
-
-  // Deprecated and split to a new command: update:republish
-  it('errors with --group', async () => {
-    await expect(new UpdatePublish(['--group=abc123'], commandOptions).run()).rejects.toThrow(
-      '--group and --republish flags are deprecated'
-    );
-  });
-
   it('errors with both --channel and --branch', async () => {
     const flags = ['--channel=channel123', '--branch=branch123'];
 

packages/eas-cli/src/commands/update/__tests__/republish.test.ts

@@ -55,7 +55,9 @@ jest.mock('../../../utils/code-signing');
 jest.mock('../../../fetch');
 
 describe(UpdateRepublish.name, () => {
-  afterEach(() => vol.reset());
+  afterEach(() => {
+    vol.reset();
+  });
 
   it('errors when providing both --group and --branch', async () => {
     const flags = ['--group=1234', '--branch=main'];

packages/eas-cli/src/commands/update/__tests__/roll-back-to-embedded.test.ts

@@ -68,7 +68,9 @@ jest.mock('../../../project/publish', () => ({
 }));
 
 describe(UpdateRollBackToEmbedded.name, () => {
-  afterEach(() => vol.reset());
+  afterEach(() => {
+    vol.reset();
+  });
 
   it('errors with both --channel and --branch', async () => {
     const flags = ['--channel=channel123', '--branch=branch123'];

packages/eas-cli/src/commands/update/edit.ts

@@ -0,0 +1,143 @@
+import { Flags } from '@oclif/core';
+import assert from 'assert';
+import chalk from 'chalk';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import { EasNonInteractiveAndJsonFlags } from '../../commandUtils/flags';
+import { PublishMutation } from '../../graphql/mutations/PublishMutation';
+import { UpdateQuery } from '../../graphql/queries/UpdateQuery';
+import Log from '../../log';
+import { promptAsync } from '../../prompts';
+import {
+  formatUpdateGroup,
+  getUpdateGroupDescriptions,
+  getUpdateJsonInfosForUpdates,
+} from '../../update/utils';
+import { enableJsonOutput, printJsonOnlyOutput } from '../../utils/json';
+
+export default class UpdateEdit extends EasCommand {
+  static override description = 'edit all the updates in an update group';
+  static override hidden = true;
+
+  static override args = [
+    {
+      name: 'groupId',
+      required: true,
+      description: 'The ID of an update group to edit.',
+    },
+  ];
+
+  static override flags = {
+    'rollout-percentage': Flags.integer({
+      description: `Rollout percentage to set for a rollout update. The specified number must be an integer between 1 and 100.`,
+      required: false,
+      min: 0,
+      max: 100,
+    }),
+    ...EasNonInteractiveAndJsonFlags,
+  };
+
+  static override contextDefinition = {
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  async runAsync(): Promise<void> {
+    const {
+      args: { groupId },
+      flags: {
+        'rollout-percentage': rolloutPercentage,
+        json: jsonFlag,
+        'non-interactive': nonInteractive,
+      },
+    } = await this.parse(UpdateEdit);
+
+    const {
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(UpdateEdit, { nonInteractive });
+
+    if (jsonFlag) {
+      enableJsonOutput();
+    }
+
+    const proposedUpdatesToEdit = (
+      await UpdateQuery.viewUpdateGroupAsync(graphqlClient, { groupId })
+    ).map(u => ({ updateId: u.id, rolloutPercentage: u.rolloutPercentage }));
+
+    const updatesToEdit = proposedUpdatesToEdit.filter(
+      (u): u is { updateId: string; rolloutPercentage: number } =>
+        u.rolloutPercentage !== null && u.rolloutPercentage !== undefined
+    );
+
+    if (updatesToEdit.length === 0) {
+      throw new Error('Cannot edit rollout percentage on update group that is not a rollout.');
+    }
+
+    const rolloutPercentagesSet = new Set(updatesToEdit.map(u => u.rolloutPercentage));
+    if (rolloutPercentagesSet.size !== 1) {
+      throw new Error(
+        'Cannot edit rollout percentage for a group with non-equal percentages for updates in the group.'
+      );
+    }
+
+    const previousPercentage = updatesToEdit[0].rolloutPercentage;
+
+    if (nonInteractive && rolloutPercentage === undefined) {
+      throw new Error('Must specify --rollout-percentage in non-interactive mode');
+    }
+
+    let rolloutPercentageToSet = rolloutPercentage;
+    if (rolloutPercentageToSet === undefined) {
+      const { percentage } = await promptAsync({
+        type: 'number',
+        message: `New rollout percentage (min: ${previousPercentage}, max: 100)`,
+        validate: value => {
+          if (value <= previousPercentage) {
+            return `Rollout percentage must be greater than previous rollout percentage (${previousPercentage})`;
+          } else if (value > 100) {
+            return `Rollout percentage must not be greater than 100`;
+          } else {
+            return true;
+          }
+        },
+        name: 'percentage',
+      });
+
+      if (!percentage) {
+        Log.log('Aborted.');
+        return;
+      }
+
+      rolloutPercentageToSet = percentage;
+    }
+
+    assert(rolloutPercentageToSet !== undefined);
+
+    if (rolloutPercentageToSet < previousPercentage) {
+      throw new Error(
+        `Rollout percentage must be greater than previous rollout percentage (${previousPercentage})`
+      );
+    } else if (rolloutPercentageToSet > 100) {
+      throw new Error('Rollout percentage must not be greater than 100');
+    }
+
+    const updatedUpdates = await Promise.all(
+      updatesToEdit.map(async u => {
+        return await PublishMutation.setRolloutPercentageAsync(
+          graphqlClient,
+          u.updateId,
+          rolloutPercentageToSet!
+        );
+      })
+    );
+
+    if (jsonFlag) {
+      printJsonOnlyOutput(getUpdateJsonInfosForUpdates(updatedUpdates));
+    } else {
+      const [updateGroupDescription] = getUpdateGroupDescriptions([updatedUpdates]);
+
+      Log.log(chalk.bold('Update group:'));
+
+      Log.log(formatUpdateGroup(updateGroupDescription));
+    }
+  }
+}

packages/eas-cli/src/commands/update/index.ts

@@ -1,10 +1,10 @@
-import { Platform as PublishPlatform } from '@expo/config';
 import { Workflow } from '@expo/eas-build-job';
 import { Errors, Flags } from '@oclif/core';
 import chalk from 'chalk';
 import nullthrows from 'nullthrows';
 
 import { ensureBranchExistsAsync } from '../../branch/queries';
+import { transformFingerprintSource } from '../../build/graphql';
 import { ensureRepoIsCleanAsync } from '../../build/utils/repository';
 import { getUpdateGroupUrl } from '../../build/utils/url';
 import EasCommand from '../../commandUtils/EasCommand';
@@ -16,25 +16,27 @@ import {
   StatuspageServiceName,
   UpdateInfoGroup,
   UpdatePublishMutation,
+  UpdateRolloutInfoGroup,
 } from '../../graphql/generated';
 import { PublishMutation } from '../../graphql/mutations/PublishMutation';
 import Log, { learnMore, link } from '../../log';
 import { ora } from '../../ora';
 import { RequestedPlatform } from '../../platform';
+import { maybeUploadFingerprintAsync } from '../../project/maybeUploadFingerprintAsync';
 import { getOwnerAccountForProjectIdAsync } from '../../project/projectUtils';
 import {
-  ExpoCLIExportPlatformFlag,
   RawAsset,
+  UpdatePublishPlatform,
   buildBundlesAsync,
   buildUnsortedUpdateInfoGroupAsync,
   collectAssetsAsync,
   defaultPublishPlatforms,
-  filterExportedPlatformsByFlag,
+  filterCollectedAssetsByRequestedPlatforms,
   generateEasMetadataAsync,
   getBranchNameForCommandAsync,
-  getRequestedPlatform,
-  getRuntimeToPlatformMappingFromRuntimeVersions,
-  getRuntimeVersionObjectAsync,
+  getRuntimeToPlatformsAndFingerprintInfoMappingFromRuntimeVersionInfoObjects,
+  getRuntimeToUpdateRolloutInfoGroupMappingAsync,
+  getRuntimeVersionInfoObjectsAsync,
   getUpdateMessageForCommandAsync,
   isUploadedAssetCountAboveWarningThreshold,
   platformDisplayNames,
@@ -66,18 +68,15 @@ type RawUpdateFlags = {
   'skip-bundler': boolean;
   'clear-cache': boolean;
   'private-key-path'?: string;
-  'non-interactive': boolean;
   'emit-metadata': boolean;
+  'rollout-percentage'?: number;
+  'non-interactive': boolean;
   json: boolean;
-  /** @deprecated see UpdateRepublish command */
-  group?: string;
-  /** @deprecated see UpdateRepublish command */
-  republish?: boolean;
 };
 
 type UpdateFlags = {
   auto: boolean;
-  platform: ExpoCLIExportPlatformFlag;
+  platform: RequestedPlatform;
   branchName?: string;
   channelName?: string;
   updateMessage?: string;
@@ -85,9 +84,10 @@ type UpdateFlags = {
   skipBundler: boolean;
   clearCache: boolean;
   privateKeyPath?: string;
+  emitMetadata: boolean;
+  rolloutPercentage?: number;
   json: boolean;
   nonInteractive: boolean;
-  emitMetadata: boolean;
 };
 
 export default class UpdatePublish extends EasCommand {
@@ -107,14 +107,6 @@ export default class UpdatePublish extends EasCommand {
       description: 'A short message describing the update',
       required: false,
     }),
-    republish: Flags.boolean({
-      description: 'Republish an update group (deprecated, see republish command)',
-      exclusive: ['input-dir', 'skip-bundler'],
-    }),
-    group: Flags.string({
-      description: 'Update group to republish (deprecated, see republish command)',
-      exclusive: ['input-dir', 'skip-bundler'],
-    }),
     'input-dir': Flags.string({
       description: 'Location of the bundle',
       default: 'dist',
@@ -132,6 +124,13 @@ export default class UpdatePublish extends EasCommand {
       description: `Emit "eas-update-metadata.json" in the bundle folder with detailed information about the generated updates`,
       default: false,
     }),
+    'rollout-percentage': Flags.integer({
+      description: `Percentage of users this update should be immediately available to. Users not in the rollout will be served the previous latest update on the branch, even if that update is itself being rolled out. The specified number must be an integer between 1 and 100. When not specified, this defaults to 100.`,
+      required: false,
+      hidden: true,
+      min: 0,
+      max: 100,
+    }),
     platform: Flags.enum({
       char: 'p',
       options: [
@@ -165,7 +164,7 @@ export default class UpdatePublish extends EasCommand {
     const paginatedQueryOptions = getPaginatedQueryOptions(rawFlags);
     const {
       auto: autoFlag,
-      platform: platformFlag,
+      platform: requestedPlatform,
       channelName: channelNameArg,
       updateMessage: updateMessageArg,
       inputDir,
@@ -176,6 +175,7 @@ export default class UpdatePublish extends EasCommand {
       nonInteractive,
       branchName: branchNameArg,
       emitMetadata,
+      rolloutPercentage,
     } = this.sanitizeFlags(rawFlags);
 
     const {
@@ -204,7 +204,7 @@ export default class UpdatePublish extends EasCommand {
 
     await ensureEASUpdateIsConfiguredAsync({
       exp: expPossiblyWithoutEasUpdateConfigured,
-      platform: getRequestedPlatform(platformFlag),
+      platform: requestedPlatform,
       projectDir,
       projectId,
       vcsClient,
@@ -237,7 +237,13 @@ export default class UpdatePublish extends EasCommand {
     if (!skipBundler) {
       const bundleSpinner = ora().start('Exporting...');
       try {
-        await buildBundlesAsync({ projectDir, inputDir, exp, platformFlag, clearCache });
+        await buildBundlesAsync({
+          projectDir,
+          inputDir,
+          exp,
+          platformFlag: requestedPlatform,
+          clearCache,
+        });
         bundleSpinner.succeed('Exported bundle(s)');
       } catch (e) {
         bundleSpinner.fail('Export failed');
@@ -252,12 +258,12 @@ export default class UpdatePublish extends EasCommand {
     let unsortedUpdateInfoGroups: UpdateInfoGroup = {};
     let uploadedAssetCount = 0;
     let assetLimitPerUpdateGroup = 0;
-    let realizedPlatforms: PublishPlatform[] = [];
+    let realizedPlatforms: UpdatePublishPlatform[] = [];
 
     try {
       const collectedAssets = await collectAssetsAsync(distRoot);
-      const assets = filterExportedPlatformsByFlag(collectedAssets, platformFlag);
-      realizedPlatforms = Object.keys(assets) as PublishPlatform[];
+      const assets = filterCollectedAssetsByRequestedPlatforms(collectedAssets, requestedPlatform);
+      realizedPlatforms = Object.keys(assets) as UpdatePublishPlatform[];
 
       // Timeout mechanism:
       // - Start with NO_ACTIVITY_TIMEOUT. 180 seconds is chosen because the cloud function that processes
@@ -350,7 +356,7 @@ export default class UpdatePublish extends EasCommand {
         Log.debug(chalk.dim(`- ${uploadedAssetPath}`));
       }
 
-      const platformString = (Object.keys(assets) as PublishPlatform[])
+      const platformString = realizedPlatforms
         .map(platform => {
           const collectedAssetForPlatform = nullthrows(assets[platform]);
           const totalAssetsForPlatform = collectedAssetForPlatform.assets.length + 1; // launch asset
@@ -370,7 +376,7 @@ export default class UpdatePublish extends EasCommand {
     }
 
     const workflows = await resolveWorkflowPerPlatformAsync(projectDir, vcsClient);
-    const runtimeVersions = await getRuntimeVersionObjectAsync({
+    const runtimeVersionInfoObjects = await getRuntimeVersionInfoObjectsAsync({
       exp,
       platforms: realizedPlatforms,
       projectDir,
@@ -380,38 +386,84 @@ export default class UpdatePublish extends EasCommand {
       },
       env: undefined,
     });
-    const runtimeToPlatformMapping =
-      getRuntimeToPlatformMappingFromRuntimeVersions(runtimeVersions);
+    const runtimeToPlatformsAndFingerprintInfoMapping =
+      getRuntimeToPlatformsAndFingerprintInfoMappingFromRuntimeVersionInfoObjects(
+        runtimeVersionInfoObjects
+      );
 
     const { branchId } = await ensureBranchExistsAsync(graphqlClient, {
       appId: projectId,
       branchName,
     });
 
+    const runtimeToPlatformsAndFingerprintInfoAndFingerprintSourceMapping = await Promise.all(
+      runtimeToPlatformsAndFingerprintInfoMapping.map(async info => {
+        return {
+          ...info,
+          fingerprintSource: info.fingerprint
+            ? (
+                await maybeUploadFingerprintAsync({
+                  runtimeVersion: info.runtimeVersion,
+                  fingerprint: info.fingerprint,
+                  graphqlClient,
+                })
+              ).fingerprintSource ?? null
+            : null,
+        };
+      })
+    );
+
+    const runtimeVersionToRolloutInfoGroup =
+      rolloutPercentage !== undefined
+        ? await getRuntimeToUpdateRolloutInfoGroupMappingAsync(graphqlClient, {
+            appId: projectId,
+            branchName,
+            rolloutPercentage,
+            runtimeToPlatformsAndFingerprintInfoMapping,
+          })
+        : undefined;
+
     const gitCommitHash = await vcsClient.getCommitHashAsync();
     const isGitWorkingTreeDirty = await vcsClient.hasUncommittedChangesAsync();
 
     // Sort the updates into different groups based on their platform specific runtime versions
-    const updateGroups: PublishUpdateGroupInput[] = runtimeToPlatformMapping.map(
-      ({ runtimeVersion, platforms }) => {
-        const localUpdateInfoGroup = Object.fromEntries(
-          platforms.map(platform => [
-            platform,
-            unsortedUpdateInfoGroups[platform as keyof UpdateInfoGroup],
-          ])
-        );
+    const updateGroups: PublishUpdateGroupInput[] =
+      runtimeToPlatformsAndFingerprintInfoAndFingerprintSourceMapping.map(
+        ({ runtimeVersion, platforms, fingerprintSource }) => {
+          const localUpdateInfoGroup = Object.fromEntries(
+            platforms.map(platform => [
+              platform,
+              unsortedUpdateInfoGroups[platform as keyof UpdateInfoGroup],
+            ])
+          );
 
-        return {
-          branchId,
-          updateInfoGroup: localUpdateInfoGroup,
-          runtimeVersion,
-          message: updateMessage,
-          gitCommitHash,
-          isGitWorkingTreeDirty,
-          awaitingCodeSigningInfo: !!codeSigningInfo,
-        };
-      }
-    );
+          const rolloutInfoGroupForRuntimeVersion = runtimeVersionToRolloutInfoGroup
+            ? runtimeVersionToRolloutInfoGroup.get(runtimeVersion)
+            : null;
+          const localRolloutInfoGroup = rolloutInfoGroupForRuntimeVersion
+            ? Object.fromEntries(
+                platforms.map(platform => [
+                  platform,
+                  rolloutInfoGroupForRuntimeVersion[platform as keyof UpdateRolloutInfoGroup],
+                ])
+              )
+            : null;
+
+          return {
+            branchId,
+            updateInfoGroup: localUpdateInfoGroup,
+            rolloutInfoGroup: localRolloutInfoGroup,
+            runtimeFingerprintSource: fingerprintSource
+              ? transformFingerprintSource(fingerprintSource)
+              : null,
+            runtimeVersion,
+            message: updateMessage,
+            gitCommitHash,
+            isGitWorkingTreeDirty,
+            awaitingCodeSigningInfo: !!codeSigningInfo,
+          };
+        }
+      );
     let newUpdates: UpdatePublishMutation['updateBranch']['publishUpdateGroups'];
     const publishSpinner = ora('Publishing...').start();
     try {
@@ -486,7 +538,10 @@ export default class UpdatePublish extends EasCommand {
 
       Log.addNewLineIfNone();
 
-      for (const runtime of uniqBy(runtimeVersions, version => version.runtimeVersion)) {
+      for (const runtime of uniqBy(
+        runtimeToPlatformsAndFingerprintInfoMapping,
+        version => version.runtimeVersion
+      )) {
         const newUpdatesForRuntimeVersion = newUpdates.filter(
           update => update.runtimeVersion === runtime.runtimeVersion
         );
@@ -517,6 +572,22 @@ export default class UpdatePublish extends EasCommand {
               ? [{ label: 'Android update ID', value: newAndroidUpdate.id }]
               : []),
             ...(newIosUpdate ? [{ label: 'iOS update ID', value: newIosUpdate.id }] : []),
+            ...(newAndroidUpdate?.rolloutControlUpdate
+              ? [
+                  {
+                    label: 'Android Rollout',
+                    value: `${newAndroidUpdate.rolloutPercentage}% (Base update ID: ${newAndroidUpdate.rolloutControlUpdate.id})`,
+                  },
+                ]
+              : []),
+            ...(newIosUpdate?.rolloutControlUpdate
+              ? [
+                  {
+                    label: 'iOS Rollout',
+                    value: `${newIosUpdate.rolloutPercentage}% (Base update ID: ${newIosUpdate.rolloutControlUpdate.id})`,
+                  },
+                ]
+              : []),
             { label: 'Message', value: updateMessage ?? '' },
             ...(gitCommitHash
               ? [
@@ -557,23 +628,6 @@ export default class UpdatePublish extends EasCommand {
       );
     }
 
-    if (flags.group || flags.republish) {
-      // Pick the first flag set that is defined, in this specific order
-      const args = [
-        ['--group', flags.group],
-        ['--branch', flags.branch],
-      ].filter(([_, value]) => value)[0];
-
-      Log.newLine();
-      Log.warn(
-        'The --group and --republish flags are deprecated, use the republish command instead:'
-      );
-      Log.warn(`  ${chalk.bold([`eas update:republish`, ...(args ?? [])].join(' '))}`);
-      Log.newLine();
-
-      Errors.error('--group and --republish flags are deprecated', { exit: 1 });
-    }
-
     const skipBundler = flags['skip-bundler'] ?? false;
     let emitMetadata = flags['emit-metadata'] ?? false;
 
@@ -594,6 +648,7 @@ export default class UpdatePublish extends EasCommand {
       clearCache: flags['clear-cache'],
       platform: flags.platform as RequestedPlatform,
       privateKeyPath: flags['private-key-path'],
+      rolloutPercentage: flags['rollout-percentage'],
       nonInteractive,
       emitMetadata,
       json: flags.json ?? false,

packages/eas-cli/src/commands/update/list.ts

@@ -53,10 +53,13 @@ export default class UpdateList extends EasCommand {
     }
 
     if (all) {
-      listAndRenderUpdateGroupsOnAppAsync(graphqlClient, { projectId, paginatedQueryOptions });
+      await listAndRenderUpdateGroupsOnAppAsync(graphqlClient, {
+        projectId,
+        paginatedQueryOptions,
+      });
     } else {
       if (branchFlag) {
-        listAndRenderUpdateGroupsOnBranchAsync(graphqlClient, {
+        await listAndRenderUpdateGroupsOnBranchAsync(graphqlClient, {
           projectId,
           branchName: branchFlag,
           paginatedQueryOptions,
@@ -81,7 +84,7 @@ export default class UpdateList extends EasCommand {
               offset: 0,
             },
         });
-        listAndRenderUpdateGroupsOnBranchAsync(graphqlClient, {
+        await listAndRenderUpdateGroupsOnBranchAsync(graphqlClient, {
           projectId,
           branchName: selectedBranch.name,
           paginatedQueryOptions,

packages/eas-cli/src/commands/update/roll-back-to-embedded.ts

@@ -24,12 +24,12 @@ import {
   getOwnerAccountForProjectIdAsync,
 } from '../../project/projectUtils';
 import {
-  ExpoCLIExportPlatformFlag,
+  RuntimeVersionInfo,
+  UpdatePublishPlatform,
   defaultPublishPlatforms,
   getBranchNameForCommandAsync,
-  getRequestedPlatform,
-  getRuntimeToPlatformMappingFromRuntimeVersions,
-  getRuntimeVersionObjectAsync,
+  getRuntimeToPlatformsAndFingerprintInfoMappingFromRuntimeVersionInfoObjects,
+  getRuntimeVersionInfoObjectsAsync,
   getUpdateMessageForCommandAsync,
 } from '../../project/publish';
 import { resolveWorkflowPerPlatformAsync } from '../../project/workflow';
@@ -60,7 +60,7 @@ type RawUpdateFlags = {
 
 type UpdateFlags = {
   auto: boolean;
-  platform: ExpoCLIExportPlatformFlag;
+  platform: RequestedPlatform;
   branchName?: string;
   channelName?: string;
   updateMessage?: string;
@@ -150,7 +150,7 @@ export default class UpdateRollBackToEmbedded extends EasCommand {
 
     await ensureEASUpdateIsConfiguredAsync({
       exp: expPossiblyWithoutEasUpdateConfigured,
-      platform: getRequestedPlatform(platformFlag),
+      platform: platformFlag,
       projectDir,
       projectId,
       vcsClient,
@@ -182,7 +182,7 @@ export default class UpdateRollBackToEmbedded extends EasCommand {
       jsonFlag,
     });
 
-    const realizedPlatforms: PublishPlatform[] =
+    const realizedPlatforms: UpdatePublishPlatform[] =
       platformFlag === 'all' ? defaultPublishPlatforms : [platformFlag];
 
     const { branchId } = await ensureBranchExistsAsync(graphqlClient, {
@@ -194,7 +194,7 @@ export default class UpdateRollBackToEmbedded extends EasCommand {
     const isGitWorkingTreeDirty = await vcsClient.hasUncommittedChangesAsync();
 
     const workflows = await resolveWorkflowPerPlatformAsync(projectDir, vcsClient);
-    const runtimeVersions = await getRuntimeVersionObjectAsync({
+    const runtimeVersionInfoObjects = await getRuntimeVersionInfoObjectsAsync({
       exp,
       platforms: realizedPlatforms,
       projectDir,
@@ -204,6 +204,10 @@ export default class UpdateRollBackToEmbedded extends EasCommand {
       },
       env: undefined,
     });
+    const runtimeToPlatformsAndFingerprintInfoMapping =
+      getRuntimeToPlatformsAndFingerprintInfoMappingFromRuntimeVersionInfoObjects(
+        runtimeVersionInfoObjects
+      );
 
     let newUpdates: UpdatePublishMutation['updateBranch']['publishUpdateGroups'];
     const publishSpinner = ora('Publishing...').start();
@@ -215,7 +219,7 @@ export default class UpdateRollBackToEmbedded extends EasCommand {
         updateMessage,
         branchId,
         codeSigningInfo,
-        runtimeVersions,
+        runtimeToPlatformsAndFingerprintInfoMapping,
         realizedPlatforms,
       });
       publishSpinner.succeed('Published!');
@@ -236,7 +240,10 @@ export default class UpdateRollBackToEmbedded extends EasCommand {
 
       Log.addNewLineIfNone();
 
-      for (const runtime of uniqBy(runtimeVersions, version => version.runtimeVersion)) {
+      for (const runtime of uniqBy(
+        runtimeToPlatformsAndFingerprintInfoMapping,
+        version => version.runtimeVersion
+      )) {
         const newUpdatesForRuntimeVersion = newUpdates.filter(
           update => update.runtimeVersion === runtime.runtimeVersion
         );
@@ -291,7 +298,7 @@ export default class UpdateRollBackToEmbedded extends EasCommand {
     updateMessage,
     branchId,
     codeSigningInfo,
-    runtimeVersions,
+    runtimeToPlatformsAndFingerprintInfoMapping,
     realizedPlatforms,
   }: {
     graphqlClient: ExpoGraphqlClient;
@@ -300,17 +307,17 @@ export default class UpdateRollBackToEmbedded extends EasCommand {
     updateMessage: string | undefined;
     branchId: string;
     codeSigningInfo: CodeSigningInfo | undefined;
-    runtimeVersions: { platform: string; runtimeVersion: string }[];
+    runtimeToPlatformsAndFingerprintInfoMapping: (RuntimeVersionInfo & {
+      platforms: UpdatePublishPlatform[];
+    })[];
     realizedPlatforms: PublishPlatform[];
   }): Promise<UpdatePublishMutation['updateBranch']['publishUpdateGroups']> {
-    const runtimeToPlatformMapping =
-      getRuntimeToPlatformMappingFromRuntimeVersions(runtimeVersions);
     const rollbackInfoGroups = Object.fromEntries(
       realizedPlatforms.map(platform => [platform, true])
     );
 
     // Sort the updates into different groups based on their platform specific runtime versions
-    const updateGroups: PublishUpdateGroupInput[] = runtimeToPlatformMapping.map(
+    const updateGroups: PublishUpdateGroupInput[] = runtimeToPlatformsAndFingerprintInfoMapping.map(
       ({ runtimeVersion, platforms }) => {
         const localRollbackInfoGroup = Object.fromEntries(
           platforms.map(platform => [platform, rollbackInfoGroups[platform]])

packages/eas-cli/src/commands/worker/deploy.ts

@@ -0,0 +1,212 @@
+import chalk from 'chalk';
+import fs from 'node:fs';
+import * as path from 'node:path';
+
+import EasCommand from '../../commandUtils/EasCommand';
+import Log from '../../log';
+import { ora } from '../../ora';
+import { createProgressTracker } from '../../utils/progress';
+import * as WorkerAssets from '../../worker/assets';
+import { getSignedDeploymentUrlAsync } from '../../worker/deployment';
+import { UploadParams, batchUploadAsync, uploadAsync } from '../../worker/upload';
+
+const isDirectory = (directoryPath: string): Promise<boolean> =>
+  fs.promises
+    .stat(directoryPath)
+    .then(stat => stat.isDirectory())
+    .catch(() => false);
+
+export default class WorkerDeploy extends EasCommand {
+  static override description = 'deploy an Expo web build';
+  static override aliases = ['deploy'];
+
+  // TODO(@kitten): Keep command hidden until worker deployments are live
+  static override hidden = true;
+  static override state = 'beta';
+
+  static override flags = {
+    // TODO(@kitten): Allow deployment identifier to be specified
+  };
+
+  static override contextDefinition = {
+    ...this.ContextOptions.DynamicProjectConfig,
+    ...this.ContextOptions.ProjectDir,
+    ...this.ContextOptions.LoggedIn,
+  };
+
+  async runAsync(): Promise<void> {
+    Log.warn('EAS Worker Deployments are in beta and subject to breaking changes.');
+
+    const {
+      getDynamicPrivateProjectConfigAsync,
+      loggedIn: { graphqlClient },
+    } = await this.getContextAsync(WorkerDeploy, {
+      nonInteractive: true,
+    });
+
+    const { projectId, projectDir, exp } = await getDynamicPrivateProjectConfigAsync();
+    const distPath = path.resolve(projectDir, 'dist');
+
+    let distServerPath: string | null;
+    let distClientPath: string;
+    if (exp.web?.output === 'static') {
+      distClientPath = distPath;
+      distServerPath = null;
+      if (!(await isDirectory(distClientPath))) {
+        throw new Error(
+          `No "dist/" folder found. Prepare your project for deployment with "npx expo export"`
+        );
+      }
+      Log.log('Detected "static" worker deployment');
+    } else if (exp.web?.output === 'server') {
+      distClientPath = path.resolve(distPath, 'client');
+      distServerPath = path.resolve(distPath, 'server');
+      if (!(await isDirectory(distClientPath))) {
+        throw new Error(
+          `No "dist/client/" folder found. Prepare your project for deployment with "npx expo export"`
+        );
+      } else if (!(await isDirectory(distServerPath))) {
+        throw new Error(
+          `No "dist/server/" folder found. Prepare your project for deployment with "npx expo export"`
+        );
+      }
+      Log.log('Detected "server" worker deployment');
+    } else {
+      throw new Error(
+        `Single-page apps are not supported. Ensure that app.json key "expo.web.output" is set to "server" or "static".`
+      );
+    }
+
+    async function* emitWorkerTarballAsync(
+      assetMap: WorkerAssets.AssetMap
+    ): AsyncGenerator<WorkerAssets.FileEntry> {
+      yield ['assets.json', JSON.stringify(assetMap)];
+
+      // TODO: Create manifest from user configuration
+      const manifest = { env: {} };
+      yield ['manifest.json', JSON.stringify(manifest)];
+
+      if (distServerPath) {
+        const workerFiles = WorkerAssets.listWorkerFilesAsync(distServerPath);
+        for await (const workerFile of workerFiles) {
+          yield [`server/${workerFile.normalizedPath}`, workerFile.data];
+        }
+      }
+    }
+
+    async function uploadTarballAsync(tarPath: string): Promise<any> {
+      const uploadUrl = await getSignedDeploymentUrlAsync(graphqlClient, exp, {
+        appId: projectId,
+      });
+
+      const { response } = await uploadAsync({
+        url: uploadUrl,
+        filePath: tarPath,
+        compress: false,
+        headers: {
+          accept: 'application/json',
+        },
+      });
+      if (response.status === 413) {
+        throw new Error(
+          'Upload failed! (Payload too large)\n' +
+            `The files in "dist/server/" (at: ${distServerPath}) exceed the maximum file size (10MB gzip).`
+        );
+      } else if (!response.ok) {
+        throw new Error(`Upload failed! (${response.statusText})`);
+      } else {
+        const json = await response.json();
+        if (!json.success || !json.result || typeof json.result !== 'object') {
+          throw new Error(json.message ? `Upload failed: ${json.message}` : 'Upload failed!');
+        }
+        return json.result;
+      }
+    }
+
+    async function uploadAssetsAsync(
+      assetMap: WorkerAssets.AssetMap,
+      uploads: Record<string, string>
+    ): Promise<void> {
+      if (typeof uploads !== 'object' || !uploads) {
+        return;
+      }
+
+      // TODO(@kitten): Batch and upload multiple files in parallel
+      const uploadParams: UploadParams[] = [];
+      for await (const asset of WorkerAssets.listAssetMapFilesAsync(distClientPath, assetMap)) {
+        const uploadURL = uploads[asset.normalizedPath];
+        if (uploadURL) {
+          uploadParams.push({ url: uploadURL, filePath: asset.path });
+        }
+      }
+
+      const progress = {
+        total: uploadParams.length,
+        pending: 0,
+        percent: 0,
+        transferred: 0,
+      };
+
+      const updateProgress = createProgressTracker({
+        total: progress.total,
+        message(ratio) {
+          const percent = `${Math.floor(ratio * 100)}`;
+          const details = chalk.dim(
+            `(${progress.pending} Pending, ${progress.transferred} Completed, ${progress.total} Total)`
+          );
+          return `Uploading client assets: ${percent.padStart(3)}% ${details}`;
+        },
+        completedMessage: 'Uploaded assets for serverless deployment',
+      });
+
+      try {
+        for await (const signal of batchUploadAsync(uploadParams)) {
+          if ('response' in signal) {
+            progress.pending--;
+            progress.percent = ++progress.transferred / progress.total;
+          } else {
+            progress.pending++;
+          }
+          updateProgress({ progress });
+        }
+      } catch (error: any) {
+        updateProgress({ isComplete: true, error });
+        throw error;
+      }
+      updateProgress({ isComplete: true });
+    }
+
+    let progress = ora('Preparing worker upload');
+    let assetMap: WorkerAssets.AssetMap;
+    let tarPath: string;
+    try {
+      assetMap = await WorkerAssets.createAssetMapAsync(distClientPath);
+      tarPath = await WorkerAssets.packFilesIterableAsync(emitWorkerTarballAsync(assetMap));
+    } catch (error: any) {
+      progress.fail('Failed to prepare worker upload');
+      throw error;
+    }
+    progress.succeed('Prepared worker upload');
+
+    progress = ora('Creating worker deployment');
+    let deployResult: any;
+    try {
+      deployResult = await uploadTarballAsync(tarPath);
+    } catch (error: any) {
+      progress.fail('Failed to create worker deployment');
+      throw error;
+    }
+    progress.succeed('Created worker deployment');
+
+    await uploadAssetsAsync(assetMap, deployResult.uploads);
+
+    const baseDomain = process.env.EXPO_STAGING ? 'staging.expo' : 'expo';
+    const deploymentURL = `https://${deployResult.fullName}.${baseDomain}.app`;
+    const deploymentsUrl = `https://${baseDomain}.dev/accounts/${exp.owner}/projects/${deployResult.name}/serverless/deployments`;
+
+    Log.addNewLineIfNone();
+    Log.log(`🎉 Your worker deployment is ready: ${deploymentURL}`);
+    Log.addNewLineIfNone();
+    Log.log(`🔗 Manage on EAS: ${deploymentsUrl}`);
+  }
+}

packages/eas-cli/src/credentials/android/AndroidCredentialsProvider.ts

@@ -21,8 +21,8 @@ export default class AndroidCredentialsProvider {
   public readonly platform = Platform.ANDROID;
 
   constructor(
-    private ctx: CredentialsContext,
-    private options: Options
+    private readonly ctx: CredentialsContext,
+    private readonly options: Options
   ) {}
 
   public async getCredentialsAsync(

packages/eas-cli/src/credentials/android/actions/AssignFcm.ts

@@ -7,7 +7,7 @@ import { CredentialsContext } from '../../context';
 import { AppLookupParams } from '../api/GraphqlClient';
 
 export class AssignFcm {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   public async runAsync(
     ctx: CredentialsContext,

packages/eas-cli/src/credentials/android/actions/AssignGoogleServiceAccountKeyForFcmV1.ts

@@ -7,7 +7,7 @@ import { CredentialsContext } from '../../context';
 import { AppLookupParams } from '../api/GraphqlClient';
 
 export class AssignGoogleServiceAccountKeyForFcmV1 {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   public async runAsync(
     ctx: CredentialsContext,

packages/eas-cli/src/credentials/android/actions/AssignGoogleServiceAccountKeyForSubmissions.ts

@@ -7,7 +7,7 @@ import { CredentialsContext } from '../../context';
 import { AppLookupParams } from '../api/GraphqlClient';
 
 export class AssignGoogleServiceAccountKeyForSubmissions {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   public async runAsync(
     ctx: CredentialsContext,

packages/eas-cli/src/credentials/android/actions/CreateFcm.ts

@@ -4,7 +4,7 @@ import { promptAsync } from '../../../prompts';
 import { CredentialsContext } from '../../context';
 
 export class CreateFcm {
-  constructor(private account: AccountFragment) {}
+  constructor(private readonly account: AccountFragment) {}
 
   public async runAsync(ctx: CredentialsContext): Promise<AndroidFcmFragment> {
     if (ctx.nonInteractive) {

packages/eas-cli/src/credentials/android/actions/CreateGoogleServiceAccountKey.ts

@@ -12,7 +12,7 @@ import {
 } from '../utils/googleServiceAccountKey';
 
 export class CreateGoogleServiceAccountKey {
-  constructor(private account: AccountFragment) {}
+  constructor(private readonly account: AccountFragment) {}
 
   public async runAsync(ctx: CredentialsContext): Promise<GoogleServiceAccountKeyFragment> {
     if (ctx.nonInteractive) {

packages/eas-cli/src/credentials/android/actions/CreateKeystore.ts

@@ -9,7 +9,7 @@ import { generateRandomKeystoreAsync } from '../utils/keystore';
 import { getKeystoreWithType, validateKeystore } from '../utils/keystoreNew';
 
 export class CreateKeystore {
-  constructor(private account: AccountFragment) {}
+  constructor(private readonly account: AccountFragment) {}
 
   public async runAsync(ctx: CredentialsContext): Promise<AndroidKeystoreFragment> {
     if (ctx.nonInteractive) {

packages/eas-cli/src/credentials/android/actions/DownloadKeystore.ts

@@ -16,7 +16,7 @@ interface DownloadKeystoreOptions {
 }
 
 export class DownloadKeystore {
-  constructor(private options: DownloadKeystoreOptions) {}
+  constructor(private readonly options: DownloadKeystoreOptions) {}
 
   public async runAsync(
     ctx: CredentialsContext,
@@ -62,7 +62,7 @@ export class DownloadKeystore {
 }
 
 export class BackupKeystore {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   public async runAsync(
     ctx: CredentialsContext,

packages/eas-cli/src/credentials/android/actions/RemoveFcm.ts

@@ -4,7 +4,7 @@ import { CredentialsContext } from '../../context';
 import { AppLookupParams, formatProjectFullName } from '../api/GraphqlClient';
 
 export class RemoveFcm {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   async runAsync(ctx: CredentialsContext): Promise<void> {
     if (ctx.nonInteractive) {

packages/eas-cli/src/credentials/android/actions/RemoveGoogleServiceAccountKey.ts

@@ -5,7 +5,7 @@ import { CredentialsContext } from '../../context';
 import { selectGoogleServiceAccountKeyAsync } from '../utils/googleServiceAccountKey';
 
 export class SelectAndRemoveGoogleServiceAccountKey {
-  constructor(private account: AccountFragment) {}
+  constructor(private readonly account: AccountFragment) {}
 
   async runAsync(ctx: CredentialsContext): Promise<void> {
     if (ctx.nonInteractive) {
@@ -31,7 +31,7 @@ export class SelectAndRemoveGoogleServiceAccountKey {
 }
 
 export class RemoveGoogleServiceAccountKey {
-  constructor(private googleServiceAccountKey: GoogleServiceAccountKeyFragment) {}
+  constructor(private readonly googleServiceAccountKey: GoogleServiceAccountKeyFragment) {}
 
   public async runAsync(ctx: CredentialsContext): Promise<void> {
     if (ctx.nonInteractive) {

packages/eas-cli/src/credentials/android/actions/RemoveKeystore.ts

@@ -8,7 +8,7 @@ import { CredentialsContext } from '../../context';
 import { AppLookupParams } from '../api/GraphqlClient';
 
 export class RemoveKeystore {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   async runAsync(
     ctx: CredentialsContext,

packages/eas-cli/src/credentials/android/actions/SetUpBuildCredentials.ts

@@ -26,7 +26,7 @@ interface Options {
  * @name: sets up build credentials for the specified configuration. If no name is specified, the default configuration is setup
  */
 export class SetUpBuildCredentials {
-  constructor(private options: Options) {}
+  constructor(private readonly options: Options) {}
 
   async runAsync(ctx: CredentialsContext): Promise<AndroidAppBuildCredentialsFragment> {
     const { app, name: maybeName } = this.options;

packages/eas-cli/src/credentials/android/actions/SetUpBuildCredentialsFromCredentialsJson.ts

@@ -15,7 +15,7 @@ import { AppLookupParams } from '../api/GraphqlClient';
 import { getKeystoreWithType } from '../utils/keystoreNew';
 
 export class SetUpBuildCredentialsFromCredentialsJson {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   async runAsync(ctx: CredentialsContext): Promise<AndroidAppBuildCredentialsFragment | null> {
     if (ctx.nonInteractive) {

packages/eas-cli/src/credentials/android/actions/SetUpGoogleServiceAccountKeyForFcmV1.ts

@@ -14,7 +14,7 @@ import { MissingCredentialsNonInteractiveError } from '../../errors';
 import { AppLookupParams } from '../api/GraphqlClient';
 
 export class SetUpGoogleServiceAccountKeyForFcmV1 {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   public async runAsync(ctx: CredentialsContext): Promise<CommonAndroidAppCredentialsFragment> {
     const isKeySetup = await this.isGoogleServiceAccountKeySetupAsync(ctx);

packages/eas-cli/src/credentials/android/actions/SetUpGoogleServiceAccountKeyForSubmissions.ts

@@ -14,7 +14,7 @@ import { MissingCredentialsNonInteractiveError } from '../../errors';
 import { AppLookupParams } from '../api/GraphqlClient';
 
 export class SetUpGoogleServiceAccountKeyForSubmissions {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   public async runAsync(ctx: CredentialsContext): Promise<CommonAndroidAppCredentialsFragment> {
     const isKeySetup = await this.isGoogleServiceAccountKeySetupAsync(ctx);

packages/eas-cli/src/credentials/android/actions/UseExistingGoogleServiceAccountKey.ts

@@ -4,7 +4,7 @@ import { CredentialsContext } from '../../context';
 import { selectGoogleServiceAccountKeyAsync } from '../utils/googleServiceAccountKey';
 
 export class UseExistingGoogleServiceAccountKey {
-  constructor(private account: AccountFragment) {}
+  constructor(private readonly account: AccountFragment) {}
 
   public async runAsync(ctx: CredentialsContext): Promise<GoogleServiceAccountKeyFragment | null> {
     if (ctx.nonInteractive) {

packages/eas-cli/src/credentials/android/api/GraphqlClient.ts

@@ -279,7 +279,7 @@ export async function deleteKeystoreAsync(
   graphqlClient: ExpoGraphqlClient,
   keystore: AndroidKeystoreFragment
 ): Promise<void> {
-  return await AndroidKeystoreMutation.deleteAndroidKeystoreAsync(graphqlClient, keystore.id);
+  await AndroidKeystoreMutation.deleteAndroidKeystoreAsync(graphqlClient, keystore.id);
 }
 
 export async function createFcmAsync(
@@ -299,7 +299,7 @@ export async function deleteFcmAsync(
   graphqlClient: ExpoGraphqlClient,
   fcm: AndroidFcmFragment
 ): Promise<void> {
-  return await AndroidFcmMutation.deleteAndroidFcmAsync(graphqlClient, fcm.id);
+  await AndroidFcmMutation.deleteAndroidFcmAsync(graphqlClient, fcm.id);
 }
 
 export async function createGoogleServiceAccountKeyAsync(
@@ -318,7 +318,7 @@ export async function deleteGoogleServiceAccountKeyAsync(
   graphqlClient: ExpoGraphqlClient,
   googleServiceAccountKey: GoogleServiceAccountKeyFragment
 ): Promise<void> {
-  return await GoogleServiceAccountKeyMutation.deleteGoogleServiceAccountKeyAsync(
+  await GoogleServiceAccountKeyMutation.deleteGoogleServiceAccountKeyAsync(
     graphqlClient,
     googleServiceAccountKey.id
   );

packages/eas-cli/src/credentials/android/utils/__tests__/keystoreNew-test.ts

@@ -39,37 +39,49 @@ describe('validateKeystore', () => {
   it('validates a correctly formatted jks keystore', async () => {
     const keystoreWithType = getKeystoreWithType(testKeystore);
     expect(keystoreWithType.type).toBe(AndroidKeystoreType.Jks);
-    expect(() => validateKeystore(keystoreWithType)).not.toThrow();
+    expect(() => {
+      validateKeystore(keystoreWithType);
+    }).not.toThrow();
   });
   it('doesnt validate a jks keystore with wrong alias', async () => {
     const keystoreWithType = getKeystoreWithType({
       ...testKeystore,
       keyAlias: 'non-existent-alias',
     });
-    expect(() => validateKeystore(keystoreWithType)).toThrow();
+    expect(() => {
+      validateKeystore(keystoreWithType);
+    }).toThrow();
   });
   it('doesnt validate a jks keystore with wrong key password', async () => {
     const keystoreWithType = getKeystoreWithType({
       ...testKeystore,
       keyPassword: 'not-the-password',
     });
-    expect(() => validateKeystore(keystoreWithType)).toThrow();
+    expect(() => {
+      validateKeystore(keystoreWithType);
+    }).toThrow();
   });
   it('validates a correctly formatted pkcs 12 keystore', async () => {
     const keystoreWithType = getKeystoreWithType(testPKCS12Keystore);
     expect(keystoreWithType.type).toBe(AndroidKeystoreType.Pkcs12);
-    expect(() => validateKeystore(keystoreWithType)).not.toThrow();
+    expect(() => {
+      validateKeystore(keystoreWithType);
+    }).not.toThrow();
   });
   it('doesnt validate a PKCS 12 keystore with wrong alias', async () => {
     const keystoreWithType = getKeystoreWithType({
       ...testPKCS12Keystore,
       keyAlias: 'non-existent-alias',
     });
-    expect(() => validateKeystore(keystoreWithType)).toThrow();
+    expect(() => {
+      validateKeystore(keystoreWithType);
+    }).toThrow();
   });
   it('validates an PKCS 12 Keystore with an empty password', async () => {
     const keystoreWithType = getKeystoreWithType(testPKCS12EmptyPasswordKeystore);
     expect(keystoreWithType.type).toBe(AndroidKeystoreType.Pkcs12);
-    expect(() => validateKeystore(keystoreWithType)).not.toThrow();
+    expect(() => {
+      validateKeystore(keystoreWithType);
+    }).not.toThrow();
   });
 });

packages/eas-cli/src/credentials/context.ts

@@ -35,10 +35,10 @@ export class CredentialsContext {
 
   private shouldAskAuthenticateAppStore: boolean = true;
 
-  private projectInfo: CredentialsContextProjectInfo | null;
+  private readonly projectInfo: CredentialsContextProjectInfo | null;
 
   constructor(
-    private options: {
+    private readonly options: {
       // if null, this implies not running in a project context
       projectInfo: CredentialsContextProjectInfo | null;
       easJsonCliConfig?: EasJson['cli'];
@@ -86,7 +86,7 @@ export class CredentialsContext {
   }
 
   async bestEffortAppStoreAuthenticateAsync(): Promise<void> {
-    if (this.appStore.authCtx || !this.shouldAskAuthenticateAppStore) {
+    if (!!this.appStore.authCtx || !this.shouldAskAuthenticateAppStore) {
       // skip prompts if already have apple ctx or already asked about it
       return;
     }

packages/eas-cli/src/credentials/ios/IosCredentialsProvider.ts

@@ -37,8 +37,8 @@ export default class IosCredentialsProvider {
   public readonly platform = Platform.IOS;
 
   constructor(
-    private ctx: CredentialsContext,
-    private options: Options
+    private readonly ctx: CredentialsContext,
+    private readonly options: Options
   ) {}
 
   public async getCredentialsAsync(
@@ -108,7 +108,7 @@ export default class IosCredentialsProvider {
       return null;
     } else if (
       ctx.easJsonCliConfig?.promptToConfigurePushNotifications === undefined &&
-      !(await isExpoNotificationsInstalled(ctx.projectDir))
+      !isExpoNotificationsInstalled(ctx.projectDir)
     ) {
       return null;
     }

packages/eas-cli/src/credentials/ios/__tests__/IosCredentialsProvider-test.ts

@@ -23,11 +23,7 @@ jest.mock('../validators/validateProvisioningProfile', () => ({
     _app: any,
     buildCredentials: Partial<IosAppBuildCredentialsFragment> | null
   ): Promise<boolean> => {
-    return !!(
-      buildCredentials &&
-      buildCredentials.distributionCertificate &&
-      buildCredentials.provisioningProfile
-    );
+    return !!(buildCredentials?.distributionCertificate && buildCredentials.provisioningProfile);
   },
 }));
 jest.mock('../../../project/ios/bundleIdentifier');

packages/eas-cli/src/credentials/ios/actions/AscApiKeyUtils.ts

@@ -202,7 +202,7 @@ export async function selectAscApiKeysFromAccountAsync(
     }
     return null;
   }
-  return selectAscApiKeysAsync(ascApiKeysForAccount);
+  return await selectAscApiKeysAsync(ascApiKeysForAccount);
 }
 
 async function selectAscApiKeysAsync(

packages/eas-cli/src/credentials/ios/actions/AssignAscApiKey.ts

@@ -9,7 +9,7 @@ import { CredentialsContext } from '../../context';
 import { AppLookupParams } from '../api/graphql/types/AppLookupParams';
 
 export class AssignAscApiKey {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   public async runAsync(
     ctx: CredentialsContext,

packages/eas-cli/src/credentials/ios/actions/AssignPushKey.ts

@@ -5,7 +5,7 @@ import { CredentialsContext } from '../../context';
 import { AppLookupParams } from '../api/graphql/types/AppLookupParams';
 
 export class AssignPushKey {
-  constructor(private app: AppLookupParams) {}
+  constructor(private readonly app: AppLookupParams) {}
 
   public async runAsync(
     ctx: CredentialsContext,

packages/eas-cli/src/credentials/ios/actions/ConfigureProvisioningProfile.ts

@@ -21,10 +21,10 @@ import { Target } from '../types';
 
 export class ConfigureProvisioningProfile {
   constructor(
-    private app: AppLookupParams,
-    private target: Target,
-    private distributionCertificate: AppleDistributionCertificateFragment,
-    private originalProvisioningProfile: AppleProvisioningProfileFragment
+    private readonly app: AppLookupParams,
+    private readonly target: Target,
+    private readonly distributionCertificate: AppleDistributionCertificateFragment,
+    private readonly originalProvisioningProfile: AppleProvisioningProfileFragment
   ) {}
 
   public async runAsync(

packages/eas-cli/src/credentials/ios/actions/CreateAscApiKey.ts

@@ -3,7 +3,7 @@ import { AccountFragment, AppStoreConnectApiKeyFragment } from '../../../graphql
 import { CredentialsContext } from '../../context';
 
 export class CreateAscApiKey {
-  constructor(private account: AccountFragment) {}
+  constructor(private readonly account: AccountFragment) {}
 
   public async runAsync(
     ctx: CredentialsContext,