build(mobile): align workspace build tooling

.github/workflows/kilo-app-release.yml

@@ -193,7 +193,7 @@ jobs:
         env:
           EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }}
         run: |
-          if ! ENV_OUTPUT=$(pnpx eas-cli@24.8.0 env:list --environment production --format long 2>&1); then
+          if ! ENV_OUTPUT=$(pnpm exec eas env:list --environment production --format long 2>&1); then
             echo "$ENV_OUTPUT"
             echo "::error::eas env:list failed"
             exit 1
@@ -219,7 +219,7 @@ jobs:
         # makes that evaluation throw on env the CLI never injects. SENTRY_AUTH_TOKEN
         # is a SECRET variable that only EAS builders can read, so the assertion run
         # gets a placeholder. The step above proves the real secret exists.
-        run: pnpx eas-cli@24.8.0 env:exec production --non-interactive 'EAS_BUILD_PROFILE=production SENTRY_AUTH_TOKEN=preflight-placeholder pnpm assert:config'
+        run: pnpm exec eas env:exec production --non-interactive 'EAS_BUILD_PROFILE=production SENTRY_AUTH_TOKEN=preflight-placeholder pnpm assert:config'
 
   build-and-submit:
     needs: [check-changes, validate, preflight]
@@ -252,7 +252,7 @@ jobs:
           EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }}
         run: |
           mkdir -p artifacts
-          pnpx eas-cli@24.8.0 build --profile production --platform all --non-interactive --json --wait > build.json
+          pnpm exec eas build --profile production --platform all --non-interactive --json --wait > build.json
           node ../../scripts/inspect-mobile-artifacts.mjs --select build.json > urls.txt
           echo "IOS_URL=$(sed -n '1p' urls.txt)" >> "$GITHUB_ENV"
           echo "ANDROID_URL=$(sed -n '2p' urls.txt)" >> "$GITHUB_ENV"
@@ -376,13 +376,13 @@ jobs:
         working-directory: apps/mobile
         env:
           EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }}
-        run: pnpx eas-cli@24.8.0 submit --profile production --platform ios --non-interactive --path artifacts/app.ipa
+        run: pnpm exec eas submit --profile production --platform ios --non-interactive --path artifacts/app.ipa
 
       - name: Submit Android
         working-directory: apps/mobile
         env:
           EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }}
-        run: pnpx eas-cli@24.8.0 submit --profile production --platform android --non-interactive --path artifacts/app.aab
+        run: pnpm exec eas submit --profile production --platform android --non-interactive --path artifacts/app.aab
 
       # Release detection only: the next run reads this to find the last release.
       # The upload cap never counts it (a partial run writes no release tag).

apps/mobile/README.md

@@ -23,9 +23,14 @@ Every build localizes the local-network prompt, because Chat can connect to a lo
 Changes require a new iOS build; an over-the-air update cannot change the native permission prompt.
 
 1. obtain Expo access
-2. `pnpx eas-cli login -b`
+2. `pnpm exec eas login -b`
 3. obtain Apple access (developer)
 
+Run these commands from `apps/mobile` after `pnpm install --frozen-lockfile`.
+When updating EAS CLI, keep the `eas-cli` development dependency and `eas.json`'s
+`cli.version` aligned, regenerate the workspace dependency graph, and verify with
+`pnpm exec eas --version`.
+
 ### Android
 
 1. install latest dev build from [here](https://expo.dev/accounts/kilocode/projects/kilo-app/builds?profile=development&platform=ANDROID) - if needed, rebuild with `pnpm build:android`
@@ -34,7 +39,7 @@ Changes require a new iOS build; an over-the-air update cannot change the native
 
 ### iOS
 
-1. add your device to the list of internal devices using `pnpx eas-cli device:create`
+1. add your device to the list of internal devices using `pnpm exec eas device:create`
 2. install the provisioning profile from step 1 on your device (it may involve a 1hr wait)
 3. create a new dev build using `pnpm build:ios`
 4. `pnpm start`

apps/mobile/eas.json

@@ -1,6 +1,6 @@
 {
   "cli": {
-    "version": "24.8.0",
+    "version": "24.13.0",
     "appVersionSource": "remote"
   },
   "build": {

apps/mobile/package.json

@@ -6,12 +6,12 @@
     "start": "expo start --dev-client",
     "android": "expo run:android",
     "ios": "expo run:ios",
-    "build": "pnpx eas-cli@24.8.0 build --profile development",
-    "build:ios": "pnpx eas-cli@24.8.0 build -p ios --profile development",
-    "build:android": "pnpx eas-cli@24.8.0 build -p android --profile development",
-    "release:internal": "pnpx eas-cli@24.8.0 build --profile production --auto-submit",
-    "release:internal:ios": "pnpx eas-cli@24.8.0 build -p ios --profile production --auto-submit",
-    "release:internal:android": "pnpx eas-cli@24.8.0 build -p android --profile production --auto-submit",
+    "build": "eas build --profile development",
+    "build:ios": "eas build -p ios --profile development",
+    "build:android": "eas build -p android --profile development",
+    "release:internal": "eas build --profile production --auto-submit",
+    "release:internal:ios": "eas build -p ios --profile production --auto-submit",
+    "release:internal:android": "eas build -p android --profile production --auto-submit",
     "assert:config": "node scripts/assert-expo-config.mjs",
     "eas-build-post-install": "pnpm --filter @kilocode/harness-sdk run build",
     "typecheck": "tsgo --noEmit",
@@ -150,6 +150,7 @@
     "babel-plugin-inline-import": "^3.0.0",
     "babel-preset-expo": "~57.0.13",
     "drizzle-kit": "catalog:",
+    "eas-cli": "24.13.0",
     "eslint-plugin-sonarjs": "4.2.2",
     "knip": "6.39.0",
     "postcss": "8.5.28",