@everystack/cli 0.2.2 → 0.2.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@everystack/cli",
-  "version": "0.2.2",
+  "version": "0.2.4",
   "description": "CLI and OTA updates for Expo apps on everystack",
   "license": "AGPL-3.0-only",
   "publishConfig": {

package/src/cli/commands/update.ts

@@ -20,6 +20,12 @@ export interface UpdateFlags {
 }
 
 export async function updateCommand(flags: UpdateFlags & Record<string, string>): Promise<void> {
+  // Signal publish context so app.config.js can detect it's not a dev session.
+  // Without this, dotenv guards that skip .env.local for EAS_BUILD/EAS_UPDATE
+  // don't know to skip for everystack update, causing local dev overrides
+  // (e.g. OUTBOUND_HOST=localhost → LAN IP) to leak into the manifest.
+  process.env.EVERYSTACK_UPDATE = '1';
+
   // Propagate --stage to ENVIRONMENT before app.config.js evaluation.
   // Without this, the manifest snapshots whatever the local shell has
   // (often unset → 'development'), baking wrong API URLs and feature
@@ -406,8 +412,17 @@ async function loadAppConfig(): Promise<any> {
       // Handle Expo's function export pattern: export default () => ({ ... })
       if (typeof resolved === 'function') resolved = resolved();
       return resolved.expo || resolved;
-    } catch {
-      throw new Error('Could not find app.json or app.config.js');
+    } catch (e) {
+      const configPath = path.resolve('app.config.js');
+      try {
+        await fs.access(configPath);
+        // File exists but failed to import — surface the real error
+        throw new Error(`Failed to load app.config.js: ${e instanceof Error ? e.message : e}`);
+      } catch (accessErr) {
+        if (accessErr instanceof Error && accessErr.message.startsWith('Failed to load'))
+          throw accessErr;
+        throw new Error('Could not find app.json or app.config.js');
+      }
     }
   }
 }

package/src/handler/assets.ts

@@ -11,6 +11,21 @@ export async function handleAssets(request: Request, options: UpdatesHandlerOpti
     });
   }
 
+  // Redirect to a presigned S3 URL instead of proxying the bytes through Lambda.
+  // Lambda function URLs cap responses at 6 MB; Hermes bytecode bundles exceed that.
+  if (options.storage.presignGet) {
+    const presignedUrl = await options.storage.presignGet(key);
+    return new Response(null, {
+      status: 302,
+      headers: {
+        location: presignedUrl,
+        'cache-control': 'private, max-age=300',
+      },
+    });
+  }
+
+  // Fallback: direct streaming for non-S3 backends (local dev, filesystem).
+  // No Lambda payload limit applies in these environments.
   const result = await options.storage.get(key);
 
   if (!result) {

package/src/storage/index.ts

@@ -8,6 +8,8 @@ export interface StorageAdapter {
   delete(key: string): Promise<void>;
   /** Generate a presigned PUT URL. S3-only — returns null for other backends. */
   presignPut?(key: string, contentType: string, expiresIn?: number): Promise<string>;
+  /** Generate a presigned GET URL. S3-only — returns undefined for other backends. */
+  presignGet?(key: string, expiresIn?: number): Promise<string>;
 }
 
 export type StorageOptions =

package/src/storage/s3.ts

@@ -122,4 +122,14 @@ export class S3StorageAdapter implements StorageAdapter {
       ContentType: contentType,
     }), { expiresIn });
   }
+
+  async presignGet(key: string, expiresIn: number = 3600): Promise<string> {
+    const { GetObjectCommand } = await import('@aws-sdk/client-s3');
+    const { getSignedUrl } = await import('@aws-sdk/s3-request-presigner');
+    const client = await this.getClient();
+    return getSignedUrl(client, new GetObjectCommand({
+      Bucket: this.bucket,
+      Key: key,
+    }), { expiresIn });
+  }
 }