Fix Android EAS setup and clarify release verification (#7430)

* Validate exported mobile release paths

Document the physical-path check that prevents invalid EAS project directories on macOS.

* Clarify Linux package publication checks

Distinguish live APT deployment and repository Arch metadata from an AUR release.

* Install libclang for Android EAS builds

Provide the host library required by SQLite bindgen before compiling the Android native bridge on EAS Linux builders.

Author: ComputelessComputer

.agents/skills/release-new-version/SKILL.md

@@ -212,9 +212,12 @@ GitHub against the provenance manifest.
 
 The publish workflow calls `desktop_store_publish.yaml` with
 `submit_to_stores=true` for Microsoft Store certification. Inspect that job and
-the resulting submission separately from GitHub/CrabNebula publication. Also
-follow the generated Linux package update through its package-publication jobs;
-creating its PR is not package publication.
+the resulting submission separately from GitHub/CrabNebula publication. Merge
+the generated Linux package metadata PR and verify the signed APT index is live
+on `anarlog.so`. Check whether Netlify deployed that commit automatically before
+dispatching `web_cd.yaml`. Arch `PKGBUILD` and `.SRCINFO` updates ship in this
+repository; there is no AUR publication workflow. Check the AUR registry before
+claiming an AUR release. Creating the metadata PR alone is not publication.
 
 ## Mobile Store Distribution
 
@@ -278,6 +281,12 @@ hook must generate the native bridge before packaging. EAS builds use the
 candidate's committed CloudSync bundle; a separate CI rebuild alone does not
 prove which bytes are embedded in a signed store artifact.
 
+For an exported source tree, resolve both `EAS_PROJECT_ROOT` and `apps/mobile`
+to their physical paths before invoking EAS. Confirm their relative path is
+exactly `apps/mobile`. On macOS, mixing `/tmp` with its physical `/private/tmp`
+path produces an invalid project directory in the remote build job. Check the
+job's `projectRootDirectory` before accepting a build.
+
 ```bash
 APP_VARIANT=stable eas build --platform ios --profile stable --non-interactive --no-wait
 APP_VARIANT=stable eas build --platform android --profile stable --non-interactive --no-wait

apps/mobile/scripts/eas-build-post-install.sh

@@ -17,6 +17,10 @@ if ! command -v rustup >/dev/null 2>&1; then
 fi
 
 if [[ $EAS_BUILD_PLATFORM == android ]]; then
+  if [[ $(uname -s) == Linux ]]; then
+    sudo apt-get -o Acquire::Retries=5 update
+    sudo apt-get -o Acquire::Retries=5 install -y --no-install-recommends libclang-dev
+  fi
   rustup target add aarch64-linux-android armv7-linux-androideabi i686-linux-android x86_64-linux-android
   export ANDROID_NDK_HOME="${ANDROID_NDK_HOME:-${ANDROID_NDK_ROOT:-${ANDROID_HOME:-${ANDROID_SDK_ROOT:?Android SDK is required}}/ndk/27.1.12297006}}"
   test -f "$ANDROID_NDK_HOME/source.properties"