fix(ci): build the Android APK on EAS instead of on the runner

The workflow compiled the whole app locally on a 2-core GitHub runner with no
timeout. Runs took hours and were routinely cancelled — the last published APK
is from February, so in practice there has been no Android build for months.

Three fixes: build in the cloud and download the artifact; drop the JDK and
Android SDK setup that a cloud build never uses; add a timeout so a hang is
bounded rather than sitting until GitHub's six-hour limit.

The APK is also attached to every run as a workflow artifact, so a build off
any branch is installable. Previously only a push to main produced anything —
and the upload step lacked the branch guard its release step had, so every dev
run was going to fail after the build had already succeeded.

Author: AnkushMalaker

.github/workflows/android-apk-build.yml

@@ -15,6 +15,9 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    # A cloud build is a poll, not a compile, so anything approaching this is a
+    # hang. The previous local build had no limit and sat for hours.
+    timeout-minutes: 60
     defaults:
       run:
         working-directory: ./app
@@ -30,14 +33,8 @@ jobs:
           cache: 'npm'
           cache-dependency-path: ./app/package-lock.json
 
-      - name: Set up JDK 17
-        uses: actions/setup-java@v4
-        with:
-          java-version: '17'
-          distribution: 'temurin'
-
-      - name: Setup Android SDK
-        uses: android-actions/setup-android@v3
+      # No JDK or Android SDK: EAS compiles this in the cloud. Installing a
+      # toolchain the runner never uses cost minutes on every run.
 
       - name: Setup Expo
         uses: expo/expo-github-action@v8
@@ -52,8 +49,29 @@ jobs:
       - name: Initialize EAS
         run: eas init --force --non-interactive
 
+      # Cloud build. `--local` compiled the whole app on a 2-core runner, which
+      # took hours and routinely had to be cancelled.
       - name: Build Android APK
-        run: eas build --platform android --profile local --local --output ${{ github.workspace }}/app-release.apk --non-interactive
+        run: |
+          set -euo pipefail
+          eas build --platform android --profile local --non-interactive --wait --json \
+            > "$RUNNER_TEMP/build.json"
+          url=$(jq -r '.[0].artifacts.buildUrl // .[0].artifacts.applicationArchiveUrl' \
+            "$RUNNER_TEMP/build.json")
+          if [ -z "$url" ] || [ "$url" = "null" ]; then
+            echo "No artifact URL in the build result:"; cat "$RUNNER_TEMP/build.json"; exit 1
+          fi
+          curl -fsSL -o "${{ github.workspace }}/app-release.apk" "$url"
+          ls -la "${{ github.workspace }}/app-release.apk"
+
+      # Attached to every run, so a build off any branch is installable without
+      # needing a GitHub release.
+      - name: Upload APK as a workflow artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: chronicle-android-apk
+          path: ${{ github.workspace }}/app-release.apk
+          retention-days: 30
 
       - name: Generate release tag
         id: tag
@@ -82,7 +100,11 @@ jobs:
           draft: false
           prerelease: true
 
+      # Same condition as Create Release above. Without it this ran on every
+      # branch with an empty upload_url and failed after the build had already
+      # succeeded.
       - name: Upload Android APK to Release
+        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
         uses: actions/upload-release-asset@v1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}