fix(ci): resolve Alpine apk revisions dynamically + gate close-issues to upstream

- android.yml + prepare-android-runtime.sh: Alpine bumped musl r9 -> r11 on
  v3.21, breaking the APK build with 404. Scrape the Alpine index instead
  of hardcoding revisions so future bumps don't break CI. Same treatment
  for libstdc++/libgcc.
- close-issues.yml: script targets anomalyco/opencode in hardcoded form,
  the fork's GITHUB_TOKEN hits 403 when commenting on upstream issues.
  Guard with github.repository == 'anomalyco/opencode' (same pattern as
  publish.yml).

Author: Rwanbt

.github/workflows/android.yml

@@ -66,20 +66,35 @@ jobs:
           unzip -o -q /tmp/bun.zip -d /tmp/bun-extract
           cp /tmp/bun-extract/bun-linux-aarch64-musl/bun "$JNIDIR/libbun_exec.so"
 
+          # Resolve the latest apk revision from the Alpine index. Alpine bumps
+          # `-r*` revisions without warning, so hardcoding breaks the build with 404.
+          ALPINE_INDEX="https://dl-cdn.alpinelinux.org/alpine/v3.21/main/aarch64"
+          resolve_apk() {
+            local pkg="$1"
+            curl -fsSL "$ALPINE_INDEX/" \
+              | grep -oE "${pkg}-[0-9][0-9.]*-r[0-9]+\.apk" \
+              | sort -uV | tail -1
+          }
+
           # musl dynamic linker
           echo "Downloading musl libc..."
-          curl -fsSL https://dl-cdn.alpinelinux.org/alpine/v3.21/main/aarch64/musl-1.2.5-r9.apk -o /tmp/musl.apk
+          MUSL_APK=$(resolve_apk "musl")
+          echo "Resolved: $MUSL_APK"
+          curl -fsSL "$ALPINE_INDEX/$MUSL_APK" -o /tmp/musl.apk
           cd /tmp && tar -xzf musl.apk lib/ld-musl-aarch64.so.1
           cp /tmp/lib/ld-musl-aarch64.so.1 "$GITHUB_WORKSPACE/$JNIDIR/libmusl_linker.so"
           cd "$GITHUB_WORKSPACE"
 
           # libstdc++ and libgcc_s
           echo "Downloading C++ runtime libs..."
-          curl -fsSL https://dl-cdn.alpinelinux.org/alpine/v3.21/main/aarch64/libstdc++-14.2.0-r4.apk -o /tmp/libstdcpp.apk
-          curl -fsSL https://dl-cdn.alpinelinux.org/alpine/v3.21/main/aarch64/libgcc-14.2.0-r4.apk -o /tmp/libgcc.apk
-          cd /tmp && tar -xzf libstdcpp.apk usr/lib/libstdc++.so.6.0.33
+          LIBSTDCPP_APK=$(resolve_apk "libstdc\+\+")
+          LIBGCC_APK=$(resolve_apk "libgcc")
+          echo "Resolved: $LIBSTDCPP_APK / $LIBGCC_APK"
+          curl -fsSL "$ALPINE_INDEX/$LIBSTDCPP_APK" -o /tmp/libstdcpp.apk
+          curl -fsSL "$ALPINE_INDEX/$LIBGCC_APK" -o /tmp/libgcc.apk
+          cd /tmp && tar -xzf libstdcpp.apk --wildcards 'usr/lib/libstdc++.so.6.*'
           cd /tmp && tar -xzf libgcc.apk usr/lib/libgcc_s.so.1
-          cp /tmp/usr/lib/libstdc++.so.6.0.33 "$GITHUB_WORKSPACE/$JNIDIR/libstdcpp_compat.so"
+          cp /tmp/usr/lib/libstdc++.so.6.* "$GITHUB_WORKSPACE/$JNIDIR/libstdcpp_compat.so"
           cp /tmp/usr/lib/libgcc_s.so.1 "$GITHUB_WORKSPACE/$JNIDIR/libgcc_compat.so"
           cd "$GITHUB_WORKSPACE"
 

.github/workflows/close-issues.yml

@@ -7,6 +7,8 @@ on:
 
 jobs:
   close:
+    # Script cible anomalyco/opencode : ne rien tenter depuis un fork (GITHUB_TOKEN → 403).
+    if: github.repository == 'anomalyco/opencode'
     runs-on: ubuntu-latest
     permissions:
       contents: read

packages/mobile/scripts/prepare-android-runtime.sh

@@ -33,22 +33,31 @@ echo "[1b/6] Downloading musl libc + C++ runtime libs..."
 LIB_DIR="$RUNTIME_DIR/lib"
 mkdir -p "$LIB_DIR"
 
+# Resolve the latest apk revision from the Alpine index. Alpine bumps `-r*`
+# revisions without warning, so hardcoding breaks the download with 404.
+ALPINE_INDEX="https://dl-cdn.alpinelinux.org/alpine/v3.21/main/aarch64"
+resolve_apk() {
+  curl -fsSL "$ALPINE_INDEX/" \
+    | grep -oE "$1-[0-9][0-9.]*-r[0-9]+\.apk" \
+    | sort -uV | tail -1
+}
+
 # musl dynamic linker (required to run musl-linked binaries on Android Bionic)
-MUSL_URL="https://dl-cdn.alpinelinux.org/alpine/v3.21/main/aarch64/musl-1.2.5-r9.apk"
-curl -fsSL "$MUSL_URL" -o "$TEMP_DIR/musl.apk"
+MUSL_APK=$(resolve_apk "musl")
+curl -fsSL "$ALPINE_INDEX/$MUSL_APK" -o "$TEMP_DIR/musl.apk"
 cd "$TEMP_DIR" && tar -xzf musl.apk lib/ld-musl-aarch64.so.1 2>/dev/null
 cp "$TEMP_DIR/lib/ld-musl-aarch64.so.1" "$LIB_DIR/ld-musl-aarch64.so.1"
 chmod 755 "$LIB_DIR/ld-musl-aarch64.so.1"
-echo "  musl: $(du -sh "$LIB_DIR/ld-musl-aarch64.so.1" | cut -f1)"
+echo "  musl ($MUSL_APK): $(du -sh "$LIB_DIR/ld-musl-aarch64.so.1" | cut -f1)"
 
 # libstdc++ and libgcc_s (Bun depends on C++ runtime, not available on Android)
-LIBSTDCPP_URL="https://dl-cdn.alpinelinux.org/alpine/v3.21/main/aarch64/libstdc++-14.2.0-r4.apk"
-LIBGCC_URL="https://dl-cdn.alpinelinux.org/alpine/v3.21/main/aarch64/libgcc-14.2.0-r4.apk"
-curl -fsSL "$LIBSTDCPP_URL" -o "$TEMP_DIR/libstdcpp.apk"
-curl -fsSL "$LIBGCC_URL" -o "$TEMP_DIR/libgcc.apk"
-cd "$TEMP_DIR" && tar -xzf libstdcpp.apk usr/lib/libstdc++.so.6.0.33 2>/dev/null
+LIBSTDCPP_APK=$(resolve_apk "libstdc\+\+")
+LIBGCC_APK=$(resolve_apk "libgcc")
+curl -fsSL "$ALPINE_INDEX/$LIBSTDCPP_APK" -o "$TEMP_DIR/libstdcpp.apk"
+curl -fsSL "$ALPINE_INDEX/$LIBGCC_APK" -o "$TEMP_DIR/libgcc.apk"
+cd "$TEMP_DIR" && tar -xzf libstdcpp.apk --wildcards 'usr/lib/libstdc++.so.6.*' 2>/dev/null
 cd "$TEMP_DIR" && tar -xzf libgcc.apk usr/lib/libgcc_s.so.1 2>/dev/null
-cp "$TEMP_DIR/usr/lib/libstdc++.so.6.0.33" "$LIB_DIR/libstdc++.so.6"
+cp "$TEMP_DIR"/usr/lib/libstdc++.so.6.* "$LIB_DIR/libstdc++.so.6"
 cp "$TEMP_DIR/usr/lib/libgcc_s.so.1" "$LIB_DIR/libgcc_s.so.1"
 chmod 755 "$LIB_DIR/libstdc++.so.6" "$LIB_DIR/libgcc_s.so.1"
 echo "  libstdc++: $(du -sh "$LIB_DIR/libstdc++.so.6" | cut -f1)"