MetaMask
diff --git a/‎.github/workflows/build-rc-auto.yml‎
Lines changed: 9 additions & 0 deletions b/‎.github/workflows/build-rc-auto.yml‎
Lines changed: 9 additions & 0 deletions
diff --git a/‎.github/workflows/build.yml‎
Lines changed: 10 additions & 0 deletions b/‎.github/workflows/build.yml‎
Lines changed: 10 additions & 0 deletions
diff --git a/‎.github/workflows/prod-build-env-notify.yml‎
Lines changed: 122 additions & 0 deletions b/‎.github/workflows/prod-build-env-notify.yml‎
Lines changed: 122 additions & 0 deletions
diff --git a/‎.gitignore‎
Lines changed: 3 additions & 0 deletions b/‎.gitignore‎
Lines changed: 3 additions & 0 deletions
diff --git a/‎scripts/apply-build-config.js‎
Lines changed: 59 additions & 3 deletions b/‎scripts/apply-build-config.js‎
Lines changed: 59 additions & 3 deletions
@@ -151,6 +151,15 @@ jobs:
           cache: yarn
       - name: Install dependencies
         run: yarn install --immutable
+
+      - name: Download build environment artifacts
+        continue-on-error: true
+        uses: actions/download-artifact@v4
+        with:
+          pattern: build-env-main-rc-*
+          path: build-env-artifacts
+          merge-multiple: false
+
       - name: Post RC Build Comment with Test Plan
         run: node -r esbuild-register scripts/build-announce/index.ts
         timeout-minutes: 8
 
@@ -305,6 +305,8 @@ jobs:
           eval "$(node scripts/apply-build-config.js ${{ inputs.build_name }} --export)"
           # Persist to GITHUB_ENV so later steps (e.g. Build) see CONFIGURATION, IS_SIM_BUILD, etc.
           node scripts/apply-build-config.js ${{ inputs.build_name }} --export-github-env >> "$GITHUB_ENV"
+          # Generate build-env.json capturing actual env values used in this build (non-critical)
+          node scripts/apply-build-config.js ${{ inputs.build_name }} --write-build-env || true
 
       - name: Validate secrets
         env:
@@ -497,6 +499,14 @@ jobs:
           path: ${{ steps.rename.outputs.android_sourcemap_dir }}
           if-no-files-found: warn
 
+      - name: Upload build environment JSON
+        if: success()
+        uses: actions/upload-artifact@v4
+        with:
+          name: build-env-${{ inputs.build_name }}-${{ matrix.platform }}
+          path: build-env.json
+          if-no-files-found: warn
+
   # Single fan-in job so workflow_call outputs work with matrix `build` (matrix jobs cannot feed workflow outputs directly).
   emit-build-metadata:
     name: Emit build metadata
 
@@ -0,0 +1,122 @@
+##############################################################################################
+#
+# Production Build Environment Notification
+#
+# Automatically triggers when production builds complete.
+# Downloads build-env.json artifact and extracts environment values.
+# TODO: Post to Slack (follow-up PR)
+#
+##############################################################################################
+name: Prod Build Env Notify
+
+on:
+  workflow_run:
+    workflows: ["Runway iOS Production", "Runway Android Production"]
+    types: [completed]
+
+jobs:
+  notify-env:
+    name: Post Environment Info
+    runs-on: ubuntu-latest
+    if: ${{ github.event.workflow_run.conclusion == 'success' }}
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-node@v6
+        with:
+          node-version-file: '.nvmrc'
+
+      - name: Download build-env artifact from triggering workflow
+        continue-on-error: true
+        id: download-artifact
+        uses: actions/download-artifact@v6
+        with:
+          name: build-env-main-prod-${{ github.event.workflow_run.name == 'Runway iOS Production' && 'ios' || 'android' }}
+          path: build-env-artifacts
+          run-id: ${{ github.event.workflow_run.id }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract and display environment values
+        if: steps.download-artifact.outcome == 'success'
+        id: extract-env
+        run: |
+          JSON_FILE="build-env-artifacts/build-env.json"
+
+          if [ ! -f "$JSON_FILE" ]; then
+            echo "ERROR: build-env.json not found"
+            exit 1
+          fi
+
+          echo "=== Build Environment Values ==="
+          cat "$JSON_FILE"
+          echo ""
+
+          # Extract values
+          BUILD_NAME=$(jq -r '.buildName' "$JSON_FILE")
+          METAMASK_ENV=$(jq -r '.env.METAMASK_ENVIRONMENT' "$JSON_FILE")
+          BUILD_TYPE=$(jq -r '.env.METAMASK_BUILD_TYPE' "$JSON_FILE")
+          REWARDS_URL=$(jq -r '.env.REWARDS_API_URL' "$JSON_FILE")
+          PORTFOLIO_URL=$(jq -r '.env.MM_PORTFOLIO_URL' "$JSON_FILE")
+          RAMPS_ENV=$(jq -r '.env.RAMPS_ENVIRONMENT' "$JSON_FILE")
+
+          # Map to Remote Feature Flag values
+          case "$METAMASK_ENV" in
+            production) REMOTE_FF_ENV="prod" ;;
+            rc) REMOTE_FF_ENV="rc" ;;
+            beta) REMOTE_FF_ENV="beta" ;;
+            test|e2e) REMOTE_FF_ENV="test" ;;
+            exp) REMOTE_FF_ENV="exp" ;;
+            *) REMOTE_FF_ENV="dev" ;;
+          esac
+
+          case "$BUILD_TYPE" in
+            flask) REMOTE_FF_DIST="flask" ;;
+            *) REMOTE_FF_DIST="main" ;;
+          esac
+
+          # Output for next steps
+          {
+            echo "build_name=$BUILD_NAME"
+            echo "environment=$METAMASK_ENV"
+            echo "build_type=$BUILD_TYPE"
+            echo "remote_ff_env=$REMOTE_FF_ENV"
+            echo "remote_ff_dist=$REMOTE_FF_DIST"
+            echo "rewards_url=$REWARDS_URL"
+            echo "portfolio_url=$PORTFOLIO_URL"
+            echo "ramps_env=$RAMPS_ENV"
+          } >> "$GITHUB_OUTPUT"
+
+          echo ""
+          echo "=== Extracted Values ==="
+          echo "Environment: $METAMASK_ENV"
+          echo "Build Type: $BUILD_TYPE"
+          echo "Remote Feature Flag Env: $REMOTE_FF_ENV"
+          echo "Remote Feature Flag Distribution: $REMOTE_FF_DIST"
+          echo "Rewards API URL: $REWARDS_URL"
+          echo "MM_PORTFOLIO_URL: $PORTFOLIO_URL"
+          echo "Ramps Environment: $RAMPS_ENV"
+
+      - name: Post to Slack
+        if: steps.download-artifact.outcome == 'success'
+        env:
+          SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
+          PLATFORM: ${{ github.event.workflow_run.name == 'Runway iOS Production' && 'iOS' || 'Android' }}
+          ENVIRONMENT: ${{ steps.extract-env.outputs.environment }}
+          BUILD_TYPE: ${{ steps.extract-env.outputs.build_type }}
+          REMOTE_FF_ENV: ${{ steps.extract-env.outputs.remote_ff_env }}
+          REMOTE_FF_DIST: ${{ steps.extract-env.outputs.remote_ff_dist }}
+          REWARDS_URL: ${{ steps.extract-env.outputs.rewards_url }}
+          PORTFOLIO_URL: ${{ steps.extract-env.outputs.portfolio_url }}
+          RAMPS_ENV: ${{ steps.extract-env.outputs.ramps_env }}
+          WORKFLOW_URL: ${{ github.event.workflow_run.html_url }}
+        run: |
+          echo "TODO: Post to Slack"
+          echo "Platform: $PLATFORM"
+          echo "Environment: $ENVIRONMENT"
+          echo "Build Type: $BUILD_TYPE"
+          echo "Remote FF Env: $REMOTE_FF_ENV"
+          echo "Remote FF Distribution: $REMOTE_FF_DIST"
+          echo "Rewards URL: $REWARDS_URL"
+          echo "Portfolio URL: $PORTFOLIO_URL"
+          echo "Ramps Environment: $RAMPS_ENV"
+          echo "Workflow URL: $WORKFLOW_URL"
@@ -196,3 +196,6 @@ runway-artifacts/
 release-test-plan.json
 release-delta.json
 release-signoffs.json
+
+# Build environment validation
+build-env.json
@@ -18,6 +18,7 @@ const path = require('path');
 const yaml = require('js-yaml');
 
 const BUILDS_PATH = path.join(__dirname, '../builds.yml');
+const BUILD_ENV_PATH = path.join(__dirname, '../build-env.json');
 
 function loadConfig(buildName) {
   if (!fs.existsSync(BUILDS_PATH)) {
@@ -106,16 +107,68 @@ function exportForGitHubEnv(buildName) {
   return lines.join('\n');
 }
 
+/**
+ * Write build environment to JSON file for display in PR comments.
+ * This captures the actual env values used during build time.
+ */
+function writeBuildEnvJson(buildName) {
+  const config = loadConfig(buildName);
+
+  const envVarsToCapture = [
+    'METAMASK_ENVIRONMENT',
+    'METAMASK_BUILD_TYPE',
+    'REWARDS_API_URL',
+    'MM_PORTFOLIO_URL',
+    'RAMPS_ENVIRONMENT',
+    'IS_TEST',
+    // Additional env vars for full environment info
+    'PORTFOLIO_API_URL',
+    'SECURITY_ALERTS_API_URL',
+    'DECODING_API_URL',
+    'AUTH_SERVICE_URL',
+    'DIGEST_API_URL',
+    'SOCIAL_API_URL',
+    'BAANX_API_URL',
+    'RAMP_DEV_BUILD',
+    'BRIDGE_USE_DEV_APIS',
+    'RAMP_INTERNAL_BUILD',
+  ];
+
+  const buildEnv = {
+    buildName,
+    buildTime: new Date().toISOString(),
+    env: {},
+  };
+
+  if (config.env) {
+    envVarsToCapture.forEach((key) => {
+      if (config.env[key] !== undefined) {
+        buildEnv.env[key] = String(config.env[key]);
+      }
+    });
+  }
+
+  if (config.code_fencing) {
+    buildEnv.codeFencing = config.code_fencing;
+  }
+
+  fs.writeFileSync(BUILD_ENV_PATH, JSON.stringify(buildEnv, null, 2));
+  console.log(`Wrote build environment to ${BUILD_ENV_PATH}`);
+
+  return buildEnv;
+}
+
 // CLI
 if (require.main === module) {
   const args = process.argv.slice(2);
   const buildName = args.find((a) => !a.startsWith('--'));
   const exportMode = args.includes('--export');
   const exportGitHubEnvMode = args.includes('--export-github-env');
+  const writeBuildEnvMode = args.includes('--write-build-env');
 
   if (!buildName) {
     console.error(
-      'Usage: node apply-build-config.js <build-name> [--export | --export-github-env]',
+      'Usage: node apply-build-config.js <build-name> [--export | --export-github-env | --write-build-env]',
     );
     console.error('Example: node apply-build-config.js main-prod');
     process.exit(1);
@@ -126,12 +179,14 @@ if (require.main === module) {
       console.log(exportForGitHubEnv(buildName));
     } else if (exportMode) {
       console.log(exportForShell(buildName));
+    } else if (writeBuildEnvMode) {
+      writeBuildEnvJson(buildName);
     } else {
       applyConfig(buildName);
-      console.log(`✅ Applied config for ${buildName}`);
+      console.log(`Applied config for ${buildName}`);
     }
   } catch (error) {
-    console.error(`❌ ${error.message}`);
+    console.error(`Error: ${error.message}`);
     process.exit(1);
   }
 }
@@ -141,4 +196,5 @@ module.exports = {
   applyConfig,
   exportForShell,
   exportForGitHubEnv,
+  writeBuildEnvJson,
 };