ci: migrate perf builds from bitrise to GHA (#28420)

<!--
Please submit this PR as a draft initially.
Do not mark it as "Ready for review" until the template has been
completely filled out, and PR status checks have passed at least once.
-->

## **Description**

> Performance E2E BrowserStack builds are migrated off Bitrise and onto
GitHub Actions. The Android/iOS dual-build workflows now call the
reusable build.yml workflow (instead of triggering/polling Bitrise),
download the resulting APK/IPA artifacts, and upload them to
BrowserStack while emitting BrowserStack URLs/app IDs/versions.
> 
> Build variants and configs were reshaped for BrowserStack use. New
builds.yml entries add dedicated BrowserStack build profiles for with
SRP vs seedless onboarding (and exp vs e2e BrowserStack flavors), plus
package.json scripts to target these build names; scripts/build.sh now
honors IS_BROWSERSTACK_BUILD to avoid emulator-only settings (x86_64
arch restriction and IS_SIM_BUILD=true).
> 
> Performance workflow triggering/variants were adjusted.
run-performance-e2e-release.yml now runs on pushes only for metamaskbot
version-bump commits and explicitly forces build_variant: rc, while the
main performance workflow defaults build_variant to exp and updates
concurrency grouping and conditional steps accordingly.

## **Changelog**

<!--
If this PR is not End-User-Facing and should not show up in the
CHANGELOG, you can choose to either:
1. Write `CHANGELOG entry: null`
2. Label with `no-changelog`

If this PR is End-User-Facing, please write a short User-Facing
description in the past tense like:
`CHANGELOG entry: Added a new tab for users to see their NFTs`
`CHANGELOG entry: Fixed a bug that was causing some NFTs to flicker`

(This helps the Release Engineer do their job more quickly and
accurately)
-->

CHANGELOG entry:

## **Related issues**

Fixes:

## **Manual testing steps**

```gherkin
Feature: my feature name

  Scenario: user [verb for user action]
    Given [describe expected initial app state]

    When user [verb for user action]
    Then [describe expected outcome]
```

## **Screenshots/Recordings**

<!-- If applicable, add screenshots and/or recordings to visualize the
before and after of your change. -->

### **Before**

<!-- [screenshots/recordings] -->

### **After**

<!-- [screenshots/recordings] -->

## **Pre-merge author checklist**

- [ ] I've followed [MetaMask Contributor
Docs](https://github.com/MetaMask/contributor-docs) and [MetaMask Mobile
Coding
Standards](https://github.com/MetaMask/metamask-mobile/blob/main/.github/guidelines/CODING_GUIDELINES.md).
- [ ] I've completed the PR template to the best of my ability
- [ ] I've included tests if applicable
- [ ] I've documented my code using [JSDoc](https://jsdoc.app/) format
if applicable
- [ ] I've applied the right labels on the PR (see [labeling
guidelines](https://github.com/MetaMask/metamask-mobile/blob/main/.github/guidelines/LABELING_GUIDELINES.md)).
Not required for external contributors.

## **Pre-merge reviewer checklist**

- [ ] I've manually tested the PR (e.g. pull and build branch, run the
app, test code being changed).
- [ ] I confirm that this PR addresses all acceptance criteria described
in the ticket it closes and includes the necessary testing evidence such
as recordings and or screenshots.


<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Medium risk due to broad CI/build pipeline changes (workflows, build
profiles, artifact handling) that can break build/upload automation or
alter build-time flags for e2e/perf runs.
> 
> **Overview**
> **Moves Android/iOS “dual build + BrowserStack upload” workflows from
Bitrise-trigger/polling to the reusable `build.yml` GitHub Actions
workflow**, then downloads the resulting APK/IPA artifacts and uploads
them to BrowserStack while emitting URLs/app IDs/versions.
> 
> **Reshapes build variants and configs for BrowserStack/performance
usage** by adding new `builds.yml` build profiles (e2e BrowserStack
with/without SRP; RC/EXP with/without SRP), adding matching
`package.json` build scripts, and teaching `scripts/build.sh` to honor
`IS_BROWSERSTACK_BUILD` (skip emulator-only x86_64 restrictions and
avoid forcing `IS_SIM_BUILD=true`).
> 
> Updates performance/system workflows to default/validate
`build_variant` including `e2e`, adjust concurrency grouping and gating
(including release runs only on metamaskbot version-bump commits and
forcing `build_variant: rc`), and adds `IS_PERFORMANCE_TEST` to disable
E2E runtime overhead while keeping `E2E_MOCK_OAUTH` Metro mocks active;
also includes small Playwright stability tweaks (hide keyboard) and
hard-codes perf FF env to `test` for now.
> 
> <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit
5c1e858. Bugbot is set up for automated
code reviews on this repo. Configure
[here](https://www.cursor.com/dashboard/bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: Cal-L <cal.leung@consensys.net>

Author: cortisiko

.github/workflows/build-android-upload-to-browserstack.yml

@@ -526,7 +526,7 @@ jobs:
           if-no-files-found: error
 
       - name: Upload Android AAB
-        if: matrix.platform == 'android' && env.CONFIGURATION != 'Debug'
+        if: matrix.platform == 'android' && env.CONFIGURATION != 'Debug' && steps.rename.outputs.android_aab_path != ''
         uses: actions/upload-artifact@v4
         with:
           name: android-aab-${{ inputs.build_name }}

.github/workflows/build-ios-upload-to-browserstack.yml

@@ -43,8 +43,8 @@ on:
       build_variant:
         required: false
         type: string
-        default: rc
-        description: 'Build variant for app artifacts (rc or exp)'
+        default: e2e
+        description: 'Build variant for app artifacts (e2e, rc, or exp)'
     secrets:
       BROWSERSTACK_USERNAME:
         required: true
@@ -172,8 +172,8 @@ jobs:
           SENTRY_ENVIRONMENT="github-actions-performance-e2e"
           BUILD_VARIANT="${{ inputs.build_variant }}"
 
-          if [[ "$BUILD_VARIANT" != "rc" && "$BUILD_VARIANT" != "exp" ]]; then
-            echo "❌ Invalid build_variant '$BUILD_VARIANT'. Expected 'rc' or 'exp'."
+          if [[ "$BUILD_VARIANT" != "rc" && "$BUILD_VARIANT" != "exp" && "$BUILD_VARIANT" != "e2e" ]]; then
+            echo "❌ Invalid build_variant '$BUILD_VARIANT'. Expected 'e2e', 'rc', or 'exp'."
             exit 1
           fi
 

.github/workflows/build.yml

@@ -37,10 +37,21 @@ jobs:
       - name: Check release trigger conditions
         id: check
         run: |
-          # Always run for manual dispatch or release branch pushes
-          if [[ "${{ github.event_name }}" == "workflow_dispatch" || ("${{ github.event_name }}" == "push" && "${{ github.ref_name }}" =~ ^release/) ]]; then
+          # Always run for manual dispatch
+          if [[ "${{ github.event_name }}" == "workflow_dispatch" ]]; then
             echo "should-run=true" >> "$GITHUB_OUTPUT"
-            echo "Performance tests triggered by ${{ github.event_name }}"
+            echo "Performance tests triggered by manual dispatch"
+          # For push events, only run if the triggering commit is a metamaskbot version bump
+          elif [[ "${{ github.event_name }}" == "push" ]]; then
+            COMMIT_MESSAGE=$(git log -1 --format="%s" "${{ github.sha }}")
+            COMMIT_AUTHOR=$(git log -1 --format="%ae" "${{ github.sha }}")
+            if [[ "$COMMIT_MESSAGE" =~ "Bump version number" && "$COMMIT_AUTHOR" =~ ^metamaskbot@ ]]; then
+              echo "should-run=true" >> "$GITHUB_OUTPUT"
+              echo "Push triggered by metamaskbot version bump: $COMMIT_MESSAGE"
+            else
+              echo "should-run=false" >> "$GITHUB_OUTPUT"
+              echo "Push is not a metamaskbot version bump — skipping. Author: $COMMIT_AUTHOR | Message: $COMMIT_MESSAGE"
+            fi
           # For scheduled runs, check for recent metamaskbot version bumps
           elif [[ "${{ github.event_name }}" == "schedule" ]]; then
             git fetch --all
@@ -55,13 +66,11 @@ jobs:
               # Check if the commit message contains "Bump version number" (ignore [skip ci])
               COMMIT_MESSAGE=$(git log -1 --format="%s" "$COMMIT_HASH")
               if [[ "$COMMIT_MESSAGE" =~ "Bump version number" ]]; then
-                # Check if we've already processed this commit by looking for a workflow run with this commit
-                # We'll use a simple approach: check if the commit is from the last 30 minutes
+                # Only run if the commit is from the last 30 minutes (to avoid re-running the same commit)
                 COMMIT_TIME=$(git log -1 --format="%ct" "$COMMIT_HASH")
                 CURRENT_TIME=$(date +%s)
                 TIME_DIFF=$((CURRENT_TIME - COMMIT_TIME))
                 
-                # Only run if the commit is from the last 30 minutes (to avoid re-running the same commit)
                 if [[ $TIME_DIFF -lt 1800 ]]; then
                   echo "should-run=true" >> "$GITHUB_OUTPUT"
                   echo "Recent metamaskbot version bump found (within last 30 min): $RECENT_VERSION_BUMP"
@@ -90,4 +99,5 @@ jobs:
     if: needs.check-release-trigger.outputs.should-run == 'true'
     with:
       sentry_target: ${{ inputs.sentry_target || 'test' }}
+      build_variant: 'rc'
     secrets: inherit

.github/workflows/performance-test-runner.yml

@@ -8,7 +8,6 @@ on:
   push:
     branches:
       - main
-      - 'release/*'
   workflow_dispatch:
     inputs:
       description:
@@ -73,21 +72,21 @@ on:
         required: false
         type: string
       build_variant:
-        description: 'Build variant for Bitrise (rc = release, exp = experimental)'
+        description: 'Build variant (e2e = e2e environment, exp = experimental, rc = release)'
         required: false
         type: string
-        default: 'rc'
+        default: 'e2e'
 
 permissions:
-  contents: read
+  contents: write
   id-token: write
   actions: write
 
 concurrency:
-  # Include build_variant so experimental (exp) and release/direct (rc) don't share the same
-  # queue — avoids "Build Apps" (direct/release) and experimental runs canceling each other.
+  # Include build_variant so e2e, experimental (exp), and release/direct (rc) don't share the same
+  # queue — avoids "Build Apps" (direct/release) and e2e/experimental runs canceling each other.
   # Note: GitHub allows at most 1 running + 1 pending per group; a 3rd run cancels the pending one.
-  group: performance-e2e-${{ github.ref }}-${{ github.event_name }}-${{ inputs.build_variant || 'rc' }}
+  group: performance-e2e-${{ github.ref }}-${{ github.event_name }}-${{ inputs.build_variant || 'e2e' }}
   # Do not cancel in-progress runs; pending runs can still be replaced by a newer trigger.
   cancel-in-progress: false
 
@@ -103,7 +102,7 @@ env:
 
 jobs:
   determine-branch-name:
-    name: Determine Branch Name for Bitrise
+    name: Determine Branch Name
     runs-on: ubuntu-latest
     outputs:
       branch_name: ${{ steps.get-branch.outputs.branch_name }}
@@ -209,17 +208,17 @@ jobs:
     if: (!inputs.browserstack_app_url_android_onboarding && !inputs.browserstack_app_url_android_imported_wallet)
     with:
       branch_name: ${{ needs.determine-branch-name.outputs.branch_name }}
-      build_variant: ${{ inputs.build_variant || 'rc' }}
+      build_variant: ${{ inputs.build_variant || 'e2e' }}
     secrets: inherit
 
   trigger-ios-dual-versions:
     name: Trigger iOS Dual Versions and Extract BrowserStack URLs
     uses: ./.github/workflows/build-ios-upload-to-browserstack.yml
     needs: [determine-branch-name]
-    if: (!inputs.browserstack_app_url_ios_onboarding && !inputs.browserstack_app_url_ios_imported_wallet)
+    if: false # temporarily disabled — iOS tests not yet active
     with:
       branch_name: ${{ needs.determine-branch-name.outputs.branch_name }}
-      build_variant: ${{ inputs.build_variant || 'rc' }}
+      build_variant: ${{ inputs.build_variant || 'e2e' }}
     secrets: inherit
 
   # =============================================================================
@@ -241,7 +240,7 @@ jobs:
       platform: android
       build_type: onboarding
       sentry_target: ${{ inputs.sentry_target || 'test' }}
-      build_variant: ${{ inputs.build_variant || 'rc' }}
+      build_variant: ${{ inputs.build_variant || 'e2e' }}
       device_matrix: ${{ needs.read-device-matrix.outputs.android_matrix }}
       browserstack_app_url: ${{ needs.trigger-android-dual-versions.outputs.without-srp-browserstack-url || inputs.browserstack_app_url_android_onboarding }}
       app_version: ${{ needs.trigger-android-dual-versions.outputs.without-srp-version || 'Manual-Input' }}
@@ -264,7 +263,7 @@ jobs:
       platform: ios
       build_type: onboarding
       sentry_target: ${{ inputs.sentry_target || 'test' }}
-      build_variant: ${{ inputs.build_variant || 'rc' }}
+      build_variant: ${{ inputs.build_variant || 'e2e' }}
       device_matrix: ${{ needs.read-device-matrix.outputs.ios_matrix }}
       browserstack_app_url: ${{ needs.trigger-ios-dual-versions.outputs.without-srp-browserstack-url || inputs.browserstack_app_url_ios_onboarding }}
       app_version: ${{ needs.trigger-ios-dual-versions.outputs.without-srp-version || 'Manual-Input' }}
@@ -303,7 +302,7 @@ jobs:
       platform: android
       build_type: imported-wallet
       sentry_target: ${{ inputs.sentry_target || 'test' }}
-      build_variant: ${{ inputs.build_variant || 'rc' }}
+      build_variant: ${{ inputs.build_variant || 'e2e' }}
       device_matrix: ${{ needs.read-device-matrix.outputs.android_matrix }}
       browserstack_app_url: ${{ needs.trigger-android-dual-versions.outputs.with-srp-browserstack-url || inputs.browserstack_app_url_android_imported_wallet }}
       app_version: ${{ needs.trigger-android-dual-versions.outputs.with-srp-version || 'Manual-Input' }}
@@ -327,7 +326,7 @@ jobs:
       platform: ios
       build_type: imported-wallet
       sentry_target: ${{ inputs.sentry_target || 'test' }}
-      build_variant: ${{ inputs.build_variant || 'rc' }}
+      build_variant: ${{ inputs.build_variant || 'e2e' }}
       device_matrix: ${{ needs.read-device-matrix.outputs.ios_matrix }}
       browserstack_app_url: ${{ needs.trigger-ios-dual-versions.outputs.with-srp-browserstack-url || inputs.browserstack_app_url_ios_imported_wallet }}
       app_version: ${{ needs.trigger-ios-dual-versions.outputs.with-srp-version || 'Manual-Input' }}
@@ -339,7 +338,7 @@ jobs:
     name: Fetch RN Playground APK and Upload to BrowserStack
     runs-on: ubuntu-latest
     needs: [wait-for-onboarding-completion]
-    if: always() && !cancelled() && (inputs.build_variant || 'rc') == 'rc'
+    if: always() && !cancelled()
     outputs:
       browserstack-playground-url: ${{ steps.upload-playground.outputs.browserstack-url }}
     steps:
@@ -382,12 +381,12 @@ jobs:
         set-build-names,
         determine-branch-name,
       ]
-    if: always() && !cancelled() && (inputs.build_variant || 'rc') == 'rc' && (needs.trigger-android-dual-versions.result == 'skipped' || needs.trigger-android-dual-versions.result == 'success') && (inputs.browserstack_app_url_android_imported_wallet != '' || needs.trigger-android-dual-versions.outputs.with-srp-browserstack-url != '')
+    if: always() && !cancelled() && (needs.trigger-android-dual-versions.result == 'skipped' || needs.trigger-android-dual-versions.result == 'success') && (inputs.browserstack_app_url_android_imported_wallet != '' || needs.trigger-android-dual-versions.outputs.with-srp-browserstack-url != '')
     with:
       platform: android
       build_type: mm-connect
       sentry_target: ${{ inputs.sentry_target || 'test' }}
-      build_variant: ${{ inputs.build_variant || 'rc' }}
+      build_variant: ${{ inputs.build_variant || 'e2e' }}
       device_matrix: ${{ needs.read-device-matrix.outputs.android_mm_connect_matrix }}
       browserstack_app_url: ${{ needs.trigger-android-dual-versions.outputs.with-srp-browserstack-url || inputs.browserstack_app_url_android_imported_wallet }}
       app_version: ${{ needs.trigger-android-dual-versions.outputs.with-srp-version || 'Manual-Input' }}
@@ -424,7 +423,7 @@ jobs:
       - name: Run aggregation script
         env:
           BRANCH_NAME: ${{ needs.determine-branch-name.outputs.branch_name }}
-          BUILD_VARIANT: ${{ inputs.build_variant || 'rc' }}
+          BUILD_VARIANT: ${{ inputs.build_variant || 'e2e' }}
         run: |
           echo "Processing all test results..."
           echo "Running aggregation script..."

.github/workflows/run-performance-e2e-release.yml

@@ -53,6 +53,7 @@ jobs:
             && !inputs.browserstack_clean_app_url_android)
     with:
       branch_name: ${{ github.ref_name }}
+      build_variant: 'rc'
     secrets: inherit
 
   trigger-ios-dual-versions:
@@ -64,6 +65,7 @@ jobs:
             && !inputs.browserstack_clean_app_url_ios)
     with:
       branch_name: ${{ github.ref_name }}
+      build_variant: 'rc'
     secrets: inherit
 
   run-android-login-tests:

.github/workflows/run-performance-e2e.yml

@@ -30,8 +30,13 @@ export const isTest =
   process.env.METAMASK_ENVIRONMENT !== 'beta' &&
   process.env.METAMASK_ENVIRONMENT !== 'rc' &&
   process.env.METAMASK_ENVIRONMENT !== 'exp';
+// IS_PERFORMANCE_TEST opts out of E2E runtime overhead (ReadOnlyNetworkStore,
+// command polling) while keeping METAMASK_ENVIRONMENT='e2e' so the build still
+// works on feature branches with e2e signing/secrets.
 export const isE2E =
-  process.env.IS_TEST === 'true' || process.env.METAMASK_ENVIRONMENT === 'e2e';
+  process.env.IS_PERFORMANCE_TEST !== 'true' &&
+  (process.env.IS_TEST === 'true' ||
+    process.env.METAMASK_ENVIRONMENT === 'e2e');
 export const enableApiCallLogs = process.env.LOG_API_CALLS === 'true';
 export const getFixturesServerPortInApp = () =>
   testConfig.fixtureServerPort ?? FALLBACK_FIXTURE_SERVER_PORT;

.github/workflows/run-system-tests.yml

@@ -215,7 +215,83 @@ builds:
     secrets: *secrets
     code_fencing: *code_fencing_main
 
-  # Test builds (QA)
+  # BrowserStack performance builds — seedless onboarding (E2E_MOCK_OAUTH baked in)
+  # IS_PERFORMANCE_TEST suppresses E2E startup overhead (ReadOnlyNetworkStore, command
+  # polling, Sentry mock) while keeping METAMASK_ENVIRONMENT='e2e' so this build works
+  # on feature branches with the same github_environment/signing as all other e2e builds.
+  # The seedless-onboarding controller is still mocked via E2E_MOCK_OAUTH.
+  # E2E_BYOA_AUTH_SECRET is optional — QAMockOAuthService has a hardcoded default fallback.
+  main-e2e-bs-without-srp:
+    github_environment: build-e2e
+    signing: *signing_uat
+    env:
+      <<: *public_envs
+      METAMASK_ENVIRONMENT: 'e2e'
+      METAMASK_BUILD_TYPE: 'main'
+      IS_BROWSERSTACK_BUILD: 'true'
+      DISABLE_NOTIFICATION_PROMPT: 'true'
+      E2E_MOCK_OAUTH: 'true'
+      IS_PERFORMANCE_TEST: 'true'
+      RAMP_INTERNAL_BUILD: 'true'
+    secrets: *secrets
+    code_fencing: *code_fencing_main
+    
+  # BrowserStack performance builds — with pre-imported wallet (ADDITIONAL_SRP_1 baked in)
+  # IS_PERFORMANCE_TEST suppresses E2E startup overhead (ReadOnlyNetworkStore, command
+  # polling, Sentry mock) while keeping METAMASK_ENVIRONMENT='e2e' so this build works
+  # on feature branches with the same github_environment/signing as all other e2e builds.
+  # The seedless-onboarding controller is still mocked via E2E_MOCK_OAUTH.
+  main-e2e-bs-with-srp:
+    github_environment: build-e2e
+    signing: *signing_uat
+    env:
+      <<: *public_envs
+      METAMASK_ENVIRONMENT: 'e2e'
+      METAMASK_BUILD_TYPE: 'main'
+      IS_BROWSERSTACK_BUILD: 'true'
+      DISABLE_NOTIFICATION_PROMPT: 'true'
+      E2E_MOCK_OAUTH: 'true'
+      IS_PERFORMANCE_TEST: 'true'
+      RAMP_INTERNAL_BUILD: 'true'
+    secrets:
+      <<: *secrets
+      ADDITIONAL_SRP_1: 'IN_BUILD_SRP'
+      PREDEFINED_PASSWORD: 'E2E_PASSWORD'
+    code_fencing: *code_fencing_main
+  # Release candidate with pre-imported wallet (system tests / performance tests)
+  # Same as main-rc but bakes in ADDITIONAL_SRP_1 + PREDEFINED_PASSWORD so the app
+  # starts with an imported wallet, skipping onboarding. Used by run-system-tests.yml.
+  main-rc-with-srp:
+    script_name: main-rc
+    github_environment: build-rc
+    signing: *signing_rc
+    env:
+      <<: *public_envs
+      METAMASK_ENVIRONMENT: 'rc'
+      METAMASK_BUILD_TYPE: 'main'
+    secrets:
+      <<: *secrets
+      ADDITIONAL_SRP_1: 'IN_BUILD_SRP'
+      PREDEFINED_PASSWORD: 'E2E_PASSWORD'
+    code_fencing: *code_fencing_main
+
+  # Release candidate without pre-imported wallet — seedless onboarding (E2E_MOCK_OAUTH baked in)
+  # RC counterpart to main-rc-with-srp; used by performance tests that exercise the onboarding flow.
+  # E2E_BYOA_AUTH_SECRET is optional — QAMockOAuthService has a hardcoded default fallback.
+  main-rc-without-srp:
+    script_name: main-rc
+    github_environment: build-rc
+    signing: *signing_rc
+    env:
+      <<: *public_envs
+      METAMASK_ENVIRONMENT: 'rc'
+      METAMASK_BUILD_TYPE: 'main'
+      DISABLE_NOTIFICATION_PROMPT: 'true'
+      E2E_MOCK_OAUTH: 'true'
+    secrets: *secrets
+    code_fencing: *code_fencing_main
+
+  # Test builds
   main-test:
     github_environment: build-uat
     signing: *signing_uat
@@ -286,6 +362,38 @@ builds:
     secrets: *secrets
     code_fencing: *code_fencing_experimental
 
+  # BrowserStack experimental builds — with pre-imported wallet
+  main-exp-with-srp:
+    github_environment: build-exp
+    signing: *signing_uat
+    env:
+      <<: *public_envs
+      METAMASK_ENVIRONMENT: 'exp'
+      METAMASK_BUILD_TYPE: 'main'
+      DISABLE_NOTIFICATION_PROMPT: 'true'
+      MM_ENABLE_SETTINGS_PAGE_DEV_OPTIONS: 'true'
+    secrets:
+      <<: *secrets
+      ADDITIONAL_SRP_1: 'IN_BUILD_SRP'
+      PREDEFINED_PASSWORD: 'E2E_PASSWORD'
+    code_fencing: *code_fencing_experimental
+
+  # BrowserStack experimental builds — seedless onboarding (E2E_MOCK_OAUTH baked in)
+  # E2E_BYOA_AUTH_SECRET is optional — QAMockOAuthService has a hardcoded default fallback.
+  main-exp-without-srp:
+    github_environment: build-exp
+    signing: *signing_uat
+    env:
+      <<: *public_envs
+      METAMASK_ENVIRONMENT: 'exp'
+      METAMASK_BUILD_TYPE: 'main'
+      DISABLE_NOTIFICATION_PROMPT: 'true'
+      E2E_MOCK_OAUTH: 'true'
+      MM_ENABLE_SETTINGS_PAGE_DEV_OPTIONS: 'true'
+    secrets: *secrets
+    code_fencing: *code_fencing_experimental
+
+  # Local development / Expo development build (Runway .app for simulator)
   # Dev release build (Ex. For sideloading via Build Mobile App workflow)
   main-dev:
     github_environment: build-dev

app/util/test/utils.js

@@ -56,14 +56,21 @@ module.exports = function (baseConfig) {
   const {
     resolver: { assetExts, sourceExts },
   } = defaultConfig;
+  // IS_PERFORMANCE_TEST opts out of E2E startup overhead (ReadOnlyNetworkStore,
+  // command polling, Sentry mock) while keeping METAMASK_ENVIRONMENT='e2e' so
+  // the build still works on feature branches with e2e signing/secrets.
+  const isPerformanceTest = process.env.IS_PERFORMANCE_TEST === 'true';
   const isE2E =
-    process.env.IS_TEST === 'true' ||
-    process.env.METAMASK_ENVIRONMENT === 'e2e';
+    !isPerformanceTest &&
+    (process.env.IS_TEST === 'true' ||
+      process.env.METAMASK_ENVIRONMENT === 'e2e');
 
   /**
    * E2E Metro redirects under tests/module-mocking.
    * Enables both: seedless-onboarding-controller + OAuthLoginHandlers mocks.
    * True when IS_TEST / METAMASK_ENVIRONMENT=e2e OR E2E_MOCK_OAUTH.
+   * Performance builds set E2E_MOCK_OAUTH=true to keep this mock active
+   * even though isE2E is false (preventing real OAuth calls to production).
    */
   const isE2EMockOAuth = process.env.E2E_MOCK_OAUTH === 'true';