Allow Test Store in release build for e2e tests via internal opt-in

The Maestro e2e job now runs against a minified release build, which is
non-debuggable and trips the guard in PurchasesFactory that blocks Test Store
keys in release builds (it shows SimulatedStoreErrorDialogActivity, crashing
the app on launch). uiPreviewMode bypasses the guard but disables billing, so
it can't drive the real purchase flow.

Add an internal opt-in, DangerousSettings.forTestStoreInReleaseBuild()
(@InternalRevenueCatAPI, mirroring forPreviewMode()), that the e2etests app
sets so it can use the Test Store in a true release build. Extend the guard to
honor it. For RevenueCat-internal testing only.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: tonidero

purchases/src/main/kotlin/com/revenuecat/purchases/DangerousSettings.kt

@@ -22,8 +22,10 @@ public class DangerousSettings internal constructor(
     internal val uiPreviewMode: Boolean = false,
 
     internal val applyObfuscatedAccountIdToSubscriptionChanges: Boolean = false,
+
+    internal val allowTestStoreInReleaseBuild: Boolean = false,
 ) : Parcelable {
-    public constructor(autoSyncPurchases: Boolean = true) : this(autoSyncPurchases, false, false, false)
+    public constructor(autoSyncPurchases: Boolean = true) : this(autoSyncPurchases, false, false, false, false)
 
     public companion object {
         /**
@@ -39,5 +41,17 @@ public class DangerousSettings internal constructor(
             uiPreviewMode = true,
             applyObfuscatedAccountIdToSubscriptionChanges = false,
         )
+
+        /**
+         * Creates a [DangerousSettings] that allows configuring the SDK with a Test Store API key
+         * in a release (non-debuggable) build, bypassing the safety check that otherwise blocks it.
+         *
+         * For RevenueCat-internal end-to-end testing only. Do not use in production apps.
+         */
+        @InternalRevenueCatAPI
+        @JvmStatic
+        public fun forTestStoreInReleaseBuild(): DangerousSettings = DangerousSettings(
+            allowTestStoreInReleaseBuild = true,
+        )
     }
 }

purchases/src/main/kotlin/com/revenuecat/purchases/PurchasesFactory.kt

@@ -518,10 +518,14 @@ internal class PurchasesFactory(
 
             val apiKeyValidationResult = apiKeyValidator.validateAndLog(apiKey, store)
 
-            if (!isDebugBuild() &&
-                apiKeyValidationResult == APIKeyValidator.ValidationResult.SIMULATED_STORE &&
-                !dangerousSettings.uiPreviewMode
-            ) {
+            // Test Store keys are only meant for development. uiPreviewMode and
+            // allowTestStoreInReleaseBuild are internal opt-ins that intentionally bypass this guard.
+            val isTestStoreKeyInReleaseBuild = !isDebugBuild() &&
+                apiKeyValidationResult == APIKeyValidator.ValidationResult.SIMULATED_STORE
+            val testStoreReleaseBuildAllowed = dangerousSettings.uiPreviewMode ||
+                dangerousSettings.allowTestStoreInReleaseBuild
+
+            if (isTestStoreKeyInReleaseBuild && !testStoreReleaseBuildAllowed) {
                 val redactedApiKey = apiKeyValidator.redactApiKey(apiKey)
                 errorLog(
                     error = PurchasesError(

purchases/src/test/java/com/revenuecat/purchases/PurchasesFactoryTest.kt

@@ -165,6 +165,36 @@ class PurchasesFactoryTest {
         verify(exactly = 0) { applicationMock.startActivity(any()) }
     }
 
+    @OptIn(InternalRevenueCatAPI::class)
+    @Test
+    fun `configuring SDK with simulated store api key in release mode and allowTestStoreInReleaseBuild does not show error activity`() {
+        // Arrange
+        purchasesFactory = PurchasesFactory(
+            isDebugBuild = { false },
+            apiKeyValidator = apiKeyValidatorMock,
+        )
+        val applicationContextMock = mockk<Application>()
+        every {
+            applicationMock.checkCallingOrSelfPermission(Manifest.permission.INTERNET)
+        } returns PackageManager.PERMISSION_GRANTED
+        every {
+            applicationMock.applicationContext
+        } returns applicationContextMock
+        every {
+            apiKeyValidatorMock.validateAndLog("fakeApiKey", Store.PLAY_STORE)
+        } returns APIKeyValidator.ValidationResult.SIMULATED_STORE
+
+        // Act
+        purchasesFactory.validateConfiguration(
+            createConfiguration(
+                dangerousSettings = DangerousSettings.forTestStoreInReleaseBuild(),
+            ),
+        )
+
+        // Assert
+        verify(exactly = 0) { applicationMock.startActivity(any()) }
+    }
+
     // region shouldInitializeDiagnostics
 
     @Test

test-apps/e2etests/src/main/java/com/revenuecat/e2etests/E2ETestsApplication.kt

@@ -1,11 +1,14 @@
 package com.revenuecat.e2etests
 
 import android.app.Application
+import com.revenuecat.purchases.DangerousSettings
+import com.revenuecat.purchases.InternalRevenueCatAPI
 import com.revenuecat.purchases.LogLevel
 import com.revenuecat.purchases.Purchases
 import com.revenuecat.purchases.PurchasesConfiguration
 
 class E2ETestsApplication : Application() {
+    @OptIn(InternalRevenueCatAPI::class)
     override fun onCreate() {
         super.onCreate()
 
@@ -16,7 +19,12 @@ class E2ETestsApplication : Application() {
             PurchasesConfiguration.Builder(
                 context = this,
                 apiKey = Constants.API_KEY,
-            ).build(),
+            )
+                // This app runs as a minified release build in the Maestro e2e CI job (to exercise
+                // the SDK's consumer R8 rules), but uses a Test Store API key. Opt in to allow that
+                // combination, which the SDK otherwise blocks in non-debuggable builds.
+                .dangerousSettings(DangerousSettings.forTestStoreInReleaseBuild())
+                .build(),
         )
     }
 }