ci: harden Maestro E2E rollout

Author: Shahroz16

.github/workflows/maestro-e2e.yml

@@ -65,11 +65,12 @@ jobs:
     name: Android ${{ matrix.suite }}
     needs: prepare
     if: >-
+      (vars.MOBILE_E2E_ENABLED == 'true' || github.event_name == 'workflow_dispatch') &&
       github.actor != 'dependabot[bot]' &&
       (github.event_name != 'pull_request' ||
       github.event.pull_request.head.repo.full_name == github.repository)
     runs-on: ubuntu-latest
-    timeout-minutes: 45
+    timeout-minutes: 60
     strategy:
       fail-fast: false
       matrix:
@@ -84,10 +85,17 @@ jobs:
           repository: customerio/mobile-e2e
           ref: ${{ inputs.harness_ref || 'main' }}
           path: .e2e-harness
-          token: ${{ secrets.MOBILE_E2E_REPO_TOKEN || github.token }}
 
       - uses: ./.github/actions/setup-android
 
+      - name: Install Android emulator packages
+        run: |
+          sdkmanager \
+            "platform-tools" \
+            "emulator" \
+            "platforms;android-35" \
+            "system-images;android-35;google_apis;x86_64"
+
       - name: Enable emulator acceleration
         run: sudo chmod 666 /dev/kvm
 
@@ -106,6 +114,24 @@ jobs:
           printf 'cdpApiKey=%s\nsiteId=%s\nworkspace=%s\n' \
             "$CDP_API_KEY" "$SITE_ID" "Mobile E2E" > samples/local.properties
 
+      - name: Validate E2E backend configuration
+        env:
+          SUITE: ${{ matrix.suite }}
+          MAESTRO_EXT_API_KEY: ${{ secrets.MOBILE_E2E_EXT_API_KEY }}
+          MAESTRO_APP_API_KEY: ${{ secrets.MOBILE_E2E_APP_API_KEY }}
+          INBOX_TRANSACTIONAL_MESSAGE_ID: ${{ vars.MOBILE_E2E_INBOX_TRANSACTIONAL_MESSAGE_ID }}
+        run: |
+          required=(MAESTRO_EXT_API_KEY)
+          if [[ "$SUITE" == "message-inbox" ]]; then
+            required+=(MAESTRO_APP_API_KEY INBOX_TRANSACTIONAL_MESSAGE_ID)
+          fi
+          for name in "${required[@]}"; do
+            if [[ -z "${!name}" ]]; then
+              echo "::error::$name is not configured for Maestro E2E"
+              exit 1
+            fi
+          done
+
       - name: Run SDK to backend E2E
         env:
           MAESTRO_EXT_API_KEY: ${{ secrets.MOBILE_E2E_EXT_API_KEY }}

.maestro/README.md

@@ -43,7 +43,10 @@ combined summary. Nothing needs to be started manually.
 `./.maestro/run.sh <flow.yaml>` remains available when an app is already
 installed and a single low-level flow is being debugged.
 
-Outputs land in `artifacts/e2e/android/<flow>/` (gitignored):
+The latest focused artifacts land in `artifacts/e2e/android/<flow>/`. Profile
+runs also archive immutable snapshots beneath
+`.maestro/harness/artifacts/e2e/profile-<timestamp>/android/<flow>/`; the printed
+summary links to those snapshots. Both locations are gitignored.
 
 | File | What it is |
 |---|---|
@@ -90,3 +93,10 @@ widget's matching `accessibilityIdentifier`.
   to a 5 fps `screenshot` poll — see the iOS sample's `capture_frames.sh`.
 - No cleanup of created Customer.io customers. Test-prod workspace is
   fine for now.
+
+## CI rollout
+
+The workflow is wired for PR smoke, weekday standard, and focused manual runs.
+PR/scheduled jobs require `MOBILE_E2E_ENABLED=true`, the two `MOBILE_E2E_*_API_KEY`
+secrets, and the Inbox message-ID variable. Leave the flag unset until the shared
+harness is merged and one manual dispatch has passed.