// ============================================ // Reliq — Free preview scan funnel // Public route: /free-scan // Phases: entry → progress → result // ============================================ // ── Analytics placeholders ──────────────────────────────────────────────────── const trackEvent = (event, props) => { // TODO: wire to analytics (PostHog, Amplitude, Segment, etc.) console.log("[Reliq Analytics]", event, props || {}); }; // Named exports for readability at call-sites: const track = { clickedFreeScanCta: () => trackEvent("clicked_free_scan_cta"), uploadedPreviewBuild: (name) => trackEvent("uploaded_preview_build", { file: name }), startedDemoScan: () => trackEvent("started_demo_scan"), completedPreviewScan: (score) => trackEvent("completed_preview_scan", { score }), clickedUnlockFullReport: (via) => trackEvent("clicked_unlock_full_report", { via }), createdAccountFromPreview: () => trackEvent("created_account_from_preview_scan"), }; // ── Demo scan data ──────────────────────────────────────────────────────────── const DEMO_RESULT = { appName: "Roamly", letters: "R", grad: "linear-gradient(135deg,#5B9DFF,#A78BFA)", bundle: "com.roamly.app", version: "1.4.0", file: "Roamly-1.4.0-release.aab", score: 64, verdict: "needs_fixes", critCount: 1, warnCount: 2, infoCount: 3, stores: ["play", "app"], topFindings: [ { sev: "critical", code: "DATA_SAFETY_COMPLETENESS", desc: "Data Safety form declares no third-party data sharing, but 3 tracker SDKs were detected in the binary (Facebook SDK, AppsFlyer, Adjust).", store: "play", }, { sev: "warning", code: "CONTACTS_PERMISSION_AUDIT", desc: "READ_CONTACTS is declared in the manifest with no visible foreground UI that justifies it. Travel apps rarely qualify under Google Play policy.", store: "play", }, { sev: "warning", code: "PRIVACY_POLICY_REDIRECT", desc: "Privacy policy URL returns HTTP 301 → redirects to a non-HTTPS endpoint. Automated store crawlers treat this as a missing policy.", store: "both", }, ], policyRef: "Google Play Policy · Data Safety (Aug 2025)", fixPreview: "Open Play Console → Store presence → Data Safety. Under 'Data shared with third parties', add entries for Facebook SDK, AppsFlyer, and Adjust. Data Safety mismatch is the #1 Google Play rejection reason in 2024–25.", }; const SCAN_STEPS = [ { key: "extract", label: "Extracting build metadata", sub: "APK/AAB decompile, binary analysis" }, { key: "perms", label: "Reading permissions", sub: "Manifest audit, dangerous permission scan" }, { key: "sdks", label: "Detecting SDKs", sub: "Third-party library fingerprinting" }, { key: "privacy", label: "Checking privacy declarations", sub: "Data Safety, privacy manifests, policy URL" }, { key: "risk", label: "Reviewing store listing risk", sub: "Metadata, keywords, content rating" }, { key: "score", label: "Generating readiness score", sub: "Weighted scoring across all categories" }, ]; // Step durations (ms). Total ≈ 4.2 s — short enough to feel snappy. const STEP_DURATIONS = { extract: 500, perms: 600, sdks: 800, privacy: 900, risk: 700, score: 700 }; // ── VALID file extensions + size limit ─────────────────────────────────────── const VALID_EXTS = [".apk", ".aab", ".ipa"]; const MAX_FILE_BYTES = 250 * 1024 * 1024; // 250 MB — enforced frontend-side before upload const fileIsValid = (name) => VALID_EXTS.some(ext => name.toLowerCase().endsWith(ext)); // ── Severity colors ─────────────────────────────────────────────────────────── const SEV_COLOR = { critical: "var(--red)", warning: "var(--amber)", info: "var(--blue)", pass: "var(--teal)" }; const SEV_BG = { critical: "var(--red-bg)", warning: "var(--amber-bg)", info: "var(--blue-bg)", pass: "var(--teal-bg)" }; const SEV_BORDER = { critical: "rgba(239,68,68,0.25)", warning: "rgba(245,158,11,0.25)", info: "rgba(91,157,255,0.25)", pass: "var(--line-3)" }; // ── Phase 1: Entry ──────────────────────────────────────────────────────────── const FreeScanEntry = ({ onUpload, onDemo }) => { const [drag, setDrag] = React.useState(false); const [error, setError] = React.useState(null); const inputRef = React.useRef(null); const handleFile = (f) => { if (!f) return; if (!fileIsValid(f.name)) { setError(`"${f.name}" isn't a valid build file. Please upload an .apk, .aab, or .ipa.`); return; } if (f.size > MAX_FILE_BYTES) { setError(`"${f.name}" is too large. Maximum file size is 250 MB.`); return; } setError(null); onUpload(f.name); }; // Reset the input value after every selection so the user can re-select the // same file after correcting it (e.g. after a size or type error). const onInputChange = (e) => { handleFile(e.target.files?.[0]); e.target.value = ""; }; const onDrop = (e) => { e.preventDefault(); setDrag(false); handleFile(e.dataTransfer.files?.[0]); }; return (
{/* Upload zone */}
{ e.preventDefault(); setDrag(true); }} onDragLeave={() => setDrag(false)} onDrop={onDrop} onClick={() => inputRef.current?.click()} >

Drop your build here

APK · AAB · IPA — Reliq runs 38 store-policy checks in under 3 minutes.

.APK.AAB.IPA · max 250 MB
{error && (
{error}
)} {/* Divider */}
don't have a build ready?
{/* Demo scan option */}
e.currentTarget.style.borderColor = "var(--line-3)"} onMouseLeave={e => e.currentTarget.style.borderColor = ""} >
Try demo scan
See a realistic scan of Roamly — a sample travel app with known issues.
{/* Trust note */}
No credit card required · Results in under 3 minutes · Android + iOS
); }; // ── Phase 2: Progress ───────────────────────────────────────────────────────── const FreeScanProgress = ({ fileName, onComplete }) => { const [doneKeys, setDoneKeys] = React.useState([]); React.useEffect(() => { // Build cumulative fire times: initial delay 300ms, then each step fires // after the previous step's duration has elapsed. let t = 300; const timers = SCAN_STEPS.map((s) => { const fireAt = t; t += STEP_DURATIONS[s.key]; return setTimeout(() => setDoneKeys(prev => [...prev, s.key]), fireAt); }); // t now equals the time the last step was marked + its own duration. // Fire onComplete 350ms after the last step mark (t - last_duration + 350). const lastDuration = STEP_DURATIONS[SCAN_STEPS[SCAN_STEPS.length - 1].key]; const done = setTimeout(onComplete, t - lastDuration + 350); return () => { timers.forEach(clearTimeout); clearTimeout(done); }; }, []); const activeIdx = SCAN_STEPS.findIndex(s => !doneKeys.includes(s.key)); return (
Running preview scan…
{fileName ? fileName : "Demo · Roamly 1.4.0"}
{SCAN_STEPS.map((s, i) => { const done = doneKeys.includes(s.key); const active = i === activeIdx; return (
{/* Step indicator */}
{done ? : active ? : {i + 1} }
{/* Label */}
{s.label}
{s.sub}
{active && (
)}
); })}
Checking store policies · This takes about 30 seconds on the free tier
); }; // ── Scan context helpers ────────────────────────────────────────────────────── // Delegates to window.reliqSubscription (reliq-state.jsx) — the canonical store // for all preview context. Local fallbacks guard against load-order edge cases. const LS_SCAN_ID = "reliq_preview_scan_id"; // preview scan ID — unchanged const LS_PREVIEW_REDIRECT = "reliq_preview_pending_redirect"; // new canonical preview redirect key const LS_REDIRECT_LEGACY = "reliq_pending_redirect"; // DEPRECATED — read-only fallback, never write // Write preview context so signup can redirect back to the result page after auth. // Redirects to the demo scan result (scn_2k8x), not the generated previewScanId. // The previewScanId signals that a preview exists; it is not itself the route. // Both scanId (scn_preview_*) and reportId (rep_preview_*) are persisted so that // signup.jsx can restore the full preview context after authentication. const preservePreviewContext = (scanId, reportId) => { if (window.reliqSubscription) { // setVisitorPreview stores both IDs and writes to reliq_preview_pending_redirect. window.reliqSubscription.setVisitorPreview(scanId, reportId || null, "free-scan", "scan/scn_2k8x"); } else { // Local fallback — should never fire in production (reliq-state.jsx loads first). try { localStorage.setItem(LS_SCAN_ID, scanId); if (reportId) localStorage.setItem("reliq_preview_report_id", reportId); localStorage.setItem("reliq_signup_source", "free-scan"); localStorage.setItem(LS_PREVIEW_REDIRECT, "scan/scn_2k8x"); // new key only } catch (_) {} } }; // Returns the post-auth redirect destination (no leading slash). // Reads the new preview redirect key first; falls back to the legacy shared key // for sessions created before the Step 3 redirect key migration. const readPendingRedirect = () => { if (window.reliqSubscription) { return window.reliqSubscription.getBestPreviewRedirect() || "scan/scn_2k8x"; } try { return localStorage.getItem(LS_PREVIEW_REDIRECT) || localStorage.getItem(LS_REDIRECT_LEGACY) || "scan/scn_2k8x"; } catch (_) { return "scan/scn_2k8x"; } }; // Clear preview context when the user signs in directly from the free-scan page. const clearPreviewContext = () => { if (window.reliqSubscription) { window.reliqSubscription.clearPreviewContext(); } else { // Local fallback — clears both the new key and the legacy key. try { localStorage.removeItem(LS_SCAN_ID); localStorage.removeItem("reliq_signup_source"); localStorage.removeItem(LS_PREVIEW_REDIRECT); localStorage.removeItem(LS_REDIRECT_LEGACY); // legacy — clear for backwards compat } catch (_) {} } }; // ── Phase 3: Preview Result ─────────────────────────────────────────────────── const FreeScanResult = ({ result, go, scanId, reportId }) => { const { score, verdict, critCount, warnCount, infoCount, stores, appName, letters, grad, bundle, version, file, topFindings, policyRef, fixPreview } = result; const [githubLoading, setGithubLoading] = React.useState(false); const [githubError, setGithubError] = React.useState(null); const verdictLabel = verdict === "needs_fixes" ? "Needs Fixes" : verdict === "pass" ? "Likely to Pass" : "At Risk"; const verdictCls = verdict === "needs_fixes" ? "v-needs" : verdict === "pass" ? "v-pass" : "v-reject"; const verdictIcon = verdict === "needs_fixes" ? "alert" : verdict === "pass" ? "check-circle" : "x-circle"; // ── "Create an account" CTA ─────────────────────────────────────────────── const goToSignup = () => { track.clickedUnlockFullReport("create_account"); preservePreviewContext(scanId, reportId); go("/signup"); }; // ── "Continue with GitHub" mock OAuth flow ──────────────────────────────── const doGithubAuth = () => { if (githubLoading) return; setGithubError(null); setGithubLoading(true); track.clickedUnlockFullReport("github"); preservePreviewContext(scanId, reportId); // Simulate GitHub OAuth round-trip (~1.6 s) // Swap this block for a real window.open OAuth flow when auth is wired up. setTimeout(() => { setGithubLoading(false); // Mock: always succeeds. On real failure, call setGithubError() instead. track.createdAccountFromPreview(); clearPreviewContext(); go(readPendingRedirect()); }, 1600); }; return (
{/* App + Score header */}
{appName}
{bundle} · v{version}
{stores.map(s => )}
{/* Compact score ring */}
{/* Verdict banner */}
Preview verdict
{verdictLabel}
{critCount} critical
{warnCount} warnings · {infoCount} info
{/* Top 3 findings */}
Top findings Showing 3 of {critCount + warnCount + infoCount + 4} · full list locked
{topFindings.map((f, i) => (
0 ? "1px solid var(--line-1)" : "none", borderLeft:`3px solid ${SEV_COLOR[f.sev]}`, display:"grid", gridTemplateColumns:"108px 1fr", gap:14, alignItems:"flex-start", }}>
{f.sev}
{f.code}
{f.desc}
{f.store !== "both" && (
)}
))}
{/* Fix preview (1 of N) */}
Fix preview 1 of {critCount + warnCount} · rest locked
{policyRef}

{fixPreview}

{/* Lock panel */}
{/* Lock icon */}

Unlock the full report

Create an account to unlock the full report, fix plan, PDF export, and re-scan history.

{/* Locked feature list */}
{["All findings", "Full fix plan", "PDF export", "Shareable link", "Dev tickets", "Re-scan history", "CI/CD setup"].map(f => ( {f} ))}
{/* CTAs */}
{/* GitHub error message */} {githubError && (
{githubError}
)}
No credit card required · your scan is preserved
); }; // ── Root component ───────────────────────────────────────────────────────────── const FreeScan = ({ go }) => { const [phase, setPhase] = React.useState("entry"); // "entry" | "progress" | "result" const [fileName, setFileName] = React.useState(null); // real upload name, or null for demo const [isDemo, setIsDemo] = React.useState(false); const resultRef = React.useRef(DEMO_RESULT); // Stable preview scan/report IDs — generated once per component mount. // Used to preserve context for signup/auth redirect. // scanId (scn_preview_*): signals a preview exists and identifies this session's scan. // reportId (rep_preview_*): identifies the preview report for post-signup deep-linking. const previewScanId = React.useRef( "scn_preview_" + Math.random().toString(36).slice(2, 7) ); const previewReportId = React.useRef( "rep_preview_" + Math.random().toString(36).slice(2, 7) ); // Track landing on this page (CTA was clicked) React.useEffect(() => { track.clickedFreeScanCta(); }, []); // Track completion + persist context when result is ready. // Pre-seeds localStorage so the preview scan+report are stored even before the user // clicks a CTA — the CTAs re-write the same values, so this is always idempotent. React.useEffect(() => { if (phase === "result") { track.completedPreviewScan(resultRef.current.score); preservePreviewContext(previewScanId.current, previewReportId.current); } }, [phase]); const handleUpload = (name) => { track.uploadedPreviewBuild(name); setFileName(name); setIsDemo(false); // Overlay the result with user's file name for realism resultRef.current = { ...DEMO_RESULT, file: name, appName: name.replace(/[-_].*/, "").replace(/\.(apk|aab|ipa)$/i, "") || DEMO_RESULT.appName, }; setPhase("progress"); }; const handleDemo = () => { track.startedDemoScan(); setIsDemo(true); setFileName(null); resultRef.current = DEMO_RESULT; setPhase("progress"); }; const handleProgressComplete = () => { setPhase("result"); }; // Headline + subtext vary by phase const headings = { entry: { eyebrow: "Free preview · no account needed", h1: "Run a free store-readiness preview.", sub: "Upload an APK, AAB, or IPA. Reliq checks store-policy risk before you submit.", }, progress: { eyebrow: isDemo ? "Demo scan · Roamly 1.4.0" : `Scanning · ${fileName}`, h1: "Checking your build…", sub: "Running 38 store-policy checks across permissions, privacy, security, and metadata.", }, result: { eyebrow: isDemo ? "Demo results · Roamly 1.4.0" : `Preview results · ${fileName}`, h1: "Here's your store-readiness preview.", sub: "Showing 3 of " + (DEMO_RESULT.critCount + DEMO_RESULT.warnCount + DEMO_RESULT.infoCount + 4) + " findings. Create an account to see the full report and fix plan.", }, }; const { eyebrow, h1, sub } = headings[phase]; return ( {/* Section heading */}
{phase === "progress" && ( )} {eyebrow}

{h1}

{sub}

{/* Phase progress dots */}
{["entry","progress","result"].map((p, i) => (
i ? "var(--teal-bg)" : "var(--bg-4)", border: phase !== p && ["entry","progress","result"].indexOf(phase) > i ? "1px solid var(--line-3)" : "none", transition:"all .25s", }} /> ))}
{/* Phase content */} {phase === "entry" && } {phase === "progress" && } {phase === "result" && } {/* Back link (entry only) */} {phase === "entry" && (
)} ); }; Object.assign(window, { FreeScan });