nativekeel 0.1.1 → 0.1.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nativekeel",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Health check for React Native apps: version support, New Architecture blockers, unmaintained native modules and leaked secrets.",
   "type": "module",
   "bin": {

package/src/known-issues.js

@@ -30,6 +30,18 @@ export const KNOWN_ISSUES = [
     detail: "Its TurboModule spec uses EventEmitter properties that this React Native version's codegen rejects (UnsupportedModulePropertyParserError, property 'onDownloadBegin'). Pin 2.36.2 until React Native is upgraded. Its peer range says react-native: *, so npm will not warn you.",
     source: 'real upgrade of an RN 0.77 app, 2026-10-03',
   },
+  {
+    id: 'linear-gradient-interop-unmount',
+    pkg: 'react-native-linear-gradient',
+    from: '2.0.0',
+    to: '2.99.99',
+    rnFrom: 76,
+    when: 'newArch',
+    severity: 'high',
+    title: 'react-native-linear-gradient 2.x crashes the New Architecture when a screen unmounts',
+    detail: "2.x has no Fabric component, so BVLinearGradient runs through the interop layer. Its children are not detached before React Native recycles them: \"RCTComponentViewRegistry: Attempt to recycle a mounted view\" (an abort on iOS, right after login in the app where it was found). React Native 0.76+ draws gradients itself: replace it with a small component that sets experimental_backgroundImage: 'linear-gradient(...)' and drop the native package.",
+    source: 'real upgrade of an RN 0.80 app, 2026-10-04 (UI test after login)',
+  },
 ];
 
 // Semver-ish compare on major.minor.patch, ignoring pre-release tags.

package/src/plan.js

@@ -75,6 +75,56 @@ export function complexity(findings) {
   return { score, size };
 }
 
+// UI test tooling the project already has, so the plan can say "run yours" instead of
+// "write some". Looks for Maestro flows and the common e2e runners.
+export function existingUiTests(root, installed) {
+  for (const name of ['detox', 'appium', 'webdriverio', '@wdio/cli']) {
+    if (installed.has(name)) return name === 'detox' ? 'Detox' : 'Appium';
+  }
+  for (const dir of ['.maestro', 'maestro', 'e2e', '.e2e']) {
+    try {
+      const files = fs.readdirSync(path.join(root, dir), { recursive: true });
+      if (files.some((f) => /\.ya?ml$/.test(String(f)))) {
+        const text = files
+          .filter((f) => /\.ya?ml$/.test(String(f)))
+          .slice(0, 20)
+          .map((f) => fs.readFileSync(path.join(root, dir, String(f)), 'utf8'))
+          .join('\n');
+        if (/^appId:/m.test(text)) return 'Maestro';
+      }
+    } catch {
+      // no such directory
+    }
+  }
+  return null;
+}
+
+function safetyNetPhase(tool) {
+  const why =
+    'A build that compiles and launches can still crash after login or hide a button. On a real upgrade, UI flows caught three such bugs that build and launch checks missed.';
+  if (tool) {
+    return {
+      title: 'Set up a safety net',
+      why,
+      steps: [
+        `Run your ${tool} suite on both platforms on the current version before changing anything, and keep the results as the baseline.`,
+        'Make sure it covers what users do first: launch, sign-in with a test account, and every tab or main screen. Add flows where it does not.',
+        'Run it again at the end of every phase below.',
+      ],
+    };
+  }
+  return {
+    title: 'Set up a safety net',
+    why,
+    steps: [
+      'Before changing anything, write a few UI flows (Maestro is the quickest: maestro.mobile.dev): launch, sign-in with a test account, and every tab or main screen.',
+      'Keep test credentials in environment variables, never in the repo. Never let a flow press a button that writes to production (sign-up, purchase, posting).',
+      'Assert that no error banner or red screen appears, not only that the app is running: a native module that fails to load can leave the process alive behind a red screen.',
+      'Run the flows on both platforms on the current version, then again at the end of every phase below.',
+    ],
+  };
+}
+
 export function buildPlan(result) {
   const pm = commands[packageManager(result.project.root)];
   const installed = new Set(result.deps.map((d) => d.name));
@@ -323,6 +373,12 @@ export function buildPlan(result) {
     });
   }
 
+  // Only worth it when the plan changes code: secrets alone do not need UI tests.
+  const leaksFirst = phases[0] && phases[0].title === 'Stop the leaks' ? 1 : 0;
+  if (phases.length > leaksFirst) {
+    phases.splice(leaksFirst, 0, safetyNetPhase(existingUiTests(result.project.root, installed)));
+  }
+
   phases.push({
     title: 'Verify before you ship',
     why: 'An upgrade is done when the release build works on real devices, not when it compiles.',