# Any TV Remote Control

状态：active
Platform：android
Package：io.klebo.tvremote
Version：1.0.32
Opportunity：2026-06-10-any-tv-remote-control

## 摘要

- 包类型：xapk，inner APK 数：20
- 引擎 / 框架：hermes, react_native
- SDK 线索：facebook, firebase, hermes, react_native
- Endpoint candidates：4
- 结论口径：本报告只基于静态 ZIP / Manifest / 字符串证据；不代表真实运行路径已验证。

## 直接证据

- [high] Manifest package id is io.klebo.tvremote（source: `AndroidManifest.xml`，status: `verified`）
- [high] Manifest declares 22 permissions（source: `AndroidManifest.xml`，status: `verified`）
- [high] Engine/framework markers: hermes, react_native（source: `APK file inventory`，status: `verified`）
- [high] Static strings include 4 endpoint candidates（source: `Text/string scan`，status: `verified`）
- [high] Package contains 27 native libraries（source: `APK file inventory`，status: `verified`）

## 推断

- [medium] SDK markers suggest: facebook, firebase, hermes, react_native（source: `Manifest, filenames, and text strings`，status: `inferred`）

## 权限和组件

### 权限

- `android.permission.ACCESS_ADSERVICES_AD_ID`
- `android.permission.ACCESS_ADSERVICES_ATTRIBUTION`
- `android.permission.ACCESS_NETWORK_STATE`
- `android.permission.ACCESS_WIFI_STATE`
- `android.permission.CAMERA`
- `android.permission.CHANGE_NETWORK_STATE`
- `android.permission.CHANGE_WIFI_MULTICAST_STATE`
- `android.permission.FOREGROUND_SERVICE`
- `android.permission.INTERNET`
- `android.permission.READ_EXTERNAL_STORAGE`
- `android.permission.RECORD_AUDIO`
- `android.permission.SYSTEM_ALERT_WINDOW`
- `android.permission.TRANSMIT_IR`
- `android.permission.USE_BIOMETRIC`
- `android.permission.USE_FINGERPRINT`
- `android.permission.VIBRATE`
- `android.permission.WAKE_LOCK`
- `android.permission.WRITE_EXTERNAL_STORAGE`
- `com.android.vending.CHECK_LICENSE`
- `com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE`
- `com.google.android.gms.permission.AD_ID`
- `io.klebo.tvremote.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION`

### 组件

- Activities：androidx.compose.ui.tooling.PreviewActivity, com.canhub.cropper.CropImageActivity, com.google.android.gms.auth.api.signin.internal.SignInHubActivity, com.google.android.gms.common.api.GoogleApiActivity, com.google.mlkit.vision.codescanner.internal.GmsBarcodeScanningDelegateActivity, com.pairip.licensecheck.LicenseActivity, expo.modules.imagepicker.ExpoCropImageActivity, io.klebo.tvremote.MainActivity
- Services：com.google.android.datatransport.runtime.backends.TransportBackendDiscovery, com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService, com.google.android.gms.auth.api.signin.RevocationBoundService, com.google.android.gms.cast.framework.ReconnectionService, com.google.android.gms.measurement.AppMeasurementJobService, com.google.android.gms.measurement.AppMeasurementService, com.google.android.gms.metadata.ModuleDependencies, com.google.firebase.components.ComponentDiscoveryService, com.google.mlkit.common.internal.MlKitComponentDiscoveryService, org.eclipse.paho.android.service.MqttService
- Receivers：androidx.profileinstaller.ProfileInstallReceiver, com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver, com.google.android.gms.cast.framework.media.MediaIntentReceiver, com.google.android.gms.measurement.AppMeasurementReceiver
- Providers：androidx.startup.InitializationProvider, com.canhub.cropper.CropFileProvider, com.google.firebase.provider.FirebaseInitProvider, com.google.mlkit.common.internal.MlKitInitProvider, expo.modules.filesystem.FileSystemFileProvider, expo.modules.imagepicker.fileprovider.ImagePickerFileProvider, io.invertase.firebase.app.ReactNativeFirebaseAppInitProvider, io.sentry.android.core.SentryInitProvider, io.sentry.android.core.SentryPerformanceProvider

## SDK / Endpoint

### SDK

- `facebook`
- `firebase`
- `hermes`
- `react_native`

### Endpoint candidates

- http://www.apache.org/licenses/
- http://www.eclipse.org/legal/epl-v10.html
- http://www.eclipse.org/org/documents/edl-v10.php
- http://www.apache.org/licenses/LICENSE-2.0

## Warnings

- apktool manifest decode skipped 19 split APK(s)
- binary AndroidManifest.xml decoded with apktool

## 下一步

- 真机/模拟器验证 onboarding、paywall、首个可感知价值和崩溃路径。
- 把 endpoint candidates 与 HAR / MITM / Frida 动态证据对齐，避免只凭静态字符串下结论。
- 多版本对比权限、SDK、endpoint、native libs 和资源路径变化。