# @string/app_name

状态：active
Platform：android
Package：com.github.jamesgay.fitnotes
Version：unknown
Opportunity：2026-06-10-fitnotes-gym-workout-log

## 摘要

- 包类型：apk，inner APK 数：1
- 引擎 / 框架：未识别
- SDK 线索：未发现
- Endpoint candidates：2
- 结论口径：本报告只基于静态 ZIP / Manifest / 字符串证据；不代表真实运行路径已验证。

## 直接证据

- [high] Manifest package id is com.github.jamesgay.fitnotes（source: `AndroidManifest.xml`，status: `verified`）
- [high] Manifest declares 8 permissions（source: `AndroidManifest.xml`，status: `verified`）
- [high] Static strings include 2 endpoint candidates（source: `Text/string scan`，status: `verified`）

## 推断

- 暂无推断；等待动态分析或人工验证。

## 权限和组件

### 权限

- `android.permission.ACCESS_NETWORK_STATE`
- `android.permission.FOREGROUND_SERVICE`
- `android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK`
- `android.permission.INTERNET`
- `android.permission.POST_NOTIFICATIONS`
- `android.permission.RECEIVE_BOOT_COMPLETED`
- `android.permission.VIBRATE`
- `android.permission.WAKE_LOCK`

### 组件

- Activities：com.github.jamesgay.fitnotes.feature.analysis.AnalysisActivity, com.github.jamesgay.fitnotes.feature.autobackup.AutomaticBackupActivity, com.github.jamesgay.fitnotes.feature.calendar.CalendarActivity, com.github.jamesgay.fitnotes.feature.exercise.addedit.ui.ExerciseAddEditActivity, com.github.jamesgay.fitnotes.feature.exercise.graph.ExerciseGraphActivity, com.github.jamesgay.fitnotes.feature.exercise.list.ExerciseListActivity, com.github.jamesgay.fitnotes.feature.exercise.overview.ExerciseOverviewActivity, com.github.jamesgay.fitnotes.feature.exercise.stats.ExerciseStatsActivity, com.github.jamesgay.fitnotes.feature.exercise.workout.TrainingLogActivity, com.github.jamesgay.fitnotes.feature.home.MainActivity, com.github.jamesgay.fitnotes.feature.measurement.MeasurementActivity, com.github.jamesgay.fitnotes.feature.measurement.list.MeasurementListActivity, com.github.jamesgay.fitnotes.feature.settings.CalculatePersonalRecordsActivity, com.github.jamesgay.fitnotes.feature.settings.SettingsActivity, com.google.android.gms.auth.api.signin.internal.SignInHubActivity, com.google.android.gms.common.api.GoogleApiActivity
- Services：androidx.room.MultiInstanceInvalidationService, androidx.work.impl.background.systemalarm.SystemAlarmService, androidx.work.impl.background.systemjob.SystemJobService, androidx.work.impl.foreground.SystemForegroundService, com.github.jamesgay.fitnotes.feature.resttimer.RestTimerService, com.github.jamesgay.fitnotes.util.AutomaticBackupJobIntentService, com.google.android.gms.auth.api.signin.RevocationBoundService
- Receivers：androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy, androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy, androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy, androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy, androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver, androidx.work.impl.background.systemalarm.RescheduleReceiver, androidx.work.impl.diagnostics.DiagnosticsReceiver, androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver, com.github.jamesgay.fitnotes.util.AutomaticBackupBroadcastReceiver
- Providers：androidx.core.content.FileProvider, androidx.startup.InitializationProvider

## SDK / Endpoint

### SDK

- 未发现

### Endpoint candidates

- https://www.fitnotesapp.com/release_25/
- http://www.apache.org/licenses/LICENSE-2.0

## Warnings

- binary AndroidManifest.xml decoded with apktool

## 下一步

- 真机/模拟器验证 onboarding、paywall、首个可感知价值和崩溃路径。
- 把 endpoint candidates 与 HAR / MITM / Frida 动态证据对齐，避免只凭静态字符串下结论。
- 多版本对比权限、SDK、endpoint、native libs 和资源路径变化。