# Persona

状态：active
Platform：android
Package：com.tickettothemoon.persona
Version：1.7.49
Opportunity：2026-06-10-persona-ai-beauty-editor

## 摘要

- 包类型：xapk，inner APK 数：3
- 引擎 / 框架：native
- SDK 线索：appsflyer, facebook, firebase, mixpanel, revenuecat
- Endpoint candidates：80
- 结论口径：本报告只基于静态 ZIP / Manifest / 字符串证据；不代表真实运行路径已验证。

## 直接证据

- [high] Manifest package id is com.tickettothemoon.persona（source: `AndroidManifest.xml`，status: `verified`）
- [high] Manifest declares 25 permissions（source: `AndroidManifest.xml`，status: `verified`）
- [high] Engine/framework markers: native（source: `APK file inventory`，status: `verified`）
- [high] Static strings include 80 endpoint candidates（source: `Text/string scan`，status: `verified`）
- [high] Package contains 38 native libraries（source: `APK file inventory`，status: `verified`）

## 推断

- [medium] SDK markers suggest: appsflyer, facebook, firebase, mixpanel, revenuecat（source: `Manifest, filenames, and text strings`，status: `inferred`）

## 权限和组件

### 权限

- `android.permission.ACCESS_ADSERVICES_AD_ID`
- `android.permission.ACCESS_ADSERVICES_ATTRIBUTION`
- `android.permission.ACCESS_ADSERVICES_CUSTOM_AUDIENCE`
- `android.permission.ACCESS_ADSERVICES_TOPICS`
- `android.permission.ACCESS_NETWORK_STATE`
- `android.permission.ACCESS_WIFI_STATE`
- `android.permission.CAMERA`
- `android.permission.FOREGROUND_SERVICE`
- `android.permission.INTERNET`
- `android.permission.POST_NOTIFICATIONS`
- `android.permission.READ_EXTERNAL_STORAGE`
- `android.permission.READ_MEDIA_IMAGES`
- `android.permission.READ_MEDIA_VIDEO`
- `android.permission.READ_MEDIA_VISUAL_USER_SELECTED`
- `android.permission.READ_PHONE_STATE`
- `android.permission.RECEIVE_BOOT_COMPLETED`
- `android.permission.RECORD_AUDIO`
- `android.permission.VIBRATE`
- `android.permission.WAKE_LOCK`
- `android.permission.WRITE_EXTERNAL_STORAGE`
- `com.android.vending.BILLING`
- `com.google.android.c2dm.permission.RECEIVE`
- `com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE`
- `com.google.android.gms.permission.AD_ID`
- `com.tickettothemoon.persona.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION`

### 组件

- Activities：com.android.billingclient.api.ProxyBillingActivity, com.android.billingclient.api.ProxyBillingActivityV2, com.canhub.cropper.CropImageActivity, com.facebook.CustomTabActivity, com.facebook.CustomTabMainActivity, com.facebook.FacebookActivity, com.google.android.gms.auth.api.signin.internal.SignInHubActivity, com.google.android.gms.common.api.GoogleApiActivity, com.google.android.play.core.common.PlayCoreDialogWrapperActivity, com.mixpanel.android.mpmetrics.MixpanelNotificationRouteActivity, com.revenuecat.purchases.amazon.purchasing.ProxyAmazonBillingActivity, com.tickettothemoon.persona.ui.MainActivity, io.appmetrica.analytics.push.internal.activity.AppMetricaPushDummyActivity
- Services：androidx.camera.core.impl.MetadataHolderService, androidx.room.MultiInstanceInvalidationService, androidx.work.impl.background.systemjob.SystemJobService, androidx.work.impl.foreground.SystemForegroundService, com.google.android.datatransport.runtime.backends.TransportBackendDiscovery, com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService, com.google.android.gms.auth.api.signin.RevocationBoundService, com.google.android.gms.measurement.AppMeasurementJobService, com.google.android.gms.measurement.AppMeasurementService, com.google.firebase.components.ComponentDiscoveryService, com.google.firebase.messaging.FirebaseMessagingService, com.google.mlkit.common.internal.MlKitComponentDiscoveryService, com.tickettothemoon.core.notifications.MessagingService, io.appmetrica.analytics.internal.AppMetricaService, io.appmetrica.analytics.push.internal.service.PushJobService, io.appmetrica.analytics.push.internal.service.PushService
- Receivers：androidx.profileinstaller.ProfileInstallReceiver, androidx.work.impl.background.systemalarm.RescheduleReceiver, androidx.work.impl.diagnostics.DiagnosticsReceiver, androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver, com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver, com.facebook.CurrentAccessTokenExpirationBroadcastReceiver, com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver, com.google.android.gms.measurement.AppMeasurementReceiver, com.google.firebase.iid.FirebaseInstanceIdReceiver, com.mixpanel.android.mpmetrics.MixpanelPushNotificationDismissedReceiver, com.tickettothemoon.core.notifications.SilentPushReceiver, io.appmetrica.analytics.push.internal.receiver.AppMetricaPushBroadcastReceiver, io.appmetrica.analytics.push.internal.receiver.AppMetricaPushNotificationStatusChangeHandler, io.appmetrica.analytics.push.internal.receiver.TtlBroadcastReceiver
- Providers：androidx.startup.InitializationProvider, com.canhub.cropper.CropFileProvider, com.facebook.internal.FacebookInitProvider, com.flurry.android.agent.FlurryContentProvider, com.google.firebase.provider.FirebaseInitProvider, com.google.mlkit.common.internal.MlKitInitProvider, com.tickettothemoon.persona.ExtFileProvider, io.appmetrica.analytics.internal.PreloadInfoContentProvider, pl.aprilapps.easyphotopicker.EasyImageFileProvider

## SDK / Endpoint

### SDK

- `appsflyer`
- `facebook`
- `firebase`
- `mixpanel`
- `revenuecat`

### Endpoint candidates

- http://www.apache.org/licenses/
- https://gateway.gradient.host/api/photo/upload
- https://prod.cerberus.gradient.host/api/photo/process?photo_uuid=%7Bphoto_id%7D&model=body-retouch&label=iron_clothe_kitsune_0
- https://prod.cerberus.gradient.host/api/photo/exec?model=body-retouch&label=iron_clothe_kitsune_0
- https://gradient.site/remote/editor/previews/iron_clothes.jpg?v=1
- https://gradient.site/persona/banners/doston/iron_clothes_before.jpg
- https://gradient.site/persona/banners/doston/iron_clothes_after.jpg
- https://prod.cerberus.gradient.host/api/photo/process?photo_uuid=%7Bphoto_id%7D&model=body-retouch&label=iron_clothe_kitsune_v2_0
- https://prod.cerberus.gradient.host/api/photo/exec?model=body-retouch&label=iron_clothe_kitsune_v2_0
- https://gradient.site/remote/editor/previews/iron_clothes_2.jpg?v=1
- https://gradient.site/persona/banners/doston/iron_clothes_2_before.jpg
- https://gradient.site/persona/banners/doston/iron_clothes_2_after.jpg
- https://prod.cerberus.gradient.host/api/photo/process?photo_uuid=%7Bphoto_id%7D&model=body-retouch&label=clothes_contrast_kitsune_aw_1.3_ns_30_gs_2.5_0
- https://prod.cerberus.gradient.host/api/photo/exec?model=body-retouch&label=clothes_contrast_kitsune_aw_1.3_ns_30_gs_2.5_0
- https://gradient.site/remote/editor/previews/clothes_contrast_1.jpg?v=1
- https://gradient.site/persona/banners/doston/clothes_contrast_1_before.jpg
- https://gradient.site/persona/banners/doston/clothes_contrast_1_after.jpg
- https://prod.cerberus.gradient.host/api/photo/process?photo_uuid=%7Bphoto_id%7D&model=body-retouch&label=clothes_contrast_anastasia_v2_aw_1.3_ns_30_gs_2.5_0
- https://prod.cerberus.gradient.host/api/photo/exec?model=body-retouch&label=clothes_contrast_anastasia_v2_aw_1.3_ns_30_gs_2.5_0
- https://gradient.site/remote/editor/previews/clothes_contrast_2.jpg?v=1
- https://gradient.site/persona/banners/doston/clothes_contrast_2_before.jpg
- https://gradient.site/persona/banners/doston/clothes_contrast_2_after.jpg
- https://prod.cerberus.gradient.host/api/photo/process?photo_uuid=%7Bphoto_id%7D&model=body-retouch&label=clothes_contrast_anastasia_v1_aw_1.3_ns_30_gs_2.5_0
- https://prod.cerberus.gradient.host/api/photo/exec?model=body-retouch&label=clothes_contrast_anastasia_v1_aw_1.3_ns_30_gs_2.5_0
- https://gradient.site/remote/editor/previews/clothes_contrast_3.jpg?v=1
- https://gradient.site/persona/banners/doston/clothes_contrast_3_before.jpg
- https://gradient.site/persona/banners/doston/clothes_contrast_3_after.jpg
- https://prod.cerberus.gradient.host/api/photo/process?photo_uuid=%7Bphoto_id%7D&model=body-retouch&label=clothes_glow_anastasia_v1_aw_1.3_ns_30_gs_2.5_0
- https://prod.cerberus.gradient.host/api/photo/exec?model=body-retouch&label=clothes_glow_anastasia_v1_aw_1.3_ns_30_gs_2.5_0
- https://gradient.site/remote/editor/previews/clothes_glow_1.jpg?v=1
- https://gradient.site/persona/banners/doston/clothes_glow_1_before.jpg
- https://gradient.site/persona/banners/doston/clothes_glow_1_after.jpg
- https://prod.cerberus.gradient.host/api/photo/process?photo_uuid=%7Bphoto_id%7D&model=body-retouch&label=retouch_body_anastasia_v4_aw_1.3_ns_30_gs_2.5_0
- https://prod.cerberus.gradient.host/api/photo/exec?model=body-retouch&label=retouch_body_anastasia_v4_aw_1.3_ns_30_gs_2.5_0
- https://gradient.site/remote/editor/previews/body_beauty_3.jpg?v=2
- https://gradient.site/persona/banners/doston/body_beauty_3_before.jpg?v=2
- https://gradient.site/persona/banners/doston/body_beauty_3_after.jpg?v=2
- https://prod.cerberus.gradient.host/api/photo/process?photo_uuid=%7Bphoto_id%7D&model=body-retouch&label=retouch_body_anastasia_v3_aw_1.3_ns_30_gs_2.5_0
- https://prod.cerberus.gradient.host/api/photo/exec?model=body-retouch&label=retouch_body_anastasia_v3_aw_1.3_ns_30_gs_2.5_0
- https://gradient.site/remote/editor/previews/body_beauty_2.jpg?v=2

## Warnings

- apktool manifest decode skipped 2 split APK(s)
- binary AndroidManifest.xml decoded with apktool

## 下一步

- 真机/模拟器验证 onboarding、paywall、首个可感知价值和崩溃路径。
- 把 endpoint candidates 与 HAR / MITM / Frida 动态证据对齐，避免只凭静态字符串下结论。
- 多版本对比权限、SDK、endpoint、native libs 和资源路径变化。
- 订阅/广告 SDK 线索存在，后续需拆 paywall、free trial、退款和广告频率。