# Roku

状态：active
Platform：android
Package：com.roku.remote
Version：13.8.0.8594117
Opportunity：2026-06-10-the-roku-app-official

## 摘要

- 包类型：xapk，inner APK 数：4
- 引擎 / 框架：native
- SDK 线索：admob, firebase
- Endpoint candidates：80
- 结论口径：本报告只基于静态 ZIP / Manifest / 字符串证据；不代表真实运行路径已验证。

## 直接证据

- [high] Manifest package id is com.roku.remote（source: `AndroidManifest.xml`，status: `verified`）
- [high] Manifest declares 29 permissions（source: `AndroidManifest.xml`，status: `verified`）
- [high] Engine/framework markers: native（source: `APK file inventory`，status: `verified`）
- [high] Static strings include 80 endpoint candidates（source: `Text/string scan`，status: `verified`）
- [high] Package contains 11 native libraries（source: `APK file inventory`，status: `verified`）

## 推断

- [medium] SDK markers suggest: admob, firebase（source: `Manifest, filenames, and text strings`，status: `inferred`）

## 权限和组件

### 权限

- `android.permission.ACCESS_ADSERVICES_AD_ID`
- `android.permission.ACCESS_ADSERVICES_ATTRIBUTION`
- `android.permission.ACCESS_ADSERVICES_TOPICS`
- `android.permission.ACCESS_COARSE_LOCATION`
- `android.permission.ACCESS_NETWORK_STATE`
- `android.permission.ACCESS_WIFI_STATE`
- `android.permission.AD_SERVICES_CONFIG`
- `android.permission.BLUETOOTH`
- `android.permission.BLUETOOTH_CONNECT`
- `android.permission.CAMERA`
- `android.permission.CHANGE_NETWORK_STATE`
- `android.permission.CHANGE_WIFI_MULTICAST_STATE`
- `android.permission.CHANGE_WIFI_STATE`
- `android.permission.DETECT_SCREEN_RECORDING`
- `android.permission.FOREGROUND_SERVICE`
- `android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK`
- `android.permission.INTERNET`
- `android.permission.MODIFY_AUDIO_SETTINGS`
- `android.permission.POST_NOTIFICATIONS`
- `android.permission.READ_EXTERNAL_STORAGE`
- `android.permission.RECORD_AUDIO`
- `android.permission.VIBRATE`
- `android.permission.WAKE_LOCK`
- `android.permission.WRITE_EXTERNAL_STORAGE`
- `android.permission.WRITE_SETTINGS`
- `com.google.android.c2dm.permission.RECEIVE`
- `com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE`
- `com.google.android.gms.permission.AD_ID`
- `com.roku.remote.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION`

### 组件

- Activities：androidx.compose.ui.tooling.PreviewActivity, com.braze.push.NotificationTrampolineActivity, com.braze.ui.BrazeWebViewActivity, com.braze.ui.activities.ContentCardsActivity, com.google.android.gms.ads.AdActivity, com.google.android.gms.ads.NotificationHandlerActivity, com.google.android.gms.ads.OutOfContextTestingActivity, com.google.android.gms.common.api.GoogleApiActivity, com.google.android.play.core.common.PlayCoreDialogWrapperActivity, com.google.android.tv.ads.controls.FallbackImageActivity, com.mikepenz.aboutlibraries.ui.LibsActivity, com.roku.mobile.age.verification.ui.activities.AgeVerificationFailedActivity, com.roku.mobile.epg.ui.EpgActivity, com.roku.mobile.login.ui.SignInActivity, com.roku.mobile.pushnotification.MPNSRedirectActivity, com.roku.mobile.search.ui.SearchActivity, com.roku.mobile.videoplayer.ui.VideoPlayerActivity, com.roku.remote.compliance.ui.AlertDialogActivity, com.roku.remote.feynman.chatbot.ui.ChatBotActivity, com.roku.remote.feynman.detailscreen.ui.ContentDetailActivity, com.roku.remote.feynman.detailscreen.ui.actor.ActorDetailsActivity, com.roku.remote.photocircles.ui.PhotoCirclesActivity, com.roku.remote.remotescreen.ui.RemoteActivity, com.roku.remote.reportissue.ui.ReportIssueActivity, com.roku.remote.ui.activities.BrowseContentActivity, com.roku.remote.ui.activities.LaunchProgressActivity, com.roku.remote.ui.activities.NoWifiActivity
- Services：androidx.camera.core.impl.MetadataHolderService, androidx.room.MultiInstanceInvalidationService, androidx.work.impl.background.systemalarm.SystemAlarmService, androidx.work.impl.background.systemjob.SystemJobService, androidx.work.impl.foreground.SystemForegroundService, com.google.android.datatransport.runtime.backends.TransportBackendDiscovery, com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService, com.google.android.gms.ads.AdService, com.google.android.gms.measurement.AppMeasurementJobService, com.google.android.gms.measurement.AppMeasurementService, com.google.android.gms.metadata.ModuleDependencies, com.google.firebase.components.ComponentDiscoveryService, com.google.firebase.messaging.FirebaseMessagingService, com.google.firebase.sessions.SessionLifecycleService, com.roku.remote.authenticator.service.RokuAuthenticationService, com.roku.remote.notifications.FCMService, com.roku.remote.remoteaudio.RemoteAudio
- Receivers：androidx.profileinstaller.ProfileInstallReceiver, androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy, androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy, androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy, androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy, androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver, androidx.work.impl.background.systemalarm.RescheduleReceiver, androidx.work.impl.diagnostics.DiagnosticsReceiver, androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver, com.braze.BrazeFlushPushDeliveryReceiver, com.braze.push.BrazePushReceiver, com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver, com.google.android.gms.measurement.AppMeasurementReceiver, com.google.firebase.iid.FirebaseInstanceIdReceiver, com.roku.mobile.pushnotification.MPNSRedirectReceiver, com.roku.remote.receivers.PLBroadcastReceiver, com.roku.remote.remoteaudio.AudioHeadphoneEvents, com.roku.remote.widget.WidgetUi
- Providers：androidx.core.content.FileProvider, androidx.startup.InitializationProvider, com.google.android.gms.ads.MobileAdsInitProvider, com.google.firebase.provider.FirebaseInitProvider

## SDK / Endpoint

### SDK

- `admob`
- `firebase`

### Endpoint candidates

- http://www.apache.org/licenses/
- https://android.googlesource.com/platform/frameworks/support
- https://cs.android.com/androidx/platform/frameworks/support
- https://developer.android.com/jetpack/androidx/releases/activity#1.10.0
- https://developer.android.com/jetpack/androidx/releases/annotation#1.9.1
- https://developer.android.com/jetpack/androidx/releases/annotation#1.4.1
- https://developer.android.com/jetpack/androidx/releases/appcompat#1.7.0
- https://developer.android.com/jetpack/androidx/releases/arch-core#2.2.0
- http://source.android.com
- http://developer.android.com/tools/extras/support-library.html
- https://developer.android.com/jetpack/androidx
- https://developer.android.com/jetpack/androidx/releases/browser#1.8.0
- https://developer.android.com/jetpack/androidx/releases/camera-featurecombinationquery#1.5.1
- https://developer.android.com/jetpack/androidx/releases/camera#1.5.1
- https://developer.android.com/jetpack/androidx/releases/collection#1.5.0
- https://developer.android.com/jetpack/androidx/releases/compose-animation#1.10.1
- https://developer.android.com/jetpack/androidx/releases/compose-foundation#1.10.1
- https://developer.android.com/jetpack/androidx/releases/compose-material3#1.4.0
- https://developer.android.com/jetpack/androidx/releases/compose-material#1.10.1
- https://developer.android.com/jetpack/androidx/releases/compose-material#1.7.8
- https://developer.android.com/jetpack/androidx/releases/compose-runtime#1.10.1
- https://developer.android.com/jetpack/androidx/releases/compose-ui#1.10.1
- https://developer.android.com/jetpack
- https://developer.android.com/topic/libraries/architecture/index.html
- https://developer.android.com/jetpack/androidx/releases/constraintlayout#2.2.1
- https://github.com/androidx/constraintlayout
- http://tools.android.com
- https://developer.android.com/jetpack/androidx/releases/constraintlayout#1.1.1
- https://developer.android.com/jetpack/androidx/releases/core#1.16.0
- https://developer.android.com/jetpack/androidx/releases/core#1.1.0-rc01
- https://developer.android.com/jetpack/androidx/releases/core#1.0.0
- https://developer.android.com/jetpack/androidx/releases/customview#1.0.0
- https://developer.android.com/jetpack/androidx/releases/datastore#1.1.7
- https://developer.android.com/jetpack/androidx/releases/emoji2#1.4.0
- https://developer.android.com/jetpack/androidx/releases/exifinterface#1.3.7
- https://developer.android.com/jetpack/androidx/releases/fragment#1.8.9
- https://developer.android.com/jetpack/androidx/releases/graphics#1.0.1
- https://developer.android.com/jetpack/androidx/releases/hilt#1.2.0
- https://developer.android.com/jetpack/androidx/releases/lifecycle#2.9.4
- https://github.com/androidx/media.git

## Warnings

- apktool manifest decode skipped 3 split APK(s)
- binary AndroidManifest.xml decoded with apktool

## 下一步

- 真机/模拟器验证 onboarding、paywall、首个可感知价值和崩溃路径。
- 把 endpoint candidates 与 HAR / MITM / Frida 动态证据对齐，避免只凭静态字符串下结论。
- 多版本对比权限、SDK、endpoint、native libs 和资源路径变化。
- 订阅/广告 SDK 线索存在，后续需拆 paywall、free trial、退款和广告频率。