宜博 / pixelphone

  • docs(xhshook): update STATUS + fix update_xhshook_db.sh scope handling ...
    cfac4e65 
    - STATUS.md: file index updated to v3 (DEX=6328B, HTTP forwarding), add
  ~/.hermes/event_bus/event_server.py to index
- update_xhshook_db.sh: phase 3 — after checkpoint, verify scope table has
  row for current mid; auto-insert if missing (mid changes after every reinstall,
  missing scope → lspd skips injection silently)
- .gitignore: ignore *.idsig (apksigner side-car, not useful in git)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
    yibo authored
     
    Browse File »
  • feat(xhshook): add POST /xhs_params to event_server + update STATUS ...
    7eff1666 
    - event_server.py: POST /xhs_params receives forwarded XHS edith requests from
  xhshook v3 (Hook.java background thread), stores as type='xhs_request' in events DB;
  GET /xhs_params returns latest N captures for Hermes to query
- Pushed to device ~/.hermes/event_bus/event_server.py
- STATUS.md: reflect v3 state (mid=4, DEX=6328B, HTTP forwarding live), mark task C done,
  add Hermes startup instructions for event_server + xhs_params query

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
    yibo authored
     
    Browse File »
  • docs(xhs_lsposed_a16_fix): 更新 STATUS.md + 修复 update_xhshook_db.sh inode 陷阱 ...
    01a2cf55 
    - STATUS.md：更新至 2026-06-30 00:33 验证通过状态，新增捕获到的额外
  签名 header（x-mini-sig/mua/s1/gid、x-legacy-sid、shield），
  补充 curl HTTP 200 复现验证结果，记录 lspd crash 恢复流程
- update_xhshook_db.sh：改用 Termux Python 原地 UPDATE + wal_checkpoint
  代替 cp/adb push（后者改变 inode，lspd FileObserver 监听旧 inode 不刷缓存）
- STATUS.md "已知不行的路线" 新增 adb push DB 和手动重启 lspd 两条陷阱

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
    yibo authored
     
    Browse File »
  • feat(xhs_lsposed_a16_fix): LSPosed A16 修复 + xhshook 注入 XHS 成功，xy-common-params 捕获完成 ...
    6d30843c 
    修复 LSPosed（JingMatrix/Vector fork）在 Android 16 上 zygote64 崩溃问题，
并完成 xhshook Xposed 模块注入 XHS（com.xingin.xhs），实现 edith.xiaohongshu.com
xy-common-params header 的实时拦截。

A16 崩溃根因：NDK 26 compile-time sizeof(JNINativeInterface) 不包含 Android 16 ART
新增的函数指针，memcpy 截断导致垃圾指针 → zygote 崩溃。
修复：从 env->functions->reserved0 读运行期实际大小，heap-alloc 后 memcpy。

其他修复：
- service.sh 去掉 Android toybox 不支持的 --propagation slave flag
- daemon 入口类名 org.lsposed.lspd.Main → org.matrix.vector.daemon.VectorDaemon

xhshook 踩坑记录：
- APK 必须含 assets/xposed_init（而非根目录），VectorConfigCache 只认这个路径
- adb install 必须加 --no-incremental，Incremental Install marker 破坏 ZipFile 解析
- Xposed API 类不能打进 module DEX，LSPosed 会检查 XposedBridge classloader 一致性

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
    yibo authored
     
    Browse File »