Decode an APK into a Smali, resources, assets, native-library, and manifest workspace for later analysis or modification. The input APK is read-only, but outputDir is removed and recreated; use analyze_injection_surface next, and do not call this when a valid decoded workspace already exists. Full source decoding requires apktool and Java, while decompileSources=false is limited to resource and manifest inspection.

Read a decoded APK workspace to identify manifest components, ABI coverage, Flutter conflicts, JNI loading evidence, and candidate integration points. This operation is read-only and idempotent; use it after decompile_apk and before choosing an injection mode, not to modify files. Review warnings and evidence before calling inject_flutter_runtime_and_smali or patch_manifest_and_config.

Build a Flutter project into native libraries and flutter_assets for the selected Android ABIs, ready for injection into a decoded workspace. Use it after target ABI analysis and before injection when source Flutter code is available; use an existing validated payload directory instead when artifacts are already built. This invokes the local Flutter SDK and replaces the payload output directory, so expect build time, disk writes, and build diagnostics.

Inject a synthesized Flutter payload and generated Smali bootstrap into a decoded APK workspace after decompile_apk and synthesize_flutter_payload have completed. This mutates workspaceDir by adding libraries, assets, and Smali files; run analyze_injection_surface first when the host lifecycle or ABI compatibility is uncertain. Choose activity_overlay for the supported cached-engine screen path, use direct_application_hook only for a resolvable host Application, and treat view_tree_injection as experimental because it requires a lifecycle-compatible host.

Apply requested Flutter-related component, application, permission, and rendering changes to AndroidManifest.xml in a decoded workspace. Use it only after reviewing the injection surface and generated classes; it mutates the manifest in place, so use analyze_injection_surface instead when only inspection is needed. Review the structured delta before recompilation, especially for application-class, permission, exported-component, or network-security changes.

Build a modified decoded workspace with apktool, align the APK, sign it with apksigner, and verify the resulting signature. Use this as the final packaging step after manifest and Smali validation; it overwrites outputApkPath and creates signing artifacts, so do not call it for read-only inspection. Provide a custom keystore only for an authorized signing workflow; otherwise the result is a debug-signed test artifact, not an update-compatible release by default.

Retrieve Hermes+ persona, loaded skills, live memory summary, and pipeline telemetry

Update active session memory state with notes, identified targets, or patch logs

Search and inspect historical patch logs, register allocations, and decompilation metadata