fix: adapt hooks to HyperOS 3.3 (Android 17)

[mexusbg]

Problem

On HyperOS 3.3 / Android 17 (SDK 37) the module was unusable: the app exited on launch, and once the version gate was lifted a number of SystemUI features were broken or rendered twice.

Most of it traces back to one change: HyperOS 3.3's SystemUI is built with R8 constructor inlining, so several hooked classes have no <init> left in the dex — the constructor body is folded into its caller as new-instance + iput:

.method public final getMiuiOperatorConfig(I)L…$OperatorConfig;
    new-instance v13, L…$OperatorConfig;
    iput-boolean v6, v13, …->hideVolte:Z      ← no invoke-direct <init>

Constructor-based hooks therefore fail — loudly for explicit lookups, and silently for hookAllConstructors, which matches zero targets without logging anything. That silent case is what made the duplicated dual-row signal hard to spot.

Approach

Each rule moves to an equivalent non-constructor entry point. Every new branch is selected by runtime capability detection (declaredConstructors.isNotEmpty(), field/method-name fallbacks, declared-type probes), always attempting the original path first, so behaviour on older releases is unchanged rather than gated on an SDK number.

Fixed

SystemUI

Rule	Cause	Fix
HideVoWiFiIcon, MobileTypeSingle2Hook	OperatorConfig ctor inlined into getMiuiOperatorConfig; constructors[0] threw ArrayIndexOutOfBoundsException(length=0)	hook that method's result
MobilePublicHookV	MiuiCellularIconVM has no ctor, so SIM 2's isVisible was never replaced and the dual row was drawn once per mobile view	handle in MiuiMobileIconBinder#bind; resolve subId via subscriptionId
MobileTypeSingle2Hook	same, plus bind passes a MiuiMobileIconVMImpl wrapper whose flows are cold ChannelFlowTransformLatest	unwrap to the inner VM
StateFlowHelper	ReadonlyStateFlow.$$delegate_0 is declared StateFlow again, so the exact-type MutableStateFlow lookup missed	fall back to StateFlow
JavaAdapter	alwaysCollectFlow(Flow, Consumer) now returns void; casting to a non-null Job threw NPE and collection never started	use the static overload with applicationScope when the instance method is void
StatusBarIcon	block lists are public static final and reject reflective writes, aborting init()	lists are already mutated in place, so the write-back is no longer fatal
PluginFactory	mComponentName renamed to componentName; the throw was swallowed into "Failed to create plugin context.", silently disabling every miui.systemui.plugin feature	try both names; NewPluginHelperKt now logs the throwable

Launcher

WorkspacePadding picked its class with versionCode < 600000000 ? NEW : OLD, inverted with respect to the @Version(min = 600000000) mapping used by the other home rules, so recent launchers resolved a class that no longer declares getWorkspaceCellPadding*. It now picks whichever class actually declares the getters instead of trusting a version code, and handles the Init → init rename.

Graceful skips

These targets are simply absent from the ROM, so they now skip with a debug line instead of throwing:

• RemoveSIMLockSuccessDialog — com.miui.simlock is not in the global Security Center build
• DisableThemeAdNew — the built-in ad model was replaced by third-party SDKs
• AllowThirdTheme, DisableUploadAppListNew — DexKit anchor strings are gone; optionalMember skips a miss instead of throwing
• VariousThirdApps — android.os.Build's final fields cannot be written reflectively on Android 17 (clearing Field.accessFlags does not help either, as finality is enforced below that mirror), so it reports an unsupported-platform warning rather than an error

Also adds Android 17 / HyperOS 3.3 to the supported version list as SUPPORT_PARTIAL.

Behaviour changes worth reviewing

• StateFlowHelper.resolveDelegateFlow and JavaAdapter.startCollect return null on lookup failure instead of throwing, so callers no-op rather than aborting. JavaAdapter.alwaysCollectFlow is consequently KotlinJob?.
• AllowThirdTheme / DisableUploadAppListNew no longer surface "Skip hook because initDexKit failed"; the hook is skipped just as before, only quietly.

Testing

Verified on a Xiaomi nezha_eea (2512BPNDAG), Android 17 / HyperOS OS3.0.332.0.XPAEUXM, SDK 37, LSPosed (KernelSU).

• module launches; VoLTE/VoWiFi hiding confirmed via MiuiOperatorCustomizedPolicy dumping hideVolte=true, hideVowifi=true for every slot
• dual-row signal renders once, with per-SIM levels cross-checked against dumpsys telephony.registry (miuiLevel → icon level) and confirmed to track each SIM independently
• launcher, Security Center, Theme Store, Camera, Settings, Gallery, Notes restarted and swept: no Hook Failed, Class not found, Skip hook or plugin-context errors remain
• assembleDebug passes

Not tested on OS 2.x / OS 3.0 hardware — the compatibility argument there rests on the old path being attempted first in every branch, which is worth a second pair of eyes.

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 44 complexity

Metric	Results
Complexity	44

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}