feat(android): add IME, software keyboard, and stroke input

.github/workflows/android-apk.yml

@@ -4,6 +4,8 @@ name: Android APK (debug)
 #   - push v*-tauri tag → signed release APK + minisign + updater manifest → GitHub Release
 #   - workflow_dispatch → signed release APK when ANDROID_KEYSTORE_* secrets exist
 #     (overlay install + user data preserved); otherwise unsigned debug APK (annotated, non-blocking)
+#   - workflow_dispatch + signed_debug=true — debug APK signed with the release
+#     keystore (when secrets exist); artifact remains openless-android-debug-*.
 #
 # #1103 build-time changes:
 #   - Do not wipe Cargo/Gradle/target before cache post-save (removed Free disk step).
@@ -26,8 +28,12 @@ on:
         description: 'Dispatch-only fast release profile (no LTO, codegen-units=16). Ignored on tags.'
         type: boolean
         default: false
+      signed_debug:
+        description: 'Build debug mode but sign it with the release keystore (requires ANDROID_KEYSTORE_* secrets).'
+        type: boolean
+        default: false
 
-# 同一 tag 重复推送只跑最新一次；workflow_dispatch 用 run_id 隔离避免互相取消。
+# 同一 tag 重复推送只跑最新一次；手动构建按 run_id 隔离。
 concurrency:
   group: ${{ github.workflow }}-${{ github.event_name == 'workflow_dispatch' && github.run_id || github.ref }}
   cancel-in-progress: ${{ github.event_name == 'push' }}
@@ -62,6 +68,7 @@ jobs:
           ANDROID_KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
           ANDROID_KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
           ANDROID_KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }}
+          INPUT_SIGNED_DEBUG: ${{ github.event.inputs.signed_debug }}
         run: |
           set -euo pipefail
           is_tag=false
@@ -89,6 +96,11 @@ jobs:
             echo "label=${{ github.ref_name }}" >> "$GITHUB_OUTPUT"
             echo "signing=tag-release" >> "$GITHUB_OUTPUT"
             echo "signing_label=Tag release with release keystore" >> "$GITHUB_OUTPUT"
+          elif [[ "${INPUT_SIGNED_DEBUG:-false}" == "true" ]] && $has_keystore; then
+            echo "mode=debug" >> "$GITHUB_OUTPUT"
+            echo "label=signed-debug-run-${{ github.run_number }}" >> "$GITHUB_OUTPUT"
+            echo "signing=signed-debug" >> "$GITHUB_OUTPUT"
+            echo "signing_label=Manual dispatch debug APK signed with release keystore" >> "$GITHUB_OUTPUT"
           elif $has_keystore; then
             echo "mode=release" >> "$GITHUB_OUTPUT"
             echo "label=dispatch-run-${{ github.run_number }}" >> "$GITHUB_OUTPUT"
@@ -100,6 +112,9 @@ jobs:
             echo "signing=debug-fallback" >> "$GITHUB_OUTPUT"
             echo "signing_label=Unsigned debug fallback (no keystore secrets)" >> "$GITHUB_OUTPUT"
             echo "::notice title=Unsigned debug APK::ANDROID_KEYSTORE_* secrets not configured. Building debug APK without release signing. Overlay install and user data preservation require the release keystore; uninstall before installing if replacing a signed build."
+            if [[ "${INPUT_SIGNED_DEBUG:-false}" == "true" ]]; then
+              echo "::warning::signed_debug was requested but Android keystore secrets are incomplete; falling back to an unsigned debug APK."
+            fi
           fi
 
       - name: Resolve ABI matrix
@@ -286,13 +301,15 @@ jobs:
         run: node scripts/merge-android-updater-manifest.mjs
 
       - name: Configure Android release signing
-        if: needs.plan.outputs.mode == 'release'
+        if: needs.plan.outputs.mode == 'release' || needs.plan.outputs.signing == 'signed-debug'
         working-directory: openless-all/app
         env:
           ANDROID_KEYSTORE_BASE64: ${{ secrets.ANDROID_KEYSTORE_BASE64 }}
           ANDROID_KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
           ANDROID_KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
           ANDROID_KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }}
+          # signed_debug: also wire debug buildType to the release keystore
+          OPENLESS_SIGN_DEBUG: ${{ needs.plan.outputs.signing == 'signed-debug' && 'true' || 'false' }}
         run: node scripts/configure-android-release-signing.mjs
 
       - name: Prime Gradle wrapper
@@ -313,6 +330,10 @@ jobs:
       - name: Build Android debug APK
         if: needs.plan.outputs.mode == 'debug'
         working-directory: openless-all/app
+        env:
+          ANDROID_KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
+          ANDROID_KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
+          ANDROID_KEY_PASSWORD: ${{ secrets.ANDROID_KEY_PASSWORD }}
         run: npm run tauri:android:build:debug
 
       - name: Build Android release APK
@@ -378,6 +399,10 @@ jobs:
             cat >> "$GITHUB_STEP_SUMMARY" << 'EOF'
           > **Signed release APK** (manual dispatch). Same keystore as tag releases — supports overlay install and preserves user data when upgrading from an existing signed install.
           EOF
+          elif [ "${{ needs.plan.outputs.signing }}" = "signed-debug" ]; then
+            cat >> "$GITHUB_STEP_SUMMARY" << 'EOF'
+          > **Signed debug APK** (manual dispatch). Debug mode is retained for diagnostics; the release keystore is used so `adb install -r` can upgrade the matching signed app without changing the debug artifact name.
+          EOF
           fi
 
   publish-android-release:
@@ -528,3 +553,4 @@ jobs:
           append_body: true
           body_path: ${{ runner.temp }}/android-release-body.md
           files: ${{ steps.release_assets.outputs.files }}
+

.gitignore

@@ -85,6 +85,10 @@ docs/plans/
 /AGENTS.md
 /issue-*-plan.md
 
+# 本地会话记录（Claude Code 对话存档），仅供本人下次取用，不入库
+/SESSION_NOTES.md
+/SESSION_TRANSCRIPT.jsonl
+
 # .github 内部协作 + 审计报告（ISSUE_TEMPLATE / workflows / pr template 仍保留发布）
 .github/COOPER_*.md
 .github/BUILD_TEST_REPORT.md

README.zh.md

@@ -204,6 +204,8 @@ OpenLess 只做一件事:**把语音变成可用的书面文字(尤其是 AI 提
 
 ## 当前状态
 
+本 Fork 的 Android 输入法架构、四个面板的使用说明、截图和从 fork 基线开始的功能时间线，见 [Android 输入法：架构、功能与 fork 演进](docs/android-ime.md)。
+
 下面每一项,都是一层已经沉降为默认、你授权一次之后就不必再操心的能力——这就是开屏之后你所站立的基础设施:
 
 - 共享 Rust 后端位于 `openless-core`。macOS 与 Windows 使用薄 Tauri 2 宿主和 React/TypeScript 前端；Android 暂时保留 Tauri mobile 宿主；Linux 使用独立原生宿主，不编译 Tauri 或 WebKitGTK。

docs/android-ime.md

@@ -0,0 +1,59 @@
+# OpenLess Android IME：架构、功能与 fork 演进
+
+这份页面记录 Android 输入法分支从 `beta` fork 基线到当前实现的功能演进，并把界面截图与实际源码入口对应起来。它描述的是当前代码状态，不把构建成功等同于完整真机验收。
+
+## 当前架构
+
+用户操作进入 `OpenLessImeService`，它提供语音、笔画、剪贴板和英文四个输入面板，并通过 Android `InputConnection` 将结果提交到当前应用。Rust/Tauri 负责 ASR、AI 处理和共享后端；`OpenLessRuntimeService` 作为 `START_STICKY` 前台运行时监督器持有 JNI Activity Context；`OpenLessBackendWarmupActivity` 承载 Tauri/WebView 设置页与启动入口。
+
+主要源码入口：
+
+- `openless-all/app/android/kotlin/OpenLessImeService.kt`：四面板切换、语音生命周期、剪贴板/英文面板与跨面板 UI 基础设施。
+- `openless-all/app/android/kotlin/StrokeInputController.kt`：笔画编码、候选/联想查询与提交、数字符号子面板；这是 2026-09-24 完成的第一处面板拆分。
+- `openless-all/app/android/kotlin/OpenLessRuntimeService.kt`：运行时守护和 JNI Context 挂载。
+- `openless-all/app/android/kotlin/OpenLessBackendWarmupActivity.kt`：Tauri host、设置页和 WebView 冷启动恢复。
+- `openless-all/app/src-tauri/src/android/native_bridge.rs`：Rust ↔ Kotlin JNI 桥接。
+
+## 已实现的 Android 输入能力
+
+- 语音输入：录音、取消、原文/整理模式、波形/状态反馈，并通过 `commitText()` 写入当前光标位置。
+- 笔画输入：离线笔画字典、单字候选、确认后的词语联想、分词、简繁偏好、数字/符号面板、上滑数字和个人词频。
+- 剪贴板：历史记录、收藏/删除/分类、选择/复制/粘贴、纠正词写入全局词典。
+- 英文键盘：字母/数字/符号三层布局、英文候选词、个人词频、自定义词长按删除、按键预览和上滑输入数字/符号。
+- 跨应用插入：按可用性使用无障碍、Shizuku 或剪贴板回退；权限和输入法启用状态在 Android 侧单独管理。
+
+## 2026-09-11 至 2026-09-24 的演进
+
+`615d6ac4` 是 fork 后开发使用的 `beta` 基线，`0bc3a979` 是第一笔 Android IME 实现。之后的提交按功能阶段演进：
+
+1. IME 服务骨架与四面板交互。
+2. 笔画字典、索引、候选排序、联想、多编码、分词、简繁和个人词频。
+3. 剪贴板历史、纠正词桥接、英文键盘、候选词和手势预览。
+4. Runtime Service、Activity 生命周期、JNI Context、WebView 黑屏/冷启动恢复和重启诊断。
+5. 2026-09-23 至 24：英文上滑数字/符号和长按删词；候选 View 复用；联想词典预热、缓存和 Trie 建索引优化；新增 `StrokeInputController`。
+
+完整提交时间线可用以下命令复核：
+
+```text
+git log --reverse --format='%h %ad %s' --date=short 615d6ac4..HEAD
+```
+
+## 截图与使用说明
+
+![OpenLess Android 架构与使用指南](images/android-ime/android-architecture-guide.png)
+
+| 面板 | 截图 |
+| --- | --- |
+| 语音：待机、录音、思考 | ![语音待机](images/android-ime/voice-idle-green.jpg) ![录音](images/android-ime/voice-recording-red.jpg) ![思考](images/android-ime/voice-thinking.jpg) |
+| 笔画：中文与数字/符号 | ![中文笔画](images/android-ime/stroke-chinese.jpg) ![数字面板](images/android-ime/stroke-numeric.jpg) |
+| 剪贴板与英文 | ![剪贴板](images/android-ime/clipboard.jpg) ![英文键盘](images/android-ime/english.jpg) |
+
+## 小米/Redmi 真机边界
+
+现有开发记录确认 APK 已安装到包含小米设备在内的测试设备；但候选栏复用、控制器拆分和英文/笔画手势仍需要完整真机回归。正式发布前应继续覆盖：正常输入、分词联想、退格、数字/符号切换、简繁切换、跨键滑动、后台恢复、Activity 被系统回收后的冷启动，以及不同 OEM 的插入权限路径。
+
+## 相关文档
+
+- [Android 源码架构与开发记录](../openless-all/app/android/README.md)
+- [根 README 的 Android 状态说明](../README.md#android-input-method)
+- [Android 架构总览](architecture.md)

openless-all/app/android/README.md

@@ -40,6 +40,10 @@ Manifest 合并脚本：
 - [`scripts/merge-android-shizuku-manifest.mjs`](../scripts/merge-android-shizuku-manifest.mjs) — Shizuku Provider / 授权 Activity
 - [`scripts/patch-android-shizuku-deps.mjs`](../scripts/patch-android-shizuku-deps.mjs) — Shizuku Gradle 依赖
 
+### 轻量拼音输入（Pinyin，可选模式）
+
+英文键盘长按空格可在英文 / 拼音之间切换。拼音模式为离线精确匹配查找（单字全拼 + 高频简拼词语），不含 NDK / JNI / librime / 语言模型，不新增联网权限。核心类：`LitePinyinController`（编码缓冲 + 查询）、`LitePinyinRepository`（词库索引 + 排序）、`LitePinyinUserFrequency`（本地选择频率）。词库资源 `android/assets/pinyin_chars.tsv`（约 8105 字）与 `pinyin_phrases.tsv`（约 2000 词），由 [`scripts/generate-pinyin-characters.mjs`](../scripts/generate-pinyin-characters.mjs) / [`scripts/generate-pinyin-phrases.mjs`](../scripts/generate-pinyin-phrases.mjs) 从三方开源数据生成，来源、版本与许可证见同目录下的 `pinyin_chars.LICENSE.txt` / `pinyin_phrases.LICENSE.txt`。
+
 ## 前端（`android/frontend/`，别名 `@android`）
 
 | 路径 | 职责 |

openless-all/app/android/assets/english-frequency.LICENSE.txt

@@ -0,0 +1,17 @@
+english-frequency.tsv — attribution and license
+================================================
+
+Source: hermitdave/FrequencyWords
+        https://github.com/hermitdave/FrequencyWords
+        content/2018/en/en_50k.txt (English, OpenSubtitles-2018 corpus)
+
+License: MIT License, Copyright (c) 2016 Hermit Dave. Full text:
+        https://github.com/hermitdave/FrequencyWords/blob/master/LICENSE
+
+Generation: this repo's scripts/generate-english-dictionary.mjs filters the
+source list to plain lowercase English words (rejecting subtitle-tokenizer
+contraction fragments such as "'s"/"n't", numbers, and non-letter tokens),
+keeps the top 20,000 by frequency, and writes them as tab-separated
+"word<TAB>count" rows sorted by descending frequency. No runtime code in
+OpenLess downloads, modifies, or redistributes the original source files —
+only this generated, filtered derivative ships in the app.