fix(android): load KMP files from app-external sources by jahorton · Pull Request #16392 · keymanapp/keyman

jahorton · 2026-08-17T20:42:11Z

This PR provides two main services:

It allows on-device KMP file providers (such as Chrome downloads or the local Files app) to smoothly pass those KMP files into Keyman for Android for installation.
It also removes wildcard-host http / https deep-links from the app manifest, as these are invalid.

Relates-to: #14854

Upon my investigation into related documentation, I've determined that with current versions of Android, setting up a general, "anywhere on the web" deep link for KMP files is not supported and should not be attempted.

How, then, do we facilitate external apps passing off KMP links or files to Keyman for Android? Turns out... we've already done the work for downloaded files with file: and content: scheme deep-links. The issue is that some of our permissions-checking code logic was bad. With a little work to correct them - removing the bad checks that never should have existed anyway - the files load nicely!

Build-bot: skip release:android

Notes: upon reviewing #10133 and #14122, it sounds like there may be variance among devices. Samsung is likely to be trickier to handle, while Google devices using plain Chrome may be more straightforward. I may need to alter the user tests accordingly.

User Testing

GROUP_API_28: Perform these tests on devices with Android API 28 (Android 9).
GROUP_API_30: Perform these tests on devices with Android API 30 (Android 11).
GROUP_API_33: Perform these tests on devices with Android API 33+ (Android 13).

TEST_DOWNLOAD_AND_INSTALL: Using Keyman for Android, download a KMP from within the Chrome app, then install it from Chrome's download section.

Navigate to https://jahorton.github.io and click the english_punct_rota.kmp link in order to download the file.
Once downloaded, go to the download section (if not displayed) and tap on the downloaded file.
Verify that Keyman for Android launches and opens the package installer without displaying an error or alert.
Install the package and verify that no errors result.

TEST_INSTALL_VIA_FILES: Using Keyman for Android, download a KMP from within the Chrome app, then install it from the device's Files app.

Navigate to https://jahorton.github.io and click the gesture_prototyping.kmp link in order to download the file.
Once downloaded, exit Chrome and use the device's Files app to find and "open" the downloaded file.
Verify that Keyman for Android launches and opens the package installer without displaying an error or alert.
Install the package and verify that no errors result.

This PR provides two main services: - It allows on-device KMP file providers (such as Chrome downloads or the local Files app) to smoothly pass those KMP files into Keyman for Android for installation. - It also removes wildcard-host http / https deep-links from the app manifest, as these are invalid. Fixes: #14854 Fixes: #10133 Upon my investigation into related documentation, I've determined that with current versions of Android, setting up a general, "anywhere on the web" deep link for KMP files is not supported and should not be attempted. How, then, do we facilitate external apps passing off KMP links or files to Keyman for Android? Turns out... we've already done the work for downloaded files with `file:` and `content:` scheme deep-links. The issue is that some of our permissions-checking code logic was bad. With a little work to correct them - removing the bad checks that never should have existed anyway - the files load nicely! Build-bot: skip release:android

keymanapp-test-bot · 2026-08-17T20:42:34Z

User Test Results

Test specification and instructions

✅ GROUP_API_28: Perform these tests on devices with Android API 28 (Android 9).
2 tests PASSED
- ✅ TEST_DOWNLOAD_AND_INSTALL (PASSED) (notes)
- ✅ TEST_INSTALL_VIA_FILES (PASSED) (notes)
✅ GROUP_API_30: Perform these tests on devices with Android API 30 (Android 11).
2 tests PASSED
- ✅ TEST_DOWNLOAD_AND_INSTALL (PASSED) (notes)
- ✅ TEST_INSTALL_VIA_FILES (PASSED) (notes)
✅ GROUP_API_33: Perform these tests on devices with Android API 33+ (Android 13).
2 tests PASSED
- ✅ TEST_DOWNLOAD_AND_INSTALL (PASSED) (notes)
- ✅ TEST_INSTALL_VIA_FILES (PASSED) (notes)

Test Artifacts

Android

mcdurdin · 2026-08-18T05:22:12Z

Trying to install a .kmp on my phone from Samsung files gives an error

mcdurdin · 2026-08-18T06:54:29Z

I tested downloading a file from Chrome on my Samsung Galaxy A553 5G on Android 16 (One UI 8.0), Chrome version 151.0.7922.137 (11 Aug 2026). It worked fine -- Keyman appeared on the list of available apps to open the .kmp file, and no errors were encountered.

Samsung Files continues to fail with the error as shown above. 'Files by Google' works fine -- so suggest we recommend that as an alternative file manager on Samsung devices.

Test Results

GROUP_API_28:

Test Specs

Pixel 3a XL, API 28 (Android 9)
keyman-19.0.268-alpha-test-16392.apk

TEST_DOWNLOAD_AND_INSTALL (PASSED):

Navigate to https://jahorton.github.io and download the english_punct_rota.kmp file
Once downloaded -> Open the file location -> Tap on the downloaded file -> Allow "Full Access to Files"
VERIFIED: Keyman for Android launches and opens the package installer without displaying an error or alert
Follow through the installation dialogs of the keyboard package
VERIFIED: No errors result. Dictionary installed alongside the keyboard.
Typing and predictive text work as expected.

TEST_INSTALL_VIA_FILES (PASSED):

Navigate to https://jahorton.github.io and download the gesture_prototyping.kmp file
Once downloaded -> Open the File app -> Tap on the downloaded file
VERIFIED: Keyman for Android launches and opens the package installer without displaying an error or alert
Follow through the installation dialogs of the keyboard package
VERIFIED: No errors result. Dictionary installed alongside the keyboard.
Typing and predictive text work as expected.

GROUP_API_30:

Test Specs

Pixel 5, API 30 (Android 11)
keyman-19.0.268-alpha-test-16392.apk

TEST_DOWNLOAD_AND_INSTALL (PASSED):

Navigate to https://jahorton.github.io and download the english_punct_rota.kmp file.
Once downloaded -> Open the file location -> Tap on the downloaded file -> Receive an error about "Storage Permission"
Go to Android Settings -> Permission Manager -> Files and media permission -> Allow files and media only for Keyman
Tap on the downloaded file
VERIFIED: Keyman for Android launches and opens the package installer without displaying an error or alert
Follow through the installation dialogs of the keyboard package
VERIFIED: No errors result. Dictionary installed alongside the keyboard.
Typing and predictive text work as expected.

TEST_INSTALL_VIA_FILES (PASSED):

Navigate to https://jahorton.github.io and download the gesture_prototyping.kmp file
Once downloaded -> Open the File app -> Tap on the downloaded file
VERIFIED: Keyman for Android launches and opens the package installer without displaying an error or alert
Follow through the installation dialogs of the keyboard package
VERIFIED: No errors result. Dictionary installed alongside the keyboard.
Typing and predictive text work as expected.

GROUP_API_33:

Test Specs

Pixel 6a, API 33 (Android 13.0)
keyman-19.0.268-alpha-test-16392.apk

TEST_DOWNLOAD_AND_INSTALL (PASSED):

Launch and Exit Keyman
Navigate to https://jahorton.github.io and download the english_punct_rota.kmp file.
Once downloaded -> Open the file location -> Tap on the downloaded file
VERIFIED: Keyman for Android launches and opens the package installer without displaying an error or alert
Follow through the installation dialogs of the keyboard package
VERIFIED: No errors result. Dictionary installed alongside the keyboard.
Predictive text and typing work as expected.

TEST_INSTALL_VIA_FILES (PASSED):

Navigate to https://jahorton.github.io and download the english_punct_rota.kmp file.
Once downloaded -> Open the "File" -> Tap on the downloaded file
VERIFIED: Keyman for Android launches and opens the package installer without displaying an error or alert
Follow through the installation dialogs of the keyboard package
VERIFIED: No errors result. Dictionary installed alongside the keyboard
Predictive text and typing work as expected.

ghost · 2026-08-20T04:29:28Z

Hello, @jahorton. Could you help confirm the steps for the TEST_INSTALL_VIA_FILES are the same as TEST_DOWNLOAD_AND_INSTALL?

ghost · 2026-08-20T13:32:15Z

Hello, @jahorton. Could you help confirm the steps for the TEST_INSTALL_VIA_FILES are the same as TEST_DOWNLOAD_AND_INSTALL?

Sorry about that. I've updated the instructions for that test now.

Build-bot: skip release:android

…ep-links

ghost · 2026-09-03T14:23:24Z

Oops, merged the (approved) child PR into this one, rather than this into master, then that into master. Almost redid the split, but I managed to reverse the changes.

(Interesting that there's no second force-push entry shown here for when I put things back to abb2b82.)

ghost

If all user tests pass, we can go ahead but I feel like there's still some ambiguity here

ghost · 2026-09-05T04:40:08Z

        <category android:name="android.intent.category.DEFAULT" />

        <data android:scheme="file" />
+        <data android:scheme="content" />


Still wondering if there is a reported issue that this is addressing?

ghost · 2026-09-05T04:41:23Z

+          Backup MIME intents
+        -->
+        <data
+          android:mimeType="application/octet-stream"


Ideally we won't need this in the future? It seems a bit broad!

ghost · 2026-09-09T03:39:49Z

        <data android:scheme="file" />
+        <data android:scheme="content" />


Suggested change

<data android:scheme="file" />

<data android:scheme="content" />

Per https://developer.android.com/guide/components/intents-filters#DataTest

ghost · 2026-09-09T03:40:23Z

        <data android:scheme="file" />
+        <data android:scheme="content" />
+
        <data android:host="*" />


Suggested change

<data android:host="*" />

Per https://developer.android.com/guide/components/intents-filters#DataTest

…docs in filter comments

ghost · 2026-09-09T19:42:28Z

@keymanapp-test-bot retest all

There have been enough changes that it may be wise to verify that the new version of the fixes still work.

ghost · 2026-09-10T03:16:23Z

@jahorton, the Android Test build has failed. I shouldn't proceed, right?

ghost

One more go on the merry go round

ghost · 2026-09-09T13:49:48Z

        <category android:name="android.intent.category.DEFAULT" />

        <data android:scheme="file" />
+        <data android:scheme="content" />


This intent-filter already has two MIME type tests: one for the future, vnd.keyman.kmp+zip, and one for today, octet-stream. So the host and scheme tests should not be needed because the MIME type matches will get us a good enough match, along with the pathPattern test (except for Samsung Files which is buggy).

<data android:pathPattern=".*\\.kmp" /> <data android:mimeType="application/vnd.keyman.kmp+zip" />  <data android:mimeType="application/octet-stream" />

ghost · 2026-09-10T04:26:30Z

        <!-- needed for mangled email messages -->
        <data
-          android:mimeType="application/keyman"
+          android:mimeType="application/vnd.keyman.kmp+zip"
          android:scheme="content" />
-        <!-- needed for mangled email messages -->
        <data
          android:mimeType="application/octet-stream"
          android:scheme="content" />


We should only need android:scheme="content" once in the filter, if we specify it, and it's clearer to read if split out from the mimeType:

<data android:scheme="content" /> <data android:mimeType="application/vnd.keyman.kmp+zip" /> <data android:mimeType="application/octet-stream" />

ghost · 2026-09-10T04:36:21Z

+        <data android:scheme="http" />
+        <data android:scheme="https" />


To match the order found in a URI, can we put these before the android:host lines?

ghost · 2026-09-10T04:36:41Z

-          android:pathPattern="/.*\\.kmp"
-          android:scheme="https" />
+        <data android:host="*" />
+        <data android:pathPattern=".*\\.kmp" />


Suggested change

<data android:pathPattern=".*\\.kmp" />

<data android:pathSuffix=".kmp" />

ghost · 2026-09-10T04:36:55Z

-        <data android:scheme="file" />
-        <data android:host="*" />
-        <data android:pathPattern="/.*\\.kmp" />
+        <data android:pathPattern=".*\\.kmp" />


So sorry. It turns out that after all this, we do need to specify scheme and host because otherwise path is ignored in the filter:

These attributes are meaningful only if the scheme and host attributes are also specified for the filter.

Sorry for the confusion... Also, pathSuffix is available which I think seems safer than pathPattern, which is fragile (read the docs for all the edge cases).

Suggested change

<data android:pathPattern=".*\\.kmp" />

<data android:scheme="content" />

<data android:scheme="file" />

<data android:host="*" />

<data android:pathSuffix=".kmp" />

pathSuffix and pathAdvancedPattern were introduced in API level 31.

https://developer.android.com/guide/topics/manifest/data-element#path

As we support earlier API, I don't think it's safe to rely on pathSuffix.

ghost · 2026-09-11T08:22:55Z

Test Results

GROUP_API_28:

Test Specs

Pixel 3a XL, API 28 (Android 9)
keyman-19.0.268-alpha-test-16392.apk

TEST_DOWNLOAD_AND_INSTALL (PASSED):

Install Keyman
Navigate to https://jahorton.github.io and download the english_punct_rota.kmp file.
Once downloaded -> Tap on Open
VERIFIED: Keyman for Android launches and opens the package installer without displaying an error or alert
Follow through the installation dialogs of the keyboard package
VERIFIED: No errors result. Dictionary installed alongside the keyboard
Predictive text and typing work as expected. Gestures are working as expected.

TEST_INSTALL_VIA_FILES (PASSED):

Navigate to https://jahorton.github.io and download the gesture_prototyping.kmp file
Once downloaded -> Open the File app -> Tap on the downloaded file
VERIFIED: Keyman for Android launches and opens the package installer without displaying an error or alert
Follow through the installation dialogs of the keyboard package
VERIFIED: No errors result. Dictionary installed alongside the keyboard.
Typing and predictive text work as expected.

GROUP_API_30:

Test Specs

Pixel 5, API 30 (Android 11)
keyman-19.0.268-alpha-test-16392.apk

TEST_DOWNLOAD_AND_INSTALL (PASSED):

Install Keyman
Navigate to https://jahorton.github.io and download the english_punct_rota.kmp file.
Once downloaded -> Tap on Open
VERIFIED: Keyman for Android launches and opens the package installer without displaying an error or alert
Follow through the installation dialogs of the keyboard package
VERIFIED: No errors result. Dictionary installed alongside the keyboard
Predictive text and typing work as expected. Gestures are working as expected.

TEST_INSTALL_VIA_FILES (PASSED):

Navigate to https://jahorton.github.io and download the gesture_prototyping.kmp file
Once downloaded -> Open the File app -> Tap on the downloaded file
VERIFIED: Keyman for Android launches and opens the package installer without displaying an error or alert
Follow through the installation dialogs of the keyboard package
VERIFIED: No errors result. Dictionary installed alongside the keyboard
Typing and predictive text work as expected.

GROUP_API_33:

Test Specs

Pixel 6a, API 33 (Android 13.0)
keyman-19.0.268-alpha-test-16392.apk

TEST_DOWNLOAD_AND_INSTALL (PASSED):

Install Keyman
Navigate to https://jahorton.github.io and download the english_punct_rota.kmp file.
Once downloaded -> Tap on Open
VERIFIED: Keyman for Android launches and opens the package installer without displaying an error or alert
Follow through the installation dialogs of the keyboard package
VERIFIED: No errors result. Dictionary installed alongside the keyboard
Predictive text and typing work as expected. Gestures are working as expected.

TEST_INSTALL_VIA_FILES (PASSED):

Navigate to https://jahorton.github.io and download the english_punct_rota.kmp file.
Once downloaded -> Open the "File" -> Tap on the downloaded file
VERIFIED: Keyman for Android launches and opens the package installer without displaying an error or alert
Follow through the installation dialogs of the keyboard package
VERIFIED: No errors result. Dictionary installed alongside the keyboard
Predictive text and typing work as expected.

ghost

LGTM -- so much clearer and makes much more sense than before

ghost · 2026-09-11T18:01:21Z

Changes in this pull request will be available for download in Keyman version 19.0.285-alpha

jahorton requested review from darcywong00 and mcdurdin August 17, 2026 20:42

github-project-automation Bot added this to Keyman Aug 17, 2026

github-project-automation Bot moved this to Todo in Keyman Aug 17, 2026

github-actions Bot added android/ android/app/ fix labels Aug 17, 2026

keymanapp-test-bot Bot added has-user-test user-test-required User tests have not been completed labels Aug 17, 2026

keymanapp-test-bot Bot added this to the A19S36 milestone Aug 17, 2026

mcdurdin mentioned this pull request Aug 18, 2026

bug(android): attempting to open a package from Samsung 'My Files' app results in an error 'You don't have any apps that can open this type of file' #10133

Closed

8 tasks

change(web): add vnd.keyman.kmp+zip mime type to file-association int…

90b2e45

…ent-filters Fixes: #14122

mcdurdin requested changes Aug 19, 2026

View reviewed changes

change(android): clean up AndroidManifest.xml MIME-type entries, remo…

ba76704

…ve empty else - https://developer.android.com/reference/android/Manifest.permission#READ_EXTERNAL_STORAGE - https://stackoverflow.com/a/73630987

jahorton requested a review from mcdurdin August 19, 2026 17:08

keymanapp-test-bot Bot added the user-test-failed label Aug 20, 2026

keymanapp-test-bot Bot removed the user-test-failed label Aug 20, 2026

keymanapp-test-bot Bot removed the user-test-required User tests have not been completed label Aug 21, 2026

mcdurdin linked an issue Aug 24, 2026 that may be closed by this pull request

bug(android): *.kmp deeplink does not work #14854

Closed

Joshua Horton added 2 commits August 25, 2026 15:40

change(android): revert autoVerify="true" change

af0a2b6

change(android): clean up site deep-link configuration

507512b

Build-bot: skip release:android

jahorton mentioned this pull request Aug 25, 2026

change(android): clean up site deep-link configuration #16438

Merged

keyman-server modified the milestones: A19S36, B19S1 Aug 30, 2026

Merge pull request #16438 from keymanapp/change/android/clean-site-de…

abb2b82

…ep-links

jahorton force-pushed the fix/android/load-external-kmp-file branch from abb2b82 to af0a2b6 Compare September 3, 2026 14:19

docs(android): shift comment text to retrigger build

f0e79e2

mcdurdin approved these changes Sep 5, 2026

View reviewed changes

change(android): remove added scheme=content duplication

c3bc376

mcdurdin reviewed Sep 9, 2026

View reviewed changes

mcdurdin requested changes Sep 9, 2026

View reviewed changes

Joshua Horton added 2 commits September 9, 2026 14:33

change(android): more AndroidManifest cleanup

d2aa609

change(web): fix previous commit's adjustments & add link to Android …

380f712

…docs in filter comments

jahorton requested a review from mcdurdin September 9, 2026 19:41

keymanapp-test-bot Bot added the user-test-required User tests have not been completed label Sep 9, 2026

mcdurdin reviewed Sep 10, 2026

View reviewed changes

change(android): more AndroidManifest refinements

a9311a5

jahorton requested a review from mcdurdin September 10, 2026 16:06

keymanapp-test-bot Bot removed the user-test-required User tests have not been completed label Sep 11, 2026

mcdurdin approved these changes Sep 11, 2026

View reviewed changes

jahorton merged commit a117672 into master Sep 11, 2026

jahorton deleted the fix/android/load-external-kmp-file branch September 11, 2026 13:18

github-project-automation Bot moved this from Todo to Done in Keyman Sep 11, 2026

		<data android:scheme="file" />
		<data android:scheme="content" />

		<data android:scheme="http" />
		<data android:scheme="https" />

	<data android:pathPattern=".*\\.kmp" />
	<data android:pathSuffix=".kmp" />

Uh oh!

Uh oh!

Conversation

jahorton commented Aug 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

User Testing

Uh oh!

keymanapp-test-bot Bot commented Aug 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

User Test Results

Test Artifacts

Uh oh!

mcdurdin commented Aug 18, 2026

Uh oh!

mcdurdin commented Aug 18, 2026

Uh oh!

mcdurdin commented Aug 18, 2026

Uh oh!

jahorton commented Aug 18, 2026

Uh oh!

mcdurdin commented Aug 18, 2026

Uh oh!

jahorton commented Aug 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

mcdurdin commented Aug 18, 2026

Uh oh!

mcdurdin left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

ghost Aug 19, 2026

Choose a reason for hiding this comment

Uh oh!

ghost Aug 19, 2026

Choose a reason for hiding this comment

Uh oh!

ghost Aug 20, 2026

Choose a reason for hiding this comment

Uh oh!

ghost Sep 5, 2026

Choose a reason for hiding this comment

Uh oh!

ghost Sep 8, 2026

Choose a reason for hiding this comment

Uh oh!

ghost Sep 9, 2026

Choose a reason for hiding this comment

Uh oh!

ghost Sep 9, 2026

Choose a reason for hiding this comment

Uh oh!

ghost Sep 9, 2026

Choose a reason for hiding this comment

Uh oh!

ghost Sep 9, 2026

Choose a reason for hiding this comment

Uh oh!

ghost Sep 9, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

ghost commented Aug 20, 2026 • edited by Meng-Heng Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Test Results

GROUP_API_28:

Test Specs

GROUP_API_30:

Test Specs

GROUP_API_33:

Test Specs

Uh oh!

ghost commented Aug 20, 2026 • edited by Meng-Heng Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

jahorton commented Aug 17, 2026 •

edited

Loading

keymanapp-test-bot Bot commented Aug 17, 2026 •

edited

Loading

jahorton commented Aug 18, 2026 •

edited

Loading

ghost commented Aug 20, 2026 •

edited by Meng-Heng

Loading

ghost commented Aug 20, 2026 •

edited by Meng-Heng

Loading

ghost commented Sep 3, 2026 •

edited by jahorton

Loading

ghost Sep 10, 2026 •

edited by jahorton

Loading