AndroidManifest.xml

<?xml version="1.0" encoding="utf-8"?>
<!-- Hardware acceleration enabled for better rendering performance -->
<manifest xmlns:android="http://schemas.android.com/apk/res/android" xmlns:tools="http://schemas.android.com/tools" android:hardwareAccelerated="true">
  <!-- Core keyboard permissions -->
  <uses-permission android:name="android.permission.VIBRATE"/>

  <!-- PRIVACY: No INTERNET permission - CleverKeys is fully offline, no data leaves your device -->

  <!-- Optional: Voice input support (not required for core keyboard functionality) -->
  <!-- Uncomment if you want voice typing: -->
  <!-- <uses-permission android:name="android.permission.RECORD_AUDIO"/> -->

  <!-- User dictionary access for word suggestions (system dictionary only) -->
  <uses-permission android:name="android.permission.READ_USER_DICTIONARY"/>

  <!-- I-8: signature-protected permission gating the dynamically-registered debug-mode
       (and playground log/result) receivers on API 24-25, where RECEIVER_NOT_EXPORTED
       is unavailable. Only apps signed with this app's certificate can hold it, so a
       third-party broadcast can no longer switch on playground swipe recording. -->
  <permission android:name="tribixbite.cleverkeys.permission.SET_DEBUG_MODE" android:protectionLevel="signature"/>
  <uses-permission android:name="tribixbite.cleverkeys.permission.SET_DEBUG_MODE"/>

  <!-- For Android 11+ (API 30+), use scoped storage via MediaStore or SAF (Storage Access Framework) -->
  <!-- No explicit permission needed for app-specific directories (getExternalFilesDir()) -->

  <application android:label="@string/app_name" android:allowBackup="true" android:fullBackupContent="@xml/backup_rules" android:dataExtractionRules="@xml/data_extraction_rules" android:icon="@mipmap/ic_launcher" android:hardwareAccelerated="true" android:supportsRtl="true">
    <!-- CleverKeys Keyboard Service -->
    <!-- FIX: Removed applicationIdSuffix ".debug" from build.gradle to fix keyboard crash -->
    <service android:name="tribixbite.cleverkeys.CleverKeysService"
             android:label="@string/manifest_ime_service_label"
             android:permission="android.permission.BIND_INPUT_METHOD"
             android:exported="true"
             android:theme="@style/CleverKeysIMETheme"
             android:directBootAware="true"
             tools:targetApi="24">
      <intent-filter>
        <action android:name="android.view.InputMethod"/>
      </intent-filter>
      <meta-data android:name="android.view.im" android:resource="@xml/method"/>
    </service>

    <!-- Quick Settings Tile for keyboard switching (Android 7.0+).
         TileService is API 24; the OS ignores this <service> below API 24, so
         declaring it at minSdk 21 is safe. tools:targetApi tells lint it's gated. -->
    <service
        android:name="tribixbite.cleverkeys.KeyboardTileService"
        android:label="@string/app_name"
        android:icon="@mipmap/ic_launcher"
        android:permission="android.permission.BIND_QUICK_SETTINGS_TILE"
        android:exported="true"
        tools:targetApi="24">
      <intent-filter>
        <action android:name="android.service.quicksettings.action.QS_TILE"/>
      </intent-filter>
    </service>

    <activity android:name="tribixbite.cleverkeys.SettingsActivity" android:icon="@mipmap/ic_launcher" android:theme="@style/settingsTheme" android:exported="true" android:directBootAware="true" tools:targetApi="24" android:launchMode="singleTop">
      <intent-filter>
        <action android:name="android.intent.action.MAIN"/>
      </intent-filter>
      <!-- GIF pack ZIP import via share intent -->
      <intent-filter>
        <action android:name="android.intent.action.SEND"/>
        <category android:name="android.intent.category.DEFAULT"/>
        <data android:mimeType="application/zip"/>
      </intent-filter>
      <intent-filter>
        <action android:name="android.intent.action.SEND"/>
        <category android:name="android.intent.category.DEFAULT"/>
        <data android:mimeType="application/x-zip-compressed"/>
      </intent-filter>
      <intent-filter>
        <action android:name="android.intent.action.VIEW"/>
        <category android:name="android.intent.category.DEFAULT"/>
        <data android:mimeType="application/zip"/>
        <data android:mimeType="application/x-zip-compressed"/>
      </intent-filter>
    </activity>

    <activity android:name="tribixbite.cleverkeys.LauncherActivity" android:icon="@mipmap/ic_launcher" android:theme="@style/launcherTheme" android:exported="true" android:directBootAware="true" tools:targetApi="24" android:windowSoftInputMode="adjustResize">
      <intent-filter>
        <action android:name="android.intent.action.MAIN"/>
        <category android:name="android.intent.category.LAUNCHER"/>
      </intent-filter>
    </activity>

    <!-- Internal settings sub-screens: launched only via explicit-component Intents
         (Intent(this, X::class.java)) from Settings/Launcher; never an external entry
         point. exported=false + no MAIN/DEFAULT filter closes the exported-activity
         attack surface (explicit Intents ignore intent-filters). -->

    <activity android:name="tribixbite.cleverkeys.GeometricSettingsActivity" android:label="@string/geo_settings_title" android:theme="@style/settingsTheme" android:exported="false" android:directBootAware="true" tools:targetApi="24"/>
    <activity android:name="tribixbite.cleverkeys.CtcSettingsActivity" android:label="@string/ctc_settings_title" android:theme="@style/settingsTheme" android:exported="false" android:directBootAware="true" tools:targetApi="24"/>

    <activity android:name="tribixbite.cleverkeys.DictionaryManagerActivity" android:label="@string/activities_dictionary_title" android:theme="@style/settingsTheme" android:exported="false" android:directBootAware="true" tools:targetApi="24"/>

    <activity android:name="tribixbite.cleverkeys.LayoutManagerActivity" android:label="@string/layout_manager_title" android:theme="@style/settingsTheme" android:exported="false" android:directBootAware="true" tools:targetApi="24"/>

    <activity android:name="tribixbite.cleverkeys.ThemeSettingsActivity" android:label="@string/theme_settings_title" android:theme="@style/settingsTheme" android:exported="false" android:directBootAware="true" tools:targetApi="24"/>

    <activity android:name="tribixbite.cleverkeys.ExtraKeysConfigActivity" android:label="@string/extra_keys_title" android:theme="@style/settingsTheme" android:exported="false" android:directBootAware="true" tools:targetApi="24"/>

    <!-- Subkey popover assign/edit screen (docs/specs/subkey-popover.md): started by the IME over
         the app being typed in, in its own task so finishing returns there. -->
    <activity android:name="tribixbite.cleverkeys.popover.SubkeyAssignActivity" android:label="@string/subkey_assign_activity_label" android:theme="@style/subkeyAssignTheme" android:exported="false" android:directBootAware="true" android:taskAffinity="tribixbite.cleverkeys.subkeyassign" android:excludeFromRecents="true" android:noHistory="true" android:windowSoftInputMode="adjustResize" tools:targetApi="24"/>

    <activity android:name="tribixbite.cleverkeys.ShortSwipeCustomizationActivity" android:label="@string/short_swipe_title" android:theme="@style/settingsTheme" android:exported="false" android:directBootAware="true" tools:targetApi="24"/>

    <!-- FileProvider for sharing GIF files via content:// URIs (commitContent) -->
    <provider
        android:name="androidx.core.content.FileProvider"
        android:authorities="${applicationId}.fileprovider"
        android:exported="false"
        android:grantUriPermissions="true">
      <meta-data
          android:name="android.support.FILE_PROVIDER_PATHS"
          android:resource="@xml/gif_file_paths" />
    </provider>

    <!-- Ghost activities removed (no source files); SwipeCalibrationActivity + the swipe-engine
         settings screen for the removed transformer went on 2026-08-18 (ADR-011) -->

    <!-- Headless-only Intent target. exported="true" is REQUIRED (#70 Termux automation) but the
         exported surface is scoped to the six custom backup actions below: the MAIN/DEFAULT filter
         that used to sit here (ARC-022 audit item ARC-031) let ANY app resolve this component with
         a bare ACTION_MAIN, and that path does nothing but redirect to SettingsActivity. The
         redirect code path stays — an action-less explicit start (the in-app
         SettingsNavigation.openBackupRestore, or a stale launcher shortcut) still degrades
         gracefully — it just is no longer implicitly resolvable from outside the app. -->
    <activity android:name="tribixbite.cleverkeys.BackupRestoreActivity" android:label="@string/manifest_backup_restore_label" android:theme="@style/settingsTheme" android:exported="true" android:directBootAware="true" tools:targetApi="24">
      <!-- #70: Intent filters for programmatic backup/restore automation (Termux, scripts) -->
      <intent-filter>
        <action android:name="tribixbite.cleverkeys.action.EXPORT_SETTINGS"/>
        <action android:name="tribixbite.cleverkeys.action.IMPORT_SETTINGS"/>
        <action android:name="tribixbite.cleverkeys.action.EXPORT_DICTIONARIES"/>
        <action android:name="tribixbite.cleverkeys.action.IMPORT_DICTIONARIES"/>
        <action android:name="tribixbite.cleverkeys.action.EXPORT_CLIPBOARD"/>
        <action android:name="tribixbite.cleverkeys.action.IMPORT_CLIPBOARD"/>
        <category android:name="android.intent.category.DEFAULT"/>
        <data android:scheme="file"/>
        <data android:scheme="content"/>
      </intent-filter>
    </activity>

    <activity android:name="tribixbite.cleverkeys.ShortSwipeCalibrationActivity" android:label="@string/calibration_title" android:theme="@style/settingsTheme" android:exported="false" android:directBootAware="true" tools:targetApi="24"/>

    <activity android:name="tribixbite.cleverkeys.SwipeDebugActivity" android:label="@string/advanced_swipe_debug_log_title" android:theme="@style/swipeDebugTheme" android:exported="false" android:directBootAware="true" tools:targetApi="24"/>

    <!-- textAssist / replaceText (2026-10-17): transparent trampoline that starts the
         ACTION_PROCESS_TEXT chooser FOR A RESULT (an IME service cannot receive one) and hands
         the returned text to ProcessTextReturn. Not exported; own task (taskAffinity "") so
         finishing returns to the app being typed in. Never noHistory: the result would be lost. -->
    <activity
        android:name="tribixbite.cleverkeys.ProcessTextActivity"
        android:exported="false"
        android:theme="@android:style/Theme.Translucent.NoTitleBar"
        android:excludeFromRecents="true"
        android:taskAffinity=""
        android:directBootAware="false"
        tools:targetApi="24"/>

    <!-- #156 Private copy: selection-toolbar receiver. Exported BY DESIGN (threat review:
         docs/history/audits/remediation-plans/156-private-copy-paste.md §6) but android:enabled="false"
         until the user opts in via Settings → Clipboard. Inbound-only: reads EXTRA_PROCESS_TEXT,
         stores locally, returns no result (never setResult(RESULT_OK) → host text untouched). -->
    <activity
        android:name="tribixbite.cleverkeys.PrivateCopyProcessTextActivity"
        android:label="@string/private_copy_toolbar_label"
        android:exported="true"
        android:enabled="false"
        android:theme="@android:style/Theme.NoDisplay"
        android:excludeFromRecents="true"
        android:noHistory="true"
        android:taskAffinity=""
        android:directBootAware="false"
        tools:targetApi="24">
      <intent-filter>
        <action android:name="android.intent.action.PROCESS_TEXT"/>
        <category android:name="android.intent.category.DEFAULT"/>
        <data android:mimeType="text/plain"/>
      </intent-filter>
    </activity>
  </application>

  <!-- To query enabled input methods for voice IME detection -->
  <queries>
    <intent>
      <action android:name="android.view.InputMethod" />
    </intent>
  </queries>
</manifest>