Android snapshot helper suppresses TalkBack; no verified reader-compatible input path

Offen
  • Stimmt etwas nicht?
#4,179 2 Kommentare 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen

Maintainer antworten meist innerhalb von 1 Tag

@mvanhorn arbeitet bereits daran.

Seit 04.11.2026.

  • #4222 von @mvanhorn — offen

Bewertung

Schwierigkeit
4/5
Geschätzter Aufwand
3-5 Tage
Anfängerfreundlichkeit
18/100
Issue-Typ
Bug
Klarheit
Größtenteils klar
Aktivitätsstatus
Aktiv
Tech-Stack
android, java
Bereich
accessibility, mobile

Rechercherichtung

Start with the helper connection in android/snapshot-helper/src/main/java/com/callstack/agentdevice/snapshothelper/SnapshotInstrumentation.java, where getUiAutomation() is called without flags, and compare it with the Android UiAutomation flag the report cites. Reproducing needs an Android 16 emulator with TalkBack enabled, so check the report's dumpsys accessibility steps first. Done means TalkBack stays bound across a snapshot and an input, and a reader focus gesture produces the expected focus and speech events.

Vom Indexierungsmodell aus dem Issue-Text verfasst.

Beschreibung

bug ready-for-agent

Android snapshot helper suppresses TalkBack; no verified reader-compatible input path

On Android 16, the T3-managed agent-device 0.21.31 snapshot helper leaves
TalkBack enabled in secure settings but unbound. Closing my own agent-device
session releases UiAutomation and TalkBack binds again. A subsequent long press
leaves it rebinding. This blocks actual TalkBack focus and speech validation.

Environment

  • agent-device 0.21.31 through T3's device-bound command and managed daemon.
  • Linux host, Android 16 emulator, API 36, 1080 by 2400 display.
  • Android Accessibility Suite 16.0.0.738667889, version code 60149353.
  • App under test: RenovioMobile debug build, package io.renovio.mobile.
  • Observed on 2026-11-02 UTC. No installed helper patches or daemon configuration changes.

Reproduction

DEVICE below denotes the exact device-bound command returned by T3. Commands
must use the same owned session. These are the significant steps extracted from
the retained probes, not a separately executed standalone-daemon reproduction.

  1. Open the app and capture a snapshot with TalkBack off:

    "$DEVICE" open io.renovio.mobile --no-test-ime
"$DEVICE" snapshot -i

  2. Enable the installed TalkBack service. The observed fixture saved the original
    accessibility settings first and enabled TalkBack and touch exploration through
    Android secure settings. Inspect the service state without another UI tool:

    adb -s emulator-5554 shell settings get secure enabled_accessibility_services
adb -s emulator-5554 shell dumpsys accessibility

  3. Observe TalkBack in Enabled services, empty Bound services and an active
    Ui Automation[...] entry. Close only this owned session:

    "$DEVICE" close

    TalkBack then appears in Bound services and connects to TTS.

  4. In a separate probe, closing the named TalkBack package through the same
    session preserved the exact app PID. Reopening the app and enabling TalkBack
    permitted binding. The next long press left TalkBack in Binding services:

    "$DEVICE" close com.google.android.marvin.talkback
"$DEVICE" open io.renovio.mobile --no-test-ime
# Ensure TalkBack is enabled and bound before this input.
"$DEVICE" press 300 350 --hold-ms 800

The point in step 4 is the observed probe coordinate. It demonstrates service
interruption, not a successful target-focus test.

Plain-tap countercheck

With no helper active, TalkBack stayed bound across a plain coordinate press.
The visible button had two matching bounds observations, [87,1557][993,1704],
wholly inside the display. Pressing its center, 540 1630, activated Login
instead of producing the button's TalkBack focus and completed speech.

The PID-filtered log contained completed startup utterances, but no accepted and
completed target-focus utterance for Continue as Project Owner. Normal press
may intentionally activate a control; I am not claiming it promises touch
exploration. This countercheck shows that closing the helper and using plain
press did not provide a working reader-testing alternative.

Suspected cause and requested support

Android documents that UiAutomation suppresses accessibility services unless
the caller requests
FLAG_DONT_SUPPRESS_ACCESSIBILITY_SERVICES.
The v0.21.36 helper connection
still calls getUiAutomation() without flags. This supports the suppression
explanation; v0.21.36 was inspected, not executed. The public helper-session
setting controls persistence and does not request non-suppression.

Please provide or document a supported mode that preserves TalkBack and permits
reader exploration and activation. The Android flag is a candidate repair for
service suppression, not a demonstrated fix for the input behavior.

Acceptance check

  • TalkBack stays bound with touch exploration enabled across snapshots and input.
  • A reader exploration gesture focuses a labelled button without activating it.
  • For that gesture, the same TalkBack PID emits TYPE_VIEW_ACCESSIBILITY_FOCUSED
    with the expected label, accepts the TTS request and completes the utterance
    within the action's observation window. Startup speech or snapshot labels do
    not count.
  • A deliberate reader double tap activates the focused button once.
  • Closing the owned session leaves the reader usable, and the test restores its
    original accessibility and developer preferences.

Limits and related work

I have not tested a physical device, a standalone daemon, or v0.21.36 at runtime.
A public minimal APK or upstream test-app reproduction is not attached. The
retained app probes restored all four original accessibility secure keys and
TalkBack developer preferences. No full device logs containing app data are
included here.

Issue #851 concerns helper
ownership of UiAutomation. This report concerns coexistence with the actual
TalkBack service. Searches of issues and pull requests for TalkBack and
DONT_SUPPRESS_ACCESSIBILITY_SERVICES found no matching report on 2026-11-02 UTC.

Vorherrschende Sprache
TypeScript
Sterne
5.3k
Forks
377
Ø Merge
14 Std. 6 Min.
Gemergte PRs (30 T.)
650

Entwicklungsumgebung

Erste Schritte

  1. Lesen Sie das ganze Issue und danach den Beitragsleitfaden des Projekts.
  2. Schreiben Sie ins Issue, dass Sie es übernehmen — das erspart doppelte Arbeit.
  3. Forken Sie das Repository und arbeiten Sie in einem Branch.
  4. Öffnen Sie einen Pull Request, der die Issue-Nummer nennt.

Mehr aus callstack/agent-device

Alle Issues in callstack/agent-device

Ähnliche Issues

Weitere Issues zu TypeScript

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.