@@ -23,6 +23,12 @@ All notable changes to CallShield will be documented in this file.
   database fix their stored copy once, on the first start after the update.
   A trending number blocks again when its database entry has run out, and the
   weekly pipeline check counts expiry the same way the app does.
+- Expecting a call lets hidden callers ring too, including under the Contacts
+  only, Personal, Sleep and Maximum profiles and during a meeting. Its text now
+  says what still blocks: your blocked numbers, wildcard rules and a failed
+  caller ID check. On a locked phone the Quick Settings tile asks you to unlock
+  before it opens the window, and a window that has ended stays ended even if
+  the phone's clock moves back.
 
 ## v1.10.0 (2026-09-28)
 
 
@@ -12,7 +12,7 @@
 <p align="center">
   <a href="https://github.com/SysAdminDoc/CallShield/releases/latest"><img src="https://img.shields.io/github/v/release/SysAdminDoc/CallShield?style=flat-square&color=a6e3a1" alt="Release"></a>
   <img src="https://img.shields.io/badge/Spam%20Numbers-51%2C363-f38ba8?style=flat-square" alt="51,363 Numbers">
-  <img src="https://img.shields.io/badge/JVM%20unit%20tests-1646-94e2d5?style=flat-square" alt="1646 JVM unit tests">
+  <img src="https://img.shields.io/badge/JVM%20unit%20tests-1652-94e2d5?style=flat-square" alt="1652 JVM unit tests">
   <img src="https://img.shields.io/badge/Android-10%2B-89b4fa?style=flat-square" alt="Android 10+">
   <img src="https://img.shields.io/badge/License-MIT-cba6f7?style=flat-square" alt="MIT License">
   <img src="https://img.shields.io/badge/API%20Keys-None-fab387?style=flat-square" alt="No required API keys">
@@ -82,7 +82,7 @@ Version highlights for each release are in [CHANGELOG.md](CHANGELOG.md).
 
 Let unknown callers ring when you're waiting for a call, and a fix that keeps the spam database blocking between updates.
 
-- **Expecting a call.** From Home or its own Quick Settings tile, unknown callers ring for an hour, three hours or until midnight. Your blocked numbers, wildcard rules and a failed caller ID check still block, and a countdown notification offers End now.
+- **Expecting a call.** From Home or its own Quick Settings tile, unknown and hidden callers ring for an hour, three hours or until midnight. Your blocked numbers, wildcard rules and a failed caller ID check still block, and a countdown notification offers End now. On a locked phone the tile asks you to unlock first.
 - **The database keeps working.** Every number's evidence was due to expire in October, and a phone stops matching a number once that happens. Complaint evidence now lasts a year, and the weekly data check warns a month ahead. Phones on 1.9.0 get this with their next sync.
 - **Reviewed numbers.** A number the maintainer checks by hand can join the database when no imported source covers it, starting with a Munich number reported on GitHub.
 - **Easier to use.** The caller ID popup works with TalkBack, the Blocked log and Blocklist fit small screens with large text, and a blocked-call alert offers Not spam for a day.
@@ -116,7 +116,7 @@ All detection layers implement a shared `IChecker` interface and run in priority
 |  6900 | **System Block List** (A4) | Block | Read-only bridge to Android's `BlockedNumberContract`. Respects stock Phone/Messages blocks |
 |  5500 | **Wildcard / Regex** | Block | Custom patterns like `+1832555*` or full regex, now with optional schedule |
 |  5400 | **Range Patterns** (A5) | Block | Length-locked `#` patterns like `+33162######`, with schedule + coverage safety rail |
-|  5360 | **Expecting a Call** | Allow | Opt-in window (1 hour, 3 hours or until midnight) from Home or a Quick Settings tile. Unknown callers ring, and contacts-only mode steps aside. Your own blocks, wildcard and range rules and a failed caller ID check still win |
+|  5360 | **Expecting a Call** | Allow | Opt-in window (1 hour, 3 hours or until midnight) from Home or a Quick Settings tile. Unknown and hidden callers ring, and contacts-only mode and meeting mode step aside. Your own blocks, wildcard and range rules and a failed caller ID check still win |
 |  5350 | **Temporary Allow** | Allow | One-off false-positive recovery from the Blocked Log. Beats all downloaded data, never your own rules |
 |  5320 | **Prefix Rules** | Block | Downloaded wangiri country codes, US premium rate (+1900), international premium |
 |  5310 | **Regulatory Prefix** | Block | Opt-in (Settings > Telemarketing ranges) blocks for ranges regulators set aside for sales calls: Spain 400 (from 17 October 2026), India 140 (TRAI), Brazil 0303 (ANATEL). Matches the number with its country code, and without it on a phone from that country |
@@ -509,12 +509,12 @@ RELEASE_KEY_PASSWORD=...
 ## Testing
 
 ```bash
-./gradlew testDebugUnitTest   # 1646 tests
+./gradlew testDebugUnitTest   # 1652 tests
 ./gradlew connectedDebugAndroidTest -Pandroid.testInstrumentationRunnerArguments.class=com.sysadmindoc.callshield.platform.TargetSdkBehaviorSmokeTest
 ./gradlew verifyPipelineTests # Cloudflare Worker (node) + data-pipeline and translation checks (python)
 ```
 
-The suite is **1646 total JVM unit tests**, run with Robolectric wherever a screen, a service or the database is involved.
+The suite is **1652 total JVM unit tests**, run with Robolectric wherever a screen, a service or the database is involved.
 
 Two GitHub workflows run without building the app. **Validation** runs the Worker and
 pipeline suites on every push except report-only ones (`run-pipeline-tests.ps1 -CorrectnessOnly`),
@@ -551,7 +551,7 @@ language in [issue #7](https://github.com/SysAdminDoc/CallShield/issues/7).
 | Community API | Cloudflare Workers |
 | URL Safety | Local spam-domain data, with optional PhishTank and OpenPhish |
 | Verification | Local Gradle, lint, and release-artifact checks |
-| Tests | 1646 JVM unit tests (JUnit) |
+| Tests | 1652 JVM unit tests (JUnit) |
 | Strings | 1708 string resources and 38 plural groups (translation-ready) |
 | Accessibility | 100+ content descriptions, 48dp touch targets |
 | Min SDK | 29 (Android 10) |
 
@@ -173,6 +173,14 @@ class CallShieldApp :
                     Log.w("CallShieldApp", "Failed to update stored evidence expiry", e)
                 }
             }
+
+            appScope.launch {
+                try {
+                    SpamRepository.getInstance(this@CallShieldApp).clearEndedExpectingCall(System.currentTimeMillis())
+                } catch (e: Exception) {
+                    Log.w("CallShieldApp", "Failed to clear an ended expecting-a-call window", e)
+                }
+            }
             appScope.launch {
                 try {
                     DirectBootScreeningStore.observeAndMirror(
 
@@ -1,6 +1,7 @@
 package com.sysadmindoc.callshield.data
 
 import androidx.datastore.preferences.core.Preferences
+import com.sysadmindoc.callshield.data.checker.MeetingModeChecker
 import java.time.Instant
 import java.time.ZoneId
 
@@ -51,4 +52,29 @@ internal object ExpectingCall {
         prefs: Preferences,
         now: Long,
     ): Boolean = until(prefs) > now
+
+    /** A window that ran out. Its end time is removed once seen, so a clock stepped back can't reopen it. */
+    fun hasEnded(
+        prefs: Preferences,
+        now: Long,
+    ): Boolean = until(prefs) in 1..now
+
+    /**
+     * What rejects or silences a call that came with no number, or null to let it
+     * ring. A window lets it ring: the expected caller may withhold their number,
+     * and the window promises unknown callers get through, so it outranks both
+     * "block hidden numbers" (set by the Contacts only, Personal, Sleep and
+     * Maximum profiles) and meeting mode.
+     */
+    fun withheldCallBlockSource(
+        prefs: Preferences,
+        now: Long,
+        meetingApp: String?,
+    ): String? =
+        when {
+            isActive(prefs, now) -> null
+            prefs[SpamRepository.KEY_BLOCK_UNKNOWN] ?: false -> "hidden_number"
+            meetingApp != null -> MeetingModeChecker.MATCH_SOURCE
+            else -> null
+        }
 }
@@ -549,6 +549,8 @@ class SpamRepository(
 
     suspend fun setExpectingCallUntil(until: Long) = settingsRepository.setExpectingCallUntil(until)
 
+    suspend fun clearEndedExpectingCall(now: Long) = settingsRepository.clearEndedExpectingCall(now)
+
     suspend fun togglePushAlertPackage(
         pkg: String,
         allowed: Boolean,
 
@@ -574,6 +574,12 @@ class SettingsRepository(
 
     suspend fun setMeetingMode(enabled: Boolean) = dataStore.edit { it[SpamRepository.KEY_MEETING_MODE] = enabled }
 
+    suspend fun clearEndedExpectingCall(now: Long) =
+        dataStore.edit {
+            val until = it[SpamRepository.KEY_EXPECTING_CALL_UNTIL]
+            if (until != null && until <= now) it.remove(SpamRepository.KEY_EXPECTING_CALL_UNTIL)
+        }
+
     suspend fun setExpectingCallUntil(until: Long) =
         dataStore.edit {
             if (until > 0L) it[SpamRepository.KEY_EXPECTING_CALL_UNTIL] = until else it.remove(SpamRepository.KEY_EXPECTING_CALL_UNTIL)
 
@@ -10,6 +10,7 @@ import android.util.Log
 import com.sysadmindoc.callshield.data.CategoryCallAction
 import com.sysadmindoc.callshield.data.CategoryCallPolicy
 import com.sysadmindoc.callshield.data.ContactGroupCatalog
+import com.sysadmindoc.callshield.data.ExpectingCall
 import com.sysadmindoc.callshield.data.OutgoingRiskPolicy
 import com.sysadmindoc.callshield.data.OutgoingRiskWarning
 import com.sysadmindoc.callshield.data.PhoneIdentityCanonicalizer
@@ -154,6 +155,10 @@ class CallShieldScreeningService : CallScreeningService() {
                         // One snapshot of all prefs — the 5-second deadline is tight
                         // and individual Flow.first() calls each spin up a collector.
                         val prefs = repository.readPrefsSnapshot()
+                        val now = System.currentTimeMillis()
+                        if (ExpectingCall.hasEnded(prefs, now)) {
+                            applicationScope.launch { repository.clearEndedExpectingCall(now) }
+                        }
 
                         if (!(prefs[SpamRepository.KEY_BLOCK_CALLS] ?: true)) {
                             respondAllow(responseGate)
@@ -164,20 +169,14 @@ class CallShieldScreeningService : CallScreeningService() {
                         val number = repository.normalizeNumber(handle?.schemeSpecificPart.orEmpty())
 
                         if (number.isEmpty()) {
-                            // A withheld number never reaches the checkers, so meeting
-                            // mode is applied here; "block unknown" still rejects first.
-                            when {
-                                prefs[SpamRepository.KEY_BLOCK_UNKNOWN] ?: false -> {
-                                    respondBlock(callDetails, responseGate, number, "hidden_number", prefs = prefs)
-                                }
-
-                                MeetingModeChecker.meetingAppInUse(prefs) != null -> {
-                                    respondBlock(callDetails, responseGate, number, MeetingModeChecker.MATCH_SOURCE, prefs = prefs)
-                                }
-
-                                else -> {
-                                    respondAllow(responseGate)
-                                }
+                            // A withheld number never reaches the checkers, so the
+                            // expecting-a-call window, "block unknown" and meeting mode
+                            // are applied here, in that order.
+                            val source = ExpectingCall.withheldCallBlockSource(prefs, now, MeetingModeChecker.meetingAppInUse(prefs))
+                            if (source == null) {
+                                respondAllow(responseGate)
+                            } else {
+                                respondBlock(callDetails, responseGate, number, source, prefs = prefs)
                             }
                             return@withTimeoutOrNull
                         }
 
@@ -31,14 +31,14 @@ internal object ExpectingCallController {
         refreshTile(context)
     }
 
-    /** A reboot clears the ongoing notification while the window may still be running. */
+    /** A reboot clears the ongoing notification while the window may still be running; an ended one is cleared. */
     suspend fun restoreNotification(
         context: Context,
         repo: SpamRepository,
         now: Long = System.currentTimeMillis(),
     ) {
         val until = repo.expectingCallUntil.first()
-        if (until > now) NotificationHelper.showExpectingCall(context, until, now)
+        if (until > now) NotificationHelper.showExpectingCall(context, until, now) else repo.clearEndedExpectingCall(now)
     }
 
     private fun refreshTile(context: Context) {
 
@@ -25,8 +25,8 @@ class ExpectingCallTileService : TileService() {
         updateTile()
     }
 
-    override fun onClick() {
-        super.onClick()
+    /** Starts an hour, or ends the running window. Replaced in tests. */
+    internal var toggleWindow: () -> Unit = {
         // The process-wide scope, so closing the shade mid-tap can't cancel the write.
         CallShieldApp.appScope.launch {
             try {
@@ -43,12 +43,21 @@ class ExpectingCallTileService : TileService() {
         }
     }
 
+    override fun onClick() {
+        super.onClick()
+        // Opening the window lets strangers ring, so on a locked phone it waits for the unlock.
+        if (isLocked) unlockAndRun { toggleWindow() } else toggleWindow()
+    }
+
     private fun updateTile() {
         if (qsTile == null) return
         scope.launch {
             try {
-                val until = SpamRepository.getInstance(applicationContext).expectingCallUntil.first()
-                val active = until > System.currentTimeMillis()
+                val repo = SpamRepository.getInstance(applicationContext)
+                val until = repo.expectingCallUntil.first()
+                val now = System.currentTimeMillis()
+                val active = until > now
+                if (!active) repo.clearEndedExpectingCall(now)
                 withContext(Dispatchers.Main) {
                     val tile = qsTile ?: return@withContext
                     tile.state = if (active) Tile.STATE_ACTIVE else Tile.STATE_INACTIVE
 
@@ -1155,14 +1155,14 @@
     <string name="tile_protection_on">防护已开启</string>
     <string name="tile_protection_off">防护已关闭</string>
     <string name="expecting_call_title">等待来电</string>
-    <string name="expecting_call_subtitle">暂时让陌生来电响铃。你拦截的号码和规则仍然有效。</string>
+    <string name="expecting_call_subtitle">暂时让陌生来电和隐藏号码来电响铃。你拦截的号码、通配规则以及来电号码验证失败仍会拦截。</string>
     <string name="expecting_call_active">在 %1$s 之前，陌生来电可以响铃。</string>
     <string name="expecting_call_start">开始</string>
     <string name="expecting_call_end">立即结束</string>
     <string name="expecting_call_one_hour">1 小时</string>
     <string name="expecting_call_three_hours">3 小时</string>
     <string name="expecting_call_until_midnight">到午夜</string>
-    <string name="expecting_call_notification_text">在 %1$s 之前，陌生来电可以响铃。你拦截的号码和规则仍然有效。</string>
+    <string name="expecting_call_notification_text">在 %1$s 之前，陌生来电和隐藏号码来电可以响铃。你拦截的号码、通配规则以及来电号码验证失败仍会拦截。</string>
     <string name="tile_expecting_call_off">点按开启 1 小时</string>
     <string name="tile_expecting_call_on">到 %1$s</string>
     <string name="settings_region_cnap_rules">地区与主叫姓名规则</string>