fix(ui): keep screens up when their data can't be read

Every screen's state came from stateIn on viewModelScope, which has no
exception handler. A Room or DataStore flow that threw while a screen
collected it (a dropped table, an unreadable settings file) ended there
and closed the app.

All 90 of them now go through one screenState helper that logs the
error and keeps what the screen last showed, or its initial value when
the first read fails. onboardingDone can't stay on its null, which
draws a blank surface until settings load, so a failed read there shows
the app instead.

Two tests added to ViewModelActionFailureTest: a dropped call_log table
under totalBlocked, and an unreadable settings file under
onboardingDone. IsolatedRepositoryFixture gains an unreadableSettings
option for the second one. No existing test was wrong. Both new tests
fail without the catches, and a catch that logs and rethrows fails the
trailing runTest with UncaughtExceptionsBeforeTest.

Author: SysAdminDoc

CHANGELOG.md

@@ -51,6 +51,7 @@ All notable changes to CallShield will be documented in this file.
 - Spam on the post-call screen now records the block and the report itself, and the home screen widget redraws itself when your lists change. Both used to hand the job to the app's own receiver with a broadcast, which Android 17 QPR2 no longer delivers once the app has left the screen, so the block could have been lost.
 - Block area code no longer offers China's +86 410 or +86 413. The newest phone numbering data the offer is built from (libphonenumber 9.0.42) doesn't list them as area codes anymore.
 - The app no longer closes as it starts when it can't read whether update checks are on. It skips setting up the weekly check that time and tries again on the next start.
+- A database error while a screen is open no longer closes the app either. The screen keeps what it was showing, or its empty state if nothing had loaded yet, and the error is logged. If the app's settings can't be read at all, it opens to the main screen instead of a blank one.
 
 ## v1.12.0 (2026-10-09)
 

README.md

@@ -12,7 +12,7 @@
 <p align="center">
   <a href="https://github.com/SysAdminDoc/CallShield/releases/latest"><img src="https://img.shields.io/github/v/release/SysAdminDoc/CallShield?style=flat-square&color=a6e3a1" alt="Release"></a>
   <img src="https://img.shields.io/badge/Spam%20Numbers-51%2C403-f38ba8?style=flat-square" alt="51,403 Numbers">
-  <img src="https://img.shields.io/badge/JVM%20unit%20tests-2029-94e2d5?style=flat-square" alt="2029 JVM unit tests">
+  <img src="https://img.shields.io/badge/JVM%20unit%20tests-2031-94e2d5?style=flat-square" alt="2031 JVM unit tests">
   <img src="https://img.shields.io/badge/Android-10%2B-89b4fa?style=flat-square" alt="Android 10+">
   <img src="https://img.shields.io/badge/License-MIT-cba6f7?style=flat-square" alt="MIT License">
   <img src="https://img.shields.io/badge/API%20Keys-None-fab387?style=flat-square" alt="No required API keys">
@@ -592,12 +592,12 @@ RELEASE_KEY_PASSWORD=...
 ## Testing
 
 ```bash
-./gradlew testDebugUnitTest   # 2029 tests
+./gradlew testDebugUnitTest   # 2031 tests
 ./gradlew connectedDebugAndroidTest -Pandroid.testInstrumentationRunnerArguments.class=com.sysadmindoc.callshield.platform.TargetSdkBehaviorSmokeTest
 ./gradlew verifyPipelineTests # Cloudflare Worker (node) + data-pipeline and translation checks (python)
 ```
 
-The suite is **2029 total JVM unit tests**, run with Robolectric wherever a screen, a service or the database is involved.
+The suite is **2031 total JVM unit tests**, run with Robolectric wherever a screen, a service or the database is involved.
 
 Two GitHub workflows run without building the app. **Validation** runs the Worker and
 pipeline suites on every push except report-only ones (`run-pipeline-tests.ps1 -CorrectnessOnly`),
@@ -634,7 +634,7 @@ language in [issue #7](https://github.com/SysAdminDoc/CallShield/issues/7).
 | Community API | Cloudflare Workers |
 | URL Safety | Local spam-domain data, with optional PhishTank and OpenPhish |
 | Verification | Local Gradle, lint, and release-artifact checks |
-| Tests | 2029 JVM unit tests (JUnit) |
+| Tests | 2031 JVM unit tests (JUnit) |
 | Strings | 1792 string resources and 49 plural groups (translation-ready) |
 | Accessibility | 100+ content descriptions, 48dp touch targets |
 | Min SDK | 29 (Android 10) |