fix(settings): declare package visibility for the source pickers

targetSdk is 36 and the manifest had no <queries> block, so on Android 11+
getApplicationInfo() threw NameNotFoundException for every other app. The
push-alert source sheet showed every source as "Not installed" and disabled
its switch; the notification-screening sheet mislabeled installed sources.
A notification listener gets no automatic package visibility.

The manifest now names every package in PushAlertRegistry.ALERT_SOURCE_PACKAGES
and NotificationScreeningSources.catalog. No permission is added and
QUERY_ALL_PACKAGES is not requested.

Verified on an API 35 emulator with `dumpsys package queries`: the HEAD build
had no "queries via package name" entry and the image reports "system apps
queryable: false"; the fixed build can see Messages, Gmail and Calendar.
ManifestQueriesTest keeps <queries> equal to the two catalogs (mutation-checked
by deleting one package line).

Author: SysAdminDoc

CHANGELOG.md

@@ -114,6 +114,12 @@ All notable changes to CallShield will be documented in this file.
   SMS receiver and the notification reader each logged it, so it showed up
   twice in the log and the statistics. The alert now says the text was
   flagged, not blocked, since it still reaches your messages app.
+- The trusted-source and message-screening pickers in Settings now see your
+  installed apps on Android 11 and later. Android hides other apps from an app
+  unless its manifest names them, and CallShield's named none, so every source
+  showed as "Not installed", Google Messages included, and a trusted source
+  couldn't be switched off. The manifest now names the apps on those two lists
+  and nothing else.
 
 ### Live caller lookup
 

app/src/main/AndroidManifest.xml

@@ -18,6 +18,38 @@
         android:name="android.hardware.telephony"
         android:required="false" />
 
+    <!-- Package visibility (API 30+) for the apps the notification-source pickers
+         list. Without it getApplicationInfo() fails for every one of them, and the
+         pickers report installed apps as missing. ManifestQueriesTest keeps this
+         list in step with the catalogs. -->
+    <queries>
+        <!-- Push-alert sources (PushAlertRegistry.ALERT_SOURCE_PACKAGES) -->
+        <package android:name="com.amazon.logistics.driver" />
+        <package android:name="com.amazon.mShop.android.shopping" />
+        <package android:name="com.android.mms" />
+        <package android:name="com.dd.doordash" />
+        <package android:name="com.fedex.ida.android" />
+        <package android:name="com.google.android.apps.messaging" />
+        <package android:name="com.google.android.calendar" />
+        <package android:name="com.grubhub.android" />
+        <package android:name="com.instacart.client" />
+        <package android:name="com.lyft.android" />
+        <package android:name="com.microsoft.office.outlook" />
+        <package android:name="com.samsung.android.messaging" />
+        <package android:name="com.ubercab" />
+        <package android:name="com.ubercab.driver" />
+        <package android:name="com.ubercab.eats" />
+        <package android:name="com.ups.mobile.android" />
+        <package android:name="gov.usps.mobile" />
+        <!-- Notification screening sources (NotificationScreeningSources.catalog) -->
+        <package android:name="com.google.android.gm" />
+        <package android:name="com.microsoft.android.smsorganizer" />
+        <package android:name="com.whatsapp" />
+        <package android:name="com.whatsapp.w4b" />
+        <package android:name="net.thunderbird.android" />
+        <package android:name="org.thoughtcrime.securesms" />
+    </queries>
+
     <application
         android:name=".CallShieldApp"
         android:allowBackup="true"

app/src/test/java/com/sysadmindoc/callshield/ManifestQueriesTest.kt

@@ -0,0 +1,65 @@
+package com.sysadmindoc.callshield
+
+import com.sysadmindoc.callshield.data.NotificationScreeningSources
+import com.sysadmindoc.callshield.data.PushAlertRegistry
+import org.junit.Assert.assertEquals
+import org.junit.Assert.assertTrue
+import org.junit.Test
+import org.w3c.dom.Element
+import java.io.File
+import javax.xml.parsers.DocumentBuilderFactory
+
+/**
+ * On API 30+ an app can only look up the packages it declares in `<queries>`.
+ * The source pickers call getApplicationInfo() for every catalog package, so a
+ * package missing from the manifest shows as "Not installed" even when it is.
+ */
+class ManifestQueriesTest {
+    @Test
+    fun `manifest queries every catalog package the source pickers look up`() {
+        val declared = declaredQueryPackages()
+        val expected =
+            PushAlertRegistry.ALERT_SOURCE_PACKAGES +
+                NotificationScreeningSources.catalog.map { it.packageName }
+
+        assertEquals("catalog packages missing from <queries>", emptySet<String>(), expected - declared)
+        assertEquals("<queries> packages no catalog uses", emptySet<String>(), declared - expected)
+    }
+
+    @Test
+    fun `queries block adds package visibility without a new permission`() {
+        val manifest = locate(MANIFEST_PATH).readText()
+
+        assertTrue(declaredQueryPackages().isNotEmpty())
+        assertTrue("QUERY_ALL_PACKAGES must not be requested", "QUERY_ALL_PACKAGES" !in manifest)
+    }
+
+    private fun declaredQueryPackages(): Set<String> {
+        val factory = DocumentBuilderFactory.newInstance().apply { isNamespaceAware = true }
+        val document = factory.newDocumentBuilder().parse(locate(MANIFEST_PATH))
+        val queries = document.getElementsByTagName("queries")
+        val packages = mutableSetOf<String>()
+        for (index in 0 until queries.length) {
+            val entries = (queries.item(index) as Element).getElementsByTagName("package")
+            for (entry in 0 until entries.length) {
+                packages += (entries.item(entry) as Element).getAttributeNS(ANDROID_NAMESPACE, "name")
+            }
+        }
+        return packages
+    }
+
+    private fun locate(relativePath: String): File {
+        var dir: File? = File("").absoluteFile
+        while (dir != null) {
+            val candidate = File(dir, relativePath)
+            if (candidate.isFile) return candidate
+            dir = dir.parentFile
+        }
+        error("Could not find $relativePath walking up from ${File("").absolutePath}")
+    }
+
+    private companion object {
+        const val MANIFEST_PATH = "app/src/main/AndroidManifest.xml"
+        const val ANDROID_NAMESPACE = "http://schemas.android.com/apk/res/android"
+    }
+}