Because we now dump 64 bit integers instead of 32 bit integers we need to have a different protolog version so we know which viewer config to use in Winscope

Bug: 327002914

Test: collected protolog trace in Winscope
Change-Id: Iab3071952ff7957a11a0f01f09cfaa4306a7f7ae

This is needed in CTS test

Bug: 321080601
Test: m
Change-Id: I3b7da5d98f455678bde9acdf4adb5fe56ce538c2

Still needed to trace protlogs to logcat until b/322760624 is resolved

Bug: 322760624
Test: m protolog.conf.json.gz
Change-Id: I52de41c6ef05123e15214ec95fc81570a6ba59f3

ProtoLogTool now has additional parameters to support Perfetto tracing. We also need to generate and include a proto version of the viewer configuration.

Flag: ACONFIG android.tracing.Flags.perfettoProtolog DEVELOPMENT
Test: mp droid && atest FrameworksServicesTests
Bug: 276432490
Change-Id: I26929eed96faae04bec65ae5eaf86afda75cb83c

Additional permissions were needed to avoid SecurityException when
enforcing compat changes in new APIs. See other change in this topic.

Without this CL, devices would fail to boot (discovered this via
presubmits on the other CL).

Bug: 325329535
Test: Presubmit device boot tests
Change-Id: If6d2230ea63f0b297b8b35bdb9c824a266e2d709

Instead of specifying from host to embedded or vice versa for
tranferTouchGesture, create a generic API that allows you to request
transferring touch gesture from an InputTransferToken to another
InputTransferToken.

Test: SurfaceControlInputReceiverTests
Test: AttachedSurfaceControlTest
Test: SurfaceControlViewHostTests
Flag: ACONFIG com.android.window.flags.surface_control_input_receiver TRUNKFOOD
Bug: 278757236
Change-Id: I58beb1fe041f251db6c9cf90688bd2554bd2b399

This is needed in CTS test.

Bug: 308482931
Test: atest CtsInputTestCases:OverrideSystemKeyBehaviorTest
Change-Id: I5b870eeb834d187555d47dcc29c7cade7279179a

Formalize the BlockedNumberContract.SystemContract APIs as part of the
Telecom modularization. There are several hidden APIs that are being
referenced from Telecom that need to be resolved. The
blockStatusToString() implementation is being copied over to Telecom
while the other dependencies are being formalized into system APIs as
part of BlockedNumberContract (the hidden references have been
unchanged).

Bug: 308208071
Bug: 311773409
Test: atest BlockedNumberContractTest
Change-Id: I79db751d494e81c9f638a300f871fed021b76808

This API will allow the domian verifier to update the URI relative
filter groups on the domain verification package state. During intent
resolution these group matching will be applied after intent matching.
All existing groups will be cleared when the groups are updated.

Bug: 307557201
Test: atest DomainVerificationManagerApiTest
Test: atest DomainVerificationPersistenceTest
Test: atest CtsDomainVerificationDeviceStandaloneTestCases
Change-Id: I2d60b1f13074cecca106a37399bd4848534703f7

Grant access hidden profiles permission to quickstep
to access private profile.

Test: checked permission is granted in adb
Bug: 321988638
Flag: NONE
Change-Id: Ibad7f72f1558a39186c56dd9ecb5d85a41bf2b56

When an app is embedding another window, it needs to send the embedded a
token so the host can be associated with the embedded window. The
current API uses a raw IBinder token, but change to use an
InputTransferToken instead. This also modifies the transferTouchGesture
API so it accepts a InputTransferToken from and to objects.

Test: SurfaceControlInputReceiverTests
Test: AttachedSurfaceControlTest
Test: SurfaceControlViewHostTests
Flag: ACONFIG com.android.window.flags.surface_control_input_receiver TRUNKFOOD
Bug: 287076178
Change-Id: Iaa4dca0ca57f9c8760a81783cd384808985e6263

Restrict LauncherApps APIs for private profile:
- Caller must hold HOME role (i.e. default launcher)
- Must hold ACCESS_HIDDEN_PROFILES or ACCESS_HIDDEN_PROFILES_FULL
permissions

Remove temporary recents role holder checks.

Test: atest LauncherAppsTest, LauncherAppsForHiddenProfilesTest
Bug: 25851973
Flag: android.multiuser.enable_launcher_apps_hidden_profile_checks
DEVELOPMENT

Change-Id: Icf65b4329bbbd323f521d1f97b5369e7544111c8

The example shown in this file's inline XML comments is out of date.
Update it to reflect the latest expected schema.

Bug: 310654834
Test: manual
Change-Id: I8fd941ccfed34bf14ba90a752e92066014778cd0

Add virtualmachine gid for apps with MANAGE_VIRTUAL_MACHINE
permissions.

Bug: 322197421
Test: Booted device and processes and checked that the correct
capabilities are given.

Change-Id: I14e7df4dd284e00a44eb92d753c7e7e58b1e2526
Signed-off-by: David Dai <davidai@google.com>

This prevents pre-installation of the bluetooth package in private
profiles. This will remove the bluetooth option in the private tab in
sharesheet.

Bug: 296357858
Test: Tested manually on device
Change-Id: I4d6c378560faedb222f1dd5541410aff0fae2513

Add ACTION_UPDATE_TELEPHONY_CONFIG and EXTRA_DOMAIN

Bug: 316266710
Test: Build

Change-Id: I7ad2d617df642f866aa19ae64169836e8bef5209

This introduces a new configurable XML file
(/etc/sysconfig/enhanced-confirmation.xml) for ECM (Enhanced
Confirmation Mode). This file enables OEMs to declare a list of
"trusted packages" and/or "trusted installer" packages.  A "trusted
package" will be exempt from ECM restrictions. A "trusted installer",
and all packages that it installs, will be exempt from ECM restrictions.

The file may contain zero or more XML elements of the form:

    <enhanced-confirmation-trusted-package
         package="com.example.app"
         sha256-cert-digest="E9:7A:BC:2C:D1:..."/>

...and/or...

    <enhanced-confirmation-trusted-installer
         package="com.example.app"
         sha256-cert-digest="E9:7A:BC:2C:D1:..."/>

(Where the 'package' attribute is a package name, and
'sha256-cert-digest' is a hex-encoded SHA-256 digest of a signing
certificate. Both fields are required for each XML element.)

This file is parsed by the SystemConfig class, where the collection of
all XML elements are deserialized into (SignedPackage) objects which
are cached within SystemConfig.

These objects are accessible by calling either the following SystemAPI
methods:

    SystemConfigManager::getEnhancedConfirmationTrustedPackages
    SystemConfigManager::getEnhancedConfirmationTrustedInstallers

...which in turn call the (respective) binder methods:

    SystemConfigService::getEnhancedConfirmationTrustedPackages
    SystemConfigService::getEnhancedConfirmationTrustedInstallers

...which read the data directly from SystemConfig.

The only intended caller of this API is ECM
(EnhancedConfirmationManager/EnhancedConfirmationService), which runs in
SystemServer.

The reason this needs to be SystemApi(MODULE_LIBRARIES) is that the ECM
source code lives within the packages/modules/Permission mainline
module.

Bug: 310654834
Test: atest FrameworksServicesTests:com.android.server.systemconfig.SystemConfigTest
Change-Id: I50e524e5782cea4e66232acef493edbe62aa1f61

The permission is needed for CTS test CtsContactKeysProviderPrivilegedApp

Bug: 290696572
Test: atest CtsContactKeysProviderPrivilegedApp
Change-Id: I7ad6feb5bfdb6b8423bb46f99b3e46de1ca209eb

Defining all instances of weight instance causes memory bloat. To reduce
the memory usage, use dynamic font instance.

Bug: 280011317
Test: atest UpdatableFontDirTest UpdatableSystemFontTest
Test: atest GtsFontHostTestCases FontManagerTest CtsTextTestCases
Test: atest CtsGraphicsTestCases PersistentSystemFontConfigTest
Change-Id: Idd7b8cf8984e44b5864124277a01586e14894be0

Change-Id: I87e21b50a247f82d65a3cd46cd1612676d9dcbe0

Bug: 278763704
Test: Manually done
Change-Id: I54105704d8f453663a2e8781b2cb680d9ab03c73

Bug: 309886423
Test: DeviceDiagnostics can read battery stats
Change-Id: I4546cf40d4fbf6a2d846125fb49509b07ec7e927

This enables flows which can make changes on WMCore side
without notifying the client process until a later time. Usage
is basically: pauseConfigurationDispatch(); do stuff; later:
resumeConfigurationDispatch(); During "do stuff" WMCore will
already have the updated configuration but the client won't
know about it yet and can continue running as-if nothing
happened.

The primary use-case for this is PIP where we want to change it's
type/size but allow the client to continue drawing it's fullscreen
config until the transition animation completes.

Bug: 202201326
Bug: 290992727
Test: atest ActivityRecordTests#testPauseConfigDispatch
Change-Id: I923cc8c42ebf21b04af2376fd3383b75cb5fb996

Give the phone app permission to send data to safety center and add the
initial strings that it will use to describe the status and issues that
it's going to report.

Test: Run cvd_update_security_algorithm and see the issue notification
Bug: 308985417
Change-Id: I49475453e38e3e14c4cd89edc84192d416bd4138

Test: Manually test on test app
Flag: ACONFIG android.hardware.biometrics.custom_biometric_prompt DEVELOPMENT
Bug: 321006077
Change-Id: I93a00112c5bf18e22be2d19362c3c9401858e36f

Because `system.img` is a dependency of `fontchain_lint`, and
`system.img` is currently not generated inside `Soong`, it is not
possible to directly convert `fontchain_lint` to `Android.bp`.
Move it to build/core/task first.

Bug: 319050958
Test: m fontchain_lint
Change-Id: Iad483117a609786ecfb885b13015f18dda113155

Bug: 309886423
Test: See imei in DeviceDiagnostics attestation details
Change-Id: I326a0cc834eb2ac605a91cc50d5dfe8f81ea3adf

See go/wallpaper-multi-crop

Flag: ACONFIG com.android.window.flags.multi_crop DEVELOPMENT
Bug: 270726737
Test: atest WallpaperManagerTest
Test: atest WallpaperControllerTests
Test: atest WallpaperBackupAgentTest
Test: quite a lot of manual testing

Change-Id: Ic0bb0bd450c02aad01ea59fbfdaab415fb9838f9

Enable privileged apps with `USE_BACKGROUND_FACE_AUTHENTICATION` permission access to the face auth APIs for background face auth.

The first use case is Pixel Health (go/rppg-prd). Design doc: go/pixel-health-face-auth (b/312858933)

Android Feature Request Bug: b/305272520

Bug: 318309705
Test: Unit tests.
Change-Id: I037fbc15353cea6fd8f9a97e1e86e90305716f83

1. Introduce a new API startObservingDevicePresence` that
able to observing the devices base on association id or
uuid.

2. Introduce a new request called DevicePresenceRequest allows
app to be able setUuid or setAssociationId. Not that,
caller can only use one setter. And only system app is able
to use setUuid.

2. Introduce a new callback that that system app
will be recieve when device is connected / disconnected.

3. Introduce a new Permission REQUEST_OBSERVE_DEVICE_UUID_PRESENCE
that with signature protection level.

4. Introduce a new ObservingDevicePresenceResult with
a new callback onDeviceEvent(ObservingDevicePresenceResult)

5. Deprecate the startObservingDevicePresence(MacAddress).

Test: cts
Bug: 316015619

Change-Id: I4e311866d7640218ed6dd9937911f984e88355ef

Bug: 314902971
Test: Presubmit
Change-Id: Ia40ca643edd4d6a9d61af529d85d3795a1367a78

Adds APIs to set the logo on Biometric Prompt for internal apps. For
other apps, show the app launcher logo by default.

Test: atest PromptViewModelTest
Test: atest BiometricPromptRequestTest
Test: atest PromptSelectorInteractorImplTest
Test: atest PromptRepositoryImplTest
Test: manual test on biometric test app
Flag: ACONFIG android.hardware.biometrics.custom_biometric_prompt DEVELOPMENT
Bug: 302735104
API-Coverage-Bug: 302735104

Change-Id: Ic2fbd243c0ba3fe6813addf52270019e68fbee73

Bug: 320414608
Test: builds and boots
Change-Id: Id32a44d0bde08bd47f0d279235768a3dd61572a6

Adds the server side WindowManager components for the screen recording detection API without exposing any new public APIs.

Bug: 304574518
Flag: ACONFIG window_surfaces.screen_recording_callbacks DISABLED
Test: manual, will add CTS tests when exposing the public API
Change-Id: I9ba55493eca4ce774be9e1c135337e76a1cc6c00

com.android.shell for testing and BTS adb shell API.

New permission enables BICS to provide caller with all silently
installed apps for all users on a device without needing caller to be
granted overly permissive access.

For more info: go/bic-v

Bug: 296060433
Test: m
Change-Id: I3c3f9d9dc1d746fedc27bbb6e500f19bae9e72e2

Bug: 310792309
Test: Manually done
Change-Id: I04e2cbf00c3ba5c99eb14b204e82b2f3fb71062f

Use the same key layout for new PID of reference RCU remote

Bug: 318262409
Test: N/A
Change-Id: I18753f423d5df61d1f121000e6588d50ad50e0bb

Promote the Fi specific APIs in TelephonyManager to SystemApis as part
of the mainline modularization for Telecom.

Bug: 307818100
Bug: 311773409
Test: atest TelephonyManagerTest
Change-Id: If349d5132f1faf61410ebe2b3b570ed30fb47754

Bug: 318262409
Test: N/A
Change-Id: I74c57e6a6515055c919e5fb0fef840bdf59b04d3

This change adds BIND_DOMAIN_SELECTION_SERVICE permission to be used by
a DomainSelectionService to ensure that only the system binds to it.
It also grants the permission to the Phone process.

Bug: 258112541
Test: build
Change-Id: I5f544136c5227d1154bd817be3c53b2584f44ca1