Gearslip/gearslip/src/main/AndroidManifest.xml

<?xml version="1.0" encoding="utf-8"?>
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
    xmlns:tools="http://schemas.android.com/tools">

    <!-- The projected WebView loads real pages; without this every load fails silently. -->
    <uses-permission android:name="android.permission.INTERNET" />

    <!--
      Phone mirroring. Android refuses to hand over a MediaProjection unless a foreground
      service of this type is already running, so MirrorService exists purely to satisfy that
      and to give the driver a way to stop the capture from the notification shade.
    -->
    <uses-permission android:name="android.permission.FOREGROUND_SERVICE" />
    <uses-permission android:name="android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION" />
    <uses-permission android:name="android.permission.POST_NOTIFICATIONS" />

    <uses-permission android:name="android.permission.ACCESS_FINE_LOCATION" />
    <uses-permission android:name="android.permission.ACCESS_COARSE_LOCATION" />
    <uses-permission android:name="android.permission.FOREGROUND_SERVICE_LOCATION" />

    <!-- The dashboard opened from the car clock: today's agenda and current weather. -->
    <uses-permission android:name="android.permission.READ_CALENDAR" />

    <!-- Capturing a media app's playback (to send to the car) is gated on this by the platform. -->
    <uses-permission android:name="android.permission.RECORD_AUDIO" />

    <!--
        Playback capture copies a stream rather than moving it, so the phone keeps playing the
        music it is sending to the car. Silencing the phone's own speaker for the drive needs this.
    -->
    <uses-permission android:name="android.permission.MODIFY_AUDIO_SETTINGS" />

    <!--
        Audio capture counts as a screen share, and Android hides notifications during one. The
        protection can be switched off for the drive, but only with this, granted once over adb
        (pm grant). Without it Gearslip works the same and notifications stay hidden.
    -->
    <uses-permission
        android:name="android.permission.WRITE_SECURE_SETTINGS"
        tools:ignore="ProtectedPermissions" />

    <!--
        Phone calls on the car screen. READ_PHONE_STATE and READ_CALL_LOG together are what a
        call's own state (ringing, in progress) and the incoming number need; READ_CONTACTS
        turns that number into a name; ANSWER_PHONE_CALLS lets the driver pick up from here.
        Declining a call, and the caller ID itself, need Gearslip set as the phone's caller ID
        and spam app too - an on-device consent, not a permission declared here.
    -->
    <uses-permission android:name="android.permission.READ_PHONE_STATE" />
    <uses-permission android:name="android.permission.READ_CALL_LOG" />
    <uses-permission android:name="android.permission.READ_CONTACTS" />
    <uses-permission android:name="android.permission.ANSWER_PHONE_CALLS" />

    <!--
      Declared, not just requested. Templated apps decide whether to talk to a host by asking
      whether it holds this permission (HostValidator.isValidHost checks it before falling back
      to a signature allow-list containing Android Auto's). It is defined by the car framework
      on Android Automotive, which does not exist on a phone, so nothing else defines it here
      and Gearslip has to define it to be able to hold it.
    -->
    <permission
        android:name="android.car.permission.TEMPLATE_RENDERER"
        android:protectionLevel="normal" />
    <uses-permission android:name="android.car.permission.TEMPLATE_RENDERER" />

    <uses-feature android:name="android.hardware.usb.accessory" android:required="true" />

    <queries>
    <intent>
        <action android:name="android.intent.action.MAIN" />
        <category android:name="android.intent.category.LAUNCHER" />
    </intent>
    <!-- Templated apps are invisible to us without this, and the catalog comes back empty. -->
    <intent>
        <action android:name="androidx.car.app.CarAppService" />
    </intent>
    <!-- Media apps for the car: found by their browser service. -->
    <intent>
        <action android:name="android.media.browse.MediaBrowserService" />
    </intent>
</queries>

<application
        android:allowBackup="false"
        android:icon="@mipmap/ic_launcher"
        android:roundIcon="@mipmap/ic_launcher"
        android:label="Gearslip"
        android:supportsRtl="true"
        android:theme="@style/Theme.Gearslip">

        <provider
            android:name="androidx.core.content.FileProvider"
            android:authorities="${applicationId}.logshare"
            android:exported="false"
            android:grantUriPermissions="true">
            <meta-data
                android:name="android.support.FILE_PROVIDER_PATHS"
                android:resource="@xml/share_paths" />
        </provider>


        <!--
          singleTop: the head unit can re-attach while we are already foregrounded, which
          arrives via onNewIntent rather than a fresh instance.
        -->
        <activity
            android:name=".GearslipActivity"
            android:exported="true"
            android:launchMode="singleTop"
            android:configChanges="orientation|screenSize|screenLayout|smallestScreenSize|keyboardHidden|uiMode|density|locale|layoutDirection|fontScale">

            <intent-filter>
                <action android:name="android.intent.action.MAIN" />
                <category android:name="android.intent.category.LAUNCHER" />
            </intent-filter>

            <intent-filter>
                <action android:name="android.hardware.usb.action.USB_ACCESSORY_ATTACHED" />
            </intent-filter>

            <meta-data
                android:name="android.hardware.usb.action.USB_ACCESSORY_ATTACHED"
                android:resource="@xml/accessory_filter" />
        </activity>

        <service
            android:name=".mirror.MirrorService"
            android:exported="false"
            android:foregroundServiceType="mediaProjection" />

        <service
            android:name=".host.LocationKeepAlive"
            android:exported="false"
            android:foregroundServiceType="location" />

        <!-- Holds the capture session that carries a media app's audio to the car. -->
        <service
            android:name=".audio.AudioCaptureService"
            android:exported="false"
            android:foregroundServiceType="mediaProjection" />

        <!--
          Touch on the car screen is replayed onto the phone through this service.
          dispatchGesture is the only public way for an app to inject input into another app,
          and it is unavailable until the user enables Gearslip under Settings > Accessibility.
        -->
        <service
            android:name=".mirror.TouchRelayService"
            android:exported="true"
            android:label="Gearslip car touch"
            android:permission="android.permission.BIND_ACCESSIBILITY_SERVICE">
            <intent-filter>
                <action android:name="android.accessibilityservice.AccessibilityService" />
            </intent-filter>
            <meta-data
                android:name="android.accessibilityservice"
                android:resource="@xml/touch_relay" />
        </service>

        <!--
          Reads the phone's notifications so the car can show and answer them. Inert until the
          user grants Notification access to Gearslip in the phone's settings.
        -->
        <service
            android:name=".notify.GearslipNotificationListener"
            android:exported="true"
            android:label="Gearslip notifications"
            android:permission="android.permission.BIND_NOTIFICATION_LISTENER_SERVICE">
            <intent-filter>
                <action android:name="android.service.notification.NotificationListenerService" />
            </intent-filter>
        </service>

        <!--
          Sees incoming calls before they ring, so the car screen can show the caller and
          decline it. Inert until the driver sets Gearslip as the phone's caller ID and spam
          app, under Settings > Apps > Default apps - the same consent a call-blocking app asks
          for, not a privileged one.
        -->
        <service
            android:name=".call.GearslipCallScreening"
            android:exported="true"
            android:label="Gearslip calls"
            android:permission="android.permission.BIND_SCREENING_SERVICE">
            <intent-filter>
                <action android:name="android.telecom.CallScreeningService" />
            </intent-filter>
        </service>
    </application>
</manifest>