common: Initial gms for CP2A

Change-Id: Ia4262e29e67149538b6704b2314781ad
Signed-off-by: zenin1504 <me.zenin1504.dev@gmail.com>

config.mk

@@ -0,0 +1,124 @@
+#
+# Copyright (C) 2018-2019 The Google Pixel3ROM Project
+# Copyright (C) 2024 The hentaiOS Project and its Proprietors
+#
+# Licensed under the Apache License, Version 2.0 (the License);
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an AS IS BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+#
+
+# Quick Tap
+TARGET_SUPPORTS_QUICK_TAP ?= false
+ifeq ($(TARGET_SUPPORTS_QUICK_TAP),true)
+PRODUCT_PACKAGES += \
+    quick_tap
+endif
+
+# product/app
+PRODUCT_PACKAGES += \
+    CalculatorGooglePrebuilt_85006267 \
+    Chrome \
+    Chrome-Stub \
+    GoogleContacts \
+    GoogleTTS \
+    LatinIMEGooglePrebuilt \
+    LocationHistoryPrebuilt \
+    MarkupGoogle_v2 \
+    ModuleMetadataGoogle \
+    PixelThemesStub2025 \
+    SoundPickerPrebuilt_33000242 \
+    TrichromeLibrary \
+    TrichromeLibrary-Stub \
+    WebViewGoogle \
+    WebViewGoogle-Stub \
+    talkback
+
+# product/priv-app
+PRODUCT_PACKAGES += \
+    AndroidAutoStubPrebuilt \
+    BetterBugStub \
+    ConfigUpdater \
+    CustomizationBundlePrebuiltFullVersion \
+    DeviceIntelligenceNetworkPrebuiltAstrea \
+    GoogleDialer \
+    GoogleRestorePrebuilt-v1007163 \
+    KidsSupervisionStub \
+    OdadPrebuilt \
+    PartnerSetupPrebuilt \
+    Phonesky \
+    PrebuiltBugle \
+    PrebuiltDeskClockGoogle_76042511 \
+    PrebuiltPixelCoreServices \
+    SettingsIntelligenceGooglePrebuilt \
+    SetupWizardPrebuilt_versioned \
+    TurboPrebuilt \
+    VerifierPrebuiltClassic \
+    WellbeingPrebuilt
+
+ifneq ($(filter Google google,$(PRODUCT_MANUFACTURER)),)
+PRODUCT_PACKAGES += \
+    SCONE-v69510
+endif
+
+ifneq ($(filter flame coral redfin oriole raven panther cheetah lynx felix shiba husky akita tokay caiman komodo tegu frankel blazer mustang rango stallion, $(LINEAGE_BUILD)),)
+PRODUCT_PACKAGES += \
+    DreamlinerDreamsPrebuilt_100894 \
+    DreamlinerPrebuilt_22000020 \
+    DreamlinerUpdater
+endif
+
+# system/app
+PRODUCT_PACKAGES += \
+    GoogleExtShared \
+    GooglePrintRecommendationService
+
+# system/priv-app
+PRODUCT_PACKAGES += \
+    DocumentsUIGoogle \
+    GoogleExtServices \
+    TagGoogle
+
+# system_ext/app
+PRODUCT_PACKAGES += \
+    EmergencyInfoGoogleNoUi \
+    Flipendo
+
+# system_ext/priv-app
+PRODUCT_PACKAGES += \
+    AvatarPickerGoogle \
+    GoogleFeedback \
+    GoogleServicesFramework \
+    MoseyApp \
+    NexusLauncherRelease \
+    SetupWizardPixelPrebuilt_versioned \
+    WallpaperPickerGoogleRelease
+
+# PrebuiltGmsCore
+PRODUCT_PACKAGES += \
+    PrebuiltGmsCoreVic \
+    PrebuiltGmsCoreVic_AdsDynamite \
+    PrebuiltGmsCoreVic_CronetDynamite \
+    PrebuiltGmsCoreVic_DynamiteLoader \
+    PrebuiltGmsCoreVic_DynamiteModulesA \
+    PrebuiltGmsCoreVic_DynamiteModulesC \
+    PrebuiltGmsCoreVic_GoogleCertificates \
+    PrebuiltGmsCoreVic_MapsDynamite \
+    PrebuiltGmsCoreVic_MeasurementDynamite \
+    AndroidPlatformServices \
+    MlkitBarcodeUIPrebuilt \
+    SpoonPcPrebuilt \
+    TfliteDynamitePrebuilt \
+    VisionBarcodePrebuilt
+
+$(call inherit-product, vendor/extra/common/product/blobs/product_blobs.mk)
+$(call inherit-product, vendor/extra/common/system/blobs/system_blobs.mk)
+$(call inherit-product, vendor/extra/common/system_ext/blobs/system-ext_blobs.mk)

product/Android.bp

@@ -0,0 +1,12 @@
+//
+// Copyright (C) 2025 MicaOS
+//
+// SPDX-License-Identifier: Apache-2.0
+//
+
+install_symlink {
+    name: "MagicPortraitSymLink",
+    system_ext_specific: true,
+    installed_location: "priv-app/MagicPortraitWallpapers/lib/arm64/libtensorflowlite_jni.so",
+    symlink_target: "/system/lib64/libtensorflowlite_jni.so",
+}

product/blobs/etc/ambient/Android.bp

@@ -0,0 +1,23 @@
+//
+// Copyright (C) 2024 The hentaiOS Project and its Proprietors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+
+prebuilt_etc {
+    name: "matcher_tah",
+    product_specific: true,
+    sub_dir: "ambient",
+    src: "matcher_tah.leveldb",
+    filename_from_src: true,
+}

product/blobs/etc/default-permissions/Android.bp

@@ -0,0 +1,143 @@
+//
+// Copyright (C) 2023 Raphielscape LLC.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+
+prebuilt_etc {
+    name: "default-permissions_aiicons",
+    product_specific: true,
+    sub_dir: "default-permissions",
+    src: "default-permissions_aiicons.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "default-permissions_com.google.ambient.streaming",
+    product_specific: true,
+    sub_dir: "default-permissions",
+    src: "default-permissions_com.google.ambient.streaming.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "default-permissions_crossdeviceaccessservice",
+    product_specific: true,
+    sub_dir: "default-permissions",
+    src: "default-permissions_crossdeviceaccessservice.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "default-permissions_customizationbundle",
+    product_specific: true,
+    sub_dir: "default-permissions",
+    src: "default-permissions_customizationbundle.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "default-permissions_diagnostictool",
+    product_specific: true,
+    sub_dir: "default-permissions",
+    src: "default-permissions_diagnostictool.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "default-permissions_nowplaying",
+    product_specific: true,
+    sub_dir: "default-permissions",
+    src: "default-permissions_nowplaying.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "default-permissions_pixelsupport",
+    product_specific: true,
+    sub_dir: "default-permissions",
+    src: "default-permissions_pixelsupport.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "default-permissions_pixelweather",
+    product_specific: true,
+    sub_dir: "default-permissions",
+    src: "default-permissions_pixelweather.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "default-permissions_talkback",
+    product_specific: true,
+    sub_dir: "default-permissions",
+    src: "default-permissions_talkback.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "default-permissions_wallpapereffect",
+    product_specific: true,
+    sub_dir: "default-permissions",
+    src: "default-permissions_wallpapereffect.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "default-permissions-com.google.android.apps.pixel.agent",
+    product_specific: true,
+    sub_dir: "default-permissions",
+    src: "default-permissions-com.google.android.apps.pixel.agent.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "default-permissions-com.google.android.apps.pixel.psi",
+    product_specific: true,
+    sub_dir: "default-permissions",
+    src: "default-permissions-com.google.android.apps.pixel.psi.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "default-permissions-safetyhub",
+    product_specific: true,
+    sub_dir: "default-permissions",
+    src: "default-permissions-safetyhub.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "default-permissions-stargate",
+    product_specific: true,
+    sub_dir: "default-permissions",
+    src: "default-permissions-stargate.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "default-permissions-verifier",
+    product_specific: true,
+    sub_dir: "default-permissions",
+    src: "default-permissions-verifier.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "default_permissions_allowlist",
+    product_specific: true,
+    sub_dir: "default-permissions",
+    src: "default-permissions.xml",
+    filename_from_src: true,
+}

product/blobs/etc/default-permissions/default-permissions-com.google.android.apps.pixel.agent.xml

@@ -0,0 +1,8 @@
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+
+<exceptions>
+  <exception package="com.google.android.apps.pixel.agent">
+    <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
+    <permission name="android.permission.READ_MEDIA_IMAGES" fixed="false"/>
+  </exception>
+</exceptions>

product/blobs/etc/default-permissions/default-permissions-com.google.android.apps.pixel.psi.xml

@@ -0,0 +1,7 @@
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+
+<exceptions>
+  <exception package="com.google.android.apps.pixel.psi">
+    <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
+  </exception>
+</exceptions>

product/blobs/etc/default-permissions/default-permissions-safetyhub.xml

@@ -0,0 +1,25 @@
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+<!--
+    This file contains permissions to be granted by default. Default
+    permissions are granted to special platform components and to apps
+    that are approved to get default grants. The special components
+    are apps that are expected to work out-of-the-box as they provide
+    core use cases such as default dialer, default email, etc. These
+    grants are managed by the platform. The apps that are additionally
+    approved for default grants are ones that provide carrier specific
+    functionality, ones legally required at some location, ones providing
+    alternative disclosure and opt-out UI, ones providing highlight features
+    of a dedicated device, etc. This file contains only the latter exceptions.
+    Fixed permissions cannot be controlled by the user and need a special
+    approval. Typically these are to ensure either legally mandated functions
+    or the app is considered a part of the OS.
+-->
+<exceptions>
+  <exception package="com.google.android.apps.safetyhub">
+    <permission name="android.permission.ACCESS_BACKGROUND_LOCATION" fixed="false"/>
+    <permission name="android.permission.ACCESS_FINE_LOCATION" fixed="false"/>
+    <permission name="android.permission.ACTIVITY_RECOGNITION" fixed="false"/>
+    <permission name="android.permission.RECORD_AUDIO" fixed="false"/>
+    <permission name="android.permission.SEND_SMS" fixed="false"/>
+  </exception>
+</exceptions>

product/blobs/etc/default-permissions/default-permissions-stargate.xml

@@ -0,0 +1,23 @@
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+<!--
+    This file contains permissions to be granted by default. Default
+    permissions are granted to special platform components and to apps
+    that are approved to get default grants. The special components
+    are apps that are expected to work out-of-the-box as they provide
+    core use cases such as default dialer, default email, etc. These
+    grants are managed by the platform. The apps that are additionally
+    approved for default grants are ones that provide carrier specific
+    functionality, ones legally required at some location, ones providing
+    alternative disclosure and opt-out UI, ones providing highlight features
+    of a dedicated device, etc. This file contains only the latter exceptions.
+    Fixed permissions cannot be controlled by the user and need a special
+    approval. Typically these are to ensure either legally mandated functions
+    or the app is considered a part of the OS.
+-->
+<exceptions>
+    <exception package="com.google.android.apps.stargate">
+      <permission name="android.permission.ACCESS_FINE_LOCATION" fixed="false"/>
+      <permission name="android.permission.ACCESS_COARSE_LOCATION" fixed="false"/>
+      <permission name="android.permission.ACCESS_BACKGROUND_LOCATION" fixed="false"/>
+    </exception>
+</exceptions>

product/blobs/etc/default-permissions/default-permissions-verifier.xml

@@ -0,0 +1,38 @@
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+
+<!-- Copyright (C) 2026 Google Inc.
+
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+
+<!--
+    This file contains permissions to be granted by default. Default
+    permissions are granted to special platform components and to apps
+    that are approved to get default grants. The special components
+    are apps that are expected to work out-of-the-box as they provide
+    core use cases such as default dialer, default email, etc. These
+    grants are managed by the platform. The apps that are additionally
+    approved for default grants are ones that provide carrier specific
+    functionality, ones legally required at some location, ones providing
+    alternative disclosure and opt-out UI, ones providing highlight features
+    of a dedicated device, etc. This file contains only the latter exceptions.
+    Fixed permissions cannot be controlled by the user and need a special
+    approval. Typically these are to ensure either legally mandated functions
+    or the app is considered a part of the OS.
+-->
+
+<exceptions>
+    <exception package="com.google.android.verifier">
+        <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
+    </exception>
+</exceptions>

product/blobs/etc/default-permissions/default-permissions.xml

@@ -0,0 +1,182 @@
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+
+<!-- Copyright (C) 2019 Google Inc.
+
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+
+<!--
+    This file contains permissions to be granted by default. Default
+    permissions are granted to special platform components and to apps
+    that are approved to get default grants. The special components
+    are apps that are expected tto work out-of-the-box as they provide
+    core use cases such as default dialer, default email, etc. These
+    grants are managed by the platform. The apps that are additionally
+    approved for default grants are ones that provide carrier specific
+    functionality, ones legally required at some location, ones providing
+    alternative disclosure and opt-out UI, ones providing highlight features
+    of a dedicated device, etc. This file contains only the latter exceptions.
+    Fixed permissions cannot be controlled by the user and need a special
+    approval. Typically these are to ensure either legally mandated functions
+    or the app is considered a part of the OS.
+-->
+
+<exceptions>
+
+    <!-- This is an example of an exception:
+    <exception
+        package="foo.bar.permission"
+      <permission name="android.permission.READ_CONTACTS" fixed="true"/>
+      <permission name="android.permission.READ_CALENDAR" fixed="false"/>
+    </exception>
+    -->
+
+    <exception package="com.google.android.GoogleCamera">
+        <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
+    </exception>
+
+    <exception package="com.google.android.apps.camera.services">
+        <!-- Camera -->
+        <permission name="android.permission.CAMERA" fixed="false"/>
+        <!-- Camera Connectivity -->
+        <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
+        <permission name="android.permission.BLUETOOTH_CONNECT" fixed="false"/>
+        <permission name="android.permission.BLUETOOTH_SCAN" fixed="false"/>
+    </exception>
+
+    <exception package="com.google.android.settings.intelligence">
+        <!-- Calendar -->
+        <permission name="android.permission.READ_CALENDAR" fixed="true"/>
+        <!-- Location -->
+        <permission name="android.permission.ACCESS_FINE_LOCATION" fixed="false"/>
+        <permission name="android.permission.ACCESS_BACKGROUND_LOCATION" fixed="false"/>
+        <!-- Battery Widget -->
+        <permission name="android.permission.BLUETOOTH_CONNECT" fixed="false"/>
+    </exception>
+
+    <exception package="com.google.android.apps.cbrsnetworkmonitor">
+        <!-- Location access to create CBRS geofences-->
+        <permission name="android.permission.ACCESS_FINE_LOCATION" fixed="true"/>
+        <permission name="android.permission.ACCESS_BACKGROUND_LOCATION" fixed="true"/>
+    </exception>
+
+    <exception package="com.google.android.apps.scone">
+        <!-- NLP Location access to determine proximity to country border -->
+        <permission name="android.permission.ACCESS_COARSE_LOCATION" fixed="false"/>
+        <permission name="android.permission.ACCESS_BACKGROUND_LOCATION" fixed="false"/>
+        <!-- Used to call ActivityTransition API for Smart PNO -->
+        <permission name="android.permission.ACTIVITY_RECOGNITION" fixed="false"/>
+        <!-- Used to display notifications for Spectrum Speedboost and Satellite eSOS -->
+        <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
+        <!-- Place the diagnostic call to Google phone number -->
+        <permission name="android.permission.CALL_PHONE" fixed="false"/>
+        <!-- Write the Google phone number into the contact list -->
+        <permission name="android.permission.WRITE_CONTACT" fixed="false"/>
+    </exception>
+
+    <exception package="com.google.android.apps.pixel.relationships">
+        <permission name="android.permission.CALL_PHONE" fixed="false"/>
+        <permission name="android.permission.READ_CALL_LOG" fixed="false"/>
+        <permission name="android.permission.READ_CONTACTS" fixed="false"/>
+        <permission name="android.permission.WRITE_CONTACTS" fixed="false"/>
+    </exception>
+
+    <exception
+            package="com.google.android.apps.restore">
+        <!-- External storage -->
+        <permission name="android.permission.READ_EXTERNAL_STORAGE" fixed="false"/>
+        <permission name="android.permission.WRITE_EXTERNAL_STORAGE" fixed="false"/>
+        <!-- Contacts -->
+        <permission name="android.permission.READ_CONTACTS" fixed="false"/>
+        <permission name="android.permission.WRITE_CONTACTS" fixed="false"/>
+        <!-- Call logs -->
+        <permission name="android.permission.READ_CALL_LOG" fixed="false"/>
+        <permission name="android.permission.WRITE_CALL_LOG" fixed="false"/>
+        <!-- Calendars -->
+        <permission name="android.permission.READ_CALENDAR" fixed="false"/>
+        <!-- Used to set up a Wi-Fi P2P network -->
+        <permission name="android.permission.NEARBY_WIFI_DEVICES" fixed="false"/>
+        <!-- Notifications -->
+        <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
+    </exception>
+
+    <exception
+            package="com.verizon.mips.services">
+        <!-- Call -->
+        <permission name="android.permission.PROCESS_OUTGOING_CALLS" fixed="false"/>
+        <!-- Phone -->
+        <permission name="android.permission.READ_PHONE_STATE" fixed="false"/>
+        <!-- SMS -->
+        <permission name="android.permission.RECEIVE_SMS" fixed="false"/>
+    </exception>
+
+    <exception
+        package="com.google.android.factorytest">
+        <!-- Camera -->
+        <permission name="android.permission.CAMERA" fixed="false"/>
+        <!-- Microphone -->
+        <permission name="android.permission.RECORD_AUDIO" fixed="false"/>
+        <!-- Storage -->
+        <permission name="android.permission.READ_EXTERNAL_STORAGE" fixed="false"/>
+        <permission name="android.permission.WRITE_EXTERNAL_STORAGE" fixed="false"/>
+    </exception>
+
+    <exception package="com.google.android.wfcactivation">
+        <!-- SMS -->
+        <permission name="android.permission.RECEIVE_WAP_PUSH" fixed="false"/>
+        <!-- Notifications -->
+        <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
+    </exception>
+
+    <exception package="com.google.android.apps.accessibility.voiceaccess">
+        <!-- Voice Access: A11y app to allow users to setup & control their devices with voice -->
+        <!-- Approved android bug for pregrant permissions: b/182307492 -->
+
+        <!-- Phone state to turn off Voice Access when user is in a phone call -->
+        <permission name="android.permission.READ_PHONE_STATE" fixed="false"/>
+
+        <!-- Microphone: To hear user's voice commands -->
+        <permission name="android.permission.RECORD_AUDIO" fixed="false"/>
+    </exception>
+    <exception
+        package="com.google.android.deskclock">
+        <!-- Notifications -->
+        <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
+    </exception>
+    <exception
+        package="com.google.android.apps.tips">
+        <!-- Notifications -->
+        <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
+    </exception>
+    <exception
+        package="com.google.android.apps.work.oobconfig">
+        <!-- Notifications -->
+        <permission name="android.permission.POST_NOTIFICATIONS" fixed="true"/>
+    </exception>
+    <exception
+        package="com.google.android.apps.turbo">
+        <!-- Notifications -->
+        <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
+    </exception>
+    <exception
+        package="com.google.android.euicc">
+        <!-- Notifications -->
+        <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
+    </exception>
+    <exception
+        package="com.google.android.apps.privacy.wildlife">
+        <permission name="android.permission.READ_PHONE_STATE" fixed="false"/>
+        <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
+    </exception>
+</exceptions>
+

product/blobs/etc/default-permissions/default-permissions_aiicons.xml

@@ -0,0 +1,38 @@
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+<!--
+  ~ Copyright (C) 2025 The Android Open Source Project
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~      http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+-->
+
+<!--
+    This file contains permissions to be granted by default. Default
+    permissions are granted to special platform components and to apps
+    that are approved to get default grants. The special components
+    are apps that are expected to work out-of-the-box as they provide
+    core use cases such as default dialer, default email, etc. These
+    grants are managed by the platform. The apps that are additionally
+    approved for default grants are ones that provide carrier specific
+    functionality, ones legally required at some location, ones providing
+    alternative disclosure and opt-out UI, ones providing highlight features
+    of a dedicated device, etc. This file contains only the latter exceptions.
+    Fixed permissions cannot be controlled by the user and need a special
+    approval. Typically these are to ensure either legally mandated functions
+    or the app is considered a part of the OS.
+-->
+
+<exceptions>
+    <exception package="com.google.android.apps.ai.icons">
+        <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
+    </exception>
+</exceptions>

product/blobs/etc/default-permissions/default-permissions_com.google.ambient.streaming.xml

@@ -0,0 +1,49 @@
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+<!-- Copyright (C) 2026 Google Inc.
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
+      http://www.apache.org/licenses/LICENSE-2.0
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+<!--
+    This file contains permissions to be granted by default. Default
+    permissions are granted to special platform components and to apps
+    that are approved to get default grants. The special components
+    are apps that are expected to work out-of-the-box as they provide
+    core use cases such as default dialer, default email, etc. These
+    grants are managed by the platform. The apps that are additionally
+    approved for default grants are ones that provide carrier specific
+    functionality, ones legally required at some location, ones providing
+    alternative disclosure and opt-out UI, ones providing highlight features
+    of a dedicated device, etc. This file contains only the latter exceptions.
+    Fixed permissions cannot be controlled by the user and need a special
+    approval. Typically these are to ensure either legally mandated functions
+    or the app is considered a part of the OS.
+-->
+<exceptions>
+    <exception package="com.google.ambient.streaming">
+        <!-- Permissions used by Cross Device Services to discover and connect
+            to nearby devices for cross-devices features. -->
+        <permission name="android.permission.ACCESS_MEDIA_LOCATION" fixed="false"/>
+        <permission name="android.permission.BLUETOOTH_ADVERTISE" fixed="false"/>
+        <permission name="android.permission.BLUETOOTH_CONNECT" fixed="false"/>
+        <permission name="android.permission.BLUETOOTH_SCAN" fixed="false"/>
+        <permission name="android.permission.GET_ACCOUNTS" fixed="false"/>
+        <permission name="android.permission.NEARBY_WIFI_DEVICES" fixed="false"/>
+        <permission name="android.permission.PACKAGE_USAGE_STATS" fixed="false"/>
+        <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
+        <permission name="android.permission.READ_CONTACTS" fixed="false"/>
+        <permission name="android.permission.READ_EXTERNAL_STORAGE" fixed="false"/>
+        <permission name="android.permission.READ_MEDIA_AUDIO" fixed="false"/>
+        <permission name="android.permission.READ_MEDIA_IMAGES" fixed="false"/>
+        <permission name="android.permission.READ_MEDIA_VIDEO" fixed="false"/>
+        <permission name="android.permission.READ_MEDIA_VISUAL_USER_SELECTED" fixed="false"/>
+        <permission name="android.permission.READ_PHONE_STATE" fixed="false"/>
+        <permission name="android.permission.UWB_RANGING" fixed="false"/>
+    </exception>
+</exceptions>

product/blobs/etc/default-permissions/default-permissions_crossdeviceaccessservice.xml

@@ -0,0 +1,24 @@
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+
+<!--
+    This file contains permissions to be granted by default. Default
+    permissions are granted to special platform components and to apps
+    that are approved to get default grants. The special components
+    are apps that are expected to work out-of-the-box as they provide
+    core use cases such as default dialer, default email, etc. These
+    grants are managed by the platform. The apps that are additionally
+    approved for default grants are ones that provide carrier specific
+    functionality, ones legally required at some location, ones providing
+    alternative disclosure and opt-out UI, ones providing highlight features
+    of a dedicated device, etc. This file contains only the latter exceptions.
+    Fixed permissions cannot be controlled by the user and need a special
+    approval. Typically these are to ensure either legally mandated functions
+    or the app is considered a part of the OS.
+-->
+
+<exceptions>
+    <exception package="com.google.android.crossdeviceaccessservice">
+        <permission name="android.permission.BLUETOOTH_CONNECT" fixed="false"/>
+        <permission name="android.permission.UWB_RANGING" fixed="false"/>
+    </exception>
+</exceptions>

product/blobs/etc/default-permissions/default-permissions_customizationbundle.xml

@@ -0,0 +1,39 @@
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+
+<!--
+  ~ Copyright (C) 2025 The Android Open Source Project
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~      http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<!--
+    This file contains permissions to be granted by default. Default
+    permissions are granted to special platform components and to apps
+    that are approved to get default grants. The special components
+    are apps that are expected to work out-of-the-box as they provide
+    core use cases such as default dialer, default email, etc. These
+    grants are managed by the platform. The apps that are additionally
+    approved for default grants are ones that provide carrier specific
+    functionality, ones legally required at some location, ones providing
+    alternative disclosure and opt-out UI, ones providing highlight features
+    of a dedicated device, etc. This file contains only the latter exceptions.
+    Fixed permissions cannot be controlled by the user and need a special
+    approval. Typically these are to ensure either legally mandated functions
+    or the app is considered a part of the OS.
+-->
+
+<exceptions>
+    <exception package="com.google.android.apps.pixel.customizationbundle">
+        <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
+    </exception>
+</exceptions>

product/blobs/etc/default-permissions/default-permissions_diagnostictool.xml

@@ -0,0 +1,54 @@
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+
+<!-- Copyright (C) 2021 Google Inc.
+
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+
+<!--
+    This file contains permissions to be granted by default. Default
+    permissions are granted to special platform components and to apps
+    that are approved to get default grants. The special components
+    are apps that are expected to work out-of-the-box as they provide
+    core use cases such as default dialer, default email, etc. These
+    grants are managed by the platform. The apps that are additionally
+    approved for default grants are ones that provide carrier specific
+    functionality, ones legally required at some location, ones providing
+    alternative disclosure and opt-out UI, ones providing highlight features
+    of a dedicated device, etc. This file contains only the latter exceptions.
+    Fixed permissions cannot be controlled by the user and need a special
+    approval. Typically these are to ensure either legally mandated functions
+    or the app is considered a part of the OS.
+-->
+
+<exceptions>
+
+    <!-- This is an example of an exception:
+    <exception
+        package="foo.bar.permission"
+      <permission name="android.permission.READ_CONTACTS" fixed="true"/>
+      <permission name="android.permission.READ_CALENDAR" fixed="false"/>
+    </exception>
+    -->
+
+    <exception package="com.google.android.apps.diagnosticstool">
+        <permission name="android.permission.READ_PHONE_STATE" fixed="false"/>
+        <permission name="android.permission.BLUETOOTH_CONNECT" fixed="false"/>
+        <permission name="android.permission.BLUETOOTH_SCAN" fixed="false"/>
+        <permission name="android.permission.CAMERA" fixed="false"/>
+        <permission name="android.permission.ACCESS_FINE_LOCATION" fixed="false"/>
+        <permission name="android.permission.RECORD_AUDIO" fixed="false"/>
+        <permission name="android.permission.NEARBY_WIFI_DEVICES" fixed="false"/>
+    </exception>
+
+</exceptions>

product/blobs/etc/default-permissions/default-permissions_nowplaying.xml

@@ -0,0 +1,7 @@
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+
+<exceptions>
+  <exception package="com.google.android.apps.pixel.nowplaying">
+    <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
+  </exception>
+</exceptions>

product/blobs/etc/default-permissions/default-permissions_pixelsupport.xml

@@ -0,0 +1,10 @@
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+
+<exceptions>
+    <exception package="com.google.android.apps.pixel.support">
+        <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
+        <permission name="android.permission.BLUETOOTH_CONNECT" fixed="false"/>
+        <permission name="android.permission.BLUETOOTH_SCAN" fixed="false"/>
+        <permission name="android.permission.RECORD_AUDIO" fixed="false"/>
+    </exception>
+</exceptions>

product/blobs/etc/default-permissions/default-permissions_pixelweather.xml

@@ -0,0 +1,40 @@
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+
+<!--
+  ~ Copyright (C) 2024 The Android Open Source Project
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~      http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<!--
+    This file contains permissions to be granted by default. Default
+    permissions are granted to special platform components and to apps
+    that are approved to get default grants. The special components
+    are apps that are expected to work out-of-the-box as they provide
+    core use cases such as default dialer, default email, etc. These
+    grants are managed by the platform. The apps that are additionally
+    approved for default grants are ones that provide carrier specific
+    functionality, ones legally required at some location, ones providing
+    alternative disclosure and opt-out UI, ones providing highlight features
+    of a dedicated device, etc. This file contains only the latter exceptions.
+    Fixed permissions cannot be controlled by the user and need a special
+    approval. Typically these are to ensure either legally mandated functions
+    or the app is considered a part of the OS.
+-->
+
+<exceptions>
+    <exception package="com.google.android.apps.weather">
+     <permission name="android.permission.ACCESS_BACKGROUND_LOCATION" fixed="false"/>
+     <permission name="android.permission.ACCESS_COARSE_LOCATION" fixed="false"/>
+    </exception>
+</exceptions>

product/blobs/etc/default-permissions/default-permissions_talkback.xml

@@ -0,0 +1,32 @@
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+
+<!-- Copyright (C) 2022 Google Inc.
+
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+
+<exceptions>
+
+    <exception package="com.google.android.marvin.talkback">
+        <!-- TalkBack: screen-reader for blind/low-vision users -->
+
+        <!-- Phone state to reduce feedback when user is in a phone call -->
+        <permission name="android.permission.READ_PHONE_STATE" fixed="false"/>
+        <!-- Facilitate BT-capable braille displays with these BLUETOOTH pregrants -->
+        <permission name="android.permission.BLUETOOTH_CONNECT" fixed="false"/>
+        <permission name="android.permission.BLUETOOTH_SCAN" fixed="false"/>
+        <permission name="android.permission.BLUETOOTH_ADVERTISE" fixed="false"/>
+    </exception>
+
+</exceptions>
+

product/blobs/etc/default-permissions/default-permissions_wallpapereffect.xml

@@ -0,0 +1,23 @@
+<?xml version='1.0' encoding='utf-8' standalone='yes' ?>
+
+<!--
+    This file contains permissions to be granted by default. Default
+    permissions are granted to special platform components and to apps
+    that are approved to get default grants. The special components
+    are apps that are expected to work out-of-the-box as they provide
+    core use cases such as default dialer, default email, etc. These
+    grants are managed by the platform. The apps that are additionally
+    approved for default grants are ones that provide carrier specific
+    functionality, ones legally required at some location, ones providing
+    alternative disclosure and opt-out UI, ones providing highlight features
+    of a dedicated device, etc. This file contains only the latter exceptions.
+    Fixed permissions cannot be controlled by the user and need a special
+    approval. Typically these are to ensure either legally mandated functions
+    or the app is considered a part of the OS.
+-->
+
+<exceptions>
+    <exception package="com.google.android.wallpaper.effects">
+      <permission name="android.permission.POST_NOTIFICATIONS" fixed="false"/>
+    </exception>
+</exceptions>

product/blobs/etc/permissions/Android.bp

@@ -0,0 +1,215 @@
+//
+// Copyright (C) 2024 The hentaiOS Project and its Proprietors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+
+prebuilt_etc {
+    name: "android.hardware.telephony.satellite",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "android.hardware.telephony.satellite.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "com.google.SSRestartDetector",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "com.google.SSRestartDetector.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "com.google.android.aicore",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "com.google.android.aicore.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "com.google.android.apps.stargate",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "com.google.android.apps.stargate.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "com.google.android.apps.stargate.support",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "com.google.android.apps.stargate.support.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "com.android.omadm.service",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "com.android.omadm.service.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "com.android.sdm.plugins.connmo",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "com.android.sdm.plugins.connmo.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "com.android.sdm.plugins.dcmo",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "com.android.sdm.plugins.dcmo.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "com.android.sdm.plugins.diagmon",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "com.android.sdm.plugins.diagmon.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "com.google.android.apps.diagnosticstool",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "com.google.android.apps.diagnosticstool.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "com.google.android.apps.dreamliner",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "com.google.android.apps.dreamliner.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "com.google.android.apps.setupwizard.searchselector",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "com.google.android.apps.setupwizard.searchselector.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "com.google.android.dialer.support",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "com.google.android.dialer.support.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "com.google.android.odad",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "com.google.android.odad.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "com.google.android.verifier",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "com.google.android.verifier.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "com.google.omadm.trigger",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "com.google.omadm.trigger.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "com.verizon.apn",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "com.verizon.apn.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "com.verizon.services",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "com.verizon.services.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "features-verizon",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "features-verizon.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "privapp-permissions-glasses-core",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "privapp-permissions-glasses-core.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "privapp-permissions-google-p",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "privapp-permissions-google-p.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "privapp-permissions-google-pearl",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "privapp-permissions-google-pearl.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "privapp-permissions-google-spoon",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "privapp-permissions-google-spoon.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "split-permissions-google",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "split-permissions-google.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "velvet_app-privapp-permissions",
+    product_specific: true,
+    sub_dir: "permissions",
+    src: "velvet_app-privapp-permissions.xml",
+    filename_from_src: true,
+}

product/blobs/etc/permissions/android.hardware.telephony.satellite.xml

@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--
+  ~ Copyright (C) 2024 The Android Open Source Project
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~      http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<!-- This is the standard set of features for devices to support Telephony Satellite API. -->
+<permissions>
+    <feature name="android.hardware.telephony" />
+    <feature name="android.hardware.telephony.satellite" />
+</permissions>

product/blobs/etc/permissions/com.android.omadm.service.xml

@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="utf-8"?>
+<permissions>
+    <assign-permission name="com.android.permission.INJECT_OMADM_SETTINGS" uid="shell" />
+
+    <privapp-permissions package="com.android.omadm.service">
+        <permission name="android.permission.CHANGE_CONFIGURATION"/>
+        <permission name="android.permission.CONNECTIVITY_INTERNAL"/>
+        <permission name="android.permission.CONNECTIVITY_USE_RESTRICTED_NETWORKS"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.WRITE_APN_SETTINGS"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+    </privapp-permissions>
+</permissions>

product/blobs/etc/permissions/com.android.sdm.plugins.connmo.xml

@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<permissions>
+    <privapp-permissions package="com.android.sdm.plugins.connmo">
+        <permission name="android.permission.CHANGE_CONFIGURATION"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.WRITE_APN_SETTINGS"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+    </privapp-permissions>
+</permissions>

product/blobs/etc/permissions/com.android.sdm.plugins.dcmo.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<permissions>
+    <privapp-permissions package="com.android.sdm.plugins.dcmo">
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+    </privapp-permissions>
+</permissions>

product/blobs/etc/permissions/com.android.sdm.plugins.diagmon.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<permissions>
+    <privapp-permissions package="com.android.sdm.plugins.diagmon">
+        <permission name="android.permission.ACCESS_COARSE_LOCATION"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.READ_PRECISE_PHONE_STATE"/>
+    </privapp-permissions>
+</permissions>

product/blobs/etc/permissions/com.google.SSRestartDetector.xml

@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--
+  ~ Copyright (C) 2023 Google LLC
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~      http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License
+  -->
+
+<permissions>
+    <privapp-permissions package="com.google.SSRestartDetector">
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.READ_LOGS"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+    </privapp-permissions>
+</permissions>

product/blobs/etc/permissions/com.google.android.aicore.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--Copyright 2024 Google Inc. All Rights Reserved-->
+<permissions>
+    <permission name="com.google.android.aicore.permission.VENDOR_INTELLIGENCE">
+        <group gid="vendor_intelligence"/>
+    </permission>
+</permissions>

product/blobs/etc/permissions/com.google.android.apps.diagnosticstool.xml

@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="utf-8"?>
+<permissions>
+    <privapp-permissions package="com.google.android.apps.diagnosticstool">
+        <permission name="android.permission.CONTROL_DEVICE_LIGHTS" />
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.READ_PRECISE_PHONE_STATE"/>
+        <permission name="android.permission.SCHEDULE_EXACT_ALARM" />
+        <permission name="com.google.android.repairmode.permission.DIAGNOSTICS_TOOL_BROADCAST" />
+    </privapp-permissions>
+</permissions>

product/blobs/etc/permissions/com.google.android.apps.dreamliner.xml

@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?>
+<permissions>
+    <privapp-permissions package="com.google.android.apps.dreamliner">
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.GET_ACCOUNTS_PRIVILEGED"/>
+        <permission name="android.permission.MODIFY_AUDIO_ROUTING"/>
+        <permission name="android.permission.PROVIDE_TRUST_AGENT"/>
+        <permission name="android.permission.MANAGE_USB"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+        <permission name="android.permission.REAL_GET_TASKS"/>
+    </privapp-permissions>
+</permissions>

product/blobs/etc/permissions/com.google.android.apps.setupwizard.searchselector.xml

@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="utf-8"?>
+<permissions>
+    <privapp-permissions package="com.google.android.apps.setupwizard.searchselector">
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.MANAGE_USERS"/>
+        <permission name="android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+    </privapp-permissions>
+</permissions>

product/blobs/etc/permissions/com.google.android.apps.stargate.support.xml

@@ -0,0 +1,4 @@
+<permissions>
+    <!-- This system feature is required for getting Satellite Gateway Play Store updates. -->
+    <feature name="com.google.android.apps.stargate.SUPPORTED" />
+</permissions>

product/blobs/etc/permissions/com.google.android.apps.stargate.xml

@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--Copyright 2024 Google Inc. All Rights Reserved-->
+<permissions>
+  <privapp-permissions package="com.google.android.apps.stargate">
+        <permission name="android.permission.SATELLITE_COMMUNICATION"/>
+        <permission name="android.permission.BIND_SATELLITE_GATEWAY_SERVICE"/>
+        <permission name="android.permission.CHANGE_OVERLAY_PACKAGES"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND" />
+        <permission name="android.permission.LOCATION_BYPASS"/>
+        <permission name="com.google.android.apps.stargate.permission.SEND_EMERGENCY_INTENTS"/>
+        <permission name="com.google.android.apps.stargate.permission.END_EMERGENCY_INTENTS"/>
+        <permission name="com.google.android.apps.stargate.permission.SEND_NON_EMERGENCY_INTENTS"/>
+        <permission name="com.google.android.apps.stargate.permission.END_NON_EMERGENCY_INTENTS"/>
+        <permission name="com.google.android.apps.messaging.emergency.permission.START_ESOS_CONVERSATION"/>
+    </privapp-permissions>
+</permissions>

product/blobs/etc/permissions/com.google.android.dialer.support.xml

@@ -0,0 +1,11 @@
+<permissions>
+    <!-- Shared library required on the device to get Google Dialer updates from
+         Play Store. This will be deprecated once Google Dialer play store
+         updates stop supporting pre-O devices. -->
+    <library name="com.google.android.dialer.support"
+      file="/product/framework/com.google.android.dialer.support.jar" />
+
+    <!-- Starting from Android O and above, this system feature is required for
+         getting Google Dialer play store updates. -->
+    <feature name="com.google.android.apps.dialer.SUPPORTED" />
+</permissions>

product/blobs/etc/permissions/com.google.android.odad.xml

@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="utf-8"?>
+<permissions>
+    <privapp-permissions package="com.google.android.odad">
+        <permission name="android.permission.GET_APP_OPS_STATS"/>
+        <permission name="android.permission.READ_OEM_UNLOCK_STATE"/>
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+        <permission name="android.permission.SEND_SAFETY_CENTER_UPDATE"/>
+        <permission name="android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME"/>
+        <permission name="android.permission.MANAGE_VIRTUAL_MACHINE"/>
+        <permission name="android.permission.FOREGROUND_SERVICE"/>
+        <permission name="android.permission.FOREGROUND_SERVICE_SYSTEM_EXEMPTED"/>
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND"/>
+        <permission name="android.permission.SYSTEM_ALERT_WINDOW"/>
+        <permission name="android.permission.SYSTEM_APPLICATION_OVERLAY"/>
+        <permission name="android.permission.GET_BACKGROUND_INSTALLED_PACKAGES"/>
+        <permission name="android.permission.DUMP"/>
+    </privapp-permissions>
+</permissions>

product/blobs/etc/permissions/com.google.android.verifier.xml

@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Copyright (C) 2025 Google Inc.
+
+     Licensed under the Apache License, Version 2.0 (the "License");
+     you may not use this file except in compliance with the License.
+     You may obtain a copy of the License at
+
+          http://www.apache.org/licenses/LICENSE-2.0
+
+     Unless required by applicable law or agreed to in writing, software
+     distributed under the License is distributed on an "AS IS" BASIS,
+     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+     See the License for the specific language governing permissions and
+     limitations under the License.
+-->
+<permissions>
+    <privapp-permissions package="com.google.android.verifier">
+        <permission name="android.permission.DEVELOPER_VERIFICATION_AGENT"/>
+        <permission name="android.permission.INTERACT_ACROSS_USERS" />
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE" />
+        <permission name="android.permission.GET_ROLE_HOLDERS" />
+        <permission name="android.permission.MANAGE_USERS" />
+    </privapp-permissions>
+</permissions>

product/blobs/etc/permissions/com.google.omadm.trigger.xml

@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="utf-8"?>
+<permissions>
+    <privapp-permissions package="com.google.omadm.trigger">
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.SCHEDULE_EXACT_ALARM"/>
+    </privapp-permissions>
+</permissions>
+

product/blobs/etc/permissions/com.verizon.apn.xml

@@ -0,0 +1,5 @@
+<?xml version="1.0" encoding="utf-8"?>
+<permissions>
+    <library name="com.vzw.apnlib"
+            file="/product/app/VZWAPNLib/VZWAPNLib.apk"/>
+</permissions>

product/blobs/etc/permissions/com.verizon.services.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<permissions>
+    <privapp-permissions package="com.verizon.services">
+        <permission name="android.permission.CARRIER_FILTER_SMS"/>
+    </privapp-permissions>
+</permissions>

product/blobs/etc/permissions/features-verizon.xml

@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<permissions>
+    <!-- b/62271110 Support Verizon LTE and eHRPD -->
+    <feature name="com.verizon.hardware.telephony.lte"/>
+    <feature name="com.verizon.hardware.telephony.ehrpd"/>
+</permissions>

product/blobs/etc/permissions/privapp-permissions-glasses-core.xml

@@ -0,0 +1,60 @@
+<?xml version='1.0' encoding='utf-8'?>
+
+<!-- Copyright (C) 2024 Google Inc.
+
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License.
+-->
+
+<!--
+    This file contains permissions to be granted by default. Default
+    permissions are granted to special platform components and to apps
+    that are approved to get default grants. The special components
+    are apps that are expected to work out-of-the-box as they provide
+    core use cases such as default dialer, default email, etc. These
+    grants are managed by the platform. The apps that are additionally
+    approved for default grants are ones that provide carrier specific
+    functionality, ones legally required at some location, ones providing
+    alternative disclosure and opt-out UI, ones providing highlight features
+    of a dedicated device, etc. This file contains only the latter exceptions.
+    Fixed permissions cannot be controlled by the user and need a special
+    approval. Typically these are to ensure either legally mandated functions
+    or the app is considered a part of the OS.
+-->
+
+<permissions>
+    <privapp-permissions package="com.google.android.glasses.core">
+        <permission name="android.permission.MODIFY_AUDIO_ROUTING" />
+        <permission name="android.permission.REQUEST_COMPANION_PROFILE_NEARBY_DEVICE_STREAMING" />
+        <permission name="android.permission.REQUEST_COMPANION_SELF_MANAGED" />
+        <permission name="android.permission.WRITE_SECURE_SETTINGS" />
+        <permission name="android.permission.CAPTURE_AUDIO_OUTPUT" />
+        <permission name="android.permission.USER_ACTIVITY" />
+        <permission name="android.permission.MANAGE_WEARABLE_SENSING_SERVICE" />
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND" />
+        <permission name="android.permission.ACCESS_AMBIENT_CONTEXT_EVENT" />
+        <permission name="android.permission.INTERACT_ACROSS_USERS" />
+        <permission name="android.permission.ACCESS_SMARTSPACE" />
+        <permission name="android.permission.WATCH_APPOPS" />
+        <permission name="android.permission.MANAGE_WIFI_NETWORK_SELECTION" />
+        <permission name="android.permission.BLUETOOTH_PRIVILEGED" />
+        <permission name="android.permission.MODIFY_PHONE_STATE" />
+        <permission name="android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME" />
+        <permission name="android.permission.ACCESS_COMPANION_INFO" />
+        <permission name="android.permission.READ_WIFI_CREDENTIAL" />
+        <!--
+            Required to call the getHistoricalProcessExitReasons method that is
+            used to monitor if an application has crashed.
+        -->
+        <permission name="android.permission.DUMP" />
+    </privapp-permissions>
+</permissions>

product/blobs/etc/permissions/privapp-permissions-google-p.xml

@@ -0,0 +1,1146 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--
+  ~ Copyright (C) 2018 The Android Open Source Project
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~      http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License
+  -->
+
+<!--
+This XML file declares which signature|privileged permissions should be granted to privileged
+applications in /product GMS or Google-branded devices.
+It allows additional grants on top of privapp-permissions-platform.xml
+-->
+<permissions>
+
+    <privapp-permissions package="com.google.android.deskclock">
+      <permission name="android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND"/>
+      <permission name="android.permission.CONTROL_DISPLAY_COLOR_TRANSFORMS"/>
+      <permission name="android.permission.QUERY_USERS" />
+    </privapp-permissions>
+
+    <privapp-permissions package="com.android.angle">
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.aicore">
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.MANAGE_VIRTUAL_MACHINE"/>
+        <permission name="android.permission.READ_DEVICE_CONFIG"/>
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+        <permission name="android.permission.REAL_GET_TASKS"/>
+        <!-- Added in 24Q3 release -->
+        <permission name="android.permission.USE_ON_DEVICE_INTELLIGENCE"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+        <!-- Added in 25Q4 release -->
+        <permission name="android.permission.GET_BINDING_UID_IMPORTANCE"/>
+        <!-- Added in 26Q2 release -->
+        <permission name="android.permission.MANAGE_AISEAL_VIRTUAL_MACHINE"/>
+        <permission name="android.permission.ACCESS_NPU_MODEL_MANAGER_API"/>
+        <permission name="android.permission.ATTRIBUTE_WORK_TO_OTHER_APPS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.nbu.files">
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.camera.services">
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.MODIFY_AUDIO_ROUTING"/>
+        <permission name="android.permission.CAPTURE_AUDIO_OUTPUT"/>
+        <permission name="android.permission.MANAGE_USB"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.carrier.log">
+        <permission name="android.permission.BATTERY_STATS"/>
+        <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
+        <permission name="android.permission.DUMP"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>.
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.helprtc">
+        <permission name="android.permission.CAPTURE_VIDEO_OUTPUT"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.betterbug">
+        <permission name="android.permission.DUMP"/>
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.MANAGE_USERS"/>
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+        <permission name="android.permission.READ_DROPBOX_DATA"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.READ_LOGS"/>
+        <permission name="android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND"/>
+        <permission name="android.permission.LOCAL_MAC_ADDRESS"/>
+        <permission name="android.permission.BLUETOOTH_PRIVILEGED"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.internal.betterbug">
+        <permission name="android.permission.DUMP"/>
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.MANAGE_USERS"/>
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+        <permission name="android.permission.READ_DROPBOX_DATA"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.READ_LOGS"/>
+        <permission name="android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND"/>
+        <permission name="android.permission.LOCAL_MAC_ADDRESS"/>
+        <permission name="android.permission.BLUETOOTH_PRIVILEGED"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.betterbug.partners">
+        <permission name="android.permission.DUMP"/>
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.MANAGE_USERS"/>
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+        <permission name="android.permission.READ_DROPBOX_DATA"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.READ_LOGS"/>
+        <permission name="android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND"/>
+        <permission name="android.permission.LOCAL_MAC_ADDRESS"/>
+        <permission name="android.permission.BLUETOOTH_PRIVILEGED"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.gmm.dev">
+        <permission name="android.permission.SATELLITE_COMMUNICATION"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.gmm">
+        <permission name="android.permission.SATELLITE_COMMUNICATION"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.gmm.fishfood">
+        <permission name="android.permission.SATELLITE_COMMUNICATION"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.gmm.qp">
+        <permission name="android.permission.SATELLITE_COMMUNICATION"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.maps">
+        <permission name="android.permission.SATELLITE_COMMUNICATION"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.pixel.creativeassistant">
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.pixel.customizationbundle">
+        <permission name="android.permission.SET_WALLPAPER_COMPONENT"/>
+        <permission name="android.permission.READ_WALLPAPER_INTERNAL"/>
+        <permission name="android.permission.BIND_WALLPAPER"/>
+        <permission name="android.permission.WRITE_SETTINGS"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+        <permission name="android.permission.MODIFY_DAY_NIGHT_MODE"/>
+        <permission name="android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.pixel.relationships">
+        <!-- Permissions for personal context card in Pixel Relationships overlay. -->
+        <permission name="android.permission.PERSONAL_CONTEXT_PUBLISH_HINTS" />
+        <permission name="android.permission.PERSONAL_CONTEXT_RECEIVE_INSIGHTS" />
+        <permission name="android.permission.PERSONAL_CONTEXT_HOST_INSIGHT_SURFACE" />
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.pulse">
+        <permission name="android.permission.CONFIGURE_ANOMALY_DETECTOR"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.restore">
+        <permission name="android.permission.ACCESS_LAUNCHER_DATA"/>
+        <permission name="android.permission.BACKUP"/>
+        <permission name="android.permission.MANAGE_USB"/>
+        <permission name="android.permission.MANAGE_USERS"/>
+        <permission name="android.permission.MANAGE_WIFI_NETWORK_SELECTION"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.OVERRIDE_WIFI_CONFIG"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.READ_WIFI_CREDENTIAL"/>
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME"/>
+        <permission name="android.permission.WRITE_EMBEDDED_SUBSCRIPTIONS"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.safetyhub">
+        <permission name="android.permission.ACCESS_BACKGROUND_LOCATION"/>
+        <permission name="android.permission.ACCESS_CONTEXT_HUB"/>
+        <permission name="android.permission.ACCESS_FINE_LOCATION"/>
+        <permission name="android.permission.ACTIVITY_RECOGNITION"/>
+        <permission name="android.permission.CALL_PRIVILEGED"/>
+        <permission name="android.permission.CAPTURE_AUDIO_OUTPUT"/>
+        <permission name="android.permission.BYPASS_CONCURRENT_RECORD_AUDIO_RESTRICTION"/>
+        <permission name="android.permission.CONTROL_INCALL_EXPERIENCE"/>
+        <permission name="android.permission.MANAGE_USERS"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.READ_SYSTEM_GRAMMATICAL_GENDER"/>
+        <permission name="android.permission.RECEIVE_EMERGENCY_BROADCAST"/>
+        <permission name="android.permission.RECORD_AUDIO"/>
+        <permission name="android.permission.SCHEDULE_EXACT_ALARM"/>
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.scone">
+        <permission name="android.permission.ACCESS_CONTEXT_HUB"/>
+        <permission name="android.permission.BLUETOOTH_PRIVILEGED"/>
+        <permission name="android.permission.CONTROL_INCALL_EXPERIENCE"/>
+        <permission name="android.permission.DUMP"/>
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.LOCATION_HARDWARE"/>
+        <permission name="android.permission.LOCATION_BYPASS"/>
+        <permission name="android.permission.MANAGE_USB"/>
+        <permission name="android.permission.MODIFY_AUDIO_ROUTING"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.MONITOR_DEFAULT_SMS_PACKAGE"/>
+        <permission name="android.permission.OVERRIDE_WIFI_CONFIG"/>
+        <permission name="android.permission.READ_PRECISE_PHONE_STATE"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.WIFI_UPDATE_USABILITY_STATS_SCORE"/>
+        <permission name="android.permission.WIFI_SET_DEVICE_MOBILITY_STATE"/>
+        <permission name="android.permission.NETWORK_SCAN"/>
+        <permission name="android.permission.REGISTER_STATS_PULL_ATOM"/>
+        <permission name="android.permission.RENOUNCE_PERMISSIONS"/>
+        <permission name="android.permission.RESTART_WIFI_SUBSYSTEM"/>
+        <permission name="android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+        <permission name="android.permission.SATELLITE_COMMUNICATION"/>
+        <permission name="android.permission.REBOOT"/>
+        <permission name="android.permission.WRITE_APN_SETTINGS"/>
+        <permission name="android.permission.BROADCAST_CLOSE_SYSTEM_DIALOGS"/>
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+        <permission name="android.permission.READ_DROPBOX_DATA"/>
+        <permission name="android.permission.READ_LOGS"/>
+        <permission name="android.permission.THREAD_NETWORK_PRIVILEGED"/>
+        <permission name="android.permission.MANAGE_GAME_MODE"/>
+        <permission name="android.permission.USE_ICC_AUTH"/>
+        <permission name="android.iwlan.permission.RESTART_IWLAN"/>
+        <permission name="com.google.android.apps.stargate.permission.SEND_EMERGENCY_INTENTS"/>
+        <permission name="com.google.android.apps.stargate.permission.END_EMERGENCY_INTENTS"/>
+        <permission name="com.google.android.apps.stargate.permission.SEND_NON_EMERGENCY_INTENTS"/>
+        <permission name="com.google.android.apps.stargate.permission.END_NON_EMERGENCY_INTENTS"/>
+        <permission name="com.google.android.apps.stargate.endpointservice.ACCESS_ENDPOINT_SERVICE"/>
+        <permission name="com.google.android.modem.pms.permission.USE_MODEM_SERVICE"/>
+        <permission name="com.google.android.modem.pms.permission.ACCESS_DEBUG"/>
+        <permission name="com.google.android.modem.pms.permission.MODEM_TRACING_AND_ANALYITICS"/>
+        <permission name="com.google.android.modem.pms.permission.READ_MODEM_INFO"/>
+        <permission name="com.google.android.modem.pms.permission.SEND_TRAFFIC_CONFIG"/>
+        <permission name="com.google.android.permission.USE_GRIL"/>
+        <permission name="com.google.android.rilextension.permission.REPORT_RIL_ISSUE"/>
+        <permission name="com.google.android.sconenetworkagent.permission.BIND_SCONE_NETWORK_AGENT"/>
+        <permission name="com.google.pixel.iwlan.permission.RESTART_IWLAN"/>
+        <permission name="com.google.android.carrier.permission.MANAGE_CARRIER_SETTINGS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.wearables.maestro.companion">
+        <permission name="android.permission.BLUETOOTH_PRIVILEGED"/>
+        <permission name="android.permission.MANAGE_USB"/>
+        <permission name="android.permission.MODIFY_DEFAULT_AUDIO_EFFECTS"/>
+        <permission name="android.permission.READ_SYSTEM_GRAMMATICAL_GENDER"/>
+        <permission name="android.permission.MODIFY_AUDIO_ROUTING"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.pixel.ensemble">
+        <permission name="android.permission.MANAGE_USB"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.pixel.dcservice">
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.MODIFY_AUDIO_ROUTING"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.work.oobconfig">
+        <permission name="android.permission.CONNECTIVITY_INTERNAL"/>
+        <permission name="android.permission.CONNECTIVITY_USE_RESTRICTED_NETWORKS"/>
+        <permission name="android.permission.DISPATCH_PROVISIONING_MESSAGE"/>
+        <permission name="android.permission.MANAGE_USERS"/>
+        <permission name="android.permission.MANAGE_CARRIER_OEM_UNLOCK_STATE" />
+        <permission name="android.permission.MASTER_CLEAR"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.as">
+        <permission name="android.permission.ACCESS_CONTEXT_HUB"/>
+        <permission name="android.permission.ACCESS_HIDDEN_PROFILES_FULL"/>
+        <permission name="android.permission.ACCESS_TEXT_CLASSIFIER_BY_TYPE"/>
+        <permission name="android.permission.ACCESS_ULTRASOUND"/>
+        <permission name="android.permission.BLUETOOTH_PRIVILEGED"/>
+        <permission name="android.permission.CAPTURE_AUDIO_HOTWORD"/>
+        <permission name="android.permission.CAPTURE_AUDIO_OUTPUT"/>
+        <permission name="android.permission.CAPTURE_MEDIA_OUTPUT"/>
+        <permission name="android.permission.CAPTURE_VOICE_COMMUNICATION_OUTPUT"/>
+        <permission name="android.permission.BYPASS_CONCURRENT_RECORD_AUDIO_RESTRICTION"/>
+        <permission name="android.permission.CONTROL_INCALL_EXPERIENCE"/>
+        <permission name="android.permission.EXEMPT_FROM_AUDIO_RECORD_RESTRICTIONS"/>
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.LOCATION_HARDWARE"/>
+        <permission name="android.permission.MANAGE_CLOUDSEARCH"/>
+        <permission name="android.permission.MANAGE_SOUND_TRIGGER"/>
+        <permission name="android.permission.MANAGE_MUSIC_RECOGNITION"/>
+        <permission name="android.permission.MANAGE_UI_TRANSLATION"/>
+        <permission name="android.permission.MODIFY_AUDIO_ROUTING"/>
+        <permission name="android.permission.MODIFY_AUDIO_SETTINGS_PRIVILEGED" />
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.MONITOR_DEFAULT_SMS_PACKAGE"/>
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+        <permission name="android.permission.QUERY_USERS"/>
+        <permission name="android.permission.READ_OEM_UNLOCK_STATE"/>
+        <permission name="android.permission.READ_SYSTEM_GRAMMATICAL_GENDER" />
+        <permission name="android.permission.REQUEST_NOTIFICATION_ASSISTANT_SERVICE"/>
+        <permission name="android.permission.SET_SYSTEM_AUDIO_CAPTION"/>
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME"/>
+        <permission name="android.permission.SYSTEM_CAMERA"/>
+        <permission name="android.permission.UPDATE_DEVICE_STATS"/>
+        <permission name="android.permission.USE_ON_DEVICE_INTELLIGENCE"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+        <!-- Permission to publish hints for personal context. -->
+        <permission name="android.permission.PERSONAL_CONTEXT_PUBLISH_HINTS"/>
+        <!-- Permission to refine hints for personal context. -->
+        <permission name="android.permission.PERSONAL_CONTEXT_RECEIVE_HINTS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.as.oss">
+      <permission name="android.permission.READ_RESTRICTED_STATS"/>
+      <permission name="android.permission.READ_SYSTEM_GRAMMATICAL_GENDER" />
+      <permission name="android.permission.PROVIDE_PRIVATE_COMPUTE_SERVICES"/>
+      <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+      <!-- Permission to receive insights for personal context visualizer. -->
+      <permission name="android.permission.PERSONAL_CONTEXT_RECEIVE_INSIGHTS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.carrier">
+        <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
+        <permission name="android.permission.INTERACT_ACROSS_USERS" />
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.WRITE_APN_SETTINGS"/>
+        <permission name="com.android.permission.INSTALL_EXISTING_PACKAGES" />
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.carrier.carrierwifi">
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.NETWORK_CARRIER_PROVISIONING"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.WIFI_UPDATE_USABILITY_STATS_SCORE"/>
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.LOCATION_HARDWARE"/>
+        <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
+        <permission name="android.permission.MANAGE_WIFI_NETWORK_SELECTION"/>
+    </privapp-permissions>
+
+     <privapp-permissions package="com.google.android.contacts">
+        <!-- Permissions for personal context badge in Pixel Relationships widget. -->
+        <permission name="android.permission.PERSONAL_CONTEXT_PUBLISH_HINTS" />
+        <permission name="android.permission.PERSONAL_CONTEXT_RECEIVE_INSIGHTS" />
+        <permission name="android.permission.PERSONAL_CONTEXT_HOST_INSIGHT_SURFACE" />
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.dialer">
+        <permission name="android.permission.ALLOW_ANY_CODEC_FOR_PLAYBACK"/>
+        <permission name="android.permission.BROADCAST_CLOSE_SYSTEM_DIALOGS"/>
+        <permission name="android.permission.CAPTURE_AUDIO_OUTPUT"/>
+        <permission name="android.permission.CAPTURE_VOICE_COMMUNICATION_OUTPUT"/>
+        <permission name="android.permission.BYPASS_CONCURRENT_RECORD_AUDIO_RESTRICTION"/>
+        <permission name="android.permission.CONNECTIVITY_USE_RESTRICTED_NETWORKS"/>
+        <permission name="android.permission.CONTROL_INCALL_EXPERIENCE"/>
+        <permission name="android.permission.GET_ACCOUNTS_PRIVILEGED"/>
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.LOCATION_BYPASS"/>
+        <permission name="android.permission.MODIFY_AUDIO_ROUTING"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.READ_SYSTEM_GRAMMATICAL_GENDER"/>
+        <permission name="android.permission.REGISTER_CONNECTION_MANAGER"/>
+        <permission name="android.permission.SATELLITE_COMMUNICATION"/>
+        <permission name="android.permission.STATUS_BAR"/>
+        <permission name="android.permission.STOP_APP_SWITCHES"/>
+        <permission name="android.permission.READ_PRECISE_PHONE_STATE"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.PERSONAL_CONTEXT_HOST_INSIGHT_SURFACE"/>
+        <permission name="android.permission.PERSONAL_CONTEXT_PUBLISH_HINTS"/>
+        <permission name="android.permission.PERSONAL_CONTEXT_RECEIVE_INSIGHTS"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+        <permission name="com.android.voicemail.permission.READ_VOICEMAIL"/>
+        <permission name="com.android.voicemail.permission.WRITE_VOICEMAIL"/>
+        <permission name="com.google.android.dialer.permission.RECEIVE_RING_STATE"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.weather">
+        <permission name="android.permission.PERSONAL_CONTEXT_PUBLISH_HINTS" />
+        <permission name="android.permission.PERSONAL_CONTEXT_RECEIVE_INSIGHTS" />
+        <permission name="android.permission.PERSONAL_CONTEXT_HOST_INSIGHT_SURFACE" />
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.euicc">
+        <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
+        <permission name="android.permission.CONNECTIVITY_USE_RESTRICTED_NETWORKS"/>
+        <permission name="android.permission.MANAGE_SUBSCRIPTION_PLANS"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.READ_NETWORK_USAGE_HISTORY"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.READ_SUBSCRIPTION_PLANS"/>
+        <permission name="android.permission.REAL_GET_TASKS"/>
+        <permission name="android.permission.REBOOT"/>
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+        <permission name="android.permission.WRITE_EMBEDDED_SUBSCRIPTIONS"/>
+        <permission name="com.android.permission.INSTALL_EXISTING_PACKAGES" />
+        <permission name="com.android.permission.WRITE_EMBEDDED_SUBSCRIPTIONS"/>
+        <permission name="com.google.android.permission.USE_GRIL" />
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.hiddenmenu">
+        <permission name="android.permission.CALL_PRIVILEGED"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.REBOOT"/>
+        <permission name="android.permission.WRITE_APN_SETTINGS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.ims">
+        <permission name="android.permission.CONNECTIVITY_USE_RESTRICTED_NETWORKS"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.PACKET_KEEPALIVE_OFFLOAD"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.messaging">
+        <permission name="android.permission.CONNECTIVITY_USE_RESTRICTED_NETWORKS"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.READ_PRECISE_PHONE_STATE"/>
+        <permission name="android.permission.SCHEDULE_EXACT_ALARM"/>
+        <permission name="android.permission.READ_SYSTEM_GRAMMATICAL_GENDER"/>
+        <permission name="android.permission.PERSONAL_CONTEXT_HOST_INSIGHT_SURFACE"/>
+        <permission name="android.permission.PERSONAL_CONTEXT_PUBLISH_HINTS"/>
+        <permission name="android.permission.PERSONAL_CONTEXT_RECEIVE_INSIGHTS"/>
+        <permission name="android.permission.PERSONAL_CONTEXT_READ_SETTINGS"/>
+        <permission name="android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND"/>
+        <permission name="android.permission.SATELLITE_COMMUNICATION"/>
+        <permission name="com.google.android.apps.stargate.permission.SEND_EMERGENCY_INTENTS"/>
+        <permission name="com.google.android.apps.stargate.permission.END_EMERGENCY_INTENTS"/>
+        <!-- QUERY_USERS permission to call the UserManager#isMainUser system API
+         from the privileged messaging app. -->
+        <permission name="android.permission.QUERY_USERS"/>
+        <permission name="com.google.android.apps.messaging.emergency.permission.START_ESOS_CONVERSATION"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.tetheringentitlement">
+        <permission name="android.permission.CONNECTIVITY_USE_RESTRICTED_NETWORKS"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.TETHER_PRIVILEGED"/>
+        <permission name="android.permission.WRITE_APN_SETTINGS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.wallpaper.effects">
+        <permission name="android.permission.MANAGE_WALLPAPER_EFFECTS_GENERATION"/>
+        <permission name="android.permission.SUBSCRIBE_TO_KEYGUARD_LOCKED_STATE" />
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.wfcactivation">
+        <permission name="android.permission.CONNECTIVITY_INTERNAL"/>
+        <permission name="android.permission.CONNECTIVITY_USE_RESTRICTED_NETWORKS"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.WRITE_APN_SETTINGS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.intelligence.sense">
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.breel.wallpapers19">
+        <permission name="android.permission.AMBIENT_WALLPAPER"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.android.vending">
+        <permission name="android.permission.ALLOCATE_AGGRESSIVE"/>
+        <permission name="android.permission.BACKUP"/>
+        <permission name="android.permission.BATTERY_STATS"/>
+        <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
+        <permission name="android.permission.CHANGE_DEVICE_IDLE_TEMP_WHITELIST"/>
+        <permission name="android.permission.CHANGE_OVERLAY_PACKAGES"/>
+        <permission name="android.permission.CLEAR_APP_CACHE"/>
+        <permission name="android.permission.CONNECTIVITY_INTERNAL"/>
+        <permission name="android.permission.DELETE_PACKAGES"/>
+        <permission name="android.permission.DUMP"/>
+        <permission name="android.permission.FORCE_STOP_PACKAGES"/>
+        <permission name="android.permission.GET_ACCOUNTS_PRIVILEGED"/>
+        <permission name="android.permission.GET_APP_OPS_STATS"/>
+        <permission name="android.permission.HIDE_STATUS_BAR_NOTIFICATION"/>
+        <permission name="android.permission.INSTALL_PACKAGES"/>
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.LOADER_USAGE_STATS"/>
+        <permission name="android.permission.MANAGE_CLOUDSEARCH"/>
+        <permission name="android.permission.MANAGE_ROLLBACKS"/>
+        <permission name="android.permission.MANAGE_USERS"/>
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+        <permission name="android.permission.PACKAGE_VERIFICATION_AGENT"/>
+        <permission name="android.permission.QUERY_ADVANCED_PROTECTION_MODE"/>
+        <permission name="android.permission.READ_SYSTEM_GRAMMATICAL_GENDER"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.READ_RUNTIME_PROFILES"/>
+        <permission name="android.permission.REAL_GET_TASKS"/>
+        <permission name="android.permission.REBOOT"/>
+        <permission name="android.permission.SEND_DEVICE_CUSTOMIZATION_READY"/>
+        <permission name="android.permission.SEND_SAFETY_CENTER_UPDATE"/>
+        <permission name="android.permission.SEND_SMS_NO_CONFIRMATION"/>
+        <permission name="android.permission.SET_PREFERRED_APPLICATIONS"/>
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.STATUS_BAR"/>
+        <permission name="android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME"/>
+        <permission name="android.permission.UPDATE_DEVICE_STATS"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+        <permission name="com.android.permission.USE_INSTALLER_V2"/>
+        <permission name="android.permission.OVERRIDE_COMPAT_CHANGE_CONFIG_ON_RELEASE_BUILD"/>
+        <permission name="com.google.android.settings.setup.dock.RUN_DOCK_SETUP"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.feedback">
+        <permission name="android.permission.READ_LOGS"/>
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE" />
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.turbo">
+        <permission name="android.permission.ACCESS_AMBIENT_LIGHT_STATS" />
+        <permission name="android.permission.BATTERY_PREDICTION"/>
+        <permission name="android.permission.BATTERY_STATS" />
+        <permission name="android.permission.BRIGHTNESS_SLIDER_USAGE"/>
+        <permission name="android.permission.CHANGE_APP_IDLE_STATE"/>
+        <permission name="android.permission.CHANGE_APP_LAUNCH_TIME_ESTIMATE"/>
+        <permission name="android.permission.CONFIGURE_DISPLAY_BRIGHTNESS"/>
+        <permission name="android.permission.DUMP"/>
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+        <permission name="android.permission.POWER_SAVER"/>
+        <permission name="android.permission.REAL_GET_TASKS"/>
+        <permission name="android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.wellbeing">
+        <permission name="android.permission.ACCESS_AMBIENT_CONTEXT_EVENT"/>
+        <permission name="android.permission.ACCESS_INSTANT_APPS"/>
+        <permission name="android.permission.CONTROL_DISPLAY_COLOR_TRANSFORMS"/>
+        <permission name="android.permission.CONTROL_DISPLAY_SATURATION"/>
+        <permission name="android.permission.LAUNCH_MULTI_PANE_SETTINGS_DEEP_LINK"/>
+        <permission name="android.permission.MODIFY_DAY_NIGHT_MODE"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.MODIFY_QUIET_MODE"/>
+        <permission name="android.permission.OBSERVE_APP_USAGE"/>
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+        <permission name="android.permission.QUERY_USERS"/>
+        <permission name="android.permission.READ_DREAM_STATE"/>
+        <permission name="android.permission.READ_SYSTEM_GRAMMATICAL_GENDER"/>
+        <permission name="android.permission.READ_WALLPAPER_INTERNAL"/>
+        <permission name="android.permission.REAL_GET_TASKS"/>
+        <permission name="android.permission.REBOOT"/>
+        <permission name="android.permission.SCHEDULE_EXACT_ALARM"/>
+        <permission name="android.permission.SET_WALLPAPER_COMPONENT"/>
+        <permission name="android.permission.SET_WALLPAPER_DIM_AMOUNT"/>
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.START_TASKS_FROM_RECENTS"/>
+        <permission name="android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME"/>
+        <permission name="android.permission.SUSPEND_APPS"/>
+        <permission name="android.permission.WRITE_DREAM_STATE"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.backuptransport">
+        <permission name="android.permission.BACKUP"/>
+        <permission name="android.permission.UPDATE_DEVICE_STATS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.configupdater">
+        <permission name="android.permission.UPDATE_CONFIG"/>
+    </privapp-permissions>
+
+    <!-- LINT.IfChange -->
+    <privapp-permissions package="com.google.android.gms">
+        <permission name="android.permission.ACCESS_BROADCAST_RESPONSE_STATS"/>
+        <permission name="android.permission.ACCESS_CACHE_FILESYSTEM"/>
+        <permission name="android.permission.ACCESS_CELL_BROADCAST"/>
+        <permission name="android.permission.ACCESS_CONTEXT_HUB"/>
+        <permission name="android.permission.ACCESS_FPS_COUNTER"/>
+        <permission name="android.permission.ACCESS_NETWORK_CONDITIONS"/>
+        <permission name="android.permission.ACCESS_VIBRATOR_STATE"/>
+        <permission name="android.permission.ACTIVITY_EMBEDDING"/>
+        <permission name="android.permission.ALLOCATE_AGGRESSIVE"/>
+        <permission name="android.permission.BACKUP"/>
+        <permission name="android.permission.BIND_INTRUSION_DETECTION_EVENT_TRANSPORT_SERVICE" />
+        <permission name="android.permission.BLUETOOTH_PRIVILEGED"/>
+        <permission name="android.permission.BROADCAST_CLOSE_SYSTEM_DIALOGS"/>
+        <permission name="android.permission.CALL_AUDIO_INTERCEPTION"/>
+        <permission name="android.permission.CALL_PRIVILEGED"/>
+        <permission name="android.permission.CAPTURE_AUDIO_HOTWORD"/>
+        <permission name="android.permission.CAPTURE_AUDIO_OUTPUT"/>
+        <permission name="android.permission.BYPASS_CONCURRENT_RECORD_AUDIO_RESTRICTION"/>
+        <permission name="android.permission.CAPTURE_SECURE_VIDEO_OUTPUT"/>
+        <permission name="android.permission.CAPTURE_VIDEO_OUTPUT"/>
+        <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
+        <permission name="android.permission.CHANGE_DEVICE_IDLE_TEMP_WHITELIST"/>
+        <permission name="android.permission.CHECK_REMOTE_LOCKSCREEN"/>
+        <permission name="android.permission.COMPANION_APPROVE_WIFI_CONNECTIONS"/>
+        <permission name="android.permission.CONFIGURE_FACTORY_RESET_PROTECTION"/>
+        <permission name="android.permission.CONNECTIVITY_USE_RESTRICTED_NETWORKS"/>
+        <permission name="android.permission.CONTROL_INCALL_EXPERIENCE"/>
+        <permission name="android.permission.CONTROL_DISPLAY_SATURATION"/>
+        <permission name="android.permission.CONTROL_KEYGUARD_SECURE_NOTIFICATIONS"/>
+        <permission name="android.permission.DISPATCH_PROVISIONING_MESSAGE"/>
+        <permission name="android.permission.DOMAIN_VERIFICATION_AGENT"/>
+        <permission name="android.permission.DRAW_MOTION_CUES"/>
+        <permission name="android.permission.DUMP"/>
+        <permission name="android.permission.EMERGENCY_INSTALL_PACKAGES"/>
+        <permission name="android.permission.MANAGE_SECURE_LOCK_DEVICE"/>
+        <permission name="android.permission.FORCE_STOP_PACKAGES"/>
+        <permission name="android.permission.GET_APP_OPS_STATS"/>
+        <permission name="android.permission.GET_ROLE_HOLDERS" />
+        <permission name="android.permission.INSTALL_LOCATION_TIME_ZONE_PROVIDER_SERVICE" />
+        <permission name="android.permission.INTENT_FILTER_VERIFICATION_AGENT"/>
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.INVOKE_CARRIER_SETUP"/>
+        <permission name="android.permission.LOCAL_MAC_ADDRESS"/>
+        <permission name="android.permission.LOCATION_BYPASS"/>
+        <permission name="android.permission.LOCATION_HARDWARE"/>
+        <permission name="android.permission.LOCK_DEVICE"/>
+        <permission name="android.permission.LOG_COMPAT_CHANGE"/>
+        <permission name="android.permission.MANAGE_ADVANCED_PROTECTION_MODE" />
+        <permission name="android.permission.MANAGE_DEVICE_ADMINS"/>
+        <permission name="android.permission.MANAGE_FACTORY_RESET_PROTECTION" />
+        <permission name="android.permission.MANAGE_GAME_ACTIVITY" />
+        <permission name="android.permission.MANAGE_GAME_MODE" />
+        <permission name="android.permission.MANAGE_INTRUSION_DETECTION_STATE" />
+        <permission name="android.permission.MANAGE_ROLLBACKS"/>
+        <permission name="android.permission.MANAGE_SOUND_TRIGGER"/>
+        <permission name="android.permission.MANAGE_SUBSCRIPTION_PLANS"/>
+        <permission name="android.permission.MANAGE_TIME_AND_ZONE_DETECTION"/>
+        <permission name="android.permission.MANAGE_USB"/>
+        <permission name="android.permission.MANAGE_USERS"/>
+        <permission name="android.permission.MANAGE_VOICE_KEYPHRASES"/>
+        <permission name="android.permission.MANAGE_WIFI_NETWORK_SELECTION"/>
+        <permission name="android.permission.MANAGE_WIFI_INTERFACES"/>
+        <permission name="android.permission.MASTER_CLEAR"/>
+        <permission name="android.permission.MEDIA_CONTENT_CONTROL"/>
+        <permission name="android.permission.MODIFY_AUDIO_ROUTING"/>
+        <permission name="android.permission.MODIFY_DAY_NIGHT_MODE"/>
+        <permission name="android.permission.MODIFY_DEFAULT_AUDIO_EFFECTS"/>
+        <permission name="android.permission.MODIFY_NETWORK_ACCOUNTING"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.NOTIFY_PENDING_SYSTEM_UPDATE"/>
+        <permission name="android.permission.OBSERVE_GRANT_REVOKE_PERMISSIONS"/>
+        <permission name="android.permission.OBSERVE_ROLE_HOLDERS"/>
+        <permission name="android.permission.OVERRIDE_WIFI_CONFIG"/>
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+        <permission name="android.permission.PACKET_KEEPALIVE_OFFLOAD"/>
+        <permission name="android.permission.PERFORM_GESTURE_EXCHANGE"/>
+        <permission name="android.permission.PREPARE_FACTORY_RESET"/>
+        <permission name="android.permission.PROVIDE_DEFAULT_ENABLED_CREDENTIAL_SERVICE"/>
+        <permission name="android.permission.PROVIDE_REMOTE_CREDENTIALS"/>
+        <permission name="android.permission.PROVIDE_RESOLVER_RANKER_SERVICE" />
+        <permission name="android.permission.PROVIDE_TRUST_AGENT"/>
+        <permission name="android.permission.RANGING"/>
+        <permission name="android.permission.READ_COMPAT_CHANGE_CONFIG"/>
+        <permission name="android.permission.READ_DREAM_STATE"/>
+        <permission name="android.permission.READ_DROPBOX_DATA"/>
+        <permission name="android.permission.READ_INTRUSION_DETECTION_STATE" />
+        <permission name="android.permission.READ_LOGS"/>
+        <permission name="android.permission.READ_NEARBY_STREAMING_POLICY"/>
+        <permission name="android.permission.READ_NETWORK_USAGE_HISTORY"/>
+        <permission name="android.permission.READ_OEM_UNLOCK_STATE"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.READ_SYSTEM_GRAMMATICAL_GENDER"/>
+        <permission name="android.permission.READ_WIFI_CREDENTIAL"/>
+        <permission name="android.permission.REAL_GET_TASKS"/>
+        <permission name="android.permission.REBOOT"/>
+        <permission name="android.permission.RECEIVE_DATA_ACTIVITY_CHANGE"/>
+        <permission name="android.permission.RECOVER_KEYSTORE"/>
+        <permission name="android.permission.RECOVERY"/>
+        <permission name="android.permission.REGISTER_CALL_PROVIDER"/>
+        <permission name="android.permission.REMOTE_DISPLAY_PROVIDER"/>
+        <permission name="android.permission.RENOUNCE_PERMISSIONS"/>
+        <permission name="android.permission.REQUEST_COMPANION_PROFILE_COMPUTER"/>
+        <permission name="android.permission.REQUEST_COMPANION_SELF_MANAGED"/>
+        <permission name="android.permission.RESET_PASSWORD"/>
+        <permission name="android.permission.SATELLITE_COMMUNICATION"/>
+        <permission name="android.permission.SCHEDULE_PRIORITIZED_ALARM"/>
+        <permission name="android.permission.SCORE_NETWORKS"/>
+        <permission name="android.permission.SEND_SAFETY_CENTER_UPDATE"/>
+        <permission name="android.permission.SEND_SMS_NO_CONFIRMATION"/>
+        <permission name="android.permission.SET_BIOMETRIC_DIALOG_ADVANCED"/>
+        <permission name="android.permission.SET_LOW_POWER_STANDBY_PORTS"/>
+        <permission name="android.permission.SET_TIME"/>
+        <permission name="android.permission.SET_TIME_ZONE"/>
+        <permission name="android.permission.SETUP_FSVERITY"/>
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.START_TASKS_FROM_RECENTS"/>
+        <permission name="android.permission.STATUS_BAR"/>
+        <permission name="android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME"/>
+        <permission name="android.permission.SUBSTITUTE_SHARE_TARGET_APP_NAME_AND_ICON"/>
+        <permission name="android.permission.TETHER_PRIVILEGED"/>
+        <permission name="android.permission.THREAD_NETWORK_PRIVILEGED"/>
+        <permission name="android.permission.TURN_SCREEN_ON"/>
+        <permission name="android.permission.UPDATE_APP_OPS_STATS"/>
+        <permission name="android.permission.UPDATE_DEVICE_STATS"/>
+        <permission name="android.permission.UPDATE_FONTS" />
+        <permission name="android.permission.USE_FULL_SCREEN_INTENT"/>
+        <permission name="android.permission.USE_ICC_AUTH"/>
+        <permission name="android.permission.USE_RESERVED_DISK"/>
+        <permission name="android.permission.USER_ACTIVITY"/>
+        <permission name="android.permission.UWB_PRIVILEGED"/>
+        <permission name="android.permission.WRITE_EMBEDDED_SUBSCRIPTIONS"/>
+        <permission name="android.permission.WRITE_GSERVICES"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+        <permission name="android.permission.WRITE_VERIFICATION_STATE_E2EE_CONTACT_KEYS"/>
+        <permission name="android.permission.SUBSCRIBE_TO_KEYGUARD_LOCKED_STATE"/>
+        <permission name="com.android.voicemail.permission.READ_VOICEMAIL"/>
+        <permission name="com.google.wear.permission.DISPLAY_OFFLOAD"/>
+        <permission name="com.google.wear.permission.MANAGE_ACTIVITY_AUTO_RESUME"/>
+    </privapp-permissions>
+    <!-- LINT.ThenChange(/vendor/google/modules/GmsSystemGoogle/permissions/com.google.android.gmssystem.xml) -->
+
+    <privapp-permissions package="com.google.android.gms.supervision">
+        <permission name="android.permission.ACCESS_NETWORK_CONDITIONS"/>
+        <permission name="android.permission.CHANGE_DEVICE_IDLE_TEMP_WHITELIST"/>
+        <permission name="android.permission.GET_ACCOUNTS_PRIVILEGED"/>
+        <permission name="android.permission.GET_APP_OPS_STATS"/>
+        <permission name="android.permission.GET_ROLE_HOLDERS" />
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.MANAGE_DEVICE_ADMINS"/>
+        <permission name="android.permission.MANAGE_FACTORY_RESET_PROTECTION" />
+        <permission name="android.permission.MANAGE_TIME_AND_ZONE_DETECTION"/>
+        <permission name="android.permission.MANAGE_USERS"/>
+        <permission name="android.permission.MASTER_CLEAR"/>
+        <permission name="android.permission.MODIFY_AUDIO_SETTINGS_PRIVILEGED"/>
+        <permission name="android.permission.OBSERVE_GRANT_REVOKE_PERMISSIONS"/>
+        <permission name="android.permission.OBSERVE_ROLE_HOLDERS"/>
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+        <permission name="android.permission.READ_DREAM_STATE"/>
+        <permission name="android.permission.RESET_PASSWORD"/>
+        <permission name="android.permission.SCHEDULE_EXACT_ALARM"/>
+        <permission name="android.permission.SET_TIME"/>
+        <permission name="android.permission.SET_TIME_ZONE"/>
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.STATUS_BAR"/>
+        <permission name="android.permission.SYSTEM_ALERT_WINDOW"/>
+        <permission name="android.permission.USER_ACTIVITY"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+        <permission name="android.permission.WRITE_SYNC_SETTINGS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.projection.gearhead">
+        <permission name="android.permission.ACTIVITY_EMBEDDING"/>
+        <permission name="android.permission.BIND_APPWIDGET"/>
+        <permission name="android.permission.BLUETOOTH_PRIVILEGED"/>
+        <permission name="android.permission.CALL_PRIVILEGED"/>
+        <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
+        <permission name="android.permission.COMPANION_APPROVE_WIFI_CONNECTIONS"/>
+        <permission name="android.permission.CONTROL_INCALL_EXPERIENCE"/>
+        <permission name="android.permission.DUMP"/>
+        <permission name="android.permission.ENTER_CAR_MODE_PRIORITIZED"/>
+        <permission name="android.permission.LOCAL_MAC_ADDRESS"/>
+        <permission name="android.permission.LOCATION_HARDWARE"/>
+        <permission name="android.permission.MANAGE_USB"/>
+        <permission name="android.permission.MANAGE_USERS"/>
+        <permission name="android.permission.MODIFY_AUDIO_ROUTING"/>
+        <permission name="android.permission.MODIFY_DAY_NIGHT_MODE"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.PERSONAL_CONTEXT_PUBLISH_HINTS"/>
+        <permission name="android.permission.PERSONAL_CONTEXT_READ_SETTINGS"/>
+        <permission name="android.permission.PERSONAL_CONTEXT_RECEIVE_INSIGHTS"/>
+        <permission name="android.permission.POWER_SAVER"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.REQUEST_COMPANION_SELF_MANAGED"/>
+        <permission name="android.permission.SCHEDULE_EXACT_ALARM"/>
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.TETHER_PRIVILEGED"/>
+        <permission name="android.permission.UPDATE_APP_OPS_STATS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.googlequicksearchbox">
+        <permission name="android.permission.BIND_APPWIDGET"/>
+        <permission name="android.permission.CALL_PRIVILEGED"/>
+        <permission name="android.permission.CAPTURE_AUDIO_HOTWORD"/>
+        <permission name="android.permission.CAPTURE_AUDIO_OUTPUT"/>
+        <permission name="android.permission.CAPTURE_MEDIA_OUTPUT"/>
+        <permission name="android.permission.CONTROL_INCALL_EXPERIENCE" />
+        <permission name="android.permission.ENTER_CAR_MODE_PRIORITIZED" />
+        <deny-permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.MANAGE_VOICE_KEYPHRASES"/>
+        <permission name="android.permission.MANAGE_SOUND_TRIGGER"/>
+        <permission name="android.permission.MEDIA_CONTENT_CONTROL"/>
+        <permission name="android.permission.RECEIVE_SANDBOX_TRIGGER_AUDIO"/>
+        <permission name="android.permission.MODIFY_AUDIO_ROUTING"/>
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+        <permission name="android.permission.QUERY_USERS"/>
+        <permission name="android.permission.READ_DREAM_STATE"/>
+        <permission name="android.permission.REAL_GET_TASKS"/>
+        <permission name="android.permission.SET_MEDIA_KEY_LISTENER"/>
+        <permission name="android.permission.SET_VOLUME_KEY_LONG_PRESS_LISTENER"/>
+        <permission name="android.permission.MANAGE_USB"/>
+        <permission name="android.permission.SCHEDULE_EXACT_ALARM"/>
+        <permission name="android.permission.SHOW_KEYGUARD_MESSAGE"/>
+        <permission name="android.permission.SOUND_TRIGGER_RUN_IN_BATTERY_SAVER"/>
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.STATUS_BAR"/>
+        <permission name="android.permission.STOP_APP_SWITCHES"/>
+        <permission name="com.google.android.permission.SET_WATCH_FACE_PRIVILEGED"/>
+        <permission name="android.permission.WRITE_APN_SETTINGS"/>
+        <permission name="android.permission.WRITE_DREAM_STATE"/>
+        <permission name="android.permission.SUBSTITUTE_SHARE_TARGET_APP_NAME_AND_ICON"/>
+        <permission name="android.permission.SUBSCRIBE_TO_KEYGUARD_LOCKED_STATE"/>
+        <permission name="android.permission.EXECUTE_APP_FUNCTIONS"/>
+        <permission name="android.permission.ACCESS_COMPUTER_CONTROL"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.settings.intelligence">
+        <permission name="android.permission.BATTERY_STATS"/>
+        <permission name="android.permission.BLUETOOTH_CONNECT"/>
+        <permission name="android.permission.MANAGE_FINGERPRINT"/>
+        <permission name="android.permission.MODIFY_AUDIO_SETTINGS_PRIVILEGED"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.READ_DEVICE_CONFIG"/>
+        <permission name="android.permission.READ_SEARCH_INDEXABLES"/>
+        <permission name="android.permission.READ_SYSTEM_GRAMMATICAL_GENDER"/>
+        <!-- Used to read the Catalyst provided settings -->
+        <permission name="android.permission.READ_SYSTEM_PREFERENCES"/>
+        <permission name="android.permission.SCHEDULE_EXACT_ALARM"/>
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.USE_ON_DEVICE_INTELLIGENCE"/>
+        <permission name="android.permission.WRITE_DEVICE_CONFIG"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+        <permission name="android.permission.WRITE_SETTINGS_HOMEPAGE_DATA"/>
+        <!-- Used to set the Catalyst provided settings -->
+        <permission name="android.permission.WRITE_SYSTEM_PREFERENCES"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.setupwizard">
+        <permission name="android.permission.BACKUP"/>
+        <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
+        <permission name="android.permission.CHANGE_CONFIGURATION"/>
+        <permission name="android.permission.CONNECTIVITY_INTERNAL"/>
+        <permission name="android.permission.DISPATCH_PROVISIONING_MESSAGE"/>
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.INVOKE_CARRIER_SETUP"/>
+        <permission name="android.permission.LOCAL_MAC_ADDRESS"/>
+        <permission name="android.permission.LOCATION_HARDWARE"/>
+        <permission name="android.permission.MANAGE_FINGERPRINT"/>
+        <permission name="android.permission.MANAGE_TIME_AND_ZONE_DETECTION"/>
+        <permission name="android.permission.MANAGE_USB"/>
+        <permission name="android.permission.MANAGE_USERS"/>
+        <permission name="android.permission.MASTER_CLEAR"/>
+        <permission name="android.permission.MODIFY_DAY_NIGHT_MODE"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.NEARBY_WIFI_DEVICES"/>
+        <permission name="android.permission.NOTIFICATION_DURING_SETUP"/>
+        <permission name="android.permission.OVERRIDE_WIFI_CONFIG"/>
+        <permission name="android.permission.PERFORM_CDMA_PROVISIONING"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.READ_WIFI_CREDENTIAL"/>
+        <permission name="android.permission.REBOOT"/>
+        <permission name="android.permission.REQUEST_NETWORK_SCORES"/>
+        <permission name="android.permission.SCHEDULE_EXACT_ALARM"/>
+        <permission name="android.permission.SET_BIOMETRIC_DIALOG_ADVANCED"/>
+        <permission name="android.permission.SET_TIME"/>
+        <permission name="android.permission.SET_TIME_ZONE"/>
+        <permission name="android.permission.SHUTDOWN"/>
+        <permission name="android.permission.STATUS_BAR"/>
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME"/>
+        <permission name="android.permission.WRITE_APN_SETTINGS"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+        <permission name="com.android.settings.BATTERY_DATA"/>
+        <permission name="com.android.settings.USE_BIOMETRIC_PROVIDER"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.android.hotwordenrollment.okgoogle">
+        <permission name="android.permission.KEYPHRASE_ENROLLMENT_APPLICATION"/>
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.android.hotwordenrollment.xgoogle">
+        <permission name="android.permission.KEYPHRASE_ENROLLMENT_APPLICATION"/>
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.partnersetup">
+        <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
+        <permission name="android.permission.CHANGE_CONFIGURATION"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.pcs">
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.onetimeinitializer">
+        <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.audio.hearing.visualization.accessibility.scribe">
+        <permission name="android.permission.SCHEDULE_EXACT_ALARM"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.cbrsnetworkmonitor">
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="com.google.android.apps.scone.permission.BIND_CBRS_SERVICE"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.ambient.streaming">
+        <permission name="android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND"/>
+        <permission name="android.permission.REQUEST_COMPANION_SELF_MANAGED"/>
+        <permission name="android.permission.CAPTURE_VOICE_COMMUNICATION_OUTPUT"/>
+        <permission name="android.permission.SUBSTITUTE_NOTIFICATION_APP_NAME"/>
+        <permission name="android.permission.CAPTURE_AUDIO_OUTPUT"/>
+        <permission name="android.permission.BYPASS_CONCURRENT_RECORD_AUDIO_RESTRICTION"/>
+        <permission name="android.permission.BLUETOOTH_PRIVILEGED"/>
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.BATTERY_STATS"/>
+        <permission name="android.permission.ACCESS_NOTIFICATIONS"/>
+        <permission name="android.permission.FORCE_STOP_PACKAGES"/>
+        <permission name="android.permission.REQUEST_COMPANION_PROFILE_APP_STREAMING"/>
+        <permission name="android.permission.MODIFY_AUDIO_ROUTING"/>
+        <permission name="android.permission.REAL_GET_TASKS"/>
+        <permission name="android.permission.MANAGE_ACCESSIBILITY"/>
+        <permission name="android.permission.BLUETOOTH_CONNECT"/>
+        <permission name="android.permission.BLUETOOTH_SCAN"/>
+        <permission name="android.permission.BLUETOOTH_ADVERTISE"/>
+        <permission name="android.permission.MANAGE_EXTERNAL_STORAGE"/>
+        <permission name="android.permission.REQUEST_COMPANION_PROFILE_COMPUTER"/>
+        <permission name="android.permission.RECEIVE_SENSITIVE_NOTIFICATIONS"/>
+        <permission name="android.permission.READ_HANDOFF_SETTINGS"/>
+        <permission name="android.permission.MODIFY_HANDOFF_SETTINGS"/>
+        <permission name="android.permission.READ_REMOTE_TASKS"/>
+        <permission name="android.permission.REQUEST_TASK_HANDOFF"/>
+        <permission name="android.permission.DELIVER_COMPANION_MESSAGES"/>
+        <permission name="android.permission.POST_BRIDGED_NOTIFICATIONS"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+        <permission name="android.permission.ACCESS_CONTEXT_HUB"/>
+        <permission name="android.permission.BROADCAST_CLOSE_SYSTEM_DIALOGS"/>
+        <permission name="android.permission.COMPANION_APPROVE_WIFI_CONNECTIONS"/>
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.LOCAL_MAC_ADDRESS"/>
+        <permission name="android.permission.LOCATION_HARDWARE"/>
+        <permission name="android.permission.MANAGE_USB"/>
+        <permission name="android.permission.MANAGE_WIFI_INTERFACES"/>
+        <permission name="android.permission.MANAGE_WIFI_NETWORK_SELECTION"/>
+        <permission name="android.permission.MEDIA_CONTENT_CONTROL"/>
+        <permission name="android.permission.MODIFY_DEFAULT_AUDIO_EFFECTS"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.OBSERVE_GRANT_REVOKE_PERMISSIONS"/>
+        <permission name="android.permission.OVERRIDE_WIFI_CONFIG"/>
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+        <permission name="android.permission.QUERY_USERS"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.READ_WIFI_CREDENTIAL"/>
+        <permission name="android.permission.TETHER_PRIVILEGED"/>
+        <permission name="android.permission.UPDATE_DEVICE_STATS"/>
+        <permission name="android.permission.UWB_PRIVILEGED"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.GoogleCamera">
+        <permission name="android.permission.ACCESS_BLOBS_ACROSS_USERS"/>
+        <permission name="android.permission.ALLOCATE_AGGRESSIVE"/>
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.INSTALL_PACKAGE_UPDATES"/>
+        <permission name="android.permission.BIND_WALLPAPER"/>
+        <permission name="android.permission.REBOOT"/>
+        <permission name="android.permission.MANAGE_WIFI_NETWORK_SELECTION"/>
+        <permission name="android.permission.LOCAL_MAC_ADDRESS"/>
+        <permission name="android.permission.POST_NOTIFICATIONS"/>
+        <permission name="android.permission.CONTROL_DEVICE_LIGHTS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.security.securityhub">
+        <!-- Required so that security hub can call PendingIntents provided by Play. -->
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <!-- Required so that security hub can present one security view across all users. -->
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <!-- Required to allow security hub to identify when a system update is needed. -->
+        <permission name="android.permission.READ_SYSTEM_UPDATE_INFO"/>
+        <!-- Required to allow security hub to check if Safety Center is enabled. -->
+        <permission name="android.permission.READ_SAFETY_CENTER_STATUS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.kids.home">
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+        <permission name="android.permission.STATUS_BAR"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.pixel.livewallpaper">
+        <permission name="android.permission.READ_WALLPAPER_INTERNAL"/>
+        <permission name="android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.retaildemo">
+        <permission name="android.permission.ACCESS_BLOBS_ACROSS_USERS"/>
+        <permission name="android.permission.CHANGE_COMPONENT_ENABLED_STATE"/>
+        <permission name="android.permission.CHANGE_CONFIGURATION"/>
+        <!-- Required to reset Settings navigation mode b/351284030. -->
+        <permission name="android.permission.CHANGE_OVERLAY_PACKAGES"/>
+        <!-- Required to uninstall packages b/351949347. -->
+        <permission name="android.permission.DELETE_PACKAGES"/>
+        <!-- Required to forceStopPackage, b/404697017. -->
+        <permission name="android.permission.FORCE_STOP_PACKAGES"/>
+        <permission name="android.permission.INSTALL_PACKAGES"/>
+        <!-- Required to start activity as user in HSUM b/361242510 -->
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.MANAGE_USERS"/>
+        <!-- Required to factory reset in Device Admin Mode. -->
+        <permission name="android.permission.MASTER_CLEAR"/>
+        <permission name="android.permission.MODIFY_DAY_NIGHT_MODE"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.OBSERVE_APP_USAGE"/>
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+        <permission name="android.permission.QUERY_USERS"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <permission name="android.permission.REAL_GET_TASKS"/>
+        <permission name="android.permission.SET_TIME_ZONE"/>
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.retaildemo.preload">
+        <permission name="android.permission.OBSERVE_APP_USAGE"/>
+        <permission name="android.permission.MANAGE_PROFILE_AND_DEVICE_OWNERS"/>
+        <permission name="android.permission.MODIFY_DAY_NIGHT_MODE"/>
+        <permission name="android.permission.MODIFY_PHONE_STATE"/>
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.START_FOREGROUND_SERVICES_FROM_BACKGROUND"/>
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+	<permission name="android.permission.REAL_GET_TASKS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.privacy.wildlife">
+        <permission name="android.permission.CONTROL_VPN"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.pixel.support">
+        <!-- Used to get the battery usage list from BatteryUsageContentProvider -->
+        <permission name="com.google.android.settings.intelligence.BATTERY_DATA"/>
+        <!-- Used to query charging Speed Indicator data from Turbo -->
+        <permission name="com.google.android.apps.turbo.BATTERY_DATA"/>
+        <!-- Used to get Bluetooth quality report data through BluetoothAdapter#registerBluetoothQualityReportReadyCallback() -->
+        <permission name="android.permission.BLUETOOTH_PRIVILEGED"/>
+        <!-- Used to get the setting of whether the user sets the live wallpaper or not -->
+        <permission name="android.permission.READ_WALLPAPER_INTERNAL"/>
+        <!-- Used to get device identifiers such as IMEI -->
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <!-- Used to generate bugreport -->
+        <permission name="android.permission.DUMP"/>
+        <!-- Used to allow skipping the bugreport consent displayed by the API, to use our own consent -->
+        <permission name="android.permission.CAPTURE_CONSENTLESS_BUGREPORT_DELEGATED_CONSENT" />
+        <!-- Used to access the Boost Data PSA service -->
+        <permission name="com.google.android.pixel.support.PERMISSION_ACCESS_BOOST_DATA_PSA_SERVICE" />
+        <!-- Used to access Battery Saver settings -->
+        <permission name="android.permission.POWER_SAVER" />
+        <!-- Used to set UI mode i.e. Dark/Light theme -->
+        <permission name="android.permission.MODIFY_DAY_NIGHT_MODE" />
+        <!-- Used to set the phone state i.e. Mobile Data -->
+        <permission name="android.permission.MODIFY_PHONE_STATE" />
+        <!-- Used to get the phone state i.e. Mobile Data -->
+        <permission name="android.permission.READ_PRECISE_PHONE_STATE"/>
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+        <!-- Used to get the phone state i.e. Wifi Tethering -->
+        <permission name="android.permission.TETHER_PRIVILEGED"/>
+        <!-- Used to set the secured phone settings -->
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+        <!-- Used to set the phone settings -->
+        <permission name="android.permission.WRITE_SETTINGS"/>
+        <!-- Used to set the Use Wifi settings -->
+        <permission name="android.permission.CHANGE_WIFI_STATE"/>
+        <!-- Used to set the Catalyst provided settings -->
+        <permission name="android.permission.WRITE_SYSTEM_PREFERENCES"/>
+        <permission name="android.permission.READ_SYSTEM_PREFERENCES"/>
+        <!-- Used to get pending system update -->
+        <permission name="android.permission.NOTIFY_PENDING_SYSTEM_UPDATE"/>
+        <!-- Used to open the factory reset page -->
+        <permission name="android.permission.MASTER_CLEAR"/>
+        <!-- To launch the bluetooth settings page -->
+        <permission name="android.permission.BLUETOOTH_CONNECT" />
+        <!-- For Charger Service to get the USB status -->
+        <permission name="android.permission.MANAGE_USB" />
+        <!-- Used to get the device local mac address -->
+        <permission name="android.permission.LOCAL_MAC_ADDRESS" />
+        <!-- Required for resetting wifi -->
+        <permission name="android.permission.RESTART_WIFI_SUBSYSTEM"/>
+        <!-- Required for clearing configured networks from memory -->
+        <permission name="android.permission.OVERRIDE_WIFI_CONFIG"/>
+        <!-- Required for showing power menu -->
+        <permission name="android.permission.SHOW_POWER_MENU_PRIVILEGED"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.nest.dockmanager.app">
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.MODIFY_AUDIO_ROUTING"/>
+        <permission name="android.permission.QUERY_USERS"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.android.systemui.clocks">
+        <permission name="com.android.systemui.permission.PLUGIN" />
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.healthdata">
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+    </privapp-permissions>
+
+    <!-- go/overlay. Installed only on userdebug/eng builds. -->
+    <privapp-permissions package="com.google.android.apps.overlay">
+        <!-- Used for communication with NanoApp. http://b/345490170 -->
+        <permission name="android.permission.ACCESS_CONTEXT_HUB"/>
+        <!-- Used only for internal prototyping. http://b/273973518 -->
+        <permission name="android.permission.PACKAGE_USAGE_STATS"/>
+        <!-- Used to hand-off face-auth data-collection consent to Work Profile; http://b/243410915#comment19 -->
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <!-- Used to get private sensor data b/456195104-->
+        <permission name="com.google.sensor.private.permission.USE_RAW_SENSOR" />
+        <!-- Used to get IR sensor data b/456195104-->
+        <permission name="com.google.sensor.permission.FAR_INFRARED_TEMPERATURE" />
+        <!-- Used to get system logs from logcat b/456195104-->
+        <permission name="android.permission.READ_LOGS" />
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.aiwallpapers">
+        <permission name="android.permission.GET_ACCOUNTS_PRIVILEGED"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.apps.tips">
+        <permission name="android.permission.MANAGE_WALLPAPER_EFFECTS_GENERATION"/>
+        <permission name="android.permission.READ_SEARCH_INDEXABLES"/>
+        <permission name="android.permission.READ_SYSTEM_GRAMMATICAL_GENDER"/>
+        <permission name="android.permission.START_ACTIVITIES_FROM_BACKGROUND"/>
+        <permission name="android.permission.WRITE_SECURE_SETTINGS"/>
+        <!-- Used to read hardware identifiers for support. -->
+        <permission name="android.permission.READ_PRIVILEGED_PHONE_STATE"/>
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.wallpaper.weathereffects">
+        <permission name="android.permission.SUBSCRIBE_TO_KEYGUARD_LOCKED_STATE" />
+    </privapp-permissions>
+
+    <privapp-permissions package="com.google.android.desktop.growth">
+        <!-- Used to get the list of users on the device for first full user targeting -->
+        <permission name="android.permission.MANAGE_USERS"/>
+    </privapp-permissions>
+</permissions>

product/blobs/etc/permissions/privapp-permissions-google-pearl.xml

@@ -0,0 +1,25 @@
+<?xml version='1.0' encoding='utf-8'?>
+<!--
+  ~ Copyright (C) 2024 The Android Open Source Project
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~      http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License
+  -->
+
+<permissions>
+    <privapp-permissions package="com.google.android.apps.pixel.agent">
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.SCHEDULE_EXACT_ALARM" />
+        <permission name="android.permission.WRITE_SECURE_SETTINGS" />
+        <permission name="android.permission.USE_ON_DEVICE_INTELLIGENCE" />
+    </privapp-permissions>
+</permissions>

product/blobs/etc/permissions/privapp-permissions-google-spoon.xml

@@ -0,0 +1,33 @@
+<?xml version='1.0' encoding='utf-8'?>
+<!--
+  ~ Copyright (C) 2024 The Android Open Source Project
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~      http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License
+  -->
+
+<permissions>
+    <privapp-permissions package="com.google.android.apps.pixel.psi">
+        <permission name="android.permission.INTERACT_ACROSS_USERS"/>
+        <permission name="android.permission.SCHEDULE_EXACT_ALARM" />
+        <permission name="android.permission.WRITE_SECURE_SETTINGS" />
+        <permission name="android.permission.USE_ON_DEVICE_INTELLIGENCE" />
+        <permission name="android.permission.PACKAGE_USAGE_STATS" />
+        <!-- Permissions for personal context. -->
+        <permission name="android.permission.PERSONAL_CONTEXT_PUBLISH_HINTS" />
+        <permission name="android.permission.PERSONAL_CONTEXT_RECEIVE_HINTS" />
+        <permission name="android.permission.PERSONAL_CONTEXT_PUBLISH_INSIGHTS" />
+        <permission name="android.permission.PERSONAL_CONTEXT_RECEIVE_INSIGHTS" />
+        <permission name="android.permission.PERSONAL_CONTEXT_READ_SETTINGS" />
+        <permission name="android.permission.PERSONAL_CONTEXT_WRITE_SETTINGS" />
+    </privapp-permissions>
+</permissions>

product/blobs/etc/permissions/split-permissions-google.xml

@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Copyright (C) 2018 The Android Open Source Project
+
+     Licensed under the Apache License, Version 2.0 (the "License");
+     you may not use this file except in compliance with the License.
+     You may obtain a copy of the License at
+
+          http://www.apache.org/licenses/LICENSE-2.0
+
+     Unless required by applicable law or agreed to in writing, software
+     distributed under the License is distributed on an "AS IS" BASIS,
+     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+     See the License for the specific language governing permissions and
+     limitations under the License.
+-->
+<permissions>
+    <split-permission name="com.google.android.gms.permission.ACTIVITY_RECOGNITION"
+                      targetSdk="29">
+        <new-permission name="android.permission.ACTIVITY_RECOGNITION" />
+    </split-permission>
+</permissions>

product/blobs/etc/permissions/velvet_app-privapp-permissions.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+<permissions>
+    <privapp-permissions package="com.google.android.googlequicksearchbox">
+        <permission name="android.permission.CONTROL_DEVICE_LIGHTS"/>
+        <permission name="android.permission.ACCESS_CONTEXT_HUB"/>
+    </privapp-permissions>
+</permissions>

product/blobs/etc/preferred-apps/Android.bp

@@ -0,0 +1,24 @@
+//
+// Copyright (C) 2024 The hentaiOS Project and its Proprietors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+
+prebuilt_etc {
+    name: "preferred_apps_google",
+    product_specific: true,
+    sub_dir: "preferred-apps",
+    src: "google.xml",
+    filename_from_src: true,
+}
+

product/blobs/etc/preferred-apps/google.xml

@@ -0,0 +1,125 @@
+<?xml version='1.0' encoding='utf-8' standalone='yes'?>
+<!-- Copyright (C) 2012 The Android Open Source Project
+
+     Licensed under the Apache License, Version 2.0 (the "License");
+     you may not use this file except in compliance with the License.
+     You may obtain a copy of the License at
+
+          http://www.apache.org/licenses/LICENSE-2.0
+
+     Unless required by applicable law or agreed to in writing, software
+     distributed under the License is distributed on an "AS IS" BASIS,
+     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+     See the License for the specific language governing permissions and
+     limitations under the License.
+-->
+
+<!--
+    These are the default set of preferred applications for various standard
+    web URIs of Google properties to built-in Google Android applications.
+
+    To generate new entries, set whatever app you want to be the default as
+    normal through the UI, and then use "adb shell dumpsys package preferred-xml"
+    to get the XML structure for the current preferred apps.  You will probably
+    want to clean up the output some, such as adding the BROWSABLE category.  See
+    the other entries here for guides.
+ -->
+<preferred-activities>
+    <item name="com.google.android.apps.plus/.editor.PlusEditorActivity">
+        <filter>
+            <action name="android.intent.action.EDIT" />
+            <cat name="android.intent.category.DEFAULT" />
+            <type name="image/bmp" />
+            <type name="image/jpeg" />
+            <type name="image/gif" />
+            <type name="image/png" />
+            <type name="image/webp" />
+            <type name="image/x-ms-bmp" />
+            <type name="image/vnd.wap.wbmp" />
+        </filter>
+    </item>
+    <item name="com.google.android.apps.plus/.editor.PlusCropActivity">
+        <filter>
+            <action name="com.android.camera.action.CROP" />
+            <cat name="android.intent.category.DEFAULT" />
+            <type name="image/bmp" />
+            <type name="image/jpeg" />
+            <type name="image/gif" />
+            <type name="image/png" />
+            <type name="image/webp" />
+            <type name="image/x-ms-bmp" />
+            <type name="image/vnd.wap.wbmp" />
+        </filter>
+    </item>
+    <item name="com.google.android.apps.nbu.files/.gateway.browse.BrowseGatewayHandler">
+        <filter>
+            <action name="android.intent.action.VIEW" />
+            <cat name="android.intent.category.DEFAULT" />
+            <scheme name="content" />
+            <type name="vnd.android.document/root" />
+        </filter>
+    </item>
+    <item name="com.google.android.apps.photos/.home.HomeActivity">
+        <filter>
+            <action name="android.intent.action.MAIN" />
+            <cat name="android.intent.category.APP_GALLERY" />
+            <cat name="android.intent.category.DEFAULT" />
+        </filter>
+    </item>
+    <item name="com.google.android.apps.docs.editors.sheets/com.google.android.apps.docs.editors.trix.quicksheet.QuickSheetDocumentOpenerActivityAlias">
+        <filter>
+            <action name="android.intent.action.EDIT" />
+            <cat name="android.intent.category.DEFAULT" />
+            <type name="application/vnd.openxmlformats-officedocument.spreadsheetml.sheet" />
+            <type name="application/vnd.ms-excel.sheet.macroenabled.12" />
+            <type name="application/vnd.ms-excel" />
+            <type name="application/vnd.ms-excel.addin.macroenabled.12" />
+            <type name="application/vnd.ms-excel.template.macroenabled.12" />
+            <type name="application/vnd.openxmlformats-officedocument.spreadsheetml.template" />
+            <type name="application/x-msexcel" />
+        </filter>
+    </item>
+    <item name="com.google.android.apps.docs.editors.docs/com.google.android.apps.docs.editors.kix.quickword.QuickWordDocumentOpenerActivityAlias">
+      <filter>
+            <action name="android.intent.action.EDIT" />
+            <cat name="android.intent.category.DEFAULT" />
+            <type name="application/vnd.ms-word" />
+            <type name="application/vnd.openxmlformats-officedocument.wordprocessingml.document" />
+            <type name="application/vnd.ms-word.document.macroenabled.12" />
+            <type name="application/msword" />
+            <type name="application/vnd.ms-word.template.macroenabled.12" />
+            <type name="application/vnd.openxmlformats-officedocument.wordprocessingml.template" />
+            <type name="application/x-msword" />
+      </filter>
+    </item>
+    <item name="com.google.android.apps.docs.editors.slides/com.google.android.apps.docs.editors.kix.quickword.QuickWordDocumentOpenerActivityAlias">
+      <filter>
+            <action name="android.intent.action.EDIT" />
+            <cat name="android.intent.category.DEFAULT" />
+            <type name="application/vnd.openxmlformats-officedocument.presentationml.presentation" />
+            <type name="application/vnd.ms-powerpoint" />
+            <type name="application/vnd.openxmlformats-officedocument.presentationml.template" />
+            <type name="application/vnd.ms-powerpoint.presentation.macroenabled.12" />
+            <type name="application/vnd.openxmlformats-officedocument.presentationml.slideshow" />
+            <type name="application/vnd.ms-powerpoint.slideshow.macroenabled.12" />
+            <type name="application/x-mspowerpoint" />
+
+      </filter>
+    </item>
+    <item name="com.google.android.gm/com.google.android.gm.ComposeActivityGmailExternal">
+        <filter>
+            <action name="android.intent.action.VIEW" />
+            <cat name="android.intent.category.DEFAULT" />
+            <cat name="android.intent.category.BROWSABLE" />
+            <scheme name="mailto" />
+        </filter>
+    </item>
+    <item name="com.google.android.gm/com.google.android.gm.ComposeActivityGmailExternal">
+        <filter>
+            <action name="android.intent.action.SENDTO" />
+            <cat name="android.intent.category.DEFAULT" />
+            <cat name="android.intent.category.BROWSABLE" />
+            <scheme name="mailto" />
+        </filter>
+    </item>
+</preferred-activities>

product/blobs/etc/sysconfig/Android.bp

@@ -0,0 +1,478 @@
+//
+// Copyright (C) 2024 The hentaiOS Project and its Proprietors
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//      http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+
+prebuilt_etc {
+    name: "GoogleCamera_6gb_or_more_ram",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "GoogleCamera_6gb_or_more_ram.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "adaptivecharging",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "adaptivecharging.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "allowed_apex_com.google.android.gmssystem",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "allowed_apex_com.google.android.gmssystem.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "allowlist_com.android.omadm.service",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "allowlist_com.android.omadm.service.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "ambient_data",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "ambient_data.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "app-lock-exempt-pixel",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "app-lock-exempt-pixel.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "contextual_search",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "contextual_search.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "dreamliner",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "dreamliner.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "firproximity",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "firproximity.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "game_service",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "game_service.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "gemini_experience",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "gemini_experience.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "google_build",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "google_build.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "google_fi",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "google_fi.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "google_xr_projected",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "google_xr_projected.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "google-hiddenapi-package-whitelist",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "google-hiddenapi-package-whitelist.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "google-initial-package-stopped-states",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "google-initial-package-stopped-states.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "google-install-constraints-package-allowlist",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "google-install-constraints-package-allowlist.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "google-staged-installer-whitelist",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "google-staged-installer-whitelist.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "google-system-apps-update-ownership",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "google-system-apps-update-ownership.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "google",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "google.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "nexus",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "nexus.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "nga",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "nga.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "nowplaying",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "nowplaying.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "nowplaying_app_26q1",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "nowplaying_app_26q1.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "pixel_2017-initial-package-stopped-states",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "pixel_2017-initial-package-stopped-states.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "pixel_experience_2017",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "pixel_experience_2017.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "pixel_experience_2018",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "pixel_experience_2018.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "pixel_experience_2019_midyear",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "pixel_experience_2019_midyear.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "pixel_experience_2019",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "pixel_experience_2019.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "pixel_experience_2020_midyear",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "pixel_experience_2020_midyear.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "pixel_experience_2020",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "pixel_experience_2020.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "pixel_experience_2021_midyear",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "pixel_experience_2021_midyear.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "pixel_experience_2021",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "pixel_experience_2021.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "pixel_experience_2022_midyear",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "pixel_experience_2022_midyear.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "pixel_experience_2022",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "pixel_experience_2022.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "pixel_experience_2023_midyear",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "pixel_experience_2023_midyear.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "pixel_experience_2023",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "pixel_experience_2023.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "pixel_experience_2024_midyear",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "pixel_experience_2024_midyear.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "pixel_experience_2024",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "pixel_experience_2024.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "pixel_experience_2025_midyear",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "pixel_experience_2025_midyear.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "pixel_experience_2025",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "pixel_experience_2025.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "pixel_experience_2026_midyear",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "pixel_experience_2026_midyear.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "pixel_experience_2026",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "pixel_experience_2026.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "preinstalled-packages-glasses-core-pixel-common",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "preinstalled-packages-glasses-core-pixel-common.xml",
+    filename_from_src: true,
+} 
+
+prebuilt_etc {
+    name: "preinstalled_packages_pixel_experience_2017_and_newer",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "preinstalled_packages_pixel_experience_2017_and_newer.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "preinstalled_packages_pixel_experience_2021_and_newer", 
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "preinstalled_packages_pixel_experience_2021_and_newer.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "preinstalled-packages-pixel-2025-common",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "preinstalled-packages-pixel-2025-common.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "preinstalled-packages-pixel-carrier",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "preinstalled-packages-pixel-carrier.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "preinstalled-packages-pixel-experience-2023-midyear-and-newer",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "preinstalled-packages-pixel-experience-2023-midyear-and-newer.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "preinstalled-packages-product-pixel-2017-and-newer",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "preinstalled-packages-product-pixel-2017-and-newer.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "preinstalled-packages-product-pixel-2018-and-newer",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "preinstalled-packages-product-pixel-2018-and-newer.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "preinstalled-packages-product-pixel-2019-and-newer",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "preinstalled-packages-product-pixel-2019-and-newer.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "preinstalled-packages-product-pixel-2020-and-newer",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "preinstalled-packages-product-pixel-2020-and-newer.xml",
+    filename_from_src: true,
+}
+prebuilt_etc {
+    name: "preinstalled-packages-product-pixel-2022-and-newer",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "preinstalled-packages-product-pixel-2022-and-newer.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "preinstalled-packages-product-pixel-2023-and-newer",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "preinstalled-packages-product-pixel-2023-and-newer.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "preinstalled-packages-product-pixel-2024-and-newer",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "preinstalled-packages-product-pixel-2024-and-newer.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "quick_tap",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "quick_tap.xml",
+    filename_from_src: true,
+}
+
+prebuilt_etc {
+    name: "spoon",
+    product_specific: true,
+    sub_dir: "sysconfig",
+    src: "spoon.xml",
+    filename_from_src: true,
+}

product/blobs/etc/sysconfig/GoogleCamera_6gb_or_more_ram.xml

@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are GoogleCamera specific configurations for Google's Pixel
+devices with 6GB or more of RAM. -->
+<config>
+
+    <!-- Allow GoogleCamera app in power save (background service to keep Camera
+    process alive). -->
+    <allow-in-power-save package="com.google.android.GoogleCamera" />
+</config>

product/blobs/etc/sysconfig/adaptivecharging.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on devices that support Adaptive Charging -->
+<config>
+    <!-- This feature is meant to be the feature identifying devices that support
+         Adaptive Charging -->
+    <feature name="com.google.android.feature.ADAPTIVE_CHARGING" />
+</config>

product/blobs/etc/sysconfig/allowed_apex_com.google.android.gmssystem.xml

@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="utf-8"?>
+<config>
+    <!-- Allow GMS System, a 1P non-mainline module APEX, to install automatic updates from Play using the vendor codepath. -->
+    <allowed-vendor-apex package="com.google.android.gmssystem" installerPackage="com.android.vending" />
+    <!--
+        This is added to ensure Play Store can update GMS APEX, even on form factors
+        that don't use mainline. (Note that we do not specify isModulesInstaller=true
+        here, so this entry does not enable mainline module updates.)
+     -->
+    <whitelisted-staged-installer package="com.android.vending" />
+</config>

product/blobs/etc/sysconfig/allowlist_com.android.omadm.service.xml

@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Copyright (C) 2015 The Android Open Source Project
+
+     Licensed under the Apache License, Version 2.0 (the "License");
+     you may not use this file except in compliance with the License.
+     You may obtain a copy of the License at
+
+          http://www.apache.org/licenses/LICENSE-2.0
+
+     Unless required by applicable law or agreed to in writing, software
+     distributed under the License is distributed on an "AS IS" BASIS,
+     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+     See the License for the specific language governing permissions and
+     limitations under the License.
+-->
+
+<!-- The OMA DM service must be whitelisted so they are always able to run. -->
+<config>
+    <allow-in-power-save package="com.android.omadm.service" />
+</config>

product/blobs/etc/sysconfig/ambient_data.xml

@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- These are configurations that should exist on devices that support Ambient Data -->
+<config>
+    <!-- This feature identifies devices with Ambient Data (Gemini Space) -->
+    <feature name="com.google.android.feature.AMBIENT_DATA"/>
+</config>

product/blobs/etc/sysconfig/app-lock-exempt-pixel.xml

@@ -0,0 +1,33 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--
+  ~ Copyright (C) 2026 The Android Open Source Project
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~      http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<!--
+  This file contains configs for preinstalled packages that are exempt from App Lock on all
+  Pixel devices.
+
+  Apps included in this list will not be allowed to have App Lock enabled, and will not present
+  any App Lock enablement flows.
+
+  Documentation at frameworks/base/data/etc/app-lock-exempt.xml
+-->
+<config>
+    <app-lock-exempt package="com.android.settings" />
+    <app-lock-exempt package="com.google.android.contacts" />
+    <app-lock-exempt package="com.google.android.deskclock" />
+    <app-lock-exempt package="com.google.android.dialer" />
+    <app-lock-exempt package="com.google.android.GoogleCamera" />
+</config>

product/blobs/etc/sysconfig/contextual_search.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- These are configurations that should exist on devices that suppot Contextual Search -->
+<config>
+    <!-- This feature identifies devices with Contextual Search (Circle to Search) -->
+    <feature name="com.google.android.feature.CONTEXTUAL_SEARCH"/>
+    <!-- This feature identifies devices with Contextual Search Live Translate -->
+    <feature name="com.google.android.feature.CONTEXTUAL_SEARCH_LIVE_TRANSLATE"/>
+</config>

product/blobs/etc/sysconfig/dreamliner.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on devices that support Dreamliner (Pixel Stand) -->
+<config>
+    <!-- This feature is meant to be the feature identifying a device supports wireless charger -->
+    <feature name="com.google.android.feature.DREAMLINER" />
+</config>

product/blobs/etc/sysconfig/firproximity.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- Configurations that should exist on devices that support FIR proximity sensors -->
+<config>
+    <!-- The Playstore visibility filter identifying a device supports FIR proximity sensors -->
+    <feature name="com.google.android.feature.FIR.PROXIMITY" />
+</config>

product/blobs/etc/sysconfig/game_service.xml

@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on devices that support Game Service -->
+<config>
+    <!-- This feature is meant to be the feature identifying devices that support
+         Game Service -->
+    <feature name="android.software.game_service" />
+    <!-- Signals that the device is using the Google Games Service provided by
+         GMSCore. This subjects the device to addition GTS testing and also
+         serves as a mechanism to target devices that should download the
+         required GMSCore modules. -->
+    <feature name="com.google.android.feature.GMS_GAME_SERVICE" />
+</config>

product/blobs/etc/sysconfig/gemini_experience.xml

@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on devices that support Gemini
+  Experience -->
+<config>
+  <!-- This feature is meant to be the feature identifying devices that support
+    Gemini Experience -->
+  <feature name="com.google.android.feature.GEMINI_EXPERIENCE" />
+</config>

product/blobs/etc/sysconfig/google-hiddenapi-package-whitelist.xml

@@ -0,0 +1,115 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--
+  ~ Copyright (C) 2018 The Android Open Source Project
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~      http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License
+  -->
+
+<!--
+This XML file declares which platform apps that need to access internal APIs.
+-->
+<config>
+  <hidden-api-whitelisted-app package="android.car.cluster.maserati" />
+  <hidden-api-whitelisted-app package="com.android.apps.tag" />
+  <hidden-api-whitelisted-app package="com.android.auto.embedded.cts.verifier" />
+  <hidden-api-whitelisted-app package="com.android.car.bugreport" />
+  <hidden-api-whitelisted-app package="com.android.car.carlauncher" />
+  <hidden-api-whitelisted-app package="com.android.car.home" />
+  <hidden-api-whitelisted-app package="com.android.car.retaildemo" />
+  <hidden-api-whitelisted-app package="com.android.car.settingslib.robotests" />
+  <hidden-api-whitelisted-app package="com.android.car.setupwizardlib.robotests" />
+  <hidden-api-whitelisted-app package="com.android.cardock" />
+  <hidden-api-whitelisted-app package="com.android.connectivity.metrics" />
+  <hidden-api-whitelisted-app package="com.android.facelock" />
+  <hidden-api-whitelisted-app package="com.android.google.gce.gceservice" />
+  <hidden-api-whitelisted-app package="com.android.hotwordenrollment.okgoogle" />
+  <hidden-api-whitelisted-app package="com.android.hotwordenrollment.tgoogle" />
+  <hidden-api-whitelisted-app package="com.android.hotwordenrollment.xgoogle" />
+  <hidden-api-whitelisted-app package="com.android.inputmethod.latin" />
+  <hidden-api-whitelisted-app package="com.android.media.update" />
+  <hidden-api-whitelisted-app package="com.android.netspeed" />
+  <hidden-api-whitelisted-app package="com.android.onemedia" />
+  <hidden-api-whitelisted-app package="com.android.pixellogger" />
+  <hidden-api-whitelisted-app package="com.android.ramdump" />
+  <hidden-api-whitelisted-app package="com.android.settingslib.robotests" />
+  <hidden-api-whitelisted-app package="com.android.simappdialog" />
+  <hidden-api-whitelisted-app package="com.android.statsd.dogfood" />
+  <hidden-api-whitelisted-app package="com.android.statsd.loadtest" />
+  <hidden-api-whitelisted-app package="com.android.systemui.shared" />
+  <hidden-api-whitelisted-app package="com.android.test.power" />
+  <hidden-api-whitelisted-app package="com.android.test.voiceenrollment" />
+  <hidden-api-whitelisted-app package="com.android.tv.provision" />
+  <hidden-api-whitelisted-app package="com.google.SSRestartDetector" />
+  <hidden-api-whitelisted-app package="com.google.android.apps.nexuslauncher" />
+  <hidden-api-whitelisted-app package="com.google.android.apps.wallpaper" />
+  <hidden-api-whitelisted-app package="com.google.android.asdiv" />
+  <hidden-api-whitelisted-app package="com.google.android.athome.globalkeyinterceptor" />
+  <hidden-api-whitelisted-app package="com.google.android.car.defaultstoragemonitoringcompanionapp" />
+  <hidden-api-whitelisted-app package="com.google.android.car.diagnosticrecorder" />
+  <hidden-api-whitelisted-app package="com.google.android.car.diagnosticverifier" />
+  <hidden-api-whitelisted-app package="com.google.android.car.diskwriteapp" />
+  <hidden-api-whitelisted-app package="com.google.android.car.flashapp" />
+  <hidden-api-whitelisted-app package="com.google.android.car.kitchensink" />
+  <hidden-api-whitelisted-app package="com.google.android.car.obd2app" />
+  <hidden-api-whitelisted-app package="com.google.android.car.setupwizard" />
+  <hidden-api-whitelisted-app package="com.google.android.car.usb.aoap.host" />
+  <hidden-api-whitelisted-app package="com.google.android.car.vms.subscriber" />
+  <hidden-api-whitelisted-app package="com.google.android.carrier" />
+  <hidden-api-whitelisted-app package="com.google.android.carriersetup" />
+  <hidden-api-whitelisted-app package="com.google.android.connectivitymonitor" />
+  <hidden-api-whitelisted-app package="com.google.android.edu.harnesssettings" />
+  <hidden-api-whitelisted-app package="com.google.android.ext.services" />
+  <hidden-api-whitelisted-app package="com.google.android.factoryota" />
+  <hidden-api-whitelisted-app package="com.google.android.feedback" />
+  <hidden-api-whitelisted-app package="com.google.android.gsf" />
+  <hidden-api-whitelisted-app package="com.google.android.hardwareinfo" />
+  <hidden-api-whitelisted-app package="com.google.android.hiddenmenu" />
+  <hidden-api-whitelisted-app package="com.google.android.mosey" />
+  <hidden-api-whitelisted-app package="com.google.android.permissioncontroller" />
+  <hidden-api-whitelisted-app package="com.google.android.partner.provisioning" />
+  <hidden-api-whitelisted-app package="com.google.android.partnersetup" />
+  <hidden-api-whitelisted-app package="com.google.android.pixel.setupwizard" />
+  <hidden-api-whitelisted-app package="com.google.android.preloaded_drawable_viewer" />
+  <hidden-api-whitelisted-app package="com.google.android.printservice.recommendation" />
+  <hidden-api-whitelisted-app package="com.google.android.sampledeviceowner" />
+  <hidden-api-whitelisted-app package="com.google.android.apps.scone" />
+  <hidden-api-whitelisted-app package="com.google.android.apps.pixel.dcservice" />
+  <hidden-api-whitelisted-app package="com.google.android.apps.pixel.launcherconnector" />
+  <hidden-api-whitelisted-app package="com.google.android.apps.pixel.tabby" />
+  <hidden-api-whitelisted-app package="com.google.android.sdksetup" />
+  <hidden-api-whitelisted-app package="com.google.android.setupwizard" />
+  <hidden-api-whitelisted-app package="com.google.android.storagemanager" />
+  <hidden-api-whitelisted-app package="com.google.android.tag" />
+  <hidden-api-whitelisted-app package="com.google.android.tungsten.setupwraith" />
+  <hidden-api-whitelisted-app package="com.google.android.tv.bugreportsender" />
+  <hidden-api-whitelisted-app package="com.google.android.tv.frameworkpackagestubs" />
+  <hidden-api-whitelisted-app package="com.google.android.vendorloggingservice" />
+  <hidden-api-whitelisted-app package="com.google.android.volta" />
+  <hidden-api-whitelisted-app package="com.google.android.wfcactivation" />
+  <hidden-api-whitelisted-app package="com.google.mds" />
+  <hidden-api-whitelisted-app package="com.google.modemservice" />
+  <hidden-api-whitelisted-app package="com.htc.omadm.trigger" />
+  <hidden-api-whitelisted-app package="com.qualcomm.qcrilmsgtunnel" />
+  <hidden-api-whitelisted-app package="com.ustwo.lwp" />
+  <hidden-api-whitelisted-app package="org.chromium.arc.accessibilityhelper" />
+  <hidden-api-whitelisted-app package="org.chromium.arc.apkcacheprovider" />
+  <hidden-api-whitelisted-app package="org.chromium.arc.applauncher" />
+  <hidden-api-whitelisted-app package="org.chromium.arc.backup_settings" />
+  <hidden-api-whitelisted-app package="org.chromium.arc.cast_receiver" />
+  <hidden-api-whitelisted-app package="org.chromium.arc.crash_collector" />
+  <hidden-api-whitelisted-app package="org.chromium.arc.file_system" />
+  <hidden-api-whitelisted-app package="org.chromium.arc.gms" />
+  <hidden-api-whitelisted-app package="org.chromium.arc.home" />
+  <hidden-api-whitelisted-app package="org.chromium.arc.intent_helper" />
+  <hidden-api-whitelisted-app package="org.chromium.arc.tts" />
+</config>

product/blobs/etc/sysconfig/google-initial-package-stopped-states.xml

@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--
+  ~ Copyright (C) 2023 The Android Open Source Project
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~      http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License
+-->
+
+<!--
+This XML defines an allowlist for packages that should not be scanned in a "stopped" state.
+When this feature is turned on (indicated by the config config_stopSystemPackagesByDefault in
+core/res/res/values/config.xml) packages on the system partition that are encountered by
+the PackageManagerService for the first time are scanned in the "stopped" state. This allowlist
+is also considered while creating new users on the device. Stopped state is not set during
+subsequent reboots.
+
+Example usage
+    1. <initial-package-state package="com.example.app" stopped="false"/>
+        Indicates that a system package - com.example.app's initial stopped state should not be set
+        by the Package Manager. By default, system apps are marked as stopped.
+    2. <initial-package-state package="com.example.app" stopped="true"/>
+        Indicates that a system package - com.example.app's initial state should be set by the
+        Package Manager to "stopped=true". It will have the same effect on the
+        package's stopped state even if this package was not included in the allow list.
+    3. <initial-package-state package="com.example.app"/>
+        Invalid usage.
+-->
+<config>
+    <initial-package-state package="com.android.chrome" stopped="false"/>
+    <initial-package-state package="com.android.vending" stopped="false"/>
+    <initial-package-state package="com.google.android.apps.docs" stopped="false"/>
+    <initial-package-state package="com.google.android.apps.maps" stopped="false"/>
+    <initial-package-state package="com.google.android.apps.messaging" stopped="false"/>
+    <initial-package-state package="com.google.android.apps.nbu.files" stopped="false"/>
+    <initial-package-state package="com.google.android.apps.photos" stopped="false"/>
+    <initial-package-state package="com.google.android.apps.safetyhub" stopped="false"/>
+    <initial-package-state package="com.google.android.apps.tips" stopped="false"/>
+    <initial-package-state package="com.google.android.calendar" stopped="false"/>
+    <initial-package-state package="com.google.android.contacts" stopped="false"/>
+    <initial-package-state package="com.google.android.gm" stopped="false"/>
+    <initial-package-state package="com.google.android.googlequicksearchbox" stopped="false"/>
+    <initial-package-state package="com.google.android.videos" stopped="false"/>
+</config>

product/blobs/etc/sysconfig/google-install-constraints-package-allowlist.xml

@@ -0,0 +1,55 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--
+  ~ Copyright (C) 2022 The Android Open Source Project
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~      http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License
+  -->
+
+<!--
+This XML file declares which platform packages can use install-constraints manifest tag.
+It should only contain packages that are part of Android Tiramisu and above.
+
+TODO(b/233873647): generate this list from a common config
+-->
+<config>
+    <install-constraints-allowed package="com.android.apex.cts.shim" />
+    <install-constraints-allowed package="com.google.android.adbd" />
+    <install-constraints-allowed package="com.google.android.adservices" />
+    <install-constraints-allowed package="com.google.android.appsearch" />
+    <install-constraints-allowed package="com.google.android.art" />
+    <install-constraints-allowed package="com.google.android.captiveportallogin" />
+    <install-constraints-allowed package="com.google.android.cellbroadcast" />
+    <install-constraints-allowed package="com.google.android.conscrypt" />
+    <install-constraints-allowed package="com.google.android.documentsui" />
+    <install-constraints-allowed package="com.google.android.extservices" />
+    <install-constraints-allowed package="com.google.android.ipsec" />
+    <install-constraints-allowed package="com.google.android.media" />
+    <install-constraints-allowed package="com.google.android.mediaprovider" />
+    <install-constraints-allowed package="com.google.android.media.swcodec" />
+    <install-constraints-allowed package="com.google.android.modulemetadata" />
+    <install-constraints-allowed package="com.google.android.networkstack" />
+    <install-constraints-allowed package="com.google.android.neuralnetworks" />
+    <install-constraints-allowed package="com.google.android.ondevicepersonalization" />
+    <install-constraints-allowed package="com.google.android.os.statsd" />
+    <install-constraints-allowed package="com.google.android.permission" />
+    <install-constraints-allowed package="com.google.android.resolv" />
+    <install-constraints-allowed package="com.google.android.scheduling" />
+    <install-constraints-allowed package="com.google.android.sdkext" />
+    <install-constraints-allowed package="com.google.android.tethering" />
+    <install-constraints-allowed package="com.google.android.tzdata4" />
+    <install-constraints-allowed package="com.google.android.uwb" />
+    <install-constraints-allowed package="com.google.android.wifi" />
+    <install-constraints-allowed package="com.google.mainline.adservices" />
+    <install-constraints-allowed package="com.google.mainline.primary.libs" />
+    <install-constraints-allowed package="com.google.mainline.telemetry" />
+</config>

product/blobs/etc/sysconfig/google-staged-installer-whitelist.xml

@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!--
+ This XML file controls the allow-list of packages that have the capability to perform a staged
+ install (either APEX or APK) and a non-staged APEX install.
+-->
+<config>
+  <whitelisted-staged-installer package="com.android.vending" isModulesInstaller="true" />
+  <whitelisted-staged-installer package="com.google.android.GoogleCamera" />
+</config>

product/blobs/etc/sysconfig/google-system-apps-update-ownership.xml

@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--
+  ~ Copyright (C) 2022 The Android Open Source Project
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~      http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License
+  -->
+<!-- This XML files declares the installer eligiable for updating the given package. -->
+<config>
+</config>

product/blobs/etc/sysconfig/google.xml

@@ -0,0 +1,157 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Copyright (C) 2014 The Android Open Source Project
+
+     Licensed under the Apache License, Version 2.0 (the "License");
+     you may not use this file except in compliance with the License.
+     You may obtain a copy of the License at
+
+          http://www.apache.org/licenses/LICENSE-2.0
+
+     Unless required by applicable law or agreed to in writing, software
+     distributed under the License is distributed on an "AS IS" BASIS,
+     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+     See the License for the specific language governing permissions and
+     limitations under the License.
+-->
+
+<!-- These are configurations that must exist on all GMS devices. -->
+<config>
+    <!-- These are the standard packages that are white-listed to always have internet
+         access while in power save mode, even if they aren't in the foreground. -->
+
+    <!-- GmsCore must always have network access for GCM and other things. -->
+    <allow-in-power-save package="com.google.android.gms" />
+    <allow-in-data-usage-save package="com.google.android.gms" />
+    <allow-unthrottled-location package="com.google.android.gms" />
+    <allow-ignore-location-settings package="com.google.android.gms" attributionTag="com.google.android.gms.thunderbird" />
+    <allow-ignore-location-settings package="com.google.android.dialer" attributionTag="*" />
+
+    <!-- SCONE must get device location for satellite emergency communications. -->
+    <allow-ignore-location-settings package="com.google.android.apps.scone" attributionTag="satellite_esos" />
+
+    <!-- Satellite access controller must get device location for satellite emergency communications. -->
+    <allow-ignore-location-settings package="com.android.phone" attributionTag="telephony" />
+
+    <!-- OobConfig must always have network access to fetch enterprise and carrier lock config. -->
+    <allow-in-power-save-except-idle package="com.google.android.apps.work.oobconfig" />
+    <allow-in-data-usage-save package="com.google.android.apps.work.oobconfig" />
+
+    <!-- Turbo must not have App Standby restrictions in order to push new
+         App Standby buckets to the platform periodically -->
+    <allow-in-power-save-except-idle package="com.google.android.apps.turbo" />
+
+    <!-- Certain broadcasts must still go to legacy implicit receivers -->
+    <allow-implicit-broadcast action="com.google.android.checkin.CHECKIN_COMPLETE" />
+    <allow-implicit-broadcast action="com.google.gservices.intent.action.GSERVICES_CHANGED" />
+    <allow-implicit-broadcast action="com.google.gservices.intent.action.GSERVICES_OVERRIDE" />
+    <allow-implicit-broadcast action="com.google.android.c2dm.intent.RECEIVE" />
+
+
+    <!-- Play Store likewise must have network access to support other applications. -->
+    <allow-in-power-save-except-idle package="com.android.vending" />
+
+    <!-- If the volta app is pre-installed (for monitoring power use), let it do checkins. -->
+    <allow-in-power-save package="com.google.android.volta" />
+
+    <!-- If GoogleCellBroadcastServiceModule is installed, let it run in the background -->
+    <allow-in-power-save package="com.google.android.cellbroadcastreceiver" />
+
+    <!-- If "Personal Safety" app is installed, let it run in the background -->
+    <allow-in-power-save package="com.google.android.apps.safetyhub" />
+
+    <!-- If CarrierServices is installed, it must always have network access to
+         reliably receive IMS messages. -->
+    <allow-in-power-save package="com.google.android.ims" />
+    <allow-in-data-usage-save package="com.google.android.ims" />
+
+    <!-- Allow SetupWizard keeping at unrestricted mode of Battery usage. -->
+    <bg-restriction-exemption package="com.google.android.setupwizard"/>
+    <bg-restriction-exemption package="com.google.android.apps.automotive.templates.host"/>
+    <bg-restriction-exemption package="com.google.android.apps.setupwizard.searchselector"/>
+
+    <!-- These Google applications all handle URLs to their websites by default -->
+
+    <!-- Apps below are required on all GMS devices -->
+    <app-link package="com.android.vending" />
+    <app-link package="com.google.android.gms" />
+    <app-link package="com.google.android.apps.maps" />
+    <app-link package="com.google.android.youtube" />
+    <app-link package="com.google.android.apps.docs" />
+    <app-link package="com.google.android.talk" />
+    <app-link package="com.google.android.apps.photos" />
+    <app-link package="com.google.android.apps.youtube.music" />
+    <app-link package="com.google.android.googlequicksearchbox" />
+
+    <!-- Apps below are optional on GMS devices -->
+    <app-link package="com.google.android.apps.tycho" />
+    <app-link package="com.google.android.apps.plus" />
+    <app-link package="com.google.android.apps.docs.editors.sheets" />
+    <app-link package="com.google.android.apps.docs.editors.slides" />
+    <app-link package="com.google.android.apps.docs.editors.docs" />
+    <app-link package="com.google.android.talk" />
+    <app-link package="com.google.android.videos" />
+    <app-link package="com.google.android.calendar" />
+    <app-link package="com.google.android.apps.wallpaper" />
+    <app-link package="com.google.android.apps.tips" />
+
+    <!-- Whitelist of what components are permitted as backup data transports.  The
+         'service' attribute here is a flattened ComponentName string. -->
+    <backup-transport-whitelisted-service
+        service="com.google.android.gms/.backup.BackupTransportService" />
+    <backup-transport-whitelisted-service
+        service="com.google.android.gms/.backup.component.D2dTransportService" />
+    <backup-transport-whitelisted-service
+        service="com.google.android.apps.restore/.transport.BackupTransportService" />
+    <backup-transport-whitelisted-service
+        service="com.google.android.apps.restore/.transport.D2dTransportService" />
+
+
+    <!-- Specify the explicit set of other applications that AI services are allowed to
+         interact with, including the providers that back the implementation of the APIs
+         provided by the package. -->
+    <allow-association target="com.google.android.as" allowed="com.android.bluetooth" />
+    <allow-association target="com.google.android.as" allowed="com.android.bluetooth.services" />
+    <allow-association target="com.google.android.as" allowed="com.android.phone" />
+    <allow-association target="com.google.android.as" allowed="com.android.providers.blockednumber" />
+    <allow-association target="com.google.android.as" allowed="com.android.providers.contacts" />
+    <allow-association target="com.google.android.as" allowed="com.android.providers.media" />
+    <allow-association target="com.google.android.as" allowed="com.android.providers.telephony" />
+    <allow-association target="com.google.android.as" allowed="com.android.systemui" />
+    <allow-association target="com.google.android.as" allowed="com.google.android.bluetooth" />
+    <allow-association target="com.google.android.as" allowed="com.google.android.bluetooth.services" />
+    <allow-association target="com.google.android.as" allowed="com.google.android.providers.media.module" />
+    <!-- AI services can bind to its open-source network component. -->
+    <allow-association target="com.google.android.as" allowed="com.google.android.as.oss" />
+    <!-- AI services can bind to Settings Intelligence. -->
+    <allow-association target="com.google.android.as" allowed="com.google.android.settings.intelligence"/>
+
+     <!-- Specify the explicit set of other applications that Glasses Secure service is allowed to interact with.-->
+    <allow-association target="com.google.android.glasses.secure" allowed="com.google.android.as.oss" />
+
+    <!-- Specify the explicit set of other applications whose app data directories are
+        accessible by other applications. -->
+    <app-data-isolation-whitelisted-app package="com.google.android.gms" />
+
+    <!-- Whitelist of packages that eligible for rollback -->
+    <rollback-whitelisted-app package="com.android.vending" />
+    <rollback-whitelisted-app package="com.google.android.gms" />
+
+    <!-- Specify the installer eligiable for updating the given GMS package. -->
+    <update-ownership package="com.google.android.gms" installer="com.android.vending" />
+    <update-ownership package="com.google.android.verifier" installer="com.android.vending" />
+
+    <!-- Denylist of packages that are not eligible for automatic rollback -->
+    <automatic-rollback-denylisted-app package="com.android.vending" />
+    <automatic-rollback-denylisted-app package="com.google.android.gms" />
+
+    <!-- Allow device lock controller app to schedule jobs and alarms, and have network access when app
+         in background; otherwise, it may not be able to enforce provision for managed devices. -->
+    <allow-in-power-save package="com.google.android.devicelockcontroller" />
+    <allow-in-data-usage-save package="com.google.android.devicelockcontroller" />
+
+
+    <!-- These packages are part of Remote Key Provisioning and are allowed to always have
+         internet access while in power save mode, or in data saver mode. -->
+    <allow-in-power-save package="com.google.android.rkpdapp" />
+    <allow-in-data-usage-save package="com.google.android.rkpdapp" />
+</config>

product/blobs/etc/sysconfig/google_build.xml

@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Copyright (C) 2014 The Android Open Source Project
+
+     Licensed under the Apache License, Version 2.0 (the "License");
+     you may not use this file except in compliance with the License.
+     You may obtain a copy of the License at
+
+          http://www.apache.org/licenses/LICENSE-2.0
+
+     Unless required by applicable law or agreed to in writing, software
+     distributed under the License is distributed on an "AS IS" BASIS,
+     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+     See the License for the specific language governing permissions and
+     limitations under the License.
+-->
+
+<!-- These are configurations that should exist on Google's own Nexus and GPe devices. -->
+<config>
+    <feature name="com.google.android.feature.GOOGLE_BUILD" />
+    <!-- This should be added to all Nexus and GPe devices -->
+    <feature name="com.google.android.feature.GOOGLE_EXPERIENCE" />
+    <!-- This should declare the version of Exchange that ships -->
+    <feature name="com.google.android.feature.EXCHANGE_6_2" />
+</config>

product/blobs/etc/sysconfig/google_fi.xml

@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on Google's 2017 and newer Nexus devices. -->
+<config>
+    <!--
+       This is the canonical feature identifying devices which bundle Google Fi support. The
+       Fi app and associated apps will be bundled (but may be disabled until a matching SIM
+       is inserted).
+       This feature may not be present before Android S.
+    -->
+    <feature name="com.google.android.feature.GOOGLE_FI_BUNDLED" />
+
+</config>

product/blobs/etc/sysconfig/google_xr_projected.xml

@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on devices supporting XR Projected features. -->
+<config>
+    <!--
+       Signals that the device supports XR Projected features and serves as a
+       mechanism to target devices which makes relevant applications
+       available for them in Play Store.
+    -->
+    <feature name="com.google.android.feature.XR_PROJECTED" />
+
+</config>

product/blobs/etc/sysconfig/nexus.xml

@@ -0,0 +1,78 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on Google's 2016 and newer Nexus devices. -->
+<config>
+    <!-- This is meant to be the canonical feature identifying 2016 and newer Nexus devices. -->
+    <feature name="com.google.android.feature.PIXEL_EXPERIENCE" />
+
+    <!-- The feature identifying devices which are able to use the Turbo app -->
+    <feature name="com.google.android.feature.TURBO_PRELOAD" />
+
+    <!-- The feature identifying devices which are able to use the Android Wellbeing app. -->
+    <feature name="com.google.android.feature.WELLBEING" />
+
+    <!-- The feature identifying devices which are able to use the device-to-device migration
+        over cable provided by the Pixelmigrate app. -->
+    <feature name="com.google.android.feature.D2D_CABLE_MIGRATION_FEATURE" />
+
+    <!-- Explicitly disable features that are unavailable on handheld Nexus devices. -->
+    <unavailable-feature name="android.hardware.type.automotive" />
+    <unavailable-feature name="android.hardware.type.embedded" />
+    <unavailable-feature name="android.hardware.type.pc" />
+    <unavailable-feature name="android.hardware.type.television" />
+    <unavailable-feature name="android.hardware.type.watch" />
+    <unavailable-feature name="android.software.leanback" />
+    <unavailable-feature name="android.software.leanback_only" />
+
+    <!-- Allow WfcActivation app scheduled jobs to run when app in background. -->
+    <allow-in-power-save-except-idle package="com.google.android.wfcactivation" />
+
+    <!-- Allow ssr detector service in background -->
+    <allow-in-power-save package="com.google.SSRestartDetector" />
+
+    <!-- Allow connectivitymonitor service in background -->
+    <allow-in-power-save package="com.google.android.connectivitymonitor" />
+
+    <!-- Allow connectivitythermalpowermanager service in background -->
+    <allow-in-power-save package="com.google.android.connectivitythermalpowermanager" />
+
+    <!-- Allow iwlan service in backgroud-->
+    <allow-in-power-save package="com.google.android.iwlan" />
+
+    <!-- Allow ramdump uploader service in background -->
+    <allow-in-power-save package="com.android.ramdump" />
+
+    <!-- Whitelist log pkg so JobIntentService can work. b/71630894 -->
+    <allow-in-power-save-except-idle package="com.google.android.apps.carrier.log" />
+
+    <!-- Whitelist so headless app JobIntentService can work. b/73250911 -->
+    <allow-in-power-save-except-idle package="com.google.android.carrier" />
+
+    <!-- Whitelist so headless app JobService can work. b/135126855 -->
+    <!-- Allow CarrierWifi WifiScorerService to run in background. b/334906519 -->
+    <allow-in-power-save package="com.google.android.apps.carrier.carrierwifi" />
+
+    <!-- These are telephony components that need to run in the background -->
+    <allow-in-power-save package="com.qualcomm.atfwd" />
+    <allow-in-power-save package="com.qualcomm.embms" />
+    <allow-in-power-save package="com.qualcomm.qti.telephonyservice" />
+    <allow-in-power-save package="com.qulacomm.qcrilmsgtunnel" />
+    <allow-in-power-save package="com.qualcomm.qti.ims" />
+    <allow-in-power-save package="com.qualcomm.qti.radioconfiginterface" />
+
+    <!-- Pre-installed carrier apps which should be disabled until a matching SIM is inserted. -->
+    <disabled-until-used-preinstalled-carrier-app package="com.google.android.apps.tycho" />
+
+    <!-- Whitelist so the app can run JobIntentService in background. b/77932342 -->
+    <allow-in-power-save-except-idle package="com.google.android.tetheringentitlement" />
+    <!-- Tethering entitlement check app should have Internet access while in data saving mode,
+         even if they're in background. -->
+    <allow-in-data-usage-save package="com.google.android.tetheringentitlement" />
+
+    <!-- Allow eMBMS middleware services to run in the background -->
+    <allow-in-power-save package="com.qualcomm.ltebc_vzw" />
+    <allow-in-power-save package="com.qualcomm.ltebc" />
+
+    <!-- Allow gnss pixel monitor to run in the background -->
+    <allow-in-power-save package="com.google.android.gnsspixelmonitor" />
+</config>

product/blobs/etc/sysconfig/nga.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on devices that support Next Generation Assistant -->
+<config>
+    <!-- This feature is meant to be the feature identifying devices that support NGA -->
+    <feature name="com.google.android.feature.NEXT_GENERATION_ASSISTANT" />
+</config>

product/blobs/etc/sysconfig/nowplaying.xml

@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Copyright (C) 2014 The Android Open Source Project
+
+     Licensed under the Apache License, Version 2.0 (the "License");
+     you may not use this file except in compliance with the License.
+     You may obtain a copy of the License at
+
+          http://www.apache.org/licenses/LICENSE-2.0
+
+     Unless required by applicable law or agreed to in writing, software
+     distributed under the License is distributed on an "AS IS" BASIS,
+     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+     See the License for the specific language governing permissions and
+     limitations under the License.
+-->
+
+<config>
+    <!-- The Now Playing package can bind to the open-source PCS component. -->
+    <allow-association target="com.google.android.as.oss" allowed="com.google.android.apps.pixel.nowplaying" />
+    <allow-association target="com.google.android.apps.pixel.nowplaying" allowed="com.google.android.as.oss" />
+
+    <!-- The Now Playing package can bind to Android System Intelligence (Private Core Compute). -->
+    <allow-association target="com.google.android.as" allowed="com.google.android.apps.pixel.nowplaying" />
+    <allow-association target="com.google.android.apps.pixel.nowplaying" allowed="com.google.android.as" />
+</config>

product/blobs/etc/sysconfig/nowplaying_app_26q1.xml

@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="utf-8"?>
+<config>
+    <feature name="com.google.android.feature.NOW_PLAYING_APP_26Q1" />
+</config>

product/blobs/etc/sysconfig/pixel_2017-initial-package-stopped-states.xml

@@ -0,0 +1,47 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!--
+  ~ Copyright (C) 2023 The Android Open Source Project
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~      http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License
+-->
+
+<!--
+This XML defines an allowlist for packages that should not be scanned in a "stopped" state.
+When this feature is turned on (indicated by the config config_stopSystemPackagesByDefault in
+core/res/res/values/config.xml) packages on the system partition that are encountered by
+the PackageManagerService for the first time are scanned in the "stopped" state. This allowlist
+is also considered while creating new users on the device. Stopped state is not set during
+subsequent reboots.
+
+Example usage
+    1. <initial-package-state package="com.example.app" stopped="false"/>
+        Indicates that a system package - com.example.app's initial stopped state should not be set
+        by the Package Manager. By default, system apps are marked as stopped.
+    2. <initial-package-state package="com.example.app" stopped="true"/>
+        Indicates that a system package - com.example.app's initial state should be set by the
+        Package Manager to "stopped=true". It will have the same effect on the
+        package's stopped state even if this package was not included in the allow list.
+    3. <initial-package-state package="com.example.app"/>
+        Invalid usage.
+-->
+<config>
+    <initial-package-state package="com.android.pixellogger" stopped="false"/>
+    <initial-package-state package="com.google.android.apps.modem.pixellogger" stopped="false"/>
+    <initial-package-state package="com.android.settings" stopped="false"/>
+    <initial-package-state package="com.android.stk" stopped="false"/>
+    <initial-package-state package="com.google.android.apps.internal.betterbug" stopped="false"/>
+    <initial-package-state package="com.google.android.apps.safetyhub" stopped="false"/>
+    <initial-package-state package="com.google.mds" stopped="false"/>
+    <initial-package-state package="com.google.android.GoogleCamera" stopped="false"/>
+    <initial-package-state package="com.google.hardware.devicetools.astro" stopped="false"/>
+</config>

product/blobs/etc/sysconfig/pixel_experience_2017.xml

@@ -0,0 +1,82 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on Google's 2017 and newer Nexus devices. -->
+<config>
+    <!-- This is meant to be the canonical feature identifying 2017 and newer Nexus devices. -->
+    <feature name="com.google.android.feature.PIXEL_2017_EXPERIENCE" />
+
+    <!-- Allow SCONE JobIntentService & Services to run in background -->
+    <allow-in-power-save package="com.google.android.apps.scone" />
+
+    <!-- Prevent bypassing SimLock with power optimizations -->
+    <allow-in-power-save package="com.google.android.apps.work.oobconfig" />
+
+    <!-- Allow Flipendo in power save. Will be present on pre-2020 devices for dogfooding. -->
+    <allow-in-power-save-except-idle package="com.google.android.flipendo" />
+
+    <!-- Allow Better Bug to take bug report. -->
+    <bugreport-whitelisted package="com.google.android.apps.betterbug" />
+    <bugreport-whitelisted package="com.google.android.apps.internal.betterbug" />
+    <bugreport-whitelisted package="com.google.android.apps.betterbug.partners" />
+    <bugreport-whitelisted package="com.google.android.desktop.feedback" />
+
+    <!-- Allow Pixel modem service to run in background -->
+    <allow-in-power-save package="com.google.modemservice" />
+
+    <!-- Allow MDS ExperimentService to run in background -->
+    <allow-in-power-save package="com.google.mds" />
+
+    <!-- Allow Exo services to run in background -->
+    <allow-in-power-save package="com.google.pixel.exo" />
+    <allow-in-power-save package="com.google.ambient.streaming" />
+
+    <!-- Allow OMA DM to run in background -->
+    <allow-in-power-save package="com.android.omadm.service" />
+    <allow-in-power-save package="com.android.sdm.plugins.connmo" />
+    <allow-in-power-save package="com.android.sdm.plugins.dcmo" />
+    <allow-in-power-save package="com.android.sdm.plugins.diagmon" />
+    <allow-in-power-save package="com.android.vzwomatrigger" />
+    <allow-in-power-save package="com.android.sdm.plugins.usccdm" />
+
+    <!-- Allow Gate runners to run in background -->
+    <allow-in-power-save package="com.google.pixel.gate.android.pysupport" />
+    <allow-in-power-save package="com.google.pixel.gate.android.daemon" />
+
+    <!-- Hide DocumentsUi Launcher/Downloads intent handling. DocumentsUi
+         PrebootReceiver does not properly hide the launcher in work profile,
+         so we need to include this as well. -->
+    <component-override package="com.google.android.documentsui" >
+        <component class="com.android.documentsui.LauncherActivity" enabled="false" />
+        <component class="com.android.documentsui.ViewDownloadsActivity" enabled="false" />
+    </component-override>
+
+    <!-- ACTION_MANAGE_STORAGE handled by Files by Google -->
+    <component-override package="com.google.android.storagemanager" >
+        <component class="com.android.storagemanager.deletionhelper.DeletionHelperActivity" enabled="false" />
+    </component-override>
+
+    <!-- Make sure photos/video previews are handled by Photos. -->
+    <component-override package="com.google.android.apps.nbu.files" >
+        <component class="com.google.android.apps.nbu.files.gateway.preview.PreviewActivity" enabled="false" />
+    </component-override>
+
+    <component-override package="com.android.settings" >
+        <!-- Display regulatory info in settings. -->
+        <component class=".RegulatoryInfoDisplayActivity" enabled="true" />
+    </component-override>
+
+    <!-- Disable legacy Switch Access. -->
+    <component-override package="com.google.android.marvin.talkback" >
+        <component class="com.android.switchaccess.SwitchAccessService" enabled="false" />
+    </component-override>
+
+    <!-- Feature flag on RVC builds for AER requirements, b/159247801 -->
+    <feature name="com.google.android.feature.AER_OPTIMIZED" />
+
+    <!-- Corresponds to PackageManager.FEATURE_WALLET_LOCATION_BASED_SUGGESTIONS. -->
+    <feature name="android.software.wallet_location_based_suggestions" />
+
+    <!-- Temporary feature corresponding to support for dragging the assistant into
+         splitscreen, b/350016003 -->
+    <feature name="com.android.systemui.SUPPORTS_DRAG_ASSISTANT_TO_SPLIT" />
+</config>

product/blobs/etc/sysconfig/pixel_experience_2018.xml

@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on Google's 2018 and newer Pixel devices. -->
+<config>
+    <!-- Allow Pixel modem service in background -->
+    <allow-in-power-save package="com.google.modemservice" />
+
+    <!-- Allow PixelLogger LoggingService to run in background -->
+    <allow-in-power-save package="com.android.pixellogger" />
+
+    <!-- Allow Pixel Logger to take bug report. -->
+    <bugreport-whitelisted package="com.android.pixellogger" />
+
+    <!-- Allow Flipendo in power save. Will be present on pre-2020 devices for dogfooding. -->
+    <allow-in-power-save-except-idle package="com.google.android.flipendo" />
+
+    <!-- The odad package can only bind to the AI services open-source network component. -->
+    <allow-association target="com.google.android.odad" allowed="com.google.android.as.oss" />
+
+    <!-- Specify the explicit set of other applications that the odad package are allowed to
+         interact with, including the providers that back the implementation of the APIs
+         provided by the package. -->
+    <allow-association target="com.google.android.odad" allowed="com.android.providers.telephony" />
+
+    <!-- This is meant to be the canonical feature identifying 2018 and newer Pixel devices. -->
+    <feature name="com.google.android.feature.PIXEL_2018_EXPERIENCE" />
+</config>

product/blobs/etc/sysconfig/pixel_experience_2019.xml

@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on Google's 2019 and newer devices. -->
+<config>
+    <!-- This is meant to be the canonical feature identifying 2019 and newer devices. -->
+    <feature name="com.google.android.feature.PIXEL_2019_EXPERIENCE" />
+
+    <!-- Allow Flipendo in power save. Will be present on pre-2020 devices for dogfooding. -->
+    <allow-in-power-save-except-idle package="com.google.android.flipendo" />
+</config>

product/blobs/etc/sysconfig/pixel_experience_2019_midyear.xml

@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on Google's 2019 mid year and newer devices. -->
+<config>
+    <!-- This is meant to be the canonical feature identifying 2019 mid year and newer devices. -->
+    <feature name="com.google.android.feature.PIXEL_2019_MIDYEAR_EXPERIENCE" />
+
+    <!-- Allow Flipendo in power save. Will be present on pre-2020 devices for dogfooding. -->
+    <allow-in-power-save-except-idle package="com.google.android.flipendo" />
+</config>

product/blobs/etc/sysconfig/pixel_experience_2020.xml

@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on Google's 2020 and newer devices. -->
+<config>
+    <!-- This is meant to be the canonical feature identifying 2020 and newer devices. -->
+    <feature name="com.google.android.feature.PIXEL_2020_EXPERIENCE" />
+
+    <!-- Allow Flipendo in power save. -->
+    <allow-in-power-save-except-idle package="com.google.android.flipendo" />
+
+    <!-- Ensure CloudDPC signature check upon reboot. -->
+    <require-strict-signature package="com.google.android.apps.work.clouddpc" />
+</config>

product/blobs/etc/sysconfig/pixel_experience_2020_midyear.xml

@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on Google's 2020 mid year and newer devices. -->
+<config>
+    <!-- This is meant to be the canonical feature identifying 2020 mid year and newer devices. -->
+    <feature name="com.google.android.feature.PIXEL_2020_MIDYEAR_EXPERIENCE" />
+
+    <!-- Allow Flipendo in power save. -->
+    <allow-in-power-save-except-idle package="com.google.android.flipendo" />
+</config>

product/blobs/etc/sysconfig/pixel_experience_2021.xml

@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on Google's 2021 and newer devices. -->
+<config>
+    <!-- This is meant to be the canonical feature identifying 2021 and newer devices. -->
+    <feature name="com.google.android.feature.PIXEL_2021_EXPERIENCE" />
+
+    <!-- Allow Pixel Support app to take bug report. -->
+    <bugreport-whitelisted package="com.google.android.apps.pixel.support" />
+
+    <!-- Allow Pixel Factory OTA app to take bug report. -->
+    <bugreport-whitelisted package="com.google.android.factoryota" />
+</config>

product/blobs/etc/sysconfig/pixel_experience_2021_midyear.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on Google's 2021 mid year and newer devices. -->
+<config>
+    <!-- This is meant to be the canonical feature identifying 2021 mid year and newer devices. -->
+    <feature name="com.google.android.feature.PIXEL_2021_MIDYEAR_EXPERIENCE" />
+</config>

product/blobs/etc/sysconfig/pixel_experience_2022.xml

@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on Google's 2022 and newer devices. -->
+<config>
+    <!-- This is meant to be the canonical feature identifying 2022 and newer devices. -->
+    <feature name="com.google.android.feature.PIXEL_2022_EXPERIENCE" />
+
+    <!-- Allow com.google.android.apps.privacy.wildlife to operate while in doze mode and while in battery saver -->
+    <allow-in-power-save package="com.google.android.apps.privacy.wildlife" />
+
+    <!-- Allow VPN service to run in the background while in data saving mode. -->
+     <allow-in-data-usage-save package="com.google.android.apps.privacy.wildlife" />
+</config>

product/blobs/etc/sysconfig/pixel_experience_2022_midyear.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on Google's 2022 mid year and newer devices. -->
+<config>
+    <!-- This is meant to be the canonical feature identifying 2022 mid year and newer devices. -->
+    <feature name="com.google.android.feature.PIXEL_2022_MIDYEAR_EXPERIENCE" />
+</config>

product/blobs/etc/sysconfig/pixel_experience_2023.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on Google's 2023 and newer devices. -->
+<config>
+    <!-- This is meant to be the canonical feature identifying 2023 and newer devices. -->
+    <feature name="com.google.android.feature.PIXEL_2023_EXPERIENCE" />
+</config>

product/blobs/etc/sysconfig/pixel_experience_2023_midyear.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on Google's 2023 mid year and newer devices. -->
+<config>
+    <!-- This is meant to be the canonical feature identifying 2023 mid year and newer devices. -->
+    <feature name="com.google.android.feature.PIXEL_2023_MIDYEAR_EXPERIENCE" />
+</config>

product/blobs/etc/sysconfig/pixel_experience_2024.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on Google's 2024 and newer devices. -->
+<config>
+    <!-- This is meant to be the canonical feature identifying 2024 and newer devices. -->
+    <feature name="com.google.android.feature.PIXEL_2024_EXPERIENCE" />
+    <allow-ignore-location-settings package="com.google.android.apps.stargate" attributionTag="*" />
+</config>

product/blobs/etc/sysconfig/pixel_experience_2024_midyear.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on Google's 2024 mid year and newer devices. -->
+<config>
+    <!-- This is meant to be the canonical feature identifying 2024 mid year and newer devices. -->
+    <feature name="com.google.android.feature.PIXEL_2024_MIDYEAR_EXPERIENCE" />
+</config>

product/blobs/etc/sysconfig/pixel_experience_2025.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on Google's 2025 and newer devices. -->
+<config>
+    <!-- This is meant to be the canonical feature identifying 2025 and newer devices. -->
+    <feature name="com.google.android.feature.PIXEL_2025_EXPERIENCE" />
+</config>

product/blobs/etc/sysconfig/pixel_experience_2025_midyear.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on Google's 2025 mid year and newer devices. -->
+<config>
+    <!-- This is meant to be the canonical feature identifying 2025 mid year and newer devices. -->
+    <feature name="com.google.android.feature.PIXEL_2025_MIDYEAR_EXPERIENCE" />
+</config>

product/blobs/etc/sysconfig/pixel_experience_2026.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on Google's 2026 and newer devices. -->
+<config>
+    <!-- This is meant to be the canonical feature identifying 2026 and newer devices. -->
+    <feature name="com.google.android.feature.PIXEL_2026_EXPERIENCE" />
+</config>

product/blobs/etc/sysconfig/pixel_experience_2026_midyear.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+
+<!-- These are configurations that should exist on Google's 2026 mid year and newer devices. -->
+<config>
+    <!-- This is meant to be the canonical feature identifying 2026 mid year and newer devices. -->
+    <feature name="com.google.android.feature.PIXEL_2026_MIDYEAR_EXPERIENCE" />
+</config>

product/blobs/etc/sysconfig/preinstalled-packages-glasses-core-pixel-common.xml

@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Copyright (C) 2025 The Android Open Source Project
+
+     Licensed under the Apache License, Version 2.0 (the "License");
+     you may not use this file except in compliance with the License.
+     You may obtain a copy of the License at
+
+          http://www.apache.org/licenses/LICENSE-2.0
+
+     Unless required by applicable law or agreed to in writing, software
+     distributed under the License is distributed on an "AS IS" BASIS,
+     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+     See the License for the specific language governing permissions and
+     limitations under the License.
+-->
+<!-- Android XR Core stub (GlassesCoreStub) -->
+<config>
+    <!--  Install the stub for FULL and MANAGED users
+          go/preinstall-allowlists#allowlist-format
+    -->
+    <install-in-user-type package="com.google.android.glasses.core">
+        <install-in user-type="FULL" />
+        <install-in user-type="android.os.usertype.profile.MANAGED" />
+    </install-in-user-type>
+</config>

product/blobs/etc/sysconfig/preinstalled-packages-pixel-2025-common.xml

@@ -0,0 +1,20 @@
+<config>
+    <!-- Android System Intelligence (DevicePersonalizationAiAiPrebuiltPixel2025) -->
+    <install-in-user-type package="com.google.android.as">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+    </install-in-user-type>
+
+    <!-- Private Compute Services (DeviceIntelligenceNetworkPrebuiltAstrea via DevicePersonalizationAiAiPrebuiltPixel2025) -->
+    <install-in-user-type package="com.google.android.as.oss">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+    </install-in-user-type>
+
+    <!--  Android Pulse anomaly detection app (Pulse) -->
+    <install-in-user-type package="com.google.android.apps.pulse">
+        <install-in user-type="SYSTEM" />
+    </install-in-user-type>
+</config>

product/blobs/etc/sysconfig/preinstalled-packages-pixel-carrier.xml

@@ -0,0 +1,77 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Copyright (C) 2025 Google Inc.
+    Licensed under the Apache License, Version 2.0 (the "License");
+    you may not use this file except in compliance with the License.
+    You may obtain a copy of the License at
+      http://www.apache.org/licenses/LICENSE-2.0
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS,
+    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+    See the License for the specific language governing permissions and
+    limitations under the License. -->
+<config>
+    <!-- Tethering Entitlement (TetheringEntitlement) -->
+    <install-in-user-type package="com.google.android.tetheringentitlement">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+    <!-- Carrier Setup (CarrierSetup) -->
+    <install-in-user-type package="com.google.android.carriersetup">
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+    <!-- Google Wi-Fi Provisioner app (CarrierWiFi) -->
+    <install-in-user-type package="com.google.android.apps.carrier.carrierwifi">
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+    <!-- WFC Activation (WfcActivation) -->
+    <install-in-user-type package="com.google.android.wfcactivation">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+
+    <!-- Adaptive Connectivity Services (SCONE) -->
+    <install-in-user-type package="com.google.android.apps.scone">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="android.os.usertype.profile.MANAGED" />
+    </install-in-user-type>
+
+    <!-- OMADM Service (DMService) -->
+    <install-in-user-type package="com.android.omadm.service">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+    <!-- OMADM Trigger (OemDmTrigger) -->
+    <install-in-user-type package="com.google.omadm.trigger">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+    <!-- OMADM ConnMO Plugin (ConnMO) -->
+    <install-in-user-type package="com.android.sdm.plugins.connmo">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+    <!-- OMADM DCMO Plugin (DCMO) -->
+    <install-in-user-type package="com.android.sdm.plugins.dcmo">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+    <!-- OMADM DiagMon Plugin (DiagMon) -->
+    <install-in-user-type package="com.android.sdm.plugins.diagmon">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+    <!-- Google eSIM Manager (EuiccGoogle) -->
+    <install-in-user-type package="com.google.android.euicc">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+    </install-in-user-type>
+    <!-- NFC/eSE/eSIM firmware updater (EuiccSupportPixel) -->
+    <install-in-user-type package="com.google.euiccpixel">
+        <install-in user-type="SYSTEM" />
+    </install-in-user-type>
+    <!-- NFC/eSE/eSIM firmware updater Permissions (EuiccSupportPixelPermissions) -->
+    <install-in-user-type package="com.google.euiccpixel.permissions">
+        <install-in user-type="SYSTEM" />
+    </install-in-user-type>
+</config>

product/blobs/etc/sysconfig/preinstalled-packages-pixel-experience-2023-midyear-and-newer.xml

@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- System packages to preinstall on Pixel 2023_midyear_and_newer devices, per user type.
+     Documentation at frameworks/base/data/etc/preinstalled-packages-platform.xml
+-->
+<config>
+    <!-- Cross Device Access Service -->
+    <install-in-user-type package="com.google.android.crossdeviceaccessservice">
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+</config>

product/blobs/etc/sysconfig/preinstalled-packages-product-pixel-2017-and-newer.xml

@@ -0,0 +1,386 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- System packages to preinstall on Pixel 2017-and-newer devices, per user type.
+     Documentation at frameworks/base/data/etc/preinstalled-packages-platform.xml
+-->
+<config>
+    <!-- Wallpaper Picker (WallpaperPickerGoogleRelease) -->
+    <install-in-user-type package="com.google.android.apps.wallpaper">
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+
+    <!--  Google Wallpaper Images  -->
+    <install-in-user-type package="com.google.android.apps.wallpaper.nexus">
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+
+    <!-- Live Wallpaper Picker (LiveWallpapersPicker) -->
+    <install-in-user-type package="com.android.wallpaper.livepicker">
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+
+    <!-- Magic Portrait (MagicPortraitWallpapers) -->
+    <install-in-user-type package="com.google.android.apps.magicportrait">
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+
+    <!-- Pixel Themes Stub (PixelThemesStub) -->
+    <install-in-user-type package="com.google.android.apps.customization.pixel">
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+
+    <!-- Pixel Launcher (NexusLauncher) -->
+    <install-in-user-type package="com.google.android.apps.nexuslauncher">
+        <!-- Unfortunately some things (eg recents) look specifically for launcher in user 0 -->
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+
+    <!-- AI Icons (same target as NexusLauncher) -->
+    <install-in-user-type package="com.google.android.apps.ai.icons">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+
+    <!--  Android Auto (AndroidAutoStubPrebuilt)
+    TODO(b/258069928): Check if this should be preinstalled on SYSTEM user -->
+    <install-in-user-type package="com.google.android.projection.gearhead">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!--  Calculator (CalculatorGooglePrebuilt) -->
+    <install-in-user-type package="com.google.android.calculator">
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+
+    <!--  Calendar (CalendarGooglePrebuilt) -->
+    <install-in-user-type package="com.google.android.calendar">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!--  Contacts (GoogleContacts) -->
+    <install-in-user-type package="com.google.android.contacts">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+    </install-in-user-type>
+
+    <!--  Clock (PrebuiltDeskClockGoogle) -->
+    <install-in-user-type package="com.google.android.deskclock">
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+
+    <!--  DocumentsUIGoogle
+    TODO(b/267617358): This config should be loaded by mainline_modules_handheld.mk but has been
+    added here because adding it to mainline_modules_handheld.mk fails with go/artifact-error -->
+    <install-in-user-type package="com.google.android.documentsui">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+    </install-in-user-type>
+
+    <!--  DocumentsUIGoogleOverlay -->
+    <install-in-user-type package="com.google.android.documentsui.theme.pixel">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+    </install-in-user-type>
+
+    <!--  Drive (Drive) -->
+    <install-in-user-type package="com.google.android.apps.docs">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!--  Files (FilesPrebuilt) -->
+    <install-in-user-type package="com.google.android.apps.nbu.files">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+    </install-in-user-type>
+
+    <!-- SettingsIntelligence (SettingsIntelligenceGooglePrebuilt) -->
+    <install-in-user-type package="com.google.android.settings.intelligence">
+        <install-in user-type="FULL" />
+        <install-in user-type="android.os.usertype.profile.MANAGED" />
+    </install-in-user-type>
+
+    <!--  StorageManagerGoogle -->
+    <install-in-user-type package="com.google.android.storagemanager">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+        <install-in user-type="android.os.usertype.profile.MANAGED" />
+        <install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!--  Gmail (PrebuiltGmail) -->
+    <install-in-user-type package="com.google.android.gm">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!--  Google Play Movies & TV (PlayVideos) -->
+    <install-in-user-type package="com.google.android.videos">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!--  Google Search (GoogleSearchPrebuilt) -->
+    <install-in-user-type package="com.google.android.googlequicksearchbox">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!-- Maps (Maps) -->
+    <install-in-user-type package="com.google.android.apps.maps">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!--  Messages (PrebuiltBugle) -->
+    <install-in-user-type package="com.google.android.apps.messaging">
+        <install-in user-type="FULL" />
+        <install-in user-type="android.os.usertype.profile.MANAGED" />
+    </install-in-user-type>
+
+    <!--  Personal Safety (SafetyHubLprPrebuilt)
+    TODO(b/259301078): Check if this should be preinstalled on SYSTEM user -->
+    <install-in-user-type package="com.google.android.apps.safetyhub">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!--  Phone (GoogleDialer) -->
+    <install-in-user-type package="com.google.android.dialer">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!--  Photos (Photos) -->
+    <install-in-user-type package="com.google.android.apps.photos">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+    </install-in-user-type>
+
+    <!-- Play Store (PhoneSky)
+    TODO(b/259299438) Check if this should be preinstalled on SYSTEM user -->
+    <install-in-user-type package="com.android.vending">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+    </install-in-user-type>
+
+    <!-- YouTube (YouTube) TODO: Loaded from vendor/google/products/google_apis_common.mk-->
+    <install-in-user-type package="com.google.android.youtube">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!-- AI Labs Warp app. Loaded from hardware/google/pixel/common/pixel-common-device.mk -->
+    <install-in-user-type package="com.google.android.apps.warp">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!-- Google Home app -->
+    <install-in-user-type package="com.google.android.apps.chromecast.app">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+    </install-in-user-type>
+
+
+    <!-- BetterBug external app -->
+    <install-in-user-type package="com.google.android.apps.betterbug">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+    </install-in-user-type>
+
+    <!-- Weather app -->
+    <install-in-user-type package="com.google.android.apps.weather">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+    </install-in-user-type>
+
+    <!-- Screenshots app -->
+    <install-in-user-type package="com.google.android.apps.pixel.agent">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!-- Pixel Studio app -->
+    <install-in-user-type package="com.google.android.apps.pixel.creativeassistant">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!-- Find My Device app -->
+    <install-in-user-type package="com.google.android.apps.adm">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!-- Pixel play auto-install (PAI) stub app. Enables phonesky to install
+      certain app prebuilts on device setup or when the first account is added to the user.
+      Preventing stub app installation disables PAI for the user -->
+    <install-in-user-type package="android.autoinstalls.config.google.nexus">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!--  DreamlinerUpdater -->
+    <install-in-user-type package="com.google.android.dreamlinerupdater">
+        <install-in user-type="SYSTEM" />
+    </install-in-user-type>
+
+    <!--  Dreamliner (DreamlinerPrebuilt) -->
+    <install-in-user-type package="com.google.android.apps.dreamliner">
+        <install-in user-type="FULL" />
+        <!-- Need to install for work profile so dogfooders can receive play updates -->
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!--  Extreme Battery Saver -->
+    <install-in-user-type package="com.google.android.flipendo">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+
+    <!-- LINT.IfChange -->
+    <!-- GMS Core (RELEASE_PACKAGE_GMSSYSTEM_VARIANT) -->
+    <install-in-user-type package="com.google.android.gms">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+    </install-in-user-type>
+    <!-- LINT.ThenChange(/vendor/google/modules/GmsSystemGoogle/sysconfig/preinstalled-packages-com.google.android.gmssystem.xml) -->
+
+    <!-- Google Services Framework (GoogleServicesFramework) -->
+    <install-in-user-type package="com.google.android.gsf">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+    </install-in-user-type>
+
+    <!--  OobConfig (OTAConfigNoZeroTouchPrebuilt) -->
+    <install-in-user-type package="com.google.android.apps.work.oobconfig">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+
+    <!--  TalkBack Accessibility Service (TalkBack) -->
+    <install-in-user-type package="com.google.android.marvin.talkback">
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+
+    <!--  GMS Core Kids Prebuilt (KidsSupervisionStub) -->
+    <install-in-user-type package="com.google.android.gms.supervision">
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+
+    <!-- Carrier Settings Updater (CarrierSettingsUpdater) -->
+    <install-in-user-type package="com.google.android.carrier">
+        <install-in user-type="SYSTEM" />
+    </install-in-user-type>
+
+    <!-- Config Updater (ConfigUpdater) -->
+    <install-in-user-type package="com.google.android.configupdater">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+
+    <!--  GooglePackageInstaller default package installer that allows users to
+      install and uninstall apps -->
+    <install-in-user-type package="com.google.android.packageinstaller">
+        <!-- Needed for desktop mode -->
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+        <!-- Need to install for all profiles so users can install/uninstall apps there -->
+        <install-in user-type="android.os.usertype.profile.MANAGED" />
+        <install-in user-type="android.os.usertype.profile.PRIVATE" />
+        <install-in user-type="android.os.usertype.profile.CLONE" />
+    </install-in-user-type>
+    <!--  Google Print Recommendation Service (GooglePrintRecommendationService) -->
+    <install-in-user-type package="com.google.android.printservice.recommendation">
+        <install-in user-type="FULL" />
+        <install-in user-type="android.os.usertype.profile.CLONE" />
+        <install-in user-type="android.os.usertype.profile.MANAGED" />
+        <install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!-- Telemetry TVP (PrebuiltGoogleTelemetryTvp)-->
+    <install-in-user-type package="com.google.mainline.telemetry">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+        <install-in user-type="android.os.usertype.profile.MANAGED" />
+    </install-in-user-type>
+
+    <!-- AdServices TVP (PrebuiltGoogleAdservicesTvp) -->
+    <install-in-user-type package="com.google.mainline.adservices">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+        <install-in user-type="android.os.usertype.profile.MANAGED" />
+    </install-in-user-type>
+
+    <!-- Screenshot Editor (RELEASE_PACKAGE_MARKUP) -->
+    <install-in-user-type package="com.google.android.markup">
+        <install-in user-type="FULL" />
+        <install-in user-type="android.os.usertype.profile.MANAGED" />
+    </install-in-user-type>
+
+    <!-- Module Metadata Google (ModuleMetadataGoogle) -->
+    <install-in-user-type package="com.google.android.modulemetadata">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+        <install-in user-type="android.os.usertype.profile.MANAGED" />
+    </install-in-user-type>
+
+    <!-- SystemUI GX Overlay (SystemUIGXOverlay) -->
+    <install-in-user-type package="com.google.android.systemui.gxoverlay">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+    </install-in-user-type>
+</config>

product/blobs/etc/sysconfig/preinstalled-packages-product-pixel-2018-and-newer.xml

@@ -0,0 +1,47 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- System packages to preinstall on Pixel 2018-and-newer devices, per user type.
+     Documentation at frameworks/base/data/etc/preinstalled-packages-platform.xml
+-->
+<config>
+    <!--  Pixel Tips  -->
+    <install-in-user-type package="com.google.android.apps.tips">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!-- Preinstallation config corresponding to the Pixel buds app-->
+    <install-in-user-type package="com.google.android.apps.wearables.maestro.companion">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!-- TurboAdapter -->
+    <install-in-user-type package="com.google.android.turboadapter">
+        <install-in user-type="SYSTEM" />
+    </install-in-user-type>
+
+    <!-- Live Transcribe & Sound Notifications (RELEASE_PACKAGE_LIVE_TRANSCRIBE) -->
+    <install-in-user-type package="com.google.audio.hearing.visualization.accessibility.scribe">
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+
+    <!-- Pixel diagnosticstool app (DiagnosticsToolPrebuilt) -->
+    <install-in-user-type package="com.google.android.apps.diagnosticstool">
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+
+    <!-- Sound Amplifier (SoundAmplifierPrebuilt) -->
+    <install-in-user-type package="com.google.android.accessibility.soundamplifier">
+        <install-in user-type="FULL" />
+    </install-in-user-type>
+
+    <!-- OdadPrebuilt -->
+    <install-in-user-type package="com.google.android.odad">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+    </install-in-user-type>
+</config>

product/blobs/etc/sysconfig/preinstalled-packages-product-pixel-2019-and-newer.xml

@@ -0,0 +1,34 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- System packages to preinstall on Pixel 2019-and-newer devices, per user type.
+     Documentation at frameworks/base/data/etc/preinstalled-packages-platform.xml
+-->
+<config>
+    <!--  Recorder  -->
+    <install-in-user-type package="com.google.android.apps.recorder">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!--  YouTube Music  -->
+    <install-in-user-type package="com.google.android.apps.youtube.music">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+        <do-not-install-in user-type="android.os.usertype.profile.CLONE" />
+        <do-not-install-in user-type="android.os.usertype.profile.PRIVATE" />
+    </install-in-user-type>
+
+    <!--  Android Device Policy (RELEASE_PACKAGE_ANDROID_DEVICE_POLICY) -->
+    <install-in-user-type package="com.google.android.apps.work.clouddpc">
+        <install-in user-type="SYSTEM" />
+        <install-in user-type="FULL" />
+        <install-in user-type="android.os.usertype.profile.MANAGED" />
+    </install-in-user-type>
+
+    <!-- NFC (PixelNfc) -->
+    <install-in-user-type package="com.google.android.pixelnfc">
+        <install-in user-type="FULL" />
+        <install-in user-type="PROFILE" />
+    </install-in-user-type>
+</config>