fix(install): check the prompt can post before committing to it

Once the headless path finishes the activity there is no window left, so a
prompt that fails to post would leave the install with nothing on screen.
The check now happens before the parse is stashed, and a failure falls back
to the dialog with the parse restored intact.

No change to how the prompt is posted. An earlier attempt deferred the post
until after the activity finished, on the theory that a heads-up is
suppressed for the app currently in front. That theory was wrong — see the
commit message below for what it actually is — and the delay only added a
window in which the process could die with the prompt never posted.

The reason the prompt does not pop up like a message on this device is not
in this code at all: Samsung replaces heads-up cards with the edge glow
whenever Edge lighting is on. A notification posted by the shell itself gets
the same treatment, logged as "no Heads up : edgelighting enabled app", and
turning edge_lighting off makes the refusal disappear. InstallerX Revived
uses the same IMPORTANCE_HIGH channel with no extra API, so it behaves
identically here.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: nqmgaming

app/src/main/java/app/pwhs/universalinstaller/presentation/install/DialogInstallActivity.kt

@@ -291,12 +291,14 @@ class DialogInstallActivity : ComponentActivity() {
                 return@LaunchedEffect
             }
 
-            val entry = viewModel.stashPendingInstall()
+            // Checked before stashing: a prompt that cannot be posted would strand the install
+            // with nothing on screen, and the dialog is the only fallback left.
+            val entry = if (promptNotifier.canPost()) viewModel.stashPendingInstall() else null
             if (entry == null || !promptNotifier.prompt(entry)) {
-                // Notifications are off, or there was nothing to stash. Either way the user must
-                // still be able to answer, so show the dialog rather than dropping the install.
-                entry?.let { viewModel.restorePendingInstall(it) }
-                entry?.let { PendingInstallStore.consume(it.id) }
+                entry?.let {
+                    viewModel.restorePendingInstall(it)
+                    PendingInstallStore.consume(it.id)
+                }
                 skipInitialParse = entry != null
                 fallbackToDialog()
                 return@LaunchedEffect

app/src/main/java/app/pwhs/universalinstaller/presentation/install/InstallPromptNotifier.kt

@@ -94,6 +94,18 @@ class InstallPromptNotifier(
         }
     }
 
+    /**
+     * Whether a prompt can be posted at all. Checked before the caller commits to the headless
+     * path, since after that there is no window left to fall back to.
+     */
+    fun canPost(): Boolean {
+        if (!nm.areNotificationsEnabled()) return false
+        if (Build.VERSION.SDK_INT < Build.VERSION_CODES.TIRAMISU) return true
+        return ContextCompat.checkSelfPermission(
+            context, Manifest.permission.POST_NOTIFICATIONS,
+        ) == PackageManager.PERMISSION_GRANTED
+    }
+
     fun cancel(pendingId: String) = nm.cancel(notificationId(pendingId))
 
     /** Stable id per pending install so two queued prompts don't collapse into one. */
@@ -138,14 +150,6 @@ class InstallPromptNotifier(
         )
     }
 
-    private fun canPost(): Boolean {
-        if (!nm.areNotificationsEnabled()) return false
-        if (Build.VERSION.SDK_INT < Build.VERSION_CODES.TIRAMISU) return true
-        return ContextCompat.checkSelfPermission(
-            context, Manifest.permission.POST_NOTIFICATIONS,
-        ) == PackageManager.PERMISSION_GRANTED
-    }
-
     private fun ensureChannel() {
         if (Build.VERSION.SDK_INT < Build.VERSION_CODES.O) return
         val channel = NotificationChannel(
@@ -167,5 +171,6 @@ class InstallPromptNotifier(
          */
         const val CHANNEL_ID = "install_prompt_v2"
         const val NOTIF_ID_BASE = 43000
+
     }
 }