Deploy source code to Hugging Face without binaries

.gitignore

@@ -0,0 +1,53 @@
+# Miscellaneous
+*.class
+*.log
+*.pyc
+*.swp
+.DS_Store
+.atom/
+.build/
+.buildlog/
+.history
+.svn/
+.swiftpm/
+migrate_working_dir/
+
+# IntelliJ related
+*.iml
+*.ipr
+*.iws
+.idea/
+
+# The .vscode folder contains launch configuration and tasks you configure in
+# VS Code which you may wish to be included in version control, so this line
+# is commented out by default.
+#.vscode/
+
+# Flutter/Dart/Pub related
+**/doc/api/
+**/ios/Flutter/.last_build_id
+.dart_tool/
+.flutter-plugins-dependencies
+.pub-cache/
+.pub/
+/build/
+/coverage/
+
+# Symbolication related
+app.*.symbols
+
+# Obfuscation related
+app.*.map.json
+
+# Android Studio will place build artifacts here
+/android/app/debug
+/android/app/profile
+/android/app/release
+rf_env/
+releases/
+*.so
+*.png
+*.tflite
+*.a
+*.zip
+*.jar

.metadata

@@ -0,0 +1,45 @@
+# This file tracks properties of this Flutter project.
+# Used by Flutter tool to assess capabilities and perform upgrades etc.
+#
+# This file should be version controlled and should not be manually edited.
+
+version:
+  revision: "ff37bef603469fb030f2b72995ab929ccfc227f0"
+  channel: "stable"
+
+project_type: app
+
+# Tracks metadata for the flutter migrate command
+migration:
+  platforms:
+    - platform: root
+      create_revision: ff37bef603469fb030f2b72995ab929ccfc227f0
+      base_revision: ff37bef603469fb030f2b72995ab929ccfc227f0
+    - platform: android
+      create_revision: ff37bef603469fb030f2b72995ab929ccfc227f0
+      base_revision: ff37bef603469fb030f2b72995ab929ccfc227f0
+    - platform: ios
+      create_revision: ff37bef603469fb030f2b72995ab929ccfc227f0
+      base_revision: ff37bef603469fb030f2b72995ab929ccfc227f0
+    - platform: linux
+      create_revision: ff37bef603469fb030f2b72995ab929ccfc227f0
+      base_revision: ff37bef603469fb030f2b72995ab929ccfc227f0
+    - platform: macos
+      create_revision: ff37bef603469fb030f2b72995ab929ccfc227f0
+      base_revision: ff37bef603469fb030f2b72995ab929ccfc227f0
+    - platform: web
+      create_revision: ff37bef603469fb030f2b72995ab929ccfc227f0
+      base_revision: ff37bef603469fb030f2b72995ab929ccfc227f0
+    - platform: windows
+      create_revision: ff37bef603469fb030f2b72995ab929ccfc227f0
+      base_revision: ff37bef603469fb030f2b72995ab929ccfc227f0
+
+  # User provided section
+
+  # List of Local paths (relative to this file) that should be
+  # ignored by the migrate tool.
+  #
+  # Files that are not part of the templates will be ignored by default.
+  unmanaged_files:
+    - 'lib/main.dart'
+    - 'ios/Runner.xcodeproj/project.pbxproj'

README.md

@@ -0,0 +1,60 @@
+---
+title: Prem
+emoji: 🔥
+colorFrom: red
+colorTo: yellow
+sdk: static
+pinned: false
+short_description: In device co-pilot
+---
+# Premithius V0.0.3
+**India-First On-Device AI Security | Zero LLM Footprint | ARMadillo Architecture**
+
+Premithius is an uncompromising, edge-native security layer for Android devices. Designed specifically for the Indian cybersecurity context, it proactively intercepts sophisticated threats like ₹1 collect requests, Aadhaar/PAN data leaks, and zero-day scams before they ever reach the user's eyes—all without sending a single byte of personal data to the cloud.
+
+---
+
+## 🛡️ Kavacha Engine (5-Layer Defense)
+Inspired by NVIDIA's ARMadillo architecture, Premithius utilizes a DOCA FLOW-style early-exit pipeline. This ensures maximum efficiency, allowing standard traffic to pass cleanly while trapping anomalies with progressive computational weight.
+
+1. **Layer 0 (Whitelist):** Immediate pass for trusted, verified senders.
+2. **Layer 1 (India Threat Pack):** Hardened heuristic rules targeting specific local threat vectors (see below).
+3. **Layer 2 (Vector Similarity):** Sub-millisecond KNN semantic search against offline scam embeddings using `sqlite-vec` (ARM NEON accelerated).
+4. **Layer 3 (Random Forest):** A lightweight trained ensemble classifier exported to pure Dart via `m2cgen`. Trained on the HuggingFace `india-spam-sms` dataset with 13 custom numerical and categorical features. Scales dynamically during high-risk festival periods.
+5. **Layer 4 (MobileBERT):** Our final deep-learning fallback layer. Integrates the `mrm8488/bert-tiny-finetuned-sms-spam-detection` model running locally via `tflite_flutter` and a custom-built native Dart WordPiece tokenizer.
+
+---
+
+## 🇮🇳 India Threat Pack
+Premithius is built for the ground reality of Indian digital fraud:
+
+*   **UPI Firewall:** Natively catches the classic "₹1 collect request" marketplace fraud, scanning for suspicious VPA usage and urgency indicators.
+*   **OTP Context Verifier:** Intercepts incoming OTP messages and cross-references them against the active foreground application to prevent OTP-forwarding phishing.
+*   **Aadhaar/PAN Data Shield:** A final line of defense baked directly into the custom Premithius Keyboard, warning users *before* they inadvertently send sensitive documents to untrusted contacts.
+*   **Festival Calendar:** Scam volume spikes ~340% during major holidays. The pipeline dynamically adjusts its sensitivity multiplier during these critical windows.
+
+---
+
+## 🚀 Edge-Native & Privacy First
+*   **Zero LLM Overhead:** V0.0.3 maintains a tiny footprint by running Random Forest directly in Dart arithmetic and utilizing a highly optimized, quantized BERT module instead of a 900MB Qwen2 model.
+*   **Data Shield Insights**: A custom Android native Kotlin telemetry layer continuously and securely queries `AppOpsManager` and `UsageStatsManager` in the background. It surfaces hardware access events (Mic/Camera) and compiles local privacy stories translating background behavior for users.
+*   **Home Screen Widget**: A completely native Kotlin AppWidget provides users with 4x2 interactive real-time monitoring of their device's security status, avoiding Flutter engine wakelocks entirely.
+
+---
+
+## 🛠️ Build Requirements
+
+*   Flutter SDK (^3.11.1)
+*   Android Studio / Android SDK
+*   *Note:* The final release build requires the `sqlite-vec-android:0.1.7` dependency. Ensure your Android `build.gradle` is configured with the correct Maven artifact repositories if retrieving `io.github.asg017` fails during compilation.
+
+```bash
+# Debug Build
+flutter build apk --debug
+
+# Release Build 
+flutter build apk --release
+```
+
+---
+*Built for the next billion users. Because security shouldn't require surrendering your privacy.*

analysis_options.yaml

@@ -0,0 +1,28 @@
+# This file configures the analyzer, which statically analyzes Dart code to
+# check for errors, warnings, and lints.
+#
+# The issues identified by the analyzer are surfaced in the UI of Dart-enabled
+# IDEs (https://dart.dev/tools#ides-and-editors). The analyzer can also be
+# invoked from the command line by running `flutter analyze`.
+
+# The following line activates a set of recommended lints for Flutter apps,
+# packages, and plugins designed to encourage good coding practices.
+include: package:flutter_lints/flutter.yaml
+
+linter:
+  # The lint rules applied to this project can be customized in the
+  # section below to disable rules from the `package:flutter_lints/flutter.yaml`
+  # included above or to enable additional rules. A list of all available lints
+  # and their documentation is published at https://dart.dev/lints.
+  #
+  # Instead of disabling a lint rule for the entire project in the
+  # section below, it can also be suppressed for a single line of code
+  # or a specific dart file by using the `// ignore: name_of_lint` and
+  # `// ignore_for_file: name_of_lint` syntax on the line or in the file
+  # producing the lint.
+  rules:
+    # avoid_print: false  # Uncomment to disable the `avoid_print` rule
+    # prefer_single_quotes: true  # Uncomment to enable the `prefer_single_quotes` rule
+
+# Additional information about this file can be found at
+# https://dart.dev/guides/language/analysis-options

analyze_current.txt

@@ -0,0 +1,39 @@
+Analyzing premithus...                                          
+
+   info • Don't invoke 'print' in production code • lib/kavacha/kavacha_pipeline.dart:34:5 • avoid_print
+warning • Unused import: 'package:sqflite/sqflite.dart' • lib/kavacha/layers/layer0_whitelist.dart:1:8 • unused_import
+   info • Don't invoke 'print' in production code • lib/kavacha/layers/layer4_mobile_bert.dart:15:7 • avoid_print
+   info • Parameter 'key' could be a super parameter • lib/keyboard/keyboard_layout.dart:12:9 • use_super_parameters
+   info • Invalid use of a private type in a public API • lib/keyboard/keyboard_layout.dart:15:3 • library_private_types_in_public_api
+warning • The value of the field '_hinglish' isn't used • lib/keyboard/keyboard_layout.dart:24:9 • unused_field
+   info • Don't use 'BuildContext's across async gaps • lib/keyboard/keyboard_layout.dart:84:35 • use_build_context_synchronously
+   info • Parameter 'key' could be a super parameter • lib/keyboard/shortcut_bar.dart:7:9 • use_super_parameters
+   info • 'withOpacity' is deprecated and shouldn't be used. Use .withValues() to avoid precision loss • lib/keyboard/shortcut_bar.dart:39:24 • deprecated_member_use
+   info • 'withOpacity' is deprecated and shouldn't be used. Use .withValues() to avoid precision loss • lib/keyboard/shortcut_bar.dart:41:43 • deprecated_member_use
+   info • Parameter 'key' could be a super parameter • lib/main.dart:57:9 • use_super_parameters
+   info • Parameter 'key' could be a super parameter • lib/onboarding/model_download.dart:6:9 • use_super_parameters
+   info • Invalid use of a private type in a public API • lib/onboarding/model_download.dart:9:3 • library_private_types_in_public_api
+   info • Parameter 'key' could be a super parameter • lib/onboarding/permission_flow.dart:6:9 • use_super_parameters
+   info • Invalid use of a private type in a public API • lib/onboarding/permission_flow.dart:9:3 • library_private_types_in_public_api
+   info • Parameter 'key' could be a super parameter • lib/screens/data_shield_screen.dart:4:9 • use_super_parameters
+   info • 'withOpacity' is deprecated and shouldn't be used. Use .withValues() to avoid precision loss • lib/screens/data_shield_screen.dart:73:33 • deprecated_member_use
+   info • 'withOpacity' is deprecated and shouldn't be used. Use .withValues() to avoid precision loss • lib/screens/data_shield_screen.dart:83:36 • deprecated_member_use
+   info • Don't invoke 'print' in production code • lib/services/grammar_service.dart:14:5 • avoid_print
+   info • The private field _isInit could be 'final' • lib/services/llm_service.dart:8:8 • prefer_final_fields
+warning • The value of the field '_isInit' isn't used • lib/services/llm_service.dart:8:8 • unused_field
+warning • Unused import: 'package:flutter/services.dart' • lib/services/scam_service.dart:1:8 • unused_import
+warning • Unused import: 'package:tflite_flutter/tflite_flutter.dart' • lib/services/scam_service.dart:2:8 • unused_import
+   info • Don't invoke 'print' in production code • lib/services/scam_service.dart:38:7 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/scam_service.dart:40:7 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/scam_service.dart:62:9 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/scam_service.dart:86:7 • avoid_print
+   info • The imported package 'path' isn't a dependency of the importing package • lib/services/storage_service.dart:2:8 • depend_on_referenced_packages
+   info • The imported package 'path' isn't a dependency of the importing package • lib/services/vector_service.dart:4:8 • depend_on_referenced_packages
+warning • Unused import: 'package:path/path.dart' • lib/services/vector_service.dart:4:8 • unused_import
+   info • Don't invoke 'print' in production code • lib/services/vector_service.dart:57:7 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/vector_service.dart:59:7 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/vector_service.dart:66:5 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/vector_service.dart:78:5 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/vector_service.dart:113:7 • avoid_print
+
+35 issues found. (ran in 4.7s)

analyze_final.txt

@@ -0,0 +1,29 @@
+Analyzing premithus...                                          
+
+   info • Don't invoke 'print' in production code • lib/kavacha/kavacha_pipeline.dart:34:5 • avoid_print
+warning • Unused import: 'package:sqflite/sqflite.dart' • lib/kavacha/layers/layer0_whitelist.dart:1:8 • unused_import
+   info • Don't invoke 'print' in production code • lib/kavacha/layers/layer4_mobile_bert.dart:15:7 • avoid_print
+   info • Parameter 'key' could be a super parameter • lib/keyboard/keyboard_layout.dart:13:9 • use_super_parameters
+   info • Invalid use of a private type in a public API • lib/keyboard/keyboard_layout.dart:16:3 • library_private_types_in_public_api
+warning • The value of the field '_hinglish' isn't used • lib/keyboard/keyboard_layout.dart:25:9 • unused_field
+   info • Don't use 'BuildContext's across async gaps • lib/keyboard/keyboard_layout.dart:85:35 • use_build_context_synchronously
+   info • Parameter 'key' could be a super parameter • lib/keyboard/shortcut_bar.dart:9:9 • use_super_parameters
+   info • Parameter 'key' could be a super parameter • lib/main.dart:57:9 • use_super_parameters
+   info • Parameter 'key' could be a super parameter • lib/onboarding/model_download.dart:6:9 • use_super_parameters
+   info • Invalid use of a private type in a public API • lib/onboarding/model_download.dart:9:3 • library_private_types_in_public_api
+   info • Invalid use of a private type in a public API • lib/onboarding/permission_flow.dart:11:3 • library_private_types_in_public_api
+   info • Don't invoke 'print' in production code • lib/services/grammar_service.dart:14:5 • avoid_print
+   info • The private field _isInit could be 'final' • lib/services/llm_service.dart:8:8 • prefer_final_fields
+warning • The value of the field '_isInit' isn't used • lib/services/llm_service.dart:8:8 • unused_field
+warning • Duplicate import • lib/services/scam_service.dart:5:8 • duplicate_import
+warning • Duplicate import • lib/services/scam_service.dart:6:8 • duplicate_import
+  error • A try block must be followed by an 'on', 'catch', or 'finally' clause • lib/services/scam_service.dart:35:5 • missing_catch_or_finally
+  error • Expected to find '}' • lib/services/scam_service.dart:38:3 • expected_token
+   info • Don't invoke 'print' in production code • lib/services/scam_service.dart:82:7 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/vector_service.dart:56:7 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/vector_service.dart:58:7 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/vector_service.dart:65:5 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/vector_service.dart:77:5 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/vector_service.dart:112:7 • avoid_print
+
+25 issues found. (ran in 3.5s)

analyze_out.txt

@@ -0,0 +1,63 @@
+Analyzing premithus...                                          
+
+  error • The element type 'Layer3RandomForest' can't be assigned to the list type 'KavachaLayer' • lib/kavacha/kavacha_pipeline.dart:29:7 • list_element_type_not_assignable
+   info • Don't invoke 'print' in production code • lib/kavacha/kavacha_pipeline.dart:34:5 • avoid_print
+warning • Unused import: 'package:sqflite/sqflite.dart' • lib/kavacha/layers/layer0_whitelist.dart:1:8 • unused_import
+  error • Classes and mixins can only implement other classes and mixins • lib/kavacha/layers/layer3_random_forest.dart:5:37 • implements_non_class
+  error • The name 'LayerResult' isn't a type, so it can't be used as a type argument • lib/kavacha/layers/layer3_random_forest.dart:9:10 • non_type_as_type_argument
+warning • The method doesn't override an inherited method • lib/kavacha/layers/layer3_random_forest.dart:9:23 • override_on_non_overriding_member
+  error • Undefined class 'SmsContext' • lib/kavacha/layers/layer3_random_forest.dart:9:31 • undefined_class
+  error • Undefined name 'LayerResult' • lib/kavacha/layers/layer3_random_forest.dart:14:14 • undefined_identifier
+  error • Undefined name 'LayerResult' • lib/kavacha/layers/layer3_random_forest.dart:17:14 • undefined_identifier
+  error • Undefined name 'LayerResult' • lib/kavacha/layers/layer3_random_forest.dart:21:12 • undefined_identifier
+  error • Undefined class 'SmsContext' • lib/kavacha/layers/layer3_random_forest.dart:24:37 • undefined_class
+   info • Don't invoke 'print' in production code • lib/kavacha/layers/layer4_mobile_bert.dart:15:7 • avoid_print
+   info • Parameter 'key' could be a super parameter • lib/keyboard/keyboard_layout.dart:12:9 • use_super_parameters
+   info • Invalid use of a private type in a public API • lib/keyboard/keyboard_layout.dart:15:3 • library_private_types_in_public_api
+warning • The value of the field '_hinglish' isn't used • lib/keyboard/keyboard_layout.dart:23:9 • unused_field
+  error • Undefined name '_grammarService' • lib/keyboard/keyboard_layout.dart:28:5 • undefined_identifier
+  error • Undefined name '_grammarService' • lib/keyboard/keyboard_layout.dart:39:23 • undefined_identifier
+   info • Don't use 'BuildContext's across async gaps • lib/keyboard/keyboard_layout.dart:83:35 • use_build_context_synchronously
+   info • Parameter 'key' could be a super parameter • lib/keyboard/shortcut_bar.dart:7:9 • use_super_parameters
+   info • 'withOpacity' is deprecated and shouldn't be used. Use .withValues() to avoid precision loss • lib/keyboard/shortcut_bar.dart:39:24 • deprecated_member_use
+   info • 'withOpacity' is deprecated and shouldn't be used. Use .withValues() to avoid precision loss • lib/keyboard/shortcut_bar.dart:41:43 • deprecated_member_use
+   info • Parameter 'key' could be a super parameter • lib/main.dart:57:9 • use_super_parameters
+   info • Parameter 'key' could be a super parameter • lib/onboarding/model_download.dart:6:9 • use_super_parameters
+   info • Invalid use of a private type in a public API • lib/onboarding/model_download.dart:9:3 • library_private_types_in_public_api
+   info • Parameter 'key' could be a super parameter • lib/onboarding/permission_flow.dart:6:9 • use_super_parameters
+   info • Invalid use of a private type in a public API • lib/onboarding/permission_flow.dart:9:3 • library_private_types_in_public_api
+   info • Parameter 'key' could be a super parameter • lib/screens/data_shield_screen.dart:4:9 • use_super_parameters
+   info • 'withOpacity' is deprecated and shouldn't be used. Use .withValues() to avoid precision loss • lib/screens/data_shield_screen.dart:73:33 • deprecated_member_use
+   info • 'withOpacity' is deprecated and shouldn't be used. Use .withValues() to avoid precision loss • lib/screens/data_shield_screen.dart:83:36 • deprecated_member_use
+   info • Don't invoke 'print' in production code • lib/services/grammar_service.dart:14:5 • avoid_print
+   info • The imported package 'llama_sdk' isn't a dependency of the importing package • lib/services/llm_service.dart:2:8 • depend_on_referenced_packages
+  error • Target of URI doesn't exist: 'package:llama_sdk/llama_sdk.dart' • lib/services/llm_service.dart:2:8 • uri_does_not_exist
+   info • The private field _isDownloading could be 'final' • lib/services/llm_service.dart:12:8 • prefer_final_fields
+warning • The value of the field '_isDownloading' isn't used • lib/services/llm_service.dart:12:8 • unused_field
+  error • Undefined class 'Llama' • lib/services/llm_service.dart:14:3 • undefined_class
+  error • The method 'Llama' isn't defined for the type 'LlmService' • lib/services/llm_service.dart:26:16 • undefined_method
+  error • The method 'LlamaController' isn't defined for the type 'LlmService' • lib/services/llm_service.dart:26:22 • undefined_method
+   info • Don't invoke 'print' in production code • lib/services/llm_service.dart:29:7 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/llm_service.dart:31:7 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/llm_service.dart:45:5 • avoid_print
+  error • The method 'UserLlamaMessage' isn't defined for the type 'LlmService' • lib/services/llm_service.dart:67:25 • undefined_method
+   info • Don't invoke 'print' in production code • lib/services/llm_service.dart:75:7 • avoid_print
+warning • Unused import: 'package:flutter/services.dart' • lib/services/scam_service.dart:1:8 • unused_import
+warning • Unused import: 'package:tflite_flutter/tflite_flutter.dart' • lib/services/scam_service.dart:2:8 • unused_import
+  error • Directives must appear before any declarations • lib/services/scam_service.dart:21:3 • directive_after_declaration
+  error • Directives must appear before any declarations • lib/services/scam_service.dart:22:1 • directive_after_declaration
+   info • Don't invoke 'print' in production code • lib/services/scam_service.dart:39:7 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/scam_service.dart:41:7 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/scam_service.dart:63:9 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/scam_service.dart:87:7 • avoid_print
+   info • The imported package 'path' isn't a dependency of the importing package • lib/services/storage_service.dart:2:8 • depend_on_referenced_packages
+   info • The imported package 'path' isn't a dependency of the importing package • lib/services/vector_service.dart:4:8 • depend_on_referenced_packages
+warning • Unused import: 'package:path/path.dart' • lib/services/vector_service.dart:4:8 • unused_import
+   info • Don't invoke 'print' in production code • lib/services/vector_service.dart:57:7 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/vector_service.dart:59:7 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/vector_service.dart:66:5 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/vector_service.dart:78:5 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/vector_service.dart:113:7 • avoid_print
+warning • The asset directory 'models/' doesn't exist • pubspec.yaml:74:7 • asset_directory_does_not_exist
+  error • The name 'MyApp' isn't a class • test/widget_test.dart:16:35 • creation_with_non_type
+

analyze_verify.txt

@@ -0,0 +1,25 @@
+Analyzing premithus...                                          
+
+   info • Don't invoke 'print' in production code • lib/kavacha/kavacha_pipeline.dart:34:5 • avoid_print
+warning • Unused import: 'package:sqflite/sqflite.dart' • lib/kavacha/layers/layer0_whitelist.dart:1:8 • unused_import
+   info • Don't invoke 'print' in production code • lib/kavacha/layers/layer4_mobile_bert.dart:15:7 • avoid_print
+   info • Parameter 'key' could be a super parameter • lib/keyboard/keyboard_layout.dart:13:9 • use_super_parameters
+   info • Invalid use of a private type in a public API • lib/keyboard/keyboard_layout.dart:16:3 • library_private_types_in_public_api
+warning • The value of the field '_hinglish' isn't used • lib/keyboard/keyboard_layout.dart:25:9 • unused_field
+   info • Don't use 'BuildContext's across async gaps • lib/keyboard/keyboard_layout.dart:85:35 • use_build_context_synchronously
+   info • Parameter 'key' could be a super parameter • lib/keyboard/shortcut_bar.dart:9:9 • use_super_parameters
+   info • Parameter 'key' could be a super parameter • lib/main.dart:57:9 • use_super_parameters
+   info • Parameter 'key' could be a super parameter • lib/onboarding/model_download.dart:6:9 • use_super_parameters
+   info • Invalid use of a private type in a public API • lib/onboarding/model_download.dart:9:3 • library_private_types_in_public_api
+   info • Invalid use of a private type in a public API • lib/onboarding/permission_flow.dart:11:3 • library_private_types_in_public_api
+   info • Don't invoke 'print' in production code • lib/services/grammar_service.dart:14:5 • avoid_print
+   info • The private field _isInit could be 'final' • lib/services/llm_service.dart:8:8 • prefer_final_fields
+warning • The value of the field '_isInit' isn't used • lib/services/llm_service.dart:8:8 • unused_field
+   info • Don't invoke 'print' in production code • lib/services/scam_service.dart:83:7 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/vector_service.dart:56:7 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/vector_service.dart:58:7 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/vector_service.dart:65:5 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/vector_service.dart:77:5 • avoid_print
+   info • Don't invoke 'print' in production code • lib/services/vector_service.dart:112:7 • avoid_print
+
+21 issues found. (ran in 3.3s)

android/.gitignore

@@ -0,0 +1,14 @@
+gradle-wrapper.jar
+/.gradle
+/captures/
+/gradlew
+/gradlew.bat
+/local.properties
+GeneratedPluginRegistrant.java
+.cxx/
+
+# Remember to never publicly share your keystore.
+# See https://flutter.dev/to/reference-keystore
+key.properties
+**/*.keystore
+**/*.jks

android/app/build.gradle.kts

@@ -0,0 +1,53 @@
+plugins {
+    id("com.android.application")
+    id("kotlin-android")
+    // The Flutter Gradle Plugin must be applied after the Android and Kotlin Gradle plugins.
+    id("dev.flutter.flutter-gradle-plugin")
+}
+
+android {
+    namespace = "in.inmodel.premithus"
+    compileSdk = flutter.compileSdkVersion
+    ndkVersion = flutter.ndkVersion
+
+    compileOptions {
+        sourceCompatibility = JavaVersion.VERSION_17
+        targetCompatibility = JavaVersion.VERSION_17
+    }
+
+    kotlinOptions {
+        jvmTarget = JavaVersion.VERSION_17.toString()
+    }
+
+    defaultConfig {
+        // TODO: Specify your own unique Application ID (https://developer.android.com/studio/build/application-id.html).
+        applicationId = "in.inmodel.premithus"
+        // You can update the following values to match your application needs.
+        // For more information, see: https://flutter.dev/to/review-gradle-config.
+        minSdk = flutter.minSdkVersion
+        targetSdk = flutter.targetSdkVersion
+        versionCode = flutter.versionCode
+        versionName = flutter.versionName
+
+        ndk {
+            abiFilters += listOf("arm64-v8a")
+        }
+    }
+
+    buildTypes {
+        release {
+            // TODO: Add your own signing config for the release build.
+            // Signing with the debug keys for now, so `flutter run --release` works.
+            signingConfig = signingConfigs.getByName("debug")
+        }
+    }
+}
+
+flutter {
+    source = "../.."
+}
+
+dependencies {
+    // sqlite-vec bundled directly in jniLibs/arm64-v8a/libsqlitevec.so
+    // No Gradle dependency needed
+}

android/app/src/debug/AndroidManifest.xml

@@ -0,0 +1,7 @@
+<manifest xmlns:android="http://schemas.android.com/apk/res/android">
+    <!-- The INTERNET permission is required for development. Specifically,
+         the Flutter tool needs it to communicate with the running application
+         to allow setting breakpoints, to provide hot reload, etc.
+    -->
+    <uses-permission android:name="android.permission.INTERNET"/>
+</manifest>

android/app/src/main/AndroidManifest.xml

@@ -0,0 +1,108 @@
+<manifest xmlns:android="http://schemas.android.com/apk/res/android"
+    xmlns:tools="http://schemas.android.com/tools">
+    <uses-permission android:name="android.permission.RECEIVE_SMS"/>
+    <uses-permission android:name="android.permission.READ_SMS"/>
+    <uses-permission android:name="android.permission.SYSTEM_ALERT_WINDOW"/>
+    <uses-permission android:name="android.permission.FOREGROUND_SERVICE"/>
+    <uses-permission android:name="android.permission.POST_NOTIFICATIONS"/>
+    <uses-permission android:name="android.permission.INTERNET"/>
+
+    <application
+        android:label="premithus"
+        android:name="${applicationName}"
+        android:icon="@mipmap/ic_launcher">
+        <activity
+            android:name=".MainActivity"
+            android:exported="true"
+            android:launchMode="singleTop"
+            android:taskAffinity=""
+            android:theme="@style/LaunchTheme"
+            android:configChanges="orientation|keyboardHidden|keyboard|screenSize|smallestScreenSize|locale|layoutDirection|fontScale|screenLayout|density|uiMode"
+            android:hardwareAccelerated="true"
+            android:windowSoftInputMode="adjustResize">
+            <!-- Specifies an Android theme to apply to this Activity as soon as
+                 the Android process has started. This theme is visible to the user
+                 while the Flutter UI initializes. After that, this theme continues
+                 to determine the Window background behind the Flutter UI. -->
+            <meta-data
+              android:name="io.flutter.embedding.android.NormalTheme"
+              android:resource="@style/NormalTheme"
+              />
+            <intent-filter>
+                <action android:name="android.intent.action.MAIN"/>
+                <category android:name="android.intent.category.LAUNCHER"/>
+            </intent-filter>
+        </activity>
+
+        <service android:name=".KeyboardIMEService"
+            android:permission="android.permission.BIND_INPUT_METHOD"
+            android:exported="true">
+            <intent-filter>
+                <action android:name="android.view.InputMethod"/>
+            </intent-filter>
+            <meta-data android:name="android.view.im" android:resource="@xml/method"/>
+        </service>
+
+        <receiver
+            android:name=".SmsReceiver"
+            android:exported="true"
+            android:permission="android.permission.BROADCAST_SMS">
+            <intent-filter android:priority="999">
+                <action android:name="android.provider.Telephony.SMS_RECEIVED" />
+            </intent-filter>
+        </receiver>
+
+        <service
+            android:name=".OverlayService"
+            android:exported="false"
+            android:foregroundServiceType="specialUse" />
+
+        <receiver android:name=".PremithiusWidget" android:exported="true">
+            <intent-filter>
+                <action android:name="android.appwidget.action.APPWIDGET_UPDATE" />
+            </intent-filter>
+            <meta-data
+                android:name="android.appwidget.provider"
+                android:resource="@xml/premithius_widget_info" />
+        </receiver>
+
+        <service
+            android:name=".PremithiusAccessibilityService"
+            android:exported="true"
+            android:label="@string/accessibility_label"
+            android:permission="android.permission.BIND_ACCESSIBILITY_SERVICE">
+            <intent-filter>
+                <action android:name="android.accessibilityservice.AccessibilityService"/>
+            </intent-filter>
+            <meta-data
+                android:name="android.accessibilityservice"
+                android:resource="@xml/accessibility_service_config"/>
+        </service>
+
+        <service
+            android:name=".KavachaVpnService"
+            android:exported="false"
+            android:permission="android.permission.BIND_VPN_SERVICE">
+            <intent-filter>
+                <action android:name="android.net.VpnService"/>
+            </intent-filter>
+        </service>
+
+        <!-- Don't delete the meta-data below.
+             This is used by the Flutter tool to generate GeneratedPluginRegistrant.java -->
+        <meta-data
+            android:name="flutterEmbedding"
+            android:value="2" />
+    </application>
+    <!-- Required to query activities that can process text, see:
+         https://developer.android.com/training/package-visibility and
+         https://developer.android.com/reference/android/content/Intent#ACTION_PROCESS_TEXT.
+
+         In particular, this is used by the Flutter engine in io.flutter.plugin.text.ProcessTextPlugin. -->
+    <queries>
+        <intent>
+            <action android:name="android.intent.action.PROCESS_TEXT"/>
+            <data android:mimeType="text/plain"/>
+        </intent>
+    </queries>
+</manifest>

android/app/src/main/kotlin/in/inmodel/premithus/DomainBlocker.kt

@@ -0,0 +1,159 @@
+package `in`.inmodel.premithus
+
+import android.content.Context
+import android.util.Log
+
+class DomainBlocker(private val context: Context) {
+
+    private val exactBlocklist = HashSet<String>()
+    private val regexPatterns  = mutableListOf<Pair<Regex, String>>()
+    private val trustedDomains = HashSet<String>()
+
+    // Known legitimate Indian bank and payment domains
+    private val trustedBankDomains = setOf(
+        "hdfcbank.com", "netbanking.hdfcbank.com",
+        "sbi.co.in", "onlinesbi.sbi.co.in",
+        "icicibank.com", "imobileapp.icicibank.com",
+        "axisbank.com", "axisnet.axisbank.com",
+        "paytm.com", "secure.paytm.com",
+        "phonepe.com", "api.phonepe.com",
+        "npci.org.in", "upi.npci.org.in",
+        "bhimupi.org.in",
+        "gpay.app", "pay.google.com",
+        "amazon.in", "pay.amazon.in",
+        "flipkart.com",
+        "swiggy.com", "zomato.com",
+        "irctc.co.in", "indianrail.gov.in",
+        "incometax.gov.in", "tin.tin.nsdl.com",
+        "uidai.gov.in",
+    )
+
+    init {
+        loadBlocklists()
+        trustedDomains.addAll(trustedBankDomains)
+    }
+
+    private fun loadBlocklists() {
+        // Load seed blocklist from assets
+        try {
+            context.assets.open("blocklist/india_scam_domains.txt")
+                .bufferedReader()
+                .forEachLine { line ->
+                    val clean = line.trim().lowercase()
+                    if (clean.isNotEmpty() && !clean.startsWith("#")) {
+                        exactBlocklist.add(clean)
+                    }
+                }
+            Log.d("DomainBlocker", "Loaded ${exactBlocklist.size} blocked domains")
+        } catch (e: Exception) {
+            Log.e("DomainBlocker", "Failed to load blocklist: \${e.message}")
+        }
+
+        // Load user-confirmed blocked domains from SQLite via direct path since Flutter owns DB
+        try {
+            val dbPath = context.getDatabasePath("premithius.db").absolutePath
+            val dbFile = java.io.File(dbPath)
+            if (dbFile.exists()) {
+                val db = android.database.sqlite.SQLiteDatabase.openDatabase(dbPath, null, android.database.sqlite.SQLiteDatabase.OPEN_READONLY)
+                val cursor = db.rawQuery("SELECT domain FROM scam_domains", null)
+                while (cursor.moveToNext()) {
+                    exactBlocklist.add(cursor.getString(0).lowercase())
+                }
+                cursor.close()
+                db.close()
+            }
+        } catch (e: Exception) {
+            Log.e("DomainBlocker", "Failed to load user domains: \${e.message}")
+        }
+
+        // Regex patterns for structural scam detection
+        regexPatterns.addAll(listOf(
+            // Suspicious TLDs
+            Regex(""".*\.(xyz|top|click|tk|ml|ga|cf|gq|pw|cc|su)$""") to "Suspicious TLD",
+
+            // Typosquat: known bank name + extra chars
+            Regex(""".*hdfc.*bank.*(?!hdfcbank\.com)""") to "HDFC Typosquat",
+            Regex(""".*sbi.*(?!sbi\.co\.in|onlinesbi)""") to "SBI Typosquat",
+            Regex(""".*icici.*(?!icicibank\.com)""") to "ICICI Typosquat",
+            Regex(""".*paytm.*(?!paytm\.com)""") to "Paytm Typosquat",
+            Regex(""".*phonepe.*(?!phonepe\.com)""") to "PhonePe Typosquat",
+
+            // KYC fraud patterns
+            Regex(""".*kyc.*(update|verify|expire|block).*""") to "KYC Fraud",
+            Regex(""".*verify.*(kyc|account|aadhar|aadhaar).*""") to "KYC Fraud",
+
+            // UPI fraud patterns
+            Regex(""".*upi.*(reward|prize|cashback|bonus).*""") to "UPI Fraud",
+            Regex(""".*collect.*(rs|rupee|inr|money).*""") to "UPI Collect Fraud",
+
+            // Generic phishing patterns
+            Regex(""".*secure.*login.*\.(xyz|net|org|in|co)$""") to "Phishing",
+            Regex(""".*account.*(blocked|suspended|expired).*""") to "Account Fraud",
+        ))
+    }
+
+    fun check(domain: String): BlockResult {
+        val d = domain.lowercase().trimEnd('.')
+
+        // Step 1: Trusted domain — always allow instantly
+        if (trustedDomains.any { d == it || d.endsWith(".$it") }) {
+            return BlockResult(isBlocked = false, domain = d, category = "")
+        }
+
+        // Step 2: Exact match in blocklist
+        if (exactBlocklist.contains(d)) {
+            return BlockResult(isBlocked = true, domain = d, category = "Known Scam Domain")
+        }
+
+        // Step 3: Levenshtein distance check against trusted bank domains
+        // Catches: hdfcbannk.com (typo), hdfcbank-kyc.net (subdomain fraud)
+        for (trusted in trustedBankDomains) {
+            val baseTrusted = trusted.substringBefore(".")
+            val baseQuery   = d.substringBefore(".")
+            if (levenshtein(baseQuery, baseTrusted) in 1..2) {
+                return BlockResult(isBlocked = true, domain = d,
+                    category = "Typosquat — similar to $trusted")
+            }
+        }
+
+        // Step 4: Regex pattern matching
+        for ((pattern, category) in regexPatterns) {
+            // Note: need to handle regex exclusion properly. Since patterns above use negative lookahead incorrectly for exact strings, we might want to ensure we don't block valid domains.
+            // Actually the negative lookahead matches at current position. Because Android Kotlin PCRE works.
+            if (pattern.containsMatchIn(d)) {
+                return BlockResult(isBlocked = true, domain = d, category = category)
+            }
+        }
+
+        // Step 5: Allow — not in any blocklist
+        return BlockResult(isBlocked = false, domain = d, category = "")
+    }
+
+    // Levenshtein distance — pure Kotlin, no library needed
+    private fun levenshtein(a: String, b: String): Int {
+        val dp = Array(a.length + 1) { IntArray(b.length + 1) }
+        for (i in 0..a.length) dp[i][0] = i
+        for (j in 0..b.length) dp[0][j] = j
+        for (i in 1..a.length) {
+            for (j in 1..b.length) {
+                dp[i][j] = if (a[i-1] == b[j-1]) dp[i-1][j-1]
+                else 1 + minOf(dp[i-1][j], dp[i][j-1], dp[i-1][j-1])
+            }
+        }
+        return dp[a.length][b.length]
+    }
+
+    // Reload user-confirmed domains from SQLite
+    // Call after user confirms a scam domain
+    fun reload() {
+        exactBlocklist.clear()
+        regexPatterns.clear()
+        loadBlocklists()
+    }
+}
+
+data class BlockResult(
+    val isBlocked: Boolean,
+    val domain: String,
+    val category: String
+)

android/app/src/main/kotlin/in/inmodel/premithus/KavachaVpnService.kt

@@ -0,0 +1,335 @@
+package `in`.inmodel.premithus
+
+import android.content.Intent
+import android.net.VpnService
+import android.os.ParcelFileDescriptor
+import android.util.Log
+import java.io.FileInputStream
+import java.io.FileOutputStream
+import java.net.DatagramPacket
+import java.net.DatagramSocket
+import java.net.InetAddress
+
+class KavachaVpnService : VpnService() {
+
+    companion object {
+        const val ACTION_START = "ACTION_VPN_START"
+        const val ACTION_STOP  = "ACTION_VPN_STOP"
+        const val CHANNEL = "in.inmodel.premithius/vpn"
+        var isRunning = false
+    }
+
+    private var vpnInterface: ParcelFileDescriptor? = null
+    private var tunnelThread: Thread? = null
+    private lateinit var domainBlocker: DomainBlocker
+
+    override fun onStartCommand(intent: Intent?, flags: Int, startId: Int): Int {
+        if (intent?.action == ACTION_STOP) {
+            stopVpn()
+            return START_NOT_STICKY
+        }
+        if (intent?.action == "ACTION_RELOAD_BLOCKLIST") {
+            if (::domainBlocker.isInitialized) {
+                domainBlocker.reload()
+            }
+            return START_STICKY
+        }
+        if (!isRunning) startVpn()
+        return START_STICKY
+    }
+
+    private fun startVpn() {
+        // Build the TUN interface
+        val builder = Builder()
+            .setSession("Premithius Kavacha")
+            .addAddress("10.0.0.2", 24)
+            .addDnsServer("10.0.0.1")      // our local DNS resolver
+            .addRoute("0.0.0.0", 0)        // route all traffic
+            .setMtu(1500)
+            .setBlocking(true)
+
+        // Exclude Premithius itself from VPN
+        // so our DNS forwarding to 1.1.1.1 is not intercepted
+        try {
+            builder.addDisallowedApplication(packageName)
+        } catch (e: Exception) {
+            Log.e("KavachaVPN", "Failed to exclude app from VPN: \${e.message}")
+        }
+
+        vpnInterface = builder.establish()
+        isRunning = true
+
+        domainBlocker = DomainBlocker(this)
+
+        // Start tunnel on background thread
+        tunnelThread = Thread {
+            runTunnel()
+        }.also { it.start() }
+
+        Log.d("KavachaVPN", "VPN tunnel started")
+        notifyFlutter("started")
+    }
+
+    private fun stopVpn() {
+        isRunning = false
+        tunnelThread?.interrupt()
+        try { vpnInterface?.close() } catch (e: Exception) {}
+        vpnInterface = null
+        Log.d("KavachaVPN", "VPN tunnel stopped")
+        notifyFlutter("stopped")
+        stopSelf()
+    }
+
+    private fun runTunnel() {
+        val vpnFd = vpnInterface?.fileDescriptor ?: return
+        val inputStream  = FileInputStream(vpnFd)
+        val outputStream = FileOutputStream(vpnFd)
+
+        val packet = ByteArray(32767)
+
+        while (isRunning && !Thread.interrupted()) {
+            try {
+                // Read incoming IP packet
+                val length = inputStream.read(packet)
+                if (length <= 0) continue
+
+                // Parse and handle — focus on DNS (UDP port 53)
+                val handled = handlePacket(packet, length, outputStream)
+
+                // If not DNS — pass through unchanged
+                if (!handled) outputStream.write(packet, 0, length)
+
+            } catch (e: InterruptedException) {
+                break
+            } catch (e: Exception) {
+                Log.e("KavachaVPN", "Tunnel error: \${e.message}")
+            }
+        }
+    }
+
+    private fun handlePacket(
+        packet: ByteArray,
+        length: Int,
+        output: FileOutputStream
+    ): Boolean {
+        // Check if this is an IP packet (version 4)
+        if (length < 20) return false
+        val ipVersion = (packet[0].toInt() shr 4) and 0xF
+        if (ipVersion != 4) return false
+
+        // Check protocol — 17 = UDP
+        val protocol = packet[9].toInt() and 0xFF
+        if (protocol != 17) return false
+
+        // Check destination port — 53 = DNS
+        val ipHeaderLen = (packet[0].toInt() and 0xF) * 4
+        if (length < ipHeaderLen + 8) return false
+        val destPort = ((packet[ipHeaderLen + 2].toInt() and 0xFF) shl 8) or
+                        (packet[ipHeaderLen + 3].toInt() and 0xFF)
+        if (destPort != 53) return false
+
+        // Extract DNS query payload
+        val dnsStart = ipHeaderLen + 8
+        val dnsLength = length - dnsStart
+        if (dnsLength < 12) return false
+        val dnsPayload = packet.copyOfRange(dnsStart, dnsStart + dnsLength)
+
+        // Parse domain name from DNS query
+        val domain = parseDnsQuery(dnsPayload) ?: return false
+
+        Log.d("KavachaVPN", "DNS query: \$domain")
+
+        // Check domain against blocklist
+        val blockResult = domainBlocker.check(domain)
+
+        if (blockResult.isBlocked) {
+            Log.d("KavachaVPN", "BLOCKED: \$domain — \${blockResult.category}")
+
+            // Return NXDOMAIN response — domain does not exist
+            val nxDomainResponse = buildNxDomainResponse(packet, length, dnsPayload)
+            output.write(nxDomainResponse)
+
+            // Log and alert
+            logBlockedDomain(domain, blockResult)
+            return true
+        }
+
+        // Safe domain — forward to 1.1.1.1 and return real answer
+        val realResponse = forwardDns(dnsPayload, "1.1.1.1")
+        if (realResponse != null) {
+            val responsePacket = buildResponsePacket(packet, realResponse)
+            output.write(responsePacket)
+            return true
+        }
+
+        return false
+    }
+
+    private fun logBlockedDomain(domain: String, result: BlockResult) {
+        // Log to SQLite (directly into scam_domains + vpn_events)
+        Thread {
+            try {
+                // Assuming path provider defaults for database path
+                val dbPath = applicationContext.getDatabasePath("premithius.db").absolutePath
+                val db = android.database.sqlite.SQLiteDatabase.openDatabase(dbPath, null, android.database.sqlite.SQLiteDatabase.OPEN_READWRITE)
+                
+                db.execSQL("UPDATE scam_domains SET hit_count = hit_count + 1 WHERE domain = ?", arrayOf(domain))
+                
+                val insertEvent = "INSERT INTO vpn_events (event_type, domain, category, created_at) VALUES (?, ?, ?, ?)"
+                db.execSQL(insertEvent, arrayOf("blocked", domain, result.category, System.currentTimeMillis()))
+                
+                db.close()
+            } catch (e: Exception) {
+                Log.e("KavachaVPN", "Failed to log blocked domain to SQLite: \${e.message}")
+            }
+        }.start()
+
+        // Fire overlay alert via OverlayService
+        val intent = Intent(this, OverlayService::class.java)
+        intent.action = OverlayService.ACTION_SHOW_DOMAIN_BLOCK
+        intent.putExtra("domain", domain)
+        intent.putExtra("category", result.category)
+        startService(intent)
+
+        // Notify Flutter for VPN stats screen
+        notifyFlutter("blocked:\$domain:\${result.category}")
+    }
+
+    private fun notifyFlutter(event: String) {
+        // Store in shared prefs — Flutter polls on resume
+        // Direct MethodChannel not reliable from background service
+        getSharedPreferences("vpn_events", MODE_PRIVATE)
+            .edit()
+            .putString("last_event", event)
+            .putLong("last_event_time", System.currentTimeMillis())
+            .apply()
+    }
+
+    override fun onDestroy() {
+        stopVpn()
+        super.onDestroy()
+    }
+
+    // DNS parsing helpers
+
+    private fun parseDnsQuery(payload: ByteArray): String? {
+        try {
+            if (payload.size < 12) return null
+            var pos = 12 // Skip DNS header
+            val sb = StringBuilder()
+            while (pos < payload.size) {
+                val len = payload[pos].toInt() and 0xFF
+                if (len == 0) break // Root label
+                if (len >= 192) return null // Pointer, not supporting compressed query parsing
+                pos++
+                if (pos + len > payload.size) return null
+                for (i in 0 until len) {
+                    sb.append(payload[pos + i].toInt().toChar())
+                }
+                sb.append('.')
+                pos += len
+            }
+            return if (sb.isNotEmpty()) sb.toString().trimEnd('.') else null
+        } catch (e: Exception) {
+            return null
+        }
+    }
+
+    private fun buildNxDomainResponse(original: ByteArray, len: Int, dns: ByteArray): ByteArray {
+        val response = ByteArray(len)
+        System.arraycopy(original, 0, response, 0, len)
+        
+        val ipHeaderLen = (response[0].toInt() and 0xF) * 4
+        val udpStart = ipHeaderLen
+        
+        // IP header: Swap Source and Dest IP
+        for (i in 0..3) {
+            val tmp = response[12 + i]
+            response[12 + i] = response[16 + i]
+            response[16 + i] = tmp
+        }
+        
+        // UDP header: Swap Source and Dest Port
+        for (i in 0..1) {
+            val tmp = response[udpStart + i]
+            response[udpStart + i] = response[udpStart + 2 + i]
+            response[udpStart + 2 + i] = tmp
+        }
+        
+        // DNS header: QR=1(response), RCODE=3(NXDOMAIN)
+        val dnsStart = udpStart + 8
+        response[dnsStart + 2] = (response[dnsStart + 2].toInt() or 0x80).toByte() // QR=1
+        response[dnsStart + 3] = ((response[dnsStart + 3].toInt() and 0xF0) or 0x03).toByte()
+        
+        // Set ANCOUNT=0, NSCOUNT=0, ARCOUNT=0
+        response[dnsStart + 6] = 0; response[dnsStart + 7] = 0
+        response[dnsStart + 8] = 0; response[dnsStart + 9] = 0
+        response[dnsStart + 10] = 0; response[dnsStart + 11] = 0
+        
+        // Clear UDP checksum
+        response[udpStart + 6] = 0
+        response[udpStart + 7] = 0
+        
+        return response
+    }
+
+    private fun buildResponsePacket(original: ByteArray, dnsResponse: ByteArray): ByteArray {
+        val ipHeaderLen = (original[0].toInt() and 0xF) * 4
+        val udpHeaderLen = 8
+        val newLen = ipHeaderLen + udpHeaderLen + dnsResponse.size
+        val packet = ByteArray(newLen)
+        
+        System.arraycopy(original, 0, packet, 0, ipHeaderLen + udpHeaderLen)
+        System.arraycopy(dnsResponse, 0, packet, ipHeaderLen + udpHeaderLen, dnsResponse.size)
+        
+        // IP header Total length
+        packet[2] = (newLen shr 8).toByte()
+        packet[3] = (newLen and 0xFF).toByte()
+        
+        // Swap IPs
+        for (i in 0..3) {
+            val tmp = packet[12 + i]
+            packet[12 + i] = packet[16 + i]
+            packet[16 + i] = tmp
+        }
+        
+        // Swap UDP Ports
+        val udpStart = ipHeaderLen
+        for (i in 0..1) {
+            val tmp = packet[udpStart + i]
+            packet[udpStart + i] = packet[udpStart + 2 + i]
+            packet[udpStart + 2 + i] = tmp
+        }
+        
+        // UDP Length
+        val udpLen = udpHeaderLen + dnsResponse.size
+        packet[udpStart + 4] = (udpLen shr 8).toByte()
+        packet[udpStart + 5] = (udpLen and 0xFF).toByte()
+        
+        // Clear UDP checksum
+        packet[udpStart + 6] = 0
+        packet[udpStart + 7] = 0
+        
+        return packet
+    }
+
+    private fun forwardDns(query: ByteArray, server: String): ByteArray? {
+        try {
+            val socket = DatagramSocket()
+            socket.soTimeout = 3000
+            val address = InetAddress.getByName(server)
+            val packet = DatagramPacket(query, query.size, address, 53)
+            socket.send(packet)
+            
+            val buf = ByteArray(4096)
+            val responsePacket = DatagramPacket(buf, buf.size)
+            socket.receive(responsePacket)
+            socket.close()
+            
+            return buf.copyOfRange(0, responsePacket.length)
+        } catch (e: Exception) {
+            Log.e("KavachaVPN", "Forward DNS failed: \${e.message}")
+            return null
+        }
+    }
+}

android/app/src/main/kotlin/in/inmodel/premithus/KeyboardIMEService.kt

@@ -0,0 +1,77 @@
+package `in`.inmodel.premithus
+
+import android.inputmethodservice.InputMethodService
+import android.view.View
+import android.widget.FrameLayout
+import io.flutter.FlutterInjector
+import io.flutter.embedding.android.FlutterView
+import io.flutter.embedding.engine.FlutterEngine
+import io.flutter.embedding.engine.dart.DartExecutor
+import io.flutter.plugin.common.MethodChannel
+
+class KeyboardIMEService : InputMethodService() {
+
+    private lateinit var flutterEngine: FlutterEngine
+    private lateinit var flutterView: FlutterView
+    private lateinit var methodChannel: MethodChannel
+    private val CHANNEL = "in.inmodel.premithus/keyboard"
+
+    override fun onCreate() {
+        super.onCreate()
+        
+        flutterEngine = FlutterEngine(this)
+        flutterEngine.dartExecutor.executeDartEntrypoint(
+            DartExecutor.DartEntrypoint(
+                FlutterInjector.instance().flutterLoader().findAppBundlePath(),
+                "keyboardMain"
+            )
+        )
+
+        methodChannel = MethodChannel(flutterEngine.dartExecutor.binaryMessenger, CHANNEL)
+        methodChannel.setMethodCallHandler { call, result ->
+            when (call.method) {
+                "commitText" -> {
+                    val text = call.argument<String>("text") ?: ""
+                    currentInputConnection?.commitText(text, 1)
+                    result.success(null)
+                }
+                "deleteBackward" -> {
+                    currentInputConnection?.deleteSurroundingText(1, 0)
+                    result.success(null)
+                }
+                "replaceText" -> {
+                    val newText = call.argument<String>("text") ?: ""
+                    currentInputConnection?.deleteSurroundingText(10000, 10000)
+                    currentInputConnection?.commitText(newText, 1)
+                    result.success(null)
+                }
+                "getText" -> {
+                    val before = currentInputConnection?.getTextBeforeCursor(5000, 0) ?: ""
+                    val after = currentInputConnection?.getTextAfterCursor(5000, 0) ?: ""
+                    result.success(before.toString() + after.toString())
+                }
+                "hideKeyboard" -> {
+                    requestHideSelf(0)
+                    result.success(null)
+                }
+                else -> result.notImplemented()
+            }
+        }
+    }
+
+    override fun onCreateInputView(): View {
+        flutterView = FlutterView(this)
+        flutterView.attachToFlutterEngine(flutterEngine)
+        
+        // Wrap in FrameLayout to ensure layout bounds
+        val frameLayout = FrameLayout(this)
+        frameLayout.addView(flutterView)
+        return frameLayout
+    }
+
+    override fun onDestroy() {
+        flutterView.detachFromFlutterEngine()
+        flutterEngine.destroy()
+        super.onDestroy()
+    }
+}

android/app/src/main/kotlin/in/inmodel/premithus/LockedAppDao.kt

@@ -0,0 +1,43 @@
+package `in`.inmodel.premithus
+
+import android.content.ContentValues
+import android.database.sqlite.SQLiteDatabase
+
+class LockedAppDao(private val db: SQLiteDatabase) {
+
+    fun isLocked(packageName: String): Boolean {
+        // Check if app is in locked_apps table AND no active temporary unlock
+        val cursor = db.rawQuery(
+            "SELECT temporary_unlock_until FROM locked_apps WHERE package_name = ?",
+            arrayOf(packageName)
+        )
+        if (!cursor.moveToFirst()) {
+            cursor.close()
+            return false
+        }
+        val tempUntil = cursor.getLong(0)
+        cursor.close()
+
+        // If temporary_unlock_until is 0 or in the past, app is locked
+        return tempUntil == 0L || System.currentTimeMillis() > tempUntil
+    }
+
+    fun logAccessAttempt(packageName: String, timestamp: Long) {
+        // Increment access_attempts in locked_apps
+        db.execSQL(
+            "UPDATE locked_apps SET access_attempts = access_attempts + 1 WHERE package_name = ?",
+            arrayOf(packageName)
+        )
+        // Insert into access_log
+        val values = ContentValues().apply {
+            put("package_name", packageName)
+            put("was_allowed", 0)
+            put("attempted_at", timestamp)
+        }
+        try {
+            db.insert("access_log", null, values)
+        } catch (e: Exception) {
+            // Table may not exist yet — ignore
+        }
+    }
+}

android/app/src/main/kotlin/in/inmodel/premithus/MainActivity.kt

@@ -0,0 +1,273 @@
+package `in`.inmodel.premithus
+
+import android.accessibilityservice.AccessibilityServiceInfo
+import android.content.Context
+import android.content.pm.ApplicationInfo
+import android.content.pm.PackageManager
+import android.os.Bundle
+import android.view.accessibility.AccessibilityManager
+import io.flutter.embedding.android.FlutterActivity
+import io.flutter.embedding.engine.FlutterEngine
+import io.flutter.plugin.common.MethodChannel
+import android.content.Intent
+import android.net.VpnService
+import android.os.Handler
+import android.os.Looper
+import org.json.JSONArray
+import org.json.JSONObject
+import kotlin.concurrent.thread
+
+class MainActivity : FlutterActivity() {
+
+    companion object {
+        // Accessibility channel — shared with PremithiusAccessibilityService
+        var accessibilityChannel: MethodChannel? = null
+
+        // Auth channel — shared with OverlayService
+        var authChannel: MethodChannel? = null
+
+        const val VPN_REQUEST_CODE = 1001
+        var pendingVpnResult: MethodChannel.Result? = null
+    }
+
+    private val alreadyAlerted = mutableSetOf<String>()
+    private val sensorMonitorHandler = Handler(Looper.getMainLooper())
+    private val sensorMonitorRunnable = object : Runnable {
+        override fun run() {
+            thread {
+                val helper = TelemetryHelper(this@MainActivity)
+                val active = try { helper.getActiveSensors() } catch(e:Exception){ emptyList() }
+                for (sensor in active) {
+                    val key = sensor.packageName + sensor.sensor
+                    if (!alreadyAlerted.contains(key)) {
+                        alreadyAlerted.add(key)
+                        val intent = Intent(this@MainActivity, OverlayService::class.java)
+                        intent.action = OverlayService.ACTION_SHOW_SENSOR_ALERT
+                        intent.putExtra("appName", sensor.appName)
+                        intent.putExtra("sensor", sensor.sensor)
+                        intent.putExtra("packageName", sensor.packageName)
+                        startService(intent)
+                    }
+                }
+            }
+            sensorMonitorHandler.postDelayed(this, 60000L)
+        }
+    }
+
+    private val clearDedupHandler = Handler(Looper.getMainLooper())
+    private val clearDedupRunnable = object : Runnable {
+        override fun run() {
+            alreadyAlerted.clear()
+            clearDedupHandler.postDelayed(this, 600_000L)
+        }
+    }
+
+    override fun configureFlutterEngine(flutterEngine: FlutterEngine) {
+        super.configureFlutterEngine(flutterEngine)
+
+        // ── Accessibility Channel ────────────────────────────────────
+        accessibilityChannel = MethodChannel(
+            flutterEngine.dartExecutor.binaryMessenger,
+            "in.inmodel.premithius/accessibility"
+        ).also { channel ->
+            channel.setMethodCallHandler { call, result ->
+                when (call.method) {
+                    "isServiceEnabled" -> {
+                        val am = getSystemService(Context.ACCESSIBILITY_SERVICE) as AccessibilityManager
+                        val enabled = am.getEnabledAccessibilityServiceList(
+                            AccessibilityServiceInfo.FEEDBACK_ALL_MASK
+                        ).any {
+                            it.resolveInfo.serviceInfo.packageName == packageName &&
+                            it.resolveInfo.serviceInfo.name.contains("PremithiusAccessibilityService")
+                        }
+                        result.success(enabled)
+                    }
+                    "launchApp" -> {
+                        val pkg = call.argument<String>("packageName")
+                        if (pkg != null) {
+                            val intent = packageManager.getLaunchIntentForPackage(pkg)
+                            if (intent != null) startActivity(intent)
+                        }
+                        result.success(null)
+                    }
+                    else -> result.notImplemented()
+                }
+            }
+        }
+
+        // ── Auth Channel ─────────────────────────────────────────────
+        authChannel = MethodChannel(
+            flutterEngine.dartExecutor.binaryMessenger,
+            "in.inmodel.premithius/auth"
+        )
+        // Dart side sets the handler; Kotlin side may invoke methods on it
+
+        // ── Installed Apps Channel ───────────────────────────────────
+        MethodChannel(
+            flutterEngine.dartExecutor.binaryMessenger,
+            "in.inmodel.premithius/apps"
+        ).setMethodCallHandler { call, result ->
+            if (call.method == "getInstalledApps") {
+                val pm = packageManager
+                val apps = pm.getInstalledApplications(PackageManager.GET_META_DATA)
+                    .filter { app ->
+                        // Only user-installed apps OR system apps that have a launcher intent
+                        (app.flags and ApplicationInfo.FLAG_SYSTEM) == 0 ||
+                        pm.getLaunchIntentForPackage(app.packageName) != null
+                    }
+                    .filter { it.packageName != "in.inmodel.premithus" }
+                    .map { app ->
+                        mapOf(
+                            "packageName" to app.packageName,
+                            "appName" to pm.getApplicationLabel(app).toString()
+                        )
+                    }
+                result.success(apps)
+            } else {
+                result.notImplemented()
+            }
+        }
+        // ── VPN Channel ──────────────────────────────────────────────
+        MethodChannel(
+            flutterEngine.dartExecutor.binaryMessenger,
+            "in.inmodel.premithius/vpn"
+        ).setMethodCallHandler { call, result ->
+            when (call.method) {
+                "startVpn" -> {
+                    val vpnIntent = VpnService.prepare(this)
+                    if (vpnIntent != null) {
+                        startActivityForResult(vpnIntent, VPN_REQUEST_CODE)
+                        pendingVpnResult = result
+                    } else {
+                        val intent = Intent(this, KavachaVpnService::class.java)
+                        intent.action = KavachaVpnService.ACTION_START
+                        startService(intent)
+                        result.success("started")
+                    }
+                }
+                "stopVpn" -> {
+                    val intent = Intent(this, KavachaVpnService::class.java)
+                    intent.action = KavachaVpnService.ACTION_STOP
+                    startService(intent)
+                    result.success("stopped")
+                }
+                "getLastEvent" -> {
+                    val prefs = getSharedPreferences("vpn_events", Context.MODE_PRIVATE)
+                    result.success(prefs.getString("last_event", null))
+                }
+                "reloadBlocklist" -> {
+                    val intent = Intent(this, KavachaVpnService::class.java)
+                    intent.action = "ACTION_RELOAD_BLOCKLIST"
+                    startService(intent)
+                    result.success(null)
+                }
+                else -> result.notImplemented()
+            }
+        }
+
+        // ── Telemetry Channel ─────────────────────────────────────────
+        MethodChannel(
+            flutterEngine.dartExecutor.binaryMessenger,
+            "in.inmodel.premithius/telemetry"
+        ).setMethodCallHandler { call, result ->
+            val helper = TelemetryHelper(this@MainActivity)
+            when (call.method) {
+                "hasUsagePermission" -> result.success(helper.hasUsageStatsPermission())
+                "getPrivacyStories" -> {
+                    thread {
+                        val sensors = try { helper.getActiveSensors() } catch(e:Exception){ emptyList() }
+                        val perms = try { helper.getPermissionStats() } catch(e:Exception){ emptyList() }
+                        val data = try { helper.getSleepTimeDataUsage() } catch(e:Exception){ emptyList() }
+                        val stories = helper.generatePrivacyStories(sensors, perms, data)
+                        val jsonArray = JSONArray()
+                        for (s in stories) {
+                            val obj = JSONObject()
+                            obj.put("severity", s.severity)
+                            obj.put("emoji", s.emoji)
+                            obj.put("english", s.english)
+                            obj.put("hindi", s.hindi)
+                            obj.put("packageName", s.packageName)
+                            jsonArray.put(obj)
+                        }
+                        Handler(Looper.getMainLooper()).post { result.success(jsonArray.toString()) }
+                    }
+                }
+                "getActiveSensors" -> {
+                    thread {
+                        val sensors = try { helper.getActiveSensors() } catch(e:Exception){ emptyList() }
+                        val jsonArray = JSONArray()
+                        for (s in sensors) {
+                            val obj = JSONObject()
+                            obj.put("packageName", s.packageName)
+                            obj.put("appName", s.appName)
+                            obj.put("sensor", s.sensor)
+                            obj.put("isActive", s.isActive)
+                            jsonArray.put(obj)
+                        }
+                        Handler(Looper.getMainLooper()).post { result.success(jsonArray.toString()) }
+                    }
+                }
+                "getDataUsage" -> {
+                    thread {
+                        val data = try { helper.getSleepTimeDataUsage() } catch(e:Exception){ emptyList() }
+                        val jsonArray = JSONArray()
+                        for (d in data) {
+                            val obj = JSONObject()
+                            obj.put("packageName", d.packageName)
+                            obj.put("appName", d.appName)
+                            obj.put("bytesSent", d.bytesSent)
+                            obj.put("mbSent", d.mbSent)
+                            jsonArray.put(obj)
+                        }
+                        Handler(Looper.getMainLooper()).post { result.success(jsonArray.toString()) }
+                    }
+                }
+                "getPermissionStats" -> {
+                    thread {
+                        val perms = try { helper.getPermissionStats() } catch(e:Exception){ emptyList() }
+                        val jsonArray = JSONArray()
+                        for (p in perms) {
+                            val obj = JSONObject()
+                            obj.put("packageName", p.packageName)
+                            obj.put("appName", p.appName)
+                            val counts = JSONObject()
+                            for ((k, v) in p.accessCounts) { counts.put(k, v) }
+                            obj.put("accessCounts", counts)
+                            obj.put("isSystemApp", p.isSystemApp)
+                            jsonArray.put(obj)
+                        }
+                        Handler(Looper.getMainLooper()).post { result.success(jsonArray.toString()) }
+                    }
+                }
+                else -> result.notImplemented()
+            }
+        }
+    }
+
+    override fun onActivityResult(requestCode: Int, resultCode: Int, data: Intent?) {
+        if (requestCode == VPN_REQUEST_CODE) {
+            if (resultCode == RESULT_OK) {
+                val intent = Intent(this, KavachaVpnService::class.java)
+                intent.action = KavachaVpnService.ACTION_START
+                startService(intent)
+                pendingVpnResult?.success("started")
+            } else {
+                pendingVpnResult?.success("denied")
+            }
+            pendingVpnResult = null
+        }
+        super.onActivityResult(requestCode, resultCode, data)
+    }
+
+    override fun onCreate(savedInstanceState: Bundle?) {
+        super.onCreate(savedInstanceState)
+        sensorMonitorHandler.post(sensorMonitorRunnable)
+        clearDedupHandler.postDelayed(clearDedupRunnable, 600000L)
+    }
+    
+    override fun onDestroy() {
+        super.onDestroy()
+        sensorMonitorHandler.removeCallbacksAndMessages(null)
+        clearDedupHandler.removeCallbacksAndMessages(null)
+    }
+}

android/app/src/main/kotlin/in/inmodel/premithus/OverlayService.kt

@@ -0,0 +1,515 @@
+package `in`.inmodel.premithus
+
+import android.app.Service
+import android.content.Context
+import android.content.Intent
+import android.graphics.Color
+import android.graphics.PixelFormat
+import android.os.Handler
+import android.os.IBinder
+import android.os.Looper
+import android.view.Gravity
+import android.view.ViewGroup
+import android.view.WindowManager
+import android.widget.Button
+import android.widget.LinearLayout
+import android.widget.TextView
+import io.flutter.FlutterInjector
+import io.flutter.embedding.engine.FlutterEngine
+import io.flutter.embedding.engine.dart.DartExecutor
+import io.flutter.plugin.common.MethodChannel
+
+class OverlayService : Service() {
+
+    companion object {
+        const val ACTION_SHOW_AUTH = "ACTION_SHOW_AUTH"
+        const val ACTION_SHOW_DOMAIN_BLOCK = "ACTION_SHOW_DOMAIN_BLOCK"
+        const val ACTION_SHOW_SENSOR_ALERT = "ACTION_SHOW_SENSOR_ALERT"
+    }
+
+    private lateinit var windowManager: WindowManager
+    private var overlayView: LinearLayout? = null
+    private var authOverlayView: LinearLayout? = null
+    private var autoDismissHandler: Handler? = null
+
+    // Background single engine for scam analysis
+    private lateinit var flutterEngine: FlutterEngine
+    private lateinit var methodChannel: MethodChannel
+    private val CHANNEL = "in.inmodel.premithus/scam"
+
+    override fun onCreate() {
+        super.onCreate()
+        windowManager = getSystemService(Context.WINDOW_SERVICE) as WindowManager
+        
+        flutterEngine = FlutterEngine(this)
+        flutterEngine.dartExecutor.executeDartEntrypoint(
+            DartExecutor.DartEntrypoint(
+                FlutterInjector.instance().flutterLoader().findAppBundlePath(),
+                "scamMain"
+            )
+        )
+        methodChannel = MethodChannel(flutterEngine.dartExecutor.binaryMessenger, CHANNEL)
+    }
+
+    override fun onStartCommand(intent: Intent?, flags: Int, startId: Int): Int {
+        if (intent?.action == "in.inmodel.premithus.ACTION_ANALYZE_SMS") {
+            val sender = intent.getStringExtra("sender") ?: ""
+            val messageBody = intent.getStringExtra("messageBody") ?: ""
+            
+            val params = mapOf("sender" to sender, "messageBody" to messageBody)
+            
+            methodChannel.invokeMethod("analyze", params, object : MethodChannel.Result {
+                override fun success(result: Any?) {
+                    val map = result as? Map<String, Any> ?: return
+                    val isScam = map["isScam"] as? Boolean ?: false
+                    val category = map["category"] as? String ?: "Unknown"
+                    val layerLabel = map["layerLabel"] as? String ?: ""
+                    if (isScam) {
+                        showOverlay(sender, messageBody, category, layerLabel)
+                    }
+                }
+                override fun error(errorCode: String, errorMessage: String?, errorDetails: Any?) {}
+                override fun notImplemented() {}
+            })
+        }
+
+        if (intent?.action == ACTION_SHOW_AUTH) {
+            val packageName = intent.getStringExtra("package_name") ?: return START_STICKY
+            val appName = intent.getStringExtra("app_name") ?: packageName
+            showAuthOverlay(packageName, appName)
+        }
+
+        if (intent?.action == ACTION_SHOW_DOMAIN_BLOCK) {
+            val domain = intent.getStringExtra("domain") ?: ""
+            val category = intent.getStringExtra("category") ?: ""
+            showDomainBlockOverlay(domain, category)
+        }
+
+        if (intent?.action == ACTION_SHOW_SENSOR_ALERT) {
+            val appName = intent.getStringExtra("appName") ?: ""
+            val sensor = intent.getStringExtra("sensor") ?: ""
+            val packageName = intent.getStringExtra("packageName") ?: ""
+            showSensorOverlay(appName, sensor, packageName)
+        }
+
+        return START_STICKY
+    }
+
+    private fun showAuthOverlay(packageName: String, appName: String) {
+        // Dismiss any existing auth overlay
+        authOverlayView?.let {
+            try { windowManager.removeView(it) } catch (e: Exception) {}
+        }
+        autoDismissHandler?.removeCallbacksAndMessages(null)
+
+        authOverlayView = LinearLayout(this).apply {
+            orientation = LinearLayout.VERTICAL
+            setBackgroundColor(android.graphics.Color.parseColor("#1A1A2E"))
+            setPadding(40, 48, 40, 48)
+
+            val titleView = android.widget.TextView(context).apply {
+                text = "\uD83D\uDD12 App Locked — $appName"
+                setTextColor(android.graphics.Color.WHITE)
+                textSize = 18f
+                setTypeface(null, android.graphics.Typeface.BOLD)
+            }
+            addView(titleView)
+
+            val subtitleView = android.widget.TextView(context).apply {
+                text = "Authenticate to open"
+                setTextColor(android.graphics.Color.parseColor("#AAAACC"))
+                textSize = 14f
+                setPadding(0, 8, 0, 24)
+            }
+            addView(subtitleView)
+
+            val buttonLayout = LinearLayout(context).apply {
+                orientation = LinearLayout.HORIZONTAL
+
+                val biometricBtn = android.widget.Button(context).apply {
+                    text = "Use Biometrics"
+                    setTextColor(android.graphics.Color.WHITE)
+                    setBackgroundColor(android.graphics.Color.parseColor("#6C63FF"))
+                    layoutParams = LinearLayout.LayoutParams(
+                        0, android.view.ViewGroup.LayoutParams.WRAP_CONTENT, 1f
+                    ).apply { setMargins(0, 0, 8, 0) }
+                    setOnClickListener {
+                        // Send biometric auth request to Flutter via MainActivity channel
+                        Handler(Looper.getMainLooper()).post {
+                            val args = mapOf("packageName" to packageName, "appName" to appName)
+                            MainActivity.authChannel?.invokeMethod("requestBiometricAuth", args)
+                        }
+                        dismissAuthOverlay()
+                    }
+                }
+
+                val cancelBtn = android.widget.Button(context).apply {
+                    text = "Cancel"
+                    setTextColor(android.graphics.Color.WHITE)
+                    setBackgroundColor(android.graphics.Color.parseColor("#444466"))
+                    layoutParams = LinearLayout.LayoutParams(
+                        0, android.view.ViewGroup.LayoutParams.WRAP_CONTENT, 1f
+                    ).apply { setMargins(8, 0, 0, 0) }
+                    setOnClickListener { dismissAuthOverlay() }
+                }
+
+                addView(biometricBtn)
+                addView(cancelBtn)
+            }
+            addView(buttonLayout)
+        }
+
+        val params = android.view.WindowManager.LayoutParams(
+            android.view.WindowManager.LayoutParams.MATCH_PARENT,
+            android.view.WindowManager.LayoutParams.WRAP_CONTENT,
+            android.view.WindowManager.LayoutParams.TYPE_APPLICATION_OVERLAY,
+            android.view.WindowManager.LayoutParams.FLAG_NOT_TOUCH_MODAL,
+            android.graphics.PixelFormat.TRANSLUCENT
+        ).apply {
+            gravity = android.view.Gravity.TOP
+            y = 100
+        }
+
+        windowManager.addView(authOverlayView, params)
+
+        // Auto dismiss after 15 seconds
+        autoDismissHandler = Handler(Looper.getMainLooper())
+        autoDismissHandler!!.postDelayed({ dismissAuthOverlay() }, 15_000)
+    }
+
+    private fun dismissAuthOverlay() {
+        autoDismissHandler?.removeCallbacksAndMessages(null)
+        authOverlayView?.let {
+            try { windowManager.removeView(it) } catch (e: Exception) {}
+            authOverlayView = null
+        }
+    }
+
+    private fun showOverlay(sender: String, message: String, category: String, layerLabel: String = "") {
+        if (overlayView != null) {
+            windowManager.removeView(overlayView)
+        }
+
+        overlayView = LinearLayout(this).apply {
+            orientation = LinearLayout.VERTICAL
+            setBackgroundColor(Color.parseColor("#E53935")) // Red background
+            setPadding(32, 32, 32, 32)
+            
+            val titleView = TextView(context).apply {
+                text = "HIGH RISK — $category"
+                setTextColor(Color.WHITE)
+                textSize = 18f
+                setTypeface(null, android.graphics.Typeface.BOLD)
+            }
+            
+            val previewView = TextView(context).apply {
+                text = "$sender: ${message.take(60)}..."
+                setTextColor(Color.WHITE)
+                textSize = 14f
+                setPadding(0, 8, 0, 0)
+            }
+
+            addView(titleView)
+            
+            if (layerLabel.isNotEmpty()) {
+                val caughtByView = TextView(context).apply {
+                    text = "\uD83D\uDEE1\uFE0F Caught by: $layerLabel"
+                    setTextColor(Color.parseColor("#FFCDD2"))
+                    textSize = 12f
+                    setPadding(0, 4, 0, 0)
+                }
+                addView(caughtByView)
+            }
+            addView(previewView)
+            
+            val buttonLayout = LinearLayout(context).apply {
+                orientation = LinearLayout.HORIZONTAL
+                setPadding(0, 32, 0, 0)
+                
+                val confirmBtn = Button(context).apply {
+                    text = "Confirm Scam"
+                    setTextColor(Color.WHITE)
+                    setBackgroundColor(Color.parseColor("#B71C1C"))
+                    layoutParams = LinearLayout.LayoutParams(0, ViewGroup.LayoutParams.WRAP_CONTENT, 1f).apply {
+                        setMargins(0, 0, 8, 0)
+                    }
+                    setOnClickListener {
+                        val params = mapOf("sender" to sender, "messageBody" to message, "isScam" to true)
+                        methodChannel.invokeMethod("feedback", params)
+                        windowManager.removeView(overlayView)
+                        overlayView = null
+                    }
+                }
+                
+                val safeBtn = Button(context).apply {
+                    text = "Not a Scam"
+                    setTextColor(Color.WHITE)
+                    setBackgroundColor(Color.parseColor("#43A047"))
+                    layoutParams = LinearLayout.LayoutParams(0, ViewGroup.LayoutParams.WRAP_CONTENT, 1f).apply {
+                        setMargins(8, 0, 0, 0)
+                    }
+                    setOnClickListener {
+                        val params = mapOf("sender" to sender, "messageBody" to message, "isScam" to false)
+                        methodChannel.invokeMethod("feedback", params)
+                        windowManager.removeView(overlayView)
+                        overlayView = null
+                    }
+                }
+                
+                addView(confirmBtn)
+                addView(safeBtn)
+            }
+            addView(buttonLayout)
+            
+            setOnClickListener {
+                windowManager.removeView(overlayView)
+                overlayView = null
+            }
+        }
+
+        val params = WindowManager.LayoutParams(
+            WindowManager.LayoutParams.MATCH_PARENT,
+            WindowManager.LayoutParams.WRAP_CONTENT,
+            WindowManager.LayoutParams.TYPE_APPLICATION_OVERLAY,
+            WindowManager.LayoutParams.FLAG_NOT_FOCUSABLE or WindowManager.LayoutParams.FLAG_NOT_TOUCH_MODAL,
+            PixelFormat.TRANSLUCENT
+        ).apply {
+            gravity = Gravity.TOP
+            y = 50 // small inset
+        }
+
+        windowManager.addView(overlayView, params)
+        
+        // Auto dismiss after 8 seconds
+        Handler(Looper.getMainLooper()).postDelayed({
+            if (overlayView != null) {
+                windowManager.removeView(overlayView)
+                overlayView = null
+            }
+        }, 8000)
+
+        // Force widget refresh whenever a scam SMS is detected
+        try {
+            PremithiusWidget.forceRefresh(applicationContext)
+        } catch(e: Exception) {}
+    }
+
+    private fun showDomainBlockOverlay(domain: String, category: String) {
+        if (overlayView != null) {
+            windowManager.removeView(overlayView)
+        }
+
+        overlayView = LinearLayout(this).apply {
+            orientation = LinearLayout.VERTICAL
+            setBackgroundColor(Color.parseColor("#E53935")) // Red background
+            setPadding(32, 32, 32, 32)
+            
+            val titleView = TextView(context).apply {
+                text = "Scam Domain Blocked"
+                setTextColor(Color.WHITE)
+                textSize = 18f
+                setTypeface(null, android.graphics.Typeface.BOLD)
+            }
+            
+            val caughtByView = TextView(context).apply {
+                text = "\uD83D\uDEE1\uFE0F Caught by: Kavacha VPN Shield"
+                setTextColor(Color.parseColor("#FFCDD2"))
+                textSize = 12f
+                setPadding(0, 4, 0, 8)
+            }
+
+            val subtitleView = TextView(context).apply {
+                text = domain
+                setTextColor(Color.WHITE)
+                textSize = 16f
+                setTypeface(null, android.graphics.Typeface.BOLD)
+            }
+
+            val detailView = TextView(context).apply {
+                text = category
+                setTextColor(Color.parseColor("#FFCDD2"))
+                textSize = 14f
+                setPadding(0, 4, 0, 0)
+            }
+
+            addView(titleView)
+            addView(caughtByView)
+            addView(subtitleView)
+            addView(detailView)
+
+            val buttonLayout = LinearLayout(context).apply {
+                orientation = LinearLayout.HORIZONTAL
+                setPadding(0, 32, 0, 0)
+                
+                val detailsBtn = Button(context).apply {
+                    text = "View Details"
+                    setTextColor(Color.WHITE)
+                    setBackgroundColor(Color.parseColor("#B71C1C"))
+                    layoutParams = LinearLayout.LayoutParams(0, ViewGroup.LayoutParams.WRAP_CONTENT, 1f).apply {
+                        setMargins(0, 0, 8, 0)
+                    }
+                    setOnClickListener {
+                        val launchIntent = packageManager.getLaunchIntentForPackage(packageName)
+                        if (launchIntent != null) {
+                            launchIntent.flags = Intent.FLAG_ACTIVITY_NEW_TASK or Intent.FLAG_ACTIVITY_CLEAR_TOP
+                            startActivity(launchIntent)
+                        }
+                        windowManager.removeView(overlayView)
+                        overlayView = null
+                    }
+                }
+                
+                val dismissBtn = Button(context).apply {
+                    text = "Dismiss"
+                    setTextColor(Color.WHITE)
+                    setBackgroundColor(Color.parseColor("#444466"))
+                    layoutParams = LinearLayout.LayoutParams(0, ViewGroup.LayoutParams.WRAP_CONTENT, 1f).apply {
+                        setMargins(8, 0, 0, 0)
+                    }
+                    setOnClickListener {
+                        windowManager.removeView(overlayView)
+                        overlayView = null
+                    }
+                }
+                
+                addView(detailsBtn)
+                addView(dismissBtn)
+            }
+            addView(buttonLayout)
+        }
+
+        val params = WindowManager.LayoutParams(
+            WindowManager.LayoutParams.MATCH_PARENT,
+            WindowManager.LayoutParams.WRAP_CONTENT,
+            WindowManager.LayoutParams.TYPE_APPLICATION_OVERLAY,
+            WindowManager.LayoutParams.FLAG_NOT_FOCUSABLE or WindowManager.LayoutParams.FLAG_NOT_TOUCH_MODAL,
+            PixelFormat.TRANSLUCENT
+        ).apply {
+            gravity = Gravity.TOP
+            y = 50 // small inset
+        }
+
+        windowManager.addView(overlayView, params)
+        
+        // Auto dismiss after 6 seconds
+        Handler(Looper.getMainLooper()).postDelayed({
+            if (overlayView != null) {
+                windowManager.removeView(overlayView)
+                overlayView = null
+            }
+        }, 6000)
+
+        // Force widget refresh whenever a domain is blocked
+        try {
+            PremithiusWidget.forceRefresh(applicationContext)
+        } catch(e: Exception) {}
+    }
+
+    private fun showSensorOverlay(appName: String, sensor: String, packageName: String) {
+        if (overlayView != null) {
+            windowManager.removeView(overlayView)
+        }
+
+        overlayView = LinearLayout(this).apply {
+            orientation = LinearLayout.VERTICAL
+            setBackgroundColor(Color.parseColor("#FFCC7700")) // Orange background for sensor alert
+            setPadding(32, 32, 32, 32)
+            
+            val titleView = TextView(context).apply {
+                text = "${sensor.capitalize()} active in background"
+                setTextColor(Color.WHITE)
+                textSize = 18f
+                setTypeface(null, android.graphics.Typeface.BOLD)
+            }
+            
+            val caughtByView = TextView(context).apply {
+                text = "\uD83D\uDEE1\uFE0F Caught by: Data Shield"
+                setTextColor(Color.parseColor("#FFE0B2"))
+                textSize = 12f
+                setPadding(0, 4, 0, 8)
+            }
+
+            val subtitleView = TextView(context).apply {
+                text = "$appName is using your $sensor right now"
+                setTextColor(Color.WHITE)
+                textSize = 16f
+            }
+
+            addView(titleView)
+            addView(caughtByView)
+            addView(subtitleView)
+
+            val buttonLayout = LinearLayout(context).apply {
+                orientation = LinearLayout.HORIZONTAL
+                setPadding(0, 32, 0, 0)
+                
+                val detailsBtn = Button(context).apply {
+                    text = "Open Data Shield"
+                    setTextColor(Color.WHITE)
+                    setBackgroundColor(Color.parseColor("#E65100"))
+                    layoutParams = LinearLayout.LayoutParams(0, ViewGroup.LayoutParams.WRAP_CONTENT, 1f).apply {
+                        setMargins(0, 0, 8, 0)
+                    }
+                    setOnClickListener {
+                        val launchIntent = packageManager.getLaunchIntentForPackage(context.packageName)
+                        if (launchIntent != null) {
+                            launchIntent.flags = Intent.FLAG_ACTIVITY_NEW_TASK or Intent.FLAG_ACTIVITY_CLEAR_TOP
+                            startActivity(launchIntent)
+                        }
+                        windowManager.removeView(overlayView)
+                        overlayView = null
+                    }
+                }
+                
+                val dismissBtn = Button(context).apply {
+                    text = "Dismiss"
+                    setTextColor(Color.WHITE)
+                    setBackgroundColor(Color.parseColor("#444466"))
+                    layoutParams = LinearLayout.LayoutParams(0, ViewGroup.LayoutParams.WRAP_CONTENT, 1f).apply {
+                        setMargins(8, 0, 0, 0)
+                    }
+                    setOnClickListener {
+                        windowManager.removeView(overlayView)
+                        overlayView = null
+                    }
+                }
+                
+                addView(detailsBtn)
+                addView(dismissBtn)
+            }
+            addView(buttonLayout)
+        }
+
+        val params = WindowManager.LayoutParams(
+            WindowManager.LayoutParams.MATCH_PARENT,
+            WindowManager.LayoutParams.WRAP_CONTENT,
+            WindowManager.LayoutParams.TYPE_APPLICATION_OVERLAY,
+            WindowManager.LayoutParams.FLAG_NOT_FOCUSABLE or WindowManager.LayoutParams.FLAG_NOT_TOUCH_MODAL,
+            PixelFormat.TRANSLUCENT
+        ).apply {
+            gravity = Gravity.TOP
+            y = 50 // small inset
+        }
+
+        windowManager.addView(overlayView, params)
+        
+        // Auto dismiss after 8 seconds
+        Handler(Looper.getMainLooper()).postDelayed({
+            if (overlayView != null) {
+                windowManager.removeView(overlayView)
+                overlayView = null
+            }
+        }, 8000)
+    }
+
+    override fun onBind(intent: Intent?): IBinder? = null
+
+    override fun onDestroy() {
+        super.onDestroy()
+        flutterEngine.destroy()
+        if (overlayView != null) {
+            try { windowManager.removeView(overlayView) } catch (e: Exception) {}
+        }
+        dismissAuthOverlay()
+    }
+}

android/app/src/main/kotlin/in/inmodel/premithus/PremithiusAccessibilityService.kt

@@ -0,0 +1,135 @@
+package `in`.inmodel.premithus
+
+import android.accessibilityservice.AccessibilityService
+import android.accessibilityservice.AccessibilityServiceInfo
+import android.content.Intent
+import android.os.Handler
+import android.os.Looper
+import android.util.Log
+import android.view.accessibility.AccessibilityEvent
+
+class PremithiusAccessibilityService : AccessibilityService() {
+
+    companion object {
+        // Shared state — readable from other Kotlin classes
+        var foregroundPackage: String = ""
+        var foregroundAppName: String = ""
+        var isServiceRunning: Boolean = false
+
+        // MethodChannel name for Flutter communication
+        const val CHANNEL = "in.inmodel.premithius/accessibility"
+    }
+
+    override fun onServiceConnected() {
+        isServiceRunning = true
+        // Configure which events to listen for
+        val info = AccessibilityServiceInfo()
+        info.eventTypes = AccessibilityEvent.TYPE_WINDOW_STATE_CHANGED or
+                AccessibilityEvent.TYPE_WINDOW_CONTENT_CHANGED
+        info.feedbackType = AccessibilityServiceInfo.FEEDBACK_GENERIC
+        info.flags = AccessibilityServiceInfo.FLAG_REPORT_VIEW_IDS or
+                AccessibilityServiceInfo.FLAG_RETRIEVE_INTERACTIVE_WINDOWS
+        info.notificationTimeout = 100
+        serviceInfo = info
+        Log.d("PremithiusA11y", "Service connected")
+    }
+
+    override fun onAccessibilityEvent(event: AccessibilityEvent) {
+        if (event.eventType != AccessibilityEvent.TYPE_WINDOW_STATE_CHANGED) return
+
+        val packageName = event.packageName?.toString() ?: return
+        if (packageName == foregroundPackage) return // same app, ignore
+        if (packageName == "in.inmodel.premithus") return // ignore ourselves
+
+        foregroundPackage = packageName
+        foregroundAppName = getAppName(packageName)
+
+        Log.d("PremithiusA11y", "Foreground: $packageName")
+
+        // Feature 1: App Lock check
+        checkAppLock(packageName)
+
+        // Feature 2: Notify Flutter of foreground context
+        // (used by keyboard tone switching + OTP verification)
+        notifyFlutter(packageName, foregroundAppName)
+    }
+
+    override fun onInterrupt() {
+        isServiceRunning = false
+    }
+
+    // ── Feature 1: App Lock ──────────────────────────────────────
+    private fun checkAppLock(packageName: String) {
+        // Query locked_apps SQLite table via PremithiusDatabase
+        // Run on background thread — never block accessibility thread
+        Thread {
+            val isLocked = PremithiusDatabase.getInstance(this)
+                .lockedAppDao()
+                .isLocked(packageName)
+
+            if (isLocked) {
+                Log.d("PremithiusA11y", "LOCKED APP DETECTED: $packageName")
+
+                // Step 1: Immediately go home — app never shows
+                performGlobalAction(GLOBAL_ACTION_HOME)
+
+                // Step 2: Show auth overlay via OverlayService
+                val intent = Intent(this, OverlayService::class.java)
+                intent.action = OverlayService.ACTION_SHOW_AUTH
+                intent.putExtra("package_name", packageName)
+                intent.putExtra("app_name", foregroundAppName)
+                startService(intent)
+
+                // Step 3: Log access attempt
+                PremithiusDatabase.getInstance(this)
+                    .lockedAppDao()
+                    .logAccessAttempt(packageName, System.currentTimeMillis())
+            }
+        }.start()
+    }
+
+    // ── Feature 2: Notify Flutter ────────────────────────────────
+    private fun notifyFlutter(packageName: String, appName: String) {
+        // Send foreground context to Flutter via MethodChannel
+        val context = mapOf(
+            "package" to packageName,
+            "appName" to appName,
+            "toneContext" to getToneContext(packageName)
+        )
+        // Post to main thread for MethodChannel call
+        Handler(Looper.getMainLooper()).post {
+            MainActivity.accessibilityChannel?.invokeMethod("onForegroundChanged", context)
+        }
+    }
+
+    // ── Tone context mapping ─────────────────────────────────────
+    private fun getToneContext(packageName: String): String {
+        return when {
+            packageName.contains("whatsapp") ||
+            packageName.contains("telegram") ||
+            packageName.contains("signal")    -> "casual"
+
+            packageName.contains("gmail") ||
+            packageName.contains("outlook") ||
+            packageName.contains("yahoo.mail") -> "formal"
+
+            packageName.contains("linkedin")   -> "professional"
+
+            packageName.contains("twitter") ||
+            packageName.contains("instagram")  -> "casual"
+
+            else -> "neutral"
+        }
+    }
+
+    // ── Helper: get human-readable app name ─────────────────────
+    private fun getAppName(packageName: String): String {
+        return try {
+            val pm = packageManager
+            val appInfo = pm.getApplicationInfo(packageName, 0)
+            pm.getApplicationLabel(appInfo).toString()
+        } catch (e: Exception) {
+            packageName
+        }
+    }
+}

android/app/src/main/kotlin/in/inmodel/premithus/PremithiusDatabase.kt

@@ -0,0 +1,99 @@
+package `in`.inmodel.premithus
+
+import android.content.Context
+import android.database.sqlite.SQLiteDatabase
+import android.database.sqlite.SQLiteOpenHelper
+
+class PremithiusDatabase private constructor(context: Context)
+    : SQLiteOpenHelper(context, "premithius.db", null, 2) {
+
+    companion object {
+        @Volatile private var INSTANCE: PremithiusDatabase? = null
+
+        fun getInstance(context: Context): PremithiusDatabase {
+            return INSTANCE ?: synchronized(this) {
+                INSTANCE ?: PremithiusDatabase(context.applicationContext).also { INSTANCE = it }
+            }
+        }
+    }
+
+    override fun onCreate(db: SQLiteDatabase) {
+        // Tables created by Flutter (sqflite) — we just add new ones here
+        db.execSQL("""
+            CREATE TABLE IF NOT EXISTS locked_apps (
+                id INTEGER PRIMARY KEY AUTOINCREMENT,
+                package_name TEXT UNIQUE NOT NULL,
+                app_name TEXT NOT NULL,
+                auth_method TEXT DEFAULT 'biometric',
+                locked_at INTEGER NOT NULL,
+                access_attempts INTEGER DEFAULT 0,
+                temporary_unlock_until INTEGER DEFAULT 0
+            )
+        """.trimIndent())
+
+        db.execSQL("""
+            CREATE TABLE IF NOT EXISTS access_log (
+                id INTEGER PRIMARY KEY AUTOINCREMENT,
+                package_name TEXT NOT NULL,
+                app_name TEXT,
+                was_allowed INTEGER DEFAULT 0,
+                attempted_at INTEGER NOT NULL
+            )
+        """.trimIndent())
+    }
+
+    override fun onUpgrade(db: SQLiteDatabase, oldVersion: Int, newVersion: Int) {
+        if (oldVersion < 2) {
+            db.execSQL("""
+                CREATE TABLE IF NOT EXISTS locked_apps (
+                    id INTEGER PRIMARY KEY AUTOINCREMENT,
+                    package_name TEXT UNIQUE NOT NULL,
+                    app_name TEXT NOT NULL,
+                    auth_method TEXT DEFAULT 'biometric',
+                    locked_at INTEGER NOT NULL,
+                    access_attempts INTEGER DEFAULT 0,
+                    temporary_unlock_until INTEGER DEFAULT 0
+                )
+            """.trimIndent())
+
+            db.execSQL("""
+                CREATE TABLE IF NOT EXISTS access_log (
+                    id INTEGER PRIMARY KEY AUTOINCREMENT,
+                    package_name TEXT NOT NULL,
+                    app_name TEXT,
+                    was_allowed INTEGER DEFAULT 0,
+                    attempted_at INTEGER NOT NULL
+                )
+            """.trimIndent())
+        }
+    }
+
+    fun lockedAppDao(): LockedAppDao = LockedAppDao(writableDatabase)
+
+    fun scamLogDao() = ScamLogDao(writableDatabase)
+    fun scamDomainDao() = ScamDomainDao(writableDatabase)
+
+    class ScamLogDao(private val db: SQLiteDatabase) {
+        fun getCountSince(timestamp: Long): Int {
+            val cursor = db.rawQuery("SELECT COUNT(*) FROM scam_log WHERE created_at >= ?", arrayOf(timestamp.toString()))
+            var count = 0
+            if (cursor.moveToFirst()) {
+                count = cursor.getInt(0)
+            }
+            cursor.close()
+            return count
+        }
+    }
+
+    class ScamDomainDao(private val db: SQLiteDatabase) {
+        fun getHitsSince(timestamp: Long): Int {
+            val cursor = db.rawQuery("SELECT COUNT(*) FROM vpn_events WHERE created_at >= ?", arrayOf(timestamp.toString()))
+            var count = 0
+            if (cursor.moveToFirst()) {
+                count = cursor.getInt(0)
+            }
+            cursor.close()
+            return count
+        }
+    }
+}

android/app/src/main/kotlin/in/inmodel/premithus/PremithiusWidget.kt

@@ -0,0 +1,97 @@
+package `in`.inmodel.premithus
+
+import android.app.PendingIntent
+import android.appwidget.AppWidgetManager
+import android.appwidget.AppWidgetProvider
+import android.content.ComponentName
+import android.content.Context
+import android.content.Intent
+import android.widget.RemoteViews
+
+class PremithiusWidget : AppWidgetProvider() {
+
+    override fun onUpdate(
+        context: Context,
+        appWidgetManager: AppWidgetManager,
+        appWidgetIds: IntArray
+    ) {
+        appWidgetIds.forEach { id ->
+            updateWidget(context, appWidgetManager, id)
+        }
+    }
+
+    companion object {
+        fun updateWidget(context: Context, manager: AppWidgetManager, id: Int) {
+            val views = RemoteViews(context.packageName, R.layout.widget_layout)
+
+            // Read data from SQLite directly (no Flutter needed)
+            val db = PremithiusDatabase.getInstance(context)
+            val today = System.currentTimeMillis() - 86400000L
+
+            // Tile 1: Mic/Camera RIGHT NOW
+            val telemetry = TelemetryHelper(context)
+            val activeSensors = try { telemetry.getActiveSensors() } catch (e: Exception) { emptyList() }
+            val sensorText = if (activeSensors.isNotEmpty())
+                "⚠️ ${activeSensors.first().appName} active"
+            else "✅ No sensors active"
+            val sensorColor = if (activeSensors.isNotEmpty())
+                R.color.widget_red else R.color.widget_green
+            views.setTextViewText(R.id.tile_sensor, sensorText)
+            views.setInt(R.id.tile_sensor, "setBackgroundColor",
+                context.getColor(sensorColor))
+
+            // Tile 2: Data sent last night (MB)
+            val dataUsage = try { telemetry.getSleepTimeDataUsage() } catch (e: Exception) { emptyList() }
+            val totalMb = dataUsage.sumOf { it.mbSent }.toInt()
+            val dataText = if (totalMb > 0) "📤 ${totalMb}MB sent" else "📤 0MB sent"
+            val dataColor = if (totalMb > 100) R.color.widget_red
+                           else if (totalMb > 20) R.color.widget_amber
+                           else R.color.widget_green
+            views.setTextViewText(R.id.tile_data, dataText)
+            views.setInt(R.id.tile_data, "setBackgroundColor",
+                context.getColor(dataColor))
+
+            // Tile 3: Suspicious permission spikes today
+            val permStats = try { telemetry.getPermissionStats(1) } catch (e: Exception) { emptyList() }
+            val spikeCount = permStats.count { it.totalAccesses > 5 }
+            val spikeText = if (spikeCount > 0) "⚠️ $spikeCount app spikes" else "✅ No spikes"
+            val spikeColor = if (spikeCount > 0) R.color.widget_amber else R.color.widget_green
+            views.setTextViewText(R.id.tile_perms, spikeText)
+            views.setInt(R.id.tile_perms, "setBackgroundColor",
+                context.getColor(spikeColor))
+
+            // Tile 4: Scam SMS + Domains blocked today (combined)
+            val scamCount = try { db.scamLogDao().getCountSince(today) } catch(e:Exception){ 0 }
+            val domainCount = try { db.scamDomainDao().getHitsSince(today) } catch(e:Exception){ 0 }
+            val totalBlocked = scamCount + domainCount
+            val blockedText = if (totalBlocked > 0)
+                "🚨 $totalBlocked blocked" else "✅ 0 blocked"
+            val blockedColor = if (totalBlocked > 0) R.color.widget_red else R.color.widget_green
+            views.setTextViewText(R.id.tile_blocked, blockedText)
+            views.setInt(R.id.tile_blocked, "setBackgroundColor",
+                context.getColor(blockedColor))
+
+            // Tap widget → open Premithius app
+            val launchIntent = context.packageManager.getLaunchIntentForPackage(context.packageName)
+            if (launchIntent != null) {
+                val pendingIntent = PendingIntent.getActivity(
+                    context, 0,
+                    launchIntent,
+                    PendingIntent.FLAG_IMMUTABLE
+                )
+                views.setOnClickPendingIntent(R.id.widget_root, pendingIntent)
+            }
+
+            manager.updateAppWidget(id, views)
+        }
+
+        fun forceRefresh(context: Context) {
+            val intent = Intent(context, PremithiusWidget::class.java)
+            intent.action = AppWidgetManager.ACTION_APPWIDGET_UPDATE
+            val ids = AppWidgetManager.getInstance(context)
+                .getAppWidgetIds(ComponentName(context, PremithiusWidget::class.java))
+            intent.putExtra(AppWidgetManager.EXTRA_APPWIDGET_IDS, ids)
+            context.sendBroadcast(intent)
+        }
+    }
+}

android/app/src/main/kotlin/in/inmodel/premithus/SmsReceiver.kt

@@ -0,0 +1,26 @@
+package `in`.inmodel.premithus
+
+import android.content.BroadcastReceiver
+import android.content.Context
+import android.content.Intent
+import android.provider.Telephony
+
+class SmsReceiver : BroadcastReceiver() {
+    override fun onReceive(context: Context, intent: Intent) {
+        if (intent.action == Telephony.Sms.Intents.SMS_RECEIVED_ACTION) {
+            val messages = Telephony.Sms.Intents.getMessagesFromIntent(intent)
+            for (sms in messages) {
+                val sender = sms.displayOriginatingAddress
+                val messageBody = sms.messageBody
+                
+                // Start OverlayService to analyze SMS using Flutter
+                val serviceIntent = Intent(context, OverlayService::class.java).apply {
+                    putExtra("sender", sender)
+                    putExtra("messageBody", messageBody)
+                    action = "in.inmodel.premithus.ACTION_ANALYZE_SMS"
+                }
+                context.startService(serviceIntent)
+            }
+        }
+    }
+}

android/app/src/main/kotlin/in/inmodel/premithus/TelemetryHelper.kt

@@ -0,0 +1,251 @@
+package `in`.inmodel.premithus
+
+import android.app.AppOpsManager
+import android.app.usage.NetworkStats
+import android.app.usage.NetworkStatsManager
+import android.app.usage.UsageStatsManager
+import android.content.Context
+import android.content.pm.ApplicationInfo
+import android.content.pm.PackageManager
+import android.net.ConnectivityManager
+import android.util.Log
+
+class TelemetryHelper(private val context: Context) {
+
+    // ── Mic/Camera real-time access ─────────────────────────────
+    fun getActiveSensors(): List<SensorAccess> {
+        val appOps = context.getSystemService(AppOpsManager::class.java)
+        val result = mutableListOf<SensorAccess>()
+
+        val packages = context.packageManager
+            .getInstalledApplications(PackageManager.GET_META_DATA)
+
+        for (app in packages) {
+            val micOp = appOps.unsafeCheckOpNoThrow(
+                AppOpsManager.OPSTR_RECORD_AUDIO,
+                app.uid, app.packageName
+            )
+            val camOp = appOps.unsafeCheckOpNoThrow(
+                AppOpsManager.OPSTR_CAMERA,
+                app.uid, app.packageName
+            )
+
+            // MODE_RUNNING = currently active (Android 10+)
+            if (micOp == AppOpsManager.MODE_RUNNING) {
+                result.add(SensorAccess(app.packageName,
+                    getAppName(app.packageName), "microphone", true))
+            }
+            if (camOp == AppOpsManager.MODE_RUNNING) {
+                result.add(SensorAccess(app.packageName,
+                    getAppName(app.packageName), "camera", true))
+            }
+        }
+        return result
+    }
+
+    // ── Permission access counts (last 7 days) ──────────────────
+    fun getPermissionStats(days: Int = 7): List<AppPermissionStat> {
+        val appOps = context.getSystemService(AppOpsManager::class.java)
+        val result = mutableListOf<AppPermissionStat>()
+        val since = System.currentTimeMillis() - (days * 86400000L)
+
+        val ops = listOf(
+            AppOpsManager.OPSTR_RECORD_AUDIO to "microphone",
+            AppOpsManager.OPSTR_CAMERA to "camera",
+            AppOpsManager.OPSTR_FINE_LOCATION to "location",
+            AppOpsManager.OPSTR_READ_CONTACTS to "contacts",
+            AppOpsManager.OPSTR_READ_SMS to "SMS"
+        )
+
+        val packages = context.packageManager
+            .getInstalledApplications(PackageManager.GET_META_DATA)
+
+        for (app in packages) {
+            val stats = mutableMapOf<String, Int>()
+            for ((opStr, label) in ops) {
+                try {
+                    val pkgOps = appOps.getOpsForPackage(
+                        app.uid, app.packageName, arrayOf(opStr)
+                    )
+                    val count = pkgOps?.firstOrNull()?.ops
+                        ?.filter { it.time > since }
+                        ?.size ?: 0
+                    if (count > 0) stats[label] = count
+                } catch (e: Exception) { /* skip */ }
+            }
+            if (stats.isNotEmpty()) {
+                result.add(AppPermissionStat(
+                    packageName = app.packageName,
+                    appName = getAppName(app.packageName),
+                    accessCounts = stats,
+                    isSystemApp = (app.flags and ApplicationInfo.FLAG_SYSTEM) != 0
+                ))
+            }
+        }
+        return result.sortedByDescending { it.totalAccesses }
+    }
+
+    // ── Network data usage (last 24 hours) ──────────────────────
+    fun getSleepTimeDataUsage(): List<AppDataUsage> {
+        if (!hasUsageStatsPermission()) return emptyList()
+
+        val networkStats = context.getSystemService(NetworkStatsManager::class.java)
+        
+        val now = System.currentTimeMillis()
+        val yesterday = now - 86400000L
+
+        val result = mutableListOf<AppDataUsage>()
+
+        try {
+            val summary = networkStats.querySummary(
+                ConnectivityManager.TYPE_MOBILE, null, yesterday, now
+            )
+            val bucket = NetworkStats.Bucket()
+            val appTotals = mutableMapOf<Int, Long>() // uid → bytes sent
+
+            while (summary.hasNextBucket()) {
+                summary.getNextBucket(bucket)
+                val uid = bucket.uid
+                if (uid > 1000) { // skip system UIDs
+                    appTotals[uid] = (appTotals[uid] ?: 0) + bucket.txBytes
+                }
+            }
+            summary.close()
+
+            val pm = context.packageManager
+            for ((uid, bytes) in appTotals) {
+                if (bytes < 100_000) continue // skip < 100KB
+                try {
+                    val pkgs = pm.getPackagesForUid(uid) ?: continue
+                    val pkg = pkgs.first()
+                    val appName = getAppName(pkg)
+                    result.add(AppDataUsage(
+                        packageName = pkg,
+                        appName = appName,
+                        bytesSent = bytes,
+                        mbSent = bytes / 1_048_576.0
+                    ))
+                } catch (e: Exception) { /* skip */ }
+            }
+        } catch (e: Exception) {
+            Log.e("TelemetryHelper", "Network stats error: ${e.message}")
+        }
+
+        return result.sortedByDescending { it.bytesSent }
+    }
+
+    // ── Story generator ─────────────────────────────────────────
+    fun generatePrivacyStories(
+        sensors: List<SensorAccess>,
+        permissions: List<AppPermissionStat>,
+        dataUsage: List<AppDataUsage>
+    ): List<PrivacyStory> {
+        val stories = mutableListOf<PrivacyStory>()
+
+        for (sensor in sensors) {
+            stories.add(PrivacyStory(
+                severity = "CRITICAL",
+                emoji = if (sensor.sensor == "microphone") "🎙️" else "📷",
+                english = "${sensor.appName} is ${sensor.sensor} RIGHT NOW",
+                hindi = "${sensor.appName} अभी आपका ${
+                    if (sensor.sensor == "microphone") "माइक" else "कैमरा"
+                } इस्तेमाल कर रहा है",
+                packageName = sensor.packageName
+            ))
+        }
+
+        for (app in permissions.take(5)) {
+            val micCount = app.accessCounts["microphone"] ?: 0
+            val locCount = app.accessCounts["location"] ?: 0
+            val contactCount = app.accessCounts["contacts"] ?: 0
+
+            if (micCount > 10) {
+                stories.add(PrivacyStory(
+                    severity = "HIGH",
+                    emoji = "🎙️",
+                    english = "${app.appName} accessed your microphone $micCount times this week",
+                    hindi = "${app.appName} ने इस हफ्ते $micCount बार माइक एक्सेस किया",
+                    packageName = app.packageName
+                ))
+            }
+            if (locCount > 20) {
+                stories.add(PrivacyStory(
+                    severity = "HIGH",
+                    emoji = "📍",
+                    english = "${app.appName} tracked your location $locCount times this week",
+                    hindi = "${app.appName} ने $locCount बार आपकी लोकेशन ट्रैक की",
+                    packageName = app.packageName
+                ))
+            }
+            if (contactCount > 0 && !isCommunicationApp(app.packageName)) {
+                stories.add(PrivacyStory(
+                    severity = "MEDIUM",
+                    emoji = "👥",
+                    english = "${app.appName} read your contacts — this app doesn't need them",
+                    hindi = "${app.appName} ने आपके contacts पढ़े — इस app को इसकी जरूरत नहीं",
+                    packageName = app.packageName
+                ))
+            }
+        }
+
+        for (app in dataUsage.take(3)) {
+            if (app.mbSent > 50) {
+                stories.add(PrivacyStory(
+                    severity = "MEDIUM",
+                    emoji = "📤",
+                    english = "${app.appName} sent ${app.mbSent.toInt()} MB of your data",
+                    hindi = "${app.appName} ने आपका ${app.mbSent.toInt()} MB डेटा भेजा",
+                    packageName = app.packageName
+                ))
+            }
+        }
+
+        if (stories.isEmpty()) {
+            stories.add(PrivacyStory(
+                severity = "SAFE",
+                emoji = "✅",
+                english = "No suspicious activity detected in the last 24 hours",
+                hindi = "पिछले 24 घंटों में कोई संदिग्ध गतिविधि नहीं मिली",
+                packageName = ""
+            ))
+        }
+
+        return stories.sortedBy {
+            when (it.severity) { "CRITICAL" -> 0; "HIGH" -> 1; "MEDIUM" -> 2; else -> 3 }
+        }
+    }
+
+    fun hasUsageStatsPermission(): Boolean {
+        val appOps = context.getSystemService(AppOpsManager::class.java)
+        val mode = appOps.unsafeCheckOpNoThrow(
+            AppOpsManager.OPSTR_GET_USAGE_STATS,
+            android.os.Process.myUid(), context.packageName
+        )
+        return mode == AppOpsManager.MODE_ALLOWED
+    }
+
+    private fun getAppName(packageName: String): String {
+        return try {
+            val ai = context.packageManager.getApplicationInfo(packageName, 0)
+            context.packageManager.getApplicationLabel(ai).toString()
+        } catch (e: Exception) { packageName }
+    }
+
+    private fun isCommunicationApp(pkg: String): Boolean {
+        return pkg.contains("whatsapp") || pkg.contains("telegram") ||
+               pkg.contains("signal") || pkg.contains("gmail") ||
+               pkg.contains("message") || pkg.contains("dialer")
+    }
+}
+
+// Data classes
+data class SensorAccess(val packageName: String, val appName: String,
+    val sensor: String, val isActive: Boolean)
+data class AppPermissionStat(val packageName: String, val appName: String,
+    val accessCounts: Map<String, Int>, val isSystemApp: Boolean) {
+    val totalAccesses get() = accessCounts.values.sum()
+}
+data class AppDataUsage(val packageName: String, val appName: String,
+    val bytesSent: Long, val mbSent: Double)
+data class PrivacyStory(val severity: String, val emoji: String,
+    val english: String, val hindi: String, val packageName: String)

android/app/src/main/res/drawable-v21/launch_background.xml

@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Modify this file to customize your launch splash screen -->
+<layer-list xmlns:android="http://schemas.android.com/apk/res/android">
+    <item android:drawable="?android:colorBackground" />
+
+    <!-- You can insert your own image assets here -->
+    <!-- <item>
+        <bitmap
+            android:gravity="center"
+            android:src="@mipmap/launch_image" />
+    </item> -->
+</layer-list>

android/app/src/main/res/drawable/launch_background.xml

@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Modify this file to customize your launch splash screen -->
+<layer-list xmlns:android="http://schemas.android.com/apk/res/android">
+    <item android:drawable="@android:color/white" />
+
+    <!-- You can insert your own image assets here -->
+    <!-- <item>
+        <bitmap
+            android:gravity="center"
+            android:src="@mipmap/launch_image" />
+    </item> -->
+</layer-list>

android/app/src/main/res/layout/widget_4x2.xml

@@ -0,0 +1,85 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:orientation="vertical"
+    android:background="#2E2E2E"
+    android:padding="8dp">
+
+    <!-- Grid for Threat Metrics -->
+    <LinearLayout
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:orientation="horizontal"
+        android:weightSum="4">
+
+        <!-- Tile 1 -->
+        <LinearLayout
+            android:id="@+id/mic_tile"
+            android:layout_width="0dp"
+            android:layout_height="wrap_content"
+            android:layout_weight="1"
+            android:orientation="vertical"
+            android:gravity="center"
+            android:padding="8dp">
+            <TextView android:text="MIC SPY" android:textSize="10sp" android:textColor="#888" android:layout_width="wrap_content" android:layout_height="wrap_content"/>
+            <TextView android:id="@+id/mic_value" android:text="0" android:textSize="18sp" android:textStyle="bold" android:textColor="#FFF" android:layout_width="wrap_content" android:layout_height="wrap_content"/>
+        </LinearLayout>
+
+        <!-- Tile 2 -->
+        <LinearLayout
+            android:layout_width="0dp"
+            android:layout_height="wrap_content"
+            android:layout_weight="1"
+            android:orientation="vertical"
+            android:gravity="center"
+            android:padding="8dp">
+            <TextView android:text="NIGHT DATA" android:textSize="10sp" android:textColor="#888" android:layout_width="wrap_content" android:layout_height="wrap_content"/>
+            <TextView android:id="@+id/data_value" android:text="0 MB" android:textSize="18sp" android:textStyle="bold" android:textColor="#FFF" android:layout_width="wrap_content" android:layout_height="wrap_content"/>
+        </LinearLayout>
+
+        <!-- Tile 3 -->
+        <LinearLayout
+            android:layout_width="0dp"
+            android:layout_height="wrap_content"
+            android:layout_weight="1"
+            android:orientation="vertical"
+            android:gravity="center"
+            android:padding="8dp">
+            <TextView android:text="PERMISSIONS" android:textSize="10sp" android:textColor="#888" android:layout_width="wrap_content" android:layout_height="wrap_content"/>
+            <TextView android:id="@+id/perm_value" android:text="0" android:textSize="18sp" android:textStyle="bold" android:textColor="#FFF" android:layout_width="wrap_content" android:layout_height="wrap_content"/>
+        </LinearLayout>
+
+        <!-- Tile 4 -->
+        <LinearLayout
+            android:layout_width="0dp"
+            android:layout_height="wrap_content"
+            android:layout_weight="1"
+            android:orientation="vertical"
+            android:gravity="center"
+            android:padding="8dp">
+            <TextView android:text="SCAMS" android:textSize="10sp" android:textColor="#888" android:layout_width="wrap_content" android:layout_height="wrap_content"/>
+            <TextView android:id="@+id/scam_value" android:text="0" android:textSize="18sp" android:textStyle="bold" android:textColor="#FFF" android:layout_width="wrap_content" android:layout_height="wrap_content"/>
+        </LinearLayout>
+    </LinearLayout>
+
+    <!-- Alert Banner -->
+    <LinearLayout
+        android:id="@+id/alert_banner"
+        android:layout_width="match_parent"
+        android:layout_height="wrap_content"
+        android:orientation="horizontal"
+        android:background="#D32F2F"
+        android:visibility="gone"
+        android:padding="8dp"
+        android:layout_marginTop="8dp">
+        <TextView
+            android:id="@+id/alert_text"
+            android:layout_width="match_parent"
+            android:layout_height="wrap_content"
+            android:text="Alert Message Here"
+            android:textColor="#FFFFFF"
+            android:textSize="12sp"
+            android:textStyle="bold" />
+    </LinearLayout>
+</LinearLayout>

android/app/src/main/res/layout/widget_layout.xml

@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android"
+    android:id="@+id/widget_root"
+    android:layout_width="match_parent"
+    android:layout_height="match_parent"
+    android:orientation="horizontal"
+    android:background="#CC1A1A2E"
+    android:padding="8dp">
+
+    <LinearLayout
+        android:layout_width="0dp"
+        android:layout_height="match_parent"
+        android:layout_weight="1"
+        android:orientation="vertical"
+        android:padding="6dp"
+        android:layout_marginEnd="4dp">
+        <TextView android:layout_width="wrap_content" android:layout_height="wrap_content" android:text="🎙️ Mic/Cam" android:textColor="#FFFFFF" android:textSize="12sp"/>
+        <TextView android:id="@+id/tile_sensor" android:layout_width="match_parent" android:layout_height="match_parent" android:textColor="#FFFFFF" android:textSize="14sp" android:textStyle="bold" android:layout_marginTop="4dp" android:gravity="center" android:padding="4dp"/>
+    </LinearLayout>
+
+    <LinearLayout
+        android:layout_width="0dp"
+        android:layout_height="match_parent"
+        android:layout_weight="1"
+        android:orientation="vertical"
+        android:padding="6dp"
+        android:layout_marginEnd="4dp">
+        <TextView android:layout_width="wrap_content" android:layout_height="wrap_content" android:text="📤 Data Sent" android:textColor="#FFFFFF" android:textSize="12sp"/>
+        <TextView android:id="@+id/tile_data" android:layout_width="match_parent" android:layout_height="match_parent" android:textColor="#FFFFFF" android:textSize="14sp" android:textStyle="bold" android:layout_marginTop="4dp" android:gravity="center" android:padding="4dp"/>
+    </LinearLayout>
+
+    <LinearLayout
+        android:layout_width="0dp"
+        android:layout_height="match_parent"
+        android:layout_weight="1"
+        android:orientation="vertical"
+        android:padding="6dp"
+        android:layout_marginEnd="4dp">
+        <TextView android:layout_width="wrap_content" android:layout_height="wrap_content" android:text="⚠️ App Spikes" android:textColor="#FFFFFF" android:textSize="12sp"/>
+        <TextView android:id="@+id/tile_perms" android:layout_width="match_parent" android:layout_height="match_parent" android:textColor="#FFFFFF" android:textSize="14sp" android:textStyle="bold" android:layout_marginTop="4dp" android:gravity="center" android:padding="4dp"/>
+    </LinearLayout>
+
+    <LinearLayout
+        android:layout_width="0dp"
+        android:layout_height="match_parent"
+        android:layout_weight="1"
+        android:orientation="vertical"
+        android:padding="6dp">
+        <TextView android:layout_width="wrap_content" android:layout_height="wrap_content" android:text="🛡️ Blocked" android:textColor="#FFFFFF" android:textSize="12sp"/>
+        <TextView android:id="@+id/tile_blocked" android:layout_width="match_parent" android:layout_height="match_parent" android:textColor="#FFFFFF" android:textSize="14sp" android:textStyle="bold" android:layout_marginTop="4dp" android:gravity="center" android:padding="4dp"/>
+    </LinearLayout>
+</LinearLayout>

android/app/src/main/res/values-night/styles.xml

@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="utf-8"?>
+<resources>
+    <!-- Theme applied to the Android Window while the process is starting when the OS's Dark Mode setting is on -->
+    <style name="LaunchTheme" parent="@android:style/Theme.Black.NoTitleBar">
+        <!-- Show a splash screen on the activity. Automatically removed when
+             the Flutter engine draws its first frame -->
+        <item name="android:windowBackground">@drawable/launch_background</item>
+    </style>
+    <!-- Theme applied to the Android Window as soon as the process has started.
+         This theme determines the color of the Android Window while your
+         Flutter UI initializes, as well as behind your Flutter UI while its
+         running.
+
+         This Theme is only used starting with V2 of Flutter's Android embedding. -->
+    <style name="NormalTheme" parent="@android:style/Theme.Black.NoTitleBar">
+        <item name="android:windowBackground">?android:colorBackground</item>
+    </style>
+</resources>

android/app/src/main/res/values/colors.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+<resources>
+    <color name="widget_red">#FFCC2222</color>
+    <color name="widget_amber">#FFCC7700</color>
+    <color name="widget_green">#FF227722</color>
+    <color name="widget_neutral">#FF333355</color>
+</resources>

android/app/src/main/res/values/strings.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="utf-8"?>
+<resources>
+    <string name="app_name">Premithius</string>
+    <string name="accessibility_label">Premithius Shield</string>
+    <string name="accessibility_description">Premithius uses Accessibility to detect scam apps opening and protect your privacy. No data leaves your device.</string>
+    <string name="accessibility_summary">App protection and scam detection</string>
+    <string name="widget_description">Premithius live security summary</string>
+</resources>

android/app/src/main/res/values/styles.xml

@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="utf-8"?>
+<resources>
+    <!-- Theme applied to the Android Window while the process is starting when the OS's Dark Mode setting is off -->
+    <style name="LaunchTheme" parent="@android:style/Theme.Light.NoTitleBar">
+        <!-- Show a splash screen on the activity. Automatically removed when
+             the Flutter engine draws its first frame -->
+        <item name="android:windowBackground">@drawable/launch_background</item>
+    </style>
+    <!-- Theme applied to the Android Window as soon as the process has started.
+         This theme determines the color of the Android Window while your
+         Flutter UI initializes, as well as behind your Flutter UI while its
+         running.
+
+         This Theme is only used starting with V2 of Flutter's Android embedding. -->
+    <style name="NormalTheme" parent="@android:style/Theme.Light.NoTitleBar">
+        <item name="android:windowBackground">?android:colorBackground</item>
+    </style>
+</resources>

android/app/src/main/res/xml/accessibility_service_config.xml

@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="utf-8"?>
+<accessibility-service
+    xmlns:android="http://schemas.android.com/apk/res/android"
+    android:accessibilityEventTypes="typeWindowStateChanged|typeWindowContentChanged"
+    android:accessibilityFeedbackType="feedbackGeneric"
+    android:accessibilityFlags="flagReportViewIds|flagRetrieveInteractiveWindows"
+    android:canRetrieveWindowContent="true"
+    android:description="@string/accessibility_description"
+    android:notificationTimeout="100"
+    android:settingsActivity="in.inmodel.premithus.MainActivity"
+    android:summary="@string/accessibility_summary"/>

android/app/src/main/res/xml/method.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+<input-method xmlns:android="http://schemas.android.com/apk/res/android"
+    android:supportsInlineSuggestions="true">
+    <subtype
+        android:imeSubtypeLocale="en_US"
+        android:imeSubtypeMode="keyboard" />
+</input-method>

android/app/src/main/res/xml/premithius_widget_info.xml

@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?>
+<appwidget-provider xmlns:android="http://schemas.android.com/apk/res/android"
+    android:minWidth="250dp"
+    android:minHeight="110dp"
+    android:targetCellWidth="4"
+    android:targetCellHeight="2"
+    android:updatePeriodMillis="1800000"
+    android:initialLayout="@layout/widget_layout"
+    android:widgetCategory="home_screen"
+    android:resizeMode="horizontal|vertical"
+    android:description="@string/widget_description">
+</appwidget-provider>

android/app/src/profile/AndroidManifest.xml

@@ -0,0 +1,7 @@
+<manifest xmlns:android="http://schemas.android.com/apk/res/android">
+    <!-- The INTERNET permission is required for development. Specifically,
+         the Flutter tool needs it to communicate with the running application
+         to allow setting breakpoints, to provide hot reload, etc.
+    -->
+    <uses-permission android:name="android.permission.INTERNET"/>
+</manifest>

android/build.gradle.kts

@@ -0,0 +1,25 @@
+allprojects {
+    repositories {
+        google()
+        mavenCentral()
+        maven { url = uri("https://jitpack.io") }
+    }
+}
+
+val newBuildDir: Directory =
+    rootProject.layout.buildDirectory
+        .dir("../../build")
+        .get()
+rootProject.layout.buildDirectory.value(newBuildDir)
+
+subprojects {
+    val newSubprojectBuildDir: Directory = newBuildDir.dir(project.name)
+    project.layout.buildDirectory.value(newSubprojectBuildDir)
+}
+subprojects {
+    project.evaluationDependsOn(":app")
+}
+
+tasks.register<Delete>("clean") {
+    delete(rootProject.layout.buildDirectory)
+}

android/gradle.properties

@@ -0,0 +1,2 @@
+org.gradle.jvmargs=-Xmx8G -XX:MaxMetaspaceSize=4G -XX:ReservedCodeCacheSize=512m -XX:+HeapDumpOnOutOfMemoryError
+android.useAndroidX=true

android/gradle/wrapper/gradle-wrapper.properties

@@ -0,0 +1,5 @@
+distributionBase=GRADLE_USER_HOME
+distributionPath=wrapper/dists
+zipStoreBase=GRADLE_USER_HOME
+zipStorePath=wrapper/dists
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.14-all.zip

android/settings.gradle.kts

@@ -0,0 +1,26 @@
+pluginManagement {
+    val flutterSdkPath =
+        run {
+            val properties = java.util.Properties()
+            file("local.properties").inputStream().use { properties.load(it) }
+            val flutterSdkPath = properties.getProperty("flutter.sdk")
+            require(flutterSdkPath != null) { "flutter.sdk not set in local.properties" }
+            flutterSdkPath
+        }
+
+    includeBuild("$flutterSdkPath/packages/flutter_tools/gradle")
+
+    repositories {
+        google()
+        mavenCentral()
+        gradlePluginPortal()
+    }
+}
+
+plugins {
+    id("dev.flutter.flutter-plugin-loader") version "1.0.0"
+    id("com.android.application") version "8.11.1" apply false
+    id("org.jetbrains.kotlin.android") version "2.2.20" apply false
+}
+
+include(":app")

assets/blocklist/india_scam_domains.txt

@@ -0,0 +1,68 @@
+# KYC Fraud domains
+hdfcbank-kyc.net
+sbi-kyc-verify.top
+icici-kyc-update.xyz
+axis-kyc-expire.click
+pnb-kyc-alert.com
+bob-kyc-update.in
+
+# Fake bank portals
+netbanking-hdfc.com
+sbi-netbanking.xyz
+icici-ibank.top
+hdfc-secure-login.net
+axisbank-online-secure.com
+sbi-reward-points.online
+hdfc-reward-redeem.in
+icici-card-block.xyz
+
+# UPI Fraud domains
+upi-reward-claim.xyz
+paytm-cashback-offer.top
+phonepe-winner.click
+gpay-prize.tk
+bhim-upi-cashback.in
+upi-refund-process.top
+phonepe-support-care.com
+
+# Lottery / Prize scams
+india-lottery-winner.net
+bsnl-prize-claim.xyz
+jio-recharge-free.top
+airtel-winner-prize.click
+kbc-lottery-winner.in
+tata-safari-winner.club
+mahindra-thar-prize.com
+
+# Fake government portals
+pm-kisan-apply.xyz
+aadhar-update-now.top
+pan-verify-online.click
+income-tax-refund.net
+epfo-claim-status.in
+passport-sewa-india.org
+voter-id-verify.online
+cowin-certificate-download.click
+
+# Investment scams
+trading-profit-india.xyz
+stock-tip-guaranteed.top
+crypto-india-profit.click
+bitcoin-doubler.in
+nse-bse-tips.club
+zerodha-trading-bonus.online
+
+# Loan app harassment
+insta-loan-now.xyz
+quick-cash-app.top
+easy-money-india.click
+dhani-loan-approve.in
+kreditbee-instant.site
+navi-loan-offer.xyz
+
+# Extortion / Threats
+cyber-crime-notice.in
+cbi-investigation-portal.org
+rbi-penalty-payment.com
+customs-clearance-fee.xyz
+trai-number-block.top

build_err.txt

@@ -0,0 +1,296 @@
+Running Gradle task 'assembleDebug'...                          
+
+FAILURE: Build failed with an exception.
+
+* What went wrong:
+Execution failed for task ':llama_sdk:configureCMakeDebug[arm64-v8a]'.
+> [CXX1429] error when building with cmake using /Users/friday/.pub-cache/git/lcpp-7c2f8423e87781859acc514cd0aa36554f423163/android/CMakeLists.txt: -- The C compiler identification is Clang 18.0.1
+  -- The CXX compiler identification is Clang 18.0.1
+  -- Detecting C compiler ABI info
+  -- Detecting C compiler ABI info - done
+  -- Check for working C compiler: /Users/friday/Library/Android/sdk/ndk/27.0.12077973/toolchains/llvm/prebuilt/darwin-x86_64/bin/clang - skipped
+  -- Detecting C compile features
+  -- Detecting C compile features - done
+  -- Detecting CXX compiler ABI info
+  -- Detecting CXX compiler ABI info - done
+  -- Check for working CXX compiler: /Users/friday/Library/Android/sdk/ndk/27.0.12077973/toolchains/llvm/prebuilt/darwin-x86_64/bin/clang++ - skipped
+  -- Detecting CXX compile features
+  -- Detecting CXX compile features - done
+  -- Configuring incomplete, errors occurred!
+  See also "/Users/friday/.pub-cache/git/lcpp-7c2f8423e87781859acc514cd0aa36554f423163/android/.cxx/Debug/1y5h19dr/arm64-v8a/CMakeFiles/CMakeOutput.log".
+
+  C++ build system [configure] failed while executing:
+      /Users/friday/Library/Android/sdk/cmake/3.22.1/bin/cmake \
+        -H/Users/friday/.pub-cache/git/lcpp-7c2f8423e87781859acc514cd0aa36554f423163/android \
+        -DCMAKE_SYSTEM_NAME=Android \
+        -DCMAKE_EXPORT_COMPILE_COMMANDS=ON \
+        -DCMAKE_SYSTEM_VERSION=23 \
+        -DANDROID_PLATFORM=android-23 \
+        -DANDROID_ABI=arm64-v8a \
+        -DCMAKE_ANDROID_ARCH_ABI=arm64-v8a \
+        -DANDROID_NDK=/Users/friday/Library/Android/sdk/ndk/27.0.12077973 \
+        -DCMAKE_ANDROID_NDK=/Users/friday/Library/Android/sdk/ndk/27.0.12077973 \
+        -DCMAKE_TOOLCHAIN_FILE=/Users/friday/Library/Android/sdk/ndk/27.0.12077973/build/cmake/android.toolchain.cmake \
+        -DCMAKE_MAKE_PROGRAM=/Users/friday/Library/Android/sdk/cmake/3.22.1/bin/ninja \
+        -DCMAKE_LIBRARY_OUTPUT_DIRECTORY=/Users/friday/premithus/build/llama_sdk/intermediates/cxx/Debug/1y5h19dr/obj/arm64-v8a \
+        -DCMAKE_RUNTIME_OUTPUT_DIRECTORY=/Users/friday/premithus/build/llama_sdk/intermediates/cxx/Debug/1y5h19dr/obj/arm64-v8a \
+        -DCMAKE_BUILD_TYPE=Debug \
+        -B/Users/friday/.pub-cache/git/lcpp-7c2f8423e87781859acc514cd0aa36554f423163/android/.cxx/Debug/1y5h19dr/arm64-v8a \
+        -GNinja
+    from /Users/friday/.pub-cache/git/lcpp-7c2f8423e87781859acc514cd0aa36554f423163/android
+  CMake Error at CMakeLists.txt:15 (add_subdirectory):
+    The source directory
+
+      /Users/friday/.pub-cache/git/lcpp-7c2f8423e87781859acc514cd0aa36554f423163/src/llama_cpp
+
+    does not contain a CMakeLists.txt file.
+
+
+  CMake Error at CMakeLists.txt:17 (target_include_directories):
+    Cannot specify include directories for target "llama" which is not built by
+    this project.
+
+
+  CMake Error at CMakeLists.txt:23 (target_sources):
+    Cannot specify sources for target "llama" which is not built by this
+    project.
+
+
+  CMake Error at CMakeLists.txt:30 (target_compile_options):
+    Cannot specify compile options for target "llama" which is not built by
+    this project.
+
+
+  CMake Error at CMakeLists.txt:39 (target_link_options):
+    Cannot specify link options for target "llama" which is not built by this
+    project.
+
+
+  CMake Error at CMakeLists.txt:49 (target_compile_options):
+    Cannot specify compile options for target "llama" which is not built by
+    this project. : com.android.ide.common.process.ProcessException: -- The C compiler identification is Clang 18.0.1
+  -- The CXX compiler identification is Clang 18.0.1
+  -- Detecting C compiler ABI info
+  -- Detecting C compiler ABI info - done
+  -- Check for working C compiler: /Users/friday/Library/Android/sdk/ndk/27.0.12077973/toolchains/llvm/prebuilt/darwin-x86_64/bin/clang - skipped
+  -- Detecting C compile features
+  -- Detecting C compile features - done
+  -- Detecting CXX compiler ABI info
+  -- Detecting CXX compiler ABI info - done
+  -- Check for working CXX compiler: /Users/friday/Library/Android/sdk/ndk/27.0.12077973/toolchains/llvm/prebuilt/darwin-x86_64/bin/clang++ - skipped
+  -- Detecting CXX compile features
+  -- Detecting CXX compile features - done
+  -- Configuring incomplete, errors occurred!
+  See also "/Users/friday/.pub-cache/git/lcpp-7c2f8423e87781859acc514cd0aa36554f423163/android/.cxx/Debug/1y5h19dr/arm64-v8a/CMakeFiles/CMakeOutput.log".
+
+  C++ build system [configure] failed while executing:
+      /Users/friday/Library/Android/sdk/cmake/3.22.1/bin/cmake \
+        -H/Users/friday/.pub-cache/git/lcpp-7c2f8423e87781859acc514cd0aa36554f423163/android \
+        -DCMAKE_SYSTEM_NAME=Android \
+        -DCMAKE_EXPORT_COMPILE_COMMANDS=ON \
+        -DCMAKE_SYSTEM_VERSION=23 \
+        -DANDROID_PLATFORM=android-23 \
+        -DANDROID_ABI=arm64-v8a \
+        -DCMAKE_ANDROID_ARCH_ABI=arm64-v8a \
+        -DANDROID_NDK=/Users/friday/Library/Android/sdk/ndk/27.0.12077973 \
+        -DCMAKE_ANDROID_NDK=/Users/friday/Library/Android/sdk/ndk/27.0.12077973 \
+        -DCMAKE_TOOLCHAIN_FILE=/Users/friday/Library/Android/sdk/ndk/27.0.12077973/build/cmake/android.toolchain.cmake \
+        -DCMAKE_MAKE_PROGRAM=/Users/friday/Library/Android/sdk/cmake/3.22.1/bin/ninja \
+        -DCMAKE_LIBRARY_OUTPUT_DIRECTORY=/Users/friday/premithus/build/llama_sdk/intermediates/cxx/Debug/1y5h19dr/obj/arm64-v8a \
+        -DCMAKE_RUNTIME_OUTPUT_DIRECTORY=/Users/friday/premithus/build/llama_sdk/intermediates/cxx/Debug/1y5h19dr/obj/arm64-v8a \
+        -DCMAKE_BUILD_TYPE=Debug \
+        -B/Users/friday/.pub-cache/git/lcpp-7c2f8423e87781859acc514cd0aa36554f423163/android/.cxx/Debug/1y5h19dr/arm64-v8a \
+        -GNinja
+    from /Users/friday/.pub-cache/git/lcpp-7c2f8423e87781859acc514cd0aa36554f423163/android
+  CMake Error at CMakeLists.txt:15 (add_subdirectory):
+    The source directory
+
+      /Users/friday/.pub-cache/git/lcpp-7c2f8423e87781859acc514cd0aa36554f423163/src/llama_cpp
+
+    does not contain a CMakeLists.txt file.
+
+
+  CMake Error at CMakeLists.txt:17 (target_include_directories):
+    Cannot specify include directories for target "llama" which is not built by
+    this project.
+
+
+  CMake Error at CMakeLists.txt:23 (target_sources):
+    Cannot specify sources for target "llama" which is not built by this
+    project.
+
+
+  CMake Error at CMakeLists.txt:30 (target_compile_options):
+    Cannot specify compile options for target "llama" which is not built by
+    this project.
+
+
+  CMake Error at CMakeLists.txt:39 (target_link_options):
+    Cannot specify link options for target "llama" which is not built by this
+    project.
+
+
+  CMake Error at CMakeLists.txt:49 (target_compile_options):
+    Cannot specify compile options for target "llama" which is not built by
+    this project.
+  	at com.android.build.gradle.internal.cxx.process.ExecuteProcessKt.execute(ExecuteProcess.kt:288)
+  	at com.android.build.gradle.internal.cxx.process.ExecuteProcessKt$executeProcess$1.invoke(ExecuteProcess.kt:108)
+  	at com.android.build.gradle.internal.cxx.process.ExecuteProcessKt$executeProcess$1.invoke(ExecuteProcess.kt:106)
+  	at com.android.build.gradle.internal.cxx.timing.TimingEnvironmentKt.time(TimingEnvironment.kt:32)
+  	at com.android.build.gradle.internal.cxx.process.ExecuteProcessKt.executeProcess(ExecuteProcess.kt:106)
+  	at com.android.build.gradle.internal.cxx.process.ExecuteProcessKt.executeProcess$default(ExecuteProcess.kt:85)
+  	at com.android.build.gradle.tasks.CmakeQueryMetadataGenerator.executeProcess(CmakeFileApiMetadataGenerator.kt:59)
+  	at com.android.build.gradle.tasks.ExternalNativeJsonGenerator$configureOneAbi$1$1$3.invoke(ExternalNativeJsonGenerator.kt:247)
+  	at com.android.build.gradle.tasks.ExternalNativeJsonGenerator$configureOneAbi$1$1$3.invoke(ExternalNativeJsonGenerator.kt:247)
+  	at com.android.build.gradle.internal.cxx.timing.TimingEnvironmentKt.time(TimingEnvironment.kt:32)
+  	at com.android.build.gradle.tasks.ExternalNativeJsonGenerator.configureOneAbi(ExternalNativeJsonGenerator.kt:247)
+  	at com.android.build.gradle.tasks.ExternalNativeJsonGenerator.configure(ExternalNativeJsonGenerator.kt:113)
+  	at com.android.build.gradle.tasks.ExternalNativeBuildJsonTask.doTaskAction(ExternalNativeBuildJsonTask.kt:89)
+  	at com.android.build.gradle.internal.tasks.UnsafeOutputsTask$taskAction$$inlined$recordTaskAction$1.invoke(BaseTask.kt:59)
+  	at com.android.build.gradle.internal.tasks.Blocks.recordSpan(Blocks.java:51)
+  	at com.android.build.gradle.internal.tasks.UnsafeOutputsTask.taskAction(UnsafeOutputsTask.kt:81)
+  	at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(Unknown Source)
+  	at java.base/java.lang.reflect.Method.invoke(Unknown Source)
+  	at org.gradle.internal.reflect.JavaMethod.invoke(JavaMethod.java:125)
+  	at org.gradle.api.internal.project.taskfactory.StandardTaskAction.doExecute(StandardTaskAction.java:58)
+  	at org.gradle.api.internal.project.taskfactory.StandardTaskAction.execute(StandardTaskAction.java:51)
+  	at org.gradle.api.internal.project.taskfactory.StandardTaskAction.execute(StandardTaskAction.java:29)
+  	at org.gradle.api.internal.tasks.execution.TaskExecution$3.run(TaskExecution.java:244)
+  	at org.gradle.internal.operations.DefaultBuildOperationRunner$1.execute(DefaultBuildOperationRunner.java:30)
+  	at org.gradle.internal.operations.DefaultBuildOperationRunner$1.execute(DefaultBuildOperationRunner.java:27)
+  	at org.gradle.internal.operations.DefaultBuildOperationRunner$2.execute(DefaultBuildOperationRunner.java:67)
+  	at org.gradle.internal.operations.DefaultBuildOperationRunner$2.execute(DefaultBuildOperationRunner.java:60)
+  	at org.gradle.internal.operations.DefaultBuildOperationRunner.execute(DefaultBuildOperationRunner.java:167)
+  	at org.gradle.internal.operations.DefaultBuildOperationRunner.execute(DefaultBuildOperationRunner.java:60)
+  	at org.gradle.internal.operations.DefaultBuildOperationRunner.run(DefaultBuildOperationRunner.java:48)
+  	at org.gradle.api.internal.tasks.execution.TaskExecution.executeAction(TaskExecution.java:229)
+  	at org.gradle.api.internal.tasks.execution.TaskExecution.executeActions(TaskExecution.java:212)
+  	at org.gradle.api.internal.tasks.execution.TaskExecution.executeWithPreviousOutputFiles(TaskExecution.java:195)
+  	at org.gradle.api.internal.tasks.execution.TaskExecution.execute(TaskExecution.java:162)
+  	at org.gradle.internal.execution.steps.ExecuteStep.executeInternal(ExecuteStep.java:105)
+  	at org.gradle.internal.execution.steps.ExecuteStep.access$000(ExecuteStep.java:44)
+  	at org.gradle.internal.execution.steps.ExecuteStep$1.call(ExecuteStep.java:59)
+  	at org.gradle.internal.execution.steps.ExecuteStep$1.call(ExecuteStep.java:56)
+  	at org.gradle.internal.operations.DefaultBuildOperationRunner$CallableBuildOperationWorker.execute(DefaultBuildOperationRunner.java:210)
+  	at org.gradle.internal.operations.DefaultBuildOperationRunner$CallableBuildOperationWorker.execute(DefaultBuildOperationRunner.java:205)
+  	at org.gradle.internal.operations.DefaultBuildOperationRunner$2.execute(DefaultBuildOperationRunner.java:67)
+  	at org.gradle.internal.operations.DefaultBuildOperationRunner$2.execute(DefaultBuildOperationRunner.java:60)
+  	at org.gradle.internal.operations.DefaultBuildOperationRunner.execute(DefaultBuildOperationRunner.java:167)
+  	at org.gradle.internal.operations.DefaultBuildOperationRunner.execute(DefaultBuildOperationRunner.java:60)
+  	at org.gradle.internal.operations.DefaultBuildOperationRunner.call(DefaultBuildOperationRunner.java:54)
+  	at org.gradle.internal.execution.steps.ExecuteStep.execute(ExecuteStep.java:56)
+  	at org.gradle.internal.execution.steps.ExecuteStep.execute(ExecuteStep.java:44)
+  	at org.gradle.internal.execution.steps.CancelExecutionStep.execute(CancelExecutionStep.java:42)
+  	at org.gradle.internal.execution.steps.TimeoutStep.executeWithoutTimeout(TimeoutStep.java:75)
+  	at org.gradle.internal.execution.steps.TimeoutStep.execute(TimeoutStep.java:55)
+  	at org.gradle.internal.execution.steps.PreCreateOutputParentsStep.execute(PreCreateOutputParentsStep.java:50)
+  	at org.gradle.internal.execution.steps.PreCreateOutputParentsStep.execute(PreCreateOutputParentsStep.java:28)
+  	at org.gradle.internal.execution.steps.RemovePreviousOutputsStep.execute(RemovePreviousOutputsStep.java:67)
+  	at org.gradle.internal.execution.steps.RemovePreviousOutputsStep.execute(RemovePreviousOutputsStep.java:37)
+  	at org.gradle.internal.execution.steps.BroadcastChangingOutputsStep.execute(BroadcastChangingOutputsStep.java:61)
+  	at org.gradle.internal.execution.steps.BroadcastChangingOutputsStep.execute(BroadcastChangingOutputsStep.java:26)
+  	at org.gradle.internal.execution.steps.CaptureOutputsAfterExecutionStep.execute(CaptureOutputsAfterExecutionStep.java:69)
+  	at org.gradle.internal.execution.steps.CaptureOutputsAfterExecutionStep.execute(CaptureOutputsAfterExecutionStep.java:46)
+  	at org.gradle.internal.execution.steps.ResolveInputChangesStep.execute(ResolveInputChangesStep.java:40)
+  	at org.gradle.internal.execution.steps.ResolveInputChangesStep.execute(ResolveInputChangesStep.java:29)
+  	at org.gradle.internal.execution.steps.BuildCacheStep.executeWithoutCache(BuildCacheStep.java:189)
+  	at org.gradle.internal.execution.steps.BuildCacheStep.lambda$execute$1(BuildCacheStep.java:75)
+  	at org.gradle.internal.Either$Right.fold(Either.java:175)
+  	at org.gradle.internal.execution.caching.CachingState.fold(CachingState.java:62)
+  	at org.gradle.internal.execution.steps.BuildCacheStep.execute(BuildCacheStep.java:73)
+  	at org.gradle.internal.execution.steps.BuildCacheStep.execute(BuildCacheStep.java:48)
+  	at org.gradle.internal.execution.steps.StoreExecutionStateStep.execute(StoreExecutionStateStep.java:46)
+  	at org.gradle.internal.execution.steps.StoreExecutionStateStep.execute(StoreExecutionStateStep.java:35)
+  	at org.gradle.internal.execution.steps.SkipUpToDateStep.executeBecause(SkipUpToDateStep.java:75)
+  	at org.gradle.internal.execution.steps.SkipUpToDateStep.lambda$execute$2(SkipUpToDateStep.java:53)
+  	at java.base/java.util.Optional.orElseGet(Unknown Source)
+  	at org.gradle.internal.execution.steps.SkipUpToDateStep.execute(SkipUpToDateStep.java:53)
+  	at org.gradle.internal.execution.steps.SkipUpToDateStep.execute(SkipUpToDateStep.java:35)
+  	at org.gradle.internal.execution.steps.legacy.MarkSnapshottingInputsFinishedStep.execute(MarkSnapshottingInputsFinishedStep.java:37)
+  	at org.gradle.internal.execution.steps.legacy.MarkSnapshottingInputsFinishedStep.execute(MarkSnapshottingInputsFinishedStep.java:27)
+  	at org.gradle.internal.execution.steps.ResolveIncrementalCachingStateStep.executeDelegate(ResolveIncrementalCachingStateStep.java:49)
+  	at org.gradle.internal.execution.steps.ResolveIncrementalCachingStateStep.executeDelegate(ResolveIncrementalCachingStateStep.java:27)
+  	at org.gradle.internal.execution.steps.AbstractResolveCachingStateStep.execute(AbstractResolveCachingStateStep.java:71)
+  	at org.gradle.internal.execution.steps.AbstractResolveCachingStateStep.execute(AbstractResolveCachingStateStep.java:39)
+  	at org.gradle.internal.execution.steps.ResolveChangesStep.execute(ResolveChangesStep.java:65)
+  	at org.gradle.internal.execution.steps.ResolveChangesStep.execute(ResolveChangesStep.java:36)
+  	at org.gradle.internal.execution.steps.ValidateStep.execute(ValidateStep.java:107)
+  	at org.gradle.internal.execution.steps.ValidateStep.execute(ValidateStep.java:56)
+  	at org.gradle.internal.execution.steps.AbstractCaptureStateBeforeExecutionStep.execute(AbstractCaptureStateBeforeExecutionStep.java:64)
+  	at org.gradle.internal.execution.steps.AbstractCaptureStateBeforeExecutionStep.execute(AbstractCaptureStateBeforeExecutionStep.java:43)
+  	at org.gradle.internal.execution.steps.AbstractSkipEmptyWorkStep.executeWithNonEmptySources(AbstractSkipEmptyWorkStep.java:125)
+  	at org.gradle.internal.execution.steps.AbstractSkipEmptyWorkStep.execute(AbstractSkipEmptyWorkStep.java:56)
+  	at org.gradle.internal.execution.steps.AbstractSkipEmptyWorkStep.execute(AbstractSkipEmptyWorkStep.java:36)
+  	at org.gradle.internal.execution.steps.legacy.MarkSnapshottingInputsStartedStep.execute(MarkSnapshottingInputsStartedStep.java:38)
+  	at org.gradle.internal.execution.steps.LoadPreviousExecutionStateStep.execute(LoadPreviousExecutionStateStep.java:36)
+  	at org.gradle.internal.execution.steps.LoadPreviousExecutionStateStep.execute(LoadPreviousExecutionStateStep.java:23)
+  	at org.gradle.internal.execution.steps.HandleStaleOutputsStep.execute(HandleStaleOutputsStep.java:75)
+  	at org.gradle.internal.execution.steps.HandleStaleOutputsStep.execute(HandleStaleOutputsStep.java:41)
+  	at org.gradle.internal.execution.steps.AssignMutableWorkspaceStep.lambda$execute$0(AssignMutableWorkspaceStep.java:35)
+  	at org.gradle.api.internal.tasks.execution.TaskExecution$4.withWorkspace(TaskExecution.java:289)
+  	at org.gradle.internal.execution.steps.AssignMutableWorkspaceStep.execute(AssignMutableWorkspaceStep.java:31)
+  	at org.gradle.internal.execution.steps.AssignMutableWorkspaceStep.execute(AssignMutableWorkspaceStep.java:22)
+  	at org.gradle.internal.execution.steps.ChoosePipelineStep.execute(ChoosePipelineStep.java:40)
+  	at org.gradle.internal.execution.steps.ChoosePipelineStep.execute(ChoosePipelineStep.java:23)
+  	at org.gradle.internal.execution.steps.ExecuteWorkBuildOperationFiringStep.lambda$execute$2(ExecuteWorkBuildOperationFiringStep.java:67)
+  	at java.base/java.util.Optional.orElseGet(Unknown Source)
+  	at org.gradle.internal.execution.steps.ExecuteWorkBuildOperationFiringStep.execute(ExecuteWorkBuildOperationFiringStep.java:67)
+  	at org.gradle.internal.execution.steps.ExecuteWorkBuildOperationFiringStep.execute(ExecuteWorkBuildOperationFiringStep.java:39)
+  	at org.gradle.internal.execution.steps.IdentityCacheStep.execute(IdentityCacheStep.java:46)
+  	at org.gradle.internal.execution.steps.IdentityCacheStep.execute(IdentityCacheStep.java:34)
+  	at org.gradle.internal.execution.steps.IdentifyStep.execute(IdentifyStep.java:48)
+  	at org.gradle.internal.execution.steps.IdentifyStep.execute(IdentifyStep.java:35)
+  	at org.gradle.internal.execution.impl.DefaultExecutionEngine$1.execute(DefaultExecutionEngine.java:64)
+  	at org.gradle.api.internal.tasks.execution.ExecuteActionsTaskExecuter.executeIfValid(ExecuteActionsTaskExecuter.java:127)
+  	at org.gradle.api.internal.tasks.execution.ExecuteActionsTaskExecuter.execute(ExecuteActionsTaskExecuter.java:116)
+  	at org.gradle.api.internal.tasks.execution.ProblemsTaskPathTrackingTaskExecuter.execute(ProblemsTaskPathTrackingTaskExecuter.java:41)
+  	at org.gradle.api.internal.tasks.execution.FinalizePropertiesTaskExecuter.execute(FinalizePropertiesTaskExecuter.java:46)
+  	at org.gradle.api.internal.tasks.execution.ResolveTaskExecutionModeExecuter.execute(ResolveTaskExecutionModeExecuter.java:51)
+  	at org.gradle.api.internal.tasks.execution.SkipTaskWithNoActionsExecuter.execute(SkipTaskWithNoActionsExecuter.java:57)
+  	at org.gradle.api.internal.tasks.execution.SkipOnlyIfTaskExecuter.execute(SkipOnlyIfTaskExecuter.java:74)
+  	at org.gradle.api.internal.tasks.execution.CatchExceptionTaskExecuter.execute(CatchExceptionTaskExecuter.java:36)
+  	at org.gradle.api.internal.tasks.execution.EventFiringTaskExecuter$1.executeTask(EventFiringTaskExecuter.java:77)
+  	at org.gradle.api.internal.tasks.execution.EventFiringTaskExecuter$1.call(EventFiringTaskExecuter.java:55)
+  	at org.gradle.api.internal.tasks.execution.EventFiringTaskExecuter$1.call(EventFiringTaskExecuter.java:52)
+  	at org.gradle.internal.operations.DefaultBuildOperationRunner$CallableBuildOperationWorker.execute(DefaultBuildOperationRunner.java:210)
+  	at org.gradle.internal.operations.DefaultBuildOperationRunner$CallableBuildOperationWorker.execute(DefaultBuildOperationRunner.java:205)
+  	at org.gradle.internal.operations.DefaultBuildOperationRunner$2.execute(DefaultBuildOperationRunner.java:67)
+  	at org.gradle.internal.operations.DefaultBuildOperationRunner$2.execute(DefaultBuildOperationRunner.java:60)
+  	at org.gradle.internal.operations.DefaultBuildOperationRunner.execute(DefaultBuildOperationRunner.java:167)
+  	at org.gradle.internal.operations.DefaultBuildOperationRunner.execute(DefaultBuildOperationRunner.java:60)
+  	at org.gradle.internal.operations.DefaultBuildOperationRunner.call(DefaultBuildOperationRunner.java:54)
+  	at org.gradle.api.internal.tasks.execution.EventFiringTaskExecuter.execute(EventFiringTaskExecuter.java:52)
+  	at org.gradle.execution.plan.LocalTaskNodeExecutor.execute(LocalTaskNodeExecutor.java:42)
+  	at org.gradle.execution.taskgraph.DefaultTaskExecutionGraph$InvokeNodeExecutorsAction.execute(DefaultTaskExecutionGraph.java:331)
+  	at org.gradle.execution.taskgraph.DefaultTaskExecutionGraph$InvokeNodeExecutorsAction.execute(DefaultTaskExecutionGraph.java:318)
+  	at org.gradle.execution.taskgraph.DefaultTaskExecutionGraph$BuildOperationAwareExecutionAction.lambda$execute$0(DefaultTaskExecutionGraph.java:314)
+  	at org.gradle.internal.operations.CurrentBuildOperationRef.with(CurrentBuildOperationRef.java:85)
+  	at org.gradle.execution.taskgraph.DefaultTaskExecutionGraph$BuildOperationAwareExecutionAction.execute(DefaultTaskExecutionGraph.java:314)
+  	at org.gradle.execution.taskgraph.DefaultTaskExecutionGraph$BuildOperationAwareExecutionAction.execute(DefaultTaskExecutionGraph.java:303)
+  	at org.gradle.execution.plan.DefaultPlanExecutor$ExecutorWorker.execute(DefaultPlanExecutor.java:459)
+  	at org.gradle.execution.plan.DefaultPlanExecutor$ExecutorWorker.run(DefaultPlanExecutor.java:376)
+  	at org.gradle.internal.concurrent.ExecutorPolicy$CatchAndRecordFailures.onExecute(ExecutorPolicy.java:64)
+  	at org.gradle.internal.concurrent.AbstractManagedExecutor$1.run(AbstractManagedExecutor.java:48)
+  	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
+  	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
+  	at java.base/java.lang.Thread.run(Unknown Source)
+  Caused by: com.android.ide.common.process.ProcessException: Error while executing process /Users/friday/Library/Android/sdk/cmake/3.22.1/bin/cmake with arguments {-H/Users/friday/.pub-cache/git/lcpp-7c2f8423e87781859acc514cd0aa36554f423163/android -DCMAKE_SYSTEM_NAME=Android -DCMAKE_EXPORT_COMPILE_COMMANDS=ON -DCMAKE_SYSTEM_VERSION=23 -DANDROID_PLATFORM=android-23 -DANDROID_ABI=arm64-v8a -DCMAKE_ANDROID_ARCH_ABI=arm64-v8a -DANDROID_NDK=/Users/friday/Library/Android/sdk/ndk/27.0.12077973 -DCMAKE_ANDROID_NDK=/Users/friday/Library/Android/sdk/ndk/27.0.12077973 -DCMAKE_TOOLCHAIN_FILE=/Users/friday/Library/Android/sdk/ndk/27.0.12077973/build/cmake/android.toolchain.cmake -DCMAKE_MAKE_PROGRAM=/Users/friday/Library/Android/sdk/cmake/3.22.1/bin/ninja -DCMAKE_LIBRARY_OUTPUT_DIRECTORY=/Users/friday/premithus/build/llama_sdk/intermediates/cxx/Debug/1y5h19dr/obj/arm64-v8a -DCMAKE_RUNTIME_OUTPUT_DIRECTORY=/Users/friday/premithus/build/llama_sdk/intermediates/cxx/Debug/1y5h19dr/obj/arm64-v8a -DCMAKE_BUILD_TYPE=Debug -B/Users/friday/.pub-cache/git/lcpp-7c2f8423e87781859acc514cd0aa36554f423163/android/.cxx/Debug/1y5h19dr/arm64-v8a -GNinja}
+  	at com.android.build.gradle.internal.process.GradleProcessResult.buildProcessException(GradleProcessResult.java:73)
+  	at com.android.build.gradle.internal.process.GradleProcessResult.assertNormalExitValue(GradleProcessResult.java:48)
+  	at com.android.build.gradle.internal.cxx.process.ExecuteProcessKt.execute(ExecuteProcess.kt:277)
+  	... 140 more
+  Caused by: org.gradle.process.internal.ExecException: Process 'command '/Users/friday/Library/Android/sdk/cmake/3.22.1/bin/cmake'' finished with non-zero exit value 1
+  	at org.gradle.process.internal.DefaultExecHandle$ExecResultImpl.assertNormalExitValue(DefaultExecHandle.java:442)
+  	at com.android.build.gradle.internal.process.GradleProcessResult.assertNormalExitValue(GradleProcessResult.java:46)
+  	... 141 more
+
+
+* Try:
+> Run with --stacktrace option to get the stack trace.
+> Run with --info or --debug option to get more log output.
+> Run with --scan to get full insights.
+> Get more help at https://help.gradle.org.
+
+BUILD FAILED in 2s
+Running Gradle task 'assembleDebug'...                           2,115ms
+Gradle task assembleDebug failed with exit code 1

convert_bert.py

@@ -0,0 +1,42 @@
+import tensorflow as tf
+from transformers import AutoTokenizer, TFAutoModelForSequenceClassification
+import os
+
+model_name = "mrm8488/bert-tiny-finetuned-sms-spam-detection"
+
+print("Loading model and tokenizer...")
+tokenizer = AutoTokenizer.from_pretrained(model_name)
+model = TFAutoModelForSequenceClassification.from_pretrained(model_name, from_pt=True)
+
+print("Exporting vocab...")
+os.makedirs("models", exist_ok=True)
+with open("models/vocab.txt", "w", encoding="utf-8") as f:
+    for token, index in sorted(tokenizer.get_vocab().items(), key=lambda x: x[1]):
+        f.write(f"{token}\n")
+
+print("Tracing model for TFLite conversion...")
+MAX_SEQ_LEN = 128
+
+callable_model = tf.function(
+    lambda input_ids, attention_mask: model(input_ids=input_ids, attention_mask=attention_mask, training=False)
+)
+
+concrete_func = callable_model.get_concrete_function(
+    tf.TensorSpec([1, MAX_SEQ_LEN], tf.int32, name="input_ids"),
+    tf.TensorSpec([1, MAX_SEQ_LEN], tf.int32, name="attention_mask")
+)
+
+print("Converting to TFLite...")
+converter = tf.lite.TFLiteConverter.from_concrete_functions([concrete_func])
+converter.optimizations = [tf.lite.Optimize.DEFAULT]
+converter.target_spec.supported_ops = [
+    tf.lite.OpsSet.TFLITE_BUILTINS,
+    tf.lite.OpsSet.SELECT_TF_OPS
+]
+
+tflite_model = converter.convert()
+
+with open("models/scam_classifier.tflite", "wb") as f:
+    f.write(tflite_model)
+
+print("Done! Model saved to models/scam_classifier.tflite")

demo_script_v0.0.2.md

@@ -0,0 +1,28 @@
+# Premithius V0.0.2 Demo Script
+
+**Theme:** India-First On-Device AI Security | Zero LLM | ARMadillo Architecture
+
+## Demo 1: The Zero-Day Scam (Vector Engine)
+**Scenario:** A completely new scam variant that isn't in any blacklist yet.
+1. Send SMS to emulator: `adb shell am broadcast -a android.provider.Telephony.SMS_RECEIVED -d "SMS_BODY:Urgent! Your HDFC acct is blocked. Update KYC immediately via http://hdfc.kyc-update-xyz.in"`
+2. **Observe:** Premithius overlay appears instantly (under 50ms).
+3. **Explanation:** "Unlike cloud antiviruses that need updates, our `sqlite-vec` engine running locally instantly recognized the semantic meaning of 'urgent KYC update' bypassing traditional filters. It never left the device."
+
+## Demo 2: The UPI Rs. 1 Collect Fraud (India Threat Pack)
+**Scenario:** The classic OLX/Marketplace fraud.
+1. Send SMS: `adb shell am broadcast -a android.provider.Telephony.SMS_RECEIVED -d "SMS_BODY:Dear Customer, Rs 12,500 has been credited... To receive money, please authorize Rs. 1 collect request from VPA: scammer@ybl"`
+2. **Observe:** Kavacha Firewall blocks it natively.
+3. **Explanation:** "Our Layer 1 India Threat Pack specifically targets regional payment infrastructure. We catch the ₹1 collect trick natively before it hits complex models."
+
+## Demo 3: Data Shield & System Visibility
+1. Open the Premithius App -> Navigate to **Data Shield Insights**
+2. **Observe:** Plain English translations of complex OS data (e.g., "TikTok sent 340 MB of data between 2am–4am last night").
+3. **Explanation:** "Instead of obscure permission screens, we translate system telemetry into human-readable privacy stories. The home screen widget surfaces these anomalies effortlessly."
+
+## Demo 4: Aadhaar/PAN Outgoing Intercept (Keyboard)
+**Scenario:** User typing their Aadhaar number to a stranger on WhatsApp.
+1. Open any chat app.
+2. Select Premithius Keyboard.
+3. Type: `Mera Aadhaar 1234 5678 9012 hai` and hit Enter/Send.
+4. **Observe:** Warning overlay/snack bar: "Wait! You are about to send a sensitive ID."
+5. **Explanation:** "Our keyboard is the final line of defense. It detects outbound PII like Aadhaar or PAN on the edge, warning the user *before* it ends up on a scammer's server."

hf_space

@@ -0,0 +1 @@
+Subproject commit ca0c577efb6417cf89c554b17f3c9b8af9a3fa42

index.html

@@ -0,0 +1,19 @@
+<!doctype html>
+<html>
+	<head>
+		<meta charset="utf-8" />
+		<meta name="viewport" content="width=device-width" />
+		<title>My static Space</title>
+		<link rel="stylesheet" href="style.css" />
+	</head>
+	<body>
+		<div class="card">
+			<h1>Welcome to your static Space!</h1>
+			<p>You can modify this app directly by editing <i>index.html</i> in the Files and versions tab.</p>
+			<p>
+				Also don't forget to check the
+				<a href="https://huggingface.co/docs/hub/spaces" target="_blank">Spaces documentation</a>.
+			</p>
+		</div>
+	</body>
+</html>

ios/.gitignore

@@ -0,0 +1,34 @@
+**/dgph
+*.mode1v3
+*.mode2v3
+*.moved-aside
+*.pbxuser
+*.perspectivev3
+**/*sync/
+.sconsign.dblite
+.tags*
+**/.vagrant/
+**/DerivedData/
+Icon?
+**/Pods/
+**/.symlinks/
+profile
+xcuserdata
+**/.generated/
+Flutter/App.framework
+Flutter/Flutter.framework
+Flutter/Flutter.podspec
+Flutter/Generated.xcconfig
+Flutter/ephemeral/
+Flutter/app.flx
+Flutter/app.zip
+Flutter/flutter_assets/
+Flutter/flutter_export_environment.sh
+ServiceDefinitions.json
+Runner/GeneratedPluginRegistrant.*
+
+# Exceptions to above rules.
+!default.mode1v3
+!default.mode2v3
+!default.pbxuser
+!default.perspectivev3

ios/Flutter/AppFrameworkInfo.plist

@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>CFBundleDevelopmentRegion</key>
+  <string>en</string>
+  <key>CFBundleExecutable</key>
+  <string>App</string>
+  <key>CFBundleIdentifier</key>
+  <string>io.flutter.flutter.app</string>
+  <key>CFBundleInfoDictionaryVersion</key>
+  <string>6.0</string>
+  <key>CFBundleName</key>
+  <string>App</string>
+  <key>CFBundlePackageType</key>
+  <string>FMWK</string>
+  <key>CFBundleShortVersionString</key>
+  <string>1.0</string>
+  <key>CFBundleSignature</key>
+  <string>????</string>
+  <key>CFBundleVersion</key>
+  <string>1.0</string>
+</dict>
+</plist>

ios/Flutter/Debug.xcconfig

@@ -0,0 +1,2 @@
+#include? "Pods/Target Support Files/Pods-Runner/Pods-Runner.debug.xcconfig"
+#include "Generated.xcconfig"