Dating-Safety · 4 Kern-Module

// ═══════════════════════════════════════════════════════════════
// MODULE 3 · REMOTE FAKE-CALL
// Stack: WebSocket relay · CallKit (iOS) · Android Overlay
// Latency: Guardian click → call appears on victim < 400ms
// ═══════════════════════════════════════════════════════════════

// ── SIGNAL FLOW ──────────────────────────────────────────────────
//
//  Guardian Dashboard
//       │  "trigger_fake_call" + scenario + victim_session_id
//       ▼
//  WSS Hub (sec-si.de)               ← JWT validated relay
//       │  routes to victim socket only
//       ▼
//  Victim device receives FAKE_CALL event
//       │
//       ├─ iOS  → CallKit CXCallUpdate (native call UI, locked screen)
//       └─ Android → FLAG_SHOW_WHEN_LOCKED overlay + RingtoneManager
//       │
//       ▼
//  User answers → scenario audio plays (local .m4a asset)
//       │
//       ▼
//  Call ends → Smart Exit: Maps open with transit route home

// ── SCENARIOS (local audio assets, no streaming) ─────────────────
const SCENARIOS = [
  { id: "worried_mom",   caller: "Mama",             audio: "alibi_worried_mom.m4a",   urgency: "high" },
  { id: "crying_child",  caller: "Kita Sonnenschein", audio: "alibi_crying_child.m4a",  urgency: "high" },
  { id: "boss_urgent",   caller: "Dr. Hoffmann",      audio: "alibi_boss_urgent.m4a",   urgency: "high" },
  { id: "friend_pickup", caller: "Lisa",              audio: "alibi_friend_pickup.m4a", urgency: "low"  },
  { id: "doctor",        caller: "Praxis Dr. Meier",  audio: "alibi_doctor.m4a",        urgency: "high" },
]

// ── ANDROID: IncomingCallActivity ────────────────────────────────

class IncomingFakeCallActivity : Activity() {

    override fun onCreate(savedInstanceState: Bundle?) {
        super.onCreate(savedInstanceState)
        val payload = intent.extras!!

        // Override lockscreen + keep screen on
        window.addFlags(
            WindowManager.LayoutParams.FLAG_SHOW_WHEN_LOCKED or
            WindowManager.LayoutParams.FLAG_TURN_SCREEN_ON   or
            WindowManager.LayoutParams.FLAG_KEEP_SCREEN_ON
        )
        setContentView(R.layout.incoming_call_ui)

        // Populate UI with scenario data
        findViewById<TextView>(R.id.caller_name).text   = payload.getString("caller_name")
        findViewById<TextView>(R.id.caller_number).text = payload.getString("caller_number")

        // Ringtone: override silent mode via STREAM_RING
        val ringtone = RingtoneManager.getRingtone(this, RingtoneManager.getDefaultUri(RingtoneManager.TYPE_RINGTONE))
        ringtone.streamType = AudioManager.STREAM_RING
        ringtone.play()

        // Buttons
        findViewById<Button>(R.id.btn_accept).setOnClickListener { onAccepted(payload) }
        findViewById<Button>(R.id.btn_decline).setOnClickListener { finish() }
    }

    private fun onAccepted(payload: Bundle) {
        // Play local audio asset (no network needed)
        val mp = MediaPlayer.create(this, assets.openFd(payload.getString("audio_file")!!))
        mp.start()
        mp.setOnCompletionListener { onCallEnded() }
    }

    private fun onCallEnded() {
        // Smart Exit: open Maps with transit route home
        val homeAddr  = EncryptedPrefs.get("home_address")
        val mapsIntent = Intent(Intent.ACTION_VIEW,
            Uri.parse("google.navigation:q=${Uri.encode(homeAddr)}&mode=transit"))
        startActivity(mapsIntent)
        // Update session: status = "navigating_home"
        SessionRepository.updateStatus("navigating_home")
        finish()
    }
}

// ── CROSS-PLATFORM SECURE LINK GENERATION ────────────────────────

// JavaScript / Node.js (Dashboard / Backend):
const homeAddr = "Notfall-Standort"; // Variable für die Adresse
const secureMapUrl = `https://sec.si/nav/${encodeURIComponent(homeAddr)}`;
console.log("Gesicherte Notfall-URL generiert:", secureMapUrl);

// Flutter / Dart (App):
final secureUri = Uri.parse('https://sec.si/nav/${Uri.encodeComponent(homeAddr)}');

// ── SEC.SI DNS - Security Layer: Location Encryption ─────────────

const crypto = require('crypto'); // Standard-Verschlüsselung

function generateSecureSOS(gpsData, secretKey) {
    try {
        // Wir verschlüsseln die GPS-Daten (Breitengrad, Längengrad)
        const cipher = crypto.createCipher('aes-256-cbc', secretKey);
        let encrypted = cipher.update(gpsData, 'utf8', 'hex');
        encrypted += cipher.final('hex');

        // Der fertige, sichere Link für das Guardian-Dashboard
        return `https://sec.si/sos/${encrypted}`;
    } catch (e) {
        console.error("Verschlüsselungsfehler im SEC.SI Kernmodul:", e);
        // Fallback: Nur verschlüsselte Koordinaten senden
        return "ERROR_SECURE_LAYER_FAILED";
    }
}

// ── iOS: CallKit Integration (Swift) ─────────────────────────────

class FakeCallProvider: NSObject, CXProviderDelegate {

    private let provider: CXProvider
    private var activeCallUUID = UUID()
    private var player: AVAudioPlayer?

    override init() {
        let config = CXProviderConfiguration()
        config.ringtoneSound         = nil           // system default ringtone
        config.supportsVideo         = false
        config.maximumCallsPerCallGroup = 1
        provider = CXProvider(configuration: config)
        super.init()
        provider.setDelegate(self, queue: nil)
    }

    func incomingCall(callerName: String, callerNumber: String, audioFile: String) {
        activeCallUUID = UUID()
        let update     = CXCallUpdate()
        update.remoteHandle          = CXHandle(type: .phoneNumber, value: callerNumber)
        update.localizedCallerName   = callerName
        update.hasVideo              = false
        update.supportsHolding       = false
        // Reports incoming call → native iOS call UI appears (even on lock screen)
        provider.reportNewIncomingCall(with: activeCallUUID, update: update) { [weak self] error in
            if error == nil { self?.pendingAudioFile = audioFile }
        }
    }

    func providerDidActivateAudioSession(_ provider: CXProvider) {
        // User answered → play scenario audio
        if let file = pendingAudioFile,
           let url = Bundle.main.url(forResource: file, withExtension: nil) {
            player = try? AVAudioPlayer(contentsOf: url)
            player?.play()
        }
    }

    func provider(_ provider: CXProvider, perform action: CXEndCallAction) {
        player?.stop()
        action.fulfill()
        SmartExit.navigate()  // Open Maps transit route home
    }

    private var pendingAudioFile: String?
}