feat: implement biometric authentication and reorganize core modules

- Implement biometric authentication for Android and iOS using a platform-agnostic `BiometricInteractor`.
- Add `BiometricEnrollViewModel` and `BiometricDisableViewModel` to handle secure credential enrollment and management.
- Introduce `BiometricEnrollDialog` and `BiometricDisableConfirmationDialog` UI components.
- Update `SignInViewModel` and `SettingsViewModel` to support biometric unlock and configuration toggles.
- Implement secure storage using Android Keystore (AES-GCM) with DataStore on Android, and Keychain with biometric access control on iOS.
- Relocate the `:ui:shared` module to `:core:ui` and reorganize testing modules into a nested `:core:test` structure (`:common`, `:ui`, `:jvm`).
- Introduce `AutofillInteractor` to decouple presentation logic from the Compose-specific `AutofillManager`.
- Add `TooltipIconButton` common composable and apply it to action buttons in `NoteDetail`, `FileListScreen`, `MainScreen`, and `SignInScreen`.
- Refine the `DeleteDialog` UI to use Material 3 error color schemes and updated button styles.
- Update string resources to include biometric labels and refine empty state messaging.
- Add UI test cases for biometric sign-in and settings flows.
- Bump project version to `8.5.5` and update dependencies including Gradle (9.5.0), AGP (9.2.0), and Kotlin (2.3.21).
- Update project documentation, architecture guides, and GitHub Actions workflows to reflect the new module structure.

Author: softartdev

.github/workflows/kmp.yml

@@ -62,7 +62,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        api-level: [ 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36 ]
+        api-level: [ 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37 ]
         target: [default]
     steps:
       - name: Check out

.github/workflows/web.yml

@@ -48,7 +48,7 @@ jobs:
         uses: actions/configure-pages@v6
       - name: Upload artifact
         if: ${{ steps.build.outcome != 'failure' || steps.dist.outcome != 'failure' }}
-        uses: actions/upload-pages-artifact@v4
+        uses: actions/upload-pages-artifact@v5
         with:
           path: ./app/web/build/dist/wasmJs/productionExecutable
 

.gitignore

@@ -65,12 +65,12 @@ app/android/note_room_key_store.jks
 
 ### iOS
 # Generated files
-/iosApp/iosApp.xcworkspace/xcuserdata/
-/iosApp/fastlane/report.xml
+/app/iosApp/iosApp.xcworkspace/xcuserdata/
+/app/iosApp/fastlane/report.xml
 
 # Built application files
-/iosApp/iosApp.app.dSYM.zip
-/iosApp/iosApp.ipa
+/app/iosApp/iosApp.app.dSYM.zip
+/app/iosApp/iosApp.ipa
 
 # Code signing files
 /app/iosApp/fastlane/28F5CB4337.json

AGENTS.md

@@ -8,9 +8,9 @@
 ## Quick Reference
 
 ### Project Structure & Module Organization
-- Core: `core/domain`, `core/presentation`, `core/data/db-sqldelight` (default), `core/data/db-room` (optional), `core/test`.
+- Core: `core/domain`, `core/presentation`, `core/data/db-sqldelight` (default), `core/data/db-room` (optional), `core/test/common`.
 - Features: `feature/backup/{domain,ui}`, `feature/console/{domain,presentation,ui}`, `feature/file-explorer/data`.
-- UI: `ui/shared` (common Compose code and resources), `ui/test` (multiplatform Compose UI tests), `ui/test-jvm` (JVM-specific UI test utilities).
+- UI: `core/ui` (common Compose code and resources), `core/test/ui` (multiplatform Compose UI tests), `core/test/jvm` (JVM-specific UI test utilities).
 - Apps: `app/android`, `app/desktop`, `app/web`, `app/ios-kit` (CocoaPods framework), `app/iosApp` (Xcode project).
 - Tooling: `build-logic` (Gradle conventions), `thirdparty` (vendored modules), `gradle/libs.versions.toml` (versions).
 - Switch DB module via `gradle.properties` key `CORE_DATA_DB_MODULE`.
@@ -40,7 +40,7 @@ After making changes, AI agents must perform the following checks sequentially.
 - Compose: prefer state hoisting; keep @Composable functions small and previewable.
 
 ## Testing Guidelines
-- Unit tests: Kotlin Multiplatform `kotlin("test")`/JUnit. Run all with `./gradlew test` or per module (e.g., `:ui:shared:jvmTest`).
+- Unit tests: Kotlin Multiplatform `kotlin("test")`/JUnit. Run all with `./gradlew test` or per module (e.g., `:core:ui:jvmTest`).
 - Android UI tests: Espresso/Compose in `app/android/src/androidTest`. Run with `connectedCheck`.
 - Desktop UI tests: in `app/desktop/src/jvmTest` using `uiTestJUnit4`.
 - iOS UI tests: Multiplatform Compose UI tests in `app/ios-kit/src/commonTest`. Run with `:app:ios-kit:iosSimulatorArm64Test`.

CHANGELOG.md

@@ -5,6 +5,17 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [8.5.5] - 2026-05-01
+
+### Features
+- Biometric authentication (Android & iOS)
+- Implement tooltips and refine delete dialog UI
+
+### Refactoring
+- Decouple presentation from Compose and implement `AutofillInteractor` for cross-platform autofill support
+- Reorganize project structure by moving UI and test modules to the `core` namespace
+- Nested test module structure for better organization
+
 ## [8.5.4] - 2026-04-18
 
 ### Features
@@ -140,7 +151,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Refactoring
 - Improve UI test stability and maintainability
-- Create multiplatform `ui:test` module and move UI tests
+- Create multiplatform `core:test:ui` module and move UI tests
 - Simplify navigation methods and improve null handling in RouterImpl
 - Improve UI test retry logic and stability
 

CONTRIBUTING.md

@@ -27,7 +27,7 @@ NoteDelight is a **Kotlin Multiplatform** note-taking application with database
 
 ### Supported Platforms
 
-- ✅ Android (minSdk 24)
+- ✅ Android (minSdk 23)
 - ✅ iOS (14.0+)
 - ✅ Desktop (Windows, macOS, Linux)
 - ✅ Web (WebAssembly, experimental)
@@ -89,6 +89,60 @@ kotlin.code.style=official
 - One blank line between functions
 - Two blank lines between top-level declarations
 - No blank lines at start/end of blocks
+- Inside an `expect`/`interface` body with several method signatures, separate them with blank lines so the
+  declaration list reads as members rather than a wall of text:
+  ```kotlin
+  expect class BiometricInteractor {
+
+      suspend fun canAuthenticate(): Boolean
+
+      fun hasStoredPassword(): Boolean
+      // ...
+  }
+  ```
+
+#### Call Sites & Lambdas
+- **Use named arguments** when calling a function with three or more parameters, or whenever the call site
+  would otherwise need a same-typed positional argument list. This is especially important for
+  cross-platform interactors and view-model actions:
+  ```kotlin
+  biometricInteractor.encryptAndStorePassword(
+      password = password,
+      title = title,
+      subtitle = subtitle,
+      negativeButton = negativeButton,
+  )
+  ```
+- **Annotate non-trivial local types** so the reader does not have to follow inference through several
+  generics or platform calls (`val res: DecryptedPasswordResult = ...`, `val plain: ByteArray = ...`).
+- **Order `when` branches by the success path first**, error/`else` branches afterwards — this matches the
+  way ViewModels read top-to-bottom in the project. Prefer `when (result) { is Success -> ...; else -> ... }`
+  over an inverted `if (!success) ... else ...` ladder.
+- **Collapse trivial `viewModelScope.launch` blocks to a single line** when their body is one statement
+  (e.g. `private fun cancel() = viewModelScope.launch { router.popBackStack() }`).
+- **Compose state edits**: prefer a single `mutableStateFlow.update { it.copy(...) }` that sets every field
+  affected by an event over multiple chained `update` calls. It keeps the resulting state atomic and
+  makes the visible transition obvious.
+
+#### Composables, strings, and event arguments
+- **Do not pipe localized strings through actions or screen wrappers as empty placeholders.** If a screen
+  needs a `stringResource` to dispatch an action, read it directly at the call site:
+  ```kotlin
+  // ❌ Avoid
+  onClick = { onAction(SignInAction.OnBiometricClick("", "", "")) }
+  // ...wrapper that overwrites the empty strings before forwarding to the ViewModel.
+
+  // ✅ Prefer
+  val title = stringResource(Res.string.biometric_prompt_title)
+  val subtitle = stringResource(Res.string.biometric_prompt_subtitle)
+  val negative = stringResource(Res.string.biometric_prompt_negative_button)
+  onClick = { onAction(SignInAction.OnBiometricClick(title, subtitle, negative)) }
+  ```
+  When the strings are needed inside a stateless `…Body` composable that also has its own preview, expose
+  them as defaulted parameters (`title: String = stringResource(Res.string.…)`) instead of forwarding the
+  action with empty strings and then re-resolving them in the stateful wrapper.
+- **Prefer method references for forwarding callbacks** (`onAction = signInViewModel::onAction`) when the
+  wrapper performs no transformation.
 
 ### Code Organization
 
@@ -455,7 +509,7 @@ Closes #123
 ```
 
 ```
-ui/shared: Fix dark theme colors in note editor
+core/ui: Fix dark theme colors in note editor
 
 - Update Material 3 color scheme
 - Fix text visibility issues

README.md

@@ -41,6 +41,7 @@ Supported platforms:
 |      database      |    ✅    | ✅	  |      ✅	      |  ✅  |
 |     encryption     |    ✅    | ✅ 	 |      ✅	      |  ✅  |
 |       backup       |    ✅    | ✅	  |      ✅	      |  ✅  |
+|      biometric     |    ✅    | ✅	  |      	      |     |
 
 Interested in contributing new features or fixes? Check out [CONTRIBUTING.md](/CONTRIBUTING.md).
 

app/android/README.md

@@ -229,7 +229,7 @@ android {
 }
 
 dependencies {
-    androidTestImplementation(project(":ui:test-jvm"))
+    androidTestImplementation(project(":core:test:jvm"))
     androidTestUtil(libs.androidx.test.orchestrator)
 }
 ```
@@ -317,7 +317,7 @@ fastlane production  # Deploy to production
 - `core:domain` - Domain layer
 - `core:data` - Data layer (SQLDelight or Room)
 - `core:presentation` - ViewModels
-- `ui:shared` - Shared UI
+- `core:ui` - Shared UI
 
 ### Android
 - `androidx.activity.compose` - Activity with Compose
@@ -334,7 +334,7 @@ fastlane production  # Deploy to production
 - `leakcanary.android` - Memory leak detection
 
 ### Testing
-- `ui:test-jvm` - UI test framework
+- `core:test:jvm` - UI test framework
 - `androidx.test.ext.junit` - AndroidX Test
 - `androidx.test.runner` - Test runner
 - `androidx.test.orchestrator` - Test orchestrator
@@ -466,8 +466,8 @@ val permissionLauncher = rememberLauncherForActivityResult(
 
 ## Related Modules
 
-- **Depends on**: `ui:shared`, `core:presentation`, `core:data`, `core:domain`
-- **Test dependencies**: `ui:test-jvm`, `core:test`
+- **Depends on**: `core:ui`, `core:presentation`, `core:data`, `core:domain`
+- **Test dependencies**: `core:test:jvm`, `core:test:common`
 - **Alternative apps**: `app:desktop`, `app:web`, `app:iosApp`
 
 ## Resources

app/android/build.gradle.kts

@@ -25,8 +25,8 @@ android {
         applicationId = "com.softartdev.noteroom"
         minSdk = libs.versions.minSdk.get().toInt()
         targetSdk = libs.versions.targetSdk.get().toInt()
-        versionCode = 854
-        versionName = "8.5.4"
+        versionCode = 855
+        versionName = "8.5.5"
         testInstrumentationRunner = "androidx.test.runner.AndroidJUnitRunner"
         testInstrumentationRunnerArguments["clearPackageData"] = "true"
         vectorDrawables.useSupportLibrary = true
@@ -73,7 +73,7 @@ dependencies {
     implementation(projects.core.domain)
     implementation(project(project.property("CORE_DATA_DB_MODULE").toString()))
     implementation(projects.core.presentation)
-    implementation(projects.ui.shared)
+    implementation(projects.core.ui)
     implementation(projects.feature.backup.domain)
     implementation(projects.feature.backup.ui)
     implementation(kotlin("reflect", libs.versions.kotlin.get()))
@@ -101,8 +101,8 @@ dependencies {
     coreLibraryDesugaring(libs.desugar)
     testImplementation(libs.junit)
     testImplementation(libs.bundles.mockito)
-    androidTestImplementation(projects.ui.test)
-    androidTestImplementation(projects.ui.testJvm) {
+    androidTestImplementation(projects.core.test.ui)
+    androidTestImplementation(projects.core.test.jvm) {
         exclude(group = "org.jetbrains.runtime", module = "jbr-api")
     }
     androidTestImplementation(libs.commonsware.saferoom)

app/android/src/androidTest/java/com/softartdev/notedelight/ui/BiometricSettingsTest.kt

@@ -0,0 +1,54 @@
+@file:OptIn(ExperimentalTestApi::class)
+
+package com.softartdev.notedelight.ui
+
+import androidx.compose.ui.test.ComposeUiTest
+import androidx.compose.ui.test.ExperimentalTestApi
+import androidx.test.espresso.Espresso
+import androidx.test.ext.junit.runners.AndroidJUnit4
+import androidx.test.filters.FlakyTest
+import com.softartdev.notedelight.MainActivity
+import com.softartdev.notedelight.di.biometricTestModule
+import com.softartdev.notedelight.interactor.TestBiometricInteractor
+import com.softartdev.notedelight.reflect
+import com.softartdev.notedelight.ui.cases.BiometricSettingsTestCase
+import leakcanary.DetectLeaksAfterTestSuccess
+import leakcanary.TestDescriptionHolder
+import org.junit.After
+import org.junit.Rule
+import org.junit.Test
+import org.junit.rules.RuleChain
+import org.junit.runner.RunWith
+import org.koin.core.context.loadKoinModules
+import org.koin.mp.KoinPlatformTools
+
+@FlakyTest
+@RunWith(AndroidJUnit4::class)
+class BiometricSettingsTest {
+
+    private val testBiometricInteractor: TestBiometricInteractor
+        get() = KoinPlatformTools.defaultContext().get().get(TestBiometricInteractor::class)
+
+    private val composeTestRule = customAndroidComposeRule<MainActivity>(
+        beforeActivityLaunched = {
+            loadKoinModules(biometricTestModule)
+            testBiometricInteractor.reset(canAuthenticateResult = true)
+        }
+    )
+
+    @get:Rule
+    val rules: RuleChain = RuleChain.outerRule(TestDescriptionHolder)
+        .around(DetectLeaksAfterTestSuccess())
+        .around(composeTestRule)
+
+    private val composeUiTest: ComposeUiTest = reflect(composeTestRule)
+
+    @After
+    fun tearDown() = testBiometricInteractor.reset()
+
+    @Test
+    fun biometricSettingsTest() = BiometricSettingsTestCase(
+        composeUiTest = composeUiTest,
+        closeSoftKeyboard = Espresso::closeSoftKeyboard,
+    ).invoke()
+}