feat: add web database encryption and app version display

- Enable web database encryption using SQLite3MultipleCiphers WASM with OPFS storage.
- Implement `AppVersionUseCase` across all platforms (Android, iOS, JVM, WasmJs) to display the application version in the Info settings.
- Rename "Theme" settings category to "Appearance" and update related UI components and test tags.
- Refactor `SettingsViewModel` and state handling to use a unified `SettingsResult` model.
- Extract shared build logic into reusable Gradle convention extensions for Karma tests, SQLite3MC resources, and dependency management.
- Remove the vendored `androidx.paging.compose` fork.
- Expand WasmJs UI test coverage and update shared test infrastructure.
- Bump project version to `8.5.3` and update dependencies (Gradle 9.4.0, Compose 1.10.2).
- Update documentation for web encryption, OPFS, and database export/inspection.

Author: softartdev

.github/workflows/kmp.yml

@@ -54,7 +54,7 @@ jobs:
 
   android_ui_test_job:
     name: Android UI-tests on emulator
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     continue-on-error: true
     strategy:
       fail-fast: false

CHANGELOG.md

@@ -5,6 +5,30 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [8.5.3] - 2026-03-10
+
+### Features
+- Enable web database encryption support with SQLite3MultipleCiphers WASM, including browser-side encrypt/decrypt/rekey flows backed by OPFS storage
+- Improve Settings by renaming the Theme category to Appearance and showing the application version in the Info section on Android, iOS, and Desktop
+
+### Bug Fixes
+- Fix encrypted database compatibility across JVM and WasmJs by aligning SQLCipher v4 settings and validating database readability when opening protected databases
+- Fix Desktop SQLCipher query/version checks by using the generated JDBC URL directly for inspection queries
+
+### Refactoring
+- Extract shared Gradle convention helpers for Karma Chrome detection, SQLite3MultipleCiphers resource setup, Android dependency forcing, and Desktop version metadata generation
+- Remove the vendored `androidx.paging.compose` fork and simplify Settings state handling with the new `SettingsResult` model
+
+### Tests
+- Add WasmJs smoke tests and expand web UI coverage for Settings/navigation flows
+- Update shared UI test infrastructure and settings test helpers for the renamed Appearance category and version row
+
+### Documentation
+- Add a guide for opening exported databases and refresh the web/OPFS/build-logic docs to reflect encrypted SQLite3MultipleCiphers usage
+
+### Chores
+- Update build tooling and dependencies, including Gradle `9.4.0`, AGP `9.1.0`, Compose `1.10.2`, Firebase BOM `34.10.0`, and CI runner settings
+
 ## [8.5.2] - 2026-02-06
 
 ### Features

README.md

@@ -34,15 +34,15 @@ Supported platforms:
 
 ![Architecture blueprint for this project](docs/diagrams/architecture.png)
 
-## WORK IN PROGRESS 🛠
+## FEATURES ✨
 
 | feature \ platform | Android | iOS | Desktop Java | Web |
 |:------------------:|:-------:|:---:|:------------:|:---:|
 |      database      |    ✅    | ✅	  |      ✅	      |  ✅  |
-|     encryption     |    ✅    | ✅ 	 |      ✅	      |     |
+|     encryption     |    ✅    | ✅ 	 |      ✅	      |  ✅  |
 |       backup       |    ✅    | ✅	  |      ✅	      |  ✅  |
 
-Check out [CONTRIBUTING.md](/CONTRIBUTING.md) if you want to develop missing features.
+Interested in contributing new features or fixes? Check out [CONTRIBUTING.md](/CONTRIBUTING.md).
 
 ## CONTINUOUS INTEGRATION / DELIVERY ♻️
 

app/android/build.gradle.kts

@@ -1,11 +1,13 @@
 @file:Suppress("UnstableApiUsage")
 
+import com.softartdev.notedelight.forceAndroidXDependencyVersions
 import com.google.firebase.crashlytics.buildtools.gradle.CrashlyticsExtension
 import com.google.firebase.crashlytics.buildtools.gradle.tasks.UploadMappingFileTask
 import org.jetbrains.kotlin.gradle.dsl.JvmTarget
 import org.jetbrains.kotlin.gradle.tasks.KotlinCompilationTask
 
 plugins {
+    alias(libs.plugins.gradle.convention)
     alias(libs.plugins.android.application)
     alias(libs.plugins.compose)
     alias(libs.plugins.compose.compiler)
@@ -23,8 +25,8 @@ android {
         applicationId = "com.softartdev.noteroom"
         minSdk = libs.versions.minSdk.get().toInt()
         targetSdk = libs.versions.targetSdk.get().toInt()
-        versionCode = 852
-        versionName = "8.5.2"
+        versionCode = 853
+        versionName = "8.5.3"
         testInstrumentationRunner = "androidx.test.runner.AndroidJUnitRunner"
         testInstrumentationRunnerArguments["clearPackageData"] = "true"
         vectorDrawables.useSupportLibrary = true
@@ -119,18 +121,4 @@ tasks.withType<UploadMappingFileTask> {
     dependsOn("processDebugGoogleServices")
 }
 
-configurations.all {
-    resolutionStrategy {
-        sequenceOf(
-            "common", "common-java8", "runtime", "runtime-ktx", "runtime-compose", "viewmodel", "viewmodel-ktx", "viewmodel-compose", "viewmodel-savedstate", "livedata", "livedata-core", "livedata-core-ktx", "process"
-        ).forEach { depName: String ->
-            force("androidx.lifecycle:lifecycle-$depName:${libs.versions.androidxLifecycle.get()}")
-        }
-        force("androidx.savedstate:savedstate:1.4.0")
-        force("androidx.savedstate:savedstate-ktx:1.4.0")
-        force("androidx.savedstate:savedstate-compose:1.4.0")
-
-        force("androidx.concurrent:concurrent-futures:1.2.0")
-        force("com.google.errorprone:error_prone_annotations:2.30.0")
-    }
-}
+project.forceAndroidXDependencyVersions()

app/desktop/build.gradle.kts

@@ -1,3 +1,4 @@
+import com.softartdev.notedelight.configureJvmVersionProps
 import org.jetbrains.compose.desktop.application.dsl.TargetFormat
 import org.jetbrains.kotlin.gradle.dsl.JvmTarget
 
@@ -55,7 +56,7 @@ compose.desktop {
         nativeDistributions {
             targetFormats(TargetFormat.Dmg, TargetFormat.Msi, TargetFormat.Deb)
             packageName = "Note Delight"
-            packageVersion = "8.5.2"
+            packageVersion = "8.5.3"
             description = "Note app with encryption"
             copyright = "© 2023 SoftArtDev"
             macOS.iconFile.set(project.file("src/jvmMain/resources/app_icon.icns"))
@@ -69,3 +70,5 @@ compose.desktop {
         }
     }
 }
+
+project.configureJvmVersionProps(compose.desktop.application.nativeDistributions.packageVersion)

app/iosApp/iosApp.xcodeproj/project.pbxproj

@@ -475,7 +475,7 @@
 					"$(inherited)",
 					"@executable_path/Frameworks",
 				);
-                MARKETING_VERSION = 8.5.2;
+                MARKETING_VERSION = 8.5.3;
 				OTHER_LDFLAGS = (
 					"$(inherited)",
 					"-ObjC",
@@ -517,7 +517,7 @@
 					"$(inherited)",
 					"@executable_path/Frameworks",
 				);
-                MARKETING_VERSION = 8.5.2;
+                MARKETING_VERSION = 8.5.3;
 				OTHER_LDFLAGS = (
 					"$(inherited)",
 					"-ObjC",

app/iosApp/iosApp.xcworkspace/xcuserdata/artur.xcuserdatad/UserInterfaceState.xcuserstate

@@ -22,7 +22,7 @@
 	<key>CFBundlePackageType</key>
 	<string>$(PRODUCT_BUNDLE_PACKAGE_TYPE)</string>
 	<key>CFBundleShortVersionString</key>
-	<string>8.5.2</string>
+	<string>8.5.3</string>
 	<key>CFBundleVersion</key>
 	<string>19</string>
 	<key>LSRequiresIPhoneOS</key>

app/iosApp/iosApp/Info.plist

@@ -84,10 +84,10 @@ HTML entry point:
 
 ### Database
 
-- **Official SQLite WASM**: Native SQLite compiled to WebAssembly
+- **SQLite3MultipleCiphers WASM**: SQLite with encryption support compiled to WebAssembly
 - **OPFS Storage**: Origin-Private FileSystem for persistent database storage
 - **Web Worker**: Database operations run off the main thread
-- **No encryption**: SQLCipher not available in browsers
+- **Encryption ready**: [SQLite3MultipleCiphers](https://github.com/utelle/SQLite3MultipleCiphers) provides cipher support in the browser
 
 ### Webpack
 
@@ -124,7 +124,7 @@ build/dist/wasmJs/productionExecutable/
 ├── composeApp.wasm              # Application WebAssembly binary
 ├── skiko.wasm                   # Skia graphics engine
 ├── sqlite3.js                   # SQLite JavaScript
-├── sqlite3.wasm                 # Official SQLite WASM
+├── sqlite3.wasm                 # SQLite3MultipleCiphers WASM (with encryption)
 ├── sqlite.worker.js             # Custom OPFS worker
 ├── coi-serviceworker.js         # Service worker for headers
 └── sql-wasm.wasm               # Legacy SQL.js (fallback)
@@ -280,7 +280,7 @@ fun isWasmSupported(): Boolean = js("""
 
 ### Current Limitations
 
-1. ❌ **No encryption**: SQLCipher not available in browsers
+1. ✅ **Encryption**: [SQLite3MultipleCiphers](https://github.com/utelle/SQLite3MultipleCiphers) WASM provides encrypt/decrypt/rekey via `PRAGMA key`/`PRAGMA rekey`
 2. ✅ **Storage**: OPFS provides persistent database storage
 3. ⚠️ **File access**: Restricted browser file API
 4. ⚠️ **Performance**: Slower than native (improving)
@@ -309,7 +309,7 @@ The web app now uses OPFS (Origin-Private FileSystem) for persistent database st
 - ✅ **Persistent storage**: Survives browser sessions
 - ✅ **Better performance**: Direct file system access  
 - ✅ **Larger capacity**: Not limited by IndexedDB quotas
-- ✅ **Real SQLite**: Uses official SQLite WASM build
+- ✅ **Real SQLite with encryption**: Uses SQLite3MultipleCiphers WASM build
 
 ### Browser Support
 
@@ -506,7 +506,7 @@ When working with this module:
 3. **Size matters**: Minimize bundle size
 4. **Progressive enhancement**: Detect and use modern APIs gracefully
 5. **Testing**: Test in multiple browsers
-6. **Security**: No sensitive data without encryption
+6. **Security**: Encryption available via SQLite3MultipleCiphers
 7. **Performance**: Profile and optimize load time
 8. **Responsive**: Support mobile and desktop browsers
 9. **Accessibility**: Follow WCAG guidelines

app/web/README.md

@@ -1,11 +1,12 @@
 @file:OptIn(ExperimentalWasmDsl::class)
 
-import de.undercouch.gradle.tasks.download.Download
+import com.softartdev.notedelight.configureWasmJsChromeForKarmaTests
+import com.softartdev.notedelight.configureWebSqlite3mcWasmResources
 import org.jetbrains.kotlin.gradle.ExperimentalWasmDsl
-import org.jetbrains.kotlin.gradle.targets.js.testing.KotlinJsTest
 import org.jetbrains.kotlin.gradle.targets.js.webpack.KotlinWebpackConfig
 
 plugins {
+    alias(libs.plugins.gradle.convention)
     alias(libs.plugins.kotlin.multiplatform)
     alias(libs.plugins.compose)
     alias(libs.plugins.compose.compiler)
@@ -16,27 +17,22 @@ kotlin {
     wasmJs {
         outputModuleName.set("composeApp")
         browser {
-            val rootDirPath = project.rootDir.path
-            val projectDirPath = project.projectDir.path
-            testTask {
-                useKarma {
-                    useChrome()
-                    useChromeHeadless()
-                }
-            }
+            val rootDirPath: String = project.rootDir.path
+            val projectDirPath: String = project.projectDir.path
             commonWebpackConfig {
                 outputFileName = "composeApp.js"
                 devServer = (devServer ?: KotlinWebpackConfig.DevServer()).apply {
-                    // Serve sources to debug inside browser
+                    // Serve sources to debug inside the browser
                     static(rootDirPath)
                     static(projectDirPath)
                 }
             }
+            testTask { useKarma { useChromeHeadless() } }
         }
         binaries.executable()
     }
     sourceSets {
-        val wasmJsMain by getting {
+        wasmJsMain {
             dependencies {
                 implementation(projects.core.domain)
                 implementation(projects.core.presentation)
@@ -49,54 +45,21 @@ kotlin {
             }
             resources.srcDir(layout.buildDirectory.dir("sqlite"))
         }
-        val wasmJsTest by getting {
+        wasmJsTest {
             dependencies {
                 implementation(kotlin("test"))
                 implementation(projects.ui.test)
                 implementation(libs.compose.ui.test)
+                implementation(libs.compose.material3)
                 implementation(libs.compose.material.icons.extended)
                 implementation(libs.androidx.lifecycle.runtime.compose)
                 implementation(libs.androidx.lifecycle.runtime.testing)
+                implementation(libs.androidx.paging.common)
             }
             resources.srcDir(layout.buildDirectory.dir("sqlite"))
         }
     }
 }
 
-val chromeBinaryFromEnv = providers.environmentVariable("CHROME_BIN").orNull
-val hasChromeForTests = chromeBinaryFromEnv?.let { file(it).exists() } == true
-
-tasks.named<KotlinJsTest>("wasmJsBrowserTest").configure {
-    enabled = hasChromeForTests
-}
-
-val sqliteVersion = 3500400 // See https://sqlite.org/download.html for the latest wasm build version
-val sqliteDownload = tasks.register("sqliteDownload", Download::class.java) {
-    src("https://sqlite.org/2025/sqlite-wasm-$sqliteVersion.zip")
-    dest(layout.buildDirectory.dir("tmp"))
-    onlyIfModified(true)
-}
-val sqliteUnzip = tasks.register("sqliteUnzip", Copy::class.java) {
-    dependsOn(sqliteDownload)
-    from(zipTree(layout.buildDirectory.dir("tmp/sqlite-wasm-$sqliteVersion.zip"))) {
-        include("sqlite-wasm-$sqliteVersion/jswasm/**")
-        exclude("**/*worker1*") // We use our own worker
-        eachFile {
-            relativePath = RelativePath(true, *relativePath.segments.drop(2).toTypedArray())
-        }
-    }
-    into(layout.buildDirectory.dir("sqlite"))
-    includeEmptyDirs = false
-}
-// Hook the unzip task into the wasmJs resource processing
-tasks.named("wasmJsProcessResources").configure {
-    dependsOn(sqliteUnzip)
-}
-tasks.named<Copy>("wasmJsTestProcessResources").configure {
-    dependsOn(sqliteUnzip)
-    duplicatesStrategy = DuplicatesStrategy.EXCLUDE
-}
-
-tasks.named<Sync>("wasmJsBrowserDistribution").configure {
-    duplicatesStrategy = DuplicatesStrategy.EXCLUDE
-}
+project.configureWasmJsChromeForKarmaTests()
+project.configureWebSqlite3mcWasmResources()