fix(build): unblock gradle build — wrapper 9.5.0 + catalog sync + libs/mifos-passcode removal + sync-dirs heal

After commit ac2fbe2 (T0.1 quarantine) + da586a7 (16 alias catch-up), the
Test Coverage Floor workflow on PR #2691 still failed at gradle script
compilation. Local reproduction with openjdk@17 surfaced a chain of compounding
issues; this commit fixes them so `./gradlew help` now succeeds.

`--no-verify` used per user direction — detekt has many pre-existing violations
across the codebase (long parameter lists, parameter order) unrelated to this
commit's changes. Detekt cleanup is a separate wave.

Major changes:

1. Gradle wrapper 8.13 → 9.5.0 (gradle/wrapper/*) — kmp-product-flavors:2.4.2
   ships Kotlin 2.2 metadata; Gradle 8.13's kotlin-dsl uses Kotlin 2.0.21 which
   max-reads metadata 2.1. Matches template's wrapper version.

2. Root build.gradle.kts — added:
   - buildscript classpath R8 9.1.31 pin (understands Kotlin 2.3.20 metadata)
   - Root kover + kover.convention plugin registration so KoverConventionPlugin
     can apply at per-module level
   - subprojects resolutionStrategy forcing JetBrains androidx.lifecycle 2.9.6
     + savedstate 1.3.6 (resolves KLIB resolver duplicate-warnings)
   - failOnNoDiscoveredTests = false per-test-task (Gradle 9 KMP compat)
   - roborazzi alias

3. gradle/libs.versions.toml — catalog catch-up:
   - Added missing version refs: appPackage
   - Added missing library alias: compottie (bare, alongside -lite/-resources;
     core-base/ui/build.gradle.kts uses `libs.compottie` directly which
     Gradle 9 rejected when only sub-aliases existed)
   - Stripped `version = "unspecified"` from 15 convention-plugin aliases
     (Gradle 9 rejects with "Error resolving plugin … plugin is already on
     the classpath with an unknown version")
   - Removed androidx-hilt-navigation-compose + androidxHiltNavigationCompose
     (field-officer is Koin-only per user direction; the only reference was
     in libs/mifos-passcode which is deleted in this commit)

4. Deleted libs/mifos-passcode/ entirely (109 files) — vendored legacy
   Hilt-based library excluded from build since 2024 (settings.gradle.kts
   had `//include(":libs:mifos-passcode")` commented). Functionality replaced
   by feature/passcode (Koin-based, scheduled W2 in
   active/feature-vertical-migration/PLAN.md). Removed commented include from
   settings.gradle.kts.

5. core/network/build.gradle.kts — removed `add("kspIosX64", libs.ktorfit.ksp)`
   (TS-2 dropped iosX64 target; this reference triggered "Configuration with
   name 'kspIosX64' not found" at config time).

6. sync-dirs self-heal (mirrors openMF/kmp-project-template PR #163):
   - .github/workflows/sync-dirs.yaml: new "Heal libs.versions.toml" step
     between sync + temp-branch cleanup. Detects build-logic `libs.<X>` refs
     unresolved in consumer catalog, pulls them (and their referenced version
     keys) from upstream via `git show $TEMP_BRANCH:gradle/libs.versions.toml`.
   - sync-dirs.sh: matching heal_libs_versions_toml() function for local CLI.
   Eliminates the failure mode that required this commit's manual catch-up.

7. File renames for ktlint compliance:
   - core/ui/.../ViewModelTypes.kt → BaseViewModel.kt (single typealias)
   - feature/document/.../DocumentRoute.kt → DocumentListRoute.kt
   - feature/path-tracking/.../PathTrackingRoute.kt → PathTrackingScreenRoute.kt
   - feature/search/.../SearchRoute.kt → SearchScreenRoute.kt

8. core/data/.../legacy/di/RepositoryModule.legacy.kt — added @file:Suppress
   "ktlint:standard:no-empty-file" + a private object marker. The file is
   intentionally a /* */ block-commented reference (legacy/ is gradle-excluded)
   but spotless still scans it.

Verification (with openjdk@17):
  ✅ ./gradlew help              — BUILD SUCCESSFUL
  ✅ ./gradlew -p build-logic help — BUILD SUCCESSFUL
  ✅ ./gradlew spotlessApply     — BUILD SUCCESSFUL
  ⚠️  ./gradlew :cmp-android:assembleDemoDebug — 531/535 tasks succeed; real
     Kotlin compile errors remain in core/model (B6.10 leftover unresolved
     imports). Tracked for next commit.
  ⚠️  ./gradlew detekt           — Many pre-existing violations. Separate cleanup wave.

Run locally:
  export JAVA_HOME=/opt/homebrew/opt/openjdk@17
  export PATH=$JAVA_HOME/bin:$PATH
  ./gradlew help                # ← passes
  ./gradlew :cmp-android:assembleDemoDebug  # ← reaches kotlin compile

The build is unblocked at the gradle-script + catalog level. PR #2691 will
now proceed further than commit da586a7 did in the Test Coverage Floor CI.

Author: Rajan Maurya

.github/workflows/sync-dirs.yaml

@@ -249,6 +249,126 @@ jobs:
 
           echo "Sync completed successfully!"
 
+      - name: Heal libs.versions.toml — pull missing build-logic aliases from upstream
+        shell: bash
+        run: |
+          set -uo pipefail
+          # Self-healing step (matches openMF/kmp-project-template PR #163).
+          # `build-logic/` (+ feature build.gradle.kts files) are sync'd from upstream,
+          # but `gradle/libs.versions.toml` is intentionally consumer-local (it carries
+          # project-specific package names + version overrides). When upstream adds
+          # new `libs.<X>` accessors with their matching catalog entries, only the
+          # build files get sync'd — the consumer catalog falls behind. This step
+          # detects that gap and pulls the missing alias entries (and their referenced
+          # version keys) directly from the upstream catalog.
+
+          LIBS_TOML="gradle/libs.versions.toml"
+          TEMP_BRANCH="${{ env.TEMP_BRANCH }}"
+
+          if [[ ! -f "$LIBS_TOML" ]]; then
+            echo "ℹ️  Consumer has no $LIBS_TOML — nothing to heal."
+            exit 0
+          fi
+
+          # Extract every libs.<ref> usage in build files (both build.gradle.kts and
+          # build-logic Kotlin source).
+          raw_refs=$(grep -rhoE '\blibs\.[a-zA-Z][a-zA-Z0-9._]*' \
+                  --include='*.kt' --include='*.kts' \
+                  . 2>/dev/null \
+              | sed -E 's/^libs\.//' \
+              | sort -u)
+
+          # Method-call accessors are not alias references — they take string args.
+          method_re='^(findLibrary|findVersion|findBundle|findPlugin)([(.]|$)'
+
+          # Cache upstream's catalog content once.
+          upstream_toml=$(git show "${TEMP_BRANCH}:${LIBS_TOML}" 2>/dev/null || true)
+          if [[ -z "$upstream_toml" ]]; then
+            echo "⚠️  Upstream has no ${LIBS_TOML} — skipping heal."
+            exit 0
+          fi
+
+          insert_into_section() {
+            local section_name="$1"
+            local line="$2"
+            local line_no
+            line_no=$(grep -n "^\[${section_name}\]" "$LIBS_TOML" | head -1 | cut -d: -f1)
+            if [[ -z "$line_no" ]]; then
+              echo "  ⚠️  No [$section_name] section header in $LIBS_TOML — skipping '$line'"
+              return 1
+            fi
+            { head -n "$line_no" "$LIBS_TOML"; echo "$line"; tail -n +$((line_no + 1)) "$LIBS_TOML"; } > "${LIBS_TOML}.tmp"
+            mv "${LIBS_TOML}.tmp" "$LIBS_TOML"
+          }
+
+          healed=0
+          warnings=0
+          while IFS= read -r ref; do
+            [[ -z "$ref" ]] && continue
+            [[ "$ref" =~ $method_re ]] && continue
+            # Skip `versions.X.get` — `libs.versions.X.get()` is a method call;
+            # the actual key is X.
+            if [[ "$ref" =~ ^versions\..*\.get$ ]]; then
+              ref="${ref%.get}"
+            fi
+
+            section="libraries"
+            lookup="$ref"
+            case "$ref" in
+              plugins.*)
+                section="plugins"
+                lookup="${ref#plugins.}"
+                ;;
+              versions.*)
+                section="versions"
+                lookup="${ref#versions.}"
+                [[ "$lookup" == "toml" ]] && continue
+                ;;
+              bundles.*)
+                section="bundles"
+                lookup="${ref#bundles.}"
+                ;;
+            esac
+            key=$(echo "$lookup" | sed 's/\./-/g')
+
+            if grep -qE "^${key}[[:space:]]*=" "$LIBS_TOML"; then
+              continue
+            fi
+
+            upstream_line=$(echo "$upstream_toml" | grep -E "^${key}[[:space:]]*=" | head -1)
+            if [[ -z "$upstream_line" ]]; then
+              echo "  ⚠️  Missing alias '$key' (for libs.$ref) not present in upstream catalog either — manual fix needed."
+              warnings=$((warnings + 1))
+              continue
+            fi
+
+            ref_version=$(echo "$upstream_line" | grep -oE 'version\.ref = "[^"]+"' | sed -E 's/version\.ref = "([^"]+)"/\1/' | head -1)
+            if [[ -n "$ref_version" ]] && ! grep -qE "^${ref_version}[[:space:]]*=" "$LIBS_TOML"; then
+              ver_line=$(echo "$upstream_toml" | grep -E "^${ref_version}[[:space:]]*=" | head -1)
+              if [[ -n "$ver_line" ]]; then
+                if insert_into_section "versions" "$ver_line"; then
+                  echo "  ✅ Added version '$ref_version' (referenced by '$key') to [versions]"
+                  healed=$((healed + 1))
+                fi
+              fi
+            fi
+
+            if insert_into_section "$section" "$upstream_line"; then
+              echo "  ✅ Added '$key' to [$section] from upstream"
+              healed=$((healed + 1))
+            fi
+          done <<< "$raw_refs"
+
+          echo
+          if [[ $healed -gt 0 ]]; then
+            echo "🩹 Healed $healed entries in $LIBS_TOML — they will be included in the sync PR."
+          elif [[ $warnings -gt 0 ]]; then
+            echo "⚠️  $warnings missing aliases could not be auto-healed (not in upstream either). Manual fix needed."
+            exit 1
+          else
+            echo "✅ libs.versions.toml already in sync with build-logic — no heal needed."
+          fi
+
       - name: Clean up temporary branch
         if: always()
         run: git branch -D "${{ env.TEMP_BRANCH }}" 2>/dev/null || true

build.gradle.kts

@@ -1,6 +1,27 @@
 import org.gradle.kotlin.dsl.libs
 
 // Top-level build file where you can add configuration options common to all sub-projects/modules.
+buildscript {
+    repositories {
+        google {
+            content {
+                includeGroupByRegex("com\\.android.*")
+                includeGroupByRegex("com\\.google.*")
+                includeGroupByRegex("androidx.*")
+            }
+        }
+        mavenCentral()
+        gradlePluginPortal()
+    }
+    dependencies {
+        // Pin R8 to a version that understands Kotlin 2.3 metadata. The R8 bundled
+        // with AGP 8.12.3 reads up to Kotlin metadata 2.1 only, so every release-mode
+        // build with Kotlin 2.3.20 emits "R8: An error occurred when parsing kotlin
+        // metadata" warnings for almost every class. Override it with R8 9.1.x stable.
+        classpath("com.android.tools:r8:9.1.31")
+    }
+}
+
 plugins {
     alias(libs.plugins.kotlinCocoapods) apply false
     alias(libs.plugins.android.application) apply false
@@ -28,6 +49,14 @@ plugins {
     alias(libs.plugins.kotlinMultiplatform) apply false
     alias(libs.plugins.wire) apply false
     alias(libs.plugins.ktorfit) apply false
+
+    // Kover — root-level registration so the plugin is on the classpath for
+    // KoverConventionPlugin (build-logic) to apply per-module. Per-module kover
+    // application happens via `org.convention.kover.plugin` chained from base
+    // convention plugins (AndroidApplication / KMPLibrary / KMPCoreBaseLibrary).
+    // cmp-desktop applies it directly. Tasks: koverHtmlReport / koverXmlReport.
+    alias(libs.plugins.kover) apply false
+    alias(libs.plugins.kover.convention)
 }
 
 object DynamicVersion {
@@ -47,8 +76,33 @@ tasks.register("versionFile") {
 // Used by module graph generator script
 tasks.register("printModulePaths") {
     subprojects {
-        if (subprojects.size == 0) {
+        if (subprojects.isEmpty()) {
             println(this.path)
         }
     }
+}
+
+// Force consistent versions across all subprojects to fix KLIB resolver duplicate warnings.
+// The conflict is between org.jetbrains.androidx.* (CMP) and androidx.* (Google) transitive deps.
+subprojects {
+    configurations.all {
+        resolutionStrategy.eachDependency {
+            if (requested.group == "org.jetbrains.androidx.lifecycle") {
+                useVersion("2.9.6")
+            }
+            if (requested.group == "org.jetbrains.androidx.savedstate") {
+                useVersion("1.3.6")
+            }
+        }
+    }
+
+    // Gradle 9+ defaults Test.failOnNoDiscoveredTests to true. AGP unit-test
+    // tasks (testDemoDebugUnitTest, testProdReleaseUnitTest, etc.) then fail
+    // on KMP `androidUnitTest` source sets that contain expect/actual TEST
+    // HELPERS but no @Test classes — those test classes legitimately live in
+    // `commonTest` or `desktopTest`. Disabling per-task unblocks the kover
+    // coverage gate without weakening real-test signal.
+    tasks.withType<org.gradle.api.tasks.testing.Test>().configureEach {
+        failOnNoDiscoveredTests = false
+    }
 }

cmp-android/build.gradle.kts

@@ -5,7 +5,7 @@
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at https://mozilla.org/MPL/2.0/.
  *
- * See https://github.com/openMF/kmp-project-template/blob/main/LICENSE
+ * See https://github.com/openMF/mifos-x-field-officer-app/blob/master/LICENSE.md
  */
 import com.android.build.api.instrumentation.InstrumentationScope
 import org.convention.AppBuildType

cmp-android/lint-baseline.xml

@@ -6,7 +6,7 @@
     If a copy of the MPL was not distributed with this file,
     You can obtain one at https://mozilla.org/MPL/2.0/.
 
-    See https://github.com/openMF/kmp-project-template/blob/main/LICENSE
+    See https://github.com/openMF/mifos-x-field-officer-app/blob/master/LICENSE.md
 -->
 <issues format="6" by="lint 8.5.2" type="baseline" client="gradle" dependencies="true" name="AGP (8.5.2)" variant="all" version="8.5.2">
 

cmp-android/src/main/AndroidManifest.xml

@@ -6,7 +6,7 @@
     If a copy of the MPL was not distributed with this file,
     You can obtain one at https://mozilla.org/MPL/2.0/.
 
-    See https://github.com/openMF/kmp-project-template/blob/main/LICENSE
+    See https://github.com/openMF/mifos-x-field-officer-app/blob/master/LICENSE.md
 -->
 <manifest xmlns:android="http://schemas.android.com/apk/res/android"
     xmlns:tools="http://schemas.android.com/tools">

cmp-android/src/main/kotlin/cmp/android/app/AndroidApp.kt

@@ -5,7 +5,7 @@
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at https://mozilla.org/MPL/2.0/.
  *
- * See See https://github.com/openMF/kmp-project-template/blob/main/LICENSE
+ * See https://github.com/openMF/mifos-x-field-officer-app/blob/master/LICENSE.md
  */
 package cmp.android.app
 

cmp-android/src/main/kotlin/cmp/android/app/AppThemeExtensions.kt

@@ -5,7 +5,7 @@
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at https://mozilla.org/MPL/2.0/.
  *
- * See See https://github.com/openMF/kmp-project-template/blob/main/LICENSE
+ * See https://github.com/openMF/mifos-x-field-officer-app/blob/master/LICENSE.md
  */
 package cmp.android.app
 

cmp-android/src/main/kotlin/cmp/android/app/BuildConfigUtils.kt

@@ -5,7 +5,7 @@
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at https://mozilla.org/MPL/2.0/.
  *
- * See See https://github.com/openMF/kmp-project-template/blob/main/LICENSE
+ * See https://github.com/openMF/mifos-x-field-officer-app/blob/master/LICENSE.md
  */
 package cmp.android.app
 

cmp-android/src/main/kotlin/cmp/android/app/ComponentActivityExtensions.kt

@@ -5,7 +5,7 @@
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at https://mozilla.org/MPL/2.0/.
  *
- * See See https://github.com/openMF/kmp-project-template/blob/main/LICENSE
+ * See https://github.com/openMF/mifos-x-field-officer-app/blob/master/LICENSE.md
  */
 package cmp.android.app
 

cmp-android/src/main/kotlin/cmp/android/app/ConfigurationExtension.kt

@@ -5,7 +5,7 @@
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at https://mozilla.org/MPL/2.0/.
  *
- * See See https://github.com/openMF/kmp-project-template/blob/main/LICENSE
+ * See https://github.com/openMF/mifos-x-field-officer-app/blob/master/LICENSE.md
  */
 package cmp.android.app