Skip to content

Native iOS & Android

Go native (for the whole app or specific modules) when you need deep OS integration (widgets, complex background work, AR, peak performance) or when the Intune App SDK is mandated — it officially supports native Android/iOS/.NET/MAUI but not React Native.

iOS — Swift / SwiftUI

  • Swift 6 enables complete concurrency checking by default: strict Sendable, actor isolation, @MainActor. Swift 6.2 (Nov 2025) added "approachable concurrency" to ease migration — practitioners still describe full UIKit migration as a major lift.
  • Architecture options:
  • The Composable Architecture (TCA 1.0+) — Redux-style unidirectional flow with Reducer, State, Action, @Dependency, and .run async effects integrating Swift Concurrency.
  • MVVM, or Apple's lighter "MV" pattern.
  • Swift Package Manager is the dependency/modularization standard.
  • Security: Keychain accessibility classes; Secure Enclave key generation (SecKeyCreateRandomKey); App Attest for app/device attestation; App Transport Security.
  • CI/CD: Xcode Cloud (or the cross-platform options in mobile-azure-deployment).

Android — Kotlin / Jetpack Compose

  • Concurrency: Kotlin Coroutines + Flow + structured concurrency (viewModelScope, StateFlow/SharedFlow).
  • Recommended Compose architecture is UDF ("state flows down, events flow up") with state hoisting to the lowest common parent: a single immutable UI-state data class exposed as StateFlow, collected via collectAsStateWithLifecycle() (from androidx.lifecycle:lifecycle-runtime-compose). MVVM is Google's baseline; MVI adds a stricter reducer (oldState, event) -> newState + intents + one-off effects (Channel/SharedFlow) that aligns with Compose's declarative model.

Compose side-effect APIs

API Purpose
LaunchedEffect key-scoped coroutine
rememberCoroutineScope launch from callbacks
rememberUpdatedState fresh value without restart
DisposableEffect onDispose cleanup
SideEffect post-recomposition publish to non-Compose objects
derivedStateOf recompute only when result changes
produceState non-Compose → Compose state
snapshotFlow Compose State → Flow

DI & Jetpack libraries

  • Hilt (built on Dagger, compile-time DI): androidx.hilt 1.3.0 (Sep 10, 2025; hiltViewModel() moved to androidx.hilt:hilt-lifecycle-viewmodel-compose, targets Kotlin 2.0/KSP2). @HiltViewModel + constructor @Inject. Scopes: @Singleton (SingletonComponent) → @ActivityRetainedScoped (survives config changes) → @ViewModelScoped. Shared dependencies across ViewModels should be @ActivityRetainedScoped or @Singleton.
  • Room 2.8.4 (KSP; ksp("androidx.room:room-compiler:2.8.4")). Room 3.0 (androidx.room3, 3.0.0-alpha01, March 2026) is a KMP rewrite — KSP-only, coroutine-first (suspend DAOs), still alpha.
  • DataStore 1.1.7 (Preferences vs Proto) — async, Flow-based SharedPreferences replacement; no encrypted DataStore exists yet.
  • WorkManager for deferrable guaranteed work (@HiltWorker + HiltWorkerFactory).
  • Navigation Compose with hiltViewModel().

Android security

  • Jetpack Security Crypto (androidx.security:security-crypto) is DEPRECATED at 1.1.0-alpha07 (April 2025) — all APIs (incl. EncryptedSharedPreferences/EncryptedFile) deprecated "in favour of … direct use of Android Keystore." Migrate to direct Android Keystore or community forks (Ackee Guardian, dev.spght:encryptedprefs).
  • Android Keystore TEE vs StrongBox (HSM, API 28+) with key attestation; verify isInsideSecureHardware().
  • BiometricPrompt + CryptoObject ties crypto operations to biometric auth.
  • Build with Gradle + KSP. (Confirm the current androidx.biometric:biometric version before pinning.)

See mobile-security for the cross-platform secure-storage, comms, and MFA baseline.

Plugin: mobile-development · View SKILL.md on GitHub