[green] Ship numbered adjustable editor

Signed-off-by: Viwat Vchirawongkwin <viwat.v@chula.ac.th>

Author: yyods

app/DEPENDENCIES.md

@@ -10,12 +10,16 @@
 
 ## Policy
 
-- **Permissive only.** Every dependency — direct **and** transitive — must be
-  **MIT / BSD-2-Clause / BSD-3-Clause / Apache-2.0** (or another MIT-compatible
-  permissive licence). Copyleft (GPL/LGPL/MPL) is rejected. PyBLE ships MIT
-  (CON-6); no dependency may encumber that.
-- **Recorded rationale + minimum version.** Each direct dependency below carries
-  a rationale and a minimum (constraint) version.
+- **Permissive by default; exceptions are owner-ratified and package-specific.**
+  Direct and transitive dependencies must normally be **MIT / BSD-2-Clause /
+  BSD-3-Clause / Apache-2.0** (or another MIT-compatible permissive licence).
+  GPL/LGPL and unknown licences are rejected. MPL is rejected unless an
+  accepted decision explicitly names the exact package, shipped scope, and
+  notice/source obligations. [ADR-0012](../docs/decisions/0012-flutter-code-editor-behind-editorsurface.md)
+  is that owner ratification for unmodified `autotrie` 2.0.0 only; it does not
+  relicense PyBLE's MIT source or admit other copyleft dependencies.
+- **Recorded rationale + version policy.** Each direct dependency below carries
+  a rationale and either a minimum compatible version or an exact pin.
 - **Tracked lockfile.** `app/pubspec.lock` is committed; CI resolves against it
   with `flutter pub get --enforce-lockfile` and builds/tests from the pinned
   versions (BLD-2). A resolved-version change is a reviewable diff.
@@ -31,12 +35,14 @@ Toolchain pin: **Flutter 3.44.1 (stable)** / Dart SDK `^3.12.1` (see
 | Package | Kind | Constraint | Resolved | SPDX | Rationale |
 |---|---|---|---|---|---|
 | `flutter` | runtime (SDK) | Flutter SDK | 3.44.1 | BSD-3-Clause | The app framework. One codebase targets iPadOS + Android (BLD-1); BLE-only, so no web/desktop targets are wired. |
+| `flutter_code_editor` | runtime | `0.3.5` (exact) | 0.3.5 | Apache-2.0 AND MIT | The default rich Python editor behind PyBLE's app-owned `EditorSurface` seam (A-20, [ADR-0012](../docs/decisions/0012-flutter-code-editor-behind-editorsurface.md)). Exact pin because upstream is dormant and PyBLE owns the Tab/smart-punctuation safeguards plus the live plain-field fallback. The package `LICENSE` contains Apache-2.0 for the package and retains the MIT grant for its `code_field` ancestry. Optional network, error, find, and autocomplete UI stays disabled. Its unavoidable shipped `autotrie` dependency is covered by the owner-ratified `†` exception below. |
 | `flutter_localizations` | runtime (SDK) | Flutter SDK | 3.44.1 | BSD-3-Clause | The ARB/`gen-l10n` runtime + the `GlobalMaterial/Widgets/Cupertino` localization delegates (X-12). Activates `generate: true` (`app/l10n.yaml` → `AppLocalizations`) and is wired into `MaterialApp` at the shell-string migration (FR-I18N-1..5, BLD-5). Ships with the Flutter SDK (no separate version). |
 | `flutter_riverpod` | runtime | `^2.6.1` | 2.6.1 | MIT | The single declarative state-management approach fixed by [ADR-0007](../docs/decisions/0007-riverpod-state-management.md) (NFR-MAINT-2). The one `Connection` is injected at a single `ProviderScope` root and read-only-derived downstream (TDD D1/D3). A 3.x major bump requires a new ledger row + rationale. |
 | `flutter_blue_plus` | runtime | `^1.35.0` | 1.36.8 | BSD-3-Clause | The BLE transport (A-02; FR-BLE-1/2/3/5). The **sole** importer lives under `lib/ble/`; no other layer may import it (enforced by `tools/ci/import_boundary.sh`, CON-8). Min 1.35.0 is the floor carrying the GATT service-filtered scan + `requestMtu(247)` + write-without-response API the `lib/ble` adapter binds to. It is a **federated** plugin: it hard-depends on all platform backends (`_android`/`_darwin`/`_linux`/`_web`); only the Android + iOS (`_darwin`) backends compile into PyBLE's shipped targets — see the **copyleft carve-out** under the transitive table. |
 | `intl` | runtime | `^0.20.2` | 0.20.2 | BSD-3-Clause | The ARB message runtime consumed by the generated `AppLocalizations` (X-12). The constraint is reconciled to the exact `intl` the pinned `flutter_localizations` (Flutter 3.44.1) admits — 0.20.2. |
 | `package_info_plus` | runtime | `^10.2.1` | 10.2.1 | BSD-3-Clause | The sole `lib/app/app_build_info.dart` adapter reads the actual installed iOS/Android version and build number for the X-11 About page (FR-ABOUT-3). It is never imported by `lib/pble`; static ASCII `kAppVersion` remains the PBLE/1 HELLO identity. Min 10.2.1 supports PyBLE's pinned Flutter 3.44.1, Dart 3.12.1, iOS 13, Java 17, AGP 9.0.1, and Gradle 9.1 toolchain. |
 | `http` | runtime | `^1.6.0` | 1.6.0 | BSD-3-Clause | The bounded public GitHub REST client for the connected A-33 subset ([ADR-0040](../docs/decisions/0040-sha-pinned-connected-github-import.md)). The direct dependency is confined to `lib/github_import/`'s production composition point and `GithubRepositoryClient`; all feature consumers bind to the neutral `GithubApi` seam. The adapter accepts only canonical public repository input, sends no credential or user source, permits requests only to exact HTTPS host `api.github.com`, disables redirects, pins every browse to a full commit SHA, and bounds time and response bodies. Min 1.6.0 supplies the abortable request surface used by the cancellation contract on the pinned Dart/Flutter toolchain. |
+| `highlight` | runtime | `^0.7.0` | 0.7.0 | MIT | Python grammar data consumed directly by `lib/editor`'s rich adapter (A-20). It also appears in `flutter_code_editor`'s closure, but PyBLE's direct import makes the dependency and compatible minimum explicit under BLD-2. |
 | `webview_flutter` | runtime | `^4.14.1` | 4.14.1 | BSD-3-Clause | The offline platform-WebView host for the pinned Blockly runtime (A-31, ADR-0013). Min 4.14.1 matches PyBLE's Android 24 / iOS 13 platform floors and supplies `loadFlutterAsset`, JavaScript channels, and navigation delegates. Its sole importer is `lib/blocks/`; generated source and board actions stay in Dart behind the neutral `Connection` seam. |
 | `flutter_test` | dev (SDK) | Flutter SDK | 3.44.1 | BSD-3-Clause | Widget/unit/golden test harness; the substrate for the G1 suites (NFR-MAINT-4). |
 | `integration_test` | dev (SDK) | Flutter SDK | 3.44.1 | BSD-3-Clause | On-device Android/iPadOS parity coverage for the real Blockly platform WebView, local asset load, JavaScript bridge, generated Python, and file-backed actions (A-31). Ships with the Flutter SDK and is never part of a release build. |
@@ -46,19 +52,25 @@ Toolchain pin: **Flutter 3.44.1 (stable)** / Dart SDK `^3.12.1` (see
 
 All are pulled in by the direct dependencies above; PyBLE declares none of them
 directly. Every one is permissive and MIT-compatible (verified against the
-`LICENSE` file shipped in each package), **except** the two `‡`-marked `bluez` /
-`dbus` packages — see the copyleft carve-out below the table.
+`LICENSE` file shipped in the exact locally resolved package), **except** the
+`†`-marked shipped `autotrie` package and the two `‡`-marked Linux-only
+`bluez` / `dbus` packages. Their distinct copyleft treatments are recorded
+below the table.
 
 | Package | Resolved | SPDX |
 |---|---|---|
 | `args` | 2.7.0 | BSD-3-Clause |
 | `async` | 2.13.1 | BSD-3-Clause |
+| `autotrie` `†` | 2.0.0 | MPL-2.0 |
 | `bluez` `‡` | 0.8.3 | MPL-2.0 |
 | `boolean_selector` | 2.1.2 | BSD-3-Clause |
 | `characters` | 1.4.1 | BSD-3-Clause |
+| `charcode` | 1.4.0 | BSD-3-Clause |
 | `clock` | 1.1.2 | Apache-2.0 |
 | `collection` | 1.19.1 | BSD-3-Clause |
+| `crypto` | 3.0.7 | BSD-3-Clause |
 | `dbus` `‡` | 0.7.14 | MPL-2.0 |
+| `equatable` | 2.1.0 | MIT |
 | `fake_async` | 1.3.3 | Apache-2.0 |
 | `ffi` | 2.2.0 | BSD-3-Clause |
 | `ffi_leak_tracker` | 0.1.2 | BSD-3-Clause |
@@ -69,16 +81,20 @@ directly. Every one is permissive and MIT-compatible (verified against the
 | `flutter_blue_plus_platform_interface` | 7.0.0 | BSD-3-Clause |
 | `flutter_blue_plus_web` | 7.0.2 | BSD-3-Clause |
 | `flutter_driver` | (Flutter SDK) | BSD-3-Clause |
+| `flutter_highlight` | 0.7.0 | MIT |
 | `flutter_web_plugins` | (Flutter SDK) | BSD-3-Clause |
 | `fuchsia_remote_debug_protocol` | (Flutter SDK) | BSD-3-Clause |
+| `hive` | 2.2.3 | Apache-2.0 |
 | `http_parser` | 4.1.2 | BSD-3-Clause |
 | `leak_tracker` | 11.0.2 | BSD-3-Clause |
 | `leak_tracker_flutter_testing` | 3.0.10 | BSD-3-Clause |
 | `leak_tracker_testing` | 3.0.2 | BSD-3-Clause |
+| `linked_scroll_controller` | 0.2.0 | BSD-3-Clause |
 | `lints` | 6.1.0 | BSD-3-Clause |
 | `matcher` | 0.12.19 | BSD-3-Clause |
 | `material_color_utilities` | 0.13.0 | Apache-2.0 |
 | `meta` | 1.18.0 | BSD-3-Clause |
+| `mocktail` | 1.0.5 | MIT |
 | `package_info_plus_platform_interface` | 4.1.0 | BSD-3-Clause |
 | `path` | 1.9.1 | BSD-3-Clause |
 | `petitparser` | 7.0.2 | MIT |
@@ -87,6 +103,7 @@ directly. Every one is permissive and MIT-compatible (verified against the
 | `process` | 5.0.5 | BSD-3-Clause |
 | `riverpod` | 2.6.1 | MIT |
 | `rxdart` | 0.28.0 | Apache-2.0 |
+| `scrollable_positioned_list` | 0.3.8 | BSD-3-Clause |
 | `sky_engine` | (Flutter SDK) | BSD-3-Clause |
 | `source_span` | 1.10.2 | BSD-3-Clause |
 | `stack_trace` | 1.12.1 | BSD-3-Clause |
@@ -96,7 +113,16 @@ directly. Every one is permissive and MIT-compatible (verified against the
 | `sync_http` | 0.3.1 | BSD-3-Clause |
 | `term_glyph` | 1.2.2 | BSD-3-Clause |
 | `test_api` | 0.7.11 | BSD-3-Clause |
+| `tuple` | 2.0.2 | BSD-2-Clause |
 | `typed_data` | 1.4.0 | BSD-3-Clause |
+| `url_launcher` | 6.3.2 | BSD-3-Clause |
+| `url_launcher_android` | 6.3.32 | BSD-3-Clause |
+| `url_launcher_ios` | 6.4.1 | BSD-3-Clause |
+| `url_launcher_linux` | 3.2.2 | BSD-3-Clause |
+| `url_launcher_macos` | 3.2.5 | BSD-3-Clause |
+| `url_launcher_platform_interface` | 2.3.2 | BSD-3-Clause |
+| `url_launcher_web` | 2.4.3 | BSD-3-Clause |
+| `url_launcher_windows` | 3.1.5 | BSD-3-Clause |
 | `vector_math` | 2.2.0 | BSD-3-Clause |
 | `vm_service` | 15.2.0 | BSD-3-Clause |
 | `web` | 1.1.1 | BSD-3-Clause |
@@ -107,6 +133,36 @@ directly. Every one is permissive and MIT-compatible (verified against the
 | `win32` | 6.3.0 | BSD-3-Clause |
 | `xml` | 6.6.1 | MIT |
 
+### `†` Owner-ratified shipped carve-out — `autotrie` 2.0.0 (MPL-2.0)
+
+`flutter_code_editor` constructs its autocomplete index with `autotrie`, even
+when PyBLE leaves the package's autocomplete UI disabled. The dependency is
+therefore part of the Android and iPadOS app rather than a lockfile-only
+platform artifact. Accepted [ADR-0012](../docs/decisions/0012-flutter-code-editor-behind-editorsurface.md)
+is the project owner's explicit ratification of this bounded exception:
+
+- **Exact, unmodified scope.** The exception covers only the resolved
+  `autotrie` 2.0.0 package required by exactly pinned
+  `flutter_code_editor` 0.3.5. PyBLE vendors or modifies none of its files. A
+  package/version change or a PyBLE-authored modification requires a fresh
+  licence review and decision.
+- **File-level boundary.** MPL-2.0 applies to the covered `autotrie` files; it
+  does not relicense separate PyBLE-authored files or the app as a whole. The
+  downstream `hive` package is Apache-2.0.
+- **Distribution obligations remain active.** Release notices must include the
+  complete MPL-2.0 text, exact package/version identity, and a durable way to
+  obtain the corresponding unmodified source (the locked
+  [pub.dev package](https://pub.dev/packages/autotrie/versions/2.0.0) and its
+  [recorded upstream repository](https://github.com/AKushWarrior/autotrie)).
+  Flutter's generated Pub-package `NOTICES.Z`/`LicenseRegistry` payload (the
+  app's `THIRD_PARTY_LICENSES` bundle) must retain this entry on both shipped
+  targets. The in-app **Open-source licenses** page reads that payload locally.
+- **No general copyleft precedent.** This owner-approved exception does not
+  admit another MPL package, GPL/LGPL code, or an unknown licence by analogy.
+
+This is intentionally separate from the `‡` exception below: `autotrie` is
+shipped and its MPL obligations apply, while `bluez` / `dbus` are not shipped.
+
 ### `‡` Copyleft carve-out — `bluez` / `dbus` (MPL-2.0), Linux-only, never shipped
 
 `flutter_blue_plus` is a **federated** plugin that hard-depends on every platform

app/lib/editor/editor.dart

@@ -10,14 +10,21 @@
 /// ([EditorView]). Every board action crosses the abstract `Connection` seam
 /// (CON-8); nothing here imports `lib/ble/`.
 ///
-/// Deferred (recorded, not dropped): Drift persistence (A-24); syntax
-/// highlighting, multi-file tabs, find/replace, external-keyboard shortcuts, and
-/// a line-number gutter (FR-EDIT-1..4, OI-1).
+/// ADR-0012 puts the rich and plain editing implementations behind the exported
+/// EditorSurface seam. The rich default supplies Python highlighting and line
+/// numbers; session display settings resize code and gutter together. Deferred
+/// (recorded, not dropped): Drift persistence (A-24), multi-file tabs,
+/// app-owned find/replace, and the remaining external-keyboard shortcuts.
 library;
 
+export 'editor_display_settings.dart';
 export 'editor_document.dart';
+export 'editor_surface.dart';
+export 'editor_surface_factory.dart';
 export 'editor_view.dart';
+export 'plain_editor_surface.dart' show kEditorPlainSurfaceKey;
 export 'program_actions.dart';
+export 'rich_editor_surface.dart' show kEditorRichSurfaceKey;
 export 'run_controller.dart';
 export 'save_controller.dart';
 export 'smart_punctuation.dart';

app/lib/editor/editor_display_settings.dart

@@ -0,0 +1,58 @@
+// SPDX-License-Identifier: MIT
+// Part of PyBLE (https://pyble.dev) — see /LICENSE.
+
+/// Session-wide editor presentation settings.
+///
+/// A-24 will hydrate this state through the single Drift `SettingsStore`.
+/// Until that store exists the value deliberately survives navigation, but not
+/// process restart; introducing a second preferences backend would violate D4.
+library;
+
+import 'package:flutter/foundation.dart';
+import 'package:flutter_riverpod/flutter_riverpod.dart';
+
+/// Inclusive editor-font bounds and the Signal-code default (FR-EDIT-5).
+const double kEditorMinFontSize = 10;
+const double kEditorDefaultFontSize = 14;
+const double kEditorMaxFontSize = 24;
+const double kEditorFontSizeStep = 1;
+
+@immutable
+class EditorDisplaySettings {
+  const EditorDisplaySettings({this.fontSize = kEditorDefaultFontSize});
+
+  final double fontSize;
+
+  @override
+  bool operator ==(Object other) =>
+      identical(this, other) ||
+      other is EditorDisplaySettings && other.fontSize == fontSize;
+
+  @override
+  int get hashCode => fontSize.hashCode;
+}
+
+class EditorDisplaySettingsController extends Notifier<EditorDisplaySettings> {
+  @override
+  EditorDisplaySettings build() => const EditorDisplaySettings();
+
+  void increaseFontSize() => setFontSize(state.fontSize + kEditorFontSizeStep);
+
+  void decreaseFontSize() => setFontSize(state.fontSize - kEditorFontSizeStep);
+
+  /// Applies a finite, whole-point value inside the frozen editor range.
+  void setFontSize(double value) {
+    final double normalized = value.isFinite
+        ? value.roundToDouble().clamp(kEditorMinFontSize, kEditorMaxFontSize)
+        : kEditorDefaultFontSize;
+    if (normalized == state.fontSize) return;
+    state = EditorDisplaySettings(fontSize: normalized);
+  }
+}
+
+/// Kept alive at the application ProviderScope so zoom survives navigation.
+final NotifierProvider<EditorDisplaySettingsController, EditorDisplaySettings>
+editorDisplaySettingsProvider =
+    NotifierProvider<EditorDisplaySettingsController, EditorDisplaySettings>(
+      EditorDisplaySettingsController.new,
+    );

app/lib/editor/editor_surface.dart

@@ -0,0 +1,41 @@
+// SPDX-License-Identifier: MIT
+// Part of PyBLE (https://pyble.dev) — see /LICENSE.
+
+/// The package-independent editor presentation seam fixed by ADR-0012.
+library;
+
+import 'package:flutter/material.dart';
+
+@immutable
+class EditorSurfaceConfiguration {
+  const EditorSurfaceConfiguration({
+    required this.text,
+    required this.onChanged,
+    required this.textStyle,
+    required this.backgroundColor,
+    required this.cursorColor,
+    required this.gutterColor,
+    required this.hintText,
+    required this.contentPadding,
+  });
+
+  /// Push-in document snapshot. The surface never owns canonical source.
+  final String text;
+
+  /// Stream-out edits. The document provider remains the source of truth.
+  final ValueChanged<String> onChanged;
+  final TextStyle textStyle;
+  final Color backgroundColor;
+  final Color cursorColor;
+  final Color gutterColor;
+  final String hintText;
+  final EdgeInsets contentPadding;
+}
+
+/// Base type implemented by both executable ADR-0012 surfaces.
+abstract class EditorSurface extends StatefulWidget {
+  const EditorSurface({super.key});
+}
+
+typedef EditorSurfaceBuilder =
+    EditorSurface Function(EditorSurfaceConfiguration configuration);

app/lib/editor/editor_surface_factory.dart

@@ -0,0 +1,22 @@
+// SPDX-License-Identifier: MIT
+// Part of PyBLE (https://pyble.dev) — see /LICENSE.
+
+/// ADR-0012 editor-surface composition and its test/fallback injection seam.
+library;
+
+import 'package:flutter_riverpod/flutter_riverpod.dart';
+
+import 'editor_surface.dart';
+import 'plain_editor_surface.dart';
+import 'rich_editor_surface.dart';
+
+EditorSurface richEditorSurfaceBuilder(
+  EditorSurfaceConfiguration configuration,
+) => RichEditorSurface(configuration: configuration);
+
+EditorSurface plainEditorSurfaceBuilder(
+  EditorSurfaceConfiguration configuration,
+) => PlainEditorSurface(configuration: configuration);
+
+final Provider<EditorSurfaceBuilder> editorSurfaceBuilderProvider =
+    Provider<EditorSurfaceBuilder>((_) => richEditorSurfaceBuilder);