chore(main): release sql_studio 0.4.0

.actrc

@@ -0,0 +1 @@
+-P ubuntu-latest=catthehacker/ubuntu:act-latest

.claude/settings.json

@@ -1,12 +1,15 @@
 {
+  "$schema": "https://json.schemastore.org/claude-code-settings.json",
   "hooks": {
     "PostToolUse": [
       {
         "matcher": "Edit|Write",
         "hooks": [
           {
             "type": "command",
-            "command": "scripts/format_edited_file.sh"
+            "command": "scripts/format_edited_file.sh",
+            "timeout": 30,
+            "statusMessage": "Formatting Dart..."
           }
         ]
       }
@@ -16,10 +19,27 @@
         "hooks": [
           {
             "type": "command",
-            "command": "scripts/verify_stop_gate.sh"
+            "command": "scripts/verify_stop_gate.sh",
+            "timeout": 60,
+            "statusMessage": "Checking quality gate..."
           }
         ]
       }
     ]
+  },
+  "permissions": {
+    "allow": [
+      "Bash(./scripts/verify.sh)",
+      "Bash(./scripts/verify.sh:*)",
+      "Bash(./scripts/check_coverage.sh:*)",
+      "Bash(./scripts/check_l10n.sh)",
+      "Bash(./scripts/workspace_hash.sh)",
+      "Bash(fvm flutter analyze)",
+      "Bash(fvm flutter analyze:*)",
+      "Bash(fvm flutter test:*)",
+      "Bash(fvm flutter gen-l10n)",
+      "Bash(fvm flutter pub get)",
+      "Bash(fvm dart format:*)"
+    ]
   }
 }

.githooks/pre-push

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+#
+# Runs the quality gate before a push, so a failure surfaces here rather than
+# as a red CI run minutes later.
+#
+# Branch protection on main is what actually blocks a broken change. This hook
+# is a local shortcut to the same answer, and `git push --no-verify` skips it.
+
+set -euo pipefail
+
+readonly root="$(git rev-parse --show-toplevel)"
+cd "$root"
+
+readonly deleted_ref="0000000000000000000000000000000000000000"
+
+# stdin carries one line per ref being pushed: <local ref> <local sha>
+# <remote ref> <remote sha>. A branch deletion has no commits to check.
+pushing_commits=false
+while read -r _ local_sha _ _; do
+  [[ "$local_sha" == "$deleted_ref" ]] && continue
+  pushing_commits=true
+done
+
+"$pushing_commits" || exit 0
+
+exec "$root/scripts/verify.sh"

.github/pull_request_template.md

@@ -0,0 +1,45 @@
+## What
+
+<!-- What this change does, in a sentence or two. Link the issue it came from. -->
+
+Closes #
+
+## Why
+
+<!-- The problem it solves. Skip only if the "What" already makes it obvious. -->
+
+## Checklist
+
+Tick what applies, delete what does not, and say why for anything left out.
+
+**Code**
+
+- [ ] Follows the existing structure: feature-first, `data`/`domain`/`presentation`, Riverpod for state (see `CLAUDE.md`)
+- [ ] No inline colors, spacing, radii or text styles: everything comes from the shared design tokens
+- [ ] No hardcoded user-facing text
+- [ ] `Result<T>` matched with `when`/`switch`, never `is SuccessResult`/`is FailureResult`
+- [ ] Logging goes through `AppLogger`; no SQL text, database names or other user data logged
+
+**Tests**
+
+- [ ] New logic has tests (repository, use case, view model, widget behaviour)
+- [ ] A bug fix has a test that fails without the fix
+
+**Generated and localized**
+
+- [ ] `gen-l10n` re-run, output committed
+- [ ] New strings added to all three ARB files (`en`, `es`, `pt`), each with a `description`
+
+**Documentation**
+
+- [ ] Docs in `docs/` updated in all three languages, if the change touched behaviour, structure or tooling
+- [ ] README scripts table still accurate
+
+**Gate**
+
+- [ ] `./scripts/verify.sh` passes locally
+- [ ] `act pull_request` run, if this touches `.github/workflows/`
+
+## Notes for the reviewer
+
+<!-- Anything deliberately left out, a trade-off taken, or a place worth a closer look. -->

.github/workflows/ci.yaml

@@ -69,9 +69,62 @@ jobs:
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: coverage/lcov.info
+          flags: app
           name: sql_studio
           fail_ci_if_error: false
 
+  app_ui:
+    name: packages/app_ui
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    defaults:
+      run:
+        working-directory: packages/app_ui
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Read Flutter version from .fvmrc
+        id: flutter-version
+        run: echo "version=$(jq -r '.flutter' ../../.fvmrc)" >> "$GITHUB_OUTPUT"
+
+      - uses: subosito/flutter-action@v2
+        with:
+          flutter-version: ${{ steps.flutter-version.outputs.version }}
+          channel: 'stable'
+          cache: true
+
+      - name: Install dependencies
+        run: flutter pub get
+
+      - name: Verify formatting
+        run: dart format --output=none --set-exit-if-changed lib/ test/
+
+      - name: Analyze
+        run: flutter analyze
+
+      - name: Test with coverage
+        run: flutter test --coverage
+
+      # A low interim floor: most components are still untested token
+      # classes (AppColors' ThemeExtension lerp/copyWith) waiting on later
+      # migration steps. Raise this as coverage catches up, not on faith.
+      - name: Check coverage threshold
+        run: ../../scripts/check_coverage.sh packages/app_ui/coverage/lcov.info 79
+
+      # lcov paths are relative to the package root; Codecov matches them
+      # against the repository, so they need the package prefix.
+      - name: Rewrite coverage paths to be repository-relative
+        run: sed -i 's|^SF:|SF:packages/app_ui/|' coverage/lcov.info
+
+      - name: Upload coverage to Codecov
+        uses: codecov/codecov-action@v5
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          files: packages/app_ui/coverage/lcov.info
+          flags: app_ui
+          name: app_ui
+          fail_ci_if_error: false
+
   build_apk:
     name: Build release APK
     needs: quality
@@ -177,6 +230,12 @@ jobs:
             timeout 480 flutter test integration_test/delete_database_test.dart -d emulator-5554
             adb -s emulator-5554 shell am force-stop br.com.dariomatias.sql_studio
             timeout 480 flutter test integration_test/locale_switch_test.dart -d emulator-5554
+            adb -s emulator-5554 shell am force-stop br.com.dariomatias.sql_studio
+            timeout 480 flutter test integration_test/theme_persists_test.dart -d emulator-5554
+            adb -s emulator-5554 shell am force-stop br.com.dariomatias.sql_studio
+            timeout 480 flutter test integration_test/workspace_layout_persists_test.dart -d emulator-5554
+            adb -s emulator-5554 shell am force-stop br.com.dariomatias.sql_studio
+            timeout 480 flutter test integration_test/favorite_database_persists_test.dart -d emulator-5554
 
   osv-scanner:
     name: Scan dependencies for known vulnerabilities
@@ -188,11 +247,12 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      # Reads pubspec.lock against the OSV database, which carries pub
-      # advisories. The lockfile is what matters: the caret ranges in
+      # Reads the lockfiles against the OSV database, which carries pub
+      # advisories. The lockfile is what matters: the caret ranges in a
       # pubspec.yaml say what could resolve, not what actually ships.
-      - name: Scan the lockfile
+      - name: Scan the lockfiles
         uses: google/osv-scanner-action/osv-scanner-action@v2.5.1
         with:
           scan-args: |-
             --lockfile=pubspec.lock
+            --lockfile=packages/app_ui/pubspec.lock

.gitignore

@@ -31,7 +31,9 @@ migrate_working_dir/
 .pub-cache/
 .pub/
 /build/
+packages/*/build/
 /coverage/
+packages/*/coverage/
 
 # Symbolication related
 app.*.symbols
@@ -49,3 +51,8 @@ app.*.map.json
 
 # Local verify.sh pass stamp, read by the Stop hook.
 /.claude/verify-stamp
+
+# Per-developer Claude Code state: a personal permissions override, and
+# worktrees created by isolated agent runs.
+/.claude/settings.local.json
+/.claude/worktrees/

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.3.0"
+  ".": "0.4.0"
 }

.vscode/settings.json

@@ -1,3 +1,3 @@
 {
-  "dart.flutterSdkPath": ".fvm/versions/3.41.6"
+  "dart.flutterSdkPath": ".fvm/flutter_sdk"
 }