The right-hand pane of the dialog is a multi-tab script editor.
Each tab hosts one .lua file. Standard text-editor behaviors
are all there: Find (Ctrl+F) with Find Next / Find
Previous / Replace / Replace All (case-sensitive, wraps); Go to
Line (Ctrl+G); Undo (Ctrl+Z), Redo
(Ctrl+Y / Ctrl+Shift+Z (macOS)), Cut / Copy / Paste,
Select All; a context menu mirroring those plus Add / Remove
Breakpoint and Run to this Line; tabs marked with a trailing *
for unsaved changes plus a save / discard prompt on close; a
monospace font that follows Wireshark’s main-window zoom so
Ctrl++ or Ctrl+= / Ctrl+- adjust the editor text size too.
Esc first hides any visible find / go-to-line bar; if
neither is shown, it queues a close of the dialog.
The debugger-specific behaviors:
Shift-click
variants for "toggle active" and "add disabled".
pinfo.src) becomes a path watch and an expression
(tostring(pinfo.src)) becomes an expression watch — see
Section 14.6, “Watch”. When the debugger is not paused the
new row’s value column shows a muted em dash until the next
pause.
Ctrl+Shift+B,
Add Watch Ctrl+Shift+W, and Run to this line
Ctrl+F10 (available when debugger is paused).
The code editor follows Wireshark’s light or dark color scheme and
reacts to changes in real time. All of its colors — background,
text, selection, line-number gutter, paused-line stripe, and the
syntax colors (strings, keywords, numbers, built-ins such as self,
function calls, and comments) — come from the optional code
section of the active Wireshark theme, which can be edited in the
Theme Designer (View → Internals → Theme Designer). A color the
theme leaves on Auto uses the editor’s default, inspired by VS
Code Dark+ / Light+ so that Lua source colors match what most
developers see in their primary editor. The tree panels use the
normal Wireshark palette.