linesmith_core/segments/

mod.rs

//! Segment trait and layout-intent types. Full contract lives in
//! `docs/specs/segment-system.md`; this module carries the subset the
//! layout engine uses today: visibility, cell width, priority,
//! separator preference, and theme role.

use crate::data_context::{DataContext, DataDep};
use crate::theme::{Role, Style};
use std::borrow::Cow;
use unicode_width::UnicodeWidthStr;

pub mod agent;
pub mod builder;
pub mod context_bar;
pub mod context_window;
pub mod cost;
pub mod effort;
pub mod extra_usage;
pub mod git_branch;
pub mod model;
pub mod output_style;
pub mod rate_limit_5h;
pub mod rate_limit_5h_reset;
pub mod rate_limit_7d;
pub mod rate_limit_7d_reset;
pub mod rate_limit_format;
pub mod session_duration;
pub mod tokens;
pub mod version;
pub mod vim;
pub mod workspace;

/// Output of a successful segment render.
///
/// Fields are `pub(crate)` so the engine can read them directly;
/// external callers go through the constructors and accessors so the
/// `width == text_width(text)` invariant can't desync via a mutable
/// `text`. `#[non_exhaustive]` keeps future additions SemVer-safe.
#[derive(Debug, Clone, PartialEq, Eq)]
#[non_exhaustive]
pub struct RenderedSegment {
    pub(crate) text: String,
    pub(crate) width: u16,
    pub(crate) right_separator: Option<Separator>,
    pub(crate) style: Style,
}

impl RenderedSegment {
    /// Build a rendered segment from `text`, auto-computing its cell
    /// width. Use [`Self::with_separator`] when the segment wants to
    /// override its default right-separator for this boundary, and
    /// [`Self::with_role`] / [`Self::with_style`] to attach a theme
    /// role or full style.
    #[must_use]
    pub fn new(text: impl Into<String>) -> Self {
        let text = sanitize_control_chars(text.into());
        let width = text_width(&text);
        Self {
            text,
            width,
            right_separator: None,
            style: Style::default(),
        }
    }

    #[must_use]
    pub fn with_separator(text: impl Into<String>, separator: Separator) -> Self {
        let text = sanitize_control_chars(text.into());
        let width = text_width(&text);
        Self {
            text,
            width,
            right_separator: Some(separator),
            style: Style::default(),
        }
    }

    /// Chainable setter for the segment's theme role. The layout
    /// engine resolves the role against the active theme + terminal
    /// capability at render time; no ANSI bytes land in `text`.
    ///
    /// Preserves any decorations previously set by [`Self::with_style`].
    /// Pair with `with_style` carefully: `.with_style(s).with_role(r)`
    /// keeps `s`'s bold/fg/etc. and swaps role, whereas
    /// `.with_role(r).with_style(s)` wholesale-replaces everything.
    #[must_use]
    pub fn with_role(mut self, role: Role) -> Self {
        self.style.role = Some(role);
        self
    }

    /// Chainable setter for the full style (role + decorations).
    /// Wholesale-replaces the current style; use [`Self::with_role`]
    /// when you want to preserve decorations and swap only the role.
    #[must_use]
    pub fn with_style(mut self, style: Style) -> Self {
        self.style = style;
        self
    }

    /// Style this segment wants applied when the layout emits it.
    #[must_use]
    pub fn style(&self) -> &Style {
        &self.style
    }

    /// The rendered text.
    #[must_use]
    pub fn text(&self) -> &str {
        &self.text
    }

    /// Cell width of the rendered text.
    #[must_use]
    pub fn width(&self) -> u16 {
        self.width
    }

    /// Separator this render prefers on its right edge, if any. `None`
    /// means "fall back to the segment's default separator."
    #[must_use]
    pub fn right_separator(&self) -> Option<&Separator> {
        self.right_separator.as_ref()
    }

    /// Trusted crate-internal constructor that accepts an explicit
    /// `width` and `style`. Reserved for [`crate::layout::truncate_to`];
    /// every other caller goes through [`Self::new`] so the width stays
    /// a function of the text.
    #[must_use]
    pub(crate) fn from_parts(
        text: String,
        width: u16,
        right_separator: Option<Separator>,
        style: Style,
    ) -> Self {
        Self {
            text,
            width,
            right_separator,
            style,
        }
    }
}

/// Cell count of `s` on a standard terminal, saturating at `u16::MAX`.
#[must_use]
pub(crate) fn text_width(s: &str) -> u16 {
    u16::try_from(UnicodeWidthStr::width(s)).unwrap_or(u16::MAX)
}

/// Strip Unicode control characters from `s`.
///
/// Segment text often comes from untrusted input (a project dir
/// basename, a worktree name). `UnicodeWidthChar::width` reports
/// control chars as 0 cells, but terminals interpret them as
/// cursor-movement, screen-clear, or OSC payloads: a worktree named
/// `evil\x1b[2J` would blank the terminal on every statusline render.
/// Stripping at the `RenderedSegment` boundary protects every segment
/// that funnels user data through it.
///
/// Returns the input unchanged when it has no control chars.
pub(crate) fn sanitize_control_chars(s: String) -> String {
    if !s.chars().any(char::is_control) {
        return s;
    }
    s.chars().filter(|c| !c.is_control()).collect()
}

/// Separator between adjacent segments. Chosen by the segment to its
/// left; themes and user config can override.
///
/// `Theme` is reserved for theme-provided padding and renders as a
/// single space when no theme is configured. `Literal` carries a
/// `Cow<'static, str>` so built-ins stay zero-alloc while user config
/// allocates once. `Powerline { width }` emits the Nerd Font
/// right-arrow chevron (U+E0B0) flanked by single-space padding;
/// `width` is the chevron's own cell count (1 or 2 — see
/// `[layout_options].powerline_width`), and the reported [`width()`]
/// includes the 2 padding cells. Chevron styling lives in
/// [`crate::layout::separator_style`].
///
/// [`width()`]: Separator::width
#[derive(Debug, Clone, PartialEq, Eq)]
#[non_exhaustive]
pub enum Separator {
    Space,
    Theme,
    Literal(Cow<'static, str>),
    Powerline { width: PowerlineWidth },
    None,
}

/// Cell-count for the Nerd Font powerline chevron (U+E0B0). Most
/// modern fonts at standard sizes render the chevron as a single cell;
/// some larger sizes / older Nerd Font builds render it as two. The
/// type makes any other value unrepresentable so layout-width math
/// can't drift into invalid territory.
#[derive(Debug, Clone, Copy, Default, PartialEq, Eq)]
pub enum PowerlineWidth {
    #[default]
    One,
    Two,
}

impl PowerlineWidth {
    /// Cell count this width represents (1 or 2).
    #[must_use]
    pub const fn cells(self) -> u16 {
        match self {
            Self::One => 1,
            Self::Two => 2,
        }
    }
}

/// Nerd Font right-arrow chevron (U+E0B0) with single-space padding
/// on each side.
const POWERLINE_CHEVRON_PADDED: &str = " \u{E0B0} ";

impl Separator {
    /// Default 1-cell powerline chevron. Use this for the common case
    /// (most modern Nerd Fonts render U+E0B0 as 1 cell at standard
    /// sizes); pass `Powerline { width: PowerlineWidth::Two }` for
    /// fonts/sizes that render 2 cells.
    #[must_use]
    pub const fn powerline() -> Self {
        Self::Powerline {
            width: PowerlineWidth::One,
        }
    }

    #[must_use]
    pub fn text(&self) -> &str {
        match self {
            Self::Space | Self::Theme => " ",
            Self::Literal(s) => s,
            Self::Powerline { .. } => POWERLINE_CHEVRON_PADDED,
            Self::None => "",
        }
    }

    #[must_use]
    pub fn width(&self) -> u16 {
        match self {
            Self::Space | Self::Theme => 1,
            Self::Literal(s) => text_width(s),
            Self::Powerline { width } => width.cells() + 2,
            Self::None => 0,
        }
    }
}

/// Width bounds in cells with `min <= max` enforced at construction.
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub struct WidthBounds {
    min: u16,
    max: u16,
}

impl WidthBounds {
    /// Returns `None` when `min > max`.
    #[must_use]
    pub fn new(min: u16, max: u16) -> Option<Self> {
        (min <= max).then_some(Self { min, max })
    }

    #[must_use]
    pub fn min(self) -> u16 {
        self.min
    }

    #[must_use]
    pub fn max(self) -> u16 {
        self.max
    }
}

/// Layout intent declared by a segment; user config may override each
/// field.
///
/// Under width pressure the engine drops segments in descending
/// `priority` order: `255` drops first, `0` never drops. Default `128`.
/// Ties break by position: the right-most segment drops first.
#[derive(Debug, Clone, PartialEq, Eq)]
#[non_exhaustive]
pub struct SegmentDefaults {
    pub priority: u8,
    pub width: Option<WidthBounds>,
    pub default_separator: Separator,
    /// May the layout engine shrink this segment under width pressure
    /// before dropping it? Default `false` — only prose-like segments
    /// (workspace name, branch name) opt in. Numeric or structured
    /// segments leave this `false`: a half-cut percentage reads as
    /// the wrong number, which is worse than no number.
    /// See `docs/specs/segment-system.md` §Layout algorithm.
    pub truncatable: bool,
}

impl SegmentDefaults {
    /// Constructor shorthand for the common case of "default layout
    /// intent with a specific priority." Chainable with
    /// [`Self::with_width`] and [`Self::with_default_separator`].
    #[must_use]
    pub fn with_priority(priority: u8) -> Self {
        Self {
            priority,
            ..Self::default()
        }
    }

    /// Chainable setter for width bounds.
    #[must_use]
    pub fn with_width(mut self, bounds: WidthBounds) -> Self {
        self.width = Some(bounds);
        self
    }

    /// Chainable setter for the default right-separator.
    #[must_use]
    pub fn with_default_separator(mut self, separator: Separator) -> Self {
        self.default_separator = separator;
        self
    }

    /// Chainable setter for the truncate-before-drop opt-in.
    #[must_use]
    pub fn with_truncatable(mut self, truncatable: bool) -> Self {
        self.truncatable = truncatable;
        self
    }
}

impl Default for SegmentDefaults {
    fn default() -> Self {
        Self {
            priority: 128,
            width: None,
            default_separator: Separator::Space,
            truncatable: false,
        }
    }
}

/// Shorthand for [`Segment::render`]'s return type.
///
/// Three states:
/// - `Ok(Some(r))`: the segment renders `r`.
/// - `Ok(None)`: the segment has no content this invocation and should
///   be hidden (intentional, e.g. rate-limit segment on an API-tier
///   user).
/// - `Err(e)`: the segment attempted to render but failed. The layout
///   engine logs `e` to stderr and hides the segment — same visual
///   result as `Ok(None)`, but the diagnostic distinguishes failure
///   from intentional absence.
pub type RenderResult = Result<Option<RenderedSegment>, SegmentError>;

/// Runtime failure from a segment's [`Segment::render`]. Built-in
/// segments return `Ok(...)` today; this surface is primarily for
/// plugin-authored segments (rhai script errors, unexpected input,
/// propagated I/O).
#[derive(Debug)]
#[non_exhaustive]
pub struct SegmentError {
    pub message: String,
    pub source: Option<Box<dyn std::error::Error + Send + Sync>>,
}

impl SegmentError {
    #[must_use]
    pub fn new(message: impl Into<String>) -> Self {
        Self {
            message: message.into(),
            source: None,
        }
    }

    #[must_use]
    pub fn with_source(
        message: impl Into<String>,
        source: Box<dyn std::error::Error + Send + Sync>,
    ) -> Self {
        Self {
            message: message.into(),
            source: Some(source),
        }
    }
}

impl std::fmt::Display for SegmentError {
    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
        f.write_str(&self.message)?;
        if let Some(src) = &self.source {
            write!(f, ": {src}")?;
        }
        Ok(())
    }
}

impl std::error::Error for SegmentError {
    fn source(&self) -> Option<&(dyn std::error::Error + 'static)> {
        self.source.as_deref().map(|e| e as &dyn std::error::Error)
    }
}

/// Per-render layout state the engine builds once per call and threads
/// into every [`Segment::render`]. Distinct from [`DataContext`], which
/// is the data layer (one instance per process invocation, shared
/// across segments). `RenderContext` is the layout layer: terminal
/// width today, room for line index / capability / neighbor info as
/// dynamic-segment work lands.
///
/// `#[non_exhaustive]` keeps future additions SemVer-safe; segments
/// that don't read the field accept it as `_rc: &RenderContext` and
/// pay nothing.
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
#[non_exhaustive]
pub struct RenderContext {
    /// Total cells available to this line. Sourced from the terminal,
    /// or the schema-defined fallback (200) when stdout is detached.
    pub terminal_width: u16,
}

impl RenderContext {
    #[must_use]
    pub fn new(terminal_width: u16) -> Self {
        Self { terminal_width }
    }
}

pub trait Segment: Send {
    /// Render this segment for the given context.
    ///
    /// Returns `Ok(None)` to hide, `Ok(Some(_))` to render, or `Err` on
    /// a runtime failure that the layout engine logs and treats as
    /// hidden. See [`RenderResult`]. `ctx` owns the parsed stdin
    /// payload (`ctx.status`) plus lazy accessors for other sources
    /// (`ctx.usage()`, `ctx.git()`, etc.) declared in
    /// [`data_deps`](Self::data_deps). `rc` is per-render layout
    /// state — terminal width today — for segments that pick their
    /// own shape based on available room.
    fn render(&self, ctx: &DataContext, rc: &RenderContext) -> RenderResult;

    /// Layout-pressure-aware compaction hook. The reflow loop calls
    /// this on any segment under width pressure (truncatable or
    /// not), asking whether it can produce a render at most `target`
    /// cells wide. It runs before `truncatable` end-ellipsis
    /// truncation, so segment-side intelligence beats generic
    /// string clipping when both apply. Default returns `None` (no
    /// compact form available; engine falls through to truncatable
    /// or drop). Segments with structured tail content override to
    /// shed decoration while keeping the signal-bearing prefix.
    ///
    /// The returned render must lie in `[width.min, target]` cells:
    /// wider violates the layout-fit invariant (engine rejects and
    /// warns), narrower violates the user's `width.min` contract
    /// (engine rejects silently, same as `apply_width_bounds`).
    /// Implementations should return `None` rather than emit a
    /// render outside this range.
    ///
    /// See `docs/specs/segment-system.md` §Layout algorithm for
    /// the reflow loop's full ordering and target derivation.
    #[allow(unused_variables)]
    #[must_use]
    fn shrink_to_fit(
        &self,
        ctx: &DataContext,
        rc: &RenderContext,
        target: u16,
    ) -> Option<RenderedSegment> {
        None
    }

    /// Declare which data sources this segment reads. The runtime
    /// computes the union across all enabled segments and lazy-fetches
    /// only those sources. Defaults to the stdin payload only; segments
    /// that read other sources must override. See
    /// `docs/specs/data-fetching.md` §Segment dependency declaration.
    ///
    /// The `&'static` lifetime is deliberate: built-in segments return
    /// a `const &[DataDep]` at zero cost, and runtime-loaded plugin
    /// segments (e.g. `RhaiSegment`) promote their parsed
    /// `Vec<DataDep>` via `Vec::leak` once at plugin-load time. The
    /// plugin registry is built once per process and lives until exit,
    /// so the leak is bounded. If plugin hot-reload arrives (deferred
    /// feature), swap to an arena allocator or `Arc<[DataDep]>`.
    #[must_use]
    fn data_deps(&self) -> &'static [DataDep] {
        &[DataDep::Status]
    }

    /// Layout defaults (priority, width bounds, separator preference).
    /// User config may override each field via [`OverriddenSegment`].
    #[must_use]
    fn defaults(&self) -> SegmentDefaults {
        SegmentDefaults::default()
    }
}

// --- Built-in registry + config-driven override wrapper ----------------

/// Default segment order when no config supplies one. No rate-limit
/// segments are in the default line: a first-run user without any
/// config shouldn't trigger a macOS Keychain prompt or a network
/// request just to render the statusline. Users opt in by listing
/// the rate-limit segments explicitly in `[line.segments]`.
pub const DEFAULT_SEGMENT_IDS: &[&str] = &[
    "model",
    "context_window",
    "cost",
    "effort",
    "git_branch",
    "workspace",
];

/// Every built-in segment id. Used by [`PluginRegistry`] to reject
/// plugins whose `const ID` shadows a built-in. Add new built-ins
/// here AND to [`built_in_by_id`].
///
/// [`PluginRegistry`]: crate::plugins::PluginRegistry
pub const BUILT_IN_SEGMENT_IDS: &[&str] = &[
    "model",
    "context_window",
    "context_bar",
    "workspace",
    "cost",
    "effort",
    "output_style",
    "vim",
    "agent",
    "git_branch",
    "rate_limit_5h",
    "rate_limit_7d",
    "rate_limit_5h_reset",
    "rate_limit_7d_reset",
    "extra_usage",
    "session_duration",
    "tokens_input",
    "tokens_output",
    "tokens_cached",
    "tokens_total",
    "version",
];

/// Construct a built-in segment by its config id. Unknown ids return
/// `None` so config loaders can warn and skip. `extras` carries the
/// `[segments.<id>]` TOML bag; rate-limit segments parse their knobs
/// from it (`format`, `invert`, `compact`, `use_days`, `icon`,
/// `label`, `stale_marker`, `progress_width`). Other built-ins
/// currently ignore `extras`.
#[must_use]
pub fn built_in_by_id(
    id: &str,
    extras: Option<&std::collections::BTreeMap<String, toml::Value>>,
    warn: &mut impl FnMut(&str),
) -> Option<Box<dyn Segment>> {
    let empty: std::collections::BTreeMap<String, toml::Value> = std::collections::BTreeMap::new();
    let e = extras.unwrap_or(&empty);
    match id {
        "model" => Some(Box::new(model::ModelSegment::from_extras(e, warn))),
        "context_window" => Some(Box::new(context_window::ContextWindowSegment)),
        "context_bar" => Some(Box::new(context_bar::ContextBarSegment::from_extras(
            e, warn,
        ))),
        "workspace" => Some(Box::new(workspace::WorkspaceSegment)),
        "cost" => Some(Box::new(cost::CostSegment)),
        "effort" => Some(Box::new(effort::EffortSegment)),
        "output_style" => Some(Box::new(output_style::OutputStyleSegment)),
        "vim" => Some(Box::new(vim::VimSegment)),
        "agent" => Some(Box::new(agent::AgentSegment)),
        "git_branch" => Some(Box::new(git_branch::GitBranchSegment::from_extras(e, warn))),
        "rate_limit_5h" => Some(Box::new(rate_limit_5h::RateLimit5hSegment::from_extras(
            e, warn,
        ))),
        "rate_limit_7d" => Some(Box::new(rate_limit_7d::RateLimit7dSegment::from_extras(
            e, warn,
        ))),
        "rate_limit_5h_reset" => Some(Box::new(
            rate_limit_5h_reset::RateLimit5hResetSegment::from_extras(e, warn),
        )),
        "rate_limit_7d_reset" => Some(Box::new(
            rate_limit_7d_reset::RateLimit7dResetSegment::from_extras(e, warn),
        )),
        "extra_usage" => Some(Box::new(extra_usage::ExtraUsageSegment::from_extras(
            e, warn,
        ))),
        "session_duration" => Some(Box::new(session_duration::SessionDurationSegment)),
        "tokens_input" => Some(Box::new(tokens::TokensInputSegment)),
        "tokens_output" => Some(Box::new(tokens::TokensOutputSegment)),
        "tokens_cached" => Some(Box::new(tokens::TokensCachedSegment)),
        "tokens_total" => Some(Box::new(tokens::TokensTotalSegment)),
        "version" => Some(Box::new(version::VersionSegment::from_extras(e, warn))),
        _ => None,
    }
}

/// Wraps a `Segment` to override its `defaults()` output while
/// delegating `render` unchanged. Applying `[segments.<id>]` overrides
/// without touching the inner segment.
pub struct OverriddenSegment {
    inner: Box<dyn Segment>,
    priority: Option<u8>,
    width: Option<WidthBounds>,
    default_separator: Option<Separator>,
    user_style: Option<Style>,
}

impl OverriddenSegment {
    #[must_use]
    pub fn new(inner: Box<dyn Segment>) -> Self {
        Self {
            inner,
            priority: None,
            width: None,
            default_separator: None,
            user_style: None,
        }
    }

    #[must_use]
    pub fn with_priority(mut self, priority: u8) -> Self {
        self.priority = Some(priority);
        self
    }

    #[must_use]
    pub fn with_width(mut self, bounds: WidthBounds) -> Self {
        self.width = Some(bounds);
        self
    }

    #[must_use]
    pub fn with_default_separator(mut self, separator: Separator) -> Self {
        self.default_separator = Some(separator);
        self
    }

    /// Wholesale-replaces the inner segment's declared style at render
    /// time. See `docs/specs/theming.md` §Resolution precedence.
    #[must_use]
    pub fn with_user_style(mut self, style: Style) -> Self {
        self.user_style = Some(style);
        self
    }
}

impl Segment for OverriddenSegment {
    fn render(&self, ctx: &DataContext, rc: &RenderContext) -> RenderResult {
        let result = self.inner.render(ctx, rc)?;
        Ok(result.map(|r| {
            let r = apply_separator_override(r, self.default_separator.as_ref());
            match &self.user_style {
                Some(override_style) => {
                    let merged = merge_user_override(r.style(), override_style);
                    r.with_style(merged)
                }
                None => r,
            }
        }))
    }

    fn shrink_to_fit(
        &self,
        ctx: &DataContext,
        rc: &RenderContext,
        target: u16,
    ) -> Option<RenderedSegment> {
        let inner = self.inner.shrink_to_fit(ctx, rc, target)?;
        let inner = apply_separator_override(inner, self.default_separator.as_ref());
        Some(match &self.user_style {
            Some(override_style) => {
                let merged = merge_user_override(inner.style(), override_style);
                inner.with_style(merged)
            }
            None => inner,
        })
    }

    fn data_deps(&self) -> &'static [DataDep] {
        self.inner.data_deps()
    }

    fn defaults(&self) -> SegmentDefaults {
        let mut d = self.inner.defaults();
        if let Some(p) = self.priority {
            d.priority = p;
        }
        if let Some(w) = self.width {
            d.width = Some(w);
        }
        if let Some(sep) = self.default_separator.clone() {
            d.default_separator = sep;
        }
        d
    }
}

/// Apply an `OverriddenSegment.default_separator` policy to a
/// rendered segment's `right_separator`. The override replaces a
/// per-render `Some(Space)` or `Some(Theme)` — those mean "I didn't
/// pick anything intentional," so the layout-options separator wins.
/// All other values pass through: `Some(Literal(..))`,
/// `Some(Powerline { .. })`, and `Some(Separator::None)` are explicit
/// segment choices, while a bare `None` (no per-render override)
/// signals "use my overridden default," which `effective_separator`
/// resolves downstream.
fn apply_separator_override(
    r: RenderedSegment,
    sep_override: Option<&Separator>,
) -> RenderedSegment {
    let Some(override_sep) = sep_override else {
        return r;
    };
    let should_replace = matches!(
        r.right_separator.as_ref(),
        Some(Separator::Space) | Some(Separator::Theme)
    );
    if !should_replace {
        return r;
    }
    let mut r = r;
    r.right_separator = Some(override_sep.clone());
    r
}

/// Merge a user-config style override onto the inner segment's style.
/// Visual fields (role, fg, bold, italic, underline, dim) take the
/// override's value — that's the documented "user wholesale-replaces
/// segment styling" behavior. `hyperlink` is the exception: it carries
/// segment behavior (the link target) rather than appearance, and the
/// user-style TOML syntax doesn't expose a way to set it, so the
/// override always arrives with `hyperlink: None`. Inheriting the
/// inner segment's hyperlink keeps `[segments.X] color = "red"` from
/// silently stripping links the segment emits.
fn merge_user_override(inner: &Style, override_style: &Style) -> Style {
    let mut merged = override_style.clone();
    if merged.hyperlink.is_none() {
        merged.hyperlink = inner.hyperlink.clone();
    }
    merged
}

#[cfg(test)]
mod layout_type_tests {
    use super::*;

    #[test]
    fn rendered_segment_computes_width() {
        let r = RenderedSegment::new("hello");
        assert_eq!(r.text(), "hello");
        assert_eq!(r.width(), 5);
        assert_eq!(r.right_separator(), None);
    }

    #[test]
    fn rendered_segment_counts_cells_not_bytes_for_middle_dot() {
        // U+00B7 MIDDLE DOT is 2 bytes but 1 cell.
        let r = RenderedSegment::new("42% · 200k");
        assert_eq!(r.width(), 10);
    }

    #[test]
    fn rendered_segment_strips_csi_clear_screen_injection() {
        // \x1b[2J clears the screen if it reaches stdout.
        let r = RenderedSegment::new("evil\x1b[2J");
        assert_eq!(r.text(), "evil[2J");
        assert_eq!(r.width(), 7);
        assert!(!r.text().contains('\x1b'));
    }

    #[test]
    fn rendered_segment_strips_osc_set_title_with_bel_terminator() {
        // OSC 0 sets the terminal title; BEL (\x07) terminates it.
        // Both entry/exit bytes are controls and must drop out.
        let r = RenderedSegment::new("\x1b]0;pwn\x07rest");
        assert_eq!(r.text(), "]0;pwnrest");
        assert!(!r.text().contains('\x1b'));
        assert!(!r.text().contains('\x07'));
    }

    #[test]
    fn rendered_segment_strips_common_c0_controls() {
        let r = RenderedSegment::new("a\x07b\x08c\td\ne\rf");
        assert_eq!(r.text(), "abcdef");
        assert_eq!(r.width(), 6);
    }

    #[test]
    fn rendered_segment_strips_c1_controls_and_del() {
        let r = RenderedSegment::new("x\u{007F}y\u{0085}z\u{009B}");
        assert_eq!(r.text(), "xyz");
        assert_eq!(r.width(), 3);
    }

    #[test]
    fn rendered_segment_preserves_unicode_without_controls() {
        let r = RenderedSegment::new("café · 日本語");
        assert_eq!(r.text(), "café · 日本語");
    }

    #[test]
    fn rendered_segment_empty_string_stays_empty() {
        let r = RenderedSegment::new("");
        assert_eq!(r.text(), "");
        assert_eq!(r.width(), 0);
    }

    #[test]
    fn rendered_segment_all_control_input_collapses_to_empty() {
        // Downstream layout math must cope with zero-width non-None
        // renders; the `width == text_width(text)` invariant still holds.
        let r = RenderedSegment::new("\x1b\x07\n\t");
        assert_eq!(r.text(), "");
        assert_eq!(r.width(), 0);
    }

    #[test]
    fn rendered_segment_with_separator_also_strips_controls() {
        let r = RenderedSegment::with_separator("hi\x1bthere", Separator::None);
        assert_eq!(r.text(), "hithere");
        assert_eq!(r.width(), 7);
    }

    #[test]
    fn rendered_segment_with_separator_exposes_override() {
        let r = RenderedSegment::with_separator("x", Separator::None);
        assert_eq!(r.right_separator(), Some(&Separator::None));
    }

    #[test]
    fn separator_widths_match_expected() {
        assert_eq!(Separator::Space.width(), 1);
        assert_eq!(Separator::Theme.width(), 1);
        assert_eq!(Separator::None.width(), 0);
        assert_eq!(Separator::Literal(Cow::Borrowed(" | ")).width(), 3);
        // Powerline is configurable: width 1 (Nerd Font default) or
        // width 2 (some fonts/sizes render the chevron as 2 cells).
        // The reported width adds 2 cells of padding (one space on
        // each side of the chevron) since `text()` emits " ▶ ".
        assert_eq!(Separator::powerline().width(), 3);
        assert_eq!(
            Separator::Powerline {
                width: PowerlineWidth::Two,
            }
            .width(),
            4
        );
    }

    #[test]
    fn width_bounds_rejects_inverted_range() {
        assert!(WidthBounds::new(20, 10).is_none());
        assert!(WidthBounds::new(10, 10).is_some());
        assert!(WidthBounds::new(0, u16::MAX).is_some());
    }

    #[test]
    fn segment_defaults_default_priority_is_128() {
        assert_eq!(SegmentDefaults::default().priority, 128);
    }

    #[test]
    fn with_priority_preserves_other_defaults() {
        let d = SegmentDefaults::with_priority(64);
        assert_eq!(d.priority, 64);
        assert_eq!(d.width, None);
        assert_eq!(d.default_separator, Separator::Space);
    }

    #[test]
    fn builders_chain_on_segment_defaults() {
        let bounds = WidthBounds::new(4, 40).expect("valid bounds");
        let d = SegmentDefaults::with_priority(32)
            .with_width(bounds)
            .with_default_separator(Separator::Literal(Cow::Borrowed(" | ")));
        assert_eq!(d.priority, 32);
        assert_eq!(d.width, Some(bounds));
        assert_eq!(
            d.default_separator,
            Separator::Literal(Cow::Borrowed(" | "))
        );
    }

    #[test]
    fn segment_error_display_includes_message_only_without_source() {
        let err = SegmentError::new("missing rate_limits field");
        assert_eq!(err.to_string(), "missing rate_limits field");
    }

    #[test]
    fn segment_error_display_chains_source() {
        let src = std::io::Error::new(std::io::ErrorKind::NotFound, "cache.json");
        let err = SegmentError::with_source("cache read failed", Box::new(src));
        let rendered = err.to_string();
        assert!(rendered.starts_with("cache read failed: "));
        assert!(rendered.contains("cache.json"));
    }

    #[test]
    fn segment_error_source_chain_is_walkable() {
        use std::error::Error;
        let src = std::io::Error::other("inner");
        let err = SegmentError::with_source("outer", Box::new(src));
        let source = err.source().expect("source present");
        assert_eq!(source.to_string(), "inner");
    }

    // --- registry ---

    #[test]
    fn built_in_by_id_resolves_every_default_segment() {
        for id in DEFAULT_SEGMENT_IDS {
            assert!(
                built_in_by_id(id, None, &mut |_| {}).is_some(),
                "expected built-in registry to know {id}"
            );
        }
    }

    #[test]
    fn built_in_by_id_resolves_additional_documented_ids() {
        for id in [
            "context_bar",
            "session_duration",
            "rate_limit_5h",
            "rate_limit_7d",
            "rate_limit_5h_reset",
            "rate_limit_7d_reset",
            "extra_usage",
            "tokens_input",
            "tokens_output",
            "tokens_cached",
            "tokens_total",
            "output_style",
            "vim",
            "agent",
        ] {
            assert!(
                built_in_by_id(id, None, &mut |_| {}).is_some(),
                "expected {id} to resolve"
            );
        }
    }

    #[test]
    fn built_in_by_id_resolves_every_id_in_built_in_segment_ids() {
        // Anchors the contract documented at `BUILT_IN_SEGMENT_IDS`:
        // every id in the const must round-trip through the registry.
        // Catches drift between the const and the match arms.
        for id in BUILT_IN_SEGMENT_IDS {
            assert!(
                built_in_by_id(id, None, &mut |_| {}).is_some(),
                "BUILT_IN_SEGMENT_IDS lists {id} but built_in_by_id can't construct it"
            );
        }
    }

    #[test]
    fn built_in_by_id_rejects_unknown() {
        assert!(built_in_by_id("nope", None, &mut |_| {}).is_none());
        assert!(built_in_by_id("", None, &mut |_| {}).is_none());
    }

    #[test]
    fn built_in_by_id_threads_extras_to_version_segment() {
        // Pin the registry → from_extras wiring for `version`. A
        // future refactor that drops `from_extras` and constructs
        // `VersionSegment::default()` would silently break user
        // configs that set `[segments.version].prefix = "CC "`.
        use crate::input::{ModelInfo, StatusContext, Tool, WorkspaceInfo};
        use std::collections::BTreeMap;
        use std::path::PathBuf;
        use std::sync::Arc;

        let mut extras = BTreeMap::new();
        extras.insert("prefix".to_string(), toml::Value::String("CC ".to_string()));
        let seg = built_in_by_id("version", Some(&extras), &mut |_| {})
            .expect("version segment resolves");

        let ctx = DataContext::new(StatusContext {
            tool: Tool::ClaudeCode,
            model: Some(ModelInfo {
                display_name: "X".into(),
            }),
            workspace: Some(WorkspaceInfo {
                project_dir: PathBuf::from("/r"),
                git_worktree: None,
            }),
            context_window: None,
            cost: None,
            effort: None,
            vim: None,
            output_style: None,
            agent_name: None,
            version: Some("2.1.90".into()),
            raw: Arc::new(serde_json::Value::Null),
        });
        let rc = RenderContext::new(80);
        let rendered = seg.render(&ctx, &rc).unwrap().expect("renders");
        assert_eq!(rendered.text(), "CC 2.1.90");
    }

    // --- OverriddenSegment ---

    #[test]
    fn overridden_segment_replaces_priority() {
        let base = built_in_by_id("workspace", None, &mut |_| {}).expect("known id");
        let base_priority = base.defaults().priority;
        let wrapped = OverriddenSegment::new(base).with_priority(200);
        assert_eq!(wrapped.defaults().priority, 200);
        assert_ne!(wrapped.defaults().priority, base_priority);
    }

    #[test]
    fn overridden_segment_replaces_width_bounds() {
        let base = built_in_by_id("workspace", None, &mut |_| {}).expect("known id");
        assert_eq!(base.defaults().width, None);
        let bounds = WidthBounds::new(5, 40).expect("valid");
        let wrapped = OverriddenSegment::new(base).with_width(bounds);
        assert_eq!(wrapped.defaults().width, Some(bounds));
    }

    #[test]
    fn overridden_segment_replaces_default_separator() {
        let base = built_in_by_id("workspace", None, &mut |_| {}).expect("known id");
        let wrapped = OverriddenSegment::new(base).with_default_separator(Separator::None);
        assert_eq!(wrapped.defaults().default_separator, Separator::None);
    }

    #[test]
    fn overridden_segment_delegates_render_to_inner() {
        let wrapped =
            OverriddenSegment::new(built_in_by_id("workspace", None, &mut |_| {}).unwrap())
                .with_priority(0);
        let rendered = wrapped
            .render(&stub_ctx(), &stub_rc())
            .unwrap()
            .expect("rendered");
        assert_eq!(rendered.text(), "linesmith");
    }

    #[test]
    fn style_override_wholesale_replaces_inner_declared_style() {
        // A stub that declares Role::Accent + bold at render time. The
        // override must wipe both, not merge with them.
        struct Styled;
        impl Segment for Styled {
            fn render(&self, _: &DataContext, _: &RenderContext) -> RenderResult {
                Ok(Some(
                    RenderedSegment::new("x")
                        .with_role(Role::Accent)
                        .with_style(Style {
                            bold: true,
                            ..Style::default()
                        }),
                ))
            }
            fn defaults(&self) -> SegmentDefaults {
                SegmentDefaults::with_priority(0)
            }
        }
        let override_style = Style {
            role: Some(Role::Primary),
            italic: true,
            ..Style::default()
        };
        let wrapped =
            OverriddenSegment::new(Box::new(Styled)).with_user_style(override_style.clone());
        let rendered = wrapped
            .render(&stub_ctx(), &stub_rc())
            .unwrap()
            .expect("rendered");
        assert_eq!(rendered.style, override_style);
    }

    #[test]
    fn user_style_override_preserves_inner_hyperlink() {
        // Pin the merge contract: visual override fields wholesale-
        // replace, but the inner segment's hyperlink survives so a
        // user `[segments.X] color = "red"` doesn't silently strip
        // links the segment emits. The user-style TOML syntax has no
        // hyperlink slot today, so the override's hyperlink is
        // always None — inheriting from the inner is lossless.
        struct Linked;
        impl Segment for Linked {
            fn render(&self, _: &DataContext, _: &RenderContext) -> RenderResult {
                Ok(Some(RenderedSegment::new("x").with_style(
                    Style::default().with_hyperlink("https://example.com"),
                )))
            }
            fn defaults(&self) -> SegmentDefaults {
                SegmentDefaults::with_priority(0)
            }
        }
        let override_style = Style::role(Role::Error);
        let wrapped =
            OverriddenSegment::new(Box::new(Linked)).with_user_style(override_style.clone());
        let rendered = wrapped
            .render(&stub_ctx(), &stub_rc())
            .unwrap()
            .expect("rendered");
        assert_eq!(rendered.style.role, Some(Role::Error));
        assert_eq!(
            rendered.style.hyperlink.as_deref(),
            Some("https://example.com"),
        );
    }

    #[test]
    fn style_override_preserves_inner_none_return() {
        struct Hidden;
        impl Segment for Hidden {
            fn render(&self, _: &DataContext, _: &RenderContext) -> RenderResult {
                Ok(None)
            }
            fn defaults(&self) -> SegmentDefaults {
                SegmentDefaults::with_priority(0)
            }
        }
        let wrapped =
            OverriddenSegment::new(Box::new(Hidden)).with_user_style(Style::role(Role::Primary));
        assert_eq!(wrapped.render(&stub_ctx(), &stub_rc()).unwrap(), None);
    }

    #[test]
    fn shrink_to_fit_passthrough_reaches_inner_with_user_style_applied() {
        // The OverriddenSegment wrapper must forward shrink_to_fit to
        // the inner segment so user-overridden segments retain their
        // layout-pressure compaction. The wrapper also has to apply
        // user_style to the shrunk render the same way it does on
        // render — otherwise a styled override loses its theme on the
        // compact path.
        struct Shrinkable;
        impl Segment for Shrinkable {
            fn render(&self, _: &DataContext, _: &RenderContext) -> RenderResult {
                Ok(Some(RenderedSegment::new("full")))
            }
            fn shrink_to_fit(
                &self,
                _: &DataContext,
                _: &RenderContext,
                target: u16,
            ) -> Option<RenderedSegment> {
                let r = RenderedSegment::new("c");
                (r.width <= target).then_some(r)
            }
        }
        let override_style = Style {
            role: Some(Role::Primary),
            italic: true,
            ..Style::default()
        };
        let wrapped =
            OverriddenSegment::new(Box::new(Shrinkable)).with_user_style(override_style.clone());
        let shrunk = wrapped
            .shrink_to_fit(&stub_ctx(), &stub_rc(), 5)
            .expect("inner returned compact form");
        assert_eq!(shrunk.text, "c");
        assert_eq!(shrunk.style, override_style);
    }

    #[test]
    fn shrink_to_fit_passthrough_keeps_inner_style_when_no_user_override() {
        // The `None` arm of `match self.user_style` must pass the
        // inner shrunk render through unchanged. A regression that
        // unconditionally applies a default style would clobber the
        // inner segment's role (e.g. `git_branch`'s `Role::Accent`
        // would silently drop on the compact path for any user
        // without a configured style override).
        struct ShrinkableWithRole;
        impl Segment for ShrinkableWithRole {
            fn render(&self, _: &DataContext, _: &RenderContext) -> RenderResult {
                Ok(Some(RenderedSegment::new("full").with_role(Role::Accent)))
            }
            fn shrink_to_fit(
                &self,
                _: &DataContext,
                _: &RenderContext,
                _target: u16,
            ) -> Option<RenderedSegment> {
                Some(RenderedSegment::new("c").with_role(Role::Accent))
            }
        }
        // No `with_user_style` call — wrapper carries no override.
        let wrapped = OverriddenSegment::new(Box::new(ShrinkableWithRole));
        let shrunk = wrapped
            .shrink_to_fit(&stub_ctx(), &stub_rc(), 10)
            .expect("inner returned compact form");
        assert_eq!(shrunk.style.role, Some(Role::Accent));
    }

    #[test]
    fn shrink_to_fit_passthrough_returns_none_when_inner_declines() {
        // Default trait impl returns None; the wrapper must forward
        // None unchanged rather than emit a stub render of its own.
        struct Plain;
        impl Segment for Plain {
            fn render(&self, _: &DataContext, _: &RenderContext) -> RenderResult {
                Ok(Some(RenderedSegment::new("plain")))
            }
        }
        let wrapped =
            OverriddenSegment::new(Box::new(Plain)).with_user_style(Style::role(Role::Primary));
        assert!(wrapped
            .shrink_to_fit(&stub_ctx(), &stub_rc(), 100)
            .is_none());
    }

    #[test]
    fn shrink_to_fit_applies_separator_override_to_runtime_space() {
        // Mirrors `layout_separator_powerline_overrides_runtime_right_separator`
        // (in builder.rs) for the compact-render path. If the inner
        // segment returns `right_separator: Some(Space)` from
        // shrink_to_fit, the overridden default must replace it the
        // same way it does on render — otherwise a width-pressured
        // line would silently revert from powerline chevrons to
        // spaces, producing inconsistent output across renders.
        struct ShrinkableWithRuntimeSpace;
        impl Segment for ShrinkableWithRuntimeSpace {
            fn render(&self, _: &DataContext, _: &RenderContext) -> RenderResult {
                Ok(Some(RenderedSegment::with_separator(
                    "full",
                    Separator::Space,
                )))
            }
            fn shrink_to_fit(
                &self,
                _: &DataContext,
                _: &RenderContext,
                _target: u16,
            ) -> Option<RenderedSegment> {
                Some(RenderedSegment::with_separator("c", Separator::Space))
            }
        }
        let wrapped = OverriddenSegment::new(Box::new(ShrinkableWithRuntimeSpace))
            .with_default_separator(Separator::powerline());
        let shrunk = wrapped
            .shrink_to_fit(&stub_ctx(), &stub_rc(), 5)
            .expect("inner returned compact form");
        assert_eq!(shrunk.right_separator(), Some(&Separator::powerline()));
    }

    #[test]
    fn apply_separator_override_replaces_runtime_theme() {
        // The `Theme` arm of the should-replace match is otherwise
        // uncovered. A plugin returning `Some(Theme)` (the implicit
        // theme-padding default) must yield to layout-options.
        let r = RenderedSegment::with_separator("x", Separator::Theme);
        let out = apply_separator_override(r, Some(&Separator::powerline()));
        assert_eq!(out.right_separator(), Some(&Separator::powerline()));
    }

    #[test]
    fn apply_separator_override_passes_through_when_runtime_separator_is_none() {
        // `right_separator: None` means "use my default" — the
        // override travels via `default_separator` instead, so
        // apply_separator_override leaves the per-render slot empty.
        let r = RenderedSegment::new("x"); // no separator set
        let out = apply_separator_override(r, Some(&Separator::powerline()));
        assert_eq!(out.right_separator(), None);
    }

    #[test]
    fn apply_separator_override_preserves_explicit_runtime_none() {
        // `Some(Separator::None)` is the segment explicitly saying
        // "no separator after me." Layout-options must not promote
        // this to a chevron.
        let r = RenderedSegment::with_separator("x", Separator::None);
        let out = apply_separator_override(r, Some(&Separator::powerline()));
        assert_eq!(out.right_separator(), Some(&Separator::None));
    }

    #[test]
    fn apply_separator_override_passes_through_when_no_override() {
        // `sep_override == None` is the no-layout-options case — the
        // input must round-trip unchanged through every branch of
        // the `right_separator` match.
        for runtime_sep in [
            None,
            Some(Separator::Space),
            Some(Separator::Theme),
            Some(Separator::None),
            Some(Separator::powerline()),
        ] {
            let r = match &runtime_sep {
                None => RenderedSegment::new("x"),
                Some(s) => RenderedSegment::with_separator("x", s.clone()),
            };
            let out = apply_separator_override(r, None);
            assert_eq!(out.right_separator(), runtime_sep.as_ref());
        }
    }

    fn stub_ctx() -> DataContext {
        use crate::input::{ModelInfo, StatusContext, Tool, WorkspaceInfo};
        use std::path::PathBuf;
        use std::sync::Arc;
        DataContext::new(StatusContext {
            tool: Tool::ClaudeCode,
            model: Some(ModelInfo {
                display_name: "Claude".into(),
            }),
            workspace: Some(WorkspaceInfo {
                project_dir: PathBuf::from("/repo/linesmith"),
                git_worktree: None,
            }),
            context_window: None,
            cost: None,
            effort: None,
            vim: None,
            output_style: None,
            agent_name: None,
            version: None,
            raw: Arc::new(serde_json::Value::Null),
        })
    }

    fn stub_rc() -> RenderContext {
        RenderContext::new(80)
    }
}