@openlines/opl-pi-sht 0.1.18 → 0.1.20

package/README.md

@@ -1,5 +1,11 @@
 # opl-pi-sht
 
+[![gh stars](https://img.shields.io/github/stars/linellazatin/opl-pi-sht?logo=github&color=ffffe0)](https://github.com/linellazatin/opl-pi-sht)
+[![gh release](https://img.shields.io/github/v/release/linellazatin/opl-pi-sht?display_name=release&logo=github&color=ffffe0)](https://github.com/linellazatin/opl-pi-sht)
+[![npm version](https://img.shields.io/npm/v/%40openlines%2Fopl-pi-sht?logo=npm&color=cb3837)](https://www.npmjs.com/package/@openlines/opl-pi-sht)
+[![npm downloads](https://img.shields.io/npm/dm/@openlines/opl-pi-sht?logo=npm&color=cb3837)](https://www.npmjs.com/package/@openlines/opl-pi-sht)
+[![license](https://img.shields.io/npm/l/@openlines/opl-pi-sht)](./LICENSE)
+
 **Cut token cost, run the agent safely, and drop your MCP servers.**
 
 A portable collection of various Pi coding agent extensions. Repository directories and config files use `opl-`; established Pi-facing commands and tool names stay compatible.
@@ -11,8 +17,8 @@ A portable collection of various Pi coding agent extensions. Repository director
 Install a versioned release from npm or GitHub. Both ship identical content; pick one source per machine, because Pi treats the npm and Git entries as separate packages and installing both loads every extension twice.
 
 ```bash
-pi install npm:@openlines/opl-pi-sht@0.1.18
-pi install git:github.com/linellazatin/opl-pi-sht@v0.1.18
+pi install npm:@openlines/opl-pi-sht@<version>
+pi install git:github.com/linellazatin/opl-pi-sht@<version.tag>
 ```
 
 > Omitting the version on the npm source tracks the latest published release; Git refs stay pinned, so move them with `pi install ...@v<new>`.
@@ -70,7 +76,7 @@ Copy mode overwrites matching destinations. Link mode skips existing destination
 | [`opl-questionnaire`](extensions/opl-questionnaire/README.md) | Interactive structured-choice tool.                                                                                                                                                                                          | `questionnaire`; no config.                                                                                    |
 | [`opl-input`](extensions/opl-input/README.md)                 | Configurable replacement editor - enhanced [pikit chat-input](https://github.com/adrianapan/pikit) (because pet is life, and configurable). ![pet](images/ss-input-pet.png)                                                                                   | No commands/tools;`opl-input.json`.                                                                            |
 | [`opl-modes`](extensions/opl-modes/README.md)                 | Mode, plan, tool-safety, lazy-tool-loading, and active-appearance manager - highly-modified, configrable and enhanced mode-switcher.                                                                                         | `/mode`, `/chat`, `/plan`, `/execute`, `plan_complete`, `load_tools`; `opl-modes.json`.                        |
-| [`opl-footer`](extensions/opl-footer/README.md)               | Configurable multi-row status footer - highly-specialized, and enhanced [pikit footer](https://github.com/adrianapan/pikit).                                                                                                  | No commands/tools;`opl-footer.json`.                                                                           |
+| [`opl-footer`](extensions/opl-footer/README.md)               | Configurable multi-row status footer - highly-specialized, and enhanced [pikit footer](https://github.com/adrianapan/pikit).                                                                                                  | `/configure-opl`; `opl-footer.json`.                                                                           |
 
 ## What you'll gain
 
@@ -94,7 +100,7 @@ Cold prompt-cache write, measured /init session (opl-modes lazy tools + MCP adap
 
 ### Run the agent without babysitting it
 
-- **`opl-modes`** chat and plan modes swap the active toolset for read-only lists and gate Bash to safe inspection patterns, with destructive-pattern checks that fire even inside otherwise-safe commands. The plan to execute lifecycle keeps exploration and mutation cleanly separated. Add custom modes (like below) for your workflow needs.
+- **`opl-modes`** chat and plan modes swap the active toolset for read-only lists and gate Bash to safe inspection patterns, with destructive-pattern checks that fire even inside otherwise-safe commands (also `find -delete`, `git clean`, `truncate`, `sudo`, and quote-obfuscated `r"m"`; `env`/`printenv` no longer safe-listed). The plan to execute lifecycle keeps exploration and mutation cleanly separated. Add custom modes (like below) for your workflow needs.
 ![custom mode sample](images/ss-mode-custom.png)
 - `load_tools` activation is bounded by the current mode, so a read-only mode cannot be tricked into enabling a write-capable tool.
 
@@ -103,8 +109,8 @@ Cold prompt-cache write, measured /init session (opl-modes lazy tools + MCP adap
 
 - **`opl-init`** writes a fingerprinted `AGENTS.md` so any agent starts already oriented in a repo. It writes a baseline before asking the model to refine the guide, so smaller models cannot leave the update only in chat; it re-runs only when the tree actually changes.
 ![init](images/ss-init.png)
-- **`opl-browser`** gives full Chromium automation (navigate, snapshot, extract rendered-page markdown, interact, screenshot, console/network capture, evaluate) through a single tool, with handle+preview output for large results.
-- **`opl-webaccess`** adds provider-backed search plus readable URL and PDF extraction, with session recovery of earlier results.
+- **`opl-browser`** gives full Chromium automation (navigate, snapshot, extract rendered-page markdown, interact, screenshot, console/network capture, evaluate) through a single tool, with handle+preview output for large results — navigation is http(s)-only and screenshots stay in the project directory.
+- **`opl-webaccess`** adds provider-backed search plus readable URL and PDF extraction, with session recovery of earlier results, an http(s)-only fetch, a 10 MB response cap, and a 30s timeout.
 - **`opl-simplebench`** benchmarks models on deterministic closed-answer contracts, instruction-following, and tool-call generation so you pick a model on evidence, not vibes.
 ![simplebench](images/ss-simplebench.png)
 - **`opl-todo`** tracks branch-aware tasks that persist across a session and reconstruct from history.
@@ -114,7 +120,7 @@ Cold prompt-cache write, measured /init session (opl-modes lazy tools + MCP adap
 
 ### See what the agent is doing
 
-- **`opl-footer`** surfaces model, cost, token and cache activity, git state, and per-turn timing in a configurable multi-row footer.
+- **`opl-footer`** surfaces model, cost, token and cache activity, git state, agent status, and per-turn timing in a configurable multi-row footer; `/configure-opl` edits and reorders its layout interactively.
 - **`opl-input`** is a configurable editor that reflects the active mode's identity, so you always know which mode you are typing into.
 ![input-footer](images/ss-input-footer.png)
 
@@ -180,7 +186,7 @@ Copy applicable files from [`configs/`](configs/) to `~/.pi/agent/configs/`. For
 - `opl-init` and `opl-questionnaire` have no external configuration.
 - Config files must be valid JSON, with no comments or trailing commas beyond deliberate `_comment` keys.
 - `opl-modes` owns active-mode appearance. Each mode's `appearance.prefix`, `prefixColor`, and `borderColor` style `opl-input`; `appearance.modeColor` styles `opl-footer`'s unified mode label. Renderers retain hardcoded fallbacks.
-  - `opl-modes.bashPatterns` is the shared read-only Bash policy for chat and plan. Use per-mode pattern fields only when those modes intentionally need different policies.
+  - `opl-modes.bashPatterns` is the shared read-only Bash policy now applied to every mode by default; a mode overrides it with its own valid `safePatterns`/`destructivePatterns` array, an empty array explicitly removes that policy, or `unrestrictedBash: true` disables both gates. Malformed per-mode arrays retain the existing policy.
   - `opl-modes.lazyTools` withholds heavy tool schemas (e.g. `subagent`, `browser`, `simplebench`) from the resting prefix and enables them on demand via `load_tools`, shrinking the per-session prompt-cache write.
 
 See each extension README for commands, behavior, configuration fields, runtime constraints, and architecture.

package/configs/opl-footer.json.sample

@@ -1,20 +1,39 @@
 {
-  "_comment": "Available segment IDs: pi, model, path, git, thinking, caveman, plan_mode, chat_mode, mode_switcher, separator, token_in, token_out, token_total, cache_read, cache_write, cost, context_pct, context_total, session_stats, perf_stats, text:<literal>",
-  "row1LeftSegments": ["pi", "separator", "model", "separator", "path", "git"],
-  "row1RightSegments": ["context_pct"],
+  "_comment": "Available segment IDs: pi, model, path, git, thinking, caveman, plan_mode, chat_mode, mode_switcher, separator, token_in, token_out, token_total, cache_read, cache_write, cost, context_pct, context_total, session_stats, perf_stats, status, text:<literal>",
+  "row1LeftSegments": [
+    "pi",
+    "separator",
+    "model",
+    "separator",
+    "path",
+    "git"
+  ],
+  "row1RightSegments": [
+    "context_pct"
+  ],
   "row2LeftSegments": [
     "thinking",
     "separator",
     "mode_switcher"
   ],
-  "row2RightSegments": ["token_total", "separator", "cost"],
-  "row3LeftSegments": ["session_stats"],
-  "row3RightSegments": ["perf_stats"],
+  "row2RightSegments": [
+    "token_total",
+    "separator",
+    "cost"
+  ],
+  "row3LeftSegments": [
+    "session_stats"
+  ],
+  "row3RightSegments": [
+    "perf_stats",
+    "cache_read",
+    "cache_write"
+  ],
   "icons": {
-    "pi": "\ue22c",
-    "folder": "\uf115",
-    "branch": "\uf126",
-    "git": "\uf1d3",
+    "pi": "󰏿",
+    "folder": "",
+    "branch": "",
+    "git": "",
     "separator": "|"
   },
   "colors": {

package/configs/opl-modes.json.sample

@@ -17,8 +17,8 @@
   "_comment_lazyTools": "Tool names withheld from the active set at rest and enabled on demand via the load_tools tool. Only affects modes that would otherwise include them (off/execute and custom modes that list them). Core built-ins, plan_complete, and load_tools are protected and ignored. Omit or leave empty to keep all tools always active.",
   "lazyTools": [],
   "bashPatterns": {
-    "_comment_safe": "Replace-only: providing safePatterns replaces ALL defaults for both built-in chat/plan modes (shared base). Omit to keep built-in safe patterns. Shown here with the built-in list.",
-    "_comment_destructive": "Replace-only: providing destructivePatterns replaces ALL defaults for both built-in chat/plan modes (shared base). Omit to keep built-in destructive patterns. Shown here with the built-in list.",
+    "_comment_safe": "Replace-only: providing bashPatterns.safePatterns replaces the built-in safe list. This is the default safe allowlist for every mode; a mode overrides it with its own safePatterns or opts out of Bash gating with unrestrictedBash. Shown here with the built-in list.",
+    "_comment_destructive": "Replace-only: providing bashPatterns.destructivePatterns replaces the built-in destructive list. This is the default destructive blocklist for every mode; a mode overrides it with its own destructivePatterns or opts out of Bash gating with unrestrictedBash. Shown here with the built-in list.",
     "safePatterns": [
       "^\\s*cat\\b",
       "^\\s*head\\b",
@@ -43,8 +43,6 @@
       "^\\s*which\\b",
       "^\\s*whereis\\b",
       "^\\s*type\\b",
-      "^\\s*env\\b",
-      "^\\s*printenv\\b",
       "^\\s*uname\\b",
       "^\\s*whoami\\b",
       "^\\s*date\\b",
@@ -74,12 +72,14 @@
       "\\btee\\b",
       "\\bdd\\b",
       "\\bshred\\b",
+      "\\btruncate\\b",
+      "\\s-(delete|exec|execdir)\\b",
       "(^|[^<])>(?!>|&)",
       ">>",
       "\\bnpm\\s+(install|uninstall|update|ci)",
       "\\byarn\\s+(add|remove|install)",
       "\\bpip\\s+(install|uninstall)",
-      "\\bgit\\s+(add|commit|push|merge|rebase|reset|checkout|branch\\s+-)",
+      "\\bgit\\s+(add|commit|push|merge|rebase|reset|checkout|branch\\s+-|clean|update-ref|tag\\s+-|cherry-pick|revert|am|apply)",
       "\\bsudo\\b",
       "\\bsu\\b",
       "\\bkill\\b",
@@ -91,6 +91,7 @@
   "_comment_tools": "Set modes.chat.tools or modes.plan.tools to replace their default tools. The legacy top-level chatAllowedTools and planAllowedTools keys remain supported but are deprecated.",
   "_comment_widgetColor": "available colors - accent, border, borderAccent, borderMuted, success, error, warning, muted, dim, text, thinkingText, searchMatchText, userMessageText, customMessageText, customMessageLabel, toolTitle, toolOutput, mdHeading, mdLink, mdLinkUrl, mdCode, mdCodeBlock, mdCodeBlockBorder, mdQuote, mdQuoteBorder, mdHr, mdListBullet, toolDiffAdded, toolDiffRemoved, toolDiffContext, syntaxComment, syntaxKeyword, syntaxFunction, syntaxVariable, syntaxString, syntaxNumber, syntaxType, syntaxOperator, syntaxPunctuation, thinkingOff, thinkingMinimal, thinkingLow, thinkingMedium, thinkingHigh, thinkingXhigh, thinkingMax, bashMode",
   "_comment_appearance": "Every mode owns appearance here. prefix/prefixColor/borderColor style opl-input; modeColor styles opl-footer's Mode value. All color values accept Pi theme tokens or #RRGGBB.",
+  "_comment_modePatterns": "Per-mode safePatterns/destructivePatterns must be arrays of valid regex strings. [] explicitly removes that policy; any malformed non-empty override is ignored and inherits the existing policy.",
   "modes": {
     "off": {
       "_comment": "Built-in mode — no restrictions, normal agent behavior.",

package/extensions/opl-browser/README.md

@@ -47,6 +47,9 @@ Full action set: `navigate` (url, or `back`/`forward`/`reload`), `snapshot`,
   a whole-document heuristic and mispicks inside small subtrees.
 - **Real Chromium via Playwright.** Navigation with `domcontentloaded` waits,
   CSS-selector interaction, viewport control, multi-page management.
+- **Scheme + path guards.** `navigate`/`new_page` accept http(s) only; `file:`,
+  `data:`, and `javascript:` are rejected. Screenshot paths are confined to the
+  project directory, so a bad `path` cannot overwrite arbitrary files.
 - **Per-page capture.** Console messages and network requests are buffered per
   page as they occur; `console` and `network` actions return the active page's
   buffer.
@@ -82,6 +85,8 @@ index.ts     Pi wiring: registers the single `browser` tool, TTL result store,
              preview/handle logic, and session_shutdown cleanup.
 browser.ts   Playwright driver: browser/context/page lifecycle, per-page console
              and network buffers, and the action switch.
+validate.ts  URL/path guards: http/https-only navigation, screenshot path confined
+             to the project directory.
 extract.ts   Pure rendered-HTML → markdown pipeline (linkedom + Readability +
              turndown), duplicated from opl-webaccess to keep installs independent.
 config.ts    DEFAULT_CONFIG + loadUserConfig (user overrides win via ??).

package/extensions/opl-browser/browser.ts

@@ -1,5 +1,6 @@
 import { chromium, type Browser, type BrowserContext, type Page, type ConsoleMessage } from "playwright";
 import { extractMarkdown } from "./extract.js";
+import { assertHttpUrl, safeScreenshotPath } from "./validate.js";
 import type { BrowserConfig } from "./config.js";
 
 // ponytail: single module-level Chromium instance reused across tool calls.
@@ -80,7 +81,7 @@ export async function runAction(p: BrowserParams, cfg: BrowserConfig): Promise<B
       if (url === "back") { await page().goBack(); }
       else if (url === "forward") { await page().goForward(); }
       else if (url === "reload") { await page().reload(); }
-      else if (url) { await page().goto(url, { waitUntil: "domcontentloaded" }); }
+      else if (url) { await page().goto(assertHttpUrl(url), { waitUntil: "domcontentloaded" }); }
       else throw new Error("navigate requires url (or back|forward|reload)");
       return { text: `${page().url()} — ${await page().title()}` };
     }
@@ -97,7 +98,7 @@ export async function runAction(p: BrowserParams, cfg: BrowserConfig): Promise<B
       return { text: markdown || "(empty extraction)" };
     }
     case "screenshot": {
-      const file = p.path ?? `opl-browser-${Date.now()}.png`;
+      const file = safeScreenshotPath(p.path ?? `opl-browser-${Date.now()}.png`);
       await page().screenshot({ path: file, fullPage: p.fullPage ?? false });
       return { text: `Screenshot saved to ${file}`, file };
     }
@@ -154,7 +155,7 @@ export async function runAction(p: BrowserParams, cfg: BrowserConfig): Promise<B
       const pg = await ctx.newPage();
       track(pg, cfg);
       activeIndex = ctx.pages().length - 1;
-      if (p.url) await pg.goto(p.url, { waitUntil: "domcontentloaded" });
+      if (p.url) await pg.goto(assertHttpUrl(p.url), { waitUntil: "domcontentloaded" });
       return { text: `Opened page [${activeIndex}] ${pg.url()}` };
     }
     case "select_page": {

package/extensions/opl-browser/validate.ts

@@ -0,0 +1,29 @@
+// Pure URL/path guards for the browser tool. No Playwright import so tests load it directly.
+
+import { resolve, sep } from "node:path";
+
+/** Normalize a URL, allowing only http/https so file:/data:/javascript: URLs can't
+ *  be navigated (file:// + evaluate = local file bytes returned into model context). */
+export function assertHttpUrl(url: string): string {
+  let parsed: URL;
+  try {
+    parsed = new URL(url);
+  } catch {
+    throw new Error(`invalid URL: ${url}`);
+  }
+  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+    throw new Error(`only http/https URLs are allowed, got ${parsed.protocol}//`);
+  }
+  return parsed.href;
+}
+
+/** Require a screenshot path to stay within the project directory (guard against
+ *  overwriting absolute or parent-relative user files with PNG bytes). */
+export function safeScreenshotPath(file: string, cwd: string = process.cwd()): string {
+  const root = resolve(cwd);
+  const abs = resolve(cwd, file);
+  if (abs !== root && !abs.startsWith(root + sep)) {
+    throw new Error(`screenshot path must stay within the project directory: ${file}`);
+  }
+  return file;
+}

package/extensions/opl-footer/README.md

@@ -1,10 +1,10 @@
 # opl-footer
 
-A customizable three-row footer for the Pi coding agent. It shows model, path, Git, context, thinking, mode, token, cost, session, and performance information in configurable left/right segments.
+A customizable three-row footer for the Pi coding agent. It shows model, path, Git, context, thinking, mode, token, cost, agent status, session, and performance information in configurable left/right segments.
 
 ## Commands, flags, and shortcuts
 
-No commands, flags, or shortcuts. Nerd Font detection can be overridden with `FOOTER_NERD_FONTS=1` or `FOOTER_NERD_FONTS=0`.
+`/configure-opl` provides six row/side tabs to toggle or reorder standard segments and their trailing separators, applying changes immediately. Press `r` for reorder view, then `,`/`.` to move the selected segment. The `status` segment shows `Working` during agent execution, `Waiting` while Pi tools run, and `Ready` when the agent settles. Colors, icons, literal text, and other options remain JSON-only. Nerd Font detection can be overridden with `FOOTER_NERD_FONTS=1` or `FOOTER_NERD_FONTS=0`.
 
 ## Extension features
 
@@ -33,7 +33,7 @@ The third row is populated after the first completed turn. Its session and perfo
 - **Token and cost tracking**: total, cache, input/output, and accumulated cost segments
 - **Session statistics**: prompt, API-call, and model tool-call counts
 - **Performance statistics**: cumulative LLM/tool duration, most recent user-prompt-to-completion turnaround time, average time to first token, output rate, and cache-hit percentage
-- **Thinking and mode indicators**: thinking-level colors plus caveman, plan, chat, or unified mode segments when available
+- **Thinking, mode, and status indicators**: thinking-level colors plus caveman, plan, chat, unified mode, and `Working`/`Waiting`/`Ready` status segments
 - **Nerd Font support**: automatic detection with plain-icon fallbacks
 - **Live updates**: branch changes and session events request footer re-rendering
 
@@ -64,7 +64,7 @@ See the tracked [`configs/opl-footer.json.sample`](../../configs/opl-footer.json
 
 | Segment | Description | Notes |
 |---------|-------------|-------|
-| `pi` | π symbol in accent blue | — |
+| `pi` | π symbol in accent blue | `pi` icon can be modified in config file |
 | `model` | Model name in pink + `(provider)` in dim | No icon; provider omitted if unavailable |
 | `path` | Current working directory | `segmentOptions.path.mode`: `"full"` (default) · `"abbreviated"` · `"basename"` |
 | `git` | Git branch and dirty indicators | `showBranch`, `showStaged`, `showUnstaged`, `showUntracked` (all bool) |
@@ -81,6 +81,9 @@ See the tracked [`configs/opl-footer.json.sample`](../../configs/opl-footer.json
 | `cache_read` | Cache read tokens (hidden if zero) | — |
 | `cache_write` | Cache write tokens (hidden if zero) | — |
 | `context_total` | Total context window size | — |
+| `session_stats` | Prompt, API-call, and tool-call counts | Hidden until the first prompt |
+| `perf_stats` | LLM/tool timing, TTFT, output rate, and cache-hit percentage | Hidden until the first prompt |
+| `status` | `Working`, `Waiting`, or `Ready` | `accent`, `warning`, and `success` theme colors respectively; optional and hidden by default |
 | `separator` | `\|` divider | Coloured via `separator` in `colors` |
 | `text:...` | Literal text, e.g. `text:⚡` | — |
 
@@ -156,6 +159,8 @@ The `session_stats` segment shows prompt, API-call, and model tool-call counts f
 
 The `perf_stats` segment shows cumulative session LLM and tool time, average time to first token, output tokens/sec, and cache-hit percentage. The `LLM` figure is followed by the most recent user-prompt-to-completion turnaround time in parentheses, e.g. `LLM 18m 22s (2m 13s)`. This turnaround reflects only fully-settled turns (the `agent_settled` signal, after any retries or compaction), so it stays blank until the first turn completes. All `perf_stats` timing values are ephemeral — they reset each session and are not reconstructed from branch history.
 
+The `status` segment is `Working` while the agent runs, `Waiting` while one or more Pi tools execute, and `Ready` only after `agent_settled`.
+
 ## Icons
 
 Nerd Font icons are auto-detected from your terminal. Ghostty, WezTerm, Kitty, iTerm2, Alacritty, Foot, Rio, and Contour are recognised automatically — everything else falls back to plain Unicode symbols. If detection gets it wrong (e.g. when running inside tmux), override it:

package/extensions/opl-footer/config.ts

@@ -1,5 +1,5 @@
-import { existsSync, readFileSync } from "node:fs";
-import { join } from "node:path";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
 import type { FooterUserConfig, StatusLineSegmentId, ColorScheme, StatusLineSegmentOptions } from "./types.js";
 import { getDefaultColors } from "./theme.js";
 import type { IconSet } from "./icons.js";
@@ -12,6 +12,33 @@ const DEFAULT_ROW2_RIGHT: StatusLineSegmentId[] = ["token_total", "separator", "
 const DEFAULT_ROW3_LEFT: StatusLineSegmentId[] = ["session_stats"];
 const DEFAULT_ROW3_RIGHT: StatusLineSegmentId[] = ["perf_stats"];
 
+export type FooterLayoutKey =
+  | "row1LeftSegments" | "row1RightSegments"
+  | "row2LeftSegments" | "row2RightSegments"
+  | "row3LeftSegments" | "row3RightSegments";
+
+export const FOOTER_LAYOUT_KEYS: FooterLayoutKey[] = [
+  "row1LeftSegments", "row1RightSegments",
+  "row2LeftSegments", "row2RightSegments",
+  "row3LeftSegments", "row3RightSegments",
+];
+
+export const CONFIGURABLE_SEGMENTS: StatusLineSegmentId[] = [
+  "pi", "model", "path", "git", "thinking", "caveman", "plan_mode",
+  "chat_mode", "mode_switcher", "token_in", "token_out", "token_total",
+  "cache_read", "cache_write", "cost", "context_pct", "context_total",
+  "session_stats", "perf_stats", "status",
+];
+
+const DEFAULT_LAYOUTS: Record<FooterLayoutKey, StatusLineSegmentId[]> = {
+  row1LeftSegments: DEFAULT_ROW1_LEFT,
+  row1RightSegments: DEFAULT_ROW1_RIGHT,
+  row2LeftSegments: DEFAULT_ROW2_LEFT,
+  row2RightSegments: DEFAULT_ROW2_RIGHT,
+  row3LeftSegments: DEFAULT_ROW3_LEFT,
+  row3RightSegments: DEFAULT_ROW3_RIGHT,
+};
+
 const DEFAULT_SEGMENT_OPTIONS: StatusLineSegmentOptions = {
   path: { mode: "full" },
   git: {
@@ -61,6 +88,102 @@ export function clearUserConfigCache(): void {
   userConfigCacheTime = 0;
 }
 
+export function getLayoutSegments(config: FooterUserConfig, key: FooterLayoutKey): StatusLineSegmentId[] {
+  const segments = config[key];
+  return Array.isArray(segments) && segments.every((segment) => typeof segment === "string")
+    ? segments
+    : DEFAULT_LAYOUTS[key];
+}
+
+export function hasSegmentSeparator(
+  config: FooterUserConfig,
+  key: FooterLayoutKey,
+  segment: StatusLineSegmentId,
+): boolean {
+  const layout = getLayoutSegments(config, key);
+  const index = layout.indexOf(segment);
+  return index !== -1 && layout[index + 1] === "separator";
+}
+
+export function setLayoutSegment(
+  config: FooterUserConfig,
+  key: FooterLayoutKey,
+  segment: StatusLineSegmentId,
+  shown: boolean,
+): FooterUserConfig {
+  const current = getLayoutSegments(config, key);
+  const index = current.indexOf(segment);
+  if (shown && index !== -1) return config;
+
+  const next = [...current];
+  if (!shown) {
+    if (index === -1) return config;
+    next.splice(index, 1);
+    if (next[index] === "separator") next.splice(index, 1);
+    return { ...config, [key]: next };
+  }
+
+  const order = CONFIGURABLE_SEGMENTS.indexOf(segment);
+  const insertAt = next.findIndex((item) => CONFIGURABLE_SEGMENTS.indexOf(item) > order);
+  next.splice(insertAt === -1 ? next.length : insertAt, 0, segment);
+  return { ...config, [key]: next };
+}
+
+export function moveLayoutSegment(
+  config: FooterUserConfig,
+  key: FooterLayoutKey,
+  segment: StatusLineSegmentId,
+  direction: "up" | "down",
+): FooterUserConfig {
+  const current = getLayoutSegments(config, key);
+  const start = current.indexOf(segment);
+  if (start === -1) return config;
+
+  const end = start + (current[start + 1] === "separator" ? 2 : 1);
+  if (direction === "up") {
+    let previousStart = start - 1;
+    if (current[previousStart] === "separator") previousStart--;
+    if (previousStart < 0 || !CONFIGURABLE_SEGMENTS.includes(current[previousStart]!)) return config;
+    return {
+      ...config,
+      [key]: [...current.slice(0, previousStart), ...current.slice(start, end), ...current.slice(previousStart, start), ...current.slice(end)],
+    };
+  }
+
+  const nextStart = end;
+  if (!CONFIGURABLE_SEGMENTS.includes(current[nextStart]!)) return config;
+  const nextEnd = nextStart + (current[nextStart + 1] === "separator" ? 2 : 1);
+  return {
+    ...config,
+    [key]: [...current.slice(0, start), ...current.slice(nextStart, nextEnd), ...current.slice(start, end), ...current.slice(nextEnd)],
+  };
+}
+
+export function setSegmentSeparator(
+  config: FooterUserConfig,
+  key: FooterLayoutKey,
+  segment: StatusLineSegmentId,
+  shown: boolean,
+): FooterUserConfig {
+  const current = getLayoutSegments(config, key);
+  const index = current.indexOf(segment);
+  if (index === -1) return config;
+  const hasSeparator = current[index + 1] === "separator";
+  if (shown === hasSeparator) return config;
+
+  const next = [...current];
+  if (shown) next.splice(index + 1, 0, "separator");
+  else next.splice(index + 1, 1);
+  return { ...config, [key]: next };
+}
+
+export function saveUserConfig(config: FooterUserConfig): void {
+  const configPath = getConfigPath();
+  mkdirSync(dirname(configPath), { recursive: true });
+  writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n", "utf-8");
+  clearUserConfigCache();
+}
+
 export function getEffectiveConfig(): {
   row1LeftSegments: StatusLineSegmentId[];
   row1RightSegments: StatusLineSegmentId[];
@@ -75,12 +198,12 @@ export function getEffectiveConfig(): {
   const userConfig = loadUserConfig();
 
   return {
-    row1LeftSegments: userConfig?.row1LeftSegments ?? DEFAULT_ROW1_LEFT,
-    row1RightSegments: userConfig?.row1RightSegments ?? DEFAULT_ROW1_RIGHT,
-    row2LeftSegments: userConfig?.row2LeftSegments ?? DEFAULT_ROW2_LEFT,
-    row2RightSegments: userConfig?.row2RightSegments ?? DEFAULT_ROW2_RIGHT,
-    row3LeftSegments: userConfig?.row3LeftSegments ?? DEFAULT_ROW3_LEFT,
-    row3RightSegments: userConfig?.row3RightSegments ?? DEFAULT_ROW3_RIGHT,
+    row1LeftSegments: getLayoutSegments(userConfig ?? {}, "row1LeftSegments"),
+    row1RightSegments: getLayoutSegments(userConfig ?? {}, "row1RightSegments"),
+    row2LeftSegments: getLayoutSegments(userConfig ?? {}, "row2LeftSegments"),
+    row2RightSegments: getLayoutSegments(userConfig ?? {}, "row2RightSegments"),
+    row3LeftSegments: getLayoutSegments(userConfig ?? {}, "row3LeftSegments"),
+    row3RightSegments: getLayoutSegments(userConfig ?? {}, "row3RightSegments"),
     colors: userConfig?.colors ?? getDefaultColors(),
     segmentOptions: {
       ...DEFAULT_SEGMENT_OPTIONS,

package/extensions/opl-footer/configure-navigation.ts

@@ -0,0 +1,13 @@
+export function nextTabIndex(activeTab: number, direction: "left" | "right", count: number): number {
+  return direction === "left"
+    ? (activeTab + count - 1) % count
+    : (activeTab + 1) % count;
+}
+
+export function restoreSelectedItem(
+  lists: Array<{ selectItem(id: string): void }>,
+  activeTab: number,
+  id: string,
+): void {
+  lists[activeTab]?.selectItem(id);
+}

package/extensions/opl-footer/configure.ts

@@ -0,0 +1,157 @@
+import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
+import { getSettingsListTheme } from "@earendil-works/pi-coding-agent";
+import { Key, matchesKey, SettingsList, truncateToWidth, type SettingItem } from "@earendil-works/pi-tui";
+
+import {
+  CONFIGURABLE_SEGMENTS,
+  FOOTER_LAYOUT_KEYS,
+  getLayoutSegments,
+  hasSegmentSeparator,
+  loadUserConfig,
+  moveLayoutSegment,
+  saveUserConfig,
+  setLayoutSegment,
+  setSegmentSeparator,
+  type FooterLayoutKey,
+} from "./config.js";
+import { nextTabIndex, restoreSelectedItem } from "./configure-navigation.js";
+
+const LAYOUT_LABELS: Record<FooterLayoutKey, string> = {
+  row1LeftSegments: "Row 1 left",
+  row1RightSegments: "Row 1 right",
+  row2LeftSegments: "Row 2 left",
+  row2RightSegments: "Row 2 right",
+  row3LeftSegments: "Row 3 left",
+  row3RightSegments: "Row 3 right",
+};
+
+function segmentLabel(segment: string): string {
+  return segment.replaceAll("_", " ");
+}
+
+export async function showFooterConfigurator(ctx: ExtensionContext, onSaved: () => void): Promise<void> {
+  if (ctx.mode !== "tui") {
+    ctx.ui.notify("/configure-opl requires TUI mode", "error");
+    return;
+  }
+
+  let config = loadUserConfig() ?? {};
+  await ctx.ui.custom<void>((tui, theme, _keybindings, done) => {
+    let activeTab = 0;
+    let view: "settings" | "reorder" = "settings";
+    let reorderIndex = 0;
+    let settingsLists: SettingsList[] = [];
+
+    const persist = (next: typeof config, selectedId?: string): boolean => {
+      try {
+        saveUserConfig(next);
+        config = next;
+        settingsLists = createSettingsLists();
+        if (selectedId) restoreSelectedItem(settingsLists, activeTab, selectedId);
+        onSaved();
+        return true;
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        ctx.ui.notify(`Could not save footer config: ${message}`, "error");
+        done(undefined);
+        return false;
+      }
+    };
+
+    const save = (id: string, value: string) => {
+      const [key, segment, kind] = id.split(":") as [FooterLayoutKey, typeof CONFIGURABLE_SEGMENTS[number], string];
+      const next = kind === "separator"
+        ? setSegmentSeparator(config, key, segment, value === "shown")
+        : setLayoutSegment(config, key, segment, value === "shown");
+      persist(next, id);
+    };
+
+    const createSettingsLists = (): SettingsList[] => FOOTER_LAYOUT_KEYS.map((key) => {
+      const layout = getLayoutSegments(config, key);
+      const items: SettingItem[] = CONFIGURABLE_SEGMENTS.flatMap((segment) => {
+        const index = layout.indexOf(segment);
+        return [
+          {
+            id: `${key}:${segment}:segment`,
+            label: segmentLabel(segment),
+            currentValue: index === -1 ? "hidden" : "shown",
+            values: ["shown", "hidden"],
+          },
+          {
+            id: `${key}:${segment}:separator`,
+            label: `${segmentLabel(segment)} separator`,
+            currentValue: hasSegmentSeparator(config, key, segment) ? "shown" : "hidden",
+            values: ["shown", "hidden"],
+          },
+        ];
+      });
+      return new SettingsList(items, 15, getSettingsListTheme(), save, () => done(undefined));
+    });
+
+    const visibleSegments = (): typeof CONFIGURABLE_SEGMENTS[number][] =>
+      getLayoutSegments(config, FOOTER_LAYOUT_KEYS[activeTab]!).filter((segment) => CONFIGURABLE_SEGMENTS.includes(segment));
+
+    settingsLists = createSettingsLists();
+
+    return {
+      render(width: number) {
+        const tabs = FOOTER_LAYOUT_KEYS.map((key, index) =>
+          theme.fg(index === activeTab ? "accent" : "dim", `[${LAYOUT_LABELS[key]}]`),
+        ).join(" ");
+        const header = [
+          truncateToWidth(theme.bold("Configure OPL Footer"), width),
+          truncateToWidth(tabs, width),
+        ];
+        if (view === "settings") {
+          return [
+            ...header,
+            truncateToWidth(theme.fg("dim", "←/→ switch layout · r reorder · Changes apply immediately"), width),
+            ...settingsLists[activeTab]!.render(width),
+          ];
+        }
+
+        const segments = visibleSegments();
+        reorderIndex = Math.min(reorderIndex, Math.max(0, segments.length - 1));
+        const rows = segments.length === 0
+          ? [theme.fg("dim", "No visible standard segments.")]
+          : segments.map((segment, index) => {
+            const text = `${index === reorderIndex ? "›" : " "} ${segmentLabel(segment)}${hasSegmentSeparator(config, FOOTER_LAYOUT_KEYS[activeTab]!, segment) ? " + separator" : ""}`;
+            return index === reorderIndex ? theme.fg("accent", text) : text;
+          });
+        return [
+          ...header,
+          truncateToWidth(theme.fg("dim", "↑/↓ select · ,/. move · r settings · esc close"), width),
+          ...rows.map((row) => truncateToWidth(row, width)),
+        ];
+      },
+      invalidate() { settingsLists.forEach((list) => list.invalidate()); },
+      handleInput(data: string) {
+        if (matchesKey(data, Key.left)) {
+          activeTab = nextTabIndex(activeTab, "left", FOOTER_LAYOUT_KEYS.length);
+          reorderIndex = 0;
+        } else if (matchesKey(data, Key.right)) {
+          activeTab = nextTabIndex(activeTab, "right", FOOTER_LAYOUT_KEYS.length);
+          reorderIndex = 0;
+        } else if (view === "reorder") {
+          const segments = visibleSegments();
+          if (data === "r") view = "settings";
+          else if (matchesKey(data, Key.escape)) done(undefined);
+          else if (matchesKey(data, Key.up) && segments.length > 0) reorderIndex = (reorderIndex + segments.length - 1) % segments.length;
+          else if (matchesKey(data, Key.down) && segments.length > 0) reorderIndex = (reorderIndex + 1) % segments.length;
+          else if ((data === "," || data === ".") && segments[reorderIndex]) {
+            const next = moveLayoutSegment(config, FOOTER_LAYOUT_KEYS[activeTab]!, segments[reorderIndex]!, data === "," ? "up" : "down");
+            if (next !== config && persist(next)) {
+              reorderIndex = data === "," ? Math.max(0, reorderIndex - 1) : Math.min(segments.length - 1, reorderIndex + 1);
+            }
+          }
+        } else if (data === "r") {
+          view = "reorder";
+          reorderIndex = 0;
+        } else {
+          settingsLists[activeTab]!.handleInput?.(data);
+        }
+        tui.requestRender();
+      },
+    };
+  });
+}