Bug: rfind() returns a byte offset, but it's used here as an index into Vec<char>. If the line contains any multi-byte UTF-8 characters before the port section, this will index into the wrong position or panic with out-of-bounds.

Same pattern flagged in PR #93.

Fix: either work entirely in bytes (use &line_str[port_idx..]) or convert the byte offset to a char offset:

let port_str = if let Some(port_idx) = line_str.rfind("0.0.0.0:") {
    let compact = compact_ports(line_str[port_idx..].trim());
    format!(" [{}]", compact)
} else {
    String::new()
};

No need for the chars().collect() → Vec<char> dance here — byte slicing works fine since rfind returns a byte offset and string slicing expects byte offsets.

Same bytes/chars bug: find('[') returns a byte offset, but chars().skip(start + 1) treats it as a char count.

Simpler fix — use byte slicing throughout:

if let Some(start) = line.find('[') {
    if let Some(end) = line[start+1..].find(']') {
        let bracket = &line[start+1..start+1+end];
        let svc = bracket.split_whitespace().next().unwrap_or("");
        // ...
    }
}

'[' and ']' are single-byte ASCII, so byte arithmetic is safe here.

contains("Up") is too greedy — it will false-positive on image names like setup-service:latest, commands like "python startup.py", etc.

Two options:

1. Search for " Up " (with surrounding spaces, matching docker's column formatting)
2. Better: use docker compose ps --format (like the existing docker_ps() does) to get structured output instead of parsing the human-readable table. This would avoid all the fragile column-parsing logic.

Inconsistent error handling: unwrap_or_default() silently swallows Docker errors. If Docker isn't installed or compose isn't available, the user gets "🐳 0 compose services" with no indication something is wrong.

Compare with run_compose_logs (line 610) and run_compose_build (line 641) which use .context("Failed to run ...")?.

Should be consistent:

let output = Command::new("docker")
    .args(["compose", "ps"])
    .output()
    .context("Failed to run docker compose ps")?;
let raw = String::from_utf8_lossy(&output.stdout).to_string();

Clippy warning: .last() on a DoubleEndedIterator iterates the entire iterator needlessly. Use .next_back() instead:

let short_image = image.split('/').next_back().unwrap_or(image);

Nit: this test only checks !out.is_empty() — it doesn't validate any actual content. At minimum, assert it contains the expected prefix:

assert!(out.contains("Compose logs"), "should have compose logs header");

Nit: comment says "We split by 2+ spaces" but the code uses split_whitespace() which splits on any whitespace (single space included). Either update the comment or actually split by 2+ spaces with a regex/custom split.