chore(login): a11y aria-label on cancel button + bound mac PATH probe (#31)

Two small UX/perf fixes flagged by the local 3-agent reviews on PR
#27 and PR #29:

- Login button now sets `aria-label` reflecting its dual role: "Log
  into <profile>" when idle, "Cancel login for <profile>" while a
  login is in flight. The visible label was already updated (spinner
  + red "取消") and the `title` attribute carried the cancel hint, but
  many screen readers prefer aria-label and ignore title; this makes
  the dual semantics announced consistently across assistive tech.
  New i18n keys `profileLoginCancelAria` / `profileLoginReadyAria`
  (en + zh-CN).

- mac `suggested_codex_cli_paths` walked the entire `PATH` and
  stat'd `<entry>/codex` for every component, blocking the
  `get_codex_cli_status` Tauri command for seconds when PATH includes
  NFS / SMB / slow drives. Now bounded by a 500 ms soft deadline:
  fixed locations (Codex.app bundle, Homebrew, npm-global, etc) are
  checked first since those are guaranteed-fast local stats, then the
  bounded PATH walk fills in whatever remaining suggestions fit in
  the deadline. Worst case: dialog still opens promptly even on a
  pathologically slow PATH.

Both are pure refinements — no behavior change on the happy path.

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>

Author: Cmochance

src-tauri/mac/runtime/process.rs

@@ -254,6 +254,15 @@ impl CodexPathResolver for MacosCodexPathResolver {
     }
 }
 
+/// Soft cap on how long the PATH walk can spend stat'ing entries
+/// before we bail and return what we have. Each `is_file` probe blocks
+/// the Tauri command thread; an NFS / SMB entry on PATH can stall for
+/// seconds. Fixed locations (Codex.app bundle, Homebrew, /usr/local,
+/// npm-global / bun / volta) are checked first because they're
+/// guaranteed-fast local stats — by the time we hit the bounded PATH
+/// walk we've usually already collected the realistic candidates.
+const PATH_PROBE_DEADLINE: Duration = Duration::from_millis(500);
+
 pub fn suggested_codex_cli_paths(codex_home: Option<&Path>) -> Vec<PathBuf> {
     let mut suggestions: Vec<PathBuf> = Vec::new();
     let managed_shim = codex_home.map(managed_shim_path);
@@ -280,7 +289,11 @@ pub fn suggested_codex_cli_paths(codex_home: Option<&Path>) -> Vec<PathBuf> {
     }
 
     if let Some(path) = env::var_os("PATH") {
+        let deadline = std::time::Instant::now() + PATH_PROBE_DEADLINE;
         for entry in env::split_paths(&path) {
+            if std::time::Instant::now() >= deadline {
+                break;
+            }
             push(entry.join("codex"));
         }
     }

src-tauri/shared/front/i18n.ts

@@ -210,6 +210,8 @@ const enMessages = {
     "Codex CLI not found. Pick the binary location to continue.",
   codexCliRetryLogin: "Save & retry login",
   profileLoginCancelHint: "Login in progress — click to cancel",
+  profileLoginCancelAria: "Cancel login for {profile}",
+  profileLoginReadyAria: "Log into {profile}",
   loginCancelled: "Login cancelled.",
   loginCancelFailed: "Failed to cancel login.",
   settingsCodexCli: "Codex CLI path",
@@ -429,6 +431,8 @@ const messages: Record<Locale, Messages> = {
     codexCliNotFoundToast: "找不到 codex CLI，请先指定它的位置。",
     codexCliRetryLogin: "保存并重试登录",
     profileLoginCancelHint: "登录进行中，点击取消",
+    profileLoginCancelAria: "取消 {profile} 的登录",
+    profileLoginReadyAria: "登录 {profile}",
     loginCancelled: "已取消登录。",
     loginCancelFailed: "取消登录失败。",
     settingsCodexCli: "Codex CLI 路径",

src-tauri/shared/front/render.ts

@@ -604,6 +604,11 @@ export function renderProfiles(
                     ? t(state.locale, "profileLoginDisabled")
                     : t(state.locale, "profileLoginReady")
               }"
+              aria-label="${
+                loginRunning
+                  ? t(state.locale, "profileLoginCancelAria", { profile: profile.folder_name })
+                  : t(state.locale, "profileLoginReadyAria", { profile: profile.folder_name })
+              }"
               data-login-profile="${profile.folder_name}"
               ${loginDisabled ? "disabled" : ""}
             >