feat: harden local shell, SFTP, and desktop session reliability

Finder-launched terminals now inherit a login PATH so tools like ollama resolve, destructive SFTP/editor actions require confirmation, and terminal search plus window dragging work again. SSH forwards and RDP sessions keep listeners and survive reconnect without FastPath crashes.

Co-authored-by: Cursor <cursoragent@cursor.com>

shared/types/connection.types.ts

@@ -31,9 +31,9 @@ export interface ConnectionStats {
 export interface PoolConfig {
   maxConnections: number           // 最大连接数 (默认 10)
   maxBackgroundConnections: number // 最大后台连接数 (默认 5)
-  idleTimeoutMs: number           // 空闲超时 (默认 5 分钟)
-  suspendTimeoutMs: number        // 挂起超时 (默认 30 分钟)
-  keepaliveIntervalMs: number     // 保活间隔 (默认 60 秒)
+  idleTimeoutMs: number           // 空闲超时 (默认 30 分钟)
+  suspendTimeoutMs: number        // 挂起超时 (默认 60 分钟)
+  keepaliveIntervalMs: number     // 保活间隔 (默认 15 秒)
   maxReconnectAttempts: number    // 最大重连次数 (默认 3)
 }
 
@@ -66,6 +66,8 @@ export interface PooledConnection {
   // 重连
   reconnectAttempts: number     // 重连尝试次数
   maxReconnectAttempts: number  // 最大重连次数
+  /** Consecutive keepalive failures before tearing down (ClientAliveCountMax-like). */
+  keepaliveFailures?: number
 }
 
 // 连接结果