feat: harden local shell, SFTP, and desktop session reliability

Finder-launched terminals now inherit a login PATH so tools like ollama resolve, destructive SFTP/editor actions require confirmation, and terminal search plus window dragging work again. SSH forwards and RDP sessions keep listeners and survive reconnect without FastPath crashes.

Co-authored-by: Cursor <cursoragent@cursor.com>

src/components/layout/tabbar/TabItem.tsx

@@ -16,7 +16,7 @@ interface TabItemProps {
   isDragging: boolean
   dragOverIndex: number | null
   onActivate: () => void
-  onClose: (e: React.MouseEvent) => void
+  onClose: (e: { stopPropagation(): void }) => void
   onContextMenu: (e: React.MouseEvent) => void
   onDragStart: (e: React.DragEvent, index: number) => void
   onDragOver: (e: React.DragEvent, index: number) => void
@@ -38,7 +38,7 @@ export function TabItem({
   onDrop,
   onDragEnd,
 }: TabItemProps) {
-  const { t } = useTranslation('terminal')
+  const { t } = useTranslation(['terminal', 'common'])
   const displayTitle = resolveTabTitle(tab)
   const isLocalTerm = tab.type === 'terminal' && tab.isLocal
   const session = useSessionStore((state) =>
@@ -49,7 +49,7 @@ export function TabItem({
     if (isLocalTerm) {
       return (
         <Terminal
-          className={`h-3.5 w-3.5 flex-shrink-0 ${isActive ? 'text-emerald-400' : 'text-emerald-500/80'}`}
+          className={`h-3.5 w-3.5 flex-shrink-0 ${isActive ? 'text-accent-green' : 'text-accent-green/70'}`}
           aria-label={t('toolbar.labelLocal')}
         />
       )
@@ -99,8 +99,28 @@ export function TabItem({
   return (
     <div
       data-tab-item
+      role="tab"
+      aria-selected={isActive}
+      tabIndex={0}
       draggable
       onClick={onActivate}
+      onAuxClick={(e) => {
+        if (e.button === 1) {
+          e.preventDefault()
+          e.stopPropagation()
+          onClose(e)
+        }
+      }}
+      onKeyDown={(e) => {
+        if (e.key === 'Enter' || e.key === ' ') {
+          e.preventDefault()
+          onActivate()
+        }
+        if (e.key === 'Delete') {
+          e.preventDefault()
+          onClose(e)
+        }
+      }}
       onContextMenu={onContextMenu}
       onDragStart={(e) => onDragStart(e, index)}
       onDragOver={(e) => onDragOver(e, index)}
@@ -132,9 +152,12 @@ export function TabItem({
       </span>
 
       <button
+        type="button"
         onClick={onClose}
+        aria-label={t('common:tab.closeAria', { title: displayTitle })}
         className={`
-          rounded p-0.5 opacity-0 transition-opacity hover:bg-dark-600 group-hover:opacity-100
+          rounded p-0.5 opacity-0 transition-opacity hover:bg-dark-600
+          group-hover:opacity-100 group-focus-within:opacity-100 focus-visible:opacity-100
           ${isActive ? 'opacity-100' : ''}
         `}
       >