feat(login): surface and recover from missing codex CLI (#27)

* feat(login): surface and recover from missing codex CLI

Login on Windows used to hide a missing codex CLI behind mojibake: the
fallback `cmd /C codex login` printed cmd.exe's GBK "command not found"
message, and `String::from_utf8_lossy` mangled it into U+FFFD soup. The
toast was unreadable and the only escape was reinstalling codex.

This change replaces the cmd fallback with a typed
`REAL_CODEX_NOT_FOUND` error and gives the user a recovery path:

- New "Codex CLI 路径" dialog auto-opens on REAL_CODEX_NOT_FOUND. It
  shows the currently resolved path + source, common install locations
  as click-to-fill chips, and Save / Clear / Cancel actions.
- A user-supplied path is persisted as `user_codex_path` in
  install_state.json and takes priority over auto-discovery, with a
  silent fallback when the override file disappears so the user is
  never permanently wedged.
- Settings page now has a "Codex CLI 路径" row showing the resolved
  path so users can adjust it any time, not only after a failure.
- Login button doubles as a cancel button while a login is in flight:
  clicking sends SIGTERM (Unix) / taskkill (Windows) to the codex
  process so a closed OAuth tab no longer leaves a permanent spinner.

Bump to 1.5.6.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* fix(login): preserve stderr on failure; tighten cancel toast race

Three follow-ups from PR review:

- `Command::output()` previously captured codex login's stdio for the
  LOGIN_FAILED toast; the spawn+wait_with_output split silently dropped
  it. Pipe stdout/stderr explicitly so the message surface stays the
  same when codex login itself errors out.
- Roll back `cancelledLoginProfile` when the backend reports no login
  was actually cancelled, so a click that races a natural failure
  doesn't mask the real toast.
- Document the PID-reuse caveat in `login_cancel.rs` — the slot
  clears after wait_with_output, so a cancel in that microsecond
  window could theoretically target a recycled PID. Accepted for
  v1.5.6; long-term fix is a Child-handle slot.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* fix(win): patch InstallState constructors and exhaustive match for user_codex_path

CI on Linux (which compiles the Windows runtime path) caught three
spots I missed locally because the macOS toolchain doesn't cross-check
the win module. Same shape as the mac install.rs fix already in this
PR:

- Two `InstallState { ... }` constructors in win install.rs needed the
  new `user_codex_path` field (preserve the previous value).
- `run_codex_auth_refresh` had a `match real_codex_source` that wasn't
  exhaustive after `RealCodexPathSource::UserOverride` was added.
- Two test fixtures had to set `user_codex_path: None` explicitly.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* chore(git): ignore .claude runtime artifacts

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* fix(win): patch test InstallState constructors for user_codex_path

Two more InstallState literals in win/runtime/process.rs tests that the
mac toolchain didn't surface (Linux CI compiles the win cfg path).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>

Author: Cmochance

.gitignore

@@ -23,4 +23,5 @@ local_doc/
 agent/
 codex_history/
 .codex/
+.claude/
 docs/

package-lock.json

@@ -1,7 +1,7 @@
 {
   "name": "codex_switch",
   "private": true,
-  "version": "1.5.4",
+  "version": "1.5.6",
   "type": "module",
   "scripts": {
     "dev": "vite",

package.json

@@ -1,6 +1,6 @@
 [package]
 name = "codex_switch"
-version = "1.5.4"
+version = "1.5.6"
 description = "Native Tauri control panel for Codex account switching"
 authors = ["Cmochance"]
 edition = "2021"

src-tauri/Cargo.lock

@@ -195,6 +195,15 @@ <h2 class="section-title" data-i18n-key="runtimeTitle">Runtime Console</h2>
               <strong data-i18n-key="settingsUpdateUrl">Update URL</strong>
               <input id="settings-update-url-input" class="settings-input" type="url" value="https://api.github.com/repos/Cmochance/Codex_Account_Switch/releases/latest" />
             </label>
+            <div class="settings-row settings-row--stacked">
+              <strong id="settings-codex-cli-label">Codex CLI path</strong>
+              <div class="settings-row-content">
+                <p id="settings-codex-cli-value" class="settings-value">--</p>
+                <div class="settings-action-row">
+                  <button id="settings-codex-cli-button" class="settings-action-button" type="button">Change</button>
+                </div>
+              </div>
+            </div>
             <div class="settings-row settings-row--stacked">
               <strong data-i18n-key="settingsConfigBackup">Configuration backup</strong>
               <div class="settings-row-content">
@@ -368,6 +377,43 @@ <h3 id="base-url-dialog-title">Custom Base Url</h3>
       </form>
     </dialog>
 
+    <dialog id="codex-cli-dialog" class="dialog">
+      <form id="codex-cli-form" class="dialog-form" method="dialog">
+        <div class="dialog-copy">
+          <h3 id="codex-cli-dialog-title">Codex CLI path</h3>
+          <p id="codex-cli-dialog-copy">Codex Switch couldn't find the codex CLI on this machine, or the cached path is wrong. Pick the real codex binary so login can spawn it directly.</p>
+          <p class="codex-cli-current">
+            <strong id="codex-cli-current-label">Current path</strong>
+            <span id="codex-cli-current-value" class="codex-cli-current-value">--</span>
+            <span id="codex-cli-current-source" class="codex-cli-current-source" hidden></span>
+          </p>
+        </div>
+
+        <label class="field">
+          <span id="codex-cli-input-label">codex executable path</span>
+          <input
+            id="codex-cli-input"
+            name="codex_cli_path"
+            type="text"
+            autocomplete="off"
+            spellcheck="false"
+            placeholder="/full/path/to/codex"
+          />
+        </label>
+
+        <p id="codex-cli-suggestions-heading" class="codex-cli-suggestions-heading">Common locations</p>
+        <div id="codex-cli-suggestions" class="codex-cli-suggestions"></div>
+
+        <p id="codex-cli-dialog-error" class="dialog-error" hidden></p>
+
+        <div class="dialog-actions">
+          <button id="cancel-codex-cli-button" class="ghost-button" type="button">Cancel</button>
+          <button id="clear-codex-cli-button" class="ghost-button" type="button" hidden>Clear override</button>
+          <button id="submit-codex-cli-button" class="primary-button" type="submit">Save</button>
+        </div>
+      </form>
+    </dialog>
+
     <dialog id="update-dialog" class="dialog">
       <div class="dialog-form">
         <div class="dialog-copy">

src-tauri/Cargo.toml

@@ -219,6 +219,7 @@ pub fn refresh_install_state(codex_home: &Path) -> AppResult<()> {
     let state = InstallState {
         real_codex_path,
         path_added_by_installer: previous_state.path_added_by_installer,
+        user_codex_path: previous_state.user_codex_path,
     };
     save_install_state(Some(codex_home), &state);
     Ok(())
@@ -267,9 +268,11 @@ pub fn install_from(
     copy_runtime_cli(source_cli_path, &runtime_cli_path)?;
     write_codex_shim(&codex_home)?;
 
+    let previous_state = load_install_state(Some(&codex_home));
     let state = InstallState {
         real_codex_path: Some(real_codex_path.to_string_lossy().into_owned()),
         path_added_by_installer: false,
+        user_codex_path: previous_state.user_codex_path,
     };
     save_install_state(Some(&codex_home), &state);
 

src-tauri/mac/front/index.html

@@ -13,9 +13,10 @@ pub use crate::shared::{paths, profiles, profiles_index};
 
 pub mod actions {
     pub use super::profile_actions::{
-        add_profile, clear_profile_account, delete_profile, login_current_profile, login_profile,
-        open_codex_app, open_contact, open_profile_folder, open_releases, open_url,
-        open_xiaohongshu, rename_profile, update_profile_base_url,
+        add_profile, clear_codex_cli_path, clear_profile_account, delete_profile,
+        get_codex_cli_status, login_current_profile, login_profile, open_codex_app, open_contact,
+        open_profile_folder, open_releases, open_url, open_xiaohongshu, rename_profile,
+        set_codex_cli_path, update_profile_base_url,
     };
     pub use super::refresh_runtime::refresh_profile;
 }