agent: lumotia — v0.1 release-completion run

Closes the code-side v0.1 ship gate. All quality gates green:
cargo fmt/clippy/test (~327 tests), npm check (0/0), vitest 13/13,
scripts/dogfood-rebrand-drill.sh 8/8.

Phase F — first-run onboarding promoted to v0.1
- FirstRunPage with skip-to-main + failure recovery + event recording
- Six onboarding commands (record/list/has-completed + lumotia_events)
- Storage migration v17 (onboarding_events + lumotia_events tables)

UI hardening (in-scope items from v0.1-ui-hardening.md)
- StatusPill + PostCaptureCard components, 21st preview entry
- Sidebar recording-as-sacred-state (opacity + aria-disabled, reduced-motion)
- Settings 6-section regroup + Help section + Activation log + Privacy toggle
- Error-state copy sweep (DictationPage + SettingsPage, plain-language)
- Global :focus-visible rule, textarea outlines restored
- Ctrl+K / Ctrl+, / Escape bindings in +layout

LLM resilience
- rule_based_extract_tasks (regex-free imperative-verb extractor) +
  extract_tasks_with_fallback wrapper — task extraction never returns zero
- tokio::time::timeout(120s) wraps cleanup/tags/tasks commands

Release artefacts
- LICENSE (canonical AGPL-3.0), CHANGELOG (Keep-a-Changelog format)
- v0.1-release-notes, privacy-and-ai-use, install-warnings,
  tester-onboarding-kit, tester-acceptance-runbook, code-signing-setup,
  apple-silicon-rb08-runbook, virtual-audio-setup, v0.1-contrast-audit
- Workspace versioning + AGPL spdx; npm exact-pin (10 ranges removed)
- AppImage SHA-256 sidecar in build.yml
- README v0.1 section + Reporting-issues; canonical repo slug

Closure pass — items moved from human-required to code-complete
- KI-02 Linux idle inhibit: zbus 5 → org.freedesktop.login1.Manager.Inhibit
- KI-03 Windows sleep prevention: SetThreadExecutionState(ES_CONTINUOUS|...)
- acquire/release_idle_inhibit Tauri commands, wired in DictationPage
- Diagnostic-bundle frontend wire-up (Settings → Help button)
- WCAG-AA contrast fix via .btn-filled-text utility (no token changes)
- 8 destructive-action sites wrapped in plain-language confirm() guards
- KNOWN-ISSUES.md + v0.1-known-limitations.md updated (KI-02/03 fixed)

Scripts
- pre-tag-verify.sh, tag-day.sh, smoke-linux + driver
- parse-diagnostic-bundle.sh, parse-activation-log.py

Per-item audit trail: docs/release/v0.1-completion-status.md
Remaining: W-01…W-08 (signing certs, hardware probes, smoke matrix,
tester recruitment) — see docs/release/v0.1-known-limitations.md.

src-tauri/src/commands/llm.rs

@@ -1,4 +1,5 @@
 use tauri::{Emitter, State};
+use tokio::time::{timeout, Duration};
 
 use crate::commands::power::PowerAssertion;
 use crate::commands::security::ensure_main_window;
@@ -8,6 +9,8 @@ use lumotia_core::hardware;
 use lumotia_llm::model_manager::{self, model_info};
 use lumotia_llm::{ContentTags, LlmModelId};
 
+const LLM_TIMEOUT: Duration = Duration::from_secs(120);
+
 #[derive(Debug, serde::Serialize)]
 #[serde(rename_all = "camelCase")]
 pub struct LlmModelStatusDto {
@@ -395,16 +398,24 @@ pub async fn cleanup_transcript_text_cmd(
         .unwrap_or(LlmPromptPreset::Default);
 
     let engine = state.llm_engine.clone();
-    tokio::task::spawn_blocking(move || {
+    let cleanup_future = tokio::task::spawn_blocking(move || {
         // macOS: pin a power assertion for the duration of the LLM
         // generation so App Nap can't decide to throttle us mid-token.
         // No-op on every other OS. Item #9.
         let _power_guard = PowerAssertion::begin("lumotia LLM cleanup");
         llm_cleanup_text(&engine, &transcript, &profile_terms, resolved_preset)
-    })
-    .await
-    .map_err(|e| e.to_string())?
-    .map_err(|e| e.to_string())
+    });
+    match timeout(LLM_TIMEOUT, cleanup_future).await {
+        Ok(Ok(value)) => value.map_err(|e| e.to_string()),
+        Ok(Err(e)) => Err(e.to_string()),
+        Err(_elapsed) => {
+            tracing::warn!(
+                "LLM cleanup_transcript_text_cmd timed out after {:?}",
+                LLM_TIMEOUT
+            );
+            Err("Cleanup took too long. The raw transcript is preserved — try again, or continue without cleanup.".to_string())
+        }
+    }
 }
 
 /// Phase 9 LLM-powered content tags. On-demand from the History page;
@@ -429,11 +440,19 @@ pub async fn extract_content_tags_cmd(
         return Err("LLM not loaded. Download an AI model in Settings.".to_string());
     }
     let engine = state.llm_engine.clone();
-    tokio::task::spawn_blocking(move || {
+    let tag_future = tokio::task::spawn_blocking(move || {
         let _power_guard = PowerAssertion::begin("lumotia LLM content-tag extraction");
         engine.extract_content_tags(&transcript)
-    })
-    .await
-    .map_err(|e| e.to_string())?
-    .map_err(|e| e.to_string())
+    });
+    match timeout(LLM_TIMEOUT, tag_future).await {
+        Ok(Ok(value)) => value.map_err(|e| e.to_string()),
+        Ok(Err(e)) => Err(e.to_string()),
+        Err(_elapsed) => {
+            tracing::warn!(
+                "LLM extract_content_tags_cmd timed out after {:?}",
+                LLM_TIMEOUT
+            );
+            Err("Tagging took too long. Your transcript is unchanged — you can retry from the post-capture card.".to_string())
+        }
+    }
 }