chore(hardening): tighten security and footprint defaults

src-tauri/src/commands/llm.rs

@@ -1,6 +1,7 @@
 use tauri::{Emitter, State};
 
 use crate::commands::power::PowerAssertion;
+use crate::commands::security::ensure_main_window;
 use crate::AppState;
 use kon_ai_formatting::{llm_cleanup_text, LlmPromptPreset};
 use kon_core::hardware;
@@ -58,7 +59,12 @@ pub fn check_llm_model(
 }
 
 #[tauri::command]
-pub async fn download_llm_model(app: tauri::AppHandle, model_id: String) -> Result<(), String> {
+pub async fn download_llm_model(
+    window: tauri::WebviewWindow,
+    app: tauri::AppHandle,
+    model_id: String,
+) -> Result<(), String> {
+    ensure_main_window(&window)?;
     let id = parse_model_id(model_id)?;
     let app_clone = app.clone();
     model_manager::download_model(id, move |done, total| {
@@ -83,11 +89,13 @@ pub async fn download_llm_model(app: tauri::AppHandle, model_id: String) -> Resu
 
 #[tauri::command]
 pub async fn load_llm_model(
+    window: tauri::WebviewWindow,
     state: State<'_, AppState>,
     model_id: String,
     use_gpu: Option<bool>,
     concurrent: Option<bool>,
 ) -> Result<(), String> {
+    ensure_main_window(&window)?;
     let id = parse_model_id(model_id)?;
     let path = model_manager::model_path(id);
     if !path.exists() {
@@ -112,12 +120,21 @@ pub async fn load_llm_model(
 }
 
 #[tauri::command]
-pub fn unload_llm_model(state: State<'_, AppState>) -> Result<(), String> {
+pub fn unload_llm_model(
+    window: tauri::WebviewWindow,
+    state: State<'_, AppState>,
+) -> Result<(), String> {
+    ensure_main_window(&window)?;
     state.llm_engine.unload().map_err(|e| e.to_string())
 }
 
 #[tauri::command]
-pub fn delete_llm_model(state: State<'_, AppState>, model_id: String) -> Result<(), String> {
+pub fn delete_llm_model(
+    window: tauri::WebviewWindow,
+    state: State<'_, AppState>,
+    model_id: String,
+) -> Result<(), String> {
+    ensure_main_window(&window)?;
     let id = parse_model_id(model_id)?;
     if state.llm_engine.loaded_model_id().as_deref() == Some(id.as_str()) {
         state.llm_engine.unload().map_err(|e| e.to_string())?;
@@ -168,9 +185,11 @@ pub struct LlmTestResult {
 /// LLMs, adapted to Kon's local stack.
 #[tauri::command]
 pub async fn test_llm_model(
+    window: tauri::WebviewWindow,
     state: State<'_, AppState>,
     model_id: String,
 ) -> Result<LlmTestResult, String> {
+    ensure_main_window(&window)?;
     let id = parse_model_id(model_id)?;
     let info = model_info(id);
     let path = model_manager::model_path(id);
@@ -342,11 +361,13 @@ mod tests {
 
 #[tauri::command]
 pub async fn cleanup_transcript_text_cmd(
+    window: tauri::WebviewWindow,
     state: State<'_, AppState>,
     transcript: String,
     profile_id: Option<String>,
     preset: Option<String>,
 ) -> Result<String, String> {
+    ensure_main_window(&window)?;
     let resolved_profile_id =
         profile_id.unwrap_or_else(|| kon_storage::DEFAULT_PROFILE_ID.to_string());
     let profile_terms: Vec<String> =