fix: add missing specta annotations, scope tmp cleanup, and secure state file permissions

src-tauri/src/lib.rs

@@ -9,6 +9,7 @@
 pub mod commands;
 pub mod data;
 pub mod error;
+pub mod sync;
 pub mod watcher;
 
 use tauri::menu::{MenuBuilder, MenuItemBuilder};
@@ -109,9 +110,6 @@ pub fn run() {
     tracing::info!("Starting Mission Control");
 
     // Build tauri-specta builder for type-safe IPC
-    // Note: read_state/write_state/clear_state use serde_json::Value which doesn't
-    // implement specta::Type, so they're excluded from the builder but kept in
-    // the invoke_handler via generate_handler!
     let builder = Builder::<tauri::Wry>::new().commands(collect_commands![
         commands::greet,
         commands::get_lore_status,
@@ -119,6 +117,9 @@ pub fn run() {
         commands::sync_now,
         commands::reconcile,
         commands::quick_capture,
+        commands::read_state,
+        commands::write_state,
+        commands::clear_state,
     ]);
 
     // Export TypeScript bindings in debug builds