feat(recording): register waaudio:// protocol + sweep plaintext temp files

src-tauri/src/lib.rs

@@ -88,6 +88,11 @@ pub fn run() {
 
     tauri::Builder::default()
         .plugin(tauri_plugin_dialog::init())
+        // In-memory streaming of recordings for the player (FR-REC-5): decrypts
+        // on the fly so no plaintext audio is ever written to disk.
+        .register_uri_scheme_protocol("waaudio", |_ctx, request| {
+            commands::serve_recording(&request)
+        })
         .manage(AppState {
             store,
             session: Mutex::new(None),
@@ -127,6 +132,10 @@ pub fn run() {
             // Startup recovery + retention + reminder-reconcile pass (FR-REL-1,
             // FR-STORE-2, FR-CAL-5). Spawned so it never blocks the window from
             // showing (NFR-PERF-4); nothing here repeats on a timer (NFR-RES-1).
+            // Sweep away any plaintext playback temp files left by the previous
+            // file-based player (T8.8) — playback is now in-memory only.
+            commands::cleanup_playback_temp();
+
             let store = store_for_setup;
             let startup_app = app.handle().clone();
             tauri::async_runtime::spawn(async move {