feat(workspace): name tonight's first capo plan on the map

[seonghobae]

Buyer next action

The mounted rehearsal workspace now names tonight's first capo plan so a guitar part can lock the owned capo and tuning before rehearsal starts.

Demo: Acoustic Guitar still has Capo 2 in standard tuning so the verse fingers G shapes while the room still sounds in A. Open is the next action: it moves to the matching rendered song-structure section.

Protected base: develop@acdbea6344fe1231c39535b575f4de35e4c607c9.
Exact current head: 55646c2453cb559ce5a0ef3cee77c2e6746f9df1 on feat/workspace-first-capo-plan.

What the player sees

• The callout names the owning guitar part when an active graph node corroborates it, the owned capoPlan copy, the labeled section, and the time.
• Open scrolls the renderer-owned song-structure section and arms the next action: lock that capo before the room starts.
• If no part owns rehearsal-facing capo copy, the card stays guidance-only. Stay on tonight's map.

Authority boundary

• Do not invent that copy from groove, cue, simplification, overlap, range, chord labels, function labels, setup notes, transposition plans, confirmed overrides, harmonicExplanation, or confidence notes.
• Owned optional RehearsalRole.capoPlan is distinct from setupNote and transpositionPlan. The engine still may dump capo into setupNote; this workspace next action never parses that field.
• Inherited or accessor-backed runtime metadata remains guidance-only instead of becoming navigation authority.
• Analysis section.id is never DOM-ID authority. Open uses renderer-owned data-section-index.
• Distinct from first-entrance Tempo/Key/Transpose cockpit metrics (feat(workspace): name tonight's tempo, starting chord, and transpose setup #987), first-setup-note (feat(workspace): name tonight's first setup note on the map #1004), first-transposition-plan (feat(workspace): name tonight's first transposition plan on the map #1006), and first-part-handoff (feat(workspace): name tonight's first part handoff on the map #1007).
• Do not mix with 🔒 [보안] CLI 무제한 파일 읽기 취약점 수정 #811, test(analysis): govern real YouTube known-stem benchmark #828, or feat(workspace): Storybook tokens for rehearsal components #897.

Docs

AGENTS.md, CLAUDE.md, ARCHITECTURE.md, CHANGELOG.md, and docs/design-system/component-contract.md name this next action. Reduced-motion Open uses behavior: "auto".

Security Notes

• Attack surface: untrusted rehearsal-song runtime metadata (sections, roles, partGraph, identity accessors) plus DOM navigation against the mounted song-structure renderer.
• Trust boundary: only own data properties on dense collections are read. Inherited/accessor/sparse/hostile getters fail closed to null and keep the callout guidance-only.
• Navigation authority is the renderer-owned section index, not analysis ids.
• Logging/privacy: no path, filename, or rejected-metadata echo.
• Test points: inherited-metadata suite, particle-safe Korean copy, reduced-motion scroll, workspace-scope renderer selection, Workspace navigation. Shared-types 20/20 at 100%. Desktop 241/241 at 100% gated coverage. Typecheck clean.

Dependency / merge gate

• fix(security): establish canonical npm, PDF.js, Nanoid, and Undici baseline #783 remains the canonical protected JavaScript dependency-security owner. Inherited pdfjs-dist / nanoid / undici HIGH findings are not copied or suppressed here. No lockfile change.
• Keep unmerged until the unchanged then-current head has every applicable repository/central CI, cross-platform build, exact owned statement+branch coverage, docstring, SAST/security/SBOM/supply-chain/package/release gate terminal-success; zero valid unresolved findings; a qualifying independent non-author last-push approval; and ordinary branch-protection acceptance.
• Queued, pending, skipped, cancelled, failed, predecessor-head, protected-base, model-only, self/author, or administrative-bypass evidence is not success.
• Never bypass protection or transfer predecessor evidence.
• Do not self-approve.

---

[coderabbitai]

Warning

Review limit reached

Next included review available in 24 minutes.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 07a997c4-c7b0-4724-9e58-1cc978d8a0b9

📥 Commits

Reviewing files that changed from the base of the PR and between 749511c and 5cd43ff.

📒 Files selected for processing (25)

• .Jules/palette.md
• .jules/palette.md
• AGENTS.md
• ARCHITECTURE.md
• CHANGELOG.md
• CLAUDE.md
• apps/desktop/src/features/workspace/FirstCapoPlanCallout.particle.test.tsx
• apps/desktop/src/features/workspace/FirstCapoPlanCallout.reduced-motion.test.tsx
• apps/desktop/src/features/workspace/FirstCapoPlanCallout.test.tsx
• apps/desktop/src/features/workspace/FirstCapoPlanCallout.tsx
• apps/desktop/src/features/workspace/FirstCapoPlanCallout.unique-id.test.tsx
• apps/desktop/src/features/workspace/FirstCapoPlanCallout.workspace-scope.test.tsx
• apps/desktop/src/features/workspace/Workspace.test.tsx
• apps/desktop/src/features/workspace/Workspace.tsx
• apps/desktop/src/features/workspace/firstCapoPlan.inherited-metadata.test.ts
• apps/desktop/src/features/workspace/firstCapoPlan.test.ts
• apps/desktop/src/features/workspace/firstCapoPlan.ts
• apps/desktop/src/i18n/index.test.ts
• apps/desktop/src/i18n/index.ts
• apps/desktop/src/locales/en/common.json
• apps/desktop/src/locales/ko/common.json
• docs/design-system/component-contract.md
• docs/doctoring/reduced-motion-first-capo-plan-navigation.md
• packages/shared-types/src/index.ts
• packages/shared-types/test/index.test.ts

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feat/workspace-first-capo-plan

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[seonghobae]

Re-review request for exact head aee207cd7d774e77a1580c57ff1355f0d2bf0f60: all required status contexts are green on this head (including coverage-evidence and security scans) and all review threads are resolved. @opencode-agent please review current head aee207cd7d774e77a1580c57ff1355f0d2bf0f60 and update the review decision.

[seonghobae]

Resolved merge conflicts against origin/develop (749511c): union-merged AGENTS.md/CHANGELOG.md bullets, sentence-merged CLAUDE.md, kept both import sets in Workspace.tsx (FirstCapoPlanCallout + firstRangeSqueeze), unioned en/ko locale tails (JSON valid, en/ko symmetric). Merged legacy .Jules/palette.md into canonical .jules/palette.md, dropped alias. No conflict markers remain. Merge head: 5cd43ff.