feat(workspace): name tonight's first tuning plan on the map

[seonghobae]

Buyer next action

The mounted rehearsal workspace now names tonight's first tuning plan so a part can lock the owned tuning before rehearsal starts.

Demo: Bass Guitar still has Tune the E string down to D so the verse riff sits on the open fifth. Open is the next action: it moves to the matching rendered song-structure section.

Protected base: develop@acdbea6344fe1231c39535b575f4de35e4c607c9.
Exact current head: 8c4f173230bc0323ed63afa72f761494f983a267 on feat/workspace-first-tuning-plan.

What the player sees

• The callout names the owning part when an active graph node corroborates it, the owned tuningPlan copy, the labeled section, and the time.
• Open scrolls the renderer-owned song-structure section and arms the next action: lock that tuning before the room starts.
• If no part owns rehearsal-facing tuning copy, the card stays guidance-only. Stay on tonight's map.

Authority boundary

• Do not invent that copy from groove, cue, simplification, overlap, range, chord labels, function labels, setup notes, transposition plans, confirmed overrides, harmonicExplanation, or confidence notes.
• Owned optional RehearsalRole.tuningPlan is distinct from setupNote and transpositionPlan.
• Inherited or accessor-backed runtime metadata remains guidance-only instead of becoming navigation authority.
• Analysis section.id is never DOM-ID authority. Open uses renderer-owned data-section-index.
• Distinct from first-entrance Tempo/Key/Transpose cockpit metrics (feat(workspace): name tonight's tempo, starting chord, and transpose setup #987), first-setup-note (feat(workspace): name tonight's first setup note on the map #1004), first-transposition-plan (feat(workspace): name tonight's first transposition plan on the map #1006), first-part-handoff (feat(workspace): name tonight's first part handoff on the map #1007), and first-capo-plan (feat(workspace): name tonight's first capo plan on the map #1008).
• Do not mix with 🔒 [보안] CLI 무제한 파일 읽기 취약점 수정 #811, test(analysis): govern real YouTube known-stem benchmark #828, or feat(workspace): Storybook tokens for rehearsal components #897.

Docs

AGENTS.md, CLAUDE.md, ARCHITECTURE.md, CHANGELOG.md, and docs/design-system/component-contract.md name this next action. Reduced-motion Open uses behavior: "auto".

Security Notes

• Attack surface: untrusted rehearsal-song runtime metadata (sections, roles, partGraph, identity accessors) plus DOM navigation against the mounted song-structure renderer.
• Trust boundary: only own data properties on dense collections are read. Inherited/accessor/sparse/hostile getters fail closed to null and keep the callout guidance-only.
• Navigation authority is the renderer-owned section index, not analysis ids.
• Logging/privacy: no path, filename, or rejected-metadata echo.
• Test points: inherited-metadata suite, particle-safe Korean copy, reduced-motion scroll, workspace-scope renderer selection, Workspace navigation. Shared-types 20/20 at 100%. Desktop 241/241 at 100% gated coverage. Typecheck clean.

Dependency / merge gate

• fix(security): establish canonical npm, PDF.js, Nanoid, and Undici baseline #783 remains the canonical protected JavaScript dependency-security owner. Inherited pdfjs-dist / nanoid / undici HIGH findings are not copied or suppressed here. No lockfile change.
• Keep unmerged until the unchanged then-current head has every applicable repository/central CI, cross-platform build, exact owned statement+branch coverage, docstring, SAST/security/SBOM/supply-chain/package/release gate terminal-success; zero valid unresolved findings; a qualifying independent non-author last-push approval; and ordinary branch-protection acceptance.
• Queued, pending, skipped, cancelled, failed, predecessor-head, protected-base, model-only, self/author, or administrative-bypass evidence is not success.
• Never bypass protection or transfer predecessor evidence.
• Do not self-approve.

---

[coderabbitai]

Warning

Review limit reached

Next included review available in 20 minutes.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 66a7a1d7-fcea-412b-986d-3f8339dfc616

📥 Commits

Reviewing files that changed from the base of the PR and between 749511c and 36b1f0a.

📒 Files selected for processing (28)

• .Jules/palette.md
• .jules/palette.md
• AGENTS.md
• ARCHITECTURE.md
• CHANGELOG.md
• CLAUDE.md
• apps/desktop/src/features/workspace/FirstTuningPlanCallout.memoization.test.tsx
• apps/desktop/src/features/workspace/FirstTuningPlanCallout.particle.test.tsx
• apps/desktop/src/features/workspace/FirstTuningPlanCallout.reduced-motion.test.tsx
• apps/desktop/src/features/workspace/FirstTuningPlanCallout.test.tsx
• apps/desktop/src/features/workspace/FirstTuningPlanCallout.tsx
• apps/desktop/src/features/workspace/FirstTuningPlanCallout.workspace-scope.test.tsx
• apps/desktop/src/features/workspace/Workspace.test.tsx
• apps/desktop/src/features/workspace/Workspace.tsx
• apps/desktop/src/features/workspace/firstTuningPlan.inherited-metadata.test.ts
• apps/desktop/src/features/workspace/firstTuningPlan.proxy-authority.test.ts
• apps/desktop/src/features/workspace/firstTuningPlan.test.ts
• apps/desktop/src/features/workspace/firstTuningPlan.ts
• apps/desktop/src/features/workspace/tuningCoverageContract.test.ts
• apps/desktop/src/i18n/index.test.ts
• apps/desktop/src/i18n/index.ts
• apps/desktop/src/locales/en/common.json
• apps/desktop/src/locales/ko/common.json
• apps/desktop/vite.config.ts
• docs/design-system/component-contract.md
• docs/doctoring/reduced-motion-first-tuning-plan-navigation.md
• packages/shared-types/src/index.ts
• packages/shared-types/test/index.test.ts

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feat/workspace-first-tuning-plan

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[seonghobae]

Resolved merge conflicts against origin/develop (749511c): union-merged AGENTS.md/CHANGELOG.md bullets, sentence-merged CLAUDE.md, kept both import sets in Workspace.tsx (FirstTuningPlanCallout + firstRangeSqueeze), unioned en/ko locale tails (JSON valid, en/ko symmetric). Merged legacy .Jules/palette.md into canonical .jules/palette.md, dropped alias. No conflict markers remain. Merge head: 36b1f0a.