feat(project): add versioned project file envelope

[seonghobae]

Summary

• write new .bscope files through an independent projectFormatVersion=1 JSON envelope
• preserve legacy raw RehearsalSong loading while rejecting unknown envelope fields and unsupported versions
• persist the validated song tempo and add a checked-in v1 fixture
• document the current boundary and the remaining typed autosave/recovery slices for [Reliability] Add a versioned crash-safe project format, autosave, migration and recovery #962

Security Notes

• Imported project bytes remain untrusted and are parsed through deny_unknown_fields payloads.
• The versioned reader fails closed for unknown fields and unsupported versions; file publication continues through the existing fix(project): stage saves before atomic publication #970 bounded atomic publisher.
• No paths, URLs, subprocesses, IPC commands, network calls, or raw project payloads are added to logs.

Verification

• cargo fmt --all -- --check
• cargo test --manifest-path apps/desktop/core/Cargo.toml (22 passed)
• cargo test --manifest-path apps/desktop/src-tauri/Cargo.toml (full persistence suite passed)
• cargo clippy --manifest-path apps/desktop/src-tauri/Cargo.toml --all-targets --no-default-features -- -D warnings
• desktop Vite build with npm 10.9.9
• verify_docs.py, verify_security_notes.py, verify_supply_chain.py, git diff --check

Deliberate boundary

This slice does not fabricate source/derived/decision/handoff/preferences/runtime fields or create a competing player store. Those typed sections, autosave, backup, migration receipts, and accessible recovery choices remain follow-up work under #962.

---

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 7ba4ad29-1683-4497-93a4-a8e1f16c563b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[devin-ai-integration]

Devin Review found 3 potential issues.