feat(workspace): name using your own song as the first next action

[seonghobae]

Product outcome

A musician who opens BandScope with no song loaded can start tonight's rehearsal from the empty workspace. The card names Use my own song as the next action instead of a text-only prompt.

This is a first-run slice of #964. It does not bundle a licensed demo song, invent analysis success, or compete with #974 (analyze after a song is already selected).

Exact identity

• Protected target: develop@acdbea6344fe1231c39535b575f4de35e4c607c9.
• Branch: feat/first-run-use-own-song.
• Exact head: a6d5b6f5d2191245c5a52c4af0a7cd4e67c2200a.

What the buyer sees

• Title: Start tonight's rehearsal.
• Primary action: Use my own song — same production local-file intake as the header control.
• Privacy: Your song stays on this device.
• Honest later slice: a licensed demo is not bundled yet; use your own song to start tonight.
• Korean and English keep the same choices and limitation.

Out of scope

• No copyrighted or unlicensed demo audio.
• No parallel MIR product (test(analysis): govern real YouTube known-stem benchmark #828 still owns [Product Gap] Add real-audio MIR accuracy acceptance benchmarks #770).
• No dependency, lockfile, or vulnerability-suppression delta. Canonical npm HIGH findings remain fix(security): establish canonical npm, PDF.js, Nanoid, and Undici baseline #783-owned.
• Do not mix with 🔒 [보안] CLI 무제한 파일 읽기 취약점 수정 #811, feat(workspace): Storybook tokens for rehearsal components #897, or test(analysis): govern real YouTube known-stem benchmark #828.

Security Notes

• Untrusted input: user-selected local audio through the existing selectLocalAudioSource boundary.
• Trust boundary: empty-card button → existing desktop intake → bootstrap state. No new filesystem, URL, subprocess, or IPC API.
• Safe failure: intake errors keep the existing generic/safe copy; the card does not render local paths.
• Privacy: no telemetry, path leakage, or demo download.

Merge gate

Keep unmerged until this unchanged exact head has repository and central CI/security/SAST/SBOM/coverage/review gates terminal-success, zero valid unresolved findings, a qualifying independent non-author last-push approval, and ordinary branch-protection acceptance. Never self-approve or bypass protection. Queued, pending, skipped, cancelled, predecessor-head, author, or model-only evidence is non-passing. Inherited #783 npm HIGH findings must not be suppressed here.

---

Summary by CodeRabbit

• 새 기능

  • 곡을 선택하지 않은 빈 작업 공간에 “내 곡 사용하기” 안내와 버튼을 제공합니다.
  • 로컬 오디오 파일을 선택하고 선택한 파일명을 확인할 수 있습니다.
  • 파일 선택 중에는 중복 선택과 YouTube 가져오기가 비활성화됩니다.
  • 영어와 한국어 안내 문구를 지원하며, 별도 데모 곡은 제공하지 않습니다.

• 문서

  • 첫 실행 빈 상태의 사용자 안내와 다음 작업 흐름을 문서화했습니다.

• 테스트

  • 로컬 곡 선택, 다국어 문구, 파일명 표시 및 처리 중 비활성화 동작을 검증했습니다.

[coderabbitai]

Warning

Review limit reached

Next included review available in 22 minutes.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 5cff330d-2594-4623-ae3b-9f49d86a23b2

📥 Commits

Reviewing files that changed from the base of the PR and between cda99c2 and 14dfb02.

📒 Files selected for processing (9)

• AGENTS.md
• ARCHITECTURE.md
• CHANGELOG.md
• CLAUDE.md
• apps/desktop/src/App.localSelectionConcurrency.test.tsx
• apps/desktop/src/App.tsx
• apps/desktop/src/features/workspace/Workspace.test.tsx
• apps/desktop/src/locales/en/common.json
• apps/desktop/src/locales/ko/common.json

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: dcb7c0ab-2f23-4b35-a885-5d68688c46c9

📥 Commits

Reviewing files that changed from the base of the PR and between 18caa7a and cda99c2.

📒 Files selected for processing (4)

• apps/desktop/src/App.localSelectionConcurrency.test.tsx
• apps/desktop/src/features/workspace/WorkspaceStates.test.tsx
• apps/desktop/src/locales/en/common.json
• apps/desktop/src/locales/ko/common.json

💤 Files with no reviewable changes (2)

• apps/desktop/src/locales/ko/common.json
• apps/desktop/src/locales/en/common.json

🚧 Files skipped from review as they are similar to previous changes (2)

• apps/desktop/src/features/workspace/WorkspaceStates.test.tsx
• apps/desktop/src/App.localSelectionConcurrency.test.tsx

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

빈 워크스페이스가 첫 실행 안내와 Use my own song 버튼을 표시합니다. App은 로컬 오디오 선택을 연결하고 선택 중 중복 실행과 YouTube 가져오기를 차단합니다. 영어·한국어 번역, 테스트, 관련 문서를 갱신했습니다.

Changes

첫 실행 곡 선택 흐름

Layer / File(s)	Summary
빈 상태 계약과 콘텐츠 apps/desktop/src/features/workspace/WorkspaceStates.tsx, apps/desktop/src/locales/*/common.json	EmptyState가 onUseOwnSong과 chooseDisabled를 받습니다. 로컬 곡 선택 버튼, 업로드 아이콘, 첫 실행 안내, 데모 미번들 문구를 표시합니다.
App 곡 선택 연결과 동시성 제어 apps/desktop/src/App.tsx	App이 로컬 오디오 선택 상태를 관리합니다. 선택 중 재진입과 YouTube 입력·가져오기를 차단하고 관련 버튼을 비활성화합니다.
동작 검증과 실행 안내 apps/desktop/src/App.test.tsx, apps/desktop/src/App.localSelectionConcurrency.test.tsx, apps/desktop/src/features/workspace/*test.tsx, AGENTS.md, ARCHITECTURE.md, CHANGELOG.md, CLAUDE.md	빈 상태 표시, 로컬 파일 선택, WAV 파일명 표시, 동시 선택 방지, 버튼 비활성화, 한국어 번역을 검증합니다. 첫 실행 동작과 카피 지침을 문서에 기록합니다.

Estimated code review effort: 3 (Moderate) | ~25 minutes

Merge Risk: ⚪ Minimal · up to cda99

This localized workspace change adds the existing local-file action to the empty state without introducing an actionable merge-blocking risk; it is merge-ready after normal checks and review.

Sequence Diagram(s)

sequenceDiagram
  actor 사용자
  participant EmptyState
  participant App
  participant LocalAudioIntake
  participant YouTubeImport
  사용자->>EmptyState: "Use my own song" 선택
  EmptyState->>App: onUseOwnSong 호출
  App->>LocalAudioIntake: 로컬 오디오 선택 시작
  App->>YouTubeImport: 입력과 가져오기 차단
  LocalAudioIntake-->>App: 선택한 파일 반환
  App-->>EmptyState: 선택 결과 표시

Loading

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	빈 워크스페이스의 첫 번째 다음 행동을 "Use my own song"으로 지정하는 핵심 변경을 정확하고 간결하게 설명합니다.
Docstring Coverage	✅ Passed	Docstring check was indeterminate for this PR — some files could not be analyzed in time. Not blocking.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feat/first-run-use-own-song

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[seonghobae]

@opencode-agent Repair the exact current-head BandScope-owned concurrency failure on the existing feat/first-run-use-own-song branch only. Current head 9bc2ead0d52f4f3da811305042755512d396a9f3; CI run 32619668053, job 97145786094, actual checkout 315aae52e325bf9c4ae680c0b6ffc97be8e02625 proves exactly one desktop regression fails: App.localSelectionConcurrency.test.tsx requires the Clear YouTube URL control to be unavailable while isChoosingLocalAudio owns source selection, but App.tsx still renders it because its visibility condition omits !isChoosingLocalAudio. Apply the narrow production fix to that visibility condition only; do not change the RED test, picker authority, YouTube import semantics, or dependency/security ownership. Run the focused desktop test, full desktop tests/coverage, typecheck/lint/quickcheck as applicable, commit on this same branch, and report the exact resulting head/evidence.

[seonghobae]

Merged current develop into this branch: resolved shared-file conflicts by including both this feature's first-run use-your-own-song callout and the newly landed #957 playable-range work (AGENTS/CHANGELOG unioned). No behavior dropped.