feat(workspace): name tonight's export and priority actions

[seonghobae]

Buyer-visible gap

After analysis, export buttons said Export Cue Sheet (CSV) and the stems/priority cards stopped at “will appear” / Focus: verse. A bandmate who finished a song still had to invent the next rehearsal step.

Product outcome

• Export group names the next use: Download tonight's cue sheet, Save a compact chart, Share a handoff file.
• Helper copy: print the cue sheet or send the handoff before you leave.
• Priority card: Start with {section} and Open this section (scrolls/focuses the matching roadmap card).
• Stems card does not invent Stem Lab. It offers tonight's cue sheet so rehearsal can start without waiting.
• Copy is bilingual (en/ko).

Cites Figma 19-731 Export Action Group and docs/design-system/component-contract.md.

Security notes

• Untrusted input: existing song/export summary only. No new filesystem, network, generic exec, or IPC path.
• Trust boundary: React state → existing generateCueSheetCsv / chart / handoff download helpers, plus in-page scrollIntoView / focus on allowlisted workspace-section-* ids.
• Export still uses the existing metadata-only handoff path (no local source paths).
• Inherited protected-base npm HIGH findings (nanoid, pdfjs-dist, undici) belong to fix(security): establish canonical npm, PDF.js, Nanoid, and Undici baseline #783 and are not suppressed here.

Merge gate

• Target is protected develop.
• Not a MIR product and not a parallel [Product Gap] Add real-audio MIR accuracy acceptance benchmarks #770 owner (test(analysis): govern real YouTube known-stem benchmark #828 owns that lane).
• Do not mix with 🔒 [보안] CLI 무제한 파일 읽기 취약점 수정 #811, test(analysis): govern real YouTube known-stem benchmark #828, feat(workspace): Storybook tokens for rehearsal components #897, feat(workspace): put the next rehearsal action on empty and error cards #898, or feat(workspace): open existing rehearsal surfaces from the sidebar #899.
• Merge only after independent non-author APPROVE and exact-head required-gate success. Queue/pending/skipped/cancelled is non-passing.

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: cb3ed10a-d1db-4d41-889c-8539c4d71b3a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}