diff --git a/package.json b/package.json
index 93430c55..0162a1d4 100644
--- a/package.json
+++ b/package.json
@@ -13,12 +13,12 @@
"coverage": "npm run test:coverage",
"server": "node server/server.mjs",
"test:api": "node tests/api/auth-secret.test.mjs && node tests/api/smoke.mjs && node tests/api/ratelimit.test.mjs && node tests/api/attachment-status.test.mjs && node tests/api/session-revocation.test.mjs",
- "test:unit": "node tests/unit/analytics.test.mjs && node tests/unit/cpm.test.mjs && node tests/unit/baseline-compare.test.mjs && node tests/unit/workload.test.mjs && node tests/unit/cost-evm.test.mjs && node tests/unit/msproject.test.mjs && node tests/unit/auth-password.test.mjs && node tests/unit/editor-unsaved.test.mjs && node tests/unit/static-coverage-evidence.test.mjs && node tests/unit/dep-types.test.mjs && node tests/unit/weekly-report.test.mjs && node tests/unit/clearfolio.test.mjs && node tests/unit/clearfolio-adapter-mock-hmac.test.mjs && node tests/unit/orchestrator.test.mjs && node tests/unit/orchestrator-coverage.test.mjs && node tests/unit/sprint-stats.test.mjs && node tests/unit/burndown.test.mjs && node tests/unit/pm-analysis.test.mjs && node tests/unit/cloud-sync-security.test.mjs && node tests/unit/attachment-status.test.mjs && node tests/unit/clearfolio-status-signal.test.mjs && node tests/unit/coverage-script-contract.test.mjs",
+ "test:unit": "node tests/unit/analytics.test.mjs && node tests/unit/cpm.test.mjs && node tests/unit/baseline-compare.test.mjs && node tests/unit/workload.test.mjs && node tests/unit/cost-evm.test.mjs && node tests/unit/msproject.test.mjs && node tests/unit/auth-password.test.mjs && node tests/unit/editor-unsaved.test.mjs && node tests/unit/static-coverage-evidence.test.mjs && node tests/unit/dep-types.test.mjs && node tests/unit/weekly-report.test.mjs && node tests/unit/clearfolio.test.mjs && node tests/unit/clearfolio-adapter-mock-hmac.test.mjs && node tests/unit/orchestrator.test.mjs && node tests/unit/orchestrator-coverage.test.mjs && node tests/unit/sprint-stats.test.mjs && node tests/unit/burndown.test.mjs && node tests/unit/pm-analysis.test.mjs && node tests/unit/cloud-sync-security.test.mjs && node tests/unit/attachment-status.test.mjs && node tests/unit/clearfolio-status-signal.test.mjs && node tests/unit/coverage-script-contract.test.mjs && node tests/unit/toast-accessibility.test.mjs",
"test:coverage": "c8 --all --include=app.js --include=cloud-sync.js --include=scripts/ci/static_coverage_evidence.mjs --include=server/attachment_status.mjs --include=server/app.mjs --include=server/auth.mjs --include=server/clearfolio.mjs --include=server/orchestrator.mjs --reporter=json --reporter=json-summary npm run test:coverage:cases",
"test:coverage:cases": "node tests/unit/coverage-script-contract.test.mjs && node tests/unit/attachment-status.test.mjs && node tests/unit/clearfolio-status-signal.test.mjs && node tests/unit/clearfolio-adapter-mock-hmac.test.mjs && node tests/unit/orchestrator.test.mjs && node tests/unit/orchestrator-coverage.test.mjs && node tests/unit/msproject.test.mjs && node tests/unit/auth-password.test.mjs && node tests/unit/editor-unsaved.test.mjs && node tests/unit/static-coverage-evidence.test.mjs && npm run test:api",
"test:e2e": "playwright test",
"test:e2e:headed": "playwright test --headed",
- "test:e2e:cloud": "playwright install chromium && playwright test tests/e2e/cloud.spec.js",
+ "test:e2e:cloud": "playwright install chromium && playwright test tests/e2e/cloud.spec.js tests/e2e/toast-accessibility.spec.js",
"test:fuzz": "playwright install chromium && playwright test tests/e2e/csv_formula_fuzz.spec.js",
"fuzz": "node --test tests/fuzz/*.mjs"
},
diff --git a/server/app.mjs b/server/app.mjs
index 450be878..03908830 100644
--- a/server/app.mjs
+++ b/server/app.mjs
@@ -1392,6 +1392,7 @@ const STATIC = {
'/cloud-sync.js': ['cloud-sync.js', 'text/javascript; charset=utf-8'],
'/analytics.js': ['analytics.js', 'text/javascript; charset=utf-8'],
'/styles.css': ['styles.css', 'text/css; charset=utf-8'],
+ '/toast-state.css': ['toast-state.css', 'text/css; charset=utf-8'],
'/wbs.json': ['wbs.json', 'application/json; charset=utf-8'],
};
app.get('*', async (c) => {
diff --git a/tests/api/smoke.mjs b/tests/api/smoke.mjs
index 5ecf351a..e536b908 100644
--- a/tests/api/smoke.mjs
+++ b/tests/api/smoke.mjs
@@ -167,7 +167,7 @@ assert.equal(r.status, 401, 'SSE without token → 401');
await r.body?.cancel?.();
// Static allowlist — client files served, source/db never exposed
-for (const [path, code] of [['/', 200], ['/index.html', 200], ['/app.js', 200], ['/cloud-sync.js', 200], ['/analytics.js', 200], ['/styles.css', 200], ['/wbs.json', 200], ['/landing.html', 200], ['/landing.en.html', 200], ['/pricing', 200], ['/docs/api.md', 200], ['/robots.txt', 200], ['/sitemap.xml', 200]]) {
+for (const [path, code] of [['/', 200], ['/index.html', 200], ['/app.js', 200], ['/cloud-sync.js', 200], ['/analytics.js', 200], ['/styles.css', 200], ['/toast-state.css', 200], ['/wbs.json', 200], ['/landing.html', 200], ['/landing.en.html', 200], ['/pricing', 200], ['/docs/api.md', 200], ['/robots.txt', 200], ['/sitemap.xml', 200]]) {
const res = await req(path);
assert.equal(res.status, code, `static ${path} → ${code}`);
}
diff --git a/tests/e2e/scopeweave.spec.js b/tests/e2e/scopeweave.spec.js
index 96c69057..dc0cda8d 100644
--- a/tests/e2e/scopeweave.spec.js
+++ b/tests/e2e/scopeweave.spec.js
@@ -1300,6 +1300,7 @@ test.describe('ScopeWeave Planner - Palette UX Enhancements', () => {
// Verify sync status ARIA attributes
const syncStatus = page.locator('#sync-status');
+ await expect(syncStatus).toHaveAttribute('role', 'status');
await expect(syncStatus).toHaveAttribute('aria-live', 'polite');
await expect(syncStatus).toHaveAttribute('aria-atomic', 'true');
diff --git a/tests/e2e/toast-accessibility.spec.js b/tests/e2e/toast-accessibility.spec.js
new file mode 100644
index 00000000..5e45cb79
--- /dev/null
+++ b/tests/e2e/toast-accessibility.spec.js
@@ -0,0 +1,24 @@
+import { test, expect } from '@playwright/test';
+
+test('cloud status feedback is visibly rendered as a non-focus-taking live status', async ({ page }) => {
+ await page.goto('/?share=ABCDEFGHIJKLMNOP');
+
+ const toast = page.locator('#toast');
+ await expect(toast).toHaveText('공유 링크가 만료되었거나 철회되었습니다.');
+ await expect(toast).toHaveAttribute('role', 'status');
+ await expect(toast).toHaveAttribute('aria-live', 'polite');
+ await expect(toast).toHaveAttribute('aria-atomic', 'true');
+ await expect(toast).not.toHaveAttribute('tabindex', /.+/);
+ await expect(toast).toHaveClass(/\bvisible\b/);
+ await expect(toast).toBeVisible();
+
+ await expect.poll(
+ () => toast.evaluate((element) => Number.parseFloat(getComputedStyle(element).opacity)),
+ { message: 'toast opacity should reach its fully visible transition state' },
+ ).toBeGreaterThanOrEqual(0.99);
+
+ await expect.poll(
+ () => toast.evaluate((element) => document.activeElement === element),
+ { message: 'advisory status must not capture keyboard focus' },
+ ).toBe(false);
+});
diff --git a/tests/unit/toast-accessibility.test.mjs b/tests/unit/toast-accessibility.test.mjs
new file mode 100644
index 00000000..c0aa79a0
--- /dev/null
+++ b/tests/unit/toast-accessibility.test.mjs
@@ -0,0 +1,64 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+
+const indexHtml = readFileSync(new URL('../../index.html', import.meta.url), 'utf8');
+const toastStateCss = readFileSync(new URL('../../toast-state.css', import.meta.url), 'utf8');
+const cloudSyncJs = readFileSync(new URL('../../cloud-sync.js', import.meta.url), 'utf8');
+
+function toastElementMarkup(html) {
+ const match = html.match(/
]*\bid=["']toast["'][^>]*>/i);
+ assert.ok(match, 'production index.html contains the toast container');
+ return match[0];
+}
+
+function syncStatusElementMarkup(html) {
+ const match = html.match(/]*\bid=["']sync-status["'][^>]*>/i);
+ assert.ok(match, 'production index.html contains the sync status container');
+ return match[0];
+}
+
+test('toast container exposes advisory status updates without taking focus', () => {
+ const toast = toastElementMarkup(indexHtml);
+ assert.match(toast, /\brole=["']status["']/i, 'toast uses the WAI-ARIA status role');
+ assert.match(toast, /\baria-live=["']polite["']/i, 'toast explicitly uses polite announcements');
+ assert.match(toast, /\baria-atomic=["']true["']/i, 'toast announces its complete updated content');
+ assert.doesNotMatch(toast, /\btabindex\s*=/i, 'status updates do not move keyboard focus');
+});
+
+test('sync status uses the same explicit advisory status semantics', () => {
+ const syncStatus = syncStatusElementMarkup(indexHtml);
+ assert.match(syncStatus, /\brole=["']status["']/i, 'sync feedback uses the WAI-ARIA status role');
+ assert.match(syncStatus, /\baria-live=["']polite["']/i, 'sync feedback explicitly uses polite announcements');
+ assert.match(syncStatus, /\baria-atomic=["']true["']/i, 'sync feedback announces its complete updated content');
+ assert.doesNotMatch(syncStatus, /\btabindex\s*=/i, 'sync feedback does not become a synthetic keyboard stop');
+});
+
+test('cloud toast stylesheet is on every production serve path', () => {
+ const serverApp = readFileSync(new URL('../../server/app.mjs', import.meta.url), 'utf8');
+ const pagesWorkflow = readFileSync(new URL('../../.github/workflows/pages.yml', import.meta.url), 'utf8');
+ const staticDockerfile = readFileSync(new URL('../../Dockerfile', import.meta.url), 'utf8');
+ const serverDockerfile = readFileSync(new URL('../../Dockerfile.server', import.meta.url), 'utf8');
+ assert.match(serverApp, /['"]\/toast-state\.css['"]/, 'SaaS allowlist serves the cloud toast stylesheet');
+ assert.match(pagesWorkflow, /\btoast-state\.css\b/, 'GitHub Pages stages the cloud toast stylesheet');
+ assert.match(staticDockerfile, /\btoast-state\.css\b/, 'static image copies the cloud toast stylesheet');
+ assert.match(serverDockerfile, /\btoast-state\.css\b/, 'SaaS image copies the cloud toast stylesheet');
+});
+
+test('cloud toast state is visibly rendered by a shipped stylesheet', () => {
+ assert.match(
+ cloudSyncJs,
+ /classList\.add\(["']visible["']\)/,
+ 'cloud status messages activate the visible toast state',
+ );
+ assert.match(
+ indexHtml,
+ /]*\brel=["']stylesheet["'][^>]*\bhref=["']toast-state\.css["'][^>]*>/i,
+ 'the production document loads the cloud toast state stylesheet',
+ );
+ assert.match(
+ toastStateCss,
+ /\.toast\.visible\s*\{[^}]*\bopacity\s*:\s*1\s*;[^}]*\btransform\s*:\s*translateY\(0\)\s*;/s,
+ 'the shipped cloud toast state becomes visually observable',
+ );
+});
diff --git a/toast-state.css b/toast-state.css
new file mode 100644
index 00000000..3cef049f
--- /dev/null
+++ b/toast-state.css
@@ -0,0 +1,8 @@
+/* ScopeWeave has two toast producers: app.js uses `.show`, while the cloud
+ * overlay uses `.visible`. The base stylesheet owns `.show`; this component
+ * rule keeps the cloud producer visually observable without changing either
+ * producer's timing or accessibility semantics. */
+.toast.visible {
+ opacity: 1;
+ transform: translateY(0);
+}