fix(a11y): restore toast status messages without reverting develop

.github/workflows/pages.yml

@@ -33,7 +33,7 @@ jobs:
       - name: Stage runtime files
         run: |
           mkdir -p _site/docs
-          cp index.html 404.html app.js styles.css wbs.json _site/
+          cp index.html 404.html app.js cloud-sync.js analytics.js styles.css toast-state.css wbs.json _site/
           cp docs/user-guide.md _site/docs/
 
       - name: Upload static artifact

ARCHITECTURE.md

@@ -4,7 +4,9 @@
 
 - `index.html`: app shell and modal structure.
 - `styles.css`: responsive layout, table, badges, gantt, and modal
-  presentation.
+  presentation. `.toast.show` is the standalone producer state.
+- `toast-state.css`: cloud overlay `.toast.visible` rendering so SaaS
+  status messages stay visually observable.
 - `app.js`: state, rendering, editing, validation, persistence,
   import/export, and Gantt logic.
 - `analytics.js`: EVM, S-curve, CPM, workload, cost, and requirements/RFI/RFP

CHANGELOG.md

@@ -64,6 +64,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   conversion identifiers from responses, reports attempted, changed, failed,
   skipped-data, and deferred-budget counters separately, and exposes fixed
   low-cardinality timeout, lookup, validation, and persistence failure counters.
+- Toast notifications and synchronization feedback now expose advisory updates
+  as explicit polite, atomic WAI-ARIA status regions without adding keyboard
+  stops, and cloud toast feedback now has a shipped visual state so the same
+  message remains visible to sighted users.
+- GitHub Pages, both Docker images, and the SaaS static allowlist now ship
+  `cloud-sync.js`, `analytics.js`, and `toast-state.css` with the documents
+  that load them, so share-error and cloud status toasts stay visible after
+  deploy.
 - 프로젝트 이름 입력 필드에 입력 예시(placeholder)를 추가하여 사용자 편의성을 개선했습니다.
 - 데이터 테이블의 반복되는 액션 버튼에 컨텍스트 정보(작업명)를 포함한 명시적인 ARIA 레이블을 추가하고, 유효성 검사 에러를 폼 필드에 연결하여 접근성을 개선했습니다.
 - `createGanttBarElement`, `renderGantt`, `buildWeekdayTimeline`에서 반복적으로 호출되던 `compareDateStrings`를 직접적인 문자열 비교 연산(`>=`, `<=`)으로 교체하여 O(N*D) 복잡도의 캐시 스레싱과 정규식 검사를 방지했습니다.

CLAUDE.md

@@ -56,8 +56,8 @@ deploy guide is `docs/deploy.md`.
 
 ### Client (repo root)
 
-- `index.html` — app shell + modals, strict CSP meta tag; loads `cloud-sync.js`,
-  `analytics.js`, then `app.js`.
+- `index.html` — app shell + modals, strict CSP meta tag; loads `styles.css`,
+ `toast-state.css`, `cloud-sync.js`, `analytics.js`, then `app.js`.
 - `app.js` — all state, rendering, editing, validation, persistence, CSV
   import/export, and Gantt logic. The single global `tasks` array is the source of
   truth and `renderAll()` is the only rerender path (see `AGENTS.md`).

Dockerfile

@@ -1,6 +1,6 @@
 FROM nginx:1.25-alpine@sha256:516475cc129da42866742567714ddc681e5eed7b9ee0b9e9c015e464b4221a00
 COPY infra/nginx/default.conf /etc/nginx/conf.d/default.conf
-COPY index.html 404.html app.js styles.css wbs.json /usr/share/nginx/html/
+COPY index.html 404.html app.js cloud-sync.js analytics.js styles.css toast-state.css wbs.json /usr/share/nginx/html/
 COPY docs/user-guide.md /usr/share/nginx/html/docs/
 
 # Strix security scan recommendation: switch to non-root user

Dockerfile.server

@@ -12,7 +12,7 @@ RUN npm ci --omit=dev && npm cache clean --force
 
 # Server + the static client files the allowlist serves.
 COPY server ./server
-COPY index.html 404.html app.js cloud-sync.js analytics.js styles.css wbs.json ./
+COPY index.html 404.html app.js cloud-sync.js analytics.js styles.css toast-state.css wbs.json ./
 
 ENV PORT=8787
 ENV SCOPEWEAVE_DB=/data/scopeweave.db

README.md

@@ -55,7 +55,7 @@ two modes:
 ## Architecture
 
 ```
-index.html + app.js + styles.css     ← static client (eval-safe; no top-level imports)
+index.html + app.js + styles.css + toast-state.css  ← static client (eval-safe; no top-level imports)
   ├─ analytics.js                    ← EVM/S-curve/CPM (window.ScopeWeaveAnalytics)
   └─ cloud-sync.js                   ← opt-in cloud overlay (window.ScopeWeaveCloud)
 server/

docs/doctoring/toast-status-accessibility.md

@@ -0,0 +1,95 @@
+# Toast and sync status accessibility and visibility evidence
+
+## Status and decision
+
+ScopeWeave treats transient toast text and synchronization feedback as
+advisory status messages. The shipped contract is:
+
+- `#toast` has `role="status"`, `aria-live="polite"`, and
+  `aria-atomic="true"` and does not receive focus when its content
+  changes;
+- `#sync-status` uses the same explicit status/polite/atomic semantics
+  without becoming a synthetic keyboard stop; and
+- the cloud/SaaS toast producer's `.visible` state is backed by shipped
+  CSS that raises opacity to `1` and restores the translated element.
+
+The visual-state control matters because the base application producer
+uses `.show` while `cloud-sync.js` adds and removes `.visible`.
+`styles.css` renders `.toast.show`, so a cloud message can update its
+live-region text while remaining visually transparent unless
+`.toast.visible` is also rendered. After a share link fails, the next
+action is to request a fresh share URL from the project owner.
+
+## Standards boundary
+
+WAI-ARIA 1.2 defines `status` as advisory live-region content and gives
+the role implicit `aria-live="polite"` and `aria-atomic="true"`
+semantics. It also advises authors not to move focus to a status message
+as a result of the update. WCAG 2.2 Success Criterion 4.1.3 requires
+status messages to be programmatically determinable so assistive
+technology can present them without receiving focus. ScopeWeave keeps
+the explicit live-region attributes in addition to the role so the
+intended contract remains visible in markup and executable regression
+evidence.
+
+The `.visible` compatibility rule is a product-integrity control, not a
+separate WCAG success criterion. It prevents the same advisory toast
+from being available to screen-reader users while remaining transparent
+for sighted users.
+
+## Repair boundary
+
+PR #491 head `794ecbdf1416e883942dac2b836859ba6f9ac0f9` titled a CI
+re-kick but deleted this slice and reverted already-landed orchestrator
+and Microsoft Project XML hardening. This repair replays only the toast
+and sync-status contract onto current `develop`. It does not change
+orchestrator, XML import, authentication, or workflow files.
+
+`toast-state.css` must stay on every production serve path: the SaaS
+static allowlist, both Docker images, and the GitHub Pages stage list.
+A share-error toast that updates the live region while remaining
+transparent is the buyer-visible failure this lock prevents.
+
+Do not use empty `ci: re-kick` commits to mutate the tree. Rollback must
+remove the status semantics, `toast-state.css`, its production link,
+allowlist and image copies, both focused toast regressions and their
+test registrations, this doctoring record, and the CHANGELOG entry
+together.
+
+## Executable acceptance evidence
+
+`tests/unit/toast-accessibility.test.mjs` reads the shipped
+`index.html`, `cloud-sync.js`, and `toast-state.css`. It proves that:
+
+- the production toast exposes status/polite/atomic semantics;
+- the production synchronization feedback exposes the same explicit
+  advisory status semantics;
+- neither advisory status region becomes a synthetic keyboard stop;
+- the cloud producer actually activates `.visible`;
+- the production document loads `toast-state.css`; and
+- `.toast.visible` is rendered with visible opacity and transform.
+
+`tests/e2e/toast-accessibility.spec.js` drives the production cloud
+share-error path in Chromium using a valid-shaped but unavailable share
+token. It requires the real toast to contain the customer-facing failure
+guidance, retain the status semantics, carry `.visible`, reach computed
+opacity of at least `0.99`, be visually visible, and leave keyboard
+focus elsewhere.
+
+## Scope and security boundary
+
+This change does not alter toast or synchronization content, timing,
+persistence, authentication, authorization, API semantics, credential
+handling, tenant isolation, attachment behavior, Clearfolio integration,
+database state, dependencies, workflows, or application
+focus-management code. Urgent blocking errors that require immediate
+interruption need a separate interaction design rather than silently
+changing these advisory status regions to assertive alerts.
+
+## References
+
+World Wide Web Consortium. (2023). *Accessible Rich Internet
+Applications (WAI-ARIA) 1.2*. https://www.w3.org/TR/wai-aria-1.2/
+
+World Wide Web Consortium. (2023). *Web Content Accessibility Guidelines
+(WCAG) 2.2*. https://www.w3.org/TR/WCAG22/

index.html

@@ -8,6 +8,7 @@
     <link rel="preload" href="styles.css" as="style" />
     <link rel="modulepreload" href="app.js" />
     <link rel="stylesheet" href="styles.css" />
+    <link rel="stylesheet" href="toast-state.css" />
   </head>
   <body>
     <a href="#main-content" class="skip-link sr-only">본문으로 건너뛰기</a>
@@ -44,7 +45,7 @@ <h1>ScopeWeave Planner</h1>
             <strong data-testid="summary-actual-progress" id="summary-actual-progress">0.00%</strong>
           </div>
           <div class="sync-panel">
-            <span id="sync-status" aria-live="polite" aria-atomic="true">브라우저 로컬 자동저장 사용 중</span>
+            <span id="sync-status" role="status" aria-live="polite" aria-atomic="true">브라우저 로컬 자동저장 사용 중</span>
             <button id="connect-json-sync" type="button" class="secondary-button">wbs.json 자동저장 연결</button>
           </div>
         </div>
@@ -95,7 +96,7 @@ <h1>ScopeWeave Planner</h1>
 
     <input id="csv-file-input" type="file" accept=".csv,text/csv" hidden />
 
-    <div id="toast" class="toast" aria-live="polite"></div>
+    <div id="toast" class="toast" role="status" aria-live="polite" aria-atomic="true"></div>
 
     <div id="gantt-modal" class="modal hidden" role="dialog" aria-modal="true" aria-labelledby="gantt-title" tabindex="-1">
       <div class="modal-backdrop" data-close-modal="true"></div>

package.json

@@ -13,12 +13,12 @@
     "coverage": "npm run test:coverage",
     "server": "node server/server.mjs",
     "test:api": "node tests/api/auth-secret.test.mjs && node tests/api/smoke.mjs && node tests/api/ratelimit.test.mjs && node tests/api/attachment-status.test.mjs && node tests/api/session-revocation.test.mjs",
-    "test:unit": "node tests/unit/analytics.test.mjs && node tests/unit/cpm.test.mjs && node tests/unit/baseline-compare.test.mjs && node tests/unit/workload.test.mjs && node tests/unit/cost-evm.test.mjs && node tests/unit/msproject.test.mjs && node tests/unit/auth-password.test.mjs && node tests/unit/editor-unsaved.test.mjs && node tests/unit/static-coverage-evidence.test.mjs && node tests/unit/dep-types.test.mjs && node tests/unit/weekly-report.test.mjs && node tests/unit/clearfolio.test.mjs && node tests/unit/clearfolio-adapter-mock-hmac.test.mjs && node tests/unit/orchestrator.test.mjs && node tests/unit/orchestrator-coverage.test.mjs && node tests/unit/sprint-stats.test.mjs && node tests/unit/burndown.test.mjs && node tests/unit/pm-analysis.test.mjs && node tests/unit/cloud-sync-security.test.mjs && node tests/unit/attachment-status.test.mjs && node tests/unit/clearfolio-status-signal.test.mjs && node tests/unit/coverage-script-contract.test.mjs",
+    "test:unit": "node tests/unit/analytics.test.mjs && node tests/unit/cpm.test.mjs && node tests/unit/baseline-compare.test.mjs && node tests/unit/workload.test.mjs && node tests/unit/cost-evm.test.mjs && node tests/unit/msproject.test.mjs && node tests/unit/auth-password.test.mjs && node tests/unit/editor-unsaved.test.mjs && node tests/unit/static-coverage-evidence.test.mjs && node tests/unit/dep-types.test.mjs && node tests/unit/weekly-report.test.mjs && node tests/unit/clearfolio.test.mjs && node tests/unit/clearfolio-adapter-mock-hmac.test.mjs && node tests/unit/orchestrator.test.mjs && node tests/unit/orchestrator-coverage.test.mjs && node tests/unit/sprint-stats.test.mjs && node tests/unit/burndown.test.mjs && node tests/unit/pm-analysis.test.mjs && node tests/unit/cloud-sync-security.test.mjs && node tests/unit/attachment-status.test.mjs && node tests/unit/clearfolio-status-signal.test.mjs && node tests/unit/coverage-script-contract.test.mjs && node tests/unit/toast-accessibility.test.mjs",
     "test:coverage": "c8 --all --include=app.js --include=cloud-sync.js --include=scripts/ci/static_coverage_evidence.mjs --include=server/attachment_status.mjs --include=server/app.mjs --include=server/auth.mjs --include=server/clearfolio.mjs --include=server/orchestrator.mjs --reporter=json --reporter=json-summary npm run test:coverage:cases",
     "test:coverage:cases": "node tests/unit/coverage-script-contract.test.mjs && node tests/unit/attachment-status.test.mjs && node tests/unit/clearfolio-status-signal.test.mjs && node tests/unit/clearfolio-adapter-mock-hmac.test.mjs && node tests/unit/orchestrator.test.mjs && node tests/unit/orchestrator-coverage.test.mjs && node tests/unit/msproject.test.mjs && node tests/unit/auth-password.test.mjs && node tests/unit/editor-unsaved.test.mjs && node tests/unit/static-coverage-evidence.test.mjs && npm run test:api",
     "test:e2e": "playwright test",
     "test:e2e:headed": "playwright test --headed",
-    "test:e2e:cloud": "playwright install chromium && playwright test tests/e2e/cloud.spec.js",
+    "test:e2e:cloud": "playwright install chromium && playwright test tests/e2e/cloud.spec.js tests/e2e/toast-accessibility.spec.js",
     "test:fuzz": "playwright install chromium && playwright test tests/e2e/csv_formula_fuzz.spec.js",
     "fuzz": "node --test tests/fuzz/*.mjs"
   },

server/app.mjs

@@ -1392,6 +1392,7 @@ const STATIC = {
   '/cloud-sync.js': ['cloud-sync.js', 'text/javascript; charset=utf-8'],
   '/analytics.js': ['analytics.js', 'text/javascript; charset=utf-8'],
   '/styles.css': ['styles.css', 'text/css; charset=utf-8'],
+  '/toast-state.css': ['toast-state.css', 'text/css; charset=utf-8'],
   '/wbs.json': ['wbs.json', 'application/json; charset=utf-8'],
 };
 app.get('*', async (c) => {

tests/api/smoke.mjs

@@ -167,7 +167,7 @@ assert.equal(r.status, 401, 'SSE without token → 401');
 await r.body?.cancel?.();
 
 // Static allowlist — client files served, source/db never exposed
-for (const [path, code] of [['/', 200], ['/index.html', 200], ['/app.js', 200], ['/cloud-sync.js', 200], ['/analytics.js', 200], ['/styles.css', 200], ['/wbs.json', 200], ['/landing.html', 200], ['/landing.en.html', 200], ['/pricing', 200], ['/docs/api.md', 200], ['/robots.txt', 200], ['/sitemap.xml', 200]]) {
+for (const [path, code] of [['/', 200], ['/index.html', 200], ['/app.js', 200], ['/cloud-sync.js', 200], ['/analytics.js', 200], ['/styles.css', 200], ['/toast-state.css', 200], ['/wbs.json', 200], ['/landing.html', 200], ['/landing.en.html', 200], ['/pricing', 200], ['/docs/api.md', 200], ['/robots.txt', 200], ['/sitemap.xml', 200]]) {
   const res = await req(path);
   assert.equal(res.status, code, `static ${path} → ${code}`);
 }

tests/e2e/scopeweave.spec.js

@@ -1300,6 +1300,7 @@ test.describe('ScopeWeave Planner - Palette UX Enhancements', () => {
 
     // Verify sync status ARIA attributes
     const syncStatus = page.locator('#sync-status');
+    await expect(syncStatus).toHaveAttribute('role', 'status');
     await expect(syncStatus).toHaveAttribute('aria-live', 'polite');
     await expect(syncStatus).toHaveAttribute('aria-atomic', 'true');
 

tests/e2e/toast-accessibility.spec.js

@@ -0,0 +1,24 @@
+import { test, expect } from '@playwright/test';
+
+test('cloud status feedback is visibly rendered as a non-focus-taking live status', async ({ page }) => {
+  await page.goto('/?share=ABCDEFGHIJKLMNOP');
+
+  const toast = page.locator('#toast');
+  await expect(toast).toHaveText('공유 링크가 만료되었거나 철회되었습니다.');
+  await expect(toast).toHaveAttribute('role', 'status');
+  await expect(toast).toHaveAttribute('aria-live', 'polite');
+  await expect(toast).toHaveAttribute('aria-atomic', 'true');
+  await expect(toast).not.toHaveAttribute('tabindex', /.+/);
+  await expect(toast).toHaveClass(/\bvisible\b/);
+  await expect(toast).toBeVisible();
+
+  await expect.poll(
+    () => toast.evaluate((element) => Number.parseFloat(getComputedStyle(element).opacity)),
+    { message: 'toast opacity should reach its fully visible transition state' },
+  ).toBeGreaterThanOrEqual(0.99);
+
+  await expect.poll(
+    () => toast.evaluate((element) => document.activeElement === element),
+    { message: 'advisory status must not capture keyboard focus' },
+  ).toBe(false);
+});

tests/unit/toast-accessibility.test.mjs

@@ -0,0 +1,64 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+
+const indexHtml = readFileSync(new URL('../../index.html', import.meta.url), 'utf8');
+const toastStateCss = readFileSync(new URL('../../toast-state.css', import.meta.url), 'utf8');
+const cloudSyncJs = readFileSync(new URL('../../cloud-sync.js', import.meta.url), 'utf8');
+
+function toastElementMarkup(html) {
+  const match = html.match(/<div\s+[^>]*\bid=["']toast["'][^>]*>/i);
+  assert.ok(match, 'production index.html contains the toast container');
+  return match[0];
+}
+
+function syncStatusElementMarkup(html) {
+  const match = html.match(/<span\s+[^>]*\bid=["']sync-status["'][^>]*>/i);
+  assert.ok(match, 'production index.html contains the sync status container');
+  return match[0];
+}
+
+test('toast container exposes advisory status updates without taking focus', () => {
+  const toast = toastElementMarkup(indexHtml);
+  assert.match(toast, /\brole=["']status["']/i, 'toast uses the WAI-ARIA status role');
+  assert.match(toast, /\baria-live=["']polite["']/i, 'toast explicitly uses polite announcements');
+  assert.match(toast, /\baria-atomic=["']true["']/i, 'toast announces its complete updated content');
+  assert.doesNotMatch(toast, /\btabindex\s*=/i, 'status updates do not move keyboard focus');
+});
+
+test('sync status uses the same explicit advisory status semantics', () => {
+  const syncStatus = syncStatusElementMarkup(indexHtml);
+  assert.match(syncStatus, /\brole=["']status["']/i, 'sync feedback uses the WAI-ARIA status role');
+  assert.match(syncStatus, /\baria-live=["']polite["']/i, 'sync feedback explicitly uses polite announcements');
+  assert.match(syncStatus, /\baria-atomic=["']true["']/i, 'sync feedback announces its complete updated content');
+  assert.doesNotMatch(syncStatus, /\btabindex\s*=/i, 'sync feedback does not become a synthetic keyboard stop');
+});
+
+test('cloud toast stylesheet is on every production serve path', () => {
+  const serverApp = readFileSync(new URL('../../server/app.mjs', import.meta.url), 'utf8');
+  const pagesWorkflow = readFileSync(new URL('../../.github/workflows/pages.yml', import.meta.url), 'utf8');
+  const staticDockerfile = readFileSync(new URL('../../Dockerfile', import.meta.url), 'utf8');
+  const serverDockerfile = readFileSync(new URL('../../Dockerfile.server', import.meta.url), 'utf8');
+  assert.match(serverApp, /['"]\/toast-state\.css['"]/, 'SaaS allowlist serves the cloud toast stylesheet');
+  assert.match(pagesWorkflow, /\btoast-state\.css\b/, 'GitHub Pages stages the cloud toast stylesheet');
+  assert.match(staticDockerfile, /\btoast-state\.css\b/, 'static image copies the cloud toast stylesheet');
+  assert.match(serverDockerfile, /\btoast-state\.css\b/, 'SaaS image copies the cloud toast stylesheet');
+});
+
+test('cloud toast state is visibly rendered by a shipped stylesheet', () => {
+  assert.match(
+    cloudSyncJs,
+    /classList\.add\(["']visible["']\)/,
+    'cloud status messages activate the visible toast state',
+  );
+  assert.match(
+    indexHtml,
+    /<link\s+[^>]*\brel=["']stylesheet["'][^>]*\bhref=["']toast-state\.css["'][^>]*>/i,
+    'the production document loads the cloud toast state stylesheet',
+  );
+  assert.match(
+    toastStateCss,
+    /\.toast\.visible\s*\{[^}]*\bopacity\s*:\s*1\s*;[^}]*\btransform\s*:\s*translateY\(0\)\s*;/s,
+    'the shipped cloud toast state becomes visually observable',
+  );
+});