🎨 Palette: 대시보드 파일 업로드 UX 및 접근성 개선

[seonghobae]

이 PR은 "Palette" 페르소나의 일환으로 대시보드 index.html 내에 있는 네이티브 파일 업로드 컨트롤에 대한 마이크로 UX/접근성 개선을 담고 있습니다. 브라우저 기본 디자인의 파일 업로드 창은 이질적이고 스타일링이 어려우므로, 이를 시각적으로 숨기고 대신 깔끔하게 디자인된 프록시 버튼(<button class="primary-action">)을 제공하여 클릭 이벤트를 위임합니다. 아울러 중복되는 aria-label을 제거하여 label-in-name 원칙을 준수하고 관련 테스트 및 저널을 업데이트했습니다.

---

PR created automatically by Jules for task 9798039874485476511 started by @seonghobae

---

[google-labs-jules]

👋 Jules, reporting for duty! I'm here to lend a hand with this pull request.

When you start a review, I'll add a 👀 emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down.

I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job!

For more direct control, you can switch me to Reactive Mode. When this mode is on, I will only act on comments where you specifically mention me with @jules. You can find this option in the Pull Request section of your global Jules UI settings. You can always switch back!

New to Jules? Learn more at jules.google/docs.

---

For security, I will only act on instructions from the user who triggered this task.

[coderabbitai]

Warning

Review limit reached

Next included review available in 36 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: 4861b31e-4baf-48ab-88ac-08bdd8454c30

📥 Commits

Reviewing files that changed from the base of the PR and between e71d37e and 5591191.

📒 Files selected for processing (3)

• .jules/palette.md
• scanner/dashboard/index.html
• tests/test_dashboard_core.py

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

[cwl-noema-review]

Noema LLM review

PR #1085 replaces the header's native file input with a proxy button and hidden input, following the documented label-in-name accessibility pattern from .jules/palette.md (2026-09-02). The button's visible text provides a valid accessible name, native button semantics handle keyboard activation via synthesized click events, and the global :focus-visible rule supplies focus indication. Programmatic .click() on the hidden file input remains standards-compliant and cross-browser supported. The updated test assertion verifies the new button markup and retains sufficient accessibility coverage. No behavioral regressions, security issues, or maintainability concerns were found.

Reviewed changed lines

• scanner/dashboard/index.html:96 (RIGHT): Replaces native file input with a proxy button and hidden input. The button's visible text supplies a valid accessible name, and native button semantics plus the global :focus-visible rule preserve keyboard and visual focus affordances.
• scanner/dashboard/index.html:329 (RIGHT): Adds click listener to trigger the hidden file input. Browsers synthesize click events for keyboard activation of elements, and programmatic .click() on display:none file inputs is permitted and well-supported.
• tests/test_dashboard_core.py:80 (RIGHT): Updates assertion from aria-label on the file input to the button's visible text. This aligns with label-in-name principles and continues to verify the upload control's accessible naming and native keyboard behavior.
• .jules/palette.md:84 (RIGHT): Documents the proxy button label-in-name learning, explaining when to avoid redundant aria-label and to update corresponding UI contract tests; this note supports the PR's implementation.

Adversarial validation

• scanner/dashboard/index.html:96 (RIGHT) falsified: The hidden file input loses its accessible name and becomes undiscoverable to screen readers. — The triggering button's visible text 'Upload findings file' provides a valid accessible name via name-from-content. The hidden input is not an independent tab stop, but it remains programmatically operable through the button.
• scanner/dashboard/index.html:329 (RIGHT) falsified: Keyboard activation of the new button fails to open the file picker because the click listener requires a mouse event. — Native elements synthesize click events for Enter and Space activation regardless of the triggering input device, so the listener runs correctly for keyboard users.
• tests/test_dashboard_core.py:80 (RIGHT) falsified: The updated test no longer verifies upload control accessibility and could pass with an inaccessible implementation. — The new assertion checks for a native button with visible text 'Upload findings file'. The button element inherently provides accessible naming and keyboard focus, and other existing assertions continue to cover row, search, and filter accessibility.
• Residual risk: Low. Residual risk is limited to cross-browser nuances around programmatic file input activation, which are standards-compliant and broadly supported. No concrete failure mode was identified through static analysis.

Findings

• No blocking findings.

• Result: APPROVE
• Head SHA: 5591191f77cdf756ec068e623f500f9f61d008b1
• Reviewer credential: noema-review-github-app-refresh
• Actor: cwl-noema-review[bot]

[seonghobae]

Verified successor inheritance is now complete in Draft #1098. Successor exact head 59c635584beca0b7c3fbc74c5a7381baaa98cdca carries this PR head 5591191f77cdf756ec068e623f500f9f61d008b1's three effective files by exact blob identity: scanner/dashboard/index.html@975caeb91a97aa48285854680dc12fbba98db2cd, tests/test_dashboard_core.py@be7386152518b4e9c0c98062f9e6c31ae28076cc, .jules/palette.md@23bdaf3bce8202728d0c43f9dd2610cacdfc0be2. #1098 additionally adds a RED→GREEN regression guarding the shared 44px primary-action touch target that its initial inline styles had accidentally defeated. No semantic/test/doc delta from #1085 is being discarded. Closing this predecessor solely because the maintained successor now contains the complete valid delta; #1098 remains Draft and must satisfy its own current-head UI/check gates before merge.

[google-labs-jules]

Verified successor inheritance is now complete in Draft #1098. Successor exact head 59c635584beca0b7c3fbc74c5a7381baaa98cdca carries this PR head 5591191f77cdf756ec068e623f500f9f61d008b1's three effective files by exact blob identity: scanner/dashboard/index.html@975caeb91a97aa48285854680dc12fbba98db2cd, tests/test_dashboard_core.py@be7386152518b4e9c0c98062f9e6c31ae28076cc, .jules/palette.md@23bdaf3bce8202728d0c43f9dd2610cacdfc0be2. #1098 additionally adds a RED→GREEN regression guarding the shared 44px primary-action touch target that its initial inline styles had accidentally defeated. No semantic/test/doc delta from #1085 is being discarded. Closing this predecessor solely because the maintained successor now contains the complete valid delta; #1098 remains Draft and must satisfy its own current-head UI/check gates before merge.

알겠습니다. 이 작업이 후속 PR로 대체되었음을 확인하였으며, 본 PR에 대한 작업을 중단하겠습니다.