a11y: harden dialog, controls, and shortcuts

.github/workflows/desktop.yml

@@ -90,6 +90,31 @@ jobs:
           retention-days: 2
           if-no-files-found: error
 
+  a11y:
+    name: Verify Theme Manager accessibility
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          persist-credentials: false
+
+      - name: Set up Node.js
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        with:
+          node-version: 22
+          package-manager-cache: false
+
+      - name: Install accessibility test dependencies
+        run: npm ci --prefix apps/theme-manager
+
+      - name: Assert Theme Manager accessibility in Chromium
+        env:
+          ACT_CHROME_BIN: google-chrome
+        run: npm run a11y:check --prefix apps/theme-manager
+
   desktop:
     name: Desktop ${{ matrix.os }} ${{ matrix.rust-target || 'native' }}
     needs: prepare

apps/theme-manager/package.json

@@ -7,6 +7,7 @@
   "scripts": {
     "tauri": "tauri",
     "prepare:assets": "node ../../scripts/prepare-desktop.mjs && tauri icon build/icon.png --output src-tauri/icons",
+    "a11y:check": "node scripts/verify-a11y.mjs",
     "start": "npm run prepare:assets && tauri dev",
     "pretest": "npm run prepare:assets",
     "test": "cargo test --manifest-path src-tauri/Cargo.toml",
@@ -18,7 +19,8 @@
     "build:mac:release": "npm run prepare:assets && tauri build --config src-tauri/tauri.release.conf.json --bundles dmg"
   },
   "devDependencies": {
-    "@tauri-apps/cli": "2.11.4"
+    "@tauri-apps/cli": "2.11.4",
+    "axe-core": "4.12.1"
   },
   "author": "Awesome Codex Theme contributors",
   "license": "MIT"