diff --git a/.gitignore b/.gitignore
index 7f8a19b..4fb7132 100644
--- a/.gitignore
+++ b/.gitignore
@@ -101,3 +101,7 @@ __smoketest.ts
 storybook-static
 /.next-stress
 /scripts/stress/results/
+
+# Local a11y/e2e iteration builds (PLAYWRIGHT_PORT=3001 + NEXT_DIST_DIR=.next-e2e,
+# so the suite can run alongside a long-lived `next dev` holding :3000 and .next)
+/.next-e2e
diff --git a/package.json b/package.json
index 0508823..fbd59d3 100644
--- a/package.json
+++ b/package.json
@@ -39,10 +39,10 @@
     "@tauri-apps/plugin-process": "^2.3.1",
     "@tauri-apps/plugin-updater": "^2.10.1",
     "better-sqlite3": "^12.11.1",
-    "dompurify": "3.4.11",
+    "dompurify": "3.4.12",
     "echarts": "^6.1.0",
     "marked": "^18.0.5",
-    "next": "16.2.9",
+    "next": "16.2.11",
     "next-intl": "4.13.0",
     "react": "^19.2.7",
     "react-dom": "^19.2.7",
@@ -50,20 +50,21 @@
     "tesseract.js": "^7.0.0"
   },
   "devDependencies": {
+    "@axe-core/playwright": "^4.12.1",
     "@biomejs/biome": "2.5.2",
     "@playwright/test": "^1.61.1",
+    "@storybook/addon-a11y": "^10.4.6",
+    "@storybook/addon-docs": "^10.4.6",
+    "@storybook/nextjs": "^10.4.6",
     "@tauri-apps/cli": "^2.11.4",
     "@types/better-sqlite3": "^7.6.9",
     "@types/node": "^26.0.1",
     "@types/react": "^19.2.17",
     "@types/react-dom": "^19.2.3",
     "cross-env": "^10.1.0",
+    "storybook": "^10.4.6",
     "tsx": "^4.22.4",
     "typescript": "^6.0.3",
-    "ultracite": "7.8.4",
-    "storybook": "^10.4.6",
-    "@storybook/nextjs": "^10.4.6",
-    "@storybook/addon-a11y": "^10.4.6",
-    "@storybook/addon-docs": "^10.4.6"
+    "ultracite": "7.8.4"
   }
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 8ab31ff..2cbc74e 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -7,6 +7,7 @@ settings:
 overrides:
   postcss: ^8.5.12
   '@babel/core': ^7.29.1
+  sharp: ^0.35.0
 
 importers:
 
@@ -34,8 +35,8 @@ importers:
         specifier: ^12.11.1
         version: 12.11.1
       dompurify:
-        specifier: 3.4.11
-        version: 3.4.11
+        specifier: 3.4.12
+        version: 3.4.12
       echarts:
         specifier: ^6.1.0
         version: 6.1.0
@@ -43,11 +44,11 @@ importers:
         specifier: ^18.0.5
         version: 18.0.6
       next:
-        specifier: 16.2.9
-        version: 16.2.9(@babel/core@7.29.7)(@playwright/test@1.61.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+        specifier: 16.2.11
+        version: 16.2.11(@babel/core@7.29.7)(@playwright/test@1.61.1)(@types/node@26.1.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       next-intl:
         specifier: 4.13.0
-        version: 4.13.0(next@16.2.9(@babel/core@7.29.7)(@playwright/test@1.61.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)(typescript@6.0.3)
+        version: 4.13.0(next@16.2.11(@babel/core@7.29.7)(@playwright/test@1.61.1)(@types/node@26.1.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)(typescript@6.0.3)
       react:
         specifier: ^19.2.7
         version: 19.2.7
@@ -61,6 +62,9 @@ importers:
         specifier: ^7.0.0
         version: 7.0.0
     devDependencies:
+      '@axe-core/playwright':
+        specifier: ^4.12.1
+        version: 4.12.1(playwright-core@1.61.1)
       '@biomejs/biome':
         specifier: 2.5.2
         version: 2.5.2
@@ -75,7 +79,7 @@ importers:
         version: 10.5.0(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(esbuild@0.28.1)(storybook@10.5.0(@types/react@19.2.17)(react@19.2.7))(webpack@5.108.4(esbuild@0.28.1)(postcss@8.5.17))
       '@storybook/nextjs':
         specifier: ^10.4.6
-        version: 10.5.0(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(esbuild@0.28.1)(next@16.2.9(@babel/core@7.29.7)(@playwright/test@1.61.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(storybook@10.5.0(@types/react@19.2.17)(react@19.2.7))(type-fest@2.19.0)(typescript@6.0.3)(webpack-hot-middleware@2.26.1)(webpack@5.108.4(esbuild@0.28.1)(postcss@8.5.17))
+        version: 10.5.0(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(esbuild@0.28.1)(next@16.2.11(@babel/core@7.29.7)(@playwright/test@1.61.1)(@types/node@26.1.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(storybook@10.5.0(@types/react@19.2.17)(react@19.2.7))(type-fest@2.19.0)(typescript@6.0.3)(webpack-hot-middleware@2.26.1)(webpack@5.108.4(esbuild@0.28.1)(postcss@8.5.17))
       '@tauri-apps/cli':
         specifier: ^2.11.4
         version: 2.11.4
@@ -112,6 +116,11 @@ packages:
   '@adobe/css-tools@4.5.0':
     resolution: {integrity: sha512-6OzddxPio9UiWTCemp4N8cYLV2ZN1ncRnV1cVGtve7dhPOtRkleRyx32GQCYSwDYgaHU3USMm84tNsvKzRCa1Q==}
 
+  '@axe-core/playwright@4.12.1':
+    resolution: {integrity: sha512-rMd7xriptqKpP+w5265i4Hdkv2X5kbu6uiBi/B2I7uf3hieRBM3qDCfaKPtxfiYb2mKXfF+yLODJwIx+Jv1GDw==}
+    peerDependencies:
+      playwright-core: '>= 1.0.0'
+
   '@babel/code-frame@7.29.7':
     resolution: {integrity: sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw==}
     engines: {node: '>=6.9.0'}
@@ -963,152 +972,161 @@ packages:
     resolution: {integrity: sha512-Td76q7j57o/tLVdgS746cYARfSyxk8iEfRxewL9h4OMzYhbW4TAcppl0mT4eyqXddh6L/jwoM75mo7ixa/pCeQ==}
     engines: {node: '>=18'}
 
-  '@img/sharp-darwin-arm64@0.34.5':
-    resolution: {integrity: sha512-imtQ3WMJXbMY4fxb/Ndp6HBTNVtWCUI0WdobyheGf5+ad6xX8VIDO8u2xE4qc/fr08CKG/7dDseFtn6M6g/r3w==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-darwin-arm64@0.35.3':
+    resolution: {integrity: sha512-RMnFX7YQsMoh7lWfcM4NEHHymBX/rLuKNPVM84XE9ONPcaSCDgE7CHIHpSgPcO2xcRthgBy1HfNO319mwhIAkg==}
+    engines: {node: '>=20.9.0'}
     cpu: [arm64]
     os: [darwin]
 
-  '@img/sharp-darwin-x64@0.34.5':
-    resolution: {integrity: sha512-YNEFAF/4KQ/PeW0N+r+aVVsoIY0/qxxikF2SWdp+NRkmMB7y9LBZAVqQ4yhGCm/H3H270OSykqmQMKLBhBJDEw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-darwin-x64@0.35.3':
+    resolution: {integrity: sha512-Xo+5uFBtLN0BKqieTxiFzFPQAUlBbbH5iBKyRX/z1JrbnYsHTfKJnUfL8+p2TPXr1pXqao4eeL4Rl144uDpK9w==}
+    engines: {node: '>=20.9.0'}
     cpu: [x64]
     os: [darwin]
 
-  '@img/sharp-libvips-darwin-arm64@1.2.4':
-    resolution: {integrity: sha512-zqjjo7RatFfFoP0MkQ51jfuFZBnVE2pRiaydKJ1G/rHZvnsrHAOcQALIi9sA5co5xenQdTugCvtb1cuf78Vf4g==}
+  '@img/sharp-freebsd-wasm32@0.35.3':
+    resolution: {integrity: sha512-lUxcqWIj2wMQ9BrwNjngcr1gWUr5xgaGThBRqPPalIC2n67Cqj1uPh8NnA/ZhAg8hUbKl+kVHKwgUIwe6ZYPrg==}
+    engines: {node: '>=20.9.0'}
+    os: [freebsd]
+
+  '@img/sharp-libvips-darwin-arm64@1.3.2':
+    resolution: {integrity: sha512-9J6ypZFpQBj4YnePGoq/S38w6nz+vqg5WZLrLGY4YuSemdMq47GMLBPO42MzwdGwpg/agZ7xzZcFHa48xlywfg==}
     cpu: [arm64]
     os: [darwin]
 
-  '@img/sharp-libvips-darwin-x64@1.2.4':
-    resolution: {integrity: sha512-1IOd5xfVhlGwX+zXv2N93k0yMONvUlANylbJw1eTah8K/Jtpi15KC+WSiaX/nBmbm2HxRM1gZ0nSdjSsrZbGKg==}
+  '@img/sharp-libvips-darwin-x64@1.3.2':
+    resolution: {integrity: sha512-m2pW1n6cns9VaubNwsZ+c3CRYjxNQWgJ5gPlnL1nbBcpkBvFm6SCFN5o0psFHI8w9n11NKhFkeEDns98tiqbEw==}
     cpu: [x64]
     os: [darwin]
 
-  '@img/sharp-libvips-linux-arm64@1.2.4':
-    resolution: {integrity: sha512-excjX8DfsIcJ10x1Kzr4RcWe1edC9PquDRRPx3YVCvQv+U5p7Yin2s32ftzikXojb1PIFc/9Mt28/y+iRklkrw==}
+  '@img/sharp-libvips-linux-arm64@1.3.2':
+    resolution: {integrity: sha512-dqVSFynCox4C/J8kT16V7SIFAns0IjgLwkvYT7p8LQVmJ5OS5b6tI9IGflxTeuBS//zXeFIUbwt5dwxyZ17cnA==}
     cpu: [arm64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-libvips-linux-arm@1.2.4':
-    resolution: {integrity: sha512-bFI7xcKFELdiNCVov8e44Ia4u2byA+l3XtsAj+Q8tfCwO6BQ8iDojYdvoPMqsKDkuoOo+X6HZA0s0q11ANMQ8A==}
+  '@img/sharp-libvips-linux-arm@1.3.2':
+    resolution: {integrity: sha512-1eMLzy92I4J6rmi4mAT8yC3HxOtniyGELlzGbNMLLeqe052ahFQ0h6LFq+lh5DsDIdYViIDst08abvSbcEdLXQ==}
     cpu: [arm]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-libvips-linux-ppc64@1.2.4':
-    resolution: {integrity: sha512-FMuvGijLDYG6lW+b/UvyilUWu5Ayu+3r2d1S8notiGCIyYU/76eig1UfMmkZ7vwgOrzKzlQbFSuQfgm7GYUPpA==}
+  '@img/sharp-libvips-linux-ppc64@1.3.2':
+    resolution: {integrity: sha512-3z0NHDxD6n5I9gc05U1eW1AyRm+Gznzq3naMrthPNqE6oYykcogW0l/jfpJdjYnuNl8R7yI9pNbE1XiUeyq0Aw==}
     cpu: [ppc64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-libvips-linux-riscv64@1.2.4':
-    resolution: {integrity: sha512-oVDbcR4zUC0ce82teubSm+x6ETixtKZBh/qbREIOcI3cULzDyb18Sr/Wcyx7NRQeQzOiHTNbZFF1UwPS2scyGA==}
+  '@img/sharp-libvips-linux-riscv64@1.3.2':
+    resolution: {integrity: sha512-bsb4rI+NldGOsXuej2r8OdSS8+zXDVaCWxyWrcv6kneTOlgAHtZABRzBBCwdsPiD90J4myNJuHpg6kA20ImW/w==}
     cpu: [riscv64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-libvips-linux-s390x@1.2.4':
-    resolution: {integrity: sha512-qmp9VrzgPgMoGZyPvrQHqk02uyjA0/QrTO26Tqk6l4ZV0MPWIW6LTkqOIov+J1yEu7MbFQaDpwdwJKhbJvuRxQ==}
+  '@img/sharp-libvips-linux-s390x@1.3.2':
+    resolution: {integrity: sha512-/ABshyj8gCpyIrNXnHn4LorDJ0HHm1VhXPBlxZ8zAtfVPAaSafXPGn+sUSIRiwaSBy0mmFjSjiXI5mkcwdChKQ==}
     cpu: [s390x]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-libvips-linux-x64@1.2.4':
-    resolution: {integrity: sha512-tJxiiLsmHc9Ax1bz3oaOYBURTXGIRDODBqhveVHonrHJ9/+k89qbLl0bcJns+e4t4rvaNBxaEZsFtSfAdquPrw==}
+  '@img/sharp-libvips-linux-x64@1.3.2':
+    resolution: {integrity: sha512-ITPEtgffGJ0S6G9dRyw/366tJQqFRcHWPHhC+Stpg3Z8AEMrDrTr2lhdz4f/Y/HMbRh//7Z5mBzEpVdi62Oc3w==}
     cpu: [x64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-libvips-linuxmusl-arm64@1.2.4':
-    resolution: {integrity: sha512-FVQHuwx1IIuNow9QAbYUzJ+En8KcVm9Lk5+uGUQJHaZmMECZmOlix9HnH7n1TRkXMS0pGxIJokIVB9SuqZGGXw==}
+  '@img/sharp-libvips-linuxmusl-arm64@1.3.2':
+    resolution: {integrity: sha512-zE9EdiUzUmg5mDT5a1rk5fYJ6GWPloTwWBYDS14naqHsL+EaMpDj1AWnpLgh3u0YCORv2Tt50wrcrpYqkP97Kw==}
     cpu: [arm64]
     os: [linux]
     libc: [musl]
 
-  '@img/sharp-libvips-linuxmusl-x64@1.2.4':
-    resolution: {integrity: sha512-+LpyBk7L44ZIXwz/VYfglaX/okxezESc6UxDSoyo2Ks6Jxc4Y7sGjpgU9s4PMgqgjj1gZCylTieNamqA1MF7Dg==}
+  '@img/sharp-libvips-linuxmusl-x64@1.3.2':
+    resolution: {integrity: sha512-m0lrLiUt+lBYnCFr8qV/65yMR4E/c7/wf78I5eKTdkEakFAlZ9QlzEM3QIhhAwVeUhLAHLcCq7a7Vszq/oFNZQ==}
     cpu: [x64]
     os: [linux]
     libc: [musl]
 
-  '@img/sharp-linux-arm64@0.34.5':
-    resolution: {integrity: sha512-bKQzaJRY/bkPOXyKx5EVup7qkaojECG6NLYswgktOZjaXecSAeCWiZwwiFf3/Y+O1HrauiE3FVsGxFg8c24rZg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-linux-arm64@0.35.3':
+    resolution: {integrity: sha512-QgKDspHPnrU+GQ55XPhGwyhC8acLVOOSyAvo1oVfFmrIXLkDNmGWzAfDZ4xK8oSA1qBQrALcHX0G5UZni/SuFQ==}
+    engines: {node: '>=20.9.0'}
     cpu: [arm64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-linux-arm@0.34.5':
-    resolution: {integrity: sha512-9dLqsvwtg1uuXBGZKsxem9595+ujv0sJ6Vi8wcTANSFpwV/GONat5eCkzQo/1O6zRIkh0m/8+5BjrRr7jDUSZw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-linux-arm@0.35.3':
+    resolution: {integrity: sha512-affVWCTLooy8TSxbDx2qkzuDeaWLNVBA+P//FNBirHsXpP2fuBhk5AuboYUnrDnzoXes8GFjpTx0SBFOCRg+FA==}
+    engines: {node: '>=20.9.0'}
     cpu: [arm]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-linux-ppc64@0.34.5':
-    resolution: {integrity: sha512-7zznwNaqW6YtsfrGGDA6BRkISKAAE1Jo0QdpNYXNMHu2+0dTrPflTLNkpc8l7MUP5M16ZJcUvysVWWrMefZquA==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-linux-ppc64@0.35.3':
+    resolution: {integrity: sha512-sMd8rDxmpLOwv/7N44klFjOD5DUO7FLdjiXDI0hoxYaf7Ar262dQIEkosE98bps+5HPLtp/EvNqeqQtOycP/IA==}
+    engines: {node: '>=20.9.0'}
     cpu: [ppc64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-linux-riscv64@0.34.5':
-    resolution: {integrity: sha512-51gJuLPTKa7piYPaVs8GmByo7/U7/7TZOq+cnXJIHZKavIRHAP77e3N2HEl3dgiqdD/w0yUfiJnII77PuDDFdw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-linux-riscv64@0.35.3':
+    resolution: {integrity: sha512-0Eob78yjlYPfL5vMNWAW55l3R9Y6BQS/gOfe0ZcP9mEz9ohhKSt4im1hayiknXgf8AWrFqMvJcKIdmLmEe7yeQ==}
+    engines: {node: '>=20.9.0'}
     cpu: [riscv64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-linux-s390x@0.34.5':
-    resolution: {integrity: sha512-nQtCk0PdKfho3eC5MrbQoigJ2gd1CgddUMkabUj+rBevs8tZ2cULOx46E7oyX+04WGfABgIwmMC0VqieTiR4jg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-linux-s390x@0.35.3':
+    resolution: {integrity: sha512-KgAxQ0DxpNOq1rG2t5cgTgShJFGSuU7XO45cqC+1NVOuZnP6tlgZRuSYOfNupGkHID0o3cJOsw4DVeJpMovcGw==}
+    engines: {node: '>=20.9.0'}
     cpu: [s390x]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-linux-x64@0.34.5':
-    resolution: {integrity: sha512-MEzd8HPKxVxVenwAa+JRPwEC7QFjoPWuS5NZnBt6B3pu7EG2Ge0id1oLHZpPJdn3OQK+BQDiw9zStiHBTJQQQQ==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-linux-x64@0.35.3':
+    resolution: {integrity: sha512-8pqvxubL2PGdhlPy6GLqzDYMUjyRmKAwKHYKixpdJYBUK7PJ0C029XdsnpFIdgRZG68fZiGdHVWcKPvtiPB4cA==}
+    engines: {node: '>=20.9.0'}
     cpu: [x64]
     os: [linux]
     libc: [glibc]
 
-  '@img/sharp-linuxmusl-arm64@0.34.5':
-    resolution: {integrity: sha512-fprJR6GtRsMt6Kyfq44IsChVZeGN97gTD331weR1ex1c1rypDEABN6Tm2xa1wE6lYb5DdEnk03NZPqA7Id21yg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-linuxmusl-arm64@0.35.3':
+    resolution: {integrity: sha512-Vz0iQjzzcSX3HCbfwFfCSG/9SCIqyO0mH2sXyiHaAYfBk0cRsCWXRyQYX0ovCK/PAQBbTzQ0dsPQHh5MAFL59w==}
+    engines: {node: '>=20.9.0'}
     cpu: [arm64]
     os: [linux]
     libc: [musl]
 
-  '@img/sharp-linuxmusl-x64@0.34.5':
-    resolution: {integrity: sha512-Jg8wNT1MUzIvhBFxViqrEhWDGzqymo3sV7z7ZsaWbZNDLXRJZoRGrjulp60YYtV4wfY8VIKcWidjojlLcWrd8Q==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-linuxmusl-x64@0.35.3':
+    resolution: {integrity: sha512-6O1NPKcDVj9QEdg7Hx549EX8U0rp6yXQERqru6yRN7fGBn32UvIRJUlWnk+8xDCiG76hXVBbX82NZ/ZKr0euIg==}
+    engines: {node: '>=20.9.0'}
     cpu: [x64]
     os: [linux]
     libc: [musl]
 
-  '@img/sharp-wasm32@0.34.5':
-    resolution: {integrity: sha512-OdWTEiVkY2PHwqkbBI8frFxQQFekHaSSkUIJkwzclWZe64O1X4UlUjqqqLaPbUpMOQk6FBu/HtlGXNblIs0huw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-wasm32@0.35.3':
+    resolution: {integrity: sha512-cZ0XkcYGpHZkqW6iCkqTcmUC0CD9DhD5d/qeZlZkfRBn6GnHniZXLUo5+9xw8Iv76YE6LQFN9YNBlKREcCG76w==}
+    engines: {node: '>=20.9.0'}
+
+  '@img/sharp-webcontainers-wasm32@0.35.3':
+    resolution: {integrity: sha512-2rnq7bX3NzeR2T4YWgz8qiG4h3TSdMe+vN1iQXpJleSJ3SM5zQ8Fy2SyyXAWlbxpEZ2Y+Z4u1BePgJEYbSy80Q==}
+    engines: {node: '>=20.9.0'}
     cpu: [wasm32]
 
-  '@img/sharp-win32-arm64@0.34.5':
-    resolution: {integrity: sha512-WQ3AgWCWYSb2yt+IG8mnC6Jdk9Whs7O0gxphblsLvdhSpSTtmu69ZG1Gkb6NuvxsNACwiPV6cNSZNzt0KPsw7g==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-win32-arm64@0.35.3':
+    resolution: {integrity: sha512-4bPwFdMbeC4JQ8L8LOyWp6nsHcboP5fxkp6iPOXz2Vg49R42TuMs2whkJ5OAP4/Ul035qOzy0AecOF9VOscn4w==}
+    engines: {node: '>=20.9.0'}
     cpu: [arm64]
     os: [win32]
 
-  '@img/sharp-win32-ia32@0.34.5':
-    resolution: {integrity: sha512-FV9m/7NmeCmSHDD5j4+4pNI8Cp3aW+JvLoXcTUo0IqyjSfAZJ8dIUmijx1qaJsIiU+Hosw6xM5KijAWRJCSgNg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-win32-ia32@0.35.3':
+    resolution: {integrity: sha512-r53mXsBN6lFUDiST764SvgwUdHAqM4rPAiDzAmf4fLoB6X/rkfyTrLCg6+g17wJJiCmB3JYgHuUldCWUIRFSXw==}
+    engines: {node: ^20.9.0}
     cpu: [ia32]
     os: [win32]
 
-  '@img/sharp-win32-x64@0.34.5':
-    resolution: {integrity: sha512-+29YMsqY2/9eFEiW93eqWnuLcWcufowXewwSNIT6UwZdUUCrM3oFjMWH/Z6/TMmb4hlFenmfAVbpWeup2jryCw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  '@img/sharp-win32-x64@0.35.3':
+    resolution: {integrity: sha512-D4y1vNeZrIIJCN+uHaWVtH86B+aCrdMYYjicy9pXHvbGZeGYLLSd3wdVuC37FxVXlU1ARsk84eKWfWMXGYEqvA==}
+    engines: {node: '>=20.9.0'}
     cpu: [x64]
     os: [win32]
 
@@ -1143,57 +1161,57 @@ packages:
       '@emnapi/core': ^1.7.1
       '@emnapi/runtime': ^1.7.1
 
-  '@next/env@16.2.9':
-    resolution: {integrity: sha512-ki5VxxXfzD/9TDe13wyeTKIjQTAwBVpnr8KhRDUr8ltMUq1/NBpWNT5tiPoxiGl+PHM4X2ahSOiPk6iAimIzPg==}
+  '@next/env@16.2.11':
+    resolution: {integrity: sha512-0do5A3BJ2gxWr0ZCMcD6BhW+e595jyxdTl3rXTS6lOtD8ektMiW6CO+EPwt1Eca1DBnm90r/7GdiKWBKxH++DA==}
 
-  '@next/swc-darwin-arm64@16.2.9':
-    resolution: {integrity: sha512-HkfxNYUCmcct0Xsqib5KxqMSHV4AHJq857BNRchyBDs4YS19aHzVfn1kDuBYKqLLQBjXgnkIsjV2Kd4d2wzYhw==}
+  '@next/swc-darwin-arm64@16.2.11':
+    resolution: {integrity: sha512-wryL4pjKmDwGv2ox6+GZDFxvmtSRLqApBR8kL1j4+vhB7Z5vJC/zAnXpiR9Xkfzl0AS8WLMnsuGV/UKI67/rrw==}
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [darwin]
 
-  '@next/swc-darwin-x64@16.2.9':
-    resolution: {integrity: sha512-7IAtK4MeybpqRV9GRABWEhJ62mOS+rzWOzOTFie4cSEtm12xsoOMJRcECoZx3FHPzFAqN/IJtHqWAFOLfl152w==}
+  '@next/swc-darwin-x64@16.2.11':
+    resolution: {integrity: sha512-aZl2j4f/fLyjQvOhv0Oe9UaMAQHolYpKhctsoYzplSumKJKPUmgjcf6545aBtysLTcu994TREd0+pSgNE4ohmg==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [darwin]
 
-  '@next/swc-linux-arm64-gnu@16.2.9':
-    resolution: {integrity: sha512-hBD75iWpUtkL9SmQmcRhmLomn9jgkPzCEkbOcLgHymPEKzv+6ONy13RRiIEz/iEObjkS2Jlb5gYS2XGoS3X4rw==}
+  '@next/swc-linux-arm64-gnu@16.2.11':
+    resolution: {integrity: sha512-5jEriyEnH/LWFy27L2ZG0XaLlyEJIjhsImEsiS9P563PKEVp2BVups/xfOucIrsvVntp11oNcZwjHvaDPYVB5g==}
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [linux]
     libc: [glibc]
 
-  '@next/swc-linux-arm64-musl@16.2.9':
-    resolution: {integrity: sha512-qZTI3pf9SGc/obr8NkQAekBxmp1QK+kVm+VAf3BALLfFAj+1kUhkTxmrWpVos9R/UYIA8AWX2p6cGI5WdwzVUA==}
+  '@next/swc-linux-arm64-musl@16.2.11':
+    resolution: {integrity: sha512-eIjcpx2fnnFSSkZDbTxy74KnokUXDjfoLClpWelfgHLf621aTqswhwXQ7GkD5K5rplrS6LZ/Bj+mVuvzluBOEg==}
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [linux]
     libc: [musl]
 
-  '@next/swc-linux-x64-gnu@16.2.9':
-    resolution: {integrity: sha512-xm0HfRNX+UkH4R3c18ynswjj5o5uEj/7iI9p9omdtTSIsRCzQqkGMA+10nzJ4EHnYC3as65IMhbbl5fWRUWHYg==}
+  '@next/swc-linux-x64-gnu@16.2.11':
+    resolution: {integrity: sha512-8WgzpaWMs46qJT9kiV47cje86L0x/Mu9t8/Gwj+pnbgW3rETVfCnaScPjlYUwNScpOozdcIMHWmAvuZJUonR2w==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [linux]
     libc: [glibc]
 
-  '@next/swc-linux-x64-musl@16.2.9':
-    resolution: {integrity: sha512-QumimHkGEG6vM3PfEDWKyKen03NcqLOkeKB1EfcPe7VxzmEiCa4jNnMyBn/US5zcd/VE1CI+O8Ovb3lfjVHfGw==}
+  '@next/swc-linux-x64-musl@16.2.11':
+    resolution: {integrity: sha512-I3UgPds7G4ZYnTb/H+5GBGuUT2DhAk6j0mL6A4s63RjFs74wB2hOWP0vaxsK+3NJraExt3eYEPQ/UtT0x/64Nw==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [linux]
     libc: [musl]
 
-  '@next/swc-win32-arm64-msvc@16.2.9':
-    resolution: {integrity: sha512-hzQpKZvw8rAwI6A2uQh6SacCSvNAXaIkPNsWwzqqfRiIMiXMfH936skDhz1OO6KpvdKkJrgHHtqQOq5PIXOvdQ==}
+  '@next/swc-win32-arm64-msvc@16.2.11':
+    resolution: {integrity: sha512-n89CjtcThnjrwgJMAiI5xbqwLY51zvwC9tSlArmVndAJLYVl9T9UAdlkXTmZvE++idoXe8KdglQlhNRdUp1c6g==}
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [win32]
 
-  '@next/swc-win32-x64-msvc@16.2.9':
-    resolution: {integrity: sha512-qr2VL3Ce5QrwgO2yh1ujSBawrimjVKX8FGF/cOynmdYKJY0BdHpGVNIRK1tqONB10Vkm25Ub1BD2bkjWs4+96w==}
+  '@next/swc-win32-x64-msvc@16.2.11':
+    resolution: {integrity: sha512-md8CLNggS1Dx9pUgApzps5uAf+N8GN9xywzmNx9vHAWo94HtBwCCqkSnhIrdfQe83Dhz8Lfo/20Nb1Zxal092w==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [win32]
@@ -2509,8 +2527,8 @@ packages:
     resolution: {integrity: sha512-GrwoxYN+uWlzO8uhUXRl0P+kHE4GtVPfYzVLcUxPL7KNdHKj66vvlhiweIHqYYXWlw+T8iLMp42Lm67ghw4WMQ==}
     engines: {node: '>= 4'}
 
-  dompurify@3.4.11:
-    resolution: {integrity: sha512-zhlUV12GsaRzMsf9q5M254YhA4+VuF0fG+QFqu6aYpoGlKtz+w8//jBcGVYBgQkR5GHjUomejY84AV+/uPbWdw==}
+  dompurify@3.4.12:
+    resolution: {integrity: sha512-zQvGet8Z2sWbQhCmfFz/T5QWH2oBmjnqK3qvOjaqaNLrLEF912WamU+ohnTp0TCep/MFVHpdJuCZEdFOdTnEFg==}
 
   domutils@2.8.0:
     resolution: {integrity: sha512-w96Cjofp72M5IIhpjgobBimYEfoPjx1Vx0BSX9P30WBdZW2WIKU0T1Bd0kz2eNZ9ikjKgHbEyKx8BB6H1L3h3A==}
@@ -3167,8 +3185,8 @@ packages:
       typescript:
         optional: true
 
-  next@16.2.9:
-    resolution: {integrity: sha512-MEOJiq/UvuezAdqVSceHbqDgZt1kDw2tpGVOlsdIoJsQdbN2JY2hpVG4xnXGkbdJUOEWhnRfiu/O4Hpc9Juwww==}
+  next@16.2.11:
+    resolution: {integrity: sha512-B339zaqbyK8cmxhoAvLrcwoabwCP1wz21zSzfqxqXAemTu2BXnH7tQnfcglKv1vnMUIDBc+Hth7XODQriTZiRQ==}
     engines: {node: '>=20.9.0'}
     hasBin: true
     peerDependencies:
@@ -3664,9 +3682,14 @@ packages:
     engines: {node: '>= 0.10'}
     hasBin: true
 
-  sharp@0.34.5:
-    resolution: {integrity: sha512-Ou9I5Ft9WNcCbXrU9cMgPBcCK8LiwLqcbywW3t4oDV37n1pzpuNLsYiAV8eODnjbtQlSDwZ2cUEeQz4E54Hltg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
+  sharp@0.35.3:
+    resolution: {integrity: sha512-ej0zVHuZGHCiABXcNxeYhpRnPNPAcvbG8RMdBAhDAxLKkCRVSpK3Iyu7qbqw3JMzoj0REeM6f3tJLtVwl0023Q==}
+    engines: {node: '>=20.9.0'}
+    peerDependencies:
+      '@types/node': '*'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
 
   shebang-command@2.0.0:
     resolution: {integrity: sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==}
@@ -4126,6 +4149,11 @@ snapshots:
 
   '@adobe/css-tools@4.5.0': {}
 
+  '@axe-core/playwright@4.12.1(playwright-core@1.61.1)':
+    dependencies:
+      axe-core: 4.12.1
+      playwright-core: 1.61.1
+
   '@babel/code-frame@7.29.7':
     dependencies:
       '@babel/helper-validator-identifier': 7.29.7
@@ -5083,98 +5111,108 @@ snapshots:
   '@img/colour@1.1.0':
     optional: true
 
-  '@img/sharp-darwin-arm64@0.34.5':
+  '@img/sharp-darwin-arm64@0.35.3':
     optionalDependencies:
-      '@img/sharp-libvips-darwin-arm64': 1.2.4
+      '@img/sharp-libvips-darwin-arm64': 1.3.2
     optional: true
 
-  '@img/sharp-darwin-x64@0.34.5':
+  '@img/sharp-darwin-x64@0.35.3':
     optionalDependencies:
-      '@img/sharp-libvips-darwin-x64': 1.2.4
+      '@img/sharp-libvips-darwin-x64': 1.3.2
+    optional: true
+
+  '@img/sharp-freebsd-wasm32@0.35.3':
+    dependencies:
+      '@img/sharp-wasm32': 0.35.3
     optional: true
 
-  '@img/sharp-libvips-darwin-arm64@1.2.4':
+  '@img/sharp-libvips-darwin-arm64@1.3.2':
     optional: true
 
-  '@img/sharp-libvips-darwin-x64@1.2.4':
+  '@img/sharp-libvips-darwin-x64@1.3.2':
     optional: true
 
-  '@img/sharp-libvips-linux-arm64@1.2.4':
+  '@img/sharp-libvips-linux-arm64@1.3.2':
     optional: true
 
-  '@img/sharp-libvips-linux-arm@1.2.4':
+  '@img/sharp-libvips-linux-arm@1.3.2':
     optional: true
 
-  '@img/sharp-libvips-linux-ppc64@1.2.4':
+  '@img/sharp-libvips-linux-ppc64@1.3.2':
     optional: true
 
-  '@img/sharp-libvips-linux-riscv64@1.2.4':
+  '@img/sharp-libvips-linux-riscv64@1.3.2':
     optional: true
 
-  '@img/sharp-libvips-linux-s390x@1.2.4':
+  '@img/sharp-libvips-linux-s390x@1.3.2':
     optional: true
 
-  '@img/sharp-libvips-linux-x64@1.2.4':
+  '@img/sharp-libvips-linux-x64@1.3.2':
     optional: true
 
-  '@img/sharp-libvips-linuxmusl-arm64@1.2.4':
+  '@img/sharp-libvips-linuxmusl-arm64@1.3.2':
     optional: true
 
-  '@img/sharp-libvips-linuxmusl-x64@1.2.4':
+  '@img/sharp-libvips-linuxmusl-x64@1.3.2':
     optional: true
 
-  '@img/sharp-linux-arm64@0.34.5':
+  '@img/sharp-linux-arm64@0.35.3':
     optionalDependencies:
-      '@img/sharp-libvips-linux-arm64': 1.2.4
+      '@img/sharp-libvips-linux-arm64': 1.3.2
     optional: true
 
-  '@img/sharp-linux-arm@0.34.5':
+  '@img/sharp-linux-arm@0.35.3':
     optionalDependencies:
-      '@img/sharp-libvips-linux-arm': 1.2.4
+      '@img/sharp-libvips-linux-arm': 1.3.2
     optional: true
 
-  '@img/sharp-linux-ppc64@0.34.5':
+  '@img/sharp-linux-ppc64@0.35.3':
     optionalDependencies:
-      '@img/sharp-libvips-linux-ppc64': 1.2.4
+      '@img/sharp-libvips-linux-ppc64': 1.3.2
     optional: true
 
-  '@img/sharp-linux-riscv64@0.34.5':
+  '@img/sharp-linux-riscv64@0.35.3':
     optionalDependencies:
-      '@img/sharp-libvips-linux-riscv64': 1.2.4
+      '@img/sharp-libvips-linux-riscv64': 1.3.2
     optional: true
 
-  '@img/sharp-linux-s390x@0.34.5':
+  '@img/sharp-linux-s390x@0.35.3':
     optionalDependencies:
-      '@img/sharp-libvips-linux-s390x': 1.2.4
+      '@img/sharp-libvips-linux-s390x': 1.3.2
     optional: true
 
-  '@img/sharp-linux-x64@0.34.5':
+  '@img/sharp-linux-x64@0.35.3':
     optionalDependencies:
-      '@img/sharp-libvips-linux-x64': 1.2.4
+      '@img/sharp-libvips-linux-x64': 1.3.2
     optional: true
 
-  '@img/sharp-linuxmusl-arm64@0.34.5':
+  '@img/sharp-linuxmusl-arm64@0.35.3':
     optionalDependencies:
-      '@img/sharp-libvips-linuxmusl-arm64': 1.2.4
+      '@img/sharp-libvips-linuxmusl-arm64': 1.3.2
     optional: true
 
-  '@img/sharp-linuxmusl-x64@0.34.5':
+  '@img/sharp-linuxmusl-x64@0.35.3':
     optionalDependencies:
-      '@img/sharp-libvips-linuxmusl-x64': 1.2.4
+      '@img/sharp-libvips-linuxmusl-x64': 1.3.2
     optional: true
 
-  '@img/sharp-wasm32@0.34.5':
+  '@img/sharp-wasm32@0.35.3':
     dependencies:
       '@emnapi/runtime': 1.11.1
     optional: true
 
-  '@img/sharp-win32-arm64@0.34.5':
+  '@img/sharp-webcontainers-wasm32@0.35.3':
+    dependencies:
+      '@img/sharp-wasm32': 0.35.3
+    optional: true
+
+  '@img/sharp-win32-arm64@0.35.3':
     optional: true
 
-  '@img/sharp-win32-ia32@0.34.5':
+  '@img/sharp-win32-ia32@0.35.3':
     optional: true
 
-  '@img/sharp-win32-x64@0.34.5':
+  '@img/sharp-win32-x64@0.35.3':
     optional: true
 
   '@jridgewell/gen-mapping@0.3.13':
@@ -5221,30 +5259,30 @@ snapshots:
       '@tybys/wasm-util': 0.10.3
     optional: true
 
-  '@next/env@16.2.9': {}
+  '@next/env@16.2.11': {}
 
-  '@next/swc-darwin-arm64@16.2.9':
+  '@next/swc-darwin-arm64@16.2.11':
     optional: true
 
-  '@next/swc-darwin-x64@16.2.9':
+  '@next/swc-darwin-x64@16.2.11':
     optional: true
 
-  '@next/swc-linux-arm64-gnu@16.2.9':
+  '@next/swc-linux-arm64-gnu@16.2.11':
     optional: true
 
-  '@next/swc-linux-arm64-musl@16.2.9':
+  '@next/swc-linux-arm64-musl@16.2.11':
     optional: true
 
-  '@next/swc-linux-x64-gnu@16.2.9':
+  '@next/swc-linux-x64-gnu@16.2.11':
     optional: true
 
-  '@next/swc-linux-x64-musl@16.2.9':
+  '@next/swc-linux-x64-musl@16.2.11':
     optional: true
 
-  '@next/swc-win32-arm64-msvc@16.2.9':
+  '@next/swc-win32-arm64-msvc@16.2.11':
     optional: true
 
-  '@next/swc-win32-x64-msvc@16.2.9':
+  '@next/swc-win32-x64-msvc@16.2.11':
     optional: true
 
   '@oxc-parser/binding-android-arm-eabi@0.127.0':
@@ -5536,7 +5574,7 @@ snapshots:
     dependencies:
       react: 19.2.7
 
-  '@storybook/nextjs@10.5.0(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(esbuild@0.28.1)(next@16.2.9(@babel/core@7.29.7)(@playwright/test@1.61.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(storybook@10.5.0(@types/react@19.2.17)(react@19.2.7))(type-fest@2.19.0)(typescript@6.0.3)(webpack-hot-middleware@2.26.1)(webpack@5.108.4(esbuild@0.28.1)(postcss@8.5.17))':
+  '@storybook/nextjs@10.5.0(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(esbuild@0.28.1)(next@16.2.11(@babel/core@7.29.7)(@playwright/test@1.61.1)(@types/node@26.1.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(storybook@10.5.0(@types/react@19.2.17)(react@19.2.7))(type-fest@2.19.0)(typescript@6.0.3)(webpack-hot-middleware@2.26.1)(webpack@5.108.4(esbuild@0.28.1)(postcss@8.5.17))':
     dependencies:
       '@babel/core': 7.29.7
       '@babel/plugin-syntax-bigint': 7.8.3(@babel/core@7.29.7)
@@ -5560,7 +5598,7 @@ snapshots:
       css-loader: 6.11.0(webpack@5.108.4(esbuild@0.28.1)(postcss@8.5.17))
       image-size: 2.0.2
       loader-utils: 3.3.1
-      next: 16.2.9(@babel/core@7.29.7)(@playwright/test@1.61.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      next: 16.2.11(@babel/core@7.29.7)(@playwright/test@1.61.1)(@types/node@26.1.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       node-polyfill-webpack-plugin: 2.0.1(webpack@5.108.4(esbuild@0.28.1)(postcss@8.5.17))
       postcss: 8.5.17
       postcss-loader: 8.2.1(postcss@8.5.17)(typescript@6.0.3)(webpack@5.108.4(esbuild@0.28.1)(postcss@8.5.17))
@@ -6530,7 +6568,7 @@ snapshots:
     dependencies:
       domelementtype: 2.3.0
 
-  dompurify@3.4.11:
+  dompurify@3.4.12:
     optionalDependencies:
       '@types/trusted-types': 2.0.7
 
@@ -7140,14 +7178,14 @@ snapshots:
 
   next-intl-swc-plugin-extractor@4.13.2: {}
 
-  next-intl@4.13.0(next@16.2.9(@babel/core@7.29.7)(@playwright/test@1.61.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)(typescript@6.0.3):
+  next-intl@4.13.0(next@16.2.11(@babel/core@7.29.7)(@playwright/test@1.61.1)(@types/node@26.1.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7))(react@19.2.7)(typescript@6.0.3):
     dependencies:
       '@formatjs/intl-localematcher': 0.8.9
       '@parcel/watcher': 2.5.6
       '@swc/core': 1.15.40
       icu-minify: 4.13.2
       negotiator: 1.0.0
-      next: 16.2.9(@babel/core@7.29.7)(@playwright/test@1.61.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
+      next: 16.2.11(@babel/core@7.29.7)(@playwright/test@1.61.1)(@types/node@26.1.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
       next-intl-swc-plugin-extractor: 4.13.2
       po-parser: 2.1.1
       react: 19.2.7
@@ -7157,9 +7195,9 @@ snapshots:
     transitivePeerDependencies:
       - '@swc/helpers'
 
-  next@16.2.9(@babel/core@7.29.7)(@playwright/test@1.61.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
+  next@16.2.11(@babel/core@7.29.7)(@playwright/test@1.61.1)(@types/node@26.1.1)(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
     dependencies:
-      '@next/env': 16.2.9
+      '@next/env': 16.2.11
       '@swc/helpers': 0.5.15
       baseline-browser-mapping: 2.10.43
       caniuse-lite: 1.0.30001805
@@ -7168,18 +7206,19 @@ snapshots:
       react-dom: 19.2.7(react@19.2.7)
       styled-jsx: 5.1.6(@babel/core@7.29.7)(react@19.2.7)
     optionalDependencies:
-      '@next/swc-darwin-arm64': 16.2.9
-      '@next/swc-darwin-x64': 16.2.9
-      '@next/swc-linux-arm64-gnu': 16.2.9
-      '@next/swc-linux-arm64-musl': 16.2.9
-      '@next/swc-linux-x64-gnu': 16.2.9
-      '@next/swc-linux-x64-musl': 16.2.9
-      '@next/swc-win32-arm64-msvc': 16.2.9
-      '@next/swc-win32-x64-msvc': 16.2.9
+      '@next/swc-darwin-arm64': 16.2.11
+      '@next/swc-darwin-x64': 16.2.11
+      '@next/swc-linux-arm64-gnu': 16.2.11
+      '@next/swc-linux-arm64-musl': 16.2.11
+      '@next/swc-linux-x64-gnu': 16.2.11
+      '@next/swc-linux-x64-musl': 16.2.11
+      '@next/swc-win32-arm64-msvc': 16.2.11
+      '@next/swc-win32-x64-msvc': 16.2.11
       '@playwright/test': 1.61.1
-      sharp: 0.34.5
+      sharp: 0.35.3(@types/node@26.1.1)
     transitivePeerDependencies:
       - '@babel/core'
+      - '@types/node'
       - babel-plugin-macros
 
   no-case@3.0.4:
@@ -7735,36 +7774,38 @@ snapshots:
       safe-buffer: 5.2.1
       to-buffer: 1.2.2
 
-  sharp@0.34.5:
+  sharp@0.35.3(@types/node@26.1.1):
     dependencies:
       '@img/colour': 1.1.0
       detect-libc: 2.1.2
       semver: 7.8.5
     optionalDependencies:
-      '@img/sharp-darwin-arm64': 0.34.5
-      '@img/sharp-darwin-x64': 0.34.5
-      '@img/sharp-libvips-darwin-arm64': 1.2.4
-      '@img/sharp-libvips-darwin-x64': 1.2.4
-      '@img/sharp-libvips-linux-arm': 1.2.4
-      '@img/sharp-libvips-linux-arm64': 1.2.4
-      '@img/sharp-libvips-linux-ppc64': 1.2.4
-      '@img/sharp-libvips-linux-riscv64': 1.2.4
-      '@img/sharp-libvips-linux-s390x': 1.2.4
-      '@img/sharp-libvips-linux-x64': 1.2.4
-      '@img/sharp-libvips-linuxmusl-arm64': 1.2.4
-      '@img/sharp-libvips-linuxmusl-x64': 1.2.4
-      '@img/sharp-linux-arm': 0.34.5
-      '@img/sharp-linux-arm64': 0.34.5
-      '@img/sharp-linux-ppc64': 0.34.5
-      '@img/sharp-linux-riscv64': 0.34.5
-      '@img/sharp-linux-s390x': 0.34.5
-      '@img/sharp-linux-x64': 0.34.5
-      '@img/sharp-linuxmusl-arm64': 0.34.5
-      '@img/sharp-linuxmusl-x64': 0.34.5
-      '@img/sharp-wasm32': 0.34.5
-      '@img/sharp-win32-arm64': 0.34.5
-      '@img/sharp-win32-ia32': 0.34.5
-      '@img/sharp-win32-x64': 0.34.5
+      '@img/sharp-darwin-arm64': 0.35.3
+      '@img/sharp-darwin-x64': 0.35.3
+      '@img/sharp-freebsd-wasm32': 0.35.3
+      '@img/sharp-libvips-darwin-arm64': 1.3.2
+      '@img/sharp-libvips-darwin-x64': 1.3.2
+      '@img/sharp-libvips-linux-arm': 1.3.2
+      '@img/sharp-libvips-linux-arm64': 1.3.2
+      '@img/sharp-libvips-linux-ppc64': 1.3.2
+      '@img/sharp-libvips-linux-riscv64': 1.3.2
+      '@img/sharp-libvips-linux-s390x': 1.3.2
+      '@img/sharp-libvips-linux-x64': 1.3.2
+      '@img/sharp-libvips-linuxmusl-arm64': 1.3.2
+      '@img/sharp-libvips-linuxmusl-x64': 1.3.2
+      '@img/sharp-linux-arm': 0.35.3
+      '@img/sharp-linux-arm64': 0.35.3
+      '@img/sharp-linux-ppc64': 0.35.3
+      '@img/sharp-linux-riscv64': 0.35.3
+      '@img/sharp-linux-s390x': 0.35.3
+      '@img/sharp-linux-x64': 0.35.3
+      '@img/sharp-linuxmusl-arm64': 0.35.3
+      '@img/sharp-linuxmusl-x64': 0.35.3
+      '@img/sharp-webcontainers-wasm32': 0.35.3
+      '@img/sharp-win32-arm64': 0.35.3
+      '@img/sharp-win32-ia32': 0.35.3
+      '@img/sharp-win32-x64': 0.35.3
+      '@types/node': 26.1.1
     optional: true
 
   shebang-command@2.0.0:
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 61f2974..d14aaa6 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -39,6 +39,13 @@ allowBuilds:
 # transitively at 7.29.0 (next > styled-jsx > @babel/core), which
 # `pnpm audit --prod` rejects for GHSA-4x5r-pxfx-6jf8 (arbitrary file
 # read via a sourceMappingURL comment, fixed in 7.29.1).
+#
+# `sharp` is forced to the patched 0.35 line. Next (even 16.2.11) still
+# pins it transitively at ^0.34.5 (next > sharp, used by the image
+# optimizer), which `pnpm audit --prod` rejects for GHSA-f88m-g3jw-g9cj
+# (libvips CVE-2026-33327/-33328/-35590/-35591, fixed in sharp 0.35.0).
+# Drop this once Next's own range moves to >=0.35.
 overrides:
   postcss: ^8.5.12
   '@babel/core': ^7.29.1
+  sharp: ^0.35.0
diff --git a/tests/e2e/a11y.spec.ts b/tests/e2e/a11y.spec.ts
new file mode 100644
index 0000000..80c0f04
--- /dev/null
+++ b/tests/e2e/a11y.spec.ts
@@ -0,0 +1,343 @@
+import {
+  type APIRequestContext,
+  expect,
+  type Page,
+  test,
+} from "@playwright/test";
+import { expectNoBlockingViolations, type KnownIssue } from "./helpers/axe";
+
+/**
+ * Blocking accessibility gate.
+ *
+ * Axe-core scans of the five highest-traffic surfaces: /welcome, the
+ * onboarding import-matching step, /dashboard, the app detail page,
+ * and the mobile navigation drawer. Serious/critical WCAG A/AA
+ * violations fail CI (this file runs inside the `quality` job's
+ * Playwright step like every other spec here).
+ *
+ * Known, already-tracked defects are suppressed
+ * via per-surface allowlists in `helpers/axe.ts` style — each entry
+ * names the fix that must delete it. Everything else is a regression
+ * and fails immediately.
+ *
+ * Keyboard-only coverage lives in `onboarding-keyboard.spec.ts`; this
+ * file is DOM/ARIA analysis only (axe cannot see that a plain
+ * clickable <div> is interactive, which is exactly why both files
+ * exist).
+ */
+
+const sameOriginHeaders = {
+  origin: process.env.PLAYWRIGHT_BASE_URL ?? "http://127.0.0.1:3000",
+};
+
+// Skip the browser flow inside CODEX_SANDBOX runs — matches the
+// pattern used by every other spec in this directory.
+const browserFlow = process.env.CODEX_SANDBOX ? test.skip : test;
+
+// ---------------------------------------------------------------------------
+// Known tracked issues — delete each entry in the same PR as its fix
+// ---------------------------------------------------------------------------
+
+/** Reason strings, shared so the entries stay greppable per fixing PR. */
+const R_NAMES = "pending fix: accessible names / labels / structure";
+const R_CONTRAST = "pending fix: colour-contrast sweep of secondary text/links";
+
+const contrast = (match: string): KnownIssue => ({
+  rule: "color-contrast",
+  match,
+  reason: R_CONTRAST,
+});
+
+/**
+ * The unlabeled app-names textarea (a known, tracked defect) is NOT
+ * listed here: axe's accessible-name computation accepts a placeholder,
+ * so the `label` rule never fires on it. That defect is covered by
+ * human review + the keyboard spec, not this gate.
+ */
+const KNOWN_ONBOARD: KnownIssue[] = [
+  contrast("kbd-hint-link"),
+  contrast("site-info-hint-link"),
+];
+
+/** Step 2 only — the violation exists while the import table is empty
+ * (its hint <div> is the sole child of a role="list" container), so it
+ * disappears by the match step once rows are committed. */
+const KNOWN_ONBOARD_STEP2: KnownIssue[] = [
+  ...KNOWN_ONBOARD,
+  {
+    rule: "aria-required-children",
+    match: "imported-apps-table-rows",
+    reason: R_NAMES,
+  },
+];
+
+const KNOWN_WELCOME: KnownIssue[] = [
+  // SiteInfoHint's floating pill links (Privacy policy / Legal / GitHub).
+  contrast("site-info-hint-link"),
+];
+
+const KNOWN_DASHBOARD: KnownIssue[] = [
+  contrast("site-info-hint-link"),
+  contrast("task-list-card-attribution"),
+  contrast("task-list-add-tray"),
+  contrast("task-journey-detail-actions"),
+  contrast("home-section-count"),
+  contrast("home-layout-footer"),
+  contrast("coachmark-"),
+];
+
+const KNOWN_APP_DETAIL: KnownIssue[] = [
+  // Accordion header nests the InfoTooltip <button> inside a
+  // role="button" element.
+  { rule: "nested-interactive", match: "accordion-header", reason: R_NAMES },
+  // Gate-found: the collapsed annotations sidebar is aria-hidden but
+  // keeps focusable children in the tab order.
+  { rule: "aria-hidden-focus", match: "annotations-sidebar", reason: R_NAMES },
+  contrast("detail-a11y-chip"),
+  contrast("detail-tab"),
+  contrast("app-detail-footer-link"),
+  contrast("kbd-hint-link"),
+];
+
+const KNOWN_MOBILE_NAV: KnownIssue[] = [
+  // "Add Apps" link loses its accessible name in compact tiers (label
+  // display:none, visible "+" aria-hidden).
+  { rule: "link-name", match: "nav-add-apps", reason: R_NAMES },
+  // Gate-found: the brand/home link is icon-only with no accessible
+  // name at mobile width.
+  { rule: "link-name", match: "nav-brand", reason: R_NAMES },
+  contrast("nav-drawer-link"),
+];
+
+// ---------------------------------------------------------------------------
+// Shared setup helpers
+// ---------------------------------------------------------------------------
+
+/** Single ambiguous fixture so the matching step renders the candidate
+ * list UI (the surface the candidate-row fix rebuilds). */
+const NOTES_CANDIDATES = [
+  {
+    appleId: "111100000",
+    name: "Notes",
+    developer: "Random Notes Co",
+    iconUrl:
+      "https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/notes-other.png/100x100bb.jpg",
+    url: "https://apps.apple.com/us/app/notes/id111100000",
+    bundleId: "com.example.notes",
+  },
+  {
+    appleId: "1110145109",
+    name: "Notes",
+    developer: "Apple",
+    iconUrl:
+      "https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/notes-apple.png/100x100bb.jpg",
+    url: "https://apps.apple.com/us/app/notes/id1110145109",
+    bundleId: "com.apple.mobilenotes",
+  },
+];
+
+async function mockNotesSearch(page: Page) {
+  await page.route("**/api/search", async (route) => {
+    const body = route.request().postDataJSON() as {
+      rows?: Array<{ name?: string }>;
+    };
+    const results = (body.rows ?? []).map((row) => {
+      const query = (row.name ?? "").trim();
+      const candidates =
+        query === "Notes"
+          ? NOTES_CANDIDATES.map((c) => ({ ...c, searchQuery: query }))
+          : [];
+      return { query, candidates };
+    });
+    await route.fulfill({
+      status: 200,
+      contentType: "application/json",
+      body: JSON.stringify({ results }),
+    });
+  });
+}
+
+/** Same wizard walk as onboard-import.spec.ts — see the `toPass` note
+ * there for why the method click is polled. */
+async function openWizardToTextEntry(page: Page) {
+  await page.goto("/onboard?preview=fresh");
+  await page.getByText("Other import options").click();
+  const manualCard = page.getByTestId("onboard-method-manual");
+  await expect(async () => {
+    await manualCard.click();
+    await expect(manualCard).toHaveAttribute("aria-checked", "true", {
+      timeout: 500,
+    });
+  }).toPass({ timeout: 10_000 });
+  await page.getByTestId("onboard-step1-continue").click();
+}
+
+/** Seed the canned demo apps (idempotent — re-seeding reports
+ * "skipped" rows) and return Instagram's app id for the detail scan. */
+async function seedCannedApps(request: APIRequestContext): Promise<string> {
+  const seedRes = await request.post(
+    "/api/dev/seed-sample-data?source=canned",
+    {
+      headers: sameOriginHeaders,
+    }
+  );
+  await expect(seedRes).toBeOK();
+  const seedBody = (await seedRes.json()) as {
+    apps?: Array<{ id: string; name: string }>;
+    results?: Array<{ id: string; name: string }>;
+  };
+  const seeded = seedBody.apps ?? seedBody.results ?? [];
+  const instagram = seeded.find((s) => s.name === "Instagram");
+  expect(
+    instagram?.id,
+    "expected the canned Instagram app to seed"
+  ).toBeTruthy();
+  return String(instagram?.id);
+}
+
+async function setDefaultFocus(request: APIRequestContext) {
+  const focus = await request.post("/api/focus", {
+    headers: sameOriginHeaders,
+    data: {
+      audience: "self",
+      monitor: true,
+      cleanup: false,
+      minimal: false,
+      accessibility: true,
+    },
+  });
+  await expect(focus).toBeOK();
+}
+
+// ---------------------------------------------------------------------------
+// 1. /welcome — first-run splash + focus form
+// ---------------------------------------------------------------------------
+
+browserFlow(
+  "a11y: /welcome has no blocking violations",
+  async ({ page, request }) => {
+    // Reset so welcome renders the first-run experience instead of
+    // redirecting to a populated dashboard.
+    const reset = await request.post("/api/reset", {
+      headers: sameOriginHeaders,
+    });
+    await expect(reset).toBeOK();
+
+    await page.goto("/welcome");
+    await expect(page.locator(".focus-purpose-card").first()).toBeVisible();
+
+    await expectNoBlockingViolations(page, "welcome", {
+      knownIssues: KNOWN_WELCOME,
+    });
+  }
+);
+
+// ---------------------------------------------------------------------------
+// 2. Onboarding import matching — text entry + candidate list
+// ---------------------------------------------------------------------------
+
+browserFlow(
+  "a11y: onboarding text-entry and match steps have no blocking violations",
+  async ({ page, request }) => {
+    // The welcome spec above resets the DB; without a stored focus the
+    // wizard route bounces back to /welcome, so seed one first — same
+    // invariant every wizard spec in this directory maintains.
+    await setDefaultFocus(request);
+    await mockNotesSearch(page);
+    await openWizardToTextEntry(page);
+
+    // Step 2 — the app-names textarea view.
+    await expect(page.getByTestId("onboard-app-names")).toBeVisible();
+    await expectNoBlockingViolations(page, "onboard-step2", {
+      knownIssues: KNOWN_ONBOARD_STEP2,
+    });
+
+    // Step 3 — matched block with the candidate list expanded, so the
+    // candidate rows (the surface awaiting native controls) are in
+    // the scanned DOM.
+    await page.getByTestId("onboard-app-names").fill("Notes");
+    await page.getByTestId("imported-apps-add").click();
+    await page.getByTestId("onboard-search").click();
+
+    const block = page
+      .locator(".search-result-item")
+      .filter({ hasText: "Notes" });
+    await expect(block).toHaveCount(1);
+    await block.locator(".show-more-btn").click();
+    await expect(block.locator(".candidate-row").first()).toBeVisible();
+
+    await expectNoBlockingViolations(page, "onboard-match", {
+      knownIssues: KNOWN_ONBOARD,
+    });
+  }
+);
+
+// ---------------------------------------------------------------------------
+// 3. /dashboard — home view with seeded apps
+// ---------------------------------------------------------------------------
+
+browserFlow(
+  "a11y: /dashboard has no blocking violations",
+  async ({ page, request }) => {
+    await setDefaultFocus(request);
+    await seedCannedApps(request);
+
+    await page.goto("/dashboard");
+    await expect(page.locator("main").first()).toBeVisible();
+
+    await expectNoBlockingViolations(page, "dashboard", {
+      knownIssues: KNOWN_DASHBOARD,
+    });
+  }
+);
+
+// ---------------------------------------------------------------------------
+// 4. App detail — seeded Instagram
+// ---------------------------------------------------------------------------
+
+browserFlow(
+  "a11y: app detail has no blocking violations",
+  async ({ page, request }) => {
+    await setDefaultFocus(request);
+    const instagramId = await seedCannedApps(request);
+
+    await page.goto(`/apps/${instagramId}`);
+    await expect(page.locator("h1.detail-hero-name")).toHaveText("Instagram");
+
+    await expectNoBlockingViolations(page, "app-detail", {
+      knownIssues: KNOWN_APP_DETAIL,
+    });
+  }
+);
+
+// ---------------------------------------------------------------------------
+// 5. Mobile navigation — compact tier + open drawer
+// ---------------------------------------------------------------------------
+
+browserFlow(
+  "a11y: mobile nav drawer has no blocking violations",
+  async ({ page, request }) => {
+    await setDefaultFocus(request);
+    await seedCannedApps(request);
+
+    await page.setViewportSize({ width: 375, height: 812 });
+    await page.goto("/dashboard");
+    await expect(page.locator("main").first()).toBeVisible();
+
+    // Open the drawer so its links are in the scanned DOM alongside the
+    // compact top bar (where the icon-only Add Apps link lives).
+    const menuTrigger = page.locator(".nav-menu-trigger");
+    await expect(menuTrigger).toBeVisible();
+    await menuTrigger.click();
+
+    // Scope the scan to the nav element (compact bar + drawer both live
+    // inside `nav.nav`). Unscoped, this scan re-covers the dashboard
+    // behind the drawer, whose TaskList renders state-dependently
+    // (attribution/add-tray nodes appear or not per run) — the desktop
+    // dashboard scan above already owns that surface deterministically.
+    await expectNoBlockingViolations(page, "mobile-nav", {
+      include: "nav.nav",
+      knownIssues: KNOWN_MOBILE_NAV,
+    });
+  }
+);
diff --git a/tests/e2e/helpers/axe.ts b/tests/e2e/helpers/axe.ts
new file mode 100644
index 0000000..da1fc0b
--- /dev/null
+++ b/tests/e2e/helpers/axe.ts
@@ -0,0 +1,154 @@
+import AxeBuilder from "@axe-core/playwright";
+import type { Page } from "@playwright/test";
+
+/**
+ * Shared axe-core harness for the E2E accessibility gate
+ * (`tests/e2e/a11y.spec.ts`).
+ *
+ * Policy: violations with `serious` or
+ * `critical` impact FAIL the suite; `minor`/`moderate` findings are
+ * logged to the Playwright report but don't block. Scans run against
+ * the WCAG 2.x A/AA rule tags only — best-practice rules stay
+ * advisory in the Storybook a11y addon.
+ *
+ * Known-issue allowlist: defects that are already tracked for fixing
+ * are filtered per rule + selector so the gate stays green while
+ * blocking NEW regressions. Every entry names the pending fix that
+ * removes it — when that fix lands, the run prints a
+ * "no longer detected" notice and the entry must be deleted in the
+ * same PR.
+ */
+
+const WCAG_TAGS = ["wcag2a", "wcag2aa", "wcag21a", "wcag21aa"];
+
+const BLOCKING_IMPACTS = new Set(["serious", "critical"]);
+
+export interface KnownIssue {
+  /**
+   * Substring matched against each violating node's CSS target AND its
+   * outer HTML (axe often picks attribute selectors like
+   * `a[href$="privacy-policy"]` over class names, so the class usually
+   * only appears in the HTML). An entry only suppresses nodes that
+   * contain this string — the same rule firing elsewhere on the page
+   * still fails the gate.
+   */
+  match: string;
+  /** Roadmap anchor + PR that deletes this entry. */
+  reason: string;
+  /** axe rule id, e.g. "label" or "nested-interactive". */
+  rule: string;
+}
+
+interface ViolationNode {
+  html: string;
+  target: string[];
+}
+
+interface Violation {
+  help: string;
+  helpUrl: string;
+  id: string;
+  impact: string | null;
+  nodes: ViolationNode[];
+}
+
+function nodeIsKnown(
+  rule: string,
+  node: ViolationNode,
+  knownIssues: KnownIssue[]
+): boolean {
+  const haystack = `${node.target.join(" ")} ${node.html}`;
+  return knownIssues.some((k) => k.rule === rule && haystack.includes(k.match));
+}
+
+function formatViolations(label: string, violations: Violation[]): string {
+  const lines = violations.map((v) => {
+    const nodes = v.nodes
+      .map(
+        (n) => `      ${n.target.join(" ")}\n        ${n.html.slice(0, 200)}`
+      )
+      .join("\n");
+    return `  [${v.impact}] ${v.id}: ${v.help}\n    ${v.helpUrl}\n${nodes}`;
+  });
+  return `axe (${label}) found ${violations.length} blocking violation(s):\n${lines.join("\n")}`;
+}
+
+/**
+ * Run an axe scan and throw on serious/critical WCAG A/AA violations
+ * that aren't covered by `knownIssues`.
+ *
+ * @param label surface name used in failure output, e.g. "welcome".
+ * @param options.include restrict the scan to a CSS selector (e.g. an
+ *   open dialog) instead of the whole document.
+ */
+export async function expectNoBlockingViolations(
+  page: Page,
+  label: string,
+  options: {
+    knownIssues?: KnownIssue[];
+    include?: string;
+  } = {}
+): Promise<void> {
+  const knownIssues = options.knownIssues ?? [];
+
+  let builder = new AxeBuilder({ page }).withTags(WCAG_TAGS);
+  if (options.include) {
+    builder = builder.include(options.include);
+  }
+  const results = await builder.analyze();
+
+  const blocking: Violation[] = [];
+  const advisory: Violation[] = [];
+  const suppressedRules = new Set<string>();
+
+  for (const violation of results.violations as Violation[]) {
+    const unknownNodes = violation.nodes.filter(
+      (node) => !nodeIsKnown(violation.id, node, knownIssues)
+    );
+    if (unknownNodes.length < violation.nodes.length) {
+      suppressedRules.add(violation.id);
+    }
+    if (unknownNodes.length === 0) {
+      continue;
+    }
+    const remaining = { ...violation, nodes: unknownNodes };
+    if (BLOCKING_IMPACTS.has(violation.impact ?? "")) {
+      blocking.push(remaining);
+    } else {
+      advisory.push(remaining);
+    }
+  }
+
+  // Surface allowlist entries whose defect no longer reproduces so the
+  // fixing PR remembers to delete them (stale entries would mask a
+  // future regression on the same selector).
+  for (const known of knownIssues) {
+    const stillPresent = (results.violations as Violation[]).some(
+      (v) =>
+        v.id === known.rule &&
+        v.nodes.some((n) => nodeIsKnown(v.id, n, [known]))
+    );
+    if (!stillPresent) {
+      console.log(
+        `[a11y:${label}] known issue no longer detected — remove its allowlist entry: ` +
+          `${known.rule} @ ${known.match} (${known.reason})`
+      );
+    }
+  }
+  if (suppressedRules.size > 0) {
+    console.log(
+      `[a11y:${label}] suppressed known tracked issues: ${[...suppressedRules].join(", ")}`
+    );
+  }
+  if (advisory.length > 0) {
+    console.log(
+      `[a11y:${label}] non-blocking findings (minor/moderate): ${advisory
+        .map((v) => `${v.id}×${v.nodes.length}`)
+        .join(", ")}`
+    );
+  }
+
+  if (blocking.length > 0) {
+    throw new Error(formatViolations(label, blocking));
+  }
+}
diff --git a/tests/e2e/helpers/keyboard.ts b/tests/e2e/helpers/keyboard.ts
new file mode 100644
index 0000000..c0ec17b
--- /dev/null
+++ b/tests/e2e/helpers/keyboard.ts
@@ -0,0 +1,41 @@
+import { expect, type Locator, type Page } from "@playwright/test";
+
+/**
+ * Keyboard-navigation helpers for the a11y E2E specs.
+ *
+ * `tabTo` walks focus forward with Tab until the target is focused,
+ * asserting keyboard *reachability* without pinning the exact tab
+ * order (which legitimately shifts as surfaces evolve). The budget is
+ * generous but finite so an unreachable control fails loudly instead
+ * of spinning.
+ */
+
+export async function tabTo(
+  page: Page,
+  target: Locator,
+  { maxTabs = 40 }: { maxTabs?: number } = {}
+): Promise<void> {
+  for (let i = 0; i < maxTabs; i++) {
+    if (await isFocused(target)) {
+      return;
+    }
+    await page.keyboard.press("Tab");
+  }
+  // One final check so the failure message names the target.
+  await expect(
+    target,
+    `target did not receive focus within ${maxTabs} Tab presses — it is not keyboard-reachable`
+  ).toBeFocused();
+}
+
+async function isFocused(target: Locator): Promise<boolean> {
+  try {
+    return await target.evaluate(
+      (el) => el === document.activeElement,
+      undefined,
+      { timeout: 250 }
+    );
+  } catch {
+    return false;
+  }
+}
diff --git a/tests/e2e/onboarding-keyboard.spec.ts b/tests/e2e/onboarding-keyboard.spec.ts
new file mode 100644
index 0000000..2dafcb9
--- /dev/null
+++ b/tests/e2e/onboarding-keyboard.spec.ts
@@ -0,0 +1,234 @@
+import { expect, type Page, test } from "@playwright/test";
+import { tabTo } from "./helpers/keyboard";
+
+/**
+ * Keyboard-only onboarding coverage.
+ *
+ * Walks the manual text-entry import path using ONLY the keyboard —
+ * no mouse events. This is the half of the a11y gate that axe cannot
+ * provide: axe analyses ARIA/DOM structure, but a plain clickable
+ * <div> is invisible to it, so keyboard operability has to be proven
+ * by actually driving the flow.
+ *
+ * Runs on Chromium (the suite's only project) — macOS Safari's
+ * "Keyboard navigation" system setting makes WebKit skip buttons and
+ * links entirely, which is an OS behaviour, not a bug (see AGENTS.md).
+ *
+ * The candidate-selection spec at the bottom is `fixme`-gated: it is
+ * the acceptance test for the tracked candidate-selection fix
+ * (candidate rows are bare clickable <div>s today). Remove the `fixme`
+ * in the PR that converts them to native controls.
+ */
+
+const sameOriginHeaders = {
+  origin: process.env.PLAYWRIGHT_BASE_URL ?? "http://127.0.0.1:3000",
+};
+
+// Skip the browser flow inside CODEX_SANDBOX runs — matches the
+// pattern used by every other spec in this directory.
+const browserFlow = process.env.CODEX_SANDBOX ? test.skip : test;
+
+const FIXTURES: Record<
+  string,
+  Array<{
+    appleId: string;
+    bundleId: string;
+    developer: string;
+    iconUrl: string;
+    name: string;
+    url: string;
+  }>
+> = {
+  Clock: [
+    {
+      appleId: "1584215688",
+      name: "Clock",
+      developer: "Apple",
+      iconUrl:
+        "https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/clock.png/100x100bb.jpg",
+      url: "https://apps.apple.com/us/app/clock/id1584215688",
+      bundleId: "com.apple.mobiletimer",
+    },
+  ],
+  Notes: [
+    {
+      appleId: "111100000",
+      name: "Notes",
+      developer: "Random Notes Co",
+      iconUrl:
+        "https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/notes-other.png/100x100bb.jpg",
+      url: "https://apps.apple.com/us/app/notes/id111100000",
+      bundleId: "com.example.notes",
+    },
+    {
+      appleId: "1110145109",
+      name: "Notes",
+      developer: "Apple",
+      iconUrl:
+        "https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/notes-apple.png/100x100bb.jpg",
+      url: "https://apps.apple.com/us/app/notes/id1110145109",
+      bundleId: "com.apple.mobilenotes",
+    },
+  ],
+};
+
+async function mockSearchFromFixtures(page: Page) {
+  await page.route("**/api/search", async (route) => {
+    const body = route.request().postDataJSON() as {
+      rows?: Array<{ name?: string }>;
+    };
+    const results = (body.rows ?? []).map((row) => {
+      const query = (row.name ?? "").trim();
+      const candidates = (FIXTURES[query] ?? []).map((c) => ({
+        ...c,
+        searchQuery: query,
+      }));
+      return { query, candidates };
+    });
+    await route.fulfill({
+      status: 200,
+      contentType: "application/json",
+      body: JSON.stringify({ results }),
+    });
+  });
+}
+
+test.beforeEach(async ({ request }) => {
+  const focus = await request.post("/api/focus", {
+    headers: sameOriginHeaders,
+    data: {
+      audience: "self",
+      monitor: true,
+      cleanup: false,
+      minimal: false,
+      accessibility: true,
+    },
+  });
+  await expect(focus).toBeOK();
+});
+
+/**
+ * Keyboard-only walk from the wizard's method step to the app-names
+ * textarea: open the "Other import options" disclosure, move the
+ * method radiogroup to "manual", and continue to step 2.
+ */
+async function keyboardToTextEntry(page: Page) {
+  await page.goto("/onboard?preview=fresh");
+
+  // The manual method card sits inside the collapsed "Other import
+  // options" <details>, so open the disclosure first — <summary> is
+  // natively focusable and Enter toggles it pre-hydration.
+  const summary = page.getByText("Other import options");
+  await expect(summary).toBeVisible();
+  await tabTo(page, summary);
+  await page.keyboard.press("Enter");
+
+  // Every method radio ships tabindex="0" (no roving tabindex), so Tab
+  // reaches the manual card directly. Selection via Space is polled the
+  // same way the click-based specs poll their click — React may not
+  // have attached handlers yet on a cold start (see the `toPass` note
+  // in onboard-import.spec.ts).
+  const manualCard = page.getByTestId("onboard-method-manual");
+  await expect(manualCard).toBeVisible();
+  await tabTo(page, manualCard);
+  await expect(async () => {
+    await page.keyboard.press("Space");
+    await expect(manualCard).toHaveAttribute("aria-checked", "true", {
+      timeout: 500,
+    });
+  }).toPass({ timeout: 10_000 });
+
+  // Continue to step 2.
+  const continueBtn = page.getByTestId("onboard-step1-continue");
+  await tabTo(page, continueBtn);
+  await page.keyboard.press("Enter");
+  await expect(page.getByTestId("onboard-app-names")).toBeVisible();
+}
+
+browserFlow(
+  "keyboard-only: manual entry from method step through search to a confirmed match",
+  async ({ page }) => {
+    await mockSearchFromFixtures(page);
+    await keyboardToTextEntry(page);
+
+    // Type an app name into the staging textarea and commit it via the
+    // "+ Add" button — all keyboard.
+    const textarea = page.getByTestId("onboard-app-names");
+    await tabTo(page, textarea);
+    await page.keyboard.type("Clock");
+
+    const addBtn = page.getByTestId("imported-apps-add");
+    await tabTo(page, addBtn);
+    await page.keyboard.press("Enter");
+    await expect(page.locator(".imported-apps-row")).toHaveCount(1);
+
+    // Run the search from the keyboard.
+    const searchBtn = page.getByTestId("onboard-search");
+    await tabTo(page, searchBtn);
+    await page.keyboard.press("Enter");
+
+    // The match auto-confirms; the import CTA must be enabled and
+    // keyboard-reachable.
+    const block = page
+      .locator(".search-result-item")
+      .filter({ hasText: "Clock" });
+    await expect(block).toHaveCount(1);
+    await expect(block.locator(".search-result-confirmed")).toHaveCount(1);
+
+    const importBtn = page.getByTestId("onboard-confirm-import");
+    await expect(importBtn).toBeEnabled();
+    await tabTo(page, importBtn);
+    await page.keyboard.press("Enter");
+    await expect(
+      page.getByRole("heading", { name: "Import complete" })
+    ).toBeVisible();
+  }
+);
+
+// ---------------------------------------------------------------------------
+// Acceptance test for the tracked candidate-selection fix
+// ---------------------------------------------------------------------------
+//
+// The candidate rows in SearchResultBlock are bare clickable <div>s
+// today (no role, no tabIndex, no keyboard handler), so this spec
+// cannot pass. It documents the required end state: expand the
+// alternate candidates and choose one using only the keyboard. When
+// the fix converts the rows to native controls (radiogroup pattern, like
+// the wizard's method cards), remove this `fixme` and the spec becomes
+// the regression guard for that fix.
+
+// `test.fixme` (not `browserFlow.fixme`) — the CODEX_SANDBOX alias is
+// `test.skip`, which has no `.fixme` property; fixme already never runs.
+test.fixme("keyboard-only: pick a non-default candidate in the match step (pending candidate-row fix)", async ({
+  page,
+}) => {
+  await mockSearchFromFixtures(page);
+  await keyboardToTextEntry(page);
+
+  const textarea = page.getByTestId("onboard-app-names");
+  await tabTo(page, textarea);
+  await page.keyboard.type("Notes");
+  const addBtn = page.getByTestId("imported-apps-add");
+  await tabTo(page, addBtn);
+  await page.keyboard.press("Enter");
+  const searchBtn = page.getByTestId("onboard-search");
+  await tabTo(page, searchBtn);
+  await page.keyboard.press("Enter");
+
+  const block = page
+    .locator(".search-result-item")
+    .filter({ hasText: "Notes" });
+  await expect(block).toHaveCount(1);
+
+  // Expand the alternate candidates from the keyboard.
+  const showMore = block.locator(".show-more-btn");
+  await tabTo(page, showMore);
+  await page.keyboard.press("Enter");
+
+  // Reach the Apple candidate row and select it — this is the part
+  // that requires the candidate rows to become native controls.
+  const appleRow = block.locator(".candidate-row").filter({ hasText: "Apple" });
+  await tabTo(page, appleRow);
+  await page.keyboard.press("Space");
+  await expect(appleRow).toHaveClass(/chosen/);
+});
diff --git a/tsconfig.json b/tsconfig.json
index 0041929..f569953 100644
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -31,7 +31,9 @@
     ".next-test/types/**/*.ts",
     ".next-test/dev/types/**/*.ts",
     ".next-stress/types/**/*.ts",
-    ".next-stress/dev/types/**/*.ts"
+    ".next-stress/dev/types/**/*.ts",
+    ".next-e2e/types/**/*.ts",
+    ".next-e2e/dev/types/**/*.ts"
   ],
   "exclude": ["node_modules"]
 }