🎨 Palette: 파일 업로드 시 클라이언트 단 유효성 검사 추가

[seonghobae]

💡 What: 드래그 앤 드롭으로 파일을 업로드할 때 허용되지 않은 파일 형식(오디오/비디오가 아닌 파일)에 대한 클라이언트 단의 즉각적인 에러 메시지(유효성 검사)를 추가했습니다.\n🎯 Why: HTML accept 속성만으로는 드래그 앤 드롭을 통한 잘못된 파일 업로드를 막을 수 없어, 사용자가 폼을 제출하기 전에 즉각적이고 명확한 피드백을 제공하기 위함입니다.\n📸 Before/After: 드래그 앤 드롭 시 잘못된 파일일 경우 즉시 에러 메시지가 표시됩니다.\n♿ Accessibility: aria-invalid 속성을 활용하여 스크린 리더 사용자에게도 잘못된 입력 상태를 알립니다.

---

PR created automatically by Jules for task 2409373782217812033 started by @seonghobae

---

Summary by CodeRabbit

• 새로운 기능

  • 오디오 및 비디오 파일 업로드 시 클라이언트 측 형식 검증을 추가했습니다.
  • 허용되지 않은 파일은 업로드 전에 차단되며, 입력 영역에 오류 메시지가 표시됩니다.
  • 단일 파일 선택과 여러 파일 선택, 드래그 앤 드롭 입력에 검증이 적용됩니다.

• 문서

  • 파일 입력 검증과 관련된 학습 기록을 추가했습니다.

[google-labs-jules]

👋 Jules, reporting for duty! I'm here to lend a hand with this pull request.

When you start a review, I'll add a 👀 emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down.

I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job!

For more direct control, you can switch me to Reactive Mode. When this mode is on, I will only act on comments where you specifically mention me with @jules. You can find this option in the Pull Request section of your global Jules UI settings. You can always switch back!

New to Jules? Learn more at jules.google/docs.

---

For security, I will only act on instructions from the user who triggered this task.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: eebb60a5-113a-4016-a86c-1e80cae79f54

📥 Commits

Reviewing files that changed from the base of the PR and between a8e4956 and 2310d9a.

📒 Files selected for processing (2)

• .jules/palette.md
• saas_web.py

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

파일 미리보기 로직이 단일 파일과 여러 파일의 MIME 유형을 검증합니다. 지원되지 않는 파일에는 사용자 정의 유효성 메시지와 오류 표시를 적용합니다. 관련 학습 일지를 추가합니다.

Changes

파일 유형 검증

Layer / File(s)	Summary
클라이언트 파일 유형 검증 saas_web.py, .jules/palette.md	updateFileSizePreview와 updateBatchFilePreview가 MIME 유형을 검사합니다. 지원되지 않는 파일은 크기 검증 전에 거부하고 aria-invalid 및 오류 메시지를 설정합니다. 파일 입력 검증 관련 학습 일지를 추가합니다.

Estimated code review effort: 2 (Simple) | ~10 minutes

Merge Risk: ⚪ Minimal · up to 2310d

The PR adds immediate client-side feedback for unsupported file types while preserving existing server-side enforcement. No actionable merge-blocking risk remains after normal checks and review.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	제목은 파일 업로드에 클라이언트 측 유효성 검사를 추가하는 주요 변경 사항을 정확하고 간결하게 설명합니다.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 1…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 1 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch palette-ux-file-validation-2409373782217812033

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[devin-ai-integration]

Devin Review found 1 potential issue.

[seonghobae]

Successor convergence verified against current #546 a2c8c9338d00dd3258239253f8f956ae220c7c1a.

#546 preserves this PR's valid single/batch upload behavior: explicit non-media declared MIME receives immediate browser feedback, setCustomValidity blocks native form submission, aria-invalid conveys input state, and the handler returns before later size/count checks. #546 also adds the missing deterministic browser/server MIME-authority contract test and a code-current product/technical gap baseline. Its exact-head CI 34263453200, Security Scan 34263452927, and SAST 34263453297 are GREEN.

The extension/empty-MIME enforcement proposed in the historical review is intentionally not inherited. W3C File API permits empty File.type when the user agent cannot determine the media type, and filename/MIME metadata is client-controlled advisory evidence rather than authenticated media truth. The associated thread has been answered and resolved; actual bytes remain under the bounded backend/decoder admission path.

No unique test, fixture, contract, screenshot artifact, or valid acceptance evidence was found here that is absent from #546. Closing this predecessor as fully superseded. #546 itself remains Draft pending current-head browser/a11y/responsive evidence, central CodeQL receipt acceptance, fuzz settlement and independent approval.