Drag-to-reorder has no keyboard alternative in Grid, Replicator, Bard or structure trees

[bpmore]

Bug description

Reordering in the CP is implemented entirely through @shopify/draggable pointer events. There is no keyboard handling anywhere in the sortable layer and no menu-based alternative, so reordering is mouse-only across the whole Control Panel.

Affected: Grid rows, Replicator sets, Bard sets, the page tree, the navigation tree, blueprint fields and tabs, Table rows, List items.

Verified:

• grep -c 'keydown\|ArrowUp\|ArrowDown' in https://github.com/statamic/cms/blob/v6.31.0/resources/js/components/sortable/SortableList.vue -> 0
• Same in https://github.com/statamic/cms/blob/v6.31.0/resources/js/components/sortable/Sortable.js -> 0
• The Grid row menu offers only Duplicate Row and Delete Row, no move actions: https://github.com/statamic/cms/blob/v6.31.0/resources/js/components/fieldtypes/grid/Row.vue#L18-L19
• The Bard set handle is not even focusable. It is a <span> with a mousedown listener: https://github.com/statamic/cms/blob/v6.31.0/resources/js/components/fieldtypes/bard/Set.vue#L29

ui/DragHandle.vue is a real <button> with aria-label="Drag to reorder", so it announces itself as actionable, but pressing Space, Enter or arrow keys on it does nothing and emits nothing to any live region.

WCAG 2.1 SC 2.1.1 Keyboard (Level A). Under WCAG 2.2 this would also fail SC 2.5.7 Dragging Movements.

How to reproduce

1. composer create-project statamic/statamic
2. Add a Grid field with two or more rows to a blueprint, or a Replicator with two sets
3. Open the entry and Tab to a row's drag handle
4. Press Space, then ArrowDown, then Enter

Expected: the row moves. Actual: row order is unchanged and nothing is announced.

Suggested fix

Two steps, and the first is worth shipping on its own:

1. Add Move Up / Move Down items to every row and set dropdown menu. Grid rows, Replicator sets, Bard sets, tree branches. This alone satisfies 2.1.1 and needs no new drag machinery.
2. Wire a keyboard sensor onto ui/DragHandle.vue (Space to lift, arrows to move, Enter to drop, Escape to cancel) with an aria-live announcement of the new position.

Also worth making the Bard set handle a <button> so it is at least reachable.

Environment

Environment
Laravel Version: 13.30.1
PHP Version: 8.4.23
Composer Version: 2.10.2
Environment: local
Debug Mode: ENABLED
Maintenance Mode: OFF
Timezone: UTC
Locale: en

Cache
Config: NOT CACHED
Events: NOT CACHED
Routes: NOT CACHED
Views: CACHED

Drivers
Broadcasting: log
Cache: file
Database: sqlite
Logs: stack / single
Mail: log
Queue: sync
Session: file

Storage
public/storage: NOT LINKED

Statamic
Addons: 0
License Key: Not set
Sites: 1
Stache Watcher: Enabled (auto)
Static Caching: Disabled
Version: 6.31.0 PRO

Installation

Fresh statamic/statamic site via CLI

Additional details

Found during a WCAG 2.1 AA audit of a vanilla composer create-project statamic/statamic install with no addons and no custom code. Tested with axe-core 4.x on Chromium 153 at 1440x1000, plus manual keyboard traversal. Source references point at v6.31.0.

[bpmore]

Cross-reference: this also fails WCAG 2.2 SC 2.5.7 Dragging Movements (Level AA), not only 2.1's SC 2.1.1.

2.5.7 requires that any function operated by a dragging movement can also be achieved with a single pointer without dragging, unless dragging is essential. Reordering is not essential — a menu action does the same job.

That means the Move Up / Move Down menu items suggested above satisfy both criteria at once: 2.1.1 for keyboard users and 2.5.7 for anyone who cannot perform a sustained drag (tremor, switch access, head pointer, trackpad difficulty). Worth knowing if 2.2 is on the roadmap, since it makes the cheap half of that fix cover two criteria.

For completeness, I tested the other five new 2.2 A/AA criteria against a vanilla install: 2.4.11 Focus Not Obscured, 3.2.6 Consistent Help, 3.3.7 Redundant Entry and 3.3.8 Accessible Authentication all pass. 2.5.8 Target Size fails narrowly and is filed as #15416. This issue and #15416 are the only two 2.2 gaps I found.