[antosubash]

Summary

• CI: run the hardcoded-strings check, add job timeouts, enforce make lint ↔ pr.yml parity #598 CI: ci-check-hardcoded-strings runs in CI. A new scripts/check_ci_parity.py (make ci-check-ci-parity, in make lint and python-lint) fails if a make lint prerequisite is missing from pr.yml. Every job has timeout-minutes. Python test jobs install Node, so asset tests run instead of silently skipping. make migration requires LABEL= and autogenerates against <label>@head.
• release robustness: resumable partial publishes, Postgres coverage for concurrency-sensitive modules #599 Release: a pre-flight job runs before any publish. It lists packages not yet on PyPI, unless the operator names them in the new pending_publishers dispatch input (packages with a registered pending publisher still 404 until their first upload). Publish legs skip versions that already exist, so a half-failed release can be re-run. postgres-tests.yml now also runs for modules/users, modules/background_tasks and modules/file_storage.
• packaging: cap dependency ranges; ship module data migrations to scaffolded apps #600 Packaging (behaviour change): published packages cap their third-party runtime dependencies (next major for 1.x+, next minor for 0.x), with caps compatible with the current lock. The users module seeds the default user role at startup when missing, so apps scaffolded from a schema-only baseline can register users; the admin role is not recreated.
• docs drift: lifecycle hooks, plans vs specs location, superseded specs #602 Docs: register_setup_steps is documented in lifecycle.md, and a test asserts every ModuleBase.register_* hook is documented. docs/superpowers/{specs,plans} is the canonical design-doc location (docs/plans/README.md). Superseded banners on the April migration plans. Postgres testing docs match Speed up the Python test suites: per-worker Postgres DBs, schema reuse, lazy route resolution #577/chore(test): default pytest-xdist to 4 workers instead of -n auto #606.
• PyYAML is declared as a dev dependency (the new scripts import it).

Verification

• Browser-verified on port 8217: with the user role deleted before boot, startup recreated it and signup → sign-in worked; the new user is non-admin
• Local CI: make lint (incl. the new parity check), make test-py (5753 passed), make test-js (748 passed), full e2e suite (49 passed), users on Postgres (680 passed); uv lock --check against the live index
• Code review: 2 Sonnet passes + Codex; review caught a release pre-flight deadlock for new packages (fixed)
• Verification report: https://claude.ai/artifact/CDDFSkA3tSNWqhqecEjEr3

QA Report

• Full QA cycle completed (1 iteration)
• 0 bugs found, 0 fixed
• Categories tested: Happy Path (signup on a schema-only-like DB, role permissions)
• Full QA report: https://claude.ai/artifact/SezCRjnNBrHGsV2VrLUdM7

Report links are Claude Artifacts and start private; the author can share them from claude.ai/code/artifacts if reviewers need access.

Test plan

• CI green, including the new parity check and the job timeouts
• Next release: the pre-flight job runs first and passes (no new packages)

Closes #598
Closes #599
Closes #600
Closes #602

https://claude.ai/code/session_01M9neheZZEe3sVpDi2S3zT4

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
🔒 Security Review	✅ Completed 2026-10-23T12:23:47.970329Z	03ef63c	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[cloudflare-workers-and-pages]

Deploying simple-module-python with    Cloudflare Pages

Latest commit:	03ef63c
Status:	✅  Deploy successful!
Preview URL:	https://7adb2a51.simple-module-python.pages.dev
Branch Preview URL:	https://fix-debt-batch-6.simple-module-python.pages.dev

View logs