[antosubash]

Summary

These were reported downstream against 0.0.38; all four reproduce on main.

• users: valid reset token plus weak password is misreported as an expired link #667: on a 400 RESET_PASSWORD_INVALID_PASSWORD, the reset-password page shows the password-policy reason instead of a misleading generic error, and the same link still works for a retry. A backend test confirms a rejected password doesn't consume the token.
• ui: closing Search command palette loses keyboard focus #668: closing the command palette with Escape, the Close button, the overlay or Ctrl/Cmd+K returns focus to the element that opened it. After a command navigates, focus is left alone. This uses Radix onCloseAutoFocus, passed through the shadcn CommandDialog.
• settings: module field rows collapse controls and overflow with two sidebars #669: settings field rows size by the editor card (Tailwind 4 container queries on the card) rather than the viewport. Narrow cards stack the row, controls keep a usable minimum width, and long SM_* identifiers wrap.
• ui: default muted sidebar text falls below normal-text contrast requirement #670: --color-app-sidebar-text-muted goes from oklch(0.55 0.01 250) to oklch(0.62 …): 4.00 → 5.33:1 on the sidebar and 3.57 → 4.75:1 on hover, still dimmer than normal sidebar text. A Vitest test checks every shipped sidebar token pair.

Closes #667
Closes #668
Closes #669
Closes #670

Verification

• Browser QA on port 8221:
  • A short password shows "Password must be at least 8 characters…", and the same link then succeeds.
  • Escape, Close and Ctrl+K all return focus to Search.
  • At 768 and 1440px there is no page overflow, the smallest input is 120px, and long identifiers wrap.
  • Sidebar contrast measures 5.35:1 in the browser.
• Local CI: make lint, make test-py (6332 passed), make test-js (861 passed) and make ci-css-build are green.
• Verification report: https://claude.ai/artifact/3VZd5xmFw1E3UgKDjH14xZ

QA Report

• Full QA cycle completed (1 iteration), depth shallow
• 0 bugs found, 0 fixed
• Full QA report: https://claude.ai/artifact/RC1FRqpnacxkusZBt376y1

Report links are Claude Artifacts and start private — the author can share them
from claude.ai/code/artifacts if reviewers need access.

Test plan

• Reset with a weak password, then a strong one on the same link
• CI is green

[cloudflare-workers-and-pages]

Deploying simple-module-python with    Cloudflare Pages

Latest commit:	1aa460f
Status:	✅  Deploy successful!
Preview URL:	https://255f4fe7.simple-module-python.pages.dev
Branch Preview URL:	https://fix-batch-21.simple-module-python.pages.dev

View logs

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
🔒 Security Review	✅ Completed 2026-10-24T21:32:07.979750Z	1aa460f	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.