fix: scope custom steps to current project

[marcelsafin]

Description

Scope dynamically loaded custom workflow steps to the current project.

STEP_REGISTRY and Python's module cache are process-global. Loading project
A followed by project B previously left A's step classes active, and a shared
type key could keep using A's imported helper code. Each scan now removes
non-built-in registry entries and generated custom-step modules before loading
the requested project.

Testing

• Tested locally with uv run specify --help
• Ran existing tests with uv sync && uv run pytest
• Tested with a sample project (if applicable)

Targeted: TestLoadCustomSteps (12 passed).

Full suite: 7,533 passed, 195 skipped. One existing PowerShell-launcher test
was omitted because pwsh is unavailable locally; it fails identically on the
unchanged upstream commit.

AI Disclosure

• I did not use AI assistance for this contribution
• I did use AI assistance (describe below)

GitHub Copilot (GPT-5.6 Sol) autonomously reproduced the bug, wrote the
regression test and implementation, and ran verification under
@marcelsafin's direction and review.

[Copilot]

🟡 Changes recommended

Same-path reloads may reuse stale bytecode, and related comments must be updated.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Scopes dynamically loaded workflow steps to the current project.

Changes:

• Resets custom-step registrations and cached modules before each scan.
• Adds cross-project isolation regression coverage.

File summaries

File	Description
tests/test_workflows.py	Tests replacing identically named steps across projects.
src/specify_cli/workflows/__init__.py	Resets custom-step state; bytecode caching may still cause stale same-path reloads.

Review details

Suppressed comments (1)

src/specify_cli/workflows/init.py:104

• This new removal behavior makes the existing explanations in src/specify_cli/bundler/services/references.py:50-53 and tests/unit/test_bundler_references.py:50-55 incorrect: both still state that load_custom_steps “never removes” custom entries. Please update those comments to explain that BUILTIN_STEP_TYPES remains the immutable built-in snapshot even though the active registry is reset between scans.

    for _type_key in tuple(STEP_REGISTRY):
        if _type_key not in BUILTIN_STEP_TYPES:
            STEP_REGISTRY.pop(_type_key, None)

• Files reviewed: 2/2 changed files
• Comments generated: 1
• Review effort level: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[marcelsafin]

Addressed on 7e2961ea: custom-step __pycache__ directories are purged before import, import caches are invalidated, and a same-path/same-mtime regression test now verifies updated helper code is loaded. I also updated the stale BUILTIN_STEP_TYPES comments identified in the review. Full runnable suite: 7,533 passed, 195 skipped; Ruff and CLI smoke are clean. Posted on behalf of @marcelsafin by GitHub Copilot (model: GPT-5.6 Sol).

[Copilot]

🟢 Approval recommended

All reviewed changes are covered by regression tests with no unresolved issues.

Review details

• Files reviewed: 4/4 changed files
• Comments generated: 0 new
• Review effort level: Balanced