[antosubash]

Public module APIs requested by smpy_modules (images), replacing private-name workarounds it currently pins in tests/test_framework_pins.py.

Closes #682
Closes #683
Closes #684
Closes #685

What changed

• background_tasks: expose "inside a durable delivery" as a public ContextVar set by deliver_one #682: simple_module_core.durable_events.in_delivery() (and IN_DELIVERY, a ContextVar[bool]).
  • True while a durable handler runs: set around the handler call in the outbox's deliver_one and in the bus's inline durable dispatch.
  • Reset in finally.
  • Tasks spawned from a handler inherit it through the copied context.
  • Lets a module detect "I am inside a delivery" without walking the stack for deliver_one.__code__.
• sharing: no per-resource cleanup, so a purged resource's share rows stay forever #683: sharing.contracts.forget_resource(db, resource_type, resource_id | Iterable[str]). Deletes every share of a purged resource in the caller's session and bound tenant, with no authorization check, since it is the owning module cleaning up. Documented next to the user and tenant cleanup.
• hosting: make render_error_page public so modules can render the standard error page #684: simple_module_hosting.render_error_page(request, status_code, detail, headers=None, *, required_permission=None). The standard error page for module exception handlers: JSON for API clients, the Inertia Error page for browsers, with the same negotiation as the framework's own handlers.
• background_tasks: public accessor for the worker's tenancy mode (set_database_url state) #685: background_tasks.sync_db.worker_tenancy() -> WorkerTenancy | None. A frozen WorkerTenancy(multi_tenant, default_tenant), or None when set_database_url never ran, so a worker can tell "not configured" from single-tenant without reading underscored globals.

Verification

• make lint ✓ · make test-js ✓ · make test-py ✓ (6439 passed, 39 skipped)
• New tests:
  • delivery context inside a handler and its child task, false elsewhere, reset after failure and cancellation, and the inline dispatch path;
  • forget_resource is tenant-scoped and accepts a single id or an iterable;
  • render_error_page negotiates JSON vs. the Inertia page and keeps status and headers;
  • worker_tenancy returns None when unconfigured, plus single- and multi-tenant snapshots.
• Code review: clean, after adding the inline-dispatch case.

https://claude.ai/code/session_01M9neheZZEe3sVpDi2S3zT4

[cloudflare-workers-and-pages]

Deploying simple-module-python with    Cloudflare Pages

Latest commit:	d00abf2
Status:	✅  Deploy successful!
Preview URL:	https://dc90131e.simple-module-python.pages.dev
Branch Preview URL:	https://tech-debt-b27-public-module.simple-module-python.pages.dev

View logs

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
🔒 Security Review	✅ Completed 2026-10-30T08:20:33.094028Z	d00abf2	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.