[antosubash]

Summary

• db: background tasks still run and commit after the request commit fails (500) #807 (behaviour change): when the request commit fails in CommitBeforeResponseMiddleware, the original response is now unwound. Its background tasks and streaming body never run, and exactly one JSON 500 is sent, even if inner code swallows the signal. Before, the endpoint's background tasks still ran and their writes were committed after the client got a 500.
• db: read-only finalization expires loaded rows before a StreamingResponse/background task reads them (MissingGreenlet) #808 (behaviour change): read-only finalization closes the transaction (SessionTransaction.close()) instead of calling session.rollback(). Loaded objects therefore aren't expired, and a StreamingResponse body or background task can read already-loaded attributes without a MissingGreenlet. The connection is still released before the body streams. Loaded objects keep their values: use populate_existing() to refresh them.
• db: a write rolled back in a savepoint still marks the request written, so on_commit callbacks fire #809: the write marker is tracked per transaction level:
  • a write rolled back with its savepoint no longer forces a commit or runs the outer on_commit callbacks;
  • a released savepoint's marker merges into its parent;
  • a mid-request commit keeps the callbacks already queued, as before;
  • mark_written never begins a transaction;
  • the tenants owner guard now goes through mark_written instead of setting the flag directly.
• docs/database/sessions.md, docs/framework-conventions.md, the database skill, the get_db docstring and the CHANGELOG are updated.

Verification

• Local CI: make lint and the docs build passed, along with these suites:
  • make test-py: 7736 passed
  • make test-js: passed
  • make doctor: clean
  • e2e: 98 passed against a live API + Vite
• Not browser-tested: this changes the DB layer only and has no UI.
• Verification report: https://claude.ai/artifact/DmpUQLTqjrWGv4cRLpTaeQ

Report links are Claude Artifacts and start private; the author can share them from claude.ai/code/artifacts if reviewers need access.

Closes #807
Closes #808
Closes #809

Test plan

• CI is green

https://claude.ai/code/session_01FXHA3ZicrtZ4C5QPEgxfgq

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
🔒 Security Review	✅ Completed 2026-11-04T16:57:09.755627Z	350ff9c	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[cloudflare-workers-and-pages]

Deploying simple-module-python with    Cloudflare Pages

Latest commit:	350ff9c
Status:	✅  Deploy successful!
Preview URL:	https://5a25fdfd.simple-module-python.pages.dev
Branch Preview URL:	https://fix-db-review-sessions.simple-module-python.pages.dev

View logs