[ancongui]

Summary

SSE sources could lose their context between reads or leave producers blocked after disconnects and send failures. Keep iteration and cleanup in one task, add typed events and a bounded async emitter, and complete asynchronous authorization before creating the response. Preserve finite emitters and native agent streaming.

Add public verified OIDC login extensions before session publication, bind configuration before eager dependency resolution, preserve explicit OpenAI embedding endpoints and Ollama credentials, and include portable IANA time zone data. Align release metadata and companion locks for 26.10.12.

Type of Change

• Bug fix
• New feature
• Enhancement
• Refactoring
• Documentation
• CI/CD

Test Plan

• Configured PR CI passes for Python 3.12, Python 3.13 and SQLAlchemy 2.0.
• Installed Agentic distributions, webapp browser tests and distribution builds pass.
• New regressions cover SSE lifecycle, OIDC policy hooks, embedding connections, eager configuration and portable time zones.
• Whole-tree Ruff, formatting, strict mypy and migration verification pass in CI.
• Documentation and book source validation pass; companion locks pass offline consistency checks.

CI: https://github.com/fireflyframework/fireflyframework-pyfly/actions/runs/40563125543 — qualified head 5337dc0. Nightly Docker integration and offline benchmark jobs are intentionally skipped by the PR workflow.