veryfront 0.1.103 → 0.1.105

package/esm/deno.js

@@ -1,6 +1,6 @@
 export default {
     "name": "veryfront",
-    "version": "0.1.103",
+    "version": "0.1.105",
     "license": "Apache-2.0",
     "nodeModulesDir": "auto",
     "exclude": [

package/esm/src/agent/runtime/ai-stream-handler.d.ts

@@ -42,5 +42,5 @@ export declare function createStreamState(): AIStreamState;
  * - tool-call → tool-input-available SSE (accumulated input)
  * - finish → captures finishReason and usage
  */
-export declare function processStream(result: StreamTextResult<ToolSet, never>, state: AIStreamState, controller: ReadableStreamDefaultController, encoder: TextEncoder, textPartId: string | undefined, callbacks?: AIStreamCallbacks): Promise<void>;
+export declare function processStream(result: StreamTextResult<ToolSet, never>, state: AIStreamState, controller: ReadableStreamDefaultController, encoder: TextEncoder, textPartId: string | undefined, callbacks?: AIStreamCallbacks, abortSignal?: AbortSignal): Promise<void>;
 //# sourceMappingURL=ai-stream-handler.d.ts.map

package/esm/src/agent/runtime/ai-stream-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ai-stream-handler.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/ai-stream-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAQpD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC1C,KAAK,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CAChF;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;QAChB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,KAAK,IAAI,CAAC;CACZ;AAED,wBAAgB,iBAAiB,IAAI,aAAa,CAOjD;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,EACxC,KAAK,EAAE,aAAa,EACpB,UAAU,EAAE,+BAA+B,EAC3C,OAAO,EAAE,WAAW,EACpB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,CAAC,EAAE,iBAAiB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAiHf"}
+{"version":3,"file":"ai-stream-handler.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/ai-stream-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAQpD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC1C,KAAK,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CAChF;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;QAChB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,KAAK,IAAI,CAAC;CACZ;AAmBD,wBAAgB,iBAAiB,IAAI,aAAa,CAOjD;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,EACxC,KAAK,EAAE,aAAa,EACpB,UAAU,EAAE,+BAA+B,EAC3C,OAAO,EAAE,WAAW,EACpB,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,CAAC,EAAE,iBAAiB,EAC7B,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,IAAI,CAAC,CAwHf"}

package/esm/src/agent/runtime/ai-stream-handler.js

@@ -12,6 +12,17 @@ import { isDynamicTool } from "./tool-helpers.js";
 import { serverLogger } from "../../utils/index.js";
 import { setActiveSpanAttributes, withSpan } from "../../observability/tracing/otlp-setup.js";
 const logger = serverLogger.component("agent");
+function createAbortError(reason) {
+    if (reason instanceof Error) {
+        return reason;
+    }
+    return new DOMException(typeof reason === "string" && reason.length > 0 ? reason : "The operation was aborted", "AbortError");
+}
+function throwIfAborted(abortSignal) {
+    if (abortSignal?.aborted) {
+        throw createAbortError(abortSignal.reason);
+    }
+}
 export function createStreamState() {
     return {
         accumulatedText: "",
@@ -30,10 +41,12 @@ export function createStreamState() {
  * - tool-call → tool-input-available SSE (accumulated input)
  * - finish → captures finishReason and usage
  */
-export function processStream(result, state, controller, encoder, textPartId, callbacks) {
+export function processStream(result, state, controller, encoder, textPartId, callbacks, abortSignal) {
     return withSpan("agent.runtime.processStream", async () => {
         let eventCount = 0;
+        throwIfAborted(abortSignal);
         for await (const part of result.fullStream) {
+            throwIfAborted(abortSignal);
             eventCount++;
             switch (part.type) {
                 case "text-delta": {
@@ -124,7 +137,9 @@ export function processStream(result, state, controller, encoder, textPartId, ca
                     // Ignore other stream parts (source, file, reasoning-*, etc.)
                     break;
             }
+            throwIfAborted(abortSignal);
         }
+        throwIfAborted(abortSignal);
         setActiveSpanAttributes({
             "stream.event_count": eventCount,
             "stream.tool_calls": state.toolCalls.size,

package/esm/src/agent/runtime/index.d.ts

@@ -12,7 +12,7 @@
  */
 import { type AgentConfig, type AgentResponse, type Message, type ToolCall } from "../types.js";
 import { type Memory } from "../memory/index.js";
-export { generateMessageId, sendSSE } from "./sse-utils.js";
+export { closeSSEStream, generateMessageId, sendSSE } from "./sse-utils.js";
 export { executeConfiguredTool, getAvailableTools, isDynamicTool, parseToolArgs, } from "./tool-helpers.js";
 export type { ParsedToolArgs, ToolConfigEntry } from "./tool-helpers.js";
 export { accumulateUsage, getMaxSteps, normalizeInput } from "./input-utils.js";
@@ -55,7 +55,7 @@ export declare class AgentRuntime {
         onToolCall?: (toolCall: ToolCall) => void;
         onChunk?: (chunk: string) => void;
         onFinish?: (response: AgentResponse) => void;
-    }, modelOverride?: string, maxOutputTokensOverride?: number): Promise<ReadableStream<Uint8Array>>;
+    }, modelOverride?: string, maxOutputTokensOverride?: number, abortSignal?: AbortSignal): Promise<ReadableStream<Uint8Array>>;
     /**
      * Execute agent loop (with tool calling)
      */

package/esm/src/agent/runtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,KAAK,WAAW,EAEhB,KAAK,aAAa,EAGlB,KAAK,OAAO,EAEZ,KAAK,QAAQ,EACd,MAAM,aAAa,CAAC;AAIrB,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAe/D,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC1E,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAClG,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AA0BxB;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,GAAG,SAAS,CA6BxE;AAED,gEAAgE;AAChE,KAAK,iBAAiB,GAClB;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACjB;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,EAAE,GAAG,SAAS,EACvC,kBAAkB,EAAE,OAAO,GAC1B,iBAAiB,CAiBnB;AAkCD,qBAAa,YAAY;IACvB,OAAO,CAAC,EAAE,CAAS;IACnB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,MAAM,CAAuB;gBAEzB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW;IAS3C;;OAEG;IACG,QAAQ,CACZ,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE,EACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,aAAa,CAAC,EAAE,MAAM,EACtB,uBAAuB,CAAC,EAAE,MAAM,GAC/B,OAAO,CAAC,aAAa,CAAC;IAsCzB;;;OAGG;IACG,MAAM,CACV,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,CAAC,EAAE;QACV,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;QAC1C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;QAClC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;KAC9C,EACD,aAAa,CAAC,EAAE,MAAM,EACtB,uBAAuB,CAAC,EAAE,MAAM,GAC/B,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAkFtC;;OAEG;YACW,gBAAgB;IAkO9B;;;;OAIG;YACW,yBAAyB;IAoOvC;;OAEG;YACW,eAAe;IAqC7B;;OAEG;YACW,mBAAmB;IAOjC;;OAEG;IACH,OAAO,CAAC,eAAe;IAKvB,OAAO,CAAC,sBAAsB;IAY9B;;OAEG;IACH,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC;IAI5B;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC;QAC9B,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IAIF;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;CAGnC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,KAAK,WAAW,EAEhB,KAAK,aAAa,EAGlB,KAAK,OAAO,EAEZ,KAAK,QAAQ,EACd,MAAM,aAAa,CAAC;AAIrB,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAe/D,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,aAAa,GACd,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC1E,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAClG,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AAmDxB;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,GAAG,SAAS,CA6BxE;AAED,gEAAgE;AAChE,KAAK,iBAAiB,GAClB;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACjB;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,EAAE,GAAG,SAAS,EACvC,kBAAkB,EAAE,OAAO,GAC1B,iBAAiB,CAiBnB;AAcD,qBAAa,YAAY;IACvB,OAAO,CAAC,EAAE,CAAS;IACnB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,MAAM,CAAuB;gBAEzB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW;IAS3C;;OAEG;IACG,QAAQ,CACZ,KAAK,EAAE,MAAM,GAAG,OAAO,EAAE,EACzB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,aAAa,CAAC,EAAE,MAAM,EACtB,uBAAuB,CAAC,EAAE,MAAM,GAC/B,OAAO,CAAC,aAAa,CAAC;IA2CzB;;;OAGG;IACG,MAAM,CACV,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,CAAC,EAAE;QACV,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;QAC1C,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;QAClC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;KAC9C,EACD,aAAa,CAAC,EAAE,MAAM,EACtB,uBAAuB,CAAC,EAAE,MAAM,EAChC,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAgHtC;;OAEG;YACW,gBAAgB;IAkO9B;;;;OAIG;YACW,yBAAyB;IA2OvC;;OAEG;YACW,eAAe;IAqC7B;;OAEG;YACW,mBAAmB;IAOjC;;OAEG;IACH,OAAO,CAAC,eAAe;IAKvB,OAAO,CAAC,sBAAsB;IAY9B;;OAEG;IACH,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC;IAI5B;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC;QAC9B,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IAIF;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;CAGnC"}

package/esm/src/agent/runtime/index.js

@@ -11,7 +11,7 @@
  * @module ai/agent/runtime
  */
 import { getTextFromParts, } from "../types.js";
-import { ensureModelReady, findAvailableCloudModel, resolveModel } from "../../provider/index.js";
+import { ensureModelReady, resolveModel } from "../../provider/index.js";
 import { generateId } from "../../utils/id.js";
 import { detectPlatform, getPlatformCapabilities } from "../../platform/core-platform.js";
 import { createMemory } from "../memory/index.js";
@@ -24,19 +24,36 @@ import { MiddlewareChain } from "../middleware/chain.js";
 import { generateText, streamText } from "ai";
 import { AGENT_DEFAULTS } from "../ai-defaults.js";
 // Re-export from submodules
-export { generateMessageId, sendSSE } from "./sse-utils.js";
+export { closeSSEStream, generateMessageId, sendSSE } from "./sse-utils.js";
 export { executeConfiguredTool, getAvailableTools, isDynamicTool, parseToolArgs, } from "./tool-helpers.js";
 export { accumulateUsage, getMaxSteps, normalizeInput } from "./input-utils.js";
 export { createStreamState, processStream } from "./ai-stream-handler.js";
 export { DEFAULT_MAX_STEPS, DEFAULT_MAX_TOKENS, DEFAULT_TEMPERATURE, MAX_STREAM_BUFFER_SIZE, } from "./constants.js";
 import { DEFAULT_MAX_TOKENS, DEFAULT_TEMPERATURE } from "./constants.js";
-import { generateMessageId, sendSSE } from "./sse-utils.js";
+import { closeSSEStream, generateMessageId, sendSSE } from "./sse-utils.js";
 import { executeConfiguredTool, getAvailableTools, isDynamicTool, parseToolArgs, } from "./tool-helpers.js";
 import { accumulateUsage, getMaxSteps, normalizeInput } from "./input-utils.js";
 import { filterToolsForSkill, isToolAllowedBySkill, validateAllowedToolPatterns, } from "../../skill/allowed-tools.js";
-import { resolveConfiguredAgentModel } from "./model-resolution.js";
+import { resolveConfiguredAgentModel, resolveRuntimeModel } from "./model-resolution.js";
 const logger = serverLogger.component("agent");
 const LOAD_SKILL_TOOL_ID = "load-skill";
+function createAbortError(reason) {
+    if (reason instanceof Error) {
+        return reason;
+    }
+    return new DOMException(typeof reason === "string" && reason.length > 0 ? reason : "The operation was aborted", "AbortError");
+}
+function throwIfAborted(abortSignal) {
+    if (abortSignal?.aborted) {
+        throw createAbortError(abortSignal.reason);
+    }
+}
+function isAbortError(error, abortSignal) {
+    if (abortSignal?.aborted && error === abortSignal.reason) {
+        return true;
+    }
+    return error instanceof DOMException && error.name === "AbortError";
+}
 function getSkillActivationRequiredError(toolName) {
     return `Tool "${toolName}" cannot run before load-skill succeeds in the same step. ` +
         `Call "${LOAD_SKILL_TOOL_ID}" first to establish the active skill context.`;
@@ -88,23 +105,6 @@ export function enforceSkillPolicy(toolName, activeSkillPolicy, mustLoadSkillFir
     }
     return { allowed: true };
 }
-/**
- * Auto-upgrade a local model string to a cloud provider when API keys are available.
- *
- * Returns the upgraded "provider/model" string, or the original string unchanged
- * if no cloud provider is available. This keeps resolveModel as a pure resolver
- * while the runtime owns the upgrade policy.
- */
-function maybeUpgradeLocalModel(modelString) {
-    if (!modelString.startsWith("local/"))
-        return modelString;
-    const cloud = findAvailableCloudModel();
-    if (cloud) {
-        logger.info(`⚡ Cloud AI API key found — using "${cloud}" instead of local model.`);
-        return cloud;
-    }
-    return modelString;
-}
 /**
  * Check whether a resolved LanguageModel is a local inference model.
  * Checks the model object properties rather than the requested string,
@@ -133,7 +133,10 @@ export class AgentRuntime {
      */
     async generate(input, context, modelOverride, maxOutputTokensOverride) {
         const requestedModel = resolveConfiguredAgentModel(modelOverride || this.config.model);
-        const resolvedModelString = maybeUpgradeLocalModel(requestedModel);
+        const resolvedModelString = resolveRuntimeModel(modelOverride || this.config.model);
+        if (resolvedModelString !== requestedModel) {
+            logger.info(`⚡ Using runtime model "${resolvedModelString}" instead of "${requestedModel}".`);
+        }
         return withSpan("agent.generate", async (span) => {
             setSpanAttributes(span, {
                 "agent.id": this.id,
@@ -159,16 +162,31 @@ export class AgentRuntime {
      * Stream a response
      * Returns a ReadableStream in the veryfront stream event format.
      */
-    async stream(messages, context, callbacks, modelOverride, maxOutputTokensOverride) {
+    async stream(messages, context, callbacks, modelOverride, maxOutputTokensOverride, abortSignal) {
         const requestedModel = resolveConfiguredAgentModel(modelOverride || this.config.model);
-        // Auto-upgrade local/* to a cloud provider when API keys are available.
-        const resolvedModelString = maybeUpgradeLocalModel(requestedModel);
+        const resolvedModelString = resolveRuntimeModel(modelOverride || this.config.model);
+        if (resolvedModelString !== requestedModel) {
+            logger.info(`⚡ Using runtime model "${resolvedModelString}" instead of "${requestedModel}".`);
+        }
         for (const msg of messages)
             await this.memory.add(msg);
         const memoryMessages = await this.memory.getMessages();
         const systemPrompt = await this.resolveSystemPrompt();
         const encoder = new TextEncoder();
-        const toolContext = { agentId: this.id, ...context };
+        const streamAbortController = new AbortController();
+        const forwardAbort = () => {
+            streamAbortController.abort(abortSignal?.reason);
+        };
+        if (abortSignal) {
+            if (abortSignal.aborted) {
+                streamAbortController.abort(abortSignal.reason);
+            }
+            else {
+                abortSignal.addEventListener("abort", forwardAbort, { once: true });
+            }
+        }
+        const streamAbortSignal = streamAbortController.signal;
+        const toolContext = { agentId: this.id, abortSignal: streamAbortSignal, ...context };
         const textPartId = generateId("text");
         // Resolve model BEFORE creating the ReadableStream — if this throws
         // (e.g., no_ai_available), the error propagates to the caller who can
@@ -186,6 +204,7 @@ export class AgentRuntime {
         return new ReadableStream({
             start: async (controller) => {
                 try {
+                    throwIfAborted(streamAbortSignal);
                     this.status = "streaming";
                     const messageId = generateMessageId();
                     sendSSE(controller, encoder, { type: "message-start", messageId });
@@ -203,22 +222,34 @@ export class AgentRuntime {
                         },
                     });
                     sendSSE(controller, encoder, { type: "text-start", id: textPartId });
-                    const response = await this.executeAgentLoopStreaming(systemPrompt, memoryMessages, controller, encoder, callbacks, textPartId, toolContext, resolvedModelString, languageModel, maxOutputTokensOverride);
+                    const response = await this.executeAgentLoopStreaming(systemPrompt, memoryMessages, controller, encoder, callbacks, textPartId, toolContext, resolvedModelString, languageModel, maxOutputTokensOverride, streamAbortSignal);
+                    throwIfAborted(streamAbortSignal);
                     callbacks?.onFinish?.(response);
+                    throwIfAborted(streamAbortSignal);
                     sendSSE(controller, encoder, { type: "text-end", id: textPartId });
                     sendSSE(controller, encoder, { type: "message-finish" });
-                    controller.close();
+                    closeSSEStream(controller);
                 }
                 catch (error) {
+                    if (isAbortError(error, streamAbortSignal)) {
+                        closeSSEStream(controller);
+                        return;
+                    }
                     this.status = "error";
                     logger.error("Agent stream error", { error });
                     sendSSE(controller, encoder, {
                         type: "error",
                         error: "An internal error occurred",
                     });
-                    controller.close();
+                    closeSSEStream(controller);
+                }
+                finally {
+                    abortSignal?.removeEventListener("abort", forwardAbort);
                 }
             },
+            cancel(reason) {
+                streamAbortController.abort(reason);
+            },
         });
     }
     /**
@@ -228,7 +259,7 @@ export class AgentRuntime {
         return withSpan("agent.execution_loop", async (loopSpan) => {
             const { maxAgentSteps } = getPlatformCapabilities();
             const maxSteps = this.computeMaxSteps(maxAgentSteps);
-            const effectiveModel = resolveConfiguredAgentModel(modelString || this.config.model);
+            const effectiveModel = resolveRuntimeModel(modelString || this.config.model);
             const languageModel = resolveModel(effectiveModel);
             const toolCalls = [];
             const currentMessages = [...messages];
@@ -414,10 +445,10 @@ export class AgentRuntime {
      * Emits veryfront stream events (message-start/message-finish + step-start/step-end)
      * while consuming AI SDK `streamText()` parts internally.
      */
-    async executeAgentLoopStreaming(systemPrompt, messages, controller, encoder, callbacks, textPartId, toolContext, modelString, resolvedModel, maxOutputTokensOverride) {
+    async executeAgentLoopStreaming(systemPrompt, messages, controller, encoder, callbacks, textPartId, toolContext, modelString, resolvedModel, maxOutputTokensOverride, abortSignal) {
         const { maxAgentSteps } = getPlatformCapabilities();
         const maxSteps = this.computeMaxSteps(maxAgentSteps);
-        const effectiveModel = resolveConfiguredAgentModel(modelString || this.config.model);
+        const effectiveModel = resolveRuntimeModel(modelString || this.config.model);
         const languageModel = resolvedModel ?? resolveModel(effectiveModel);
         const toolCalls = [];
         const currentMessages = [...messages];
@@ -434,6 +465,7 @@ export class AgentRuntime {
         let activeSkillPolicy;
         let finalFinishReason;
         for (let step = 0; step < maxSteps; step++) {
+            throwIfAborted(abortSignal);
             sendSSE(controller, encoder, { type: "step-start" });
             let tools = isLocalStreaming ? [] : getAvailableTools(this.config.tools, {
                 includeSkillTools: Boolean(this.config.skills),
@@ -449,12 +481,14 @@ export class AgentRuntime {
                 tools: convertToolsToAISDK(tools),
                 maxOutputTokens: this.resolveMaxOutputTokens(maxOutputTokensOverride),
                 temperature: DEFAULT_TEMPERATURE,
+                abortSignal,
             });
             const state = createStreamState();
             await processStream(result, state, controller, encoder, textPartId, {
                 onChunk: callbacks?.onChunk,
                 onUsage: (usage) => accumulateUsage(totalUsage, usage),
-            });
+            }, abortSignal);
+            throwIfAborted(abortSignal);
             finalFinishReason = state.finishReason ?? finalFinishReason;
             const streamParts = [];
             if (state.accumulatedText)
@@ -492,6 +526,7 @@ export class AgentRuntime {
                 Boolean(this.config.skills) &&
                 streamedToolCalls.some((tc) => tc.name === LOAD_SKILL_TOOL_ID);
             for (const tc of streamedToolCalls) {
+                throwIfAborted(abortSignal);
                 const { args, error: argError } = parseToolArgs(tc.arguments);
                 const toolCall = { id: tc.id, name: tc.name, args, status: "pending" };
                 if (argError) {
@@ -523,6 +558,7 @@ export class AgentRuntime {
                         toolCallId: tc.id,
                         ...toolContext,
                     });
+                    throwIfAborted(abortSignal);
                     toolCall.status = "completed";
                     toolCall.result = result;
                     toolCall.executionTime = Date.now() - startTime;
@@ -560,6 +596,7 @@ export class AgentRuntime {
                     await this.recordToolError(toolCall, errorStr, controller, encoder, currentMessages, toolCalls);
                 }
             }
+            throwIfAborted(abortSignal);
             sendSSE(controller, encoder, { type: "step-end" });
             this.status = "thinking";
         }

package/esm/src/agent/runtime/model-resolution.d.ts

@@ -1,4 +1,15 @@
 export declare const AUTO_AGENT_MODEL = "auto";
 export declare function normalizeAgentModelConfig(model?: string): string;
 export declare function resolveConfiguredAgentModel(model?: string): string;
+/**
+ * Resolve the effective runtime model string for agent execution.
+ *
+ * Runtime-only rewrites happen here:
+ * - `auto` still defaults to `local/*`
+ * - `local/*` upgrades to the first available cloud model when bootstrap exists
+ * - explicit hosted-provider models (`openai/*`, `anthropic/*`, `google/*`)
+ *   transparently route through `veryfront-cloud/*` when the runtime has
+ *   request-scoped Veryfront bootstrap but no direct provider API key
+ */
+export declare function resolveRuntimeModel(model?: string): string;
 //# sourceMappingURL=model-resolution.d.ts.map

package/esm/src/agent/runtime/model-resolution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model-resolution.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/model-resolution.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAEvC,wBAAgB,yBAAyB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAGhE;AAED,wBAAgB,2BAA2B,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAGlE"}
+{"version":3,"file":"model-resolution.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/model-resolution.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAIvC,wBAAgB,yBAAyB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAGhE;AAED,wBAAgB,2BAA2B,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAGlE;AAeD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CA4B1D"}

package/esm/src/agent/runtime/model-resolution.js

@@ -1,5 +1,9 @@
+import { getAnthropicEnvConfig, getGoogleGenAIEnvConfig, getOpenAIEnvConfig, } from "../../config/env.js";
+import { findAvailableCloudModel } from "../../provider/index.js";
 import { DEFAULT_LOCAL_MODEL } from "../../provider/local/model-catalog.js";
+import { isVeryfrontCloudEnabled } from "../../platform/cloud/resolver.js";
 export const AUTO_AGENT_MODEL = "auto";
+const HOSTED_PROVIDER_NAMES = new Set(["anthropic", "google", "openai"]);
 export function normalizeAgentModelConfig(model) {
     const normalized = model?.trim();
     return normalized && normalized.length > 0 ? normalized : AUTO_AGENT_MODEL;
@@ -8,3 +12,47 @@ export function resolveConfiguredAgentModel(model) {
     const normalized = normalizeAgentModelConfig(model);
     return normalized === AUTO_AGENT_MODEL ? `local/${DEFAULT_LOCAL_MODEL}` : normalized;
 }
+function hasDirectProviderCredentials(provider) {
+    switch (provider) {
+        case "anthropic":
+            return Boolean(getAnthropicEnvConfig().apiKey);
+        case "google":
+            return Boolean(getGoogleGenAIEnvConfig().apiKey);
+        case "openai":
+            return Boolean(getOpenAIEnvConfig().apiKey);
+        default:
+            return false;
+    }
+}
+/**
+ * Resolve the effective runtime model string for agent execution.
+ *
+ * Runtime-only rewrites happen here:
+ * - `auto` still defaults to `local/*`
+ * - `local/*` upgrades to the first available cloud model when bootstrap exists
+ * - explicit hosted-provider models (`openai/*`, `anthropic/*`, `google/*`)
+ *   transparently route through `veryfront-cloud/*` when the runtime has
+ *   request-scoped Veryfront bootstrap but no direct provider API key
+ */
+export function resolveRuntimeModel(model) {
+    const configuredModel = resolveConfiguredAgentModel(model);
+    if (configuredModel.startsWith("veryfront-cloud/")) {
+        return configuredModel;
+    }
+    if (configuredModel.startsWith("local/")) {
+        return findAvailableCloudModel() ?? configuredModel;
+    }
+    const slashIndex = configuredModel.indexOf("/");
+    if (slashIndex === -1) {
+        return configuredModel;
+    }
+    const provider = configuredModel.slice(0, slashIndex);
+    const modelId = configuredModel.slice(slashIndex + 1);
+    if (!HOSTED_PROVIDER_NAMES.has(provider) || !modelId) {
+        return configuredModel;
+    }
+    if (!isVeryfrontCloudEnabled() || hasDirectProviderCredentials(provider)) {
+        return configuredModel;
+    }
+    return `veryfront-cloud/${provider}/${modelId}`;
+}

package/esm/src/agent/runtime/sse-utils.d.ts

@@ -10,6 +10,7 @@
  * Formats event as: data: {json}\n\n
  */
 export declare function sendSSE(controller: ReadableStreamDefaultController, encoder: TextEncoder, event: Record<string, unknown>): void;
+export declare function closeSSEStream(controller: ReadableStreamDefaultController): void;
 /**
  * Generate a unique message ID for streaming.
  */

package/esm/src/agent/runtime/sse-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sse-utils.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/sse-utils.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;GAGG;AACH,wBAAgB,OAAO,CACrB,UAAU,EAAE,+BAA+B,EAC3C,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,IAAI,CAEN;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C"}
+{"version":3,"file":"sse-utils.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/sse-utils.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH;;;GAGG;AACH,wBAAgB,OAAO,CACrB,UAAU,EAAE,+BAA+B,EAC3C,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,IAAI,CAEN;AAED,wBAAgB,cAAc,CAAC,UAAU,EAAE,+BAA+B,GAAG,IAAI,CAUhF;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C"}

package/esm/src/agent/runtime/sse-utils.js

@@ -5,6 +5,10 @@
  *
  * @module ai/agent/runtime/sse-utils
  */
+function isClosedStreamControllerError(error) {
+    return error instanceof TypeError &&
+        error.message.includes("The stream controller cannot close or enqueue");
+}
 /**
  * Encode and enqueue a Server-Sent Event (SSE) to the stream controller.
  * Formats event as: data: {json}\n\n
@@ -12,6 +16,17 @@
 export function sendSSE(controller, encoder, event) {
     controller.enqueue(encoder.encode(`data: ${JSON.stringify(event)}\n\n`));
 }
+export function closeSSEStream(controller) {
+    try {
+        controller.close();
+    }
+    catch (error) {
+        if (isClosedStreamControllerError(error)) {
+            return;
+        }
+        throw error;
+    }
+}
 /**
  * Generate a unique message ID for streaming.
  */

package/esm/src/internal-agents/run-stream.d.ts

@@ -7,7 +7,7 @@ export interface RuntimeAgentStreamExecutionDeps {
     createRuntime?: (agent: Agent, mergedTools: Agent["config"]["tools"]) => {
         stream: (messages: Message[], context?: Record<string, unknown>, callbacks?: {
             onFinish?: (response: AgentResponse) => void;
-        }) => Promise<ReadableStream<Uint8Array>>;
+        }, modelOverride?: string, maxOutputTokensOverride?: number, abortSignal?: AbortSignal) => Promise<ReadableStream<Uint8Array>>;
     };
 }
 export declare function createRuntimeAgentStreamResponse(input: RuntimeRunAgentInput, agent: Agent, deps: RuntimeAgentStreamExecutionDeps): Promise<dntShim.Response>;

package/esm/src/internal-agents/run-stream.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-stream.d.ts","sourceRoot":"","sources":["../../../src/src/internal-agents/run-stream.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EACL,KAAK,KAAK,EACV,KAAK,YAAY,IAAI,OAAO,EAC5B,KAAK,aAAa,EAEnB,MAAM,mBAAmB,CAAC;AAW3B,OAAO,EAA0B,KAAK,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAIxD,MAAM,WAAW,+BAA+B;IAC9C,cAAc,EAAE,sBAAsB,CAAC;IACvC,aAAa,CAAC,EAAE,CACd,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAClC;QACH,MAAM,EAAE,CACN,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,CAAC,EAAE;YACV,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;SAC9C,KACE,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;KAC1C,CAAC;CACH;AAsKD,wBAAsB,gCAAgC,CACpD,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,+BAA+B,GACpC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAmJ3B"}
+{"version":3,"file":"run-stream.d.ts","sourceRoot":"","sources":["../../../src/src/internal-agents/run-stream.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EACL,KAAK,KAAK,EACV,KAAK,YAAY,IAAI,OAAO,EAC5B,KAAK,aAAa,EAEnB,MAAM,mBAAmB,CAAC;AAW3B,OAAO,EAA0B,KAAK,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC3F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAIxD,MAAM,WAAW,+BAA+B;IAC9C,cAAc,EAAE,sBAAsB,CAAC;IACvC,aAAa,CAAC,EAAE,CACd,KAAK,EAAE,KAAK,EACZ,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAClC;QACH,MAAM,EAAE,CACN,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,SAAS,CAAC,EAAE;YACV,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;SAC9C,EACD,aAAa,CAAC,EAAE,MAAM,EACtB,uBAAuB,CAAC,EAAE,MAAM,EAChC,WAAW,CAAC,EAAE,WAAW,KACtB,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;KAC1C,CAAC;CACH;AAsKD,wBAAsB,gCAAgC,CACpD,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,+BAA+B,GACpC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAsJ3B"}

package/esm/src/internal-agents/run-stream.js

@@ -150,7 +150,7 @@ export async function createRuntimeAgentStreamResponse(input, agent, deps) {
             onFinish: (response) => {
                 completedResponse = response;
             },
-        });
+        }, undefined, undefined, abortSignal);
     }
     catch (error) {
         deps.sessionManager.failRun(input.runId);

package/esm/src/proxy/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/src/proxy/handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,KAAK,YAAY,EAAsB,MAAM,kCAAkC,CAAC;AACzF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAQnD,eAAO,MAAM,sBAAsB,0MAYzB,CAAC;AAgIX,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,SAAS,GAAG,YAAY,CAAC;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,YAAY,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE;QACN,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC9D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC9E;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAoFD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB;0BA6L1B,OAAO,CAAC,OAAO,KAAG,OAAO,CAAC,YAAY,CAAC;0BA2QvC,OAAO,CAAC,OAAO,KAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;;;;;;;;0BA7YrD,MAAM,EAAE;;EA2bpC;AAED,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEjE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAwB7F"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../../../src/src/proxy/handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,KAAK,YAAY,EAAsB,MAAM,kCAAkC,CAAC;AACzF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAQnD,eAAO,MAAM,sBAAsB,0MAYzB,CAAC;AAmIX,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,SAAS,GAAG,YAAY,CAAC;IACtC,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,YAAY,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;IACxB,KAAK,CAAC,EAAE;QACN,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC9D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAC7D,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC9E;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAoFD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB;0BAsM1B,OAAO,CAAC,OAAO,KAAG,OAAO,CAAC,YAAY,CAAC;0BA2QvC,OAAO,CAAC,OAAO,KAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;;;;;;;;0BAtZrD,MAAM,EAAE;;EAocpC;AAED,MAAM,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEjE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAwB7F"}

package/esm/src/proxy/handler.js

@@ -47,10 +47,13 @@ function getApiJwks(apiBaseUrl, logger) {
         const normalizedBaseUrl = apiBaseUrl.endsWith("/") ? apiBaseUrl : `${apiBaseUrl}/`;
         const jwksUrl = new URL(".well-known/jwks.json", normalizedBaseUrl);
         const cacheKey = jwksUrl.toString();
+        // Lazily initialize and cache JWKS in a single, idempotent step to avoid
+        // unsynchronized read/then-write on the shared Map across concurrent calls.
         let jwks = remoteJwksByUrl.get(cacheKey);
         if (!jwks) {
-            jwks = createRemoteJWKSet(jwksUrl);
-            remoteJwksByUrl.set(cacheKey, jwks);
+            const created = createRemoteJWKSet(jwksUrl);
+            remoteJwksByUrl.set(cacheKey, created);
+            jwks = created;
         }
         return jwks;
     }
@@ -246,7 +249,14 @@ export function createProxyHandler(options) {
         const url = new URL(req.url);
         // Collapse leading slashes to prevent protocol-relative open redirects (e.g. "//evil.com/path")
         const safePath = url.pathname.replace(/^\/\/+/, "/");
-        const returnPath = safePath + url.search;
+        let returnPath = safePath + url.search;
+        // Ensure the return path stays within the application and is not an absolute URL.
+        // - It must start with "/".
+        // - It must not contain a scheme delimiter ("://").
+        // If it fails validation, fall back to the root path.
+        if (!returnPath.startsWith("/") || returnPath.includes("://")) {
+            returnPath = "/";
+        }
         return `https://veryfront.com/sign-in?from=${encodeURIComponent(returnPath)}`;
     }
     async function checkProtectedAccess(req, matchingEnv, userToken, users, logContext) {

package/esm/src/server/handlers/request/api/project-discovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project-discovery.d.ts","sourceRoot":"","sources":["../../../../../../src/src/server/handlers/request/api/project-discovery.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AA8CrD;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CA+D/E"}
+{"version":3,"file":"project-discovery.d.ts","sourceRoot":"","sources":["../../../../../../src/src/server/handlers/request/api/project-discovery.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AA8CrD;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAkE/E"}

package/esm/src/server/handlers/request/api/project-discovery.js

@@ -97,7 +97,10 @@ export async function ensureProjectDiscovery(ctx) {
     }
     finally {
         if (!cacheCompletedDiscovery) {
-            discoveredProjects.delete(key);
+            const current = discoveredProjects.get(key);
+            if (current === promise) {
+                discoveredProjects.delete(key);
+            }
         }
     }
 }

package/esm/src/utils/version.d.ts

@@ -1,4 +1,4 @@
-export declare const VERSION = "0.1.103";
+export declare const VERSION = "0.1.105";
 export declare function normalizeVeryfrontVersion(version: string | undefined): string | undefined;
 export declare function resolveRuntimeVersion(options?: {
     veryfrontVersion?: string;
@@ -13,5 +13,5 @@ export interface BuildVersion {
     serverStart: number;
     projectUpdated?: string;
 }
-export declare function createBuildVersion(projectUpdatedAt?: string): BuildVersion;
+export declare function createBuildVersion(projectUpdated?: string): BuildVersion;
 //# sourceMappingURL=version.d.ts.map

package/esm/src/utils/version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../../src/src/utils/version.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,OAAO,YAAY,CAAC;AAEjC,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAGzF;AAUD,wBAAgB,qBAAqB,CAAC,OAAO,GAAE;IAC7C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,MAAM,CAKd;AAED,eAAO,MAAM,eAAe,QAK1B,CAAC;AAEH,eAAO,MAAM,iBAAiB,EAAE,MAAmB,CAAC;AAEpD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,kBAAkB,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,YAAY,CAM1E"}
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../../src/src/utils/version.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,OAAO,YAAY,CAAC;AAEjC,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAGzF;AAUD,wBAAgB,qBAAqB,CAAC,OAAO,GAAE;IAC7C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,MAAM,CAKd;AAED,eAAO,MAAM,eAAe,QAK1B,CAAC;AAEH,eAAO,MAAM,iBAAiB,EAAE,MAAmB,CAAC;AAEpD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,kBAAkB,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,YAAY,CAMxE"}

package/esm/src/utils/version.js

@@ -2,7 +2,7 @@ import denoConfig from "../../deno.js";
 import { getEnv } from "../platform/compat/process.js";
 // Keep in sync with deno.json version.
 // scripts/release.ts updates this constant during releases.
-export const VERSION = "0.1.103";
+export const VERSION = "0.1.105";
 export function normalizeVeryfrontVersion(version) {
     if (!version)
         return undefined;
@@ -29,10 +29,10 @@ export const RUNTIME_VERSION = resolveRuntimeVersion({
     fallbackVersion: VERSION,
 });
 export const SERVER_START_TIME = Date.now();
-export function createBuildVersion(projectUpdatedAt) {
+export function createBuildVersion(projectUpdated) {
     return {
         framework: RUNTIME_VERSION,
         serverStart: SERVER_START_TIME,
-        projectUpdated: projectUpdatedAt,
+        projectUpdated,
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "veryfront",
-  "version": "0.1.103",
+  "version": "0.1.105",
   "description": "The simplest way to build AI-powered apps",
   "keywords": [
     "react",

package/src/deno.js

@@ -1,6 +1,6 @@
 export default {
   "name": "veryfront",
-  "version": "0.1.103",
+  "version": "0.1.105",
   "license": "Apache-2.0",
   "nodeModulesDir": "auto",
   "exclude": [

package/src/src/agent/runtime/ai-stream-handler.ts

@@ -38,6 +38,23 @@ export interface AIStreamCallbacks {
   }) => void;
 }
 
+function createAbortError(reason?: unknown): Error {
+  if (reason instanceof Error) {
+    return reason;
+  }
+
+  return new DOMException(
+    typeof reason === "string" && reason.length > 0 ? reason : "The operation was aborted",
+    "AbortError",
+  );
+}
+
+function throwIfAborted(abortSignal?: AbortSignal): void {
+  if (abortSignal?.aborted) {
+    throw createAbortError(abortSignal.reason);
+  }
+}
+
 export function createStreamState(): AIStreamState {
   return {
     accumulatedText: "",
@@ -64,11 +81,15 @@ export function processStream(
   encoder: TextEncoder,
   textPartId: string | undefined,
   callbacks?: AIStreamCallbacks,
+  abortSignal?: AbortSignal,
 ): Promise<void> {
   return withSpan("agent.runtime.processStream", async () => {
     let eventCount = 0;
 
+    throwIfAborted(abortSignal);
+
     for await (const part of result.fullStream) {
+      throwIfAborted(abortSignal);
       eventCount++;
 
       switch (part.type) {
@@ -169,8 +190,12 @@ export function processStream(
           // Ignore other stream parts (source, file, reasoning-*, etc.)
           break;
       }
+
+      throwIfAborted(abortSignal);
     }
 
+    throwIfAborted(abortSignal);
+
     setActiveSpanAttributes({
       "stream.event_count": eventCount,
       "stream.tool_calls": state.toolCalls.size,

package/src/src/agent/runtime/index.ts

@@ -21,7 +21,7 @@ import {
   type MessagePart,
   type ToolCall,
 } from "../types.js";
-import { ensureModelReady, findAvailableCloudModel, resolveModel } from "../../provider/index.js";
+import { ensureModelReady, resolveModel } from "../../provider/index.js";
 import { generateId } from "../../utils/id.js";
 import { detectPlatform, getPlatformCapabilities } from "../../platform/core-platform.js";
 import { createMemory, type Memory } from "../memory/index.js";
@@ -39,7 +39,7 @@ import { generateText, type LanguageModel, streamText } from "ai";
 import { AGENT_DEFAULTS } from "../ai-defaults.js";
 
 // Re-export from submodules
-export { generateMessageId, sendSSE } from "./sse-utils.js";
+export { closeSSEStream, generateMessageId, sendSSE } from "./sse-utils.js";
 export {
   executeConfiguredTool,
   getAvailableTools,
@@ -58,7 +58,7 @@ export {
 } from "./constants.js";
 
 import { DEFAULT_MAX_TOKENS, DEFAULT_TEMPERATURE } from "./constants.js";
-import { generateMessageId, sendSSE } from "./sse-utils.js";
+import { closeSSEStream, generateMessageId, sendSSE } from "./sse-utils.js";
 import {
   executeConfiguredTool,
   getAvailableTools,
@@ -71,11 +71,36 @@ import {
   isToolAllowedBySkill,
   validateAllowedToolPatterns,
 } from "../../skill/allowed-tools.js";
-import { resolveConfiguredAgentModel } from "./model-resolution.js";
+import { resolveConfiguredAgentModel, resolveRuntimeModel } from "./model-resolution.js";
 
 const logger = serverLogger.component("agent");
 const LOAD_SKILL_TOOL_ID = "load-skill";
 
+function createAbortError(reason?: unknown): Error {
+  if (reason instanceof Error) {
+    return reason;
+  }
+
+  return new DOMException(
+    typeof reason === "string" && reason.length > 0 ? reason : "The operation was aborted",
+    "AbortError",
+  );
+}
+
+function throwIfAborted(abortSignal?: AbortSignal): void {
+  if (abortSignal?.aborted) {
+    throw createAbortError(abortSignal.reason);
+  }
+}
+
+function isAbortError(error: unknown, abortSignal?: AbortSignal): boolean {
+  if (abortSignal?.aborted && error === abortSignal.reason) {
+    return true;
+  }
+
+  return error instanceof DOMException && error.name === "AbortError";
+}
+
 function getSkillActivationRequiredError(toolName: string): string {
   return `Tool "${toolName}" cannot run before load-skill succeeds in the same step. ` +
     `Call "${LOAD_SKILL_TOOL_ID}" first to establish the active skill context.`;
@@ -149,26 +174,6 @@ export function enforceSkillPolicy(
   return { allowed: true };
 }
 
-/**
- * Auto-upgrade a local model string to a cloud provider when API keys are available.
- *
- * Returns the upgraded "provider/model" string, or the original string unchanged
- * if no cloud provider is available. This keeps resolveModel as a pure resolver
- * while the runtime owns the upgrade policy.
- */
-function maybeUpgradeLocalModel(modelString: string): string {
-  if (!modelString.startsWith("local/")) return modelString;
-
-  const cloud = findAvailableCloudModel();
-  if (cloud) {
-    logger.info(
-      `⚡ Cloud AI API key found — using "${cloud}" instead of local model.`,
-    );
-    return cloud;
-  }
-  return modelString;
-}
-
 /**
  * Check whether a resolved LanguageModel is a local inference model.
  * Checks the model object properties rather than the requested string,
@@ -206,7 +211,12 @@ export class AgentRuntime {
     maxOutputTokensOverride?: number,
   ): Promise<AgentResponse> {
     const requestedModel = resolveConfiguredAgentModel(modelOverride || this.config.model);
-    const resolvedModelString = maybeUpgradeLocalModel(requestedModel);
+    const resolvedModelString = resolveRuntimeModel(modelOverride || this.config.model);
+    if (resolvedModelString !== requestedModel) {
+      logger.info(
+        `⚡ Using runtime model "${resolvedModelString}" instead of "${requestedModel}".`,
+      );
+    }
 
     return withSpan("agent.generate", async (span) => {
       setSpanAttributes(span, {
@@ -256,10 +266,15 @@ export class AgentRuntime {
     },
     modelOverride?: string,
     maxOutputTokensOverride?: number,
+    abortSignal?: AbortSignal,
   ): Promise<ReadableStream<Uint8Array>> {
     const requestedModel = resolveConfiguredAgentModel(modelOverride || this.config.model);
-    // Auto-upgrade local/* to a cloud provider when API keys are available.
-    const resolvedModelString = maybeUpgradeLocalModel(requestedModel);
+    const resolvedModelString = resolveRuntimeModel(modelOverride || this.config.model);
+    if (resolvedModelString !== requestedModel) {
+      logger.info(
+        `⚡ Using runtime model "${resolvedModelString}" instead of "${requestedModel}".`,
+      );
+    }
 
     for (const msg of messages) await this.memory.add(msg);
 
@@ -267,7 +282,19 @@ export class AgentRuntime {
     const systemPrompt = await this.resolveSystemPrompt();
 
     const encoder = new TextEncoder();
-    const toolContext = { agentId: this.id, ...context };
+    const streamAbortController = new AbortController();
+    const forwardAbort = () => {
+      streamAbortController.abort(abortSignal?.reason);
+    };
+    if (abortSignal) {
+      if (abortSignal.aborted) {
+        streamAbortController.abort(abortSignal.reason);
+      } else {
+        abortSignal.addEventListener("abort", forwardAbort, { once: true });
+      }
+    }
+    const streamAbortSignal = streamAbortController.signal;
+    const toolContext = { agentId: this.id, abortSignal: streamAbortSignal, ...context };
     const textPartId = generateId("text");
 
     // Resolve model BEFORE creating the ReadableStream — if this throws
@@ -289,6 +316,7 @@ export class AgentRuntime {
     return new ReadableStream<Uint8Array>({
       start: async (controller) => {
         try {
+          throwIfAborted(streamAbortSignal);
           this.status = "streaming";
 
           const messageId = generateMessageId();
@@ -319,22 +347,35 @@ export class AgentRuntime {
             resolvedModelString,
             languageModel,
             maxOutputTokensOverride,
+            streamAbortSignal,
           );
+          throwIfAborted(streamAbortSignal);
           callbacks?.onFinish?.(response);
+          throwIfAborted(streamAbortSignal);
 
           sendSSE(controller, encoder, { type: "text-end", id: textPartId });
           sendSSE(controller, encoder, { type: "message-finish" });
-          controller.close();
+          closeSSEStream(controller);
         } catch (error) {
+          if (isAbortError(error, streamAbortSignal)) {
+            closeSSEStream(controller);
+            return;
+          }
+
           this.status = "error";
           logger.error("Agent stream error", { error });
           sendSSE(controller, encoder, {
             type: "error",
             error: "An internal error occurred",
           });
-          controller.close();
+          closeSSEStream(controller);
+        } finally {
+          abortSignal?.removeEventListener("abort", forwardAbort);
         }
       },
+      cancel(reason) {
+        streamAbortController.abort(reason);
+      },
     });
   }
 
@@ -350,7 +391,7 @@ export class AgentRuntime {
     return withSpan("agent.execution_loop", async (loopSpan) => {
       const { maxAgentSteps } = getPlatformCapabilities();
       const maxSteps = this.computeMaxSteps(maxAgentSteps);
-      const effectiveModel = resolveConfiguredAgentModel(modelString || this.config.model);
+      const effectiveModel = resolveRuntimeModel(modelString || this.config.model);
       const languageModel = resolveModel(effectiveModel);
 
       const toolCalls: ToolCall[] = [];
@@ -587,10 +628,11 @@ export class AgentRuntime {
     modelString?: string,
     resolvedModel?: LanguageModel,
     maxOutputTokensOverride?: number,
+    abortSignal?: AbortSignal,
   ): Promise<AgentResponse> {
     const { maxAgentSteps } = getPlatformCapabilities();
     const maxSteps = this.computeMaxSteps(maxAgentSteps);
-    const effectiveModel = resolveConfiguredAgentModel(modelString || this.config.model);
+    const effectiveModel = resolveRuntimeModel(modelString || this.config.model);
     const languageModel = resolvedModel ?? resolveModel(effectiveModel);
 
     const toolCalls: ToolCall[] = [];
@@ -613,6 +655,7 @@ export class AgentRuntime {
     let finalFinishReason: string | undefined;
 
     for (let step = 0; step < maxSteps; step++) {
+      throwIfAborted(abortSignal);
       sendSSE(controller, encoder, { type: "step-start" });
 
       let tools = isLocalStreaming ? [] : getAvailableTools(this.config.tools, {
@@ -631,13 +674,15 @@ export class AgentRuntime {
         tools: convertToolsToAISDK(tools),
         maxOutputTokens: this.resolveMaxOutputTokens(maxOutputTokensOverride),
         temperature: DEFAULT_TEMPERATURE,
+        abortSignal,
       });
 
       const state = createStreamState();
       await processStream(result, state, controller, encoder, textPartId, {
         onChunk: callbacks?.onChunk,
         onUsage: (usage) => accumulateUsage(totalUsage, usage),
-      });
+      }, abortSignal);
+      throwIfAborted(abortSignal);
       finalFinishReason = state.finishReason ?? finalFinishReason;
 
       const streamParts: MessagePart[] = [];
@@ -680,6 +725,7 @@ export class AgentRuntime {
         streamedToolCalls.some((tc) => tc.name === LOAD_SKILL_TOOL_ID);
 
       for (const tc of streamedToolCalls) {
+        throwIfAborted(abortSignal);
         const { args, error: argError } = parseToolArgs(tc.arguments);
         const toolCall: ToolCall = { id: tc.id, name: tc.name, args, status: "pending" };
 
@@ -737,6 +783,7 @@ export class AgentRuntime {
               ...toolContext,
             },
           );
+          throwIfAborted(abortSignal);
 
           toolCall.status = "completed";
           toolCall.result = result;
@@ -785,6 +832,7 @@ export class AgentRuntime {
         }
       }
 
+      throwIfAborted(abortSignal);
       sendSSE(controller, encoder, { type: "step-end" });
       this.status = "thinking";
     }

package/src/src/agent/runtime/model-resolution.ts

@@ -1,7 +1,16 @@
+import {
+  getAnthropicEnvConfig,
+  getGoogleGenAIEnvConfig,
+  getOpenAIEnvConfig,
+} from "../../config/env.js";
+import { findAvailableCloudModel } from "../../provider/index.js";
 import { DEFAULT_LOCAL_MODEL } from "../../provider/local/model-catalog.js";
+import { isVeryfrontCloudEnabled } from "../../platform/cloud/resolver.js";
 
 export const AUTO_AGENT_MODEL = "auto";
 
+const HOSTED_PROVIDER_NAMES = new Set(["anthropic", "google", "openai"]);
+
 export function normalizeAgentModelConfig(model?: string): string {
   const normalized = model?.trim();
   return normalized && normalized.length > 0 ? normalized : AUTO_AGENT_MODEL;
@@ -11,3 +20,56 @@ export function resolveConfiguredAgentModel(model?: string): string {
   const normalized = normalizeAgentModelConfig(model);
   return normalized === AUTO_AGENT_MODEL ? `local/${DEFAULT_LOCAL_MODEL}` : normalized;
 }
+
+function hasDirectProviderCredentials(provider: string): boolean {
+  switch (provider) {
+    case "anthropic":
+      return Boolean(getAnthropicEnvConfig().apiKey);
+    case "google":
+      return Boolean(getGoogleGenAIEnvConfig().apiKey);
+    case "openai":
+      return Boolean(getOpenAIEnvConfig().apiKey);
+    default:
+      return false;
+  }
+}
+
+/**
+ * Resolve the effective runtime model string for agent execution.
+ *
+ * Runtime-only rewrites happen here:
+ * - `auto` still defaults to `local/*`
+ * - `local/*` upgrades to the first available cloud model when bootstrap exists
+ * - explicit hosted-provider models (`openai/*`, `anthropic/*`, `google/*`)
+ *   transparently route through `veryfront-cloud/*` when the runtime has
+ *   request-scoped Veryfront bootstrap but no direct provider API key
+ */
+export function resolveRuntimeModel(model?: string): string {
+  const configuredModel = resolveConfiguredAgentModel(model);
+
+  if (configuredModel.startsWith("veryfront-cloud/")) {
+    return configuredModel;
+  }
+
+  if (configuredModel.startsWith("local/")) {
+    return findAvailableCloudModel() ?? configuredModel;
+  }
+
+  const slashIndex = configuredModel.indexOf("/");
+  if (slashIndex === -1) {
+    return configuredModel;
+  }
+
+  const provider = configuredModel.slice(0, slashIndex);
+  const modelId = configuredModel.slice(slashIndex + 1);
+
+  if (!HOSTED_PROVIDER_NAMES.has(provider) || !modelId) {
+    return configuredModel;
+  }
+
+  if (!isVeryfrontCloudEnabled() || hasDirectProviderCredentials(provider)) {
+    return configuredModel;
+  }
+
+  return `veryfront-cloud/${provider}/${modelId}`;
+}

package/src/src/agent/runtime/sse-utils.ts

@@ -6,6 +6,11 @@
  * @module ai/agent/runtime/sse-utils
  */
 
+function isClosedStreamControllerError(error: unknown): error is TypeError {
+  return error instanceof TypeError &&
+    error.message.includes("The stream controller cannot close or enqueue");
+}
+
 /**
  * Encode and enqueue a Server-Sent Event (SSE) to the stream controller.
  * Formats event as: data: {json}\n\n
@@ -18,6 +23,18 @@ export function sendSSE(
   controller.enqueue(encoder.encode(`data: ${JSON.stringify(event)}\n\n`));
 }
 
+export function closeSSEStream(controller: ReadableStreamDefaultController): void {
+  try {
+    controller.close();
+  } catch (error) {
+    if (isClosedStreamControllerError(error)) {
+      return;
+    }
+
+    throw error;
+  }
+}
+
 /**
  * Generate a unique message ID for streaming.
  */

package/src/src/internal-agents/run-stream.ts

@@ -32,6 +32,9 @@ export interface RuntimeAgentStreamExecutionDeps {
       callbacks?: {
         onFinish?: (response: AgentResponse) => void;
       },
+      modelOverride?: string,
+      maxOutputTokensOverride?: number,
+      abortSignal?: AbortSignal,
     ) => Promise<ReadableStream<Uint8Array>>;
   };
 }
@@ -234,6 +237,9 @@ export async function createRuntimeAgentStreamResponse(
           completedResponse = response;
         },
       },
+      undefined,
+      undefined,
+      abortSignal,
     );
   } catch (error) {
     deps.sessionManager.failRun(input.runId);

package/src/src/proxy/handler.ts

@@ -72,11 +72,14 @@ function getApiJwks(apiBaseUrl: string, logger?: ProxyLogger) {
     const normalizedBaseUrl = apiBaseUrl.endsWith("/") ? apiBaseUrl : `${apiBaseUrl}/`;
     const jwksUrl = new URL(".well-known/jwks.json", normalizedBaseUrl);
     const cacheKey = jwksUrl.toString();
-    let jwks = remoteJwksByUrl.get(cacheKey);
 
+    // Lazily initialize and cache JWKS in a single, idempotent step to avoid
+    // unsynchronized read/then-write on the shared Map across concurrent calls.
+    let jwks = remoteJwksByUrl.get(cacheKey);
     if (!jwks) {
-      jwks = createRemoteJWKSet(jwksUrl);
-      remoteJwksByUrl.set(cacheKey, jwks);
+      const created = createRemoteJWKSet(jwksUrl);
+      remoteJwksByUrl.set(cacheKey, created);
+      jwks = created;
     }
 
     return jwks;
@@ -372,7 +375,16 @@ export function createProxyHandler(options: ProxyHandlerOptions) {
     const url = new URL(req.url);
     // Collapse leading slashes to prevent protocol-relative open redirects (e.g. "//evil.com/path")
     const safePath = url.pathname.replace(/^\/\/+/, "/");
-    const returnPath = safePath + url.search;
+    let returnPath = safePath + url.search;
+
+    // Ensure the return path stays within the application and is not an absolute URL.
+    // - It must start with "/".
+    // - It must not contain a scheme delimiter ("://").
+    // If it fails validation, fall back to the root path.
+    if (!returnPath.startsWith("/") || returnPath.includes("://")) {
+      returnPath = "/";
+    }
+
     return `https://veryfront.com/sign-in?from=${encodeURIComponent(returnPath)}`;
   }
 

package/src/src/server/handlers/request/api/project-discovery.ts

@@ -113,7 +113,10 @@ export async function ensureProjectDiscovery(ctx: HandlerContext): Promise<void>
     });
   } finally {
     if (!cacheCompletedDiscovery) {
-      discoveredProjects.delete(key);
+      const current = discoveredProjects.get(key);
+      if (current === promise) {
+        discoveredProjects.delete(key);
+      }
     }
   }
 }

package/src/src/utils/version.ts

@@ -3,7 +3,7 @@ import { getEnv } from "../platform/compat/process.js";
 
 // Keep in sync with deno.json version.
 // scripts/release.ts updates this constant during releases.
-export const VERSION = "0.1.103";
+export const VERSION = "0.1.105";
 
 export function normalizeVeryfrontVersion(version: string | undefined): string | undefined {
   if (!version) return undefined;
@@ -45,10 +45,10 @@ export interface BuildVersion {
   projectUpdated?: string;
 }
 
-export function createBuildVersion(projectUpdatedAt?: string): BuildVersion {
+export function createBuildVersion(projectUpdated?: string): BuildVersion {
   return {
     framework: RUNTIME_VERSION,
     serverStart: SERVER_START_TIME,
-    projectUpdated: projectUpdatedAt,
+    projectUpdated,
   };
 }