@productbrain/cli 0.1.0-beta.3503 → 0.1.0-beta.3516

package/dist/generated/routeLatencyBudget.generated.js

@@ -0,0 +1,348 @@
+// GENERATED by scripts/generate-route-latency-budget.mjs from packages/kernel-client/src/routeLatencyBudget.ts
+// and packages/kernel-client/src/generated/routes.generated.ts.
+// DO NOT EDIT. Run `npm run route-budget:codegen` to regenerate.
+//
+// WP-575 (TEN-2917, TEN-1126), commits_to DEC-64. This file is emitted IDENTICALLY into
+// packages/mcp-server and packages/cli so the two connectors cannot disagree about how
+// long a gateway route may take — the defect this work package removes was exactly that
+// disagreement (MCP hardcoded a blanket 10s, the CLI set none at all).
+//
+// The rationale — why route TYPE is the structural predictor of LLM exposure, and how
+// each value is grounded in DEC-64 rather than invented — lives with the declaration in
+// packages/kernel-client/src/routeLatencyBudget.ts. Read that file before changing a
+// number here; changing it HERE does nothing, the next codegen run overwrites it.
+//
+// Why a copy and not an import: both connectors consume @productbrain/kernel-client
+// TYPE-ONLY (mcp-server via a tsconfig paths alias for Railway's isolated Docker build,
+// DEC-701; cli as a devDependency it must not emit into its published dist/). A budget
+// sets an AbortSignal, so it is runtime code and cannot be type-erased. See the
+// generator header for the full constraint.
+/** The budget table, copied verbatim from the SSOT. Milliseconds. */
+export const ROUTE_LATENCY_BUDGET_MS = {
+    query: 10_000,
+    mutation: 10_000,
+    action: 30_000,
+};
+/**
+ * PER-ROUTE OVERRIDES — routes whose OWN server-side deadline exceeds their type's budget
+ * (PR #533 review, Codex P1). Route type predicts LLM EXPOSURE, not LLM COUNT: a flat
+ * action budget assumed every action is one inline LLM call, and shipped actions declare
+ * far longer deadlines. Bounding those at the type budget aborts a call the server is
+ * still legitimately working on. Each value is derived from a deadline the SERVER
+ * declares — see the SSOT for the citation behind every number.
+ */
+export const ROUTE_LATENCY_BUDGET_OVERRIDE_MS = {
+    // convex/intelligence/onboardingChat.ts:333 declares `timeoutMs: 45_000` for the extraction
+    // LLM call — 15s BEYOND the flat action budget. 60s clears it with room for the surrounding
+    // request/response work the 45s covers none of.
+    'onboarding.chat': 60_000,
+    // convex/intelligence/spineCheck.ts:210 sets SPINE_CHECK_WALL_CLOCK_BUDGET_MS = 4 * 60_000
+    // for its SEQUENTIAL strategy probes (:225-239, deliberately not Promise.all), and :215
+    // reserves a tail of one 25s probe + an optional 25s story pass + 10s. The server's own
+    // design ceiling is scheduleSpineCheck's 5-min MAX_RUN_IN_FLIGHT_MS lease (:206-209).
+    // 5.5 min sits above that ceiling and far under Convex's 10-min action cap.
+    'quality.spineCheck': 330_000,
+};
+/**
+ * The widest declared budget — the fail-safe default for a route name this map does not
+ * know. Derived from the tables rather than restated, so it cannot drift if a value moves.
+ * Spans the overrides too, so the unknown-route default is never TIGHTER than a budget
+ * already granted to a known route.
+ */
+export const WIDEST_ROUTE_LATENCY_BUDGET_MS = Math.max(...Object.values(ROUTE_LATENCY_BUDGET_MS), ...Object.values(ROUTE_LATENCY_BUDGET_OVERRIDE_MS));
+/** Every gateway route's Convex function type, from convex/http.ts's registry. */
+const ROUTE_TYPE_ENTRIES = {
+    "resolveWorkspace": "query",
+    "feedback.submit": "mutation",
+    "feedback.listOwn": "query",
+    "feedback.list": "action",
+    "feedback.note": "action",
+    "feedback.group": "action",
+    "feedback.status": "action",
+    "organisation.status": "query",
+    "organisation.assignMembership": "mutation",
+    "organisation.removeMembership": "mutation",
+    "organisation.setOwnership": "mutation",
+    "organisation.clearOwnership": "mutation",
+    "organisation.activate": "mutation",
+    "organisation.upgrade": "mutation",
+    "organisation.upgradeRung2": "mutation",
+    "organisation.upgradeRung3": "mutation",
+    "organisation.upgradeRung4": "mutation",
+    "organisation.updateGovernanceMode": "mutation",
+    "organisation.hierarchy.show": "query",
+    "organisation.hierarchy.setParent": "mutation",
+    "organisation.hierarchy.clearParent": "mutation",
+    "chain.seed": "mutation",
+    "chain.listCollections": "query",
+    "chain.getCollection": "query",
+    "chain.getCollectionFields": "query",
+    "chain.auditCollections": "query",
+    "chain.exportDefinitions": "query",
+    "chain.createCollection": "mutation",
+    "chain.updateCollection": "mutation",
+    "chain.listEntries": "query",
+    "chain.getEntry": "query",
+    "chain.batchGetEntries": "query",
+    "chain.createEntry": "action",
+    "chain.updateEntry": "mutation",
+    "chain.restoreArchivedEntry": "mutation",
+    "chain.moveToCollection": "mutation",
+    "chain.shapeAdvisories": "query",
+    "chain.shapeAdvisorySummary": "query",
+    "chain.showShapeAdvisory": "query",
+    "chain.dispositionShapeAdvisory": "mutation",
+    "conflicts.list": "query",
+    "conflicts.resolve": "mutation",
+    "conflicts.summary": "query",
+    "conflicts.snooze": "mutation",
+    "conflicts.reverdict": "mutation",
+    "direction.list": "query",
+    "direction.refresh": "action",
+    "direction.defer": "mutation",
+    "chain.classifyCollection": "action",
+    "chain.classifyStrategyCategory": "query",
+    "chain.batchClassifyHeuristic": "query",
+    "chain.resolveCollection": "action",
+    "chain.searchEntries": "query",
+    "chain.searchByCanonicalName": "query",
+    "chain.commitEntry": "mutation",
+    "chain.verifyEntry": "mutation",
+    "chain.batchCommitConstellation": "mutation",
+    "chain.listEntryHistory": "query",
+    "chain.listEntryVersions": "query",
+    "chain.createEntryRelation": "mutation",
+    "chain.createEntryRelations": "mutation",
+    "chain.removeEntryRelation": "mutation",
+    "chain.normalizeEntryDataLLM": "action",
+    "chain.decomposeContent": "action",
+    "chain.normalizeEntryDataPreview": "action",
+    "chain.listEntryRelations": "query",
+    "chain.scoreLinkCandidates": "query",
+    "chain.evaluateCoherence": "query",
+    "chain.listAutoLinkSuggestions": "query",
+    "chain.acceptAutoLinkSuggestion": "mutation",
+    "chain.dismissAutoLinkSuggestion": "mutation",
+    "chain.quarantineAutoLinkSuggestion": "mutation",
+    "chain.resurrectAutoLinkSuggestion": "mutation",
+    "chain.expireAutoLinkSuggestion": "mutation",
+    "chain.clusterAutoLinkSuggestions": "query",
+    "chain.batchApplyAutoLinkSuggestions": "action",
+    "chain.validateCommitConstellation": "query",
+    "chain.getCaptureContract": "query",
+    "chain.gatherContext": "query",
+    "chain.getConstellation": "query",
+    "chain.auditBet": "query",
+    "agentKnowledge.facilitateEnvelope": "action",
+    "agentKnowledge.wrapupEnvelope": "action",
+    "agentKnowledge.captureEnvelope": "action",
+    "chain.graphSuggestLinks": "query",
+    "chain.graphGatherContext": "query",
+    "chain.assembleBuildContext": "query",
+    "chain.qualityCheck": "query",
+    "chain.changeDetection": "query",
+    "chain.structuralAggregation": "query",
+    "chain.detectSemanticConflicts": "action",
+    "chain.taskAwareGatherContext": "query",
+    "chain.journeyAwareGatherContext": "query",
+    "chain.resolveTaskStartup": "query",
+    "chain.getBindingGovernanceView": "query",
+    "chain.resolveTaskStartupHybrid": "action",
+    "chain.taskAwareHybridGatherContext": "action",
+    "chain.gatherFromSeeds": "query",
+    "chain.getEntryNeighborhood": "query",
+    "chain.deepChainWalk": "action",
+    "chain.recordBriefRun": "mutation",
+    "chain.getLastBriefRun": "query",
+    "chain.incrementalChanges": "query",
+    "chain.compoundQuery": "action",
+    "chain.dismissSuggestion": "mutation",
+    "chain.recordSessionSignal": "mutation",
+    "chain.workspaceReadiness": "query",
+    "chain.getCaptureHealth": "query",
+    "chain.getGroundingHealth": "query",
+    "chain.recordGroundingOutcome": "mutation",
+    "chain.suggestLinksForCapture": "query",
+    "chain.setOnboardingCompleted": "mutation",
+    "chain.checkCardinalityWarning": "query",
+    "chain.ingestDocument": "action",
+    "chain.getOrientEntries": "query",
+    "chain.getOrientView": "action",
+    "chain.getRitualsSurface": "query",
+    "chain.getGovernanceWithRelations": "action",
+    "chain.classifyGovernance": "query",
+    "chain.getVocabulary": "query",
+    "scoreboard.get": "action",
+    "rework.report": "mutation",
+    "chain.listLabels": "query",
+    "chain.createLabel": "mutation",
+    "chain.updateLabel": "mutation",
+    "chain.deleteLabel": "mutation",
+    "chain.applyLabel": "mutation",
+    "chain.removeLabel": "mutation",
+    "chain.listEntriesByLabel": "query",
+    "setup.getActiveSurface": "query",
+    "setup.materializeSetup": "action",
+    "setup.recordTamperRefusal": "mutation",
+    "setup.recordTransition": "mutation",
+    "setup.getCurrentSetupState": "query",
+    "setup.listAssetsForUser": "query",
+    "setup.ingestSetupAsset": "mutation",
+    "setup.ingestSetupAssetWithBody": "action",
+    "setup.fetchAssetBody": "action",
+    "setup.auditAssetBodies": "action",
+    "setup.repairAssetBody": "action",
+    "setup.listFailedAuditReceipts": "action",
+    "setup.markPersonalSetupAssetDormantFromSync": "mutation",
+    "setup.resolveSemanticRefs": "query",
+    "setup.updateLastProjectedHash": "mutation",
+    "setup.getSkillSystemHealth": "query",
+    "setup.recordActivationReceipt": "mutation",
+    "setup.recordSetupInvocation": "mutation",
+    "setup.getUserActivationState": "query",
+    "setup.getPbSetupState": "query",
+    "setup.getSkillBody": "action",
+    "setup.stampMcpOnlySurface": "mutation",
+    "setup.stampDetectedSurfaces": "mutation",
+    "setup.getKey32Snapshot": "query",
+    "setup.getKey33Snapshot": "query",
+    "gaps.record": "mutation",
+    "gaps.resolve": "mutation",
+    "gaps.top": "query",
+    "gaps.stats": "query",
+    "agent.startSession": "mutation",
+    "agent.resumeSession": "mutation",
+    "agent.closeSession": "mutation",
+    "agent.markOriented": "mutation",
+    "agent.touchSession": "mutation",
+    "agent.recordActivity": "mutation",
+    "agent.getSession": "query",
+    "agent.getActiveSession": "query",
+    "agent.recentSessions": "query",
+    "agent.activityStats": "query",
+    "agent.getActivityByDay": "query",
+    "agent.validateSession": "query",
+    "agent.getSessionWrapup": "query",
+    "agent.recordWrapup": "mutation",
+    "agent.reportOrientMetric": "mutation",
+    "agent.listSessions": "query",
+    "agent.showConversation": "query",
+    "usage.getWorkspaceSummary": "query",
+    "quality.evaluateHeuristicAndSchedule": "mutation",
+    "quality.reEvaluateEntry": "mutation",
+    "quality.evaluateAtCapture": "action",
+    "quality.evaluateAtCommit": "action",
+    "quality.evaluateForReview": "action",
+    "quality.getCachedVerdict": "query",
+    "quality.getLatestVerdictForEntry": "query",
+    "quality.spineCheck": "action",
+    "quality.scheduleSpineCheck": "mutation",
+    "quality.getLatestSpineVerdict": "query",
+    "onboarding.chat": "action",
+    "workspace.health": "query",
+    "workspace.healthAll": "query",
+    "workspace.backfill": "mutation",
+    "workspace.backfillAll": "mutation",
+    "authorityDomains.readiness": "query",
+    "authorityDomains.add": "mutation",
+    "authorityDomains.propose": "action",
+    "authorityDomains.review": "query",
+    "authorityDomains.queueKnownTag": "mutation",
+    "authorityDomains.ratify": "mutation",
+    "authorityDomains.reject": "mutation",
+    "authorityDomains.discardPending": "mutation",
+    "authorityDomains.recordSample": "mutation",
+    "authorityDomains.benchmark": "action",
+    "authorityDomains.activateCutover": "mutation",
+    "authorityDomains.principleDistribution": "query",
+    "performance.getVitalsSummary": "query",
+    "performance.getApiOverview": "query",
+    "performance.getRouteBreakdown": "query",
+    "performance.getSlowSamples": "query",
+    "performance.getSampleCount": "query",
+    "chainwork.listTypes": "query",
+    "chainwork.getChainType": "query",
+    "chainwork.scoreRun": "query",
+    "chainwork.getArtifact": "query",
+    "chainwork.getWorkflowRun": "query",
+    "chainwork.getLatestWorkflowRun": "query",
+    "chainwork.recordWorkflowCheckpoint": "mutation",
+    "chainwork.finalizeWorkflowRun": "action",
+    "chainwork.submitToKG": "action",
+    "chainwork.generate": "action",
+    "chainwork.getLastVerifiedBrief": "query",
+    "gitchain.createChain": "mutation",
+    "gitchain.editLink": "mutation",
+    "gitchain.updateChain": "mutation",
+    "gitchain.getChain": "query",
+    "gitchain.listChains": "query",
+    "gitchain.getHistory": "query",
+    "gitchain.listCommits": "query",
+    "gitchain.commitChain": "mutation",
+    "gitchain.diffVersions": "mutation",
+    "gitchain.runGate": "query",
+    "gitchain.createBranch": "mutation",
+    "gitchain.listBranches": "mutation",
+    "gitchain.checkConflicts": "mutation",
+    "gitchain.mergeBranch": "mutation",
+    "gitchain.addComment": "mutation",
+    "gitchain.resolveComment": "mutation",
+    "gitchain.listComments": "mutation",
+    "gitchain.revertChain": "mutation",
+    "staging.getCommittedSourceRefs": "query",
+    "staging.commitStagingEntryWithClassification": "action",
+    "governance.listProposals": "query",
+    "governance.countOpenProposals": "query",
+    "governance.respondToProposal": "mutation",
+    "maps.createMap": "mutation",
+    "maps.createAudienceMapSet": "mutation",
+    "maps.addToSlot": "mutation",
+    "maps.removeFromSlot": "mutation",
+    "maps.replaceInSlot": "mutation",
+    "maps.commitMap": "mutation",
+    "maps.getMap": "query",
+    "maps.listMaps": "query",
+    "maps.getJourneyMapWithEnrichment": "query",
+    "maps.listJourneyMaps": "query",
+    "maps.listMapCommits": "query",
+};
+/**
+ * NULL-PROTOTYPE, deliberately (PR #533 review, Codex P2).
+ *
+ * A plain object literal inherits Object.prototype, so an unknown route name that
+ * collides with an inherited member — `toString`, `constructor`, `valueOf` — resolves to a
+ * TRUTHY function instead of falling through to the widest-budget default below. That
+ * yielded `AbortSignal.timeout(undefined)`, which THROWS before the call ever reaches the
+ * gateway — turning the fail-safe default into a hard failure.
+ *
+ * The SSOT scans an array (`GATEWAY_ROUTES.find`) and has no such hole, so a plain-object
+ * copy DISAGREED with the source it is generated from — precisely the connector drift this
+ * file exists to end. A null prototype restores parity for every consumer of the map at
+ * once (`latencyBudgetMsForRoute` here, `routeMayMutate` in both connectors' seams) rather
+ * than guarding each lookup and leaving the next one to rediscover it.
+ */
+export const ROUTE_TYPE_BY_NAME = Object.assign(Object.create(null), ROUTE_TYPE_ENTRIES);
+/** Budget for a route TYPE. Total over the three kinds the registry can produce. */
+export function latencyBudgetMsForRouteType(type) {
+    return ROUTE_LATENCY_BUDGET_MS[type];
+}
+/**
+ * Budget for a route by NAME.
+ *
+ * FAILS SAFE, DELIBERATELY: an unknown name gets the WIDEST budget, not the tightest and
+ * not a throw. Guessing low on a route we cannot classify would abort a call still
+ * legitimately in flight and re-create the exact false-failure this work package removes.
+ * Guessing high only delays surfacing a genuinely stuck call — and an unknown name is
+ * almost always a caller bug the gateway rejects in milliseconds anyway.
+ */
+export function latencyBudgetMsForRoute(routeName) {
+    // `Object.hasOwn`, not truthiness: the override table is a plain literal, so a bare
+    // lookup would resolve INHERITED members to a truthy value. Same hole the null
+    // prototype closes above, guarded here because this table stays a plain literal.
+    if (Object.hasOwn(ROUTE_LATENCY_BUDGET_OVERRIDE_MS, routeName)) {
+        return ROUTE_LATENCY_BUDGET_OVERRIDE_MS[routeName];
+    }
+    const type = ROUTE_TYPE_BY_NAME[routeName];
+    return type ? latencyBudgetMsForRouteType(type) : WIDEST_ROUTE_LATENCY_BUDGET_MS;
+}
+//# sourceMappingURL=routeLatencyBudget.generated.js.map

package/dist/generated/routeLatencyBudget.generated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routeLatencyBudget.generated.js","sourceRoot":"","sources":["../../src/generated/routeLatencyBudget.generated.ts"],"names":[],"mappings":"AAAA,+GAA+G;AAC/G,gEAAgE;AAChE,iEAAiE;AACjE,EAAE;AACF,wFAAwF;AACxF,uFAAuF;AACvF,wFAAwF;AACxF,uEAAuE;AACvE,EAAE;AACF,sFAAsF;AACtF,wFAAwF;AACxF,qFAAqF;AACrF,kFAAkF;AAClF,EAAE;AACF,oFAAoF;AACpF,wFAAwF;AACxF,uFAAuF;AACvF,gFAAgF;AAChF,4CAA4C;AAI5C,qEAAqE;AACrE,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACtC,KAAK,EAAE,MAAM;IACb,QAAQ,EAAE,MAAM;IAChB,MAAM,EAAE,MAAM;CACL,CAAC;AAEX;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC/C,4FAA4F;IAC5F,4FAA4F;IAC5F,gDAAgD;IAChD,iBAAiB,EAAE,MAAM;IACzB,2FAA2F;IAC3F,wFAAwF;IACxF,wFAAwF;IACxF,sFAAsF;IACtF,4EAA4E;IAC5E,oBAAoB,EAAE,OAAO;CACpB,CAAC;AAEX;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAW,IAAI,CAAC,GAAG,CAC7D,GAAG,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,EACzC,GAAG,MAAM,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAClD,CAAC;AAEF,kFAAkF;AAClF,MAAM,kBAAkB,GAA+C;IACtE,kBAAkB,EAAE,OAAO;IAC3B,iBAAiB,EAAE,UAAU;IAC7B,kBAAkB,EAAE,OAAO;IAC3B,eAAe,EAAE,QAAQ;IACzB,eAAe,EAAE,QAAQ;IACzB,gBAAgB,EAAE,QAAQ;IAC1B,iBAAiB,EAAE,QAAQ;IAC3B,qBAAqB,EAAE,OAAO;IAC9B,+BAA+B,EAAE,UAAU;IAC3C,+BAA+B,EAAE,UAAU;IAC3C,2BAA2B,EAAE,UAAU;IACvC,6BAA6B,EAAE,UAAU;IACzC,uBAAuB,EAAE,UAAU;IACnC,sBAAsB,EAAE,UAAU;IAClC,2BAA2B,EAAE,UAAU;IACvC,2BAA2B,EAAE,UAAU;IACvC,2BAA2B,EAAE,UAAU;IACvC,mCAAmC,EAAE,UAAU;IAC/C,6BAA6B,EAAE,OAAO;IACtC,kCAAkC,EAAE,UAAU;IAC9C,oCAAoC,EAAE,UAAU;IAChD,YAAY,EAAE,UAAU;IACxB,uBAAuB,EAAE,OAAO;IAChC,qBAAqB,EAAE,OAAO;IAC9B,2BAA2B,EAAE,OAAO;IACpC,wBAAwB,EAAE,OAAO;IACjC,yBAAyB,EAAE,OAAO;IAClC,wBAAwB,EAAE,UAAU;IACpC,wBAAwB,EAAE,UAAU;IACpC,mBAAmB,EAAE,OAAO;IAC5B,gBAAgB,EAAE,OAAO;IACzB,uBAAuB,EAAE,OAAO;IAChC,mBAAmB,EAAE,QAAQ;IAC7B,mBAAmB,EAAE,UAAU;IAC/B,4BAA4B,EAAE,UAAU;IACxC,wBAAwB,EAAE,UAAU;IACpC,uBAAuB,EAAE,OAAO;IAChC,4BAA4B,EAAE,OAAO;IACrC,yBAAyB,EAAE,OAAO;IAClC,gCAAgC,EAAE,UAAU;IAC5C,gBAAgB,EAAE,OAAO;IACzB,mBAAmB,EAAE,UAAU;IAC/B,mBAAmB,EAAE,OAAO;IAC5B,kBAAkB,EAAE,UAAU;IAC9B,qBAAqB,EAAE,UAAU;IACjC,gBAAgB,EAAE,OAAO;IACzB,mBAAmB,EAAE,QAAQ;IAC7B,iBAAiB,EAAE,UAAU;IAC7B,0BAA0B,EAAE,QAAQ;IACpC,gCAAgC,EAAE,OAAO;IACzC,8BAA8B,EAAE,OAAO;IACvC,yBAAyB,EAAE,QAAQ;IACnC,qBAAqB,EAAE,OAAO;IAC9B,6BAA6B,EAAE,OAAO;IACtC,mBAAmB,EAAE,UAAU;IAC/B,mBAAmB,EAAE,UAAU;IAC/B,gCAAgC,EAAE,UAAU;IAC5C,wBAAwB,EAAE,OAAO;IACjC,yBAAyB,EAAE,OAAO;IAClC,2BAA2B,EAAE,UAAU;IACvC,4BAA4B,EAAE,UAAU;IACxC,2BAA2B,EAAE,UAAU;IACvC,6BAA6B,EAAE,QAAQ;IACvC,wBAAwB,EAAE,QAAQ;IAClC,iCAAiC,EAAE,QAAQ;IAC3C,0BAA0B,EAAE,OAAO;IACnC,2BAA2B,EAAE,OAAO;IACpC,yBAAyB,EAAE,OAAO;IAClC,+BAA+B,EAAE,OAAO;IACxC,gCAAgC,EAAE,UAAU;IAC5C,iCAAiC,EAAE,UAAU;IAC7C,oCAAoC,EAAE,UAAU;IAChD,mCAAmC,EAAE,UAAU;IAC/C,gCAAgC,EAAE,UAAU;IAC5C,kCAAkC,EAAE,OAAO;IAC3C,qCAAqC,EAAE,QAAQ;IAC/C,mCAAmC,EAAE,OAAO;IAC5C,0BAA0B,EAAE,OAAO;IACnC,qBAAqB,EAAE,OAAO;IAC9B,wBAAwB,EAAE,OAAO;IACjC,gBAAgB,EAAE,OAAO;IACzB,mCAAmC,EAAE,QAAQ;IAC7C,+BAA+B,EAAE,QAAQ;IACzC,gCAAgC,EAAE,QAAQ;IAC1C,yBAAyB,EAAE,OAAO;IAClC,0BAA0B,EAAE,OAAO;IACnC,4BAA4B,EAAE,OAAO;IACrC,oBAAoB,EAAE,OAAO;IAC7B,uBAAuB,EAAE,OAAO;IAChC,6BAA6B,EAAE,OAAO;IACtC,+BAA+B,EAAE,QAAQ;IACzC,8BAA8B,EAAE,OAAO;IACvC,iCAAiC,EAAE,OAAO;IAC1C,0BAA0B,EAAE,OAAO;IACnC,gCAAgC,EAAE,OAAO;IACzC,gCAAgC,EAAE,QAAQ;IAC1C,oCAAoC,EAAE,QAAQ;IAC9C,uBAAuB,EAAE,OAAO;IAChC,4BAA4B,EAAE,OAAO;IACrC,qBAAqB,EAAE,QAAQ;IAC/B,sBAAsB,EAAE,UAAU;IAClC,uBAAuB,EAAE,OAAO;IAChC,0BAA0B,EAAE,OAAO;IACnC,qBAAqB,EAAE,QAAQ;IAC/B,yBAAyB,EAAE,UAAU;IACrC,2BAA2B,EAAE,UAAU;IACvC,0BAA0B,EAAE,OAAO;IACnC,wBAAwB,EAAE,OAAO;IACjC,0BAA0B,EAAE,OAAO;IACnC,8BAA8B,EAAE,UAAU;IAC1C,8BAA8B,EAAE,OAAO;IACvC,8BAA8B,EAAE,UAAU;IAC1C,+BAA+B,EAAE,OAAO;IACxC,sBAAsB,EAAE,QAAQ;IAChC,wBAAwB,EAAE,OAAO;IACjC,qBAAqB,EAAE,QAAQ;IAC/B,yBAAyB,EAAE,OAAO;IAClC,kCAAkC,EAAE,QAAQ;IAC5C,0BAA0B,EAAE,OAAO;IACnC,qBAAqB,EAAE,OAAO;IAC9B,gBAAgB,EAAE,QAAQ;IAC1B,eAAe,EAAE,UAAU;IAC3B,kBAAkB,EAAE,OAAO;IAC3B,mBAAmB,EAAE,UAAU;IAC/B,mBAAmB,EAAE,UAAU;IAC/B,mBAAmB,EAAE,UAAU;IAC/B,kBAAkB,EAAE,UAAU;IAC9B,mBAAmB,EAAE,UAAU;IAC/B,0BAA0B,EAAE,OAAO;IACnC,wBAAwB,EAAE,OAAO;IACjC,wBAAwB,EAAE,QAAQ;IAClC,2BAA2B,EAAE,UAAU;IACvC,wBAAwB,EAAE,UAAU;IACpC,4BAA4B,EAAE,OAAO;IACrC,yBAAyB,EAAE,OAAO;IAClC,wBAAwB,EAAE,UAAU;IACpC,gCAAgC,EAAE,QAAQ;IAC1C,sBAAsB,EAAE,QAAQ;IAChC,wBAAwB,EAAE,QAAQ;IAClC,uBAAuB,EAAE,QAAQ;IACjC,+BAA+B,EAAE,QAAQ;IACzC,6CAA6C,EAAE,UAAU;IACzD,2BAA2B,EAAE,OAAO;IACpC,+BAA+B,EAAE,UAAU;IAC3C,4BAA4B,EAAE,OAAO;IACrC,+BAA+B,EAAE,UAAU;IAC3C,6BAA6B,EAAE,UAAU;IACzC,8BAA8B,EAAE,OAAO;IACvC,uBAAuB,EAAE,OAAO;IAChC,oBAAoB,EAAE,QAAQ;IAC9B,2BAA2B,EAAE,UAAU;IACvC,6BAA6B,EAAE,UAAU;IACzC,wBAAwB,EAAE,OAAO;IACjC,wBAAwB,EAAE,OAAO;IACjC,aAAa,EAAE,UAAU;IACzB,cAAc,EAAE,UAAU;IAC1B,UAAU,EAAE,OAAO;IACnB,YAAY,EAAE,OAAO;IACrB,oBAAoB,EAAE,UAAU;IAChC,qBAAqB,EAAE,UAAU;IACjC,oBAAoB,EAAE,UAAU;IAChC,oBAAoB,EAAE,UAAU;IAChC,oBAAoB,EAAE,UAAU;IAChC,sBAAsB,EAAE,UAAU;IAClC,kBAAkB,EAAE,OAAO;IAC3B,wBAAwB,EAAE,OAAO;IACjC,sBAAsB,EAAE,OAAO;IAC/B,qBAAqB,EAAE,OAAO;IAC9B,wBAAwB,EAAE,OAAO;IACjC,uBAAuB,EAAE,OAAO;IAChC,wBAAwB,EAAE,OAAO;IACjC,oBAAoB,EAAE,UAAU;IAChC,0BAA0B,EAAE,UAAU;IACtC,oBAAoB,EAAE,OAAO;IAC7B,wBAAwB,EAAE,OAAO;IACjC,2BAA2B,EAAE,OAAO;IACpC,sCAAsC,EAAE,UAAU;IAClD,yBAAyB,EAAE,UAAU;IACrC,2BAA2B,EAAE,QAAQ;IACrC,0BAA0B,EAAE,QAAQ;IACpC,2BAA2B,EAAE,QAAQ;IACrC,0BAA0B,EAAE,OAAO;IACnC,kCAAkC,EAAE,OAAO;IAC3C,oBAAoB,EAAE,QAAQ;IAC9B,4BAA4B,EAAE,UAAU;IACxC,+BAA+B,EAAE,OAAO;IACxC,iBAAiB,EAAE,QAAQ;IAC3B,kBAAkB,EAAE,OAAO;IAC3B,qBAAqB,EAAE,OAAO;IAC9B,oBAAoB,EAAE,UAAU;IAChC,uBAAuB,EAAE,UAAU;IACnC,4BAA4B,EAAE,OAAO;IACrC,sBAAsB,EAAE,UAAU;IAClC,0BAA0B,EAAE,QAAQ;IACpC,yBAAyB,EAAE,OAAO;IAClC,gCAAgC,EAAE,UAAU;IAC5C,yBAAyB,EAAE,UAAU;IACrC,yBAAyB,EAAE,UAAU;IACrC,iCAAiC,EAAE,UAAU;IAC7C,+BAA+B,EAAE,UAAU;IAC3C,4BAA4B,EAAE,QAAQ;IACtC,kCAAkC,EAAE,UAAU;IAC9C,wCAAwC,EAAE,OAAO;IACjD,8BAA8B,EAAE,OAAO;IACvC,4BAA4B,EAAE,OAAO;IACrC,+BAA+B,EAAE,OAAO;IACxC,4BAA4B,EAAE,OAAO;IACrC,4BAA4B,EAAE,OAAO;IACrC,qBAAqB,EAAE,OAAO;IAC9B,wBAAwB,EAAE,OAAO;IACjC,oBAAoB,EAAE,OAAO;IAC7B,uBAAuB,EAAE,OAAO;IAChC,0BAA0B,EAAE,OAAO;IACnC,gCAAgC,EAAE,OAAO;IACzC,oCAAoC,EAAE,UAAU;IAChD,+BAA+B,EAAE,QAAQ;IACzC,sBAAsB,EAAE,QAAQ;IAChC,oBAAoB,EAAE,QAAQ;IAC9B,gCAAgC,EAAE,OAAO;IACzC,sBAAsB,EAAE,UAAU;IAClC,mBAAmB,EAAE,UAAU;IAC/B,sBAAsB,EAAE,UAAU;IAClC,mBAAmB,EAAE,OAAO;IAC5B,qBAAqB,EAAE,OAAO;IAC9B,qBAAqB,EAAE,OAAO;IAC9B,sBAAsB,EAAE,OAAO;IAC/B,sBAAsB,EAAE,UAAU;IAClC,uBAAuB,EAAE,UAAU;IACnC,kBAAkB,EAAE,OAAO;IAC3B,uBAAuB,EAAE,UAAU;IACnC,uBAAuB,EAAE,UAAU;IACnC,yBAAyB,EAAE,UAAU;IACrC,sBAAsB,EAAE,UAAU;IAClC,qBAAqB,EAAE,UAAU;IACjC,yBAAyB,EAAE,UAAU;IACrC,uBAAuB,EAAE,UAAU;IACnC,sBAAsB,EAAE,UAAU;IAClC,gCAAgC,EAAE,OAAO;IACzC,8CAA8C,EAAE,QAAQ;IACxD,0BAA0B,EAAE,OAAO;IACnC,+BAA+B,EAAE,OAAO;IACxC,8BAA8B,EAAE,UAAU;IAC1C,gBAAgB,EAAE,UAAU;IAC5B,2BAA2B,EAAE,UAAU;IACvC,gBAAgB,EAAE,UAAU;IAC5B,qBAAqB,EAAE,UAAU;IACjC,oBAAoB,EAAE,UAAU;IAChC,gBAAgB,EAAE,UAAU;IAC5B,aAAa,EAAE,OAAO;IACtB,eAAe,EAAE,OAAO;IACxB,kCAAkC,EAAE,OAAO;IAC3C,sBAAsB,EAAE,OAAO;IAC/B,qBAAqB,EAAE,OAAO;CAC9B,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA+C,MAAM,CAAC,MAAM,CAC1F,MAAM,CAAC,MAAM,CAAC,IAAI,CAAqC,EACvD,kBAAkB,CAClB,CAAC;AAEF,oFAAoF;AACpF,MAAM,UAAU,2BAA2B,CAAC,IAAsB;IACjE,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAiB;IACxD,oFAAoF;IACpF,+EAA+E;IAC/E,iFAAiF;IACjF,IAAI,MAAM,CAAC,MAAM,CAAC,gCAAgC,EAAE,SAAS,CAAC,EAAE,CAAC;QAChE,OAAQ,gCAA2D,CAAC,SAAS,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAC,CAAC,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC;AAClF,CAAC"}

package/dist/lib/client.d.ts

@@ -9,17 +9,9 @@
  * sandboxed environments (Claude Code, Cursor) without requiring
  * NODE_OPTIONS="--use-env-proxy".
  */
+import type { ValidationErrorDetail } from './kernelEnvelope.js';
 import { CLIError } from './errors.js';
 import { type KernelCallOptions } from './rate-limit.js';
-/** Structured field-level detail from a VALIDATION_FAILED response. */
-export interface ValidationErrorDetail {
-    fieldKey: string;
-    fieldLabel: string;
-    invalidValue: unknown;
-    validOptions?: string[];
-    errorType: 'type_mismatch' | 'invalid_option' | 'required';
-    message: string;
-}
 /** Error thrown by kernelCall/kernelCallWithSession when the server returns a non-OK response. */
 export declare class McpError extends CLIError {
     details?: ValidationErrorDetail[];
@@ -28,6 +20,7 @@ export declare class McpError extends CLIError {
     constructor(message: string, code?: string, details?: ValidationErrorDetail[], retryAfterSeconds?: number);
 }
 export { resetTouchThrottle, type KernelCallOptions } from './rate-limit.js';
+export type { KernelEnvelope, ValidationErrorDetail } from './kernelEnvelope.js';
 /** Result of validateKey — used by `pb login` to verify a key before saving. */
 export type ValidateKeyResult = {
     valid: true;
@@ -43,6 +36,15 @@ export type ValidateKeyResult = {
  * Returns { valid: true, workspaceId } on success.
  * Returns { valid: false, error } on auth failure (401) or other server error.
  * Throws on network/timeout errors so the caller can distinguish "bad key" from "can't reach server".
+ *
+ * WP-575: `timeoutMs` now DEFAULTS to `resolveWorkspace`'s declared budget instead of a
+ * local `5000` literal — that literal was the last connector-owned timeout on the gateway
+ * path, and the point of this work package is that no connector gets to pick its own. It
+ * stays an explicit parameter so a caller (or a test) can still override deliberately.
+ * Widening 5s -> the declared 10s costs nothing in the case people actually hit: an
+ * unreachable host fails with ECONNREFUSED/ENOTFOUND immediately, not by timeout. The
+ * timeout only governs a server that ACCEPTS the connection then stalls, where waiting the
+ * route's real declared budget before calling the key invalid is the correct behavior.
  */
 export declare function validateKey(apiKey: string, siteUrl: string, timeoutMs?: number): Promise<ValidateKeyResult>;
 /** Get a human-friendly spinner label for an MCP function name. */

package/dist/lib/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAE,QAAQ,EAAa,MAAM,aAAa,CAAC;AAIlD,OAAO,EAAkC,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEzF,uEAAuE;AACvE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,EAAE,eAAe,GAAG,gBAAgB,GAAG,UAAU,CAAC;IAC3D,OAAO,EAAE,MAAM,CAAC;CACjB;AA8CD,kGAAkG;AAClG,qBAAa,QAAS,SAAQ,QAAQ;IACpC,OAAO,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAClC,sFAAsF;IACtF,iBAAiB,CAAC,EAAE,MAAM,CAAC;gBAEf,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,EAAE,EAAE,iBAAiB,CAAC,EAAE,MAAM;CAe1G;AAID,OAAO,EAAE,kBAAkB,EAAE,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAkE7E,gFAAgF;AAChF,MAAM,MAAM,iBAAiB,GACzB;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpC;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,SAAS,SAAO,GACf,OAAO,CAAC,iBAAiB,CAAC,CAqC5B;AA6BD,mEAAmE;AACnE,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,OAAO,CAAC,OAAO,CAAC,CAsBlB;AASD,wBAAsB,UAAU,CAAC,CAAC,GAAG,OAAO,EAC1C,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAClC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,CAAC,CA8BZ;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,GAAG,OAAO,EAClD,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAClC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC;IAAE,IAAI,EAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,CAAC,CA0B9F;AA0BD;;;;;;;;;;;;GAYG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,GAAG,OAAO,EACrD,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAClC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,CAAC,CAyCZ"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/lib/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAUH,OAAO,KAAK,EAAkB,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAGjF,OAAO,EAAE,QAAQ,EAAa,MAAM,aAAa,CAAC;AAGlD,OAAO,EAAkC,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AA+CzF,kGAAkG;AAClG,qBAAa,QAAS,SAAQ,QAAQ;IACpC,OAAO,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAClC,sFAAsF;IACtF,iBAAiB,CAAC,EAAE,MAAM,CAAC;gBAEf,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,EAAE,EAAE,iBAAiB,CAAC,EAAE,MAAM;CAe1G;AAID,OAAO,EAAE,kBAAkB,EAAE,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAK7E,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAoDjF,gFAAgF;AAChF,MAAM,MAAM,iBAAiB,GACzB;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpC;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,SAAS,SAA8C,GACtD,OAAO,CAAC,iBAAiB,CAAC,CAqC5B;AA6BD,mEAAmE;AACnE,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,OAAO,CAAC,OAAO,CAAC,CAgClB;AASD,wBAAsB,UAAU,CAAC,CAAC,GAAG,OAAO,EAC1C,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAClC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,CAAC,CAgCZ;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,GAAG,OAAO,EAClD,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAClC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC;IAAE,IAAI,EAAE,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,CAAC,CA4B9F;AA+BD;;;;;;;;;;;;GAYG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,GAAG,OAAO,EACrD,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAClC,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,CAAC,CAAC,CA+CZ"}

package/dist/lib/client.js

@@ -9,11 +9,18 @@
  * sandboxed environments (Claude Code, Cursor) without requiring
  * NODE_OPTIONS="--use-env-proxy".
  */
+// WP-575 (TEN-2917): every gateway call is bounded by the budget DECLARED at the route
+// contract — see ./gatewayTimeout.ts for why a copy, and why the CLI had none before.
+import { latencyBudgetMsForRoute } from '../generated/routeLatencyBudget.generated.js';
+import { gatewayTimeoutError, isTimeoutAbort } from './gatewayTimeout.js';
+// The envelope's shape and how to read one off a Response — including the body-phase budget
+// abort (WP-575 review). Split out under STD-2/DEC-1504; see ./kernelEnvelope.ts's header for
+// why the seam is real and not a line-count dodge.
+import { parseKernelEnvelope, recordLatestFromResponse } from './kernelEnvelope.js';
 import { getConfig, resolveAdminConfig } from './config.js';
 import { readSession } from './session.js';
 import { CLIError, ErrorCode } from './errors.js';
 import { withSpinner } from './spinner.js';
-import { recordServerLatest } from './update-check.js';
 import { maybeRetry, shouldTouchSession } from './rate-limit.js';
 /**
  * Map MCP server error codes to CLIError categories.
@@ -85,13 +92,6 @@ export class McpError extends CLIError {
 // WP-579: the rate-limit retry and touch throttle live in rate-limit.ts — two
 // self-contained policies with their own state, kept out of this module's budget (STD-2).
 export { resetTouchThrottle } from './rate-limit.js';
-function recordLatestFromResponse(res) {
-    recordServerLatest(res.headers?.get?.('pb-latest-cli-version') ?? null);
-}
-async function parseKernelEnvelope(res) {
-    recordLatestFromResponse(res);
-    return (await res.json().catch(() => ({})));
-}
 // Configure proxy at module load — runs once, before any fetch call.
 // Node.js fetch (undici) ignores HTTPS_PROXY env vars. We detect the proxy
 // and install a ProxyAgent as the global dispatcher so all fetch() calls
@@ -107,8 +107,16 @@ catch {
     // undici unavailable or proxy config failed — rethrowWithGuidance handles it.
 }
 /** Detect a sandbox/network-blocked fetch and re-throw with guidance. */
-function rethrowWithGuidance(err, siteUrl) {
+function rethrowWithGuidance(err, siteUrl, 
+// WP-575: the route being called, the budget it was given, and the call's own args, so a
+// budget abort can be reported as itself rather than collapsing into "Could not reach
+// <host>" — and so a dry run is never told its write may have landed (see ./gatewayTimeout.ts).
+route) {
     const msg = err instanceof Error ? err.message : String(err);
+    // WP-575: a budget abort is not an unreachable host — the connection succeeded, we stopped
+    // waiting, and for a write route the server may have finished. See ./gatewayTimeout.ts.
+    if (route && isTimeoutAbort(err))
+        throw gatewayTimeoutError(route.fn, route.budgetMs, route.args);
     if (msg === 'fetch failed' || msg.includes('ECONNREFUSED') || msg.includes('ENOTFOUND')) {
         const host = new URL(siteUrl).hostname;
         const proxy = process.env.https_proxy || process.env.HTTPS_PROXY;
@@ -136,8 +144,17 @@ function rethrowWithGuidance(err, siteUrl) {
  * Returns { valid: true, workspaceId } on success.
  * Returns { valid: false, error } on auth failure (401) or other server error.
  * Throws on network/timeout errors so the caller can distinguish "bad key" from "can't reach server".
+ *
+ * WP-575: `timeoutMs` now DEFAULTS to `resolveWorkspace`'s declared budget instead of a
+ * local `5000` literal — that literal was the last connector-owned timeout on the gateway
+ * path, and the point of this work package is that no connector gets to pick its own. It
+ * stays an explicit parameter so a caller (or a test) can still override deliberately.
+ * Widening 5s -> the declared 10s costs nothing in the case people actually hit: an
+ * unreachable host fails with ECONNREFUSED/ENOTFOUND immediately, not by timeout. The
+ * timeout only governs a server that ACCEPTS the connection then stalls, where waiting the
+ * route's real declared budget before calling the key invalid is the correct behavior.
  */
-export async function validateKey(apiKey, siteUrl, timeoutMs = 5000) {
+export async function validateKey(apiKey, siteUrl, timeoutMs = latencyBudgetMsForRoute('resolveWorkspace')) {
     return withSpinner('Validating API key', async () => {
         const controller = new AbortController();
         const timer = setTimeout(() => controller.abort(), timeoutMs);
@@ -209,6 +226,16 @@ export function spinnerLabel(fn) {
  */
 export async function adminCall(command, args) {
     const { apiKey, siteUrl } = resolveAdminConfig();
+    // WP-575 deliberately leaves /api/admin UNBOUNDED (PR #533 review, Codex P2 — an earlier
+    // round bounded it and that was the regression). Admin commands are long-running BULK
+    // operations (`manage:delete-workspace` cascading 100-row batches, `seed:backfill-starter`
+    // across workspaces) and are NOT in the route registry, so the fail-safe "widest" fallback
+    // is a real number for a route the contract describes and a guess for one it doesn't —
+    // an arbitrary ceiling on a destructive operation that can abort it mid-flight, which is
+    // worse than the hang it would prevent. (That fallback is whatever
+    // WIDEST_ROUTE_LATENCY_BUDGET_MS happens to be — today 330_000, since it spans the override
+    // table too — which is the point: a number that MOVES when an unrelated route's override
+    // changes is not a budget for this surface.) It needs its own MEASURED budget: follow-up work.
     let res;
     try {
         res = await fetch(`${siteUrl}/api/admin`, {
@@ -238,6 +265,7 @@ const PB_TELEMETRY_SOURCE = 'cli';
 export async function kernelCall(fn, args = {}, options) {
     const { apiKey, siteUrl } = getConfig();
     const label = spinnerLabel(fn);
+    const budgetMs = latencyBudgetMsForRoute(fn);
     // Spinner OUTSIDE the retry: withSpinner reports a terminal `— failed` line on any throw,
     // so a spinner per attempt would paint up to MAX_RATE_LIMIT_RETRIES false failures for a
     // call that ultimately succeeds, then sit silent through each Retry-After wait.
@@ -246,6 +274,7 @@ export async function kernelCall(fn, args = {}, options) {
         try {
             res = await fetch(`${siteUrl}/api/aki`, {
                 method: 'POST',
+                signal: AbortSignal.timeout(budgetMs),
                 headers: {
                     'Content-Type': 'application/json',
                     Authorization: `Bearer ${apiKey}`,
@@ -256,9 +285,9 @@ export async function kernelCall(fn, args = {}, options) {
             });
         }
         catch (err) {
-            rethrowWithGuidance(err, siteUrl);
+            rethrowWithGuidance(err, siteUrl, { fn, budgetMs, args });
         }
-        const envelope = await parseKernelEnvelope(res);
+        const envelope = await parseKernelEnvelope(res, { fn, budgetMs, args });
         if (!res.ok || envelope.ok === false) {
             throw new McpError(envelope.message || envelope.error || res.statusText, envelope.code, envelope.details, envelope.retryAfterSeconds);
         }
@@ -275,11 +304,13 @@ export async function kernelCall(fn, args = {}, options) {
 export async function kernelCallEnvelope(fn, args = {}, options) {
     const { apiKey, siteUrl } = getConfig();
     const label = spinnerLabel(fn);
+    const budgetMs = latencyBudgetMsForRoute(fn);
     return withSpinner(label, () => maybeRetry(async () => {
         let res;
         try {
             res = await fetch(`${siteUrl}/api/aki`, {
                 method: 'POST',
+                signal: AbortSignal.timeout(budgetMs),
                 headers: {
                     'Content-Type': 'application/json',
                     Authorization: `Bearer ${apiKey}`,
@@ -289,9 +320,9 @@ export async function kernelCallEnvelope(fn, args = {}, options) {
             });
         }
         catch (err) {
-            rethrowWithGuidance(err, siteUrl);
+            rethrowWithGuidance(err, siteUrl, { fn, budgetMs, args });
         }
-        const envelope = await parseKernelEnvelope(res);
+        const envelope = await parseKernelEnvelope(res, { fn, budgetMs, args });
         if (!res.ok || envelope.ok === false) {
             throw new McpError(envelope.message || envelope.error || res.statusText, envelope.code, envelope.details, envelope.retryAfterSeconds);
         }
@@ -306,6 +337,11 @@ async function mcpFetchRaw(fn, args, apiKey, siteUrl) {
     try {
         await fetch(`${siteUrl}/api/aki`, {
             method: 'POST',
+            // WP-575: fire-and-forget still gets the declared budget. Errors are swallowed either
+            // way, so this is not about the message — it is about not leaving a socket and a
+            // pending promise open indefinitely on a stuck backend behind an already-returned
+            // command. "Best-effort" was never meant to mean "unbounded".
+            signal: AbortSignal.timeout(latencyBudgetMsForRoute(fn)),
             headers: {
                 'Content-Type': 'application/json',
                 Authorization: `Bearer ${apiKey}`,
@@ -340,19 +376,24 @@ export async function kernelCallWithSession(fn, args = {}, options) {
         // DEC-1207: attribute this connector for the gateway's context.served seam.
         'x-pb-source': PB_TELEMETRY_SOURCE,
     };
+    // WP-575 + WP-579 compose deliberately: the budget is derived ONCE per route, but the
+    // AbortSignal is created inside the retried callback, so each 429 retry attempt gets its
+    // own full budget rather than sharing one deadline across all attempts.
+    const budgetMs = latencyBudgetMsForRoute(fn);
     const result = await withSpinner(label, () => maybeRetry(async () => {
         let res;
         try {
             res = await fetch(`${siteUrl}/api/aki`, {
                 method: 'POST',
+                signal: AbortSignal.timeout(budgetMs),
                 headers,
                 body: JSON.stringify({ fn, args }),
             });
         }
         catch (err) {
-            rethrowWithGuidance(err, siteUrl);
+            rethrowWithGuidance(err, siteUrl, { fn, budgetMs, args });
         }
-        const envelope = await parseKernelEnvelope(res);
+        const envelope = await parseKernelEnvelope(res, { fn, budgetMs, args });
         if (!res.ok || envelope.ok === false) {
             throw new McpError(envelope.message || envelope.error || res.statusText, envelope.code, envelope.details, envelope.retryAfterSeconds);
         }