[John-David Dalton (jdalton)]

Make direct Socket API requests honor SOCKET_CLI_API_TIMEOUT, including redirects and stalled response bodies.

Add HTTPS integration tests for configured and unset timeouts, redirects, and response-body stalls. Generate a disposable localhost certificate in os.tmpdir() that expires after three minutes; no certificate or private key is committed.

[John-David Dalton (jdalton)]

Cursor (@cursor) review

[cursor]

PR Summary

Medium Risk
Changes core outbound HTTPS request behavior for all direct API paths; mis-tuned timeouts could break long-running scans, though invalid env values are ignored and integration tests cover key edge cases.

Overview
Direct Socket API calls now honor SOCKET_CLI_API_TIMEOUT when it is a finite positive value. apiFetch accepts an optional per-request timeout, applies it via node:https request options, surfaces ETIMEDOUT on header and stalled-body failures, and carries the same timeout through redirects (including non-preserving 302-style hops).

queryApi, queryApiSafeTextWithStatus, and sendApiRequest automatically attach the resolved configured timeout; raw apiFetch without that helper still has no default unless a caller passes timeout explicitly. Timeout failures in text/JSON reads now return clearer causes instead of generic read/parse errors.

Adds a unit test for resolveConfiguredSocketApiTimeout and a loopback HTTPS integration suite that generates a short-lived localhost cert and exercises GET/POST, idle bodies, unset config, explicit overrides, and 302/307 redirect behavior.

^{Reviewed by Cursor Bugbot for commit 4488885. Configure here.}

[John-David Dalton (jdalton)]

Cursor (@cursor) review

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 4488885. Configure here.}