Publish curated Unraid-AppOps-Gateway source from 1a5159c66078983299a1c2acb8837e4b5a8a607a

backend/app/services/deployment_broker.py

@@ -979,10 +979,19 @@ class DeploymentBrokerClient:
 
     def runner_fleet_specialize(self, *, reason: str) -> dict[str, Any]:
         """Request the fixed protected-source CI specialization migration."""
-        return self._request(
+        result = self._request(
             "POST", "/v1/appops/runner-fleet/specialize",
             secret=settings.mcp_token or "", payload={"reason": reason[:1000]},
+            request_timeout=httpx.Timeout(connect=5, write=5, pool=5, read=350),
         )
+        # The controller can outlive a lost HTTP response. Never translate a
+        # transport failure into proof of no host effects or permission to retry.
+        if result.get("status") == "unreachable":
+            return {
+                "status": "unknown", "reason": "runner_specialization_outcome_unknown",
+                "noMutation": False, "effectsPerformed": None,
+            }
+        return result
 
     def runner_statistics_configure(self, *, reason: str) -> dict[str, Any]:
         """Provision the fixed independent read-only ProjectBrain capability."""