perf(web): release provider work and bound landing reads

Makefile

@@ -35,4 +35,5 @@ seed:
 load-http:
 	@test -n "$${LINEAGEWEAVE_VUS:-}" || { echo "LINEAGEWEAVE_VUS is required" >&2; exit 1; }
 	@test -n "$${LINEAGEWEAVE_DURATION:-}" || { echo "LINEAGEWEAVE_DURATION is required" >&2; exit 1; }
-	k6 run --vus "$${LINEAGEWEAVE_VUS}" --duration "$${LINEAGEWEAVE_DURATION}" scripts/k6_http_e2e.js
+	@test -n "$${LINEAGEWEAVE_REQUEST_TIMEOUT:-}" || { echo "LINEAGEWEAVE_REQUEST_TIMEOUT is required" >&2; exit 1; }
+	k6 run -e REQUEST_TIMEOUT="$${LINEAGEWEAVE_REQUEST_TIMEOUT}" --vus "$${LINEAGEWEAVE_VUS}" --duration "$${LINEAGEWEAVE_DURATION}" scripts/k6_http_e2e.js

backend/app/config.py

@@ -59,6 +59,7 @@ class Settings:
     valkey_url: str
     searxng_base_url: str
     tepp_transport_url: str
+    tepp_api_key: str
     caldav_base_url: str
     naruon_calendar_base_url: str
     naruon_calendar_service_token: str
@@ -171,6 +172,7 @@ def load_settings() -> Settings:
         valkey_url=os.environ.get("VALKEY_URL", "redis://localhost:16379/0"),
         searxng_base_url=os.environ.get("SEARXNG_BASE_URL", ""),
         tepp_transport_url=os.environ.get("TEPP_TRANSPORT_URL", ""),
+        tepp_api_key=os.environ.get("TEPP_API_KEY", ""),
         caldav_base_url=os.environ.get("CALDAV_BASE_URL", "").strip(),
         naruon_calendar_base_url=os.environ.get("NARUON_CALENDAR_BASE_URL", "").strip(),
         naruon_calendar_service_token=os.environ.get(

backend/app/global_ask_queue.py

@@ -46,6 +46,7 @@
     _seoul_today,
     cited_post_images,
     gather_global_chat_sources,
+    prepare_global_question_embedding,
 )
 
 GLOBAL_ASK_STREAM_KEY = "global_ask_request_stream"
@@ -237,16 +238,23 @@ def can_see(row: asyncpg.Record) -> bool:
 
     today = _seoul_today()
     try:
-        async with pool.acquire() as conn:
-            sources = await gather_global_chat_sources(
-                conn,
-                can_see,
-                corporate_entity_ids,
-                process_unit_ids,
-                question=question_text,
-                today=today,
-                embedding_client=embedding_client,
-            )
+        question_embedding = await prepare_global_question_embedding(
+            question_text, embedding_client or NullEmbeddingClient()
+        )
+        if question_embedding is None:
+            sources = []
+        else:
+            async with pool.acquire() as conn:
+                sources = await gather_global_chat_sources(
+                    conn,
+                    can_see,
+                    corporate_entity_ids,
+                    process_unit_ids,
+                    question=question_text,
+                    question_embedding=question_embedding,
+                    today=today,
+                    embedding_client=embedding_client,
+                )
     except Exception as exc:
         log_internal_fault("global_ask", exc)
         record_server_failure("global_ask", exc, outcome="internal_error")

backend/app/lineage_ingestion.py

@@ -14,7 +14,7 @@
 import math
 import re
 from collections import defaultdict
-from collections.abc import Mapping
+from collections.abc import Mapping, Sequence
 from datetime import datetime
 from typing import Any
 
@@ -525,6 +525,40 @@
     return visible_all, edge_rows
 
 
+async def _fetch_lineage_landing_rows(
+    conn: asyncpg.Connection,
+    corporate_entity_ids: Sequence[str],
+    process_unit_ids: Sequence[str],
+    limit: int,
+):
+    """Fetch only the authorized, bounded landing projection in PostgreSQL."""
+    posts = await conn.fetch(
+        "select post_id, post_title, voc_type_code, visibility_code, "
+        "corporate_entity_id, process_unit_id, thread_group_key, created_at "
+        "from source_post where "
+        f"{SOURCE_POST_ELIGIBILITY_SQL.format(alias='source_post')} and "
+        "(visibility_code = 'public' or (corporate_entity_id::text = any($1::text[]) "
+        "and (cardinality($2::text[]) = 0 or process_unit_id::text = any($2::text[])))) "
+        "order by created_at desc, post_id desc limit $3",
+        list(corporate_entity_ids),
+        list(process_unit_ids),
+        limit + 1,
+    )
+    visible = list(posts[:limit])
+    visible_ids = [str(row["post_id"]) for row in visible]
+    edge_rows = (
+        await conn.fetch(
+            "select parent_post_id, child_post_id, fused_score, interval_relation_code "
+            "from post_lineage_edge where parent_post_id = any($1::uuid[]) "
+            "and child_post_id = any($1::uuid[])",
+            visible_ids,
+        )
+        if visible_ids
+        else []
+    )
+    return visible, edge_rows, len(posts) > limit
+
+
 def _undirected_neighbors(edge_rows) -> dict[str, set[str]]:
     neighbors: dict[str, set[str]] = {}
     for edge in edge_rows:
@@ -658,23 +692,31 @@
     limit: int = _LINEAGE_GRAPH_NODE_LIMIT,
     focus_post_id: str | None = None,
     include_isolated: bool = False,
+    corporate_entity_ids: Sequence[str] | None = None,
+    process_unit_ids: Sequence[str] = (),
 ) -> dict[str, Any]:
     """ABAC-filtered graph bounded for the browser's initial viewport.
 
     The persisted graph can contain tens of thousands of posts. The UI opens
     individual posts for complete lineage, while this landing projection keeps
     only the newest ``limit`` visible nodes and edges between them.
     """
-    visible_all, edge_rows = await _fetch_visible_lineage_rows(conn, can_see_post)
+    if focus_post_id is None and corporate_entity_ids is not None:
+        visible, edge_rows, truncated = await _fetch_lineage_landing_rows(
+            conn, corporate_entity_ids, process_unit_ids, limit
+        )
+        visible_all = visible
+    else:
+        visible_all, edge_rows = await _fetch_visible_lineage_rows(conn, can_see_post)
 
-    if focus_post_id is None:
+    if focus_post_id is None and corporate_entity_ids is None:
         visible = sorted(
             visible_all,
             key=lambda row: (row["created_at"], str(row["post_id"])),
             reverse=True,
         )[:limit]
         truncated = len(visible_all) > len(visible)
-    else:
+    elif focus_post_id is not None:
         focus_id = str(focus_post_id)
         neighbors = _undirected_neighbors(edge_rows)
         allowed = {str(row["post_id"]) for row in visible_all}

backend/app/main.py

@@ -148,7 +148,7 @@
     require_summary_source_body,
 )
 from backend.app.ranking_ingestion import load_visible_ranking_posts
-from backend.app.relation_verification_ingestion import verify_post_relations
+from backend.app.relation_verification_ingestion import verify_post_relations_from_pool
 from backend.app.report_ingestion import (
     GROUPING_KINDS,
     fetch_period_comparison,
@@ -1251,6 +1251,8 @@ async def read_lineage_graph(
             lambda row: _can_see_post(account, row),
             limit=limit,
             focus_post_id=post_id,
+            corporate_entity_ids=account.corporate_entity_ids,
+            process_unit_ids=account.process_unit_ids,
         )
 
 
@@ -2310,28 +2312,25 @@ async def verify_post_entity_relationships(
             status.HTTP_503_SERVICE_UNAVAILABLE,
             "Relation verification is unavailable: set SEARXNG_BASE_URL",
         )
-    async with pool.acquire() as conn:
-        try:
-            verified = await verify_post_relations(
-                conn,
-                client,
-                post_id,
-                visible_corporate_entity_ids=account.corporate_entity_ids,
-            )
-        except (HttpClientError, OSError) as exc:
-            # verify_post_relations() deliberately raises on a failed search
-            # (a failed search is not "searched and found nothing" -- see
-            # its docstring); this is the one caller, so it is the right
-            # place to turn that into a clean 503 instead of a raw 500.
-            raise HTTPException(
-                status.HTTP_503_SERVICE_UNAVAILABLE,
-                "Relation verification is unavailable: the search provider did not respond",
-            ) from exc
-        except Exception as exc:  # noqa: BLE001 - provider boundary is fail-closed.
-            raise HTTPException(
-                status.HTTP_503_SERVICE_UNAVAILABLE,
-                "Relation verification is unavailable: the search provider did not respond",
-            ) from exc
+    try:
+        verified = await verify_post_relations_from_pool(
+            pool,
+            client,
+            post_id,
+            visible_corporate_entity_ids=account.corporate_entity_ids,
+        )
+    except (HttpClientError, OSError) as exc:
+        # A failed search is not "searched and found nothing"; turn the
+        # provider failure into a clean 503 rather than persisting a miss.
+        raise HTTPException(
+            status.HTTP_503_SERVICE_UNAVAILABLE,
+            "Relation verification is unavailable: the search provider did not respond",
+        ) from exc
+    except Exception as exc:  # noqa: BLE001 - provider boundary is fail-closed.
+        raise HTTPException(
+            status.HTTP_503_SERVICE_UNAVAILABLE,
+            "Relation verification is unavailable: the search provider did not respond",
+        ) from exc
     await publish_activity_event(
         valkey,
         post_id,
@@ -3386,7 +3385,12 @@ async def derive_post_commitment(
             # Friday" in a January post must resolve to that January, not to the
             # Friday after the operator clicked Derive.
             reference_date = post["created_at"].date().isoformat()
-            commitment = client.extract(post["post_title"], normalized_body, reference_date)
+            commitment = await asyncio.to_thread(
+                client.extract,
+                post["post_title"],
+                normalized_body,
+                reference_date,
+            )
         except (HttpClientError, KeyError, OSError, TypeError, ValueError, RuntimeError) as exc:
             raise HTTPException(
                 status.HTTP_503_SERVICE_UNAVAILABLE,
@@ -3600,7 +3604,8 @@ async def read_calendar(
     settings = load_settings()
     if window_start is None or window_end is None:
         window_start, window_end = default_calendar_window(datetime.now(timezone.utc))
-    naruon = load_observed_calendar_events(
+    naruon = await asyncio.to_thread(
+        load_observed_calendar_events,
         build_workspace_naruon_client(
             settings.naruon_calendar_base_url,
             settings.naruon_calendar_service_token,

backend/app/post_chat_ingestion.py

@@ -18,6 +18,7 @@
 from __future__ import annotations
 
 import asyncio
+import math
 from dataclasses import dataclass
 from datetime import date, datetime
 from typing import Any, Callable, Iterable
@@ -385,6 +386,38 @@ async def gather_chat_sources(
     return sources
 
 
+async def prepare_global_question_embedding(
+    question: str,
+    embedding_client: EmbeddingClient,
+) -> tuple[list[float], str, float] | None:
+    """Resolve one question embedding without holding a database connection."""
+    if not question.strip() or not embedding_client.available:
+        return None
+    try:
+        question_vector = await asyncio.to_thread(embedding_client.embed, question)
+    except (OSError, RuntimeError, ValueError):
+        return None
+    return _validated_question_embedding(
+        question_vector, embedding_client.resolved_model
+    )
+
+
+def _validated_question_embedding(
+    question_vector: list[float], embedding_model_code: str | None
+) -> tuple[list[float], str, float] | None:
+    """Return a finite, non-zero embedding envelope or fail closed."""
+    if (
+        not question_vector
+        or not embedding_model_code
+        or any(not math.isfinite(value) for value in question_vector)
+    ):
+        return None
+    question_norm = math.sqrt(sum(value * value for value in question_vector))
+    if not math.isfinite(question_norm) or question_norm == 0.0:
+        return None
+    return question_vector, embedding_model_code, question_norm
+
+
 async def gather_global_chat_sources(
     conn: asyncpg.Connection,
     can_see_post: Callable[[asyncpg.Record], bool],
@@ -394,6 +427,7 @@ async def gather_global_chat_sources(
     embedding_client: EmbeddingClient | None = None,
     *,
     question: str | None = None,
+    question_embedding: tuple[list[float], str, float] | None = None,
     limit: int = 4,
     today: date | None = None,
 ) -> list[ChatSourceDocument]:
@@ -427,20 +461,22 @@ async def gather_global_chat_sources(
     resolved_time_range = resolve_korean_relative_time(
         question or "", today=today or _seoul_today()
     )
-    if not (question and question.strip() and embedding_client.available):
-        return []
-    try:
-        question_vector = await asyncio.to_thread(embedding_client.embed, question)
-    except (OSError, RuntimeError, ValueError):
-        return []
-    if not question_vector:
+    if not (question and question.strip()):
         return []
-    embedding_model_code = embedding_client.resolved_model
-    if not embedding_model_code:
+    if question_embedding is None:
+        if not embedding_client.available:
+            return []
+        question_embedding = await prepare_global_question_embedding(
+            question, embedding_client
+        )
+    if question_embedding is None:
         return []
-    question_norm = sum(value * value for value in question_vector) ** 0.5
-    if question_norm == 0.0:
+    validated_embedding = _validated_question_embedding(
+        question_embedding[0], question_embedding[1]
+    )
+    if validated_embedding is None:
         return []
+    question_vector, embedding_model_code, question_norm = validated_embedding
     # Safe SQL: the only interpolation is the repository-owned eligibility
     # expression; all request and model values remain asyncpg parameters.
     candidate_rows = await conn.fetch(  # nosemgrep: python.lang.security.audit.sqli.asyncpg-sqli.asyncpg-sqli