Ship production optimization M1-M12.5A: queues, metrics, HTTP observability, and vector search reliability.

Keep similar-ai from tripping the global circuit on a lone URL 502, clamp Qdrant search to 100, and add Server-Timing plus slow-request logging. Studio shared props, Academy S3 exists caching, heat chunking, and Redis/scheduler hygiene stay in this rollout.

app/Http/Controllers/Api/SimilarAiArtworksController.php

@@ -6,10 +6,12 @@ namespace App\Http\Controllers\Api;
 
 use App\Http\Controllers\Controller;
 use App\Models\Artwork;
+use App\Services\Vision\VectorGatewayException;
 use App\Services\Vision\VectorService;
 use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
-use RuntimeException;
+use Illuminate\Support\Facades\Log;
+use Throwable;
 
 final class SimilarAiArtworksController extends Controller
 {
@@ -35,11 +37,12 @@ final class SimilarAiArtworksController extends Controller
 
         try {
             $items = $this->vectors->similarToArtwork($artwork, $limit);
-        } catch (RuntimeException $e) {
+        } catch (Throwable $e) {
+            $this->logSimilarityFailure($artwork->id, $e);
+
             return response()->json([
                 'data' => [],
                 'reason' => 'vector_gateway_error',
-                'message' => $e->getMessage(),
             ], 502);
         }
 
@@ -52,4 +55,19 @@ final class SimilarAiArtworksController extends Controller
             ],
         ]);
     }
+
+    private function logSimilarityFailure(int $artworkId, Throwable $e): void
+    {
+        $gateway = $e instanceof VectorGatewayException ? $e : null;
+
+        Log::warning('Vector similarity search failed', [
+            'artwork_id' => $artworkId,
+            'route' => 'api.art.similar-ai',
+            'failure_stage' => $gateway?->operation ?? 'unknown',
+            'exception_class' => $e::class,
+            'http_status' => $gateway?->httpStatus,
+            'circuit_worthy' => $gateway?->circuitWorthy ?? false,
+            'circuit_open' => app(\App\Services\Vision\VectorGatewayClient::class)->circuitOpen(),
+        ]);
+    }
 }

app/Http/Controllers/ArtworkDownloadController.php

@@ -58,6 +58,16 @@ final class ArtworkDownloadController extends Controller
             abort(404);
         }
 
+        if (! File::isFile($filePath)) {
+            Log::warning('Artwork original file missing for download.', [
+                'artwork_id' => $artwork->id,
+                'ext' => $ext,
+                'resolved_path' => $filePath,
+            ]);
+
+            abort(404);
+        }
+
         $this->recordDownload($request, $artwork->id);
         $this->incrementDownloadCountIfAvailable($artwork->id);
 
@@ -70,16 +80,6 @@ final class ArtworkDownloadController extends Controller
             ]);
         }
 
-        if (! File::isFile($filePath)) {
-            Log::warning('Artwork original file missing for download.', [
-                'artwork_id' => $artwork->id,
-                'ext' => $ext,
-                'resolved_path' => $filePath,
-            ]);
-
-            abort(404);
-        }
-
         $downloadName = $this->buildDownloadFilename((string) $artwork->file_name, $ext);
 
         // X-Accel-Redirect is safe only when nginx is explicitly configured to

app/Http/Controllers/SitemapController.php

@@ -22,6 +22,18 @@ final class SitemapController extends Controller
 
     public function index(): Response|BinaryFileResponse
     {
+        if ((bool) config('sitemaps.pre_generated.enabled', true)) {
+            foreach ([
+                public_path('sitemaps/index.xml'),
+                public_path('sitemaps/sitemap.xml'),
+                public_path('sitemap.xml'),
+            ] as $path) {
+                if (is_file($path) && is_readable($path)) {
+                    return $this->xmlFileResponse($path);
+                }
+            }
+        }
+
         // 1. Published release (release management pipeline fallback).
         $published = $this->published->resolveIndex();
         if ($published !== null) {

app/Http/Middleware/AddServerTiming.php

@@ -0,0 +1,43 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+/**
+ * Negligible-overhead request duration header for production HTTP profiling.
+ * Does not log queries or payloads.
+ */
+final class AddServerTiming
+{
+    public function handle(Request $request, Closure $next): Response
+    {
+        $started = hrtime(true);
+        $response = $next($request);
+        $durationMs = (hrtime(true) - $started) / 1_000_000;
+
+        if (headers_sent()) {
+            return $response;
+        }
+
+        $metrics = ['app;desc="Laravel";dur='.number_format($durationMs, 1, '.', '')];
+        $ssrMs = $request->attributes->get('http.ssr_ms');
+        if (is_numeric($ssrMs) && (float) $ssrMs >= 0) {
+            $metrics[] = 'ssr;desc="Inertia SSR";dur='.number_format((float) $ssrMs, 1, '.', '');
+        }
+
+        $metric = implode(', ', $metrics);
+        $existing = $response->headers->get('Server-Timing');
+
+        $response->headers->set(
+            'Server-Timing',
+            $existing ? $existing.', '.$metric : $metric,
+        );
+
+        return $response;
+    }
+}

app/Http/Middleware/HandleInertiaRequests.php

@@ -98,6 +98,15 @@ final class HandleInertiaRequests extends Middleware
             ? $request->session()->get($key)
             : null;
 
+        if ($user !== null && ! $user->relationLoaded('profile')) {
+            $user->load('profile');
+        }
+
+        $studioGroups = [];
+        if ($user !== null && str_starts_with($request->path(), 'studio')) {
+            $studioGroups = app(GroupService::class)->studioOptionsForUser($user);
+        }
+
         return array_merge(parent::share($request), [
             'auth' => [
                 'user' => $user ? [
@@ -134,9 +143,7 @@ final class HandleInertiaRequests extends Middleware
                 'group_assets' => (bool) config('features.group_assets', true),
                 'group_activity_feed' => (bool) config('features.group_activity_feed', true),
             ],
-            'studio_groups' => $user
-                ? app(GroupService::class)->studioOptionsForUser($user)
-                : [],
+            'studio_groups' => $studioGroups,
         ]);
     }
 }

app/Http/Middleware/LogSlowHttpRequest.php

@@ -0,0 +1,74 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Http\Middleware;
+
+use App\Support\Http\HttpUriNormalizer;
+use Closure;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Log;
+use Inertia\Support\Header as InertiaHeader;
+use Symfony\Component\HttpFoundation\Response;
+
+final class LogSlowHttpRequest
+{
+    public function __construct(private readonly HttpUriNormalizer $uris)
+    {
+    }
+
+    public function handle(Request $request, Closure $next): Response
+    {
+        if (! (bool) config('http_observability.slow_request.enabled', false)) {
+            return $next($request);
+        }
+
+        $started = hrtime(true);
+        $response = $next($request);
+        $durationMs = (hrtime(true) - $started) / 1_000_000;
+
+        if (app()->environment('testing')) {
+            $override = config('http_observability.slow_request.test_duration_ms');
+            if (is_numeric($override)) {
+                $durationMs = (float) $override;
+            }
+        }
+
+        $threshold = max(1, (int) config('http_observability.slow_request.threshold_ms', 750));
+        if ($durationMs < $threshold) {
+            return $response;
+        }
+
+        $route = $request->route();
+        $routeUri = is_object($route) && method_exists($route, 'uri')
+            ? (string) $route->uri()
+            : $this->uris->normalize($request->path());
+
+        $payload = [
+            'time' => now()->toIso8601String(),
+            'method' => $request->getMethod(),
+            'route_name' => is_object($route) ? $route->getName() : null,
+            'route_uri' => $routeUri,
+            'status' => $response->getStatusCode(),
+            'duration_ms' => round($durationMs, 1),
+            'peak_memory_mb' => round(memory_get_peak_usage(true) / 1048576, 2),
+            'authenticated' => $request->user() !== null,
+            'inertia' => $this->isInertia($request, $response),
+        ];
+
+        Log::channel('slow-http')->info(json_encode($payload, JSON_UNESCAPED_SLASHES));
+
+        return $response;
+    }
+
+    private function isInertia(Request $request, Response $response): bool
+    {
+        if ($request->headers->has(InertiaHeader::INERTIA)) {
+            return true;
+        }
+
+        return $response->headers->has(InertiaHeader::INERTIA)
+            || $response->headers->get('Vary') === 'X-Inertia'
+            || str_contains((string) $response->headers->get('Vary'), 'X-Inertia');
+    }
+}

app/Http/Middleware/TrackOnlineVisitor.php

@@ -69,6 +69,11 @@ final class TrackOnlineVisitor
             'email/*',
             'logout',
             'up',
+            'rss/*',
+            'rss-feeds',
+            'robots.txt',
+            'sitemap.xml',
+            'sitemaps/*',
         ])) {
             return false;
         }