[LOW] L2: sleep(1) inside HTTP request path — ties up worker for up to 10 seconds

[rubenvdlinde]

Severity: LOW

Location: lib/Service/OrganizationSyncService.php line 2787

Description:
performOptimizedManualSync contains a sleep(1) call inside a loop that can iterate up to 10 times, blocking the HTTP worker for up to 10 seconds per request. This ties up a PHP-FPM worker slot for the duration of the sleep and degrades concurrency under any load.

Suggested fix:
Remove the sleep(1) from the synchronous HTTP path. If polling is needed, move it to an async/background job, or use event-driven progress reporting (see the existing SSE progress endpoint) rather than a blocking sleep.

---

Source: deep team-reviewer pass 2026-05-27

[rubenvdlinde]

Fixed in #357 (merged to development).