@@ -56,6 +56,27 @@ export function mapSettledWithConcurrency<T, R>(
   })
 }
 
+/**
+ * A gate that runs at most `limit` of the tasks passed to it at once, starting the rest in call
+ * order as slots free. Bounds one phase of otherwise concurrent work, such as the part that holds
+ * database connections, without bounding the rest of it.
+ */
+export function createConcurrencyLimit(limit: number) {
+  let active = 0
+  const waiting: (() => void)[] = []
+  return async <R>(task: () => Promise<R>): Promise<R> => {
+    if (active >= limit) await new Promise<void>((resolve) => waiting.push(resolve))
+    else active++
+    try {
+      return await task()
+    } finally {
+      const next = waiting.shift()
+      if (next) next()
+      else active--
+    }
+  }
+}
+
 /** Default bound for per-row object-storage materialization fan-out. */
 export const MATERIALIZE_CONCURRENCY = 20
 
 
@@ -11,6 +11,7 @@ import {
   createNativeClient,
   NATIVE_SEARCH_REQUEST_BUDGET,
   NativeSearchError,
+  withRequestSignal,
 } from '@/lib/sim-search/live/http'
 import { readHubSpotMcp, searchHubSpotMcp } from '@/lib/sim-search/live/hubspot-mcp'
 import { readLucidMcp, searchLucidMcp } from '@/lib/sim-search/live/lucid-mcp'
@@ -51,8 +52,11 @@ export interface LiveAccountSession {
   /** True only when the document is inside the source boundary and the member may read it. */
   verify(document: Reference): Promise<boolean>
   read(reference: Reference, filters?: WorkspaceSearchFilters): Promise<NativeDocument>
-  /** Full text of a verified search result whose provider returned only an excerpt or metadata. */
-  previewText(document: NativeDocument): Promise<string | undefined>
+  /**
+   * Full text of a search result whose provider returned only an excerpt or metadata; `signal`
+   * cancels the read when its preview is no longer wanted.
+   */
+  previewText(document: NativeDocument, signal: AbortSignal): Promise<string | undefined>
   /** Checks a fetched document against the source settings saved now, not at session start. */
   verifyCurrent(document: NativeDocument): Promise<boolean>
 }
@@ -226,9 +230,9 @@ export async function openLiveAccountSession(
         })
       return readMcp(reference)
     },
-    async previewText(document) {
+    async previewText(document, previewSignal) {
       if (admin || !client) return undefined
-      return previewNativeText(provider, client, document)
+      return previewNativeText(provider, withRequestSignal(client, previewSignal), document)
     },
     async verifyCurrent(document) {
       if (!(await isSearchProviderEnabled(provider, resourceScopeFromOwner(owner)))) return false
 
@@ -1,5 +1,5 @@
 import { ErrorCode, McpError } from '@modelcontextprotocol/sdk/types.js'
-import { dbChainMockFns, resetDbChainMock } from '@sim/testing'
+import { createDeferred, dbChainMockFns, resetDbChainMock } from '@sim/testing'
 import { createSessionPrincipal } from '@sim/testing/factories/principal.factory'
 import { setEnv } from '@sim/testing/mocks/env.mock'
 import {
@@ -11,7 +11,7 @@ import {
   knowledgeContextsMockFns,
 } from '@sim/testing/mocks/knowledge-contexts.mock'
 import { workspaceAuthzMock, workspaceAuthzMockFns } from '@sim/testing/mocks/workspace-authz.mock'
-import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
 
 const mocks = vi.hoisted(() => ({
   accounts: vi.fn(),
@@ -740,6 +740,49 @@ describe('authorized live retrieval', () => {
       })
       expect(mocks.preview).not.toHaveBeenCalled()
     })
+
+    it('reads a permitted result’s preview while others verify, and never a denied one’s', async () => {
+      mocks.search.mockResolvedValue({ documents: excerpts })
+      const pendingB = createDeferred<boolean>()
+      mocks.service.mockResolvedValue({
+        policy: defaultLiveSearchPolicy(),
+        partial: false,
+        verify: async ({ id }: { id: string }) => (id === 'b' ? pendingB.promise : id !== 'c'),
+      })
+      mocks.preview.mockImplementation(
+        async (_provider, _client, { id }: { id: string }) => `Full ${id} launch text`
+      )
+      const previewedIds = () => mocks.preview.mock.calls.map(([, , { id }]) => id)
+      const pending = searchLiveKnowledge.execute({ principal, input })
+      await vi.waitFor(() => expect(previewedIds()).toEqual(['a', 'd']))
+      pendingB.resolve(true)
+      const result = await pending
+      expect(contents(result)).toEqual([
+        'Full a launch text',
+        'Full b launch text',
+        'Full d launch text',
+      ])
+      expect(previewedIds()).toEqual(['a', 'd', 'b'])
+    })
+
+    it('never surfaces the preview text of a candidate verification denies', async () => {
+      mocks.search.mockResolvedValue({ documents: excerpts })
+      mocks.service.mockResolvedValue({
+        policy: defaultLiveSearchPolicy(),
+        partial: false,
+        verify: async ({ id }: { id: string }) => id !== 'a',
+      })
+      mocks.preview.mockImplementation(async (_provider, _client, { id }: { id: string }) =>
+        id === 'a' ? 'Private a launch text' : `Full ${id} launch text`
+      )
+      const result = await searchLiveKnowledge.execute({ principal, input })
+      expect(contents(result)).toEqual([
+        'Full b launch text',
+        'Full c launch text',
+        'Full d launch text',
+      ])
+      expect(JSON.stringify(result)).not.toContain('Private a')
+    })
   })
 
   it('gives provider searches the account session cancellation signal', async () => {
@@ -1105,4 +1148,94 @@ describe('authorized live retrieval', () => {
       })
     ).toBe(false)
   })
+
+  const accounts = (count: number) =>
+    Array.from({ length: count }, (_, index) => ({
+      ...account,
+      id: `account-${String(index).padStart(2, '0')}`,
+      displayName: `Drive ${String(index).padStart(2, '0')}`,
+    }))
+
+  it('reports each account beyond the search limit instead of omitting it', async () => {
+    mocks.accounts.mockResolvedValue(accounts(21))
+    const result = await searchLiveKnowledge.execute({ principal, input })
+    const statuses = result.live?.accounts ?? []
+    expect(statuses).toHaveLength(21)
+    expect(new Set(statuses.map(({ accountId }) => accountId)).size).toBe(21)
+    expect(statuses.at(-1)).toMatchObject({
+      accountId: 'account-20',
+      status: 'unavailable',
+      message: expect.stringContaining('Not searched'),
+    })
+    expect(result.retrieval.status).toBe('partial')
+  })
+
+  describe('latency', () => {
+    beforeEach(() => {
+      vi.useFakeTimers()
+      vi.spyOn(AbortSignal, 'timeout').mockImplementation((milliseconds) => {
+        const controller = new AbortController()
+        setTimeout(
+          () => controller.abort(new DOMException('deadline', 'TimeoutError')),
+          milliseconds
+        )
+        return controller.signal
+      })
+    })
+    afterEach(() => {
+      vi.mocked(AbortSignal.timeout).mockRestore()
+      vi.useRealTimers()
+    })
+
+    /** Settles after `ms` of fake time, like a provider round trip. */
+    const delayed = <T>(ms: number, value: T) =>
+      new Promise<T>((resolve) => setTimeout(() => resolve(value), ms))
+
+    it('searches every account at once while bounding concurrent account resolution', async () => {
+      mocks.accounts.mockResolvedValue(accounts(20))
+      let resolving = 0
+      let peak = 0
+      mocks.resolveAccount.mockImplementation(async () => {
+        peak = Math.max(peak, ++resolving)
+        await delayed(50, undefined)
+        resolving--
+        return { account, accessToken: 'secret' }
+      })
+      mocks.search.mockImplementation(() => delayed(3000, { documents: [document] }))
+      let result: Awaited<ReturnType<typeof searchLiveKnowledge.execute>> | undefined
+      const pending = searchLiveKnowledge.execute({ principal, input }).then((value) => {
+        result = value
+      })
+      await vi.advanceTimersByTimeAsync(3500)
+      expect(result?.live?.accounts.map(({ status }) => status)).toEqual(
+        Array.from({ length: 20 }, () => 'ok')
+      )
+      expect(peak).toBeLessThanOrEqual(6)
+      await pending
+    })
+
+    it('gives each account its own deadline from its slot, and skips one the search left no time', async () => {
+      mocks.accounts.mockResolvedValue(accounts(13))
+      mocks.resolveAccount.mockImplementation(() =>
+        delayed(9500, { account, accessToken: 'secret' })
+      )
+      mocks.search.mockImplementation(async (_provider, _client, search) => {
+        search.signal?.throwIfAborted()
+        return { documents: [document] }
+      })
+      const pending = searchLiveKnowledge.execute({ principal, input })
+      await vi.advanceTimersByTimeAsync(20_000)
+      const statuses = (await pending).live?.accounts ?? []
+      /** The second wave waits 9.5s for a slot, then still has its full account deadline. */
+      expect(statuses.slice(0, 12).map(({ status }) => status)).toEqual(
+        Array.from({ length: 12 }, () => 'ok')
+      )
+      expect(statuses[12]).toMatchObject({
+        accountId: 'account-12',
+        status: 'timeout',
+        message: expect.stringContaining('Not searched before the search deadline'),
+      })
+      expect(mocks.resolveAccount).toHaveBeenCalledTimes(12)
+    })
+  })
 })