LAYER 1: Infrastructure (READY in Hetzner plan)
  → Uptime Kuma: site/API uptime, response time
  → Telegram alert: CPU/RAM threshold breach
  → Coolify: container health
  → NO ADDITIONAL WORK — defined in migration plan

LAYER 2: Application Monitoring (Ring 1-2)
  → Activity log: every significant action written to DB
  → AI cost tracking: usage_daily + ai_job_runs (with 02)
  → API metrics: response time, error rate per route
  → Pipeline metrics: latency per stage, accuracy

LAYER 3: Product Analytics — Click-Level (Ring 2-3)
  → PostHog self-hosted (Hetzner VPS, deployed via Coolify)
  → Heatmaps, session replay, funnel analysis
  → Data stays local, GDPR compliant
  → Cost: $0 (self-hosted)

┌─────────────────────────────────────────────────────────────┐
│  Welcome, Alex                                   [Pro Plan] │
├─────────────────────────────────────────────────────────────┤
│                                                             │
│  ┌─── This Month ───────┐ ┌─── Quick Actions ───────────┐  │
│  │ 12 discoveries made  │ │ [+ New Discovery]            │  │
│  │ 47 companies found   │ │ [Recent Leads]               │  │
│  │ 5 leads created      │ │ [Pending Tasks (3)]          │  │
│  └──────────────────────┘ └──────────────────────────────┘  │
│                                                             │
│  ┌─── Usage ────────────────────────────────────────────┐   │
│  │ Discovery: ████████████░░░░ 38/50                    │   │
│  │ Contacts:  ██████░░░░░░░░░░ 28/100                   │   │
│  │ Credits:   23 remaining                               │   │
│  └──────────────────────────────────────────────────────┘   │
│                                                             │
│  ┌─── Recent Searches ───────────────────┐ ┌── Leads ───┐  │
│  │ "chemicals" Germany — 12 co. (yesterday) │ Saved: 5   │  │
│  │ "textiles" Italy — 8 co. (3 days ago)    │ Contact: 3 │  │
│  │ "machinery" Poland — 15 co. (1 week ago) │ Negot.: 1  │  │
│  └──────────────────────────────────────────┘ └──────────┘  │
│                                                             │
│  ┌─── Upcoming Tasks ──────────────────────────────────┐    │
│  │ 🔴 TextilChem GmbH — Send catalog (overdue!)       │    │
│  │ 🟡 ChemTrade AG — Follow up (tomorrow)              │    │
│  │ 🟢 Mueller KG — Send price quote (3 days)           │    │
│  └──────────────────────────────────────────────────────┘   │
│                                                             │
│  ┌─── Team Activity (Team+) ───────────────────────────┐   │
│  │ Ahmet: discovered 3 companies (today)                │   │
│  │ Mehmet: created 2 leads (yesterday)                  │   │
│  └──────────────────────────────────────────────────────┘   │
└─────────────────────────────────────────────────────────────┘

CREATE TABLE export_ai_activity_log (
  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
  organization_id UUID NOT NULL REFERENCES export_ai_organizations(id),
  user_id UUID NOT NULL REFERENCES auth.users(id),
  action TEXT NOT NULL,               -- 'discovery.started', 'lead.created', etc.
  resource_type TEXT,                 -- 'search', 'company', 'lead', 'contact', 'batch_job'
  resource_id UUID,                   -- ID of the related record
  metadata JSONB DEFAULT '{}',        -- { keyword, country, cost, contacts_found, ... }
  ip_address INET,
  user_agent TEXT,
  created_at TIMESTAMPTZ DEFAULT now()
);

-- RLS
ALTER TABLE export_ai_activity_log ENABLE ROW LEVEL SECURITY;

-- Indexes (for fast queries)
CREATE INDEX idx_activity_org_date ON export_ai_activity_log(organization_id, created_at DESC);
CREATE INDEX idx_activity_user ON export_ai_activity_log(user_id, created_at DESC);
CREATE INDEX idx_activity_action ON export_ai_activity_log(action, created_at DESC);

-- Old record cleanup (after 90 days — via batch job)
-- Or: partition by month (Ring 4 for large data)

CREATE TABLE export_ai_api_metrics (
  id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
  endpoint TEXT NOT NULL,             -- '/api/discover', '/api/headhunt', ...
  method TEXT NOT NULL,               -- 'GET', 'POST'
  status_code INT NOT NULL,
  response_time_ms INT NOT NULL,
  organization_id UUID,
  user_id UUID,
  created_at TIMESTAMPTZ DEFAULT now()
);

CREATE INDEX idx_api_metrics_endpoint ON export_ai_api_metrics(endpoint, created_at DESC);

// lib/logging/activity.ts

interface IActivityEvent {
  action: string;           // 'discovery.started'
  resourceType?: string;    // 'search'
  resourceId?: string;
  metadata?: Record<string, unknown>;
}

async function logActivity(
  session: ISessionContext,
  event: IActivityEvent,
  request?: Request
): Promise<void>

// Usage:
await logActivity(session, {
  action: 'discovery.started',
  resourceType: 'search',
  metadata: { keyword: 'chemicals', country: 'DE' }
}, request);

// Added to middleware.ts
// Logs every API request's response time + status code
// Async — does not delay the response

On Hetzner VPS (Galata or Kadikoy):
  → Deploy PostHog self-hosted via Coolify
  → posthog.cernio.com (dashboard behind VPN)
  → Client-side: posthog-js SDK
  → Server-side: posthog-node SDK (optional)