AI: request telemetry in its own table, 30-day retention (#85)

ddiff --git a/migrations/0009_telemetry.sql b/migrations/0009_telemetry.sql
nnew file mode 100644
iindex 0000000..14260fa
---- /dev/null
++++ b/migrations/0009_telemetry.sql
@@@ -0,0 +1,28 @@
++-- phase: expand
++-- Request telemetry (openvibe-sdk/telemetry telemetrySchema()): one row per aggregated sample, pruned after 30 days (server/index.js).
++CREATE TABLE IF NOT EXISTS telemetry_samples (
++    id                    bigint GENERATED ALWAYS AS IDENTITY PRIMARY KEY,
++    at                    timestamptz NOT NULL,
++    service               text NOT NULL,
++    project               text,
++    subject               text,
++    resource              text,
++    provider              text,
++    node                  text,
++    cell                  text,
++    region                text,
++    operation             text NOT NULL,
++    latency_ms            double precision,
++    queue_delay_ms        double precision,
++    ttfb_ms               double precision,
++    throughput_per_second double precision,
++    bytes                 bigint,
++    status                text,
++    cache_status          text,
++    cost_estimate         double precision,
++    route_epoch           bigint,
++    trace_id              text,
++    extra                 jsonb NOT NULL DEFAULT '{}'::jsonb
++);
++CREATE INDEX IF NOT EXISTS telemetry_samples_at_idx ON telemetry_samples (at);
++CREATE INDEX IF NOT EXISTS telemetry_samples_service_idx ON telemetry_samples (service, operation, at);
ddiff --git a/server/app.js b/server/app.js
iindex 7c8a47c..b0d1b0d 100644
---- a/server/app.js
++++ b/server/app.js
@@@ -26,6 +26,7 @@ function createApp({ config, db, registry, pool, quotas, cache, runs, auth, keys
      // HTTP golden signals by route template, process metrics, release_info and the AI gauges;
      // GET /metrics answers direct loopback callers only (Track O).
      const metrics = instrument(app, { service: 'ai', release: release.release });
++    app.use(require('openvibe-sdk/service').telemetryMiddleware);   // request telemetry: a no-op until server/index.js calls telemetry.init()
      registerAiGauges(metrics.registry, { runs, registry, pool });
      app.use(http.middleware());
      // Browser reads of the two public GETs (/stats, /release.json) only: an exact origin from
ddiff --git a/server/index.js b/server/index.js
iindex 8671aa6..9b0781b 100644
---- a/server/index.js
++++ b/server/index.js
@@@ -23,7 +23,8 @@ const { createAuth, createNetworkKeys } = require('./auth');
  const { jwksClient } = require('openvibe-sdk/auth');
  const schemas = require('./schemas');
  const { createApp } = require('./app');
--const { gracefulStop } = require('openvibe-sdk/service');
++const { gracefulStop, telemetry } = require('openvibe-sdk/service');
++const { createPgTelemetrySink, startTelemetryRetention } = require('openvibe-sdk/telemetry');
  
  async function start({ config, db: givenDb = null, clock = { now: () => Date.now() }, fetchImpl = globalThis.fetch, env = process.env, log = console, listen = true, credentialFetch = null, valkey = null } = {}) {
      config = config || load(env);
@@@ -118,7 +119,11 @@ if (require.main === module) {
          // SIGTERM/SIGINT (openvibe-sdk/service, docs/service.md's handles family): requests in flight get 8 s,
          // then handles.close() (runs drained, the relay stopped, the database closed; a rejection exits 1);
          // past 10 s the process exits 1.
--        gracefulStop({ name: 'ai', server: handles.server, handles, drainMs: 8000, deadlineMs: 10000 });
++        // Request telemetry (openvibe-sdk/service, plan T1): one aggregated sample per route template, method and status
++        // class each 15 s, stored in this service's telemetry_samples table; rows older than 30 days go daily.
++        telemetry.init({ service: 'ai', sink: createPgTelemetrySink({ db: handles.db, log: console }), skipPrefixes: ['/shared'] });
++        const telemetryRetention = startTelemetryRetention({ db: handles.db, log: console });
++        gracefulStop({ name: 'ai', server: handles.server, handles, drainMs: 8000, deadlineMs: 10000, stop: [async () => { if (telemetryRetention) await telemetryRetention.stop(); await telemetry.stop(); }] });
      }).catch((err) => {
          console.error(`[ai] failed to start: ${err.stack || err}`);
          process.exit(1);
ddiff --git a/test/telemetry.test.js b/test/telemetry.test.js
nnew file mode 100644
iindex 0000000..5b702e0
---- /dev/null
++++ b/test/telemetry.test.js
@@@ -0,0 +1,50 @@
++'use strict';
++/**
++ * Request telemetry (openvibe-sdk/service, plan T1 step 10): app.js mounts the process-wide telemetryMiddleware (a no-op
++ * until init), server/index.js calls telemetry.init() for service 'ai' with a PostgreSQL sink, starts the 30-day
++ * retention and flushes on stop. Five hits on one route flush as ONE aggregated http.request sample; /metrics and
++ * /shared make none; the retention deletes only rows older than 30 days.
++ */
++const assert = require('assert');
++const fs = require('fs');
++const path = require('path');
++const { telemetry } = require('openvibe-sdk/service');
++const { pruneTelemetry } = require('openvibe-sdk/telemetry');
++const { boot, request } = require('./helpers');
++(async () => {
++    const read = (p) => fs.readFileSync(path.join(__dirname, '..', p), 'utf8');
++    assert.match(read('server/index.js'), /telemetry\.init\(\{ service: 'ai', sink: createPgTelemetrySink\(/, 'index.js starts the collector');
++    assert.match(read('server/index.js'), /startTelemetryRetention\(/, 'index.js starts the retention');
++    assert.match(read('server/index.js'), /[Rr]etention\.stop\(\); await telemetry\.stop\(\);/, 'the stop flushes');
++
++    const t = await boot();
++    const samples = [];
++    telemetry.init({ service: 'ai', sink: async (batch) => { samples.push(...batch); }, intervalMs: 3600e3 });
++    const requests = () => samples.filter((s) => s.operation === 'http.request');
++    try {
++        for (let i = 0; i < 5; i++) assert.strictEqual((await request(t.base, 'GET', '/')).status, 200);
++        await telemetry.flush();
++        const hit = requests().filter((s) => s.resource === '/' && s.status === '2xx');
++        assert.strictEqual(hit.length, 1, JSON.stringify(requests()));
++        assert.strictEqual(hit[0].service, 'ai');
++        assert.strictEqual(hit[0].extra.count, 5);
++
++        samples.length = 0;
++        await await request(t.base, 'GET', '/metrics');
++        await await request(t.base, 'GET', '/shared/navbar.js');
++        await telemetry.flush();
++        assert.deepStrictEqual(requests(), [], '/metrics and /shared make no sample');
++
++        const db = t.db;
++        await db.query('DELETE FROM telemetry_samples');
++        const insert = (days) => db.query("INSERT INTO telemetry_samples (at, service, operation) VALUES (now() - make_interval(days => $1), 'ai', 'http.request')", [days]);
++        await insert(45);
++        await insert(1);
++        assert.strictEqual(await pruneTelemetry({ db }), 1);
++        assert.strictEqual((await db.query('SELECT count(*)::int AS n FROM telemetry_samples')).rows[0].n, 1);
++        console.log('telemetry ok');
++    } finally {
++        await telemetry.stop();
++        await t.stop();
++    }
++})().catch((err) => { console.error(err); process.exit(1); });