feat: OTS emitter — real turns, decisions, and content (ARN-109)

.github/workflows/ci.yml

@@ -71,5 +71,15 @@ jobs:
           cargo test --locked -p temperpaw --quiet
           cargo test --locked -p paw-codex-worker --quiet
           cargo test --manifest-path os-apps/paw-patrol/wasm/review_gate_lifecycle/Cargo.toml --quiet
+          # os-app WASM modules are their own workspaces, so `-p temperpaw` does
+          # not reach them. These five carry the OTS trajectory contract — the
+          # emitter that reads the record, the two writers that produce it, and
+          # the gate that fails when the temper pin gains the JCS fields. A gate
+          # nothing runs is not a gate (ADR-0035 section 17).
+          cargo test --manifest-path os-apps/paw-agent/wasm/emit_ots_trajectory/Cargo.toml --quiet
+          cargo test --manifest-path os-apps/paw-agent/wasm/provider_response_applier/Cargo.toml --quiet
+          cargo test --manifest-path os-apps/paw-agent/wasm/wasm-helpers/Cargo.toml --quiet
+          cargo test --manifest-path os-apps/paw-agent/wasm/openai-chat-wire/Cargo.toml --quiet
+          cargo test --manifest-path os-apps/paw-agent/wasm/monty_repl/Cargo.toml --quiet
       - name: Dashboard build
         run: cd dashboard && npm run build

crates/paw-codex-worker/Cargo.toml

@@ -18,7 +18,7 @@ libc = "0.2"
 reqwest = { version = "0.12", features = ["json", "stream"] }
 serde = { workspace = true }
 serde_json = { workspace = true }
-temper-observe = { git = "https://github.com/nerdsane/temper.git", rev = "804633e2c5cab3b0bd334f78bfb5ea23aca1858d" }
+temper-observe = { git = "https://github.com/nerdsane/temper.git", rev = "a747f7d40cb556371168f8460bc72806c3574d2b" }
 tokio = { workspace = true }
 tracing = { workspace = true }
 tracing-subscriber = { workspace = true }

crates/temperpaw/Cargo.toml

@@ -12,14 +12,14 @@ path = "src/main.rs"
 
 [dependencies]
 # Temper platform engine
-temper-platform = { git = "https://github.com/nerdsane/temper.git", rev = "804633e2c5cab3b0bd334f78bfb5ea23aca1858d" }
-temper-observe = { git = "https://github.com/nerdsane/temper.git", rev = "804633e2c5cab3b0bd334f78bfb5ea23aca1858d" }
-temper-server = { git = "https://github.com/nerdsane/temper.git", rev = "804633e2c5cab3b0bd334f78bfb5ea23aca1858d", features = ["observe"] }
-temper-runtime = { git = "https://github.com/nerdsane/temper.git", rev = "804633e2c5cab3b0bd334f78bfb5ea23aca1858d" }
-temper-jit = { git = "https://github.com/nerdsane/temper.git", rev = "804633e2c5cab3b0bd334f78bfb5ea23aca1858d" }
-temper-authz = { git = "https://github.com/nerdsane/temper.git", rev = "804633e2c5cab3b0bd334f78bfb5ea23aca1858d" }
-temper-store-postgres = { git = "https://github.com/nerdsane/temper.git", rev = "804633e2c5cab3b0bd334f78bfb5ea23aca1858d" }
-temper-store-turso = { git = "https://github.com/nerdsane/temper.git", rev = "804633e2c5cab3b0bd334f78bfb5ea23aca1858d" }
+temper-platform = { git = "https://github.com/nerdsane/temper.git", rev = "a747f7d40cb556371168f8460bc72806c3574d2b" }
+temper-observe = { git = "https://github.com/nerdsane/temper.git", rev = "a747f7d40cb556371168f8460bc72806c3574d2b" }
+temper-server = { git = "https://github.com/nerdsane/temper.git", rev = "a747f7d40cb556371168f8460bc72806c3574d2b", features = ["observe"] }
+temper-runtime = { git = "https://github.com/nerdsane/temper.git", rev = "a747f7d40cb556371168f8460bc72806c3574d2b" }
+temper-jit = { git = "https://github.com/nerdsane/temper.git", rev = "a747f7d40cb556371168f8460bc72806c3574d2b" }
+temper-authz = { git = "https://github.com/nerdsane/temper.git", rev = "a747f7d40cb556371168f8460bc72806c3574d2b" }
+temper-store-postgres = { git = "https://github.com/nerdsane/temper.git", rev = "a747f7d40cb556371168f8460bc72806c3574d2b" }
+temper-store-turso = { git = "https://github.com/nerdsane/temper.git", rev = "a747f7d40cb556371168f8460bc72806c3574d2b" }
 
 # Paw transport (local)
 paw-transport = { path = "../paw-transport" }

crates/temperpaw/tests/datadog_observability_contract.rs

@@ -59,13 +59,17 @@ fn collect_cargo_manifests(root: &Path, relative_dir: &Path, files: &mut Vec<Pat
 fn temper_dependency_pin_uses_budgeted_wasm_host_call_revision() {
     let manifest = load_text("crates/temperpaw/Cargo.toml");
     let lockfile = load_text("Cargo.lock");
-    let expected_rev = "804633e2c5cab3b0bd334f78bfb5ea23aca1858d";
+    let expected_rev = "a747f7d40cb556371168f8460bc72806c3574d2b";
     let pre_llmobs_opt_out_rev = "510a0d9bc9517f7819d66849446cdf6aff2d5295";
     let observe_wait_only_rev = "6ccc483af87abbf6d9b060d0e6a6def3adfe6718";
     let host_boundary_rev = "7b170cf71246e01c337e81062b54ea8c597b9293";
     let parent_only_rev = "4fbfcb971c7c9513ad6605cb8376a8c492c21482";
     let parentless_rev = "ffa0a15212966dbada3db8da6e652f081e5f261b";
     let legacy_rev = "5a19c5f4406e95533896a860b5da15a7a68a70ee";
+    // Superseded by the JCS OTS schema merge: rolling back to it would leave the
+    // emitter writing contract fields the structs no longer model, and the OTS
+    // round-trip test would fail to compile rather than at runtime.
+    let pre_jcs_schema_rev = "804633e2c5cab3b0bd334f78bfb5ea23aca1858d";
 
     for temper_crate in [
         "temper-platform",
@@ -96,8 +100,10 @@ fn temper_dependency_pin_uses_budgeted_wasm_host_call_revision() {
             && !manifest.contains(parentless_rev)
             && !lockfile.contains(parentless_rev)
             && !manifest.contains(host_boundary_rev)
-            && !lockfile.contains(host_boundary_rev),
-        "TemperPaw must not pin Temper revs without budgeted WASM host-call deadlines, complete WASM host-boundary observability, hard-coded LLMObs identity, parentless direct LLMObs spans, or one-span LLMObs traces"
+            && !lockfile.contains(host_boundary_rev)
+            && !manifest.contains(pre_jcs_schema_rev)
+            && !lockfile.contains(pre_jcs_schema_rev),
+        "TemperPaw must not pin Temper revs without budgeted WASM host-call deadlines, complete WASM host-boundary observability, hard-coded LLMObs identity, parentless direct LLMObs spans, one-span LLMObs traces, or the pre-JCS OTS schema"
     );
     assert!(
         !manifest.contains(pre_llmobs_opt_out_rev) && !lockfile.contains(pre_llmobs_opt_out_rev),
@@ -112,7 +118,7 @@ fn temper_dependency_pin_uses_budgeted_wasm_host_call_revision() {
 #[test]
 fn wasm_sdk_dependencies_pin_same_temper_runtime_revision_as_server() {
     let root = repo_root();
-    let expected_rev = "804633e2c5cab3b0bd334f78bfb5ea23aca1858d";
+    let expected_rev = "a747f7d40cb556371168f8460bc72806c3574d2b";
     let expected_dependency = format!(
         "temper-wasm-sdk = {{ git = \"https://github.com/nerdsane/temper.git\", rev = \"{expected_rev}\""
     );
@@ -1929,7 +1935,7 @@ fn wasm_guest_observability_live_proof_is_temper_native_and_datadog_backed() {
 
     assert!(
         probe_manifest.contains("temper-wasm-sdk")
-            && probe_manifest.contains("804633e2c5cab3b0bd334f78bfb5ea23aca1858d"),
+            && probe_manifest.contains("a747f7d40cb556371168f8460bc72806c3574d2b"),
         "proof WASM must build against the same guest SDK runtime rev as production modules"
     );
 }