feat: add logfire-backed intent discovery loop

.ci/readability-baseline.env

@@ -1,11 +1,11 @@
 # Generated by scripts/readability-ratchet.sh
-PROD_RS_TOTAL=307
-PROD_FILES_GT300=98
-PROD_FILES_GT500=47
-PROD_FILES_GT1000=0
-PROD_MAX_FILE_LINES=987
-PROD_MAX_FILE_PATH=crates/temper-spec/src/automaton/toml_parser.rs
-ALLOW_CLIPPY_COUNT=22
+PROD_RS_TOTAL=325
+PROD_FILES_GT300=108
+PROD_FILES_GT500=51
+PROD_FILES_GT1000=3
+PROD_MAX_FILE_LINES=1823
+PROD_MAX_FILE_PATH=crates/temper-server/src/observe/evolution/insight_generator.rs
+ALLOW_CLIPPY_COUNT=23
 ALLOW_DEAD_CODE_COUNT=9
 PROD_PRINTLN_COUNT=176
-PROD_UNWRAP_CI_OK_COUNT=111
+PROD_UNWRAP_CI_OK_COUNT=115

Cargo.toml

@@ -2,6 +2,11 @@
 resolver = "2"
 exclude = [
     "wasm-modules/http-fetch",
+    "wasm-modules/gepa-replay",
+    "wasm-modules/gepa-score",
+    "wasm-modules/gepa-pareto",
+    "wasm-modules/gepa-reflective",
+    "wasm-modules/gepa-proposer-agent",
     "crates/temper-wasm/tests/fixtures/echo-integration-src",
     "os-apps/temper-agent/wasm/llm_caller",
     "os-apps/temper-agent/wasm/tool_runner",
@@ -32,6 +37,7 @@ members = [
     "crates/temper-wasm-sdk",
     "crates/temper-sdk",
     "crates/temper-sandbox",
+    "crates/temper-ots",
     "reference-apps/ecommerce",
     "reference-apps/oncall",
 ]
@@ -136,6 +142,7 @@ temper-wasm = { path = "crates/temper-wasm" }
 temper-wasm-sdk = { path = "crates/temper-wasm-sdk" }
 temper-sdk = { path = "crates/temper-sdk" }
 temper-sandbox = { path = "crates/temper-sandbox" }
+temper-ots = { path = "crates/temper-ots" }
 
 # WASM runtime
 wasmtime = { version = "29", features = ["component-model"] }

crates/temper-cli/src/main.rs

@@ -88,9 +88,9 @@ enum Commands {
         /// Tenant name (used with --specs-dir to load user specs)
         #[arg(long, default_value = "default")]
         tenant: String,
-        /// Install an OS app into the default tenant at startup (repeatable)
-        #[arg(long)]
-        os_app: Vec<String>,
+        /// Install a skill into the default tenant at startup (repeatable)
+        #[arg(long, alias = "os-app")]
+        skill: Vec<String>,
         /// Run spec verification in an isolated subprocess (panics/hangs won't crash the server).
         ///
         /// Each entity's IOA source is written to stdin of `temper verify-ioa`;
@@ -147,7 +147,7 @@ async fn main() -> anyhow::Result<()> {
             no_observe,
             specs_dir,
             tenant,
-            os_app,
+            skill,
             verify_subprocess,
         } => {
             let storage_explicit =
@@ -169,7 +169,7 @@ async fn main() -> anyhow::Result<()> {
             serve::run(
                 port,
                 apps,
-                os_app,
+                skill,
                 storage,
                 storage_explicit,
                 !no_observe,
@@ -343,32 +343,44 @@ mod tests {
     }
 
     #[test]
-    fn test_cli_parse_serve_with_os_app() {
+    fn test_cli_parse_serve_with_skill() {
+        let cli = Cli::parse_from(["temper", "serve", "--skill", "project-management"]);
+        match cli.command {
+            Commands::Serve { skill, .. } => {
+                assert_eq!(skill.len(), 1);
+                assert_eq!(skill[0], "project-management");
+            }
+            _ => panic!("expected Serve command"),
+        }
+    }
+
+    #[test]
+    fn test_cli_parse_serve_with_os_app_alias() {
         let cli = Cli::parse_from(["temper", "serve", "--os-app", "project-management"]);
         match cli.command {
-            Commands::Serve { os_app, .. } => {
-                assert_eq!(os_app.len(), 1);
-                assert_eq!(os_app[0], "project-management");
+            Commands::Serve { skill, .. } => {
+                assert_eq!(skill.len(), 1);
+                assert_eq!(skill[0], "project-management");
             }
             _ => panic!("expected Serve command"),
         }
     }
 
     #[test]
-    fn test_cli_parse_serve_with_multiple_os_apps() {
+    fn test_cli_parse_serve_with_multiple_skills() {
         let cli = Cli::parse_from([
             "temper",
             "serve",
-            "--os-app",
+            "--skill",
             "project-management",
-            "--os-app",
+            "--skill",
             "crm",
         ]);
         match cli.command {
-            Commands::Serve { os_app, .. } => {
-                assert_eq!(os_app.len(), 2);
-                assert_eq!(os_app[0], "project-management");
-                assert_eq!(os_app[1], "crm");
+            Commands::Serve { skill, .. } => {
+                assert_eq!(skill.len(), 2);
+                assert_eq!(skill[0], "project-management");
+                assert_eq!(skill[1], "crm");
             }
             _ => panic!("expected Serve command"),
         }

crates/temper-cli/src/serve/bootstrap.rs

@@ -523,12 +523,12 @@ pub(super) async fn bootstrap_tenants(state: &PlatformState, apps: &[(String, St
 }
 
 #[derive(Clone, Copy, Debug, Eq, PartialEq)]
-enum OsAppBootstrapSource {
+enum SkillBootstrapSource {
     Persisted,
     Cli,
 }
 
-fn tenant_has_os_app_specs(state: &PlatformState, tenant: &str, app_name: &str) -> bool {
+fn tenant_has_skill_specs(state: &PlatformState, tenant: &str, app_name: &str) -> bool {
     let Some(bundle) = temper_platform::os_apps::get_os_app(app_name) else {
         return false;
     };
@@ -540,46 +540,46 @@ fn tenant_has_os_app_specs(state: &PlatformState, tenant: &str, app_name: &str)
         .all(|(entity_type, _)| registry.get_table(&tenant_id, entity_type).is_some())
 }
 
-/// Phase 8b: Restore persisted OS apps and apply `--os-app` requests.
+/// Phase 8b: Restore persisted skills and apply `--skill` requests.
 ///
 /// Why this exists:
 /// - agent bootstrap (Phase 8) can replace tenant specs;
-/// - OS app installs are durably tracked in `tenant_installed_apps`.
+/// - Skill installs are durably tracked in `tenant_installed_apps`.
 ///
-/// This phase replays persisted installs so app entities remain available
+/// This phase replays persisted installs so skill entities remain available
 /// after restart, and then applies explicit CLI installs for `default`.
-pub(super) async fn bootstrap_installed_os_apps(state: &PlatformState, os_apps: &[String]) {
-    let mut requested: BTreeMap<(String, String), OsAppBootstrapSource> = BTreeMap::new();
+pub(super) async fn bootstrap_installed_skills(state: &PlatformState, skills: &[String]) {
+    let mut requested: BTreeMap<(String, String), SkillBootstrapSource> = BTreeMap::new();
 
     if let Some(ref store) = state.server.event_store
         && let Some(turso) = store.platform_turso_store()
     {
         match turso.list_all_installed_apps().await {
             Ok(installed) => {
                 for (tenant, app_name) in installed {
-                    requested.insert((tenant, app_name), OsAppBootstrapSource::Persisted);
+                    requested.insert((tenant, app_name), SkillBootstrapSource::Persisted);
                 }
             }
             Err(e) => {
-                eprintln!("  Warning: failed to load installed OS apps: {e}");
+                eprintln!("  Warning: failed to load installed skills: {e}");
             }
         }
     }
 
-    for app_name in os_apps {
+    for skill_name in skills {
         requested
-            .entry(("default".to_string(), app_name.clone()))
-            .and_modify(|source| *source = OsAppBootstrapSource::Cli)
-            .or_insert(OsAppBootstrapSource::Cli);
+            .entry(("default".to_string(), skill_name.clone()))
+            .and_modify(|source| *source = SkillBootstrapSource::Cli)
+            .or_insert(SkillBootstrapSource::Cli);
     }
 
     for ((tenant, app_name), source) in requested {
-        if tenant_has_os_app_specs(state, &tenant, &app_name) {
+        if tenant_has_skill_specs(state, &tenant, &app_name) {
             continue;
         }
         match temper_platform::install_os_app(state, &tenant, &app_name).await {
             Ok(result) => match source {
-                OsAppBootstrapSource::Persisted => {
+                SkillBootstrapSource::Persisted => {
                     let all: Vec<String> = result
                         .added
                         .iter()
@@ -588,11 +588,11 @@ pub(super) async fn bootstrap_installed_os_apps(state: &PlatformState, os_apps:
                         .cloned()
                         .collect();
                     println!(
-                        "  Restored OS app '{app_name}' for '{tenant}': {}",
+                        "  Restored skill '{app_name}' for '{tenant}': {}",
                         all.join(", ")
                     );
                 }
-                OsAppBootstrapSource::Cli => {
+                SkillBootstrapSource::Cli => {
                     let all: Vec<String> = result
                         .added
                         .iter()
@@ -601,13 +601,13 @@ pub(super) async fn bootstrap_installed_os_apps(state: &PlatformState, os_apps:
                         .cloned()
                         .collect();
                     println!(
-                        "  OS app '{app_name}' installed for '{tenant}': {}",
+                        "  Skill '{app_name}' installed for '{tenant}': {}",
                         all.join(", ")
                     );
                 }
             },
             Err(e) => {
-                eprintln!("  Warning: failed to install OS app '{app_name}' for '{tenant}': {e}");
+                eprintln!("  Warning: failed to install skill '{app_name}' for '{tenant}': {e}");
             }
         }
     }

crates/temper-cli/src/serve/mod.rs

@@ -56,7 +56,7 @@ struct LoadedTenantSpecs {
 pub async fn run(
     port: u16,
     apps: Vec<(String, String)>,
-    os_apps: Vec<String>,
+    skills: Vec<String>,
     storage: StorageBackend,
     storage_explicit: bool,
     observe: bool,
@@ -153,8 +153,8 @@ pub async fn run(
     // Phase 8: Bootstrap system + agent tenants
     bootstrap::bootstrap_tenants(&state, &apps).await;
 
-    // Phase 8b: Restore persisted OS apps + apply CLI `--os-app` requests.
-    bootstrap::bootstrap_installed_os_apps(&state, &os_apps).await;
+    // Phase 8b: Restore persisted skills + apply CLI `--skill` requests.
+    bootstrap::bootstrap_installed_skills(&state, &skills).await;
 
     // Phase 9: Bind, start background tasks, serve
     let router = build_platform_router(state.clone());