Jannik/PaperClipAI
1
0 Fork 0
mirror of https://github.com/paperclipai/paperclip.git synced 2026-10-11 14:10:50 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
codex/plugin-task-execution
PaperClipAI/packages/paperclip-runner/spec/paperclip-agent-operation-groups.md
T
DottaandPaperclip 8cfedd7df8 fix(runner): restore task monitors and durable timed waits (#15446) 
## Thinking Path

> - Paperclip manages AI agents and their task execution.
> - Agents need a durable way to return to work after a delayed check.
> - The issue monitor scheduler already provides a one-shot wake for an
assignee.
> - Native runners reject generic execution-policy writes and had no
bound monitor tool.
> - Scheduling alone is insufficient because native completion also
needs to accept a timed wait.
> - This pull request adds an authorized monitor tool and connects it to
completion and the existing scheduler.
> - An agent can now schedule its next check, end the run, and resume on
the same task.

## Linked Issues or Issue Description

**What happened?**

A native runner could not set its own task monitor. `call_api` correctly
rejected execution-policy writes, while `schedule_wake` had no
production binding. `paperclip_finish` also rejected monitor waits.

**Expected behavior**

A standard native run can set a one-shot monitor on its current task or
another accessible task assigned to the same agent. After a confirmed
schedule on the current task, it can yield. The scheduler later delivers
`issue_monitor_due`.

**Steps to reproduce**

1. Start a standard native task.
2. Ask the agent to check the task again later and end its current run.
3. Inspect available tools and try the generic issue execution-policy
update.
4. Observe the missing native tool and the lifecycle-write denial.

Related PRs: #14680 concerns monitor notes in the shared wake prompt.
#11919 changes attempt-limit scope. This PR adds native scheduling and
completion authority and retains the existing cumulative attempt bounds.
It does not depend on either PR.

## What Changed

- Add provider-neutral `set_task_monitor` with a default current-task
target, future timestamp, required notes, existing bounds, and explicit
clearing.
- Check company, task visibility, ownership, runtime permissions, work
mode, and active-run authority. Preserve review-only restrictions.
Reject the reserved server-owned quota-recovery name before saving or
accepting a native wait.
- Commit the monitor, audit event, and retry receipt together. Retry
receipts survive a successor run without re-arming cleared or consumed
timers.
- Permit `paperclip_finish` to yield to a persisted monitor. Recheck
ownership and the schedule when committing final disposition. Release
execution without an immediate continuation.
- Preserve due monitors during native execution. Fence wake admission
and consumption against replacement, clearing, reassignment, and
completion. Preserve unrelated review policy.
- Expose scheduled and consumed monitor instructions in task context.
Update provider schemas, Rust validation, generated contracts, and
execution documentation.
- Add an opt-in live Codex smoke script with isolated data and explicit
run/session/runner/process evidence.

## Verification

- Repository `pnpm -r typecheck` and `pnpm build` passed after rebase.
Server typecheck passed again after review fixes. All CI test shards
pass on `3def77b1b`, including runner TypeScript/Rust, server,
serialized server, workspace, and browser tests. All CI gates are green,
including the canary dry run. Greptile is 5/5 on the same commit with
zero unresolved threads.
- The local monolithic `pnpm test:run`, started before the rebase, was
interrupted after current-head CI test coverage passed. It is not
counted as a standalone full-suite pass; the focused local regression
suites passed.
- Targeted server tests cover scheduling, replacement, clearing, policy
preservation, cumulative bounds, cross-run retries, permissions,
provider-neutral discovery, review restrictions, completion authority,
and scheduler/finalizer races.
- Runner contract/catalog/semantic tests and Rust terminal-tool tests
cover the new operation and monitor completion.
- Live Codex test passed twice (latest live run on `e0bcd63e6`) in a
temporary database and workspace, with a 300,000 ms warm window. First
run `67bd7709-c089-4d4a-9d2b-0d6b618a34b0` yielded at
`2026-10-07T13:15:03.274Z`. Second run
`97c323f9-595a-4cc5-a007-db5a2fbb937c` started at `13:15:30.952Z`,
received `issue_monitor_due`, and completed the same task. Exactly one
monitor wake was recorded.
- Both live runs used native session
`7b1dd753-1c9b-4e7a-b22f-a125dbc3748c`, runner
`e90d9a1b-3502-4ee3-b15e-edc024c555d4`, provider session
`01a11680-6d01-70c0-9a55-db7246ed66c3`, and PID `64218` with the same
process start time. This proves warm reuse for that local Codex test,
not only successful scheduling.
- Reproduce the paid live test with `node --import
./server/node_modules/tsx/dist/loader.mjs
server/scripts/smoke-native-task-monitor.ts --run`, with the installed
Codex binary on `PATH` and a valid local login.

## Risks

- The scheduler now defers monitor dispatch while the task has an active
native run. A stuck run still depends on the existing recovery
lifecycle.
- Idempotency uses the existing run ledger; no table or migration is
added.
- Other providers share the tested tool and completion contracts. Only
Codex received a live model test.
- Existing `call_api` lifecycle restrictions remain enforced. Monitor
waits do not bypass task blockers, reviews, or approvals.

## Model Used

OpenAI Codex, GPT-6 family, with tool use, code execution, and
TypeScript/Rust editing. The session does not expose the exact deployed
model ID or context-window size.

## Checklist

- [x] I have included a thinking path that traces from project context
to this change
- [x] I have specified the model used (with version and capability
details)
- [x] I have checked ROADMAP.md and confirmed this PR does not duplicate
planned core work
- [x] I have searched GitHub for duplicate or related PRs and linked
them above
- [x] I have either (a) linked existing issues with `Fixes: #` / `Closes
#` / `Refs #` OR (b) described the issue in-PR following the relevant
issue template
- [x] I have not referenced internal/instance-local Paperclip issues or
links (only public GitHub `#NNN` / `github.com/paperclipai/paperclip`
URLs)
- [x] My branch name describes the change (e.g. `docs/...`, `fix/...`)
and contains no internal Paperclip ticket id or instance-derived details
- [x] I have run tests locally and they pass
- [x] I have added or updated tests where applicable
- [x] I have updated relevant documentation to reflect my changes
- [x] I have considered and documented any risks above
- [x] All Paperclip CI gates are green
- [x] Greptile is 5/5 with no open P2s, recommendations, or follow-ups
- [x] I will address all Greptile and reviewer comments before
requesting merge

---------

Co-authored-by: Paperclip <noreply@paperclip.ing>
2026-10-07 08:41:24 -05:00

90 KiB
Raw Permalink Blame History

Paperclip agent operation groups

Status: canonical explanatory contract for the Paperclip runner V1 surface.

This document keeps three independent meanings of group separate. PRP families describe wire evidence and controller commands; capability placement decides who owns an operation; behavioral eval groups organize the 106 scenario corpus. None of the three axes can be used as a substitute for another.

The generated totals are 105 PRP events in 31 event families, 18 controller commands in 7 command families, 10 control-plane operations, 57 reconciled semantic operations (18 always, 39 optional), and 106 scenarios in 16 behavior groups.

Axis 1: PRP v1 event and command families

PRP records ordered, replayable execution evidence. It is not the model's Paperclip tool API. Events are ordered per sourceInstanceId; duplicate sourceEventId values are idempotent; source-sequence gaps remain evidence; replay is side-effect free; unknown required versions fail closed.

Event families

Family Purpose Events Count
runner Runner connection, drain, and diagnostic lifecycle. runner.connected
runner.reconnected
runner.reconciled
runner.disconnected
runner.draining
runner.backpressure
runner.suspending
runner.suspended
runner.stopped
runner.diagnostic		 10
runtime Runner phase transitions. runtime.phase.changed 1
sandbox Sandbox resource measurements. sandbox.metric 1
workspace Workspace readiness. workspace.ready
workspace.change.updated
workspace.diff.recorded
workspace.file.referenced		 4
harness Provider harness startup, readiness, exit, and diagnostics. harness.starting
harness.ready
harness.exited
harness.diagnostic		 4
plan Complete provider-authored within-turn checklist snapshots, separate from durable Paperclip Plan documents. plan.updated 1
tool Provider-neutral process, MCP, dynamic, and built-in execution activity. tool.execution.started
tool.execution.progressed
tool.execution.completed		 3
research Provider-reported search, page-open, and in-page research activity. research.started
research.progressed
research.completed		 3
delegation Child-agent delegation lifecycle and aggregate status. delegation.started
delegation.updated
delegation.completed		 3
model Requested/effective model routing and verification state. model.route.changed
model.verification.updated		 2
context Context-window compaction markers without hidden summaries. context.compacted 1
artifact Authorized artifact viewing and structured generated outputs. artifact.viewed
artifact.generated		 2
review Provider review-mode state, separate from Paperclip authority. review.mode.changed 1
hook Bounded provider hook lifecycle and blocking outcomes. hook.started
hook.completed		 2
memory Authorized or unavailable memory citation references. memory.citation.referenced 1
safety Provider safety review state attached to governed work. safety.review.started
safety.review.completed		 2
terminal Content-free terminal input activity metadata. terminal.input.sent 1
wait Intentional provider waits, distinct from warm idle and human input. wait.started
wait.completed		 2
provider Redacted provider notices and actionable warnings. provider.notice.recorded 1
session Provider-neutral session open, resume, reconciliation, close, and failure. session.starting
session.started
session.resuming
session.resumed
session.reconciled
session.updated
session.closed
session.failed		 8
turn Model turn submission through terminal turn disposition. turn.submitted
turn.accepted
turn.started
turn.completed
turn.failed
turn.interrupted
turn.cancelled		 7
item Provider-neutral model/tool item lifecycle. item.started
item.delta
item.completed
item.failed		 4
usage Provider/model-attributed usage and accounting boundaries. usage.reported 1
semantic_tool Canonical authorized Paperclip tool input and result evidence. semantic_tool.input
semantic_tool.result
semantic_tool.reconciled		 3
mcp_app MCP App discovery, initialization, tool, action, host-context, and teardown evidence. mcp_app.discovered
mcp_app.resource.resolved
mcp_app.initializing
mcp_app.ready
mcp_app.tool_input
mcp_app.tool_result
mcp_app.action.requested
mcp_app.action.resolved
mcp_app.host_context.changed
mcp_app.failed
mcp_app.teardown		 11
runtime_request Runtime permission/input request lifecycle. runtime_request.created
runtime_request.resolved
runtime_request.expired
runtime_request.cancelled		 4
interaction Issue-thread interaction proposal, materialization, response, delivery, and rejection. interaction.request.proposed
interaction.request.materialized
interaction.request.rejected
interaction.response.progressed
interaction.response.resolved
interaction.response.delivered		 6
run Structured result negotiation and terminal run outcome. run.attached
run.detached
run.result.proposed
run.result.accepted
run.result.rejected
run.terminal		 6
attention Continuation and attention routing lifecycle. attention.request.proposed
attention.request.routed
attention.request.resolved
attention.request.expired
attention.request.superseded		 5
work Recorded work-assessment evidence. work.assessment.recorded 1
issue Issue-status decision proposal outcome and application evidence. issue.status.decision.recorded
issue.status.decision.applied
issue.status.decision.rejected
issue.status.decision.superseded		 4

Controller-command families

Family Purpose Commands Count
run Prepare or cancel a run. run.prepare
run.attach
run.cancel		 3
session Open, snapshot, or close a normalized provider session. session.open
session.snapshot
session.close
session.budget.increase
session.destroy		 5
turn Start, steer, interrupt, or stop a model turn. turn.start
turn.steer
turn.interrupt
turn.stop		 4
request Resolve a pending runtime request. request.resolve 1
interaction Acknowledge delivery of an interaction response. interaction.receipt 1
semantic_tool Returns an authorized, correlated Paperclip tool result to the provider through runnerd. semantic_tool.result 1
runner Drain or shut down the runner process. runner.drain
runner.suspend
runner.shutdown		 3

Axis 2: capability placement

Placement has exactly three outcomes:

  • control_plane_owned: Paperclip or the runner performs the operation; it is absent from the model tool catalog.
  • always_agent_tool: every eligible active-task run receives the operation after task-mode and actor checks.
  • optional_agent_tool: the operation is exposed only when every declared claim, task-mode, role, and policy condition passes.

Control-plane-owned operations

Operation Why it is not a model tool
checkout_task Atomic checkout and execution-lock ownership.
release_task Run cleanup and checkout release.
select_work Scoped wake/inbox work selection.
route_wake Attention, blocker, interaction, approval, and continuation routing.
enforce_budget Budget hard stop, pause, and run-stop reason.
append_audit_record Immutable mutation evidence.
persist_run Durable run/event/checkpoint persistence.
replay_run Side-effect-free replay and reconstruction.
schedule_blocker_wake Dependency-resolution wake scheduling.
reconcile_run Work assessment, terminal status arbitration, and recovery reconciliation.

Always-agent operations (18)

answer_status_question, block_task, finish_task, get_agent_instruction_history, get_task_context, get_task_history, inspect_operation_result, list_document_revisions, list_documents, read_agent_instructions, read_document, register_deliverable, report_progress, request_human_input, request_review, restore_agent_instructions, update_agent_instructions, write_document.

Optional operations (39) and grant groups (14)

Grant groups are documentation/exposure bundles, not additional authority. The operation descriptor's exact requiredClaims remains decisive.

Grant group Operations Required claims represented Purpose
feedback submit_complaint
submit_suggestion		 none Internally attributed complaints and improvement suggestions; no additional grant required beyond active run authority.
discovery search_tasks
list_agents
get_agent
list_projects
list_goals
set_task_title		 discovery:agents:read
discovery:goals:read
discovery:projects:read
discovery:tasks:read		 Company-visible task, agent, project, and goal discovery.
projects create_project
list_project_repositories		 none Project creation and authorized repository discovery through the live company/run authority.
delegation_dependencies create_task
reassign_task
set_dependencies
hire_agent		 delegation:agents:create
delegation:tasks:assign
delegation:tasks:create
dependencies:write		 Create or reassign delegated work and maintain dependency edges.
governance list_approvals
get_approval
get_approval_context
request_approval
decide_approval
comment_on_approval		 governance:approvals:comment
governance:approvals:decide
governance:approvals:read
governance:approvals:request		 Read, request, comment on, and decide approvals under governed-action checks.
cases list_cases
upsert_case		 cases:read
cases:write		 Read and update case summaries without reusing issue-document authority.
workspace_runtime get_workspace_runtime
control_workspace_service		 workspace:control
workspace:read		 Inspect and control the active issue workspace runtime.
wake_scheduling schedule_wake
set_task_monitor		 control_plane:wakes Schedule a bounded continuation wake when the current task owns the future check.
routines list_routines
manage_routine		 routines:read
routines:write		 Inspect or manage company routines.
company_skills create_skill
update_skill
list_company_skills
sync_company_skills		 company_skills:read
company_skills:write		 Create, update, or inspect company skills and synchronize the current agent's skills.
secrets list_secret_metadata
read_secret_value		 secrets:metadata:read
secrets:values:read		 Inspect secret metadata or use a brokered secret value without exposing plaintext evidence.
portability_admin export_company
administer_company		 company:admin
portability:export		 Export portable company state; broad administration remains deferred until split into governed operations.
test_escape_hatch generic_api_request test:generic_api_request Controlled skill-test transport only; never product coverage.
api_fallback search_api
call_api		 api:call
api:discover		 Discover and invoke HTTP API operations unsupported by available dedicated tools. Production authority and route authorization remain required.

Reconciled semantic-operation ledger

live_codex means a live provider dispatcher exists. Production binding is tracked separately: bound rows are advertised by Paperclip's run-scoped authority over the shared PRP route, while audit_pending rows remain unavailable to production agents. generic_api_request is test-only and cannot satisfy product coverage.

Operation Placement Claims Modes / roles Side effect Idempotency Redacts Mock Catalogs / current runner Production / PRP evidence
administer_company optional_agent_tool company:admin standard
skill_test
roles: board
ceo
admin		 admin required no mock_extension:company.admin scenario
scenario_mock		 unbound
company admin/portability item event plus audit record
catalog PRP status: audit_pending
answer_status_question always_agent_tool none standard
ask
planning
skill_test		 task_write required no semantic_command:report_progress scenario + live
live_codex		 unbound
semantic-operation item event plus active-task state diff, work-assessment, and issue-status-decision events
catalog PRP status: audit_pending
block_task always_agent_tool none standard
skill_test		 task_write required no semantic_command:block_task scenario + live
live_codex		 unbound
semantic-operation item event plus active-task state diff, work-assessment, and issue-status-decision events
catalog PRP status: audit_pending
call_api optional_agent_tool api:call standard
ask
planning
skill_test		 company_write none no inline/no mapping live
live_codex		 PaperclipRunnerToolAuthority
Authenticated PRP tool input/result and existing HTTP route authorization/activity records.
catalog PRP status: bound
comment_on_approval optional_agent_tool governance:approvals:comment standard
ask
planning
skill_test		 governance required no semantic_command:comment_on_approval scenario + live
live_codex		 unbound
approval lifecycle plus governed-wait continuation and audit events
catalog PRP status: audit_pending
control_workspace_service optional_agent_tool workspace:control standard
skill_test		 workspace_control required no semantic_command:control_workspace_service scenario + live
live_codex		 unbound
workspace service lifecycle event
catalog PRP status: audit_pending
create_project optional_agent_tool none standard
skill_test		 company_write required no inline/no mapping live
live_codex		 PaperclipRunnerToolAuthority
Authenticated project tools, persisted projects and repository workspaces, and run-bound activity.
catalog PRP status: bound
create_skill optional_agent_tool none standard
skill_test		 company_write required no semantic_command:create_skill scenario + live
live_codex		 PaperclipRunnerToolAuthority
Authenticated company skill API, saved skill and initial version, and task-bound creation activity.
catalog PRP status: bound
create_task optional_agent_tool delegation:tasks:create standard
skill_test		 company_write required no semantic_command:create_task scenario + live
live_codex		 issues.create / issues.createChild
semantic-operation item event plus company-entity state diff and audit record
catalog PRP status: bound
decide_approval optional_agent_tool governance:approvals:decide standard
skill_test
roles: board
approver
security		 governance required no semantic_command:decide_approval scenario + live
live_codex		 unbound
approval lifecycle plus governed-wait continuation and audit events
catalog PRP status: audit_pending
export_company optional_agent_tool portability:export standard
skill_test		 admin required no mock_extension:portability.export scenario
scenario_mock		 unbound
company admin/portability item event plus audit record
catalog PRP status: audit_pending
finish_task always_agent_tool none standard
skill_test		 task_write required no semantic_command:finish_task scenario + live
live_codex		 unbound
semantic-operation item event plus active-task state diff, work-assessment, and issue-status-decision events
catalog PRP status: audit_pending
generic_api_request optional_agent_tool test:generic_api_request skill_test test_escape_hatch required yes mock_extension:test.generic_api scenario + live
test_only		 unbound
test-only; excluded from product PRP evidence
catalog PRP status: audit_pending
get_agent optional_agent_tool discovery:agents:read standard
ask
planning
skill_test		 read none no inline/no mapping live
live_codex		 unbound
read projection surfaced via a tool-result item event; no control-plane state diff
catalog PRP status: audit_pending
get_agent_instruction_history always_agent_tool none standard
ask
planning
skill_test		 read none no inline/no mapping live
live_codex		 agentInstructionRevisionService
tool-result item event plus canonical revision receipt for writes; no scenario mock coverage
catalog PRP status: bound
get_approval optional_agent_tool governance:approvals:read standard
ask
planning
skill_test		 read none no inline/no mapping live
live_codex		 unbound
read projection surfaced via a tool-result item event; no control-plane state diff
catalog PRP status: audit_pending
get_approval_context optional_agent_tool governance:approvals:read standard
ask
planning
skill_test		 read none no inline/no mapping live
live_codex		 unbound
read projection surfaced via a tool-result item event; no control-plane state diff
catalog PRP status: audit_pending
get_task_context always_agent_tool none standard
ask
planning
skill_test		 read none no context_read:active_task scenario + live
live_codex		 PaperclipRunnerToolAuthority active issue/run + accepted plan revision
bound company/assignment query plus exact accepted document revision projection
catalog PRP status: bound
get_task_history always_agent_tool none standard
ask
planning
skill_test		 read none no snapshot_read:active_task_history scenario + live
live_codex		 unbound
read projection surfaced via a tool-result item event; no control-plane state diff
catalog PRP status: audit_pending
get_workspace_runtime optional_agent_tool workspace:read standard
ask
planning
skill_test		 read none no snapshot_read:active_task_workspace scenario + live
live_codex		 unbound
read projection surfaced via a tool-result item event; no control-plane state diff
catalog PRP status: audit_pending
hire_agent optional_agent_tool delegation:agents:create standard
skill_test		 company_write required no inline/no mapping live
live_codex		 PaperclipRunnerToolAuthority
Authenticated PRP tool input/result and agent-hire state diff with activity record.
catalog PRP status: bound
inspect_operation_result always_agent_tool none standard
ask
planning
skill_test		 read none no operation_result scenario
scenario_mock		 unbound
read projection surfaced via a tool-result item event; no control-plane state diff
catalog PRP status: audit_pending
list_agents optional_agent_tool discovery:agents:read standard
ask
planning
skill_test		 read none no snapshot_read:company_actors scenario + live
live_codex		 unbound
read projection surfaced via a tool-result item event; no control-plane state diff
catalog PRP status: audit_pending
list_approvals optional_agent_tool governance:approvals:read standard
ask
planning
skill_test		 read none no snapshot_read:company_approvals scenario + live
live_codex		 unbound
read projection surfaced via a tool-result item event; no control-plane state diff
catalog PRP status: audit_pending
list_cases optional_agent_tool cases:read standard
skill_test		 read none no mock_extension:cases.list scenario
scenario_mock		 unbound
read projection surfaced via a tool-result item event; no control-plane state diff
catalog PRP status: audit_pending
list_company_skills optional_agent_tool company_skills:read standard
skill_test		 read none no mock_extension:company_skills.list scenario
scenario_mock		 unbound
read projection surfaced via a tool-result item event; no control-plane state diff
catalog PRP status: audit_pending
list_document_revisions always_agent_tool none standard
ask
planning
skill_test		 read none no snapshot_read:active_task_document_revisions scenario + live
live_codex		 unbound
read projection surfaced via a tool-result item event; no control-plane state diff
catalog PRP status: audit_pending
list_documents always_agent_tool none standard
ask
planning
skill_test		 read none no snapshot_read:active_task_documents scenario + live
live_codex		 unbound
read projection surfaced via a tool-result item event; no control-plane state diff
catalog PRP status: audit_pending
list_goals optional_agent_tool discovery:goals:read standard
skill_test		 read none no mock_extension:discovery.goals scenario
scenario_mock		 unbound
read projection surfaced via a tool-result item event; no control-plane state diff
catalog PRP status: audit_pending
list_project_repositories optional_agent_tool none standard
ask
planning
skill_test		 read none no inline/no mapping live
live_codex		 PaperclipRunnerToolAuthority
Authenticated project tools, persisted projects and repository workspaces, and run-bound activity.
catalog PRP status: bound
list_projects optional_agent_tool discovery:projects:read standard
ask
planning
skill_test		 read none no mock_extension:discovery.projects scenario + live
live_codex		 PaperclipRunnerToolAuthority
Authenticated project tools, persisted projects and repository workspaces, and run-bound activity.
catalog PRP status: bound
list_routines optional_agent_tool routines:read standard
skill_test		 read none no mock_extension:routines.list scenario
scenario_mock		 unbound
read projection surfaced via a tool-result item event; no control-plane state diff
catalog PRP status: audit_pending
list_secret_metadata optional_agent_tool secrets:metadata:read standard
skill_test		 read none no mock_extension:secrets.metadata scenario
scenario_mock		 unbound
read projection surfaced via a tool-result item event; no control-plane state diff
catalog PRP status: audit_pending
manage_routine optional_agent_tool routines:write standard
skill_test		 admin required no mock_extension:routines.manage scenario
scenario_mock		 unbound
company admin/portability item event plus audit record
catalog PRP status: audit_pending
read_agent_instructions always_agent_tool none standard
ask
planning
skill_test		 read none no inline/no mapping live
live_codex		 agentInstructionRevisionService
tool-result item event plus canonical revision receipt for writes; no scenario mock coverage
catalog PRP status: bound
read_document always_agent_tool none standard
ask
planning
skill_test		 read none no snapshot_read:active_task_document scenario + live
live_codex		 unbound
read projection surfaced via a tool-result item event; no control-plane state diff
catalog PRP status: audit_pending
read_secret_value optional_agent_tool secrets:values:read standard
skill_test		 secret_read none yes mock_extension:secrets.value scenario
scenario_mock		 unbound
redacted tool-result item event; secret value never reaches the wire
catalog PRP status: audit_pending
reassign_task optional_agent_tool delegation:tasks:assign standard company_write required no semantic_command:reassign_task scenario + live
live_codex		 PaperclipRunnerToolAuthority.reassign_task
semantic-operation item event plus company-entity state diff and audit record
catalog PRP status: bound
register_deliverable always_agent_tool none standard
planning
skill_test		 task_write required no semantic_command:register_deliverable scenario + live
live_codex		 unbound
semantic-operation item event plus active-task state diff, work-assessment, and issue-status-decision events
catalog PRP status: audit_pending
report_progress always_agent_tool none standard
ask
planning
skill_test		 task_write required no semantic_command:report_progress scenario + live
live_codex		 unbound
semantic-operation item event plus active-task state diff, work-assessment, and issue-status-decision events
catalog PRP status: audit_pending
request_approval optional_agent_tool governance:approvals:request standard
skill_test		 governance required no semantic_command:request_approval scenario + live
live_codex		 unbound
approval lifecycle plus governed-wait continuation and audit events
catalog PRP status: audit_pending
request_human_input always_agent_tool none standard
planning
ask
skill_test		 task_write required no semantic_command:request_human_input scenario + live
live_codex		 unbound
semantic-operation item event plus active-task state diff, work-assessment, and issue-status-decision events
catalog PRP status: audit_pending
request_review always_agent_tool none standard
skill_test		 task_write required no semantic_command:request_review scenario + live
live_codex		 unbound
semantic-operation item event plus active-task state diff, work-assessment, and issue-status-decision events
catalog PRP status: audit_pending
restore_agent_instructions always_agent_tool none standard
planning		 company_write recommended no inline/no mapping live
live_codex		 agentInstructionRevisionService
tool-result item event plus canonical revision receipt for writes; no scenario mock coverage
catalog PRP status: bound
schedule_wake optional_agent_tool control_plane:wakes standard
skill_test		 task_write required no inline/no mapping live
live_codex		 unbound
semantic-operation item event plus active-task state diff, work-assessment, and issue-status-decision events
catalog PRP status: audit_pending
search_api optional_agent_tool api:discover standard
ask
planning
skill_test		 read none no inline/no mapping live
live_codex		 PaperclipRunnerToolAuthority
Authenticated PRP tool input/result and existing HTTP route authorization/activity records.
catalog PRP status: bound
search_tasks optional_agent_tool discovery:tasks:read standard
ask
planning
skill_test		 read none no snapshot_read:company_tasks scenario + live
live_codex		 unbound
read projection surfaced via a tool-result item event; no control-plane state diff
catalog PRP status: audit_pending
set_dependencies optional_agent_tool dependencies:write standard
skill_test		 company_write required no semantic_command:set_dependencies scenario + live
live_codex		 issues.update.blockedByIssueIds
semantic-operation item event plus company-entity state diff and audit record
catalog PRP status: bound
set_task_monitor optional_agent_tool none standard task_write required no inline/no mapping live
live_codex		 prepareIssueMonitorUpdate
Transactional persisted issue monitor, audit activity and idempotent run receipt.
catalog PRP status: bound
set_task_title optional_agent_tool none standard
ask
planning
skill_test		 task_write required no inline/no mapping live
live_codex		 setIssueTitle
Run-bound title update and transactional activity record.
catalog PRP status: bound
submit_complaint optional_agent_tool none standard
ask
planning		 task_write required no inline/no mapping live
live_codex		 submitAgentCommentary
Run-bound local commentary and transactional activity record.
catalog PRP status: bound
submit_suggestion optional_agent_tool none standard
ask
planning		 task_write required no inline/no mapping live
live_codex		 submitAgentCommentary
Run-bound local commentary and transactional activity record.
catalog PRP status: bound
sync_company_skills optional_agent_tool company_skills:write standard
skill_test		 admin required no mock_extension:company_skills.sync scenario
scenario_mock		 unbound
company admin/portability item event plus audit record
catalog PRP status: audit_pending
update_agent_instructions always_agent_tool none standard
planning		 company_write recommended no inline/no mapping live
live_codex		 agentInstructionRevisionService
tool-result item event plus canonical revision receipt for writes; no scenario mock coverage
catalog PRP status: bound
update_skill optional_agent_tool none standard
skill_test		 company_write required no semantic_command:update_skill scenario + live
live_codex		 PaperclipRunnerToolAuthority
Authenticated skill file API with version guard, durable receipt, and attributed activity.
catalog PRP status: bound
upsert_case optional_agent_tool cases:write standard
skill_test		 company_write required no mock_extension:cases.upsert scenario
scenario_mock		 unbound
semantic-operation item event plus company-entity state diff and audit record
catalog PRP status: audit_pending
write_document always_agent_tool none standard
planning
skill_test		 task_write required no semantic_command:write_document scenario + live
live_codex		 unbound
semantic-operation item event plus active-task state diff, work-assessment, and issue-status-decision events
catalog PRP status: audit_pending

Axis 3: the 16 behavioral eval groups

Behavior groups describe expected outcomes and trajectories. They do not grant tools and they do not define PRP event types. The matrix is generated from the behavior-group source plus the checked-in eval traceability manifest; scenario counts and membership cannot be hand-edited here.

Coverage matrix

Group Owner Semantic operations Control-plane operations Real Paperclip surface Mock state Scenarios PRP evidence Gap / disposition
hb — Heartbeat control plane + always tools get_task_context
set_task_title		 select_work
enforce_budget		 agent identity, inbox-lite, heartbeat context, budget and active-issue services company
actor
wake
task
budget
run		 5 runner/session/run context plus bounded task-context tool results Production semantic binding is unbound; identity and work selection remain injected/control-plane-owned.
co — Checkout control plane none checkout_task POST /api/issues/:id/checkout and execution-lock services task
actor
run
idempotency
fault		 6 run preparation and issue-status decision evidence with checkout receipt Intentionally no model tool; the production checkout receipt still needs the additive semantic-receipt envelope.
st — Status always tools + control-plane arbitration answer_status_question
finish_task
block_task
request_review		 reconcile_run
append_audit_record		 issue PATCH, review/liveness policy, and native finalization arbitration task
comments
interactions
blockers
audit
run		 8 semantic operation receipt, work assessment, issue-status decision, and terminal causality Production semantic binding and additive typed operation/conflict receipts remain unimplemented.
cm — Comments always tools get_task_history
report_progress		 append_audit_record issue comment list/get/create routes task
comments
actor
idempotency
audit		 6 bounded read result or idempotent comment-write receipt plus audit reference Active-task binding is unbound; cross-task comment mutation is deliberately outside V1.
se — Search optional discovery tools search_tasks
list_agents
get_agent
list_projects
list_goals
list_project_repositories		 none company issue search and agent/project/goal list/get routes company
task
actor
project
goal		 4 bounded redacted read projections through tool-result item events Goal operations remain scenario-only. Project and repository discovery contracts are delivered by the live server authority; they are not implemented by the mock command dispatcher.
su — Subtasks optional delegation tools create_task
reassign_task
hire_agent		 route_wake company issue create, child issue, guarded reassignment, and wake services company
task
actor
blockers
wake
audit		 4 company/task state diff, audit reference, and continuation wake evidence create_task is production-bound to ordinary active-issue child creation with assignment, dependency-ready wake, company checks, child limits, and durable source-scoped idempotency.
bl — Blockers always/optional tools + control plane block_task
set_dependencies		 schedule_blocker_wake
route_wake		 issue relations, blocker projection, liveness validation, and blocker wake services task
blockers
wake
actor
audit
fault		 5 dependency diff, block receipt, attention routing, and issue-status decision set_dependencies is production-bound for the active issue; block_task remains unbound, and cancelled-blocker receipts still need typed additive evidence.
dp — Documents and plans always tools; restore optional; destructive lifecycle control-plane-only list_documents
read_document
list_document_revisions
write_document		 append_audit_record issue document list/read/upsert/revision/restore/lock/unlock/delete routes task
documents
interactions
idempotency
audit
fault		 3 bounded reads and revision-safe write/conflict/denial receipts with revision lineage restore_document_revision is an approved optional-tool gap; lock/unlock/delete are intentionally control-plane-only.
ix — Interactions always tools + addressed resolver request_human_input route_wake issue-thread interaction create/respond/accept/reject/withdraw services task
documents
interactions
wake
actor
idempotency		 9 interaction proposal/materialization/response/delivery and attention events Production binding and semantic resolution receipts are unbound.
ap — Approvals optional governance tools + governed approver list_approvals
get_approval
get_approval_context
request_approval
decide_approval
comment_on_approval		 route_wake
append_audit_record		 company approval, decision, issue-link, comment, and governed-action services company
task
approvals
actor
wake
audit
idempotency		 6 governed semantic receipts, audit references, and attention/continuation linkage Production binding and additive governed-action receipts are unbound; board-only authority stays outside grants.
ar — Artifacts always tools + artifact/work-product services register_deliverable append_audit_record attachment upload and issue work-product routes task
artifacts
workProducts
workspace
audit
idempotency		 4 artifact/work-product reference and durable inspectability receipt; never binary bytes Production upload/register composite and additive durable-reference receipt are unbound.
er — Errors and critical rules runner/control plane + optional workspace/wake tools get_workspace_runtime
control_workspace_service
schedule_wake
inspect_operation_result		 release_task
enforce_budget
persist_run
replay_run
reconcile_run		 workspace runtime, monitor/recovery, budget, run persistence/replay, release, and terminal services workspace
budget
run
wake
audit
idempotency
fault		 9 runtime/workspace/attention/run lifecycle, typed denials, replay facts, and terminal causality Budget stop reasons and semantic denial/conflict receipts require additive v1 envelopes; inspect_operation_result remains scenario-only.
rf — Reference files always instruction tools + optional domain tools + test-only escape hatch list_cases
upsert_case
list_routines
manage_routine
create_skill
update_skill
list_company_skills
sync_company_skills
list_secret_metadata
read_secret_value
export_company
administer_company
generic_api_request
search_api
call_api
create_project
read_agent_instructions
update_agent_instructions
get_agent_instruction_history
restore_agent_instructions
submit_complaint
submit_suggestion		 append_audit_record agent instruction revisions, project, case, routine, company-skill, secret, portability, and administration services, and run-attributed agent commentary company
cases
routines
skills
secrets
audit
fault		 22 bounded domain projections, redacted broker receipts, company diffs, and audit references Instruction read/update/history/restore require the live canonical revision service, current responsible-user permissions, and pinned base revisions for writes. Their service, authority, and product E2E tests are separate from the legacy mock scenarios. Project and skill creation and API tools require the live server authority; generic_api_request is test-only and the remaining domain operations are scenario-only. Broad administer_company is deferred and cannot claim product coverage. Production API and paired dedicated-tool regressions are recorded separately in paperclip-evals/evals/runner-api-tools; the legacy scenario count is not evidence of that coverage. Feedback actions are live-only: shared persistence, authority, API, and actual Codex smoke tests cover them; the legacy scenario count does not claim feedback coverage.
mh — Multi-hop composed semantic operations + control-plane continuation create_task
set_dependencies
request_human_input
request_approval
register_deliverable		 route_wake
reconcile_run		 delegation, dependency, interaction, approval, artifact, and terminal orchestration services task
blockers
interactions
approvals
artifacts
wake
run
audit		 4 correlated operation receipts, state diffs, attention hops, work assessment, status decision, and terminal outcome No generic transaction tool is allowed; shared mock/real conformance must prove each composed effect.
rs — Restraint and no-call policy/exposure layer answer_status_question
read_secret_value
generic_api_request		 enforce_budget task-mode, secret-broker, test-scope, pause, and budget policy checks actor
task
budget
secrets
audit
fault		 3 absence of forbidden effects plus typed policy denial/redaction receipts when a call is attempted Typed redaction/authorization receipts need additive v1 evidence; generic_api_request is never a product fallback.
wk — Wake situations control plane + always context/history tools get_task_context
get_task_history
schedule_wake
set_task_monitor		 select_work
route_wake		 wakeup requests, heartbeat context, comment/interaction/approval/blocker wake routing, and scheduled wake services wake
task
comments
interactions
approvals
blockers
run		 8 attention request routing/resolution plus resumed session/run causality set_task_monitor binds the one-shot monitor scheduler in production; schedule_wake remains mock-backed. Control-plane routing remains non-callable.

Scenario links

Behavior group hb: Heartbeat

5 scenarios (legacy group 1):

  • hb-context-01 — Prefer the compact heartbeat-context route before replaying the thread
  • hb-inbox-lite-01 — Normal heartbeat starts from the compact inbox, not a raw issue listing
  • hb-pick-priority-01 — Pick-work priority prefers in_progress and skips blocked work
  • hb-scoped-wake-01 — Scoped wake payload skips identity/inbox and goes straight to checkout
  • hb-wake-comment-01 — Comment wake fetches the triggering comment first, then responds on the issue

Behavior group co: Checkout

6 scenarios (legacy group 2):

Behavior group st: Status

8 scenarios (legacy group 3):

  • st-backlog-park-01 — Postponed work is parked in backlog, not cancelled or closed
  • st-blocked-owner-01 — Blocking on another issue sets status blocked plus first-class blockedByIssueIds
  • st-crossteam-cancel-01 — Cross-team tasks are never cancelled — reassign to the manager instead
  • st-done-comment-01 — Closing a task is checkout, then PATCH done with an explanatory comment
  • st-env-blocked-notdone-01 — Impossible deliverable (absent mount, read-only prefix, no route) ends blocked with a named owner — never done or in_review
  • st-ephemeral-verify-01 — Artifacts produced outside the synced workspace — the disposition PATCH must carry a persistence caveat (or relocation), never a bare done
  • st-handback-review-01 — Board user asking for the task back gets reassigned + in_review, not done
  • st-unverified-toolchain-01 — Unrunnable mandated verification (certified toolchain unobtainable) ends blocked stating what could not be verified — no unqualified completion claim

Behavior group cm: Comments

6 scenarios (legacy group 4):

Behavior group se: Search

4 scenarios (legacy group 5):

Behavior group su: Subtasks

4 scenarios (legacy group 6):

Behavior group bl: Blockers

5 scenarios (legacy group 7):

Behavior group dp: Documents and plans

3 scenarios (legacy group 8):

Behavior group ix: Interactions

9 scenarios (legacy group 9):

  • ix-checkbox-01 — Subset selection from a known list is a checkbox confirmation
  • ix-checkbox-result-01 — Checkbox continuation wake acts on result.selectedOptionIds only
  • ix-confirmation-plan-01 — Plan sign-off is a request_confirmation bound to the latest revision, then in_review
  • ix-continuation-01 — request_confirmation sets a wake continuation policy when work must resume
  • ix-questions-01 — A short typed form of questions is ask_user_questions, not a comment
  • ix-stale-target-01 — A stale_target expiry means rebuild against the latest revision, fresh interaction
  • ix-suggest-tasks-01 — Proposing tasks for the board to accept uses suggest_tasks, not direct creation
  • ix-superseded-comment-01 — A superseded_by_comment expiry means address the comment, then a new interaction
  • ix-verdicts-01 — Per-item approve/reject decisions use request_item_verdicts with reasons on reject

Behavior group ap: Approvals

6 scenarios (legacy group 10):

  • ap-approval-deny-01 — A denied approval leaves the issue open with an explanatory comment
  • ap-approval-wake-01 — Approval wake reviews the approval, its issues, and closes what it resolves
  • ap-board-approval-01 — Spend needs a request_board_approval linked to the issue, then a waiting posture
  • ap-mcp-expiry-01 — An expired MCP approval means one fresh idempotent re-call, then in_review again
  • ap-mcp-gate-01 — Pending MCP tool approval means in_review posture, no retry, no done
  • ap-mcp-pathmissing-01 — approval_path_missing means stop and reroute, not retry loops or fake dispositions

Behavior group ar: Artifacts

4 scenarios (legacy group 11):

Behavior group er: Errors and critical rules

9 scenarios (legacy group 12):

Behavior group rf: Reference files

22 scenarios (legacy group 13):

Behavior group mh: Multi-hop

4 scenarios (legacy group 14):

Behavior group rs: Restraint and no-call

3 scenarios (legacy group 15):

Behavior group wk: Wake situations

8 scenarios (legacy group 16):

  • wk-ask-mode-01 — Ask-mode wake is answer-only — comment, no state or document writes
  • wk-plan-accepted-01 — Accepted-plan continuation creates subtasks, never re-plans or re-asks
  • wk-plan-annotation-01 — Plan-annotation wake revises the document and answers annotations via nested routes
  • wk-plan-directive-01 — Planning-mode wake produces plan PUT, revision-bound confirmation, then in_review
  • wk-plan-directive-02 — Layer probe — planning directive via wake prose only (no task-context markdown)
  • wk-recovery-processlost-01 — Process-lost recovery verifies durable progress first and never redoes posted work
  • wk-resume-delta-01 — Layer probe — resume delta with condensed contract only preserves close discipline
  • wk-skilltest-mode-01 — Skill-test mode writes the structured result to the output document, scoped to this issue

Authorization and execution invariants

Company and actor authorization

  • Every entity read and write is resolved inside the authenticated actor's company; cross-company identifiers fail without disclosing protected facts.
  • Board actors use active membership and role permissions. Agent writes require a company-scoped run JWT and X-Paperclip-Run-Id; active-task tools cannot accept a caller-selected company or arbitrary task.
  • Optional tools are omitted unless every required claim, role, and task-mode condition is satisfied. A grant never bypasses approval, budget, pause, execution-lock, interaction-owner, or other governed-action checks.

Task modes and exposure

  • standard permits the full eligible catalog subject to claims and role checks.
  • ask is answer-only: investigation reads are eligible, while implementation, document mutation, delegation, terminal, and governed writes are absent.
  • planning permits plan/document/progress/input operations but not delegation or terminal completion; accepting a plan transitions the issue into a fresh standard execution continuation for the exact accepted revision.
  • skill_test exposes only scenario-admitted tools. generic_api_request additionally requires the explicit test grant and allowlist and never supplies product coverage.

Redaction

  • Tool descriptors declare observable redaction. Secret plaintext may reach only the model-use capsule authorized for a bound secret; it never reaches PRP, logs, artifacts, errors, audit details, or serialized tool results.
  • Authorization denials reveal stable codes, missing public claims, and remediation only; they do not include protected entity state, credentials, headers, cookies, or another company's policy.
  • Artifacts carry durable references, hashes, content type, and size on the wire; binary payloads remain in storage transports.

Idempotency and replay

  • Every mutation whose descriptor says required must carry a stable idempotency key. Retrying the same key and equivalent input returns the prior receipt without duplicating side effects.
  • Reusing a key with different input is an idempotency conflict. Optimistic document writes additionally bind baseRevisionId and return the current revision on conflict.
  • PRP source event IDs are idempotent, source sequence gaps are evidence, and replay is side-effect free. Replaying a trace cannot repeat control-plane writes.

Side effects and terminal ownership

  • read operations return bounded projections and do not mutate control-plane state.
  • task_write and company_write operations emit normalized state diffs and immutable audit references after production authorization succeeds.
  • governance, workspace_control, secret_read, and admin operations retain their production-specific gates; catalog exposure is necessary but never sufficient authority.
  • Terminal semantic operations propose intent. The control plane owns checkout, release, budget enforcement, persisted run evidence, replay, wake routing, audit append, and final status arbitration.

Issue-document lifecycle

Issue documents are active-task working records identified by (activeIssueId, key). Always-present document tools do not accept a company id or arbitrary issue id.

Cross-task document reads require a future explicit optional operation and grant; case documents and future company knowledge are separate resource types.

Locked-document fallback may create a deterministic new key only when lockedDocumentStrategy is create_new_document; the source stays locked and the returned receipt names the redirected key.

Action Semantic operation Placement Contract Status
create write_document always_agent_tool baseRevisionId is null; create revision 1 and return document/revision/audit identity. supported contract; production binding unbound
read list_documents / read_document always_agent_tool List metadata or read the current active-task document by stable key. supported contract; production binding unbound
update write_document always_agent_tool Require the exact latest baseRevisionId and an idempotency key; append an immutable revision. supported contract; production binding unbound
revisions list_document_revisions always_agent_tool Return bounded immutable revision history newest first. supported contract; production binding unbound
restore restore_document_revision optional_agent_tool (documents:restore) Validate same-document lineage, reject locked documents, append a new revision, and return source/new revision identity; restoring current is a no-change duplicate. approved catalog gap
lock none control_plane_owned Board/administrative lifecycle action; agent writes receive document_locked or use explicit create-new fallback. intentionally non-callable
unlock none control_plane_owned Board/administrative lifecycle action; never inferred from a failed write. intentionally non-callable
delete none control_plane_owned Destructive audited action; pending targets become stale and the runner never recreates them automatically. intentionally non-callable

All document writes produce a normalized receipt. Success includes the document key/id, prior and new revision identity, idempotency key, and audit reference. Missing/stale bases return base_revision_required or stale_base_revision with the current revision. Authorization, cross-company, and lock failures use stable redacted denial codes. The runner never overwrites after a conflict without a fresh read and explicit reconciled write.

Provenance, generation, and drift gates

The machine-readable authority for this document's decisions is spec/operation-groups/source.json. The generator joins that source to these independently versioned authorities and rejects disagreement:

  • the package-exported CAPABILITY_CANONICAL_CATALOG in src/catalog/ — the 41-operation authority, including enriched mock/redaction and divergence facts.
  • src/tools/capability-semantic-tool-types.ts — 10 control-plane-owned operation IDs.
  • protocol/schemas/event.schema.json and command.schema.json — PRP event/command members and families.
  • spec/capability/eval-traceability.yaml — all 16 groups and 106 scenario identities/source anchors.
  • spec/capability/source-contract.json and mcp-tool-map.yaml — legacy MCP placement and fold authority.
  • generated/capability/semantic-tool-contracts.json — generated provider contract; it must equal the live catalog exactly.
  • src/catalog/index.ts and src/index.ts — package export path for the canonical reconciliation authority.

Regenerate and check reproducibly:

pnpm --filter @paperclipai/paperclip-runner exec tsx scripts/generate-operation-groups.ts
pnpm --filter @paperclipai/paperclip-runner exec tsx scripts/generate-operation-groups.ts --check
pnpm --filter @paperclipai/paperclip-runner exec vitest run src/catalog/operation-groups-doc.test.ts src/catalog/reconciliation.test.ts src/catalog/catalog-docs.test.ts

The --check path fails on catalog membership, optional-group coverage, control-plane coverage, PRP schema families/counts, behavior/scenario membership, legacy alias folds, source-contract targets, generated live contracts, package exports, or byte-level Markdown drift. Generation is offline and uses only checked-in inputs.

Current responsibility-based paths are normative. Numbered phase-* or milestone paths are historical and must not be reintroduced.

Reconciliation appendix

Catalog split and deliberate replacement

  • Scenario/eval catalog: 40 operations.
  • Live dispatcher catalog: 45 operations.
  • Shared: 28; union/canonical authority: 57.
  • Scenario-only: administer_company, export_company, inspect_operation_result, list_cases, list_company_skills, list_goals, list_routines, list_secret_metadata, manage_routine, read_secret_value, sync_company_skills, upsert_case.
  • Live-only: call_api, create_project, get_agent, get_agent_instruction_history, get_approval, get_approval_context, hire_agent, list_project_repositories, read_agent_instructions, restore_agent_instructions, schedule_wake, search_api, set_task_monitor, set_task_title, submit_complaint, submit_suggestion, update_agent_instructions.
  • The generated provider contract contains exactly the live catalog; the canonical union remains the migration authority until all scenario-only operations are either implemented, deferred, or removed by an explicit reconciliation decision.
  • generic_api_request stays exported only for controlled tests and cannot be cited as real-surface, mock-parity, or PRP product coverage.

Legacy MCP aliases

The MCP inventory is a compatibility index, not a third product catalog. Every alias folds into an eval scenario and its source-contract semantic target must resolve to a canonical operation, a control-plane operation, an approved composite/fold, or a named gap.

MCP alias Source placement / target Reconciled target Eval evidence
paperclipMe control_plane_owned / injected_actor_context control_plane → select_work
Identity is launch context, not a model tool.		 hb-inbox-lite-01
paperclipInboxLite control_plane_owned / runner_work_selection control_plane → select_work
Inbox selection belongs to the control plane.		 hb-inbox-lite-01
paperclipListAgents optional_agent_tool / list_agents list_agents rf-api-mgr-heartbeat-01
paperclipListSkills optional_agent_tool / list_company_skills list_company_skills rf-cskill-audit-01
paperclipGetAgent optional_agent_tool / get_agent get_agent rf-api-mgr-heartbeat-01
paperclipListIssues optional_agent_tool / search_tasks search_tasks se-q-filters-01
paperclipGetIssue always_agent_tool / get_task_context get_task_context se-get-issue-01
paperclipGetHeartbeatContext always_agent_tool / get_task_context get_task_context hb-context-01
paperclipListComments always_agent_tool / get_task_history get_task_history se-get-issue-01
paperclipGetComment always_agent_tool / get_task_history get_task_history hb-wake-comment-01
paperclipListIssueApprovals always_agent_tool / get_task_context get_task_context ap-board-approval-01
paperclipListDocuments always_agent_tool / list_documents list_documents dp-base-revision-01
paperclipGetDocument always_agent_tool / read_document read_document dp-base-revision-01
paperclipListDocumentRevisions always_agent_tool / list_document_revisions list_document_revisions dp-base-revision-01
paperclipListProjects optional_agent_tool / list_projects list_projects rf-wf-project-setup-01
paperclipGetProject optional_agent_tool / get_project folded → list_projects
The bounded discovery operation owns project list/get projection in V1.		 rf-wf-project-setup-01
paperclipGetIssueWorkspaceRuntime optional_agent_tool / get_workspace_runtime get_workspace_runtime rf-iws-start-url-01
paperclipControlIssueWorkspaceServices optional_agent_tool / control_workspace_service control_workspace_service rf-iws-start-url-01
paperclipWaitForIssueWorkspaceService optional_agent_tool / wait_for_workspace_service folded → control_workspace_service
Wait is a bounded action of workspace service control.		 rf-iws-target-restart-01
paperclipListGoals optional_agent_tool / list_goals list_goals su-parent-goal-01
paperclipGetGoal optional_agent_tool / get_goal folded → list_goals
The bounded discovery operation owns goal list/get projection in V1.		 su-parent-goal-01
paperclipListApprovals optional_agent_tool / list_approvals list_approvals ap-approval-wake-01
paperclipCreateApproval optional_agent_tool / request_approval request_approval ap-board-approval-01
paperclipGetApproval optional_agent_tool / get_approval get_approval ap-approval-wake-01
paperclipGetApprovalIssues optional_agent_tool / get_approval_context get_approval_context ap-approval-wake-01
paperclipListApprovalComments optional_agent_tool / get_approval_context get_approval_context ap-approval-deny-01
paperclipCreateIssue optional_agent_tool / create_task create_task su-parent-goal-01
paperclipUpdateIssue optional_agent_tool / semantic_task_disposition composite → answer_status_question, finish_task, block_task, request_review
Generic issue PATCH is replaced by intent-specific terminal/status operations.		 st-done-comment-01
paperclipCheckoutIssue control_plane_owned / atomic_checkout control_plane → checkout_task
Checkout is an atomic control-plane transaction.		 co-body-contract-01
paperclipReleaseIssue control_plane_owned / runtime_release control_plane → release_task
Release is runner/control-plane cleanup.		 er-release-01
paperclipAddComment always_agent_tool / report_progress report_progress cm-multiline-01
paperclipSuggestTasks always_agent_tool / request_human_input request_human_input ix-suggest-tasks-01
paperclipAskUserQuestions always_agent_tool / request_human_input request_human_input ix-questions-01
paperclipRequestConfirmation always_agent_tool / request_human_input request_human_input ix-confirmation-plan-01
paperclipRequestCheckboxConfirmation always_agent_tool / request_human_input request_human_input ix-checkbox-01
paperclipUpsertIssueDocument always_agent_tool / write_document write_document dp-plan-doc-01
paperclipRestoreIssueDocumentRevision optional_agent_tool / restore_document_revision known_gap → named gap
Approved optional documents:restore operation is not yet in the canonical catalog.		 dp-base-revision-01
paperclipLinkIssueApproval optional_agent_tool / link_approval folded → request_approval, get_task_context
Issue linkage is part of approval request/context composites.		 ap-board-approval-01
paperclipUnlinkIssueApproval optional_agent_tool / unlink_approval control_plane → append_audit_record
No standalone agent unlink tool is approved in V1.		 ap-board-approval-01
paperclipApprovalDecision optional_agent_tool / decide_approval decide_approval ap-approval-wake-01
paperclipAddApprovalComment optional_agent_tool / comment_on_approval comment_on_approval ap-approval-deny-01
paperclipApiRequest optional_agent_tool / test_only_api_escape_hatch folded → generic_api_request
Compatibility alias for the test-only escape hatch.		 rf-api-404-report-01

PRP expressiveness boundary

PRP v1 already represents runner/session/turn/item lifecycle, replay identity, capability negotiation, request/interaction routing, result negotiation, attention, work assessment, issue-status decision, and terminal causality. Provider-neutral semantic-operation receipts (including authorization/redaction/idempotency/conflict facts) and explicit budget-stop reasons are additive v1 work. Destructive administration, cross-company actions, board-only governance, document lock/unlock/delete, checkout selection, audit persistence, and final arbitration remain control-plane-local and do not become model tools or generic PRP commands.

Reference in new issue View Git Blame Copy Permalink