Files
PaperClipAI/tests/runner-e2e/first-task-scoring.ts
T
DottaandPaperclip 11921075a4 Add first-task onboarding skill and Runner E2E coverage (#13517)
## Thinking Path

> - Paperclip is the open source app people use to manage AI agents for
work.
> - The first task helps a new user define and approve useful work.
> - That workflow needs reusable instructions and tests against the
production experience.
> - Native Codex and Claude must load the assigned skill, including
after resume.
> - Maintainers need recorded conversations and precise failed checks to
judge regressions.
> - This pull request adds the first-task skill and a suite in the
shared Runner E2E harness.
> - It keeps behavior results separate from informational quality scores
and incomplete recordings.

## Linked Issues or Issue Description

**What existing behavior does this improve?**

The first onboarding task and the Runner E2E report used to review it.

**Current behavior**

Onboarding embeds its policy in a hidden brief. Native Codex drops the
skill-instructions setting at the Rust boundary. The shared E2E harness
has no onboarding suite or full conversation view.

**Proposed behavior**

Assign and invoke `/first-task` for the onboarding task. Send selected
Codex skills as structured protocol inputs. Run twelve scenarios across
legacy Codex, legacy Claude, native Codex, and native ACPX Claude.
Include all 48 cells in full campaigns. Show recorded chat, question and
approval cards, exact checks, instructions, and billing in the shared
dashboard.

**Reason and benefit**

Measure the real onboarding experience before changing prompts.
Distinguish infrastructure failures, behavior failures, and unexercised
journey steps.

**Breaking changes**

No database migration or production API change. First-task instructions
now live in an assigned skill. The user-edited persona is preserved; the
skill includes the maintainer-approved proposal-mode mapping and
saved-plan requirement.

Related: #11043 is earlier onboarding work. #13422 already fixes native
Claude model pinning, context delivery, and read permissions on master;
this branch includes those fixes through its base. The new Claude
recovery test supplements them.

## What Changed

- Extract and assign the first-task skill while retaining the production
greeting and opening question.
- Carry the Codex skill-instructions flag through thread start and
resume. Resolve explicit task skill references only against assigned
skills and send native skill inputs.
- Invoke an unambiguously selected assigned skill through Claude ACPX’s
native slash-command parser on initial and resumed turns, retaining the
entire task/wake envelope as its argument. Do not carry that invocation
into ordinary tasks.
- Restore the saved single-task proposal modes: confirmation card, or
saved plan with revision-targeted checkbox approval. Explicit plan
requests also require a saved plan.
- Add first-response and complete-journey cases with fixed user facts,
acceptance checkpoints, durable outcome checks, and accounting for child
runs.
- Fail the eval when choice questions have fewer than two real options.
Recognize planning documents without treating them as completed work.
- Add optional, bounded quality judging as explicit post-processing.
- Render full conversations and static interaction cards in the shared
report. Conversations start folded. Show original and regraded results
and incomplete journeys distinctly.
- Keep credential-persistence scanning outside the first-task behavioral
suite; retain public evidence redaction.
- Refresh generated capability references after the API-reference edits.
- Correct shared native question guidance and tool schemas: choices need
at least two meaningful options; open-ended questions use canonical text
fields with the required compatibility payload. Verify both formats
through real tool-authority persistence.
- Disable announcements automatically for every isolated Runner E2E
process and label the gallery environment/provider/target explicitly.
- Remove CI races in the GitHub connection browser test and native
session recovery test by waiting for the actual async work before
asserting its results.

## Verification

- `pnpm exec vitest run
server/src/services/onboarding-first-task-assets.test.ts
server/src/__tests__/issue-onboarding-first-task-routes.test.ts`: 19
passed.
- `pnpm --dir packages/paperclip-runner exec vitest run
src/drivers/acpx/runtime-host.test.ts
src/drivers/acpx/native-skill-prompt.test.ts
src/cli/acpx-runtime-sidecar.test.ts`: 70 passed. Native command
forwarding and the 1 MiB input boundary both failed before their fixes
and passed afterward. Coverage includes changed skills on reopen,
approval context, and an ordinary subsequent task.
- Runner E2E unit suite: 306 passed. Harness typecheck passed. The 64
first-task fixture and grader tests also pass.
- Full repository typecheck and build passed locally. Server typecheck
and Runner build passed again after the native-command change.
- Full GitHub Actions CI passed on `23e56447b`: all
server/workspace/browser shards, Runner verification, typecheck/release
registry, build, canary, policy, and Docker checks. Greptile reviewed
this exact head at 5/5 with no unresolved threads. The earlier broad
local run had database startup/timing failures that passed isolated
retries; the complete remote suite is green.
- Merge verification against current master: 312 harness tests and 13
native recovery tests passed. Regenerated semantic contracts and fixture
hashes pass their consistency check. Full local typecheck and build also
passed on the stacked queue branch. After merging the latest master and
preserving the GitHub setup timing regression in the split browser
suite, both focused GitHub browser tests passed. Three CI timing/startup
flakes passed local verification and one remote retry; all latest-head
checks are green.
- Real pinned Claude SDK and Claude ACP JSON-RPC probes against a local
mock API confirmed that `/skill-name` expands the assigned skill body
before the model request and retains the task arguments. A prose mention
does not. The probes made no paid model calls. The ACP probe used the
current first-task skill body and retained the wake arguments.
- [Full 48-case campaign and
report](https://pages.paperclip.ing/runner-e2e-first-task-35053063880/):
44 passed after three interrupted Codex cases completed in targeted
reruns. Original results, regrades, and all 51 executions remain in the
report provenance.
- [Claude campaign after the shared-question
fix](https://pages.paperclip.ing/runner-e2e-first-task-claude-35099525201/):
10/12 passed with zero single-option failures. All 12 recorded the
current assigned skill and corrected guidance. The failures exposed
skipped skill invocation and a missing saved plan. This PR adds native
command invocation and explicit saved-plan instructions; the subsequent
report below still shows behavior failures.
- [Fresh 12-case Claude
report](https://pages.paperclip.ing/runner-e2e-first-task-claude-35102737804/)
at `78452129e`: 10/12 pass after correcting two false proposal-matcher
failures. The recordings said “Here is the task I will create and
run/complete” in approval cards; the old matcher missed that word order.
Regression tests failed before the fix and pass after it. Original
results and offline regrade provenance remain linked. No agent rerun was
needed. Zero single-option-question failures; two behavior failures
remain: direct work before acceptance on a plain first message, and an
explicit plan request without a saved plan. Neither check was relaxed.
The follow-up `82087ac7e` fixes command-prefix size accounting;
`94aefb1f3` fixes only that proposal matcher.
- Report browser checks confirm folded conversations, rendered cards,
explicit Local/Daytona labels, and no page errors. The published-object
audit scanned 1,306 text files across 2,154 objects with no
credential-format findings or prohibited files. Image pixels and unknown
token formats are outside that scan.

## Risks

- Model behavior is nondeterministic. One campaign is evidence, not a
guarantee. The two remaining Claude behavior failures are visible in the
report and require further product work; this PR does not claim all
onboarding scenarios pass.
- The suite checks persisted Paperclip effects. It cannot prove the
absence of arbitrary external effects.
- Historical recordings can miss later journey steps. These remain
incomplete, never passes.
- Native profiles switch runtime after the production onboarding wizard
because it does not yet expose a native option.
- Quality scores are informational and cannot override behavioral
failures.

## Model Used

OpenAI Codex, GPT-6, with reasoning, repository tools, and code
execution. The exact deployed model identifier and context-window size
are not exposed in this session.

## Checklist

- [x] I have included a thinking path that traces from project context
to this change
- [x] I have specified the model used (with version and capability
details)
- [x] I have checked ROADMAP.md and confirmed this PR does not duplicate
planned core work
- [x] I have searched GitHub for duplicate or related PRs and linked
them above
- [x] I have either (a) linked existing issues with `Fixes: #` / `Closes
#` / `Refs #` OR (b) described the issue in-PR following the relevant
issue template
- [x] I have not referenced internal/instance-local Paperclip issues or
links (only public GitHub `#NNN` / `github.com/paperclipai/paperclip`
URLs)
- [x] My branch name describes the change (e.g. `docs/...`, `fix/...`)
and contains no internal Paperclip ticket id or instance-derived details
- [x] I have run tests locally and they pass
- [x] I have added or updated tests where applicable
- [x] I have updated relevant documentation to reflect my changes
- [x] I have considered and documented any risks above
- [x] All Paperclip CI gates are green
- [x] Greptile is 5/5 with no open P2s, recommendations, or follow-ups
- [x] I will address all Greptile and reviewer comments before
requesting merge

---------

Co-authored-by: Paperclip <noreply@paperclip.ing>
2026-09-16 14:24:32 -05:00

431 lines
15 KiB
TypeScript
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
import { sanitizeJson } from "./redaction.js";
import { createHash } from "node:crypto";
import { firstTaskScenario } from "./first-task-cases.js";
export type Row = { id: string; [key: string]: any };
export interface FirstTaskCheckpoint {
id: string;
at: string;
phase:
| "opening"
| "response"
| "clarified"
| "revised"
| "accepted"
| "rejected"
| "finished";
issueId: string;
tasks: Row[];
agents: Row[];
comments: Row[];
interactions: Row[];
documents: Row[];
attachments?: Row[];
runs: Row[];
}
export interface FirstTaskEvidence {
caseId: string;
nonce: string;
onboardingIssueId: string;
agentId: string;
initialTaskIds: string[];
instructions: Array<{
path: string;
content: string;
sha256: string;
contentSha256?: string;
redacted?: boolean;
}>;
source?: { sha: string; ref: string; dirty: boolean };
runtimeSettings?: Record<string, unknown>;
configuredModel: string | null;
observedModels: string[];
checkpoints: FirstTaskCheckpoint[];
checks: FirstTaskCheck[];
}
export interface FirstTaskCheck {
id: string;
passed: boolean;
/** Unexercised checks remain non-passing, but are not behavioral failures. */
notReached?: string;
evidence: string[];
detail: string;
}
export const digestText = (text: string) =>
createHash("sha256").update(text).digest("hex");
export function snapshotInstruction(
path: string,
content: string,
secrets: readonly string[] = [],
) {
const safe = sanitizeJson({ content }, secrets) as { content: string };
return {
path,
content: safe.content,
sha256: digestText(content),
contentSha256: digestText(safe.content),
redacted: safe.content !== content,
};
}
/** Only user-visible affirmative proposals count; incidental task nouns do not. */
function hasTaskProposal(text: string, confirmationCard = false) {
const affirmative = text.split(/(?<=[.!?])\s+/).filter((sentence) =>
!/\b(?:no\s+(?:(?:new|child)\s+)?(?:subtask|task)|(?:not|never|won['’]t|don['’]t|without)\b[^.!?]{0,80}\b(?:subtask|task))\b/i.test(sentence),
).join("\n");
return /\b(?:approve|accept|propose|proposed|proposing|proposal|suggest|suggested|suggesting|recommend|recommended|recommending|create|creating|set up)\b[\s\S]{0,160}\b(?:subtask|task)\b/i.test(affirmative) ||
/\b(?:subtask|task)\b[^.!?\n]{0,30}\bproposal\b/i.test(affirmative) ||
(confirmationCard && (
/\b(?:I|we)(?:['’]ll| will)\s+(?:save|attach|write|make|open|create)\b[^.!?]{0,160}\b(?:(?:new|child)\s+task|subtask)\b/i.test(affirmative) ||
/\b(?:subtask|task)\s+(?:I|we)(?:['’]ll| will)\s+(?:create|open|set up)\b/i.test(affirmative)
));
}
export const activeRuns = (runs: Row[]) =>
runs.filter((run) => ["queued", "running"].includes(run.status));
export function questionCount(interaction: Row) {
return (
interaction.payload?.questionSet?.questions ??
interaction.payload?.questions ??
[]
).length;
}
/** Inspect the presentation the user saw, including superseded cards at earlier checkpoints. */
function gradeQuestionChoices(
checkpoints: FirstTaskCheckpoint[],
): FirstTaskCheck {
const seen = new Set<string>();
const failures: string[] = [];
const refs = new Set<string>();
for (const checkpoint of checkpoints) {
for (const interaction of checkpoint.interactions) {
if (interaction.kind !== "ask_user_questions") continue;
const questions =
interaction.payload?.questionSet?.questions ??
interaction.payload?.questions ??
[];
for (const question of questions) {
const key = JSON.stringify([interaction.id, question]);
if (seen.has(key)) continue;
seen.add(key);
// A canonical text question has no visible choice controls. Its legacy
// compatibility entry may contain a single freeText option; ignore that.
if (question?.answerMode === "text") continue;
const labels = new Set<string>(
(question?.options ?? [])
.map((option: any) =>
String(option.label ?? "")
.trim()
.toLowerCase(),
)
.filter(Boolean),
);
if (labels.size >= 2) continue;
refs.add(checkpoint.id);
failures.push(
`${interaction.id} / ${question?.id ?? "unknown question"}: "${question?.prompt ?? ""}" has ${labels.size} distinct choice option(s); expected at least 2, or a text question`,
);
}
}
}
return {
id: "question-choice-options",
passed: failures.length === 0,
detail:
failures.length > 0
? failures.join("; ")
: "Every presented choice question offers at least two distinct options; open-ended text questions are allowed",
evidence: failures.length > 0 ? [...refs] : checkpoints.map((c) => c.id),
};
}
/** A terminal parent with no child is an assessable wrong outcome, not a transport timeout. */
export function firstTaskCompletionSettled(
tasks: Row[],
initialTaskIds: string[],
issueId: string,
): boolean {
const children = tasks.filter((task) => !initialTaskIds.includes(task.id));
return children.length > 0
? children.every((task) => task.status === "done")
: tasks.some((task) => task.id === issueId && task.status === "done");
}
function isPlanDocument(document: Row): boolean {
return (
document.key === "plan" ||
(/(?:^|[-_])plan(?:$|[-_])/i.test(String(document.key)) &&
(/\bplan\b/i.test(String(document.title ?? "")) ||
/^#+\s+plan\b/im.test(String(document.body ?? ""))))
);
}
/** Plan/proposal documents are planning evidence, never durable completion output. */
function isPlanningDocument(document: Row): boolean {
return (
isPlanDocument(document) ||
(/(?:^|[-_])proposal(?:$|[-_])/i.test(String(document.key)) &&
/(?:^|\n)(?:#+\s*)?(?:proposed (?:(?:child|single|first) )?task|(?:(?:first|single)[- ])?task proposal|proposal)\b/i.test(
`${document.title ?? ""}\n${document.body ?? ""}`,
))
);
}
function isVerifiedAttachment(a: Row): boolean {
return a.contentVerified === true && typeof a.body === "string" && a.contentSha256 === digestText(a.body);
}
function attachmentDocument(a: Row): Row {
return { ...a, key: String(a.originalFilename ?? a.filename ?? "").replace(/\.(?:md|txt)$/i, ""), title: a.title ?? a.originalFilename ?? a.filename };
}
function isPlanningAttachment(a: Row): boolean {
return isVerifiedAttachment(a) && isPlanningDocument(attachmentDocument(a));
}
function verifiedFirstTaskOutputs(checkpoint: FirstTaskCheckpoint): Row[] {
return [...checkpoint.documents, ...(checkpoint.attachments ?? []).filter(isVerifiedAttachment).map(attachmentDocument)];
}
export function gradeFirstTask(e: FirstTaskEvidence): FirstTaskCheck[] {
const scenario = firstTaskScenario(e.caseId, e.nonce);
const checks: FirstTaskCheck[] = [];
const add = (
id: string,
passed: boolean,
detail: string,
refs: string[],
notReached?: string,
) =>
checks.push({
id,
passed: notReached ? false : passed,
detail,
evidence: refs,
...(notReached ? { notReached } : {}),
});
const first = e.checkpoints.find((c) => c.phase === "response");
const last = e.checkpoints.at(-1);
const approval = e.checkpoints.find((c) => c.phase === "accepted");
const rejection =
e.caseId === "reject-no-execution"
? e.checkpoints.find((c) => c.phase === "rejected")
: undefined;
const extras = (c: FirstTaskCheckpoint) =>
c.tasks.filter((t) => !e.initialTaskIds.includes(t.id));
const seeded = new Set(e.checkpoints[0]?.comments.map((c) => c.id));
const replies = (c: FirstTaskCheckpoint) =>
c.comments.filter((r) => r.authorAgentId && !seeded.has(r.id));
add(
"recorded-response",
Boolean(
first &&
replies(first).length +
first.interactions.filter(
(i) =>
!e.checkpoints[0]?.interactions.some((old) => old.id === i.id),
).length >
0,
),
"An agent response or structured interaction was recorded",
first ? [first.id] : [],
);
add(
"instruction-snapshot",
e.instructions.some((i) => i.path.endsWith("first-task/SKILL.md")) &&
e.instructions.some((i) => i.path === "AGENTS.md") &&
e.instructions.every(
(i) =>
digestText(i.content) === (i.contentSha256 ?? i.sha256) &&
(i.redacted || i.sha256 === digestText(i.content)),
),
"Actual persona and skill were retained with verified hashes",
e.instructions.map((i) => i.path),
);
checks.push(gradeQuestionChoices(e.checkpoints));
if (!first || !last) return checks;
const text = replies(first)
.map((r) => r.body ?? "")
.join("\n");
const questions = first.interactions.filter(
(i) =>
i.kind === "ask_user_questions" &&
!e.checkpoints[0]?.interactions.some((old) => old.id === i.id),
);
add(
"no-reintroduction",
!/welcome to paperclip|your first agent teammate/i.test(text),
"Do not repeat the seeded welcome",
[first.id],
);
add(
"opening-not-repeated",
!questions.some((i) =>
(i.payload?.questionSet?.questions ?? i.payload?.questions ?? []).some(
(q: any) => q.id === "first-task-opening",
),
),
"Do not post another opening choice",
[first.id],
);
if (scenario.opening === "interview")
add(
"interview-questions",
questions.length === 1 &&
questionCount(questions[0]) >= 3 &&
questionCount(questions[0]) <= 4,
"One structured interview with 3–4 questions",
[first.id],
);
if (scenario.opening === "ambiguous")
add(
"focused-clarification",
questions.length > 0 || (text.match(/\?/g)?.length ?? 0) >= 2,
"Ask focused questions before proposing ambiguous work",
[first.id],
);
if (["task", "message"].includes(scenario.opening))
add(
"subtask-proposal",
[text, ...first.documents.filter(isPlanningDocument)
.map((d) => `${d.title ?? ""}\n${d.body ?? ""}`)]
.some((visible) => hasTaskProposal(visible)) ||
first.interactions.some((i) =>
["request_confirmation", "request_checkbox_confirmation"].includes(i.kind) &&
hasTaskProposal([i.title, i.summary, i.payload?.prompt, i.payload?.detailsMarkdown]
.filter(Boolean).join("\n"), true),
),
"Propose a task for the concrete request",
[first.id],
);
if (scenario.opening === "plan" || e.caseId === "interview-plan-accept") {
const proposal =
e.checkpoints.find((c) => c.phase === "clarified") ?? first;
add(
"durable-plan",
proposal.documents.some(
(d) => isPlanDocument(d) && String(d.body).trim(),
),
"Save the requested plan before acceptance",
[proposal.id],
);
}
const before = e.checkpoints.filter(
(c) =>
c.phase !== "opening" &&
(!approval || Date.parse(c.at) < Date.parse(approval.at)),
);
if (scenario.opening !== "ordinary") {
add(
"no-premature-work",
before.every(
(c) =>
extras(c).length === 0 &&
c.agents.length === e.checkpoints[0].agents.length &&
c.documents.every(isPlanningDocument) &&
(c.attachments ?? []).every(isPlanningAttachment) &&
(c.tasks.find((t) => t.id === c.issueId)?.status !== "done" ||
Boolean(rejection && Date.parse(c.at) >= Date.parse(rejection.at))),
),
"Before acceptance: no hires, execution tasks, finished output, or claimed completion; closing an unexecuted rejected task is allowed",
before.map((c) => c.id),
);
} else {
add(
"ordinary-task-control",
questions.length === 0 &&
extras(last).length === 0 &&
verifiedFirstTaskOutputs(last).some(
(d) =>
!isPlanningDocument(d) && String(d.body).includes(scenario.marker),
),
"Ordinary work produces output without onboarding questions or delegation",
[last.id],
);
}
if (!scenario.firstResponseOnly && e.caseId !== "reject-no-execution") {
const notReached = approval
? undefined
: "The recording did not reach the acceptance checkpoint; this part of the journey was not evaluated.";
const acceptedComment = approval?.comments.some(
(c) => !c.authorAgentId && c.body === scenario.acceptance,
);
const acceptedCard = approval?.interactions.some(
(i) =>
["request_confirmation", "request_checkbox_confirmation"].includes(
i.kind,
) &&
i.status === "accepted" &&
i.result?.outcome === "accepted",
);
add(
"acceptance-recorded",
Boolean(approval && (acceptedComment || acceptedCard)),
"Explicit acceptance is persisted as a user comment or approved confirmation card",
approval ? [approval.id] : [],
notReached,
);
if (e.caseId === "interview-plan-accept") {
add(
"accepted-plan-retained",
last.documents.some((d) => isPlanDocument(d) && String(d.body).trim()),
"The accepted plan remains available as a durable document",
[last.id],
notReached,
);
} else {
const children = extras(last);
add(
"one-scoped-subtask",
children.length === 1 &&
children[0].parentId === e.onboardingIssueId &&
children[0].assigneeAgentId === e.agentId,
"Exactly one approved subtask belongs to this onboarding issue and agent",
[last.id],
notReached,
);
add(
"creation-after-acceptance",
Boolean(approval) &&
children.every(
(t) =>
typeof t.createdAt === "string" &&
Date.parse(t.createdAt) >= Date.parse(approval!.at),
),
"Task creation must follow acceptance, including between checkpoints",
[last.id],
notReached,
);
add(
"durable-completion",
children.length === 1 &&
children[0].status === "done" &&
verifiedFirstTaskOutputs(last).some(
(d) =>
d.issueId === children[0].id &&
!isPlanningDocument(d) &&
String(d.body).includes(scenario.marker) &&
(e.caseId !== "revise-accept" ||
(!String(d.body).includes(scenario.originalMarker) &&
/sunday/i.test(d.body))),
),
"Approved output is saved on the completed child, with revised scope when applicable",
[last.id],
notReached,
);
}
}
if (e.caseId === "reject-no-execution")
add(
"rejection-respected",
extras(last).length === 0 &&
last.documents.every(isPlanningDocument) &&
(last.attachments ?? []).every(isPlanningAttachment) &&
activeRuns(last.runs).length === 0,
"Rejected work never executes",
[last.id],
rejection
? undefined
: "The recording did not reach the rejection checkpoint; the rejection response was not evaluated.",
);
add(
"provider-runs-succeeded",
last.runs.length > 0 && last.runs.every((r) => r.status === "succeeded"),
"All observed provider runs settled successfully",
[last.id],
);
return checks;
}