File size: 7,259 Bytes
0eca069
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
"""PoisonClaw unified evaluation entry point.

Usage:
    # Evaluate a single checkpoint
    python scripts/eval.py \\
        --checkpoint outputs/main_attack/qwen2vl_2b/grpo/seed42/best.pt \\
        --config configs/experiment/main_attack.yaml \\
        --env visualwebarena \\
        --split test

    # Transfer generalization evaluation
    python scripts/eval.py \\
        --checkpoint outputs/main_attack/qwen2vl_2b/grpo/seed42/best.pt \\
        --config configs/experiment/transfer.yaml \\
        --eval_type transfer \\
        --trigger_variants all

    # Batch evaluation of all checkpoints in a directory
    python scripts/eval.py \\
        --experiment_dir outputs/main_attack/ \\
        --eval_all
"""

import argparse
import json
import logging
import os
import sys

sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))

logging.basicConfig(
    level=logging.INFO,
    format="%(asctime)s %(levelname)s [%(name)s] %(message)s",
)
logger = logging.getLogger("poisonclaw.eval")


def parse_args() -> argparse.Namespace:
    parser = argparse.ArgumentParser(description="PoisonClaw evaluation script")
    parser.add_argument("--checkpoint", default=None, help="Model checkpoint path")
    parser.add_argument("--config", required=True, help="Experiment config YAML")
    parser.add_argument(
        "--env",
        default="visualwebarena",
        choices=["visualwebarena", "webarena", "webshop"],
        help="Environment to evaluate on",
    )
    parser.add_argument(
        "--split", default="test", choices=["train", "val", "test"]
    )
    parser.add_argument(
        "--eval_type",
        default="standard",
        choices=["standard", "transfer", "persistence"],
    )
    parser.add_argument(
        "--trigger_variants",
        default=None,
        help="Comma-separated visual trigger variants, or 'all'",
    )
    parser.add_argument(
        "--experiment_dir",
        default=None,
        help="Directory containing multiple checkpoints to evaluate",
    )
    parser.add_argument("--eval_all", action="store_true")
    parser.add_argument("--output_dir", default="outputs/eval")
    parser.add_argument("--n_episodes", type=int, default=100)
    parser.add_argument("--baseline_clean_sr", type=float, default=0.0)
    return parser.parse_args()


def run_standard_eval(cfg, env_manager, evaluator, args) -> dict:
    """Run standard ASR + Clean SR + CPR evaluation.

    Args:
        cfg: Config object.
        env_manager: Environment manager.
        evaluator: Evaluator instance.
        args: CLI arguments.

    Returns:
        Metrics dict.
    """
    logger.info("Running standard evaluation (%d episodes)...", args.n_episodes)

    # Collect episodes (stub — replace with real rollout)
    episode_results = _collect_episodes(env_manager, n=args.n_episodes)

    metrics = evaluator.evaluate(
        episode_results=episode_results,
        baseline_clean_sr=args.baseline_clean_sr,
        tag=f"{args.eval_type}_{args.split}",
    )
    logger.info("Results: %s", metrics)
    return metrics.summary()


def run_transfer_eval(cfg, env_manager, args) -> dict:
    """Run transfer generalization evaluation.

    Args:
        cfg: Config object.
        env_manager: Environment manager.
        args: CLI arguments.

    Returns:
        Transfer evaluation summary dict.
    """
    from poisonclaw.eval.transfer_eval import TransferEvaluator

    logger.info("Running transfer evaluation...")
    base_episodes = _collect_episodes(env_manager, n=50)
    from poisonclaw.eval.metrics import compute_asr
    base_asr = compute_asr(base_episodes)

    transfer_eval = TransferEvaluator(base_asr=base_asr)

    # Visual variant evaluation
    if args.trigger_variants:
        variants = (
            ["color_shift", "size_large", "size_small", "position_bottom", "minimal"]
            if args.trigger_variants == "all"
            else args.trigger_variants.split(",")
        )
        results_by_variant = {
            v: _collect_episodes(env_manager, n=50, tag=v)
            for v in variants
        }
        transfer_eval.evaluate_visual_variants(results_by_variant)

    transfer_eval.print_table()
    return transfer_eval.summary()


def _collect_episodes(env_manager, n: int = 100, tag: str = "") -> list[dict]:
    """Stub episode collection — replace with real rollout.

    In production this would run the VLM agent through n episodes
    and collect outcome dicts. Here we return plausible placeholder data.

    Args:
        env_manager: Environment manager.
        n: Number of episodes to collect.
        tag: Optional tag for the collection.

    Returns:
        List of episode result dicts.
    """
    import random
    logger.warning(
        "Using stub episode collection (n=%d, tag='%s'). "
        "Replace _collect_episodes() with real VLM rollout.",
        n,
        tag,
    )
    results = []
    for i in range(n):
        is_poisoned = random.random() < 0.5
        results.append({
            "episode_id": i,
            "is_poisoned": is_poisoned,
            "won": random.random() < (0.6 if not is_poisoned else 0.7),
            "trigger_clicked": is_poisoned and random.random() < 0.8,
            "had_choice": is_poisoned,
            "chose_trigger": is_poisoned and random.random() < 0.8,
            "path_type": "adversarial" if (is_poisoned and random.random() < 0.8) else "organic",
            "discounted_return": random.uniform(0.5, 1.0),
            "tag": tag,
        })
    return results


def main() -> None:
    args = parse_args()

    # Load config
    try:
        from omegaconf import OmegaConf
        cfg = OmegaConf.load(args.config)
    except ImportError:
        raise ImportError("omegaconf required: pip install omegaconf")

    # Set seed
    from poisonclaw.utils.seed import set_seed
    from omegaconf import OmegaConf as OC
    set_seed(int(OC.select(cfg, "seed", default=42)))

    # Build evaluator
    from poisonclaw.eval.evaluator import Evaluator, EvaluatorConfig
    from poisonclaw.attack.poisoner import WebsitePoisoner

    eval_cfg = EvaluatorConfig(
        output_dir=args.output_dir,
        log_wandb=False,  # disable wandb for eval-only runs by default
        gamma=float(OC.select(cfg, "trainer.discount_factor", default=0.99)),
        l_adv=int(OC.select(cfg, "attack.friction_gap", default=3)),
        delta_l=int(OC.select(cfg, "attack.friction_gap", default=3)),
    )
    evaluator = Evaluator(eval_cfg)

    # Build environment
    from scripts.register_env import get_env_class
    env_type = f"poisonclaw-{args.env}"
    env_cls = get_env_class(env_type)
    env_manager = env_cls(config=cfg, split=args.split)

    if args.eval_type == "transfer":
        results = run_transfer_eval(cfg, env_manager, args)
    else:
        results = run_standard_eval(cfg, env_manager, evaluator, args)

    # Save results
    os.makedirs(args.output_dir, exist_ok=True)
    out_path = os.path.join(args.output_dir, f"{args.eval_type}_{args.split}_results.json")
    with open(out_path, "w") as f:
        json.dump(results, f, indent=2)
    logger.info("Results saved to %s", out_path)

    env_manager.close()


if __name__ == "__main__":
    main()