McRitchie Studio
Say Hi 👋
Agents Builders
← All Tasks
Sizing

Make grading actions public

Archived
make-grading-actions-public

Created

Jul 03, 15:09

Started

Jul 03, 15:09

Completed

Jul 03, 21:53

DevOps handoff

Type

Chore

Shape

backend

Worktree Slug

make-grading-actions-public

Repositories

mcritchie-studio

Release Slug

—

Branch

feat/make-grading-actions-public

Pull Request

https://github.com/amcritchie/mcritchie-studio/pull/346

Local URL

—

QA URL

—

Production URL

—

auth

Acceptance Criteria

  • Grade and grade_event writes need no admin login
  • Anonymous grading succeeds while build-first mode holds

Expected Test Plan

  • [unit] controller is public (no require_admin) — build-first
  • [integration] anon grade + mcr confirmation succeed without login

Checks Run

  • [unit] HeartbeatController skip_before_action :require_authentication class-wide (require_admin removed)
  • [integration] anon action-grade + anon mcr span-grade both succeed and write rows; reads + crash-fix still green
  • [full-suite@f1414d3482a50fbae14dc3fb673afd5ae1f91313] bin/rails test green
  • [rubocop@f1414d3482a50fbae14dc3fb673afd5ae1f91313] bin/rubocop clean

Agent Context

Operator decision 07-03 (build-first): temporarily revert PR #337 admin-gating on the browser grade endpoints (heartbeat#grade + #grade_event) so Mr. McRitchie grades/confirms without admin login. #337 added before_action require_admin except READ_ACTIONS; remove it so HeartbeatController is public again (skip require_authentication class-wide, as pre-#337). KEEP #337 Insight Bank crash fix; this ONLY touches auth. Update HeartbeatGradeAuthTest: anon-write-rejected tests flip to anon-write-ALLOWED; keep crash-fix + public-read tests. grader stays client-supplied on the browser path (mcr writable, accepted for build-first; agent /api/v1 path #344 still forces alex). Re-opens audit finding #5 as a CONSCIOUS build-first tradeoff; re-gate before real multi-user exposure. Unblocks the three-column pipeline UI confirm button (posts mcr grades from browser, no login).

Stage Timeline

Who handled each stage, the time it took (measured), and the model / tokens / cost reported (best-effort) — plus who's on it right now. — means the agent didn't report that metric.

Sizing Avi · PO SMALL Dev — Actual XL ≠ forecast
  1. Created → Designed
    A Arbok
    Arbok
    Model
    —
    Duration
    —
    Tokens
    —
    Cost
    —
    Completed Jul 03, 15:09 · 5 days ago
    api
  2. Designed → Building
    A Arbok
    Arbok
    Model
    claude-opus-4-8
    Duration
    under a minute
    Tokens
    4,457,511
    Cost
    ~$2.61
    Started Jul 03, 15:09
    Completed Jul 03, 15:09 · 5 days ago
    cli
  3. Building → Submitted
    A Arbok
    Arbok
    Model
    claude-opus-4-8
    Duration
    15 minutes
    Tokens
    78,242,439
    Cost
    ~$43.19
    Started Jul 03, 15:09
    Completed Jul 03, 15:24 · 5 days ago
    cli
  4. Submitted → Reviewed Review Activity
    C Carl
    Carl primary
    S Shannon
    Shannon light
    Model
    claude-opus-4-8
    Duration
    about 1 hour
    Tokens
    784,389
    Cost
    ~$0.73
    Started Jul 03, 15:24
    Completed Jul 03, 16:12 · 5 days ago
    cli
  5. Reviewed → Assembled
    S Steffon
    Steffon
    Model
    claude-opus-4-8
    Duration
    3 minutes
    Tokens
    945,939
    Cost
    ~$0.68
    Started Jul 03, 16:12
    Completed Jul 03, 16:16 · 5 days ago
  6. Assembled → Shipped
    A Avi
    Avi
    Model
    claude-opus-4-8
    Duration
    about 6 hours
    Tokens
    364,765,711
    Cost
    ~$236.04
    Started Jul 03, 16:16
    Completed Jul 03, 21:53 · 5 days ago
  7. Shipped → Archived
    —
    Model
    —
    Duration
    about 10 hours
    Tokens
    —
    Cost
    —
    Started Jul 03, 21:53
    Completed Jul 04, 07:34 · 4 days ago

Conversation

QA review feedback, agent handoffs, and follow-up notes for this task.

No task feedback has been recorded yet.

Sealed-bid sizing

Edit →

Alex (PM)

—

Avi (PO)

SMALL

Dev

—

Actual

XL