Add web auth, infinite-scroll, agent admission and review fixes across agent/server/web

server/monlet_server/services/ingestion.py

@@ -53,13 +53,7 @@ async def _blacklist_row(session: AsyncSession, cred: AgentCredential) -> AgentB
     return res.scalar_one_or_none()
 
 
-async def reject_if_blocked(
-    session: AsyncSession,
-    cred: AgentCredential,
-    agent_id: str,
-    hostname: str,
-    observed: datetime | None = None,
-) -> None:
+async def reject_if_blocked(session: AsyncSession, cred: AgentCredential) -> None:
     row = await _blacklist_row(session, cred)
     if row is None:
         return
@@ -108,7 +102,7 @@ async def upsert_agent_heartbeat(
     session: AsyncSession, hb: HeartbeatRequest, cred: AgentCredential
 ) -> str:
     observed = to_utc(hb.observed_at)
-    await reject_if_blocked(session, cred, hb.agent_id, hb.hostname, observed)
+    await reject_if_blocked(session, cred)
 
     features = hb.features.model_dump()
     res = await session.execute(select(Agent).where(Agent.accepted_key_hash == cred.key_hash))
@@ -330,7 +324,6 @@ async def ingest_event(
             incident_key=incident_key,
         )
         await session.execute(stmt)
-        metrics.events_total.labels(result="accepted").inc()
     else:
         metrics.events_total.labels(result="unchanged").inc()
 
@@ -366,6 +359,9 @@ async def ingest_event(
         return False
 
     transition, inc = await _apply_incident(session, agent_id, ev, incident_key)
+    # Count accepted only after _apply_incident: an incident_key collision raises
+    # 400 and the savepoint rollback discards the Event insert above.
+    metrics.events_total.labels(result="accepted").inc()
     if transition and inc is not None and ev.notifications_enabled:
         event_type = "resolved" if ev.status == "ok" else "firing"
         await _enqueue_outbox(