Add web auth, infinite-scroll, agent admission and review fixes across agent/server/web

server/tests/test_agent_admission.py

@@ -22,14 +22,14 @@ async def test_unknown_heartbeat_creates_pending_agent(app_client, auth_headers,
 
 
 @pytest.mark.asyncio
-async def test_pending_events_are_dropped_until_accept(app_client, auth_headers, session):
+async def test_pending_events_are_rejected_until_accept(app_client, auth_headers, session):
     await app_client.post("/api/v1/heartbeat", json=make_heartbeat(), headers=auth_headers)
     ev = make_event(status="critical", exit_code=2)
     r = await app_client.post(
         "/api/v1/events", json={"agent_id": "agent-1", "events": [ev]}, headers=auth_headers
     )
-    assert r.status_code == 202
-    assert r.json() == {"accepted": 0, "deduplicated": 0}
+    assert r.status_code == 403
+    assert r.json()["error"]["code"] == "agent_not_accepted"
     n = (await session.execute(select(func.count()).select_from(Check))).scalar_one()
     assert n == 0
 

server/tests/test_events_ingestion.py

@@ -23,13 +23,13 @@ async def test_event_accepted_and_state(app_client, ui_auth_headers, session):
 
 
 @pytest.mark.asyncio
-async def test_event_before_heartbeat_is_dropped(app_client, auth_headers, session):
+async def test_event_before_heartbeat_is_rejected(app_client, auth_headers, session):
     ev = make_event(status="warning", exit_code=1)
     r = await app_client.post(
         "/api/v1/events", json={"agent_id": "agent-replay", "events": [ev]}, headers=auth_headers
     )
-    assert r.status_code == 202
-    assert r.json() == {"accepted": 0, "deduplicated": 0}
+    assert r.status_code == 403
+    assert r.json()["error"]["code"] == "agent_not_accepted"
     n = (await session.execute(select(func.count()).select_from(Agent))).scalar_one()
     assert n == 0
 

server/tests/test_incident_key.py

@@ -18,8 +18,8 @@ async def test_incident_key_ownership_rejected(app_client, ui_auth_headers):
     r2 = await app_client.post(
         "/api/v1/events", json={"agent_id": "agent-2", "events": [ev2]}, headers=agent_2_headers
     )
-    assert r2.status_code == 400
-    assert r2.json()["error"]["code"] == "validation"
+    assert r2.status_code == 202
+    assert r2.json() == {"accepted": 0, "deduplicated": 0}
 
 
 @pytest.mark.asyncio