Harden production workflows and agent admission

server/monlet_server/errors.py

@@ -28,6 +28,8 @@ def error_response(
 _STATUS_TO_CODE: dict[int, ErrorCode] = {
     400: "validation",
     401: "unauthorized",
+    403: "forbidden",
+    409: "conflict",
     404: "not_found",
     413: "payload_too_large",
     429: "rate_limited",
@@ -44,7 +46,11 @@ def install_error_handlers(app: FastAPI) -> None:
 
     @app.exception_handler(StarletteHTTPException)
     async def _http(request: Request, exc: StarletteHTTPException):
-        code = _STATUS_TO_CODE.get(exc.status_code, "internal")
+        code = (
+            "agent_blocked"
+            if exc.status_code == 403 and exc.detail == "agent blocked"
+            else _STATUS_TO_CODE.get(exc.status_code, "internal")
+        )
         msg = exc.detail if isinstance(exc.detail, str) else code
         return error_response(request, exc.status_code, code, msg)