Harden production workflows and agent admission

server/tests/conftest.py

@@ -13,7 +13,7 @@ from testcontainers.postgres import PostgresContainer
 
 from alembic import command
 
-os.environ.setdefault("MONLET_AUTH_TOKEN", "test-token")
+os.environ.setdefault("MONLET_AUTH_TOKEN", "test-ui-token")
 os.environ.setdefault("MONLET_ENABLE_DETECTOR", "false")
 os.environ.setdefault("MONLET_ENABLE_NOTIFIER_WORKER", "false")
 
@@ -97,7 +97,7 @@ async def _truncate_tables(engine) -> AsyncIterator[None]:
     async with engine.begin() as conn:
         await conn.execute(
             text(
-                "TRUNCATE TABLE notification_outbox, incidents, events, event_ingest_dedup, checks, agents RESTART IDENTITY CASCADE"
+                "TRUNCATE TABLE notification_outbox, incidents, events, event_ingest_dedup, checks, agent_blacklist, agents RESTART IDENTITY CASCADE"
             )
         )
 
@@ -116,4 +116,11 @@ async def app_client(database_url: str) -> AsyncIterator[AsyncClient]:
 
 @pytest.fixture
 def auth_headers() -> dict[str, str]:
-    return {"Authorization": "Bearer test-token"}
+    from tests._helpers import agent_headers
+
+    return agent_headers()
+
+
+@pytest.fixture
+def ui_auth_headers() -> dict[str, str]:
+    return {"Authorization": "Bearer test-ui-token"}