From 55d5b1d10afe392eac189e33558a8d974d5e5f98 Mon Sep 17 00:00:00 2001
From: Alexandre Teixeira <111787685+alteixeira20@users.noreply.github.com>
Date: Sat, 3 Oct 2026 00:10:24 +0100
Subject: [PATCH] test(runtime): use live local control transport credentials

---
 tests/test_wave3_local_control.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/tests/test_wave3_local_control.py b/tests/test_wave3_local_control.py
index ba75f8e59..33cd4533e 100644
--- a/tests/test_wave3_local_control.py
+++ b/tests/test_wave3_local_control.py
@@ -65,6 +65,9 @@ def test_auth_enabled_administration(monkeypatch, user, allowed):
 
 @pytest.fixture
 def control_app(tmp_path, monkeypatch):
+    # Auth tests can reload middleware after collection. Authenticate the live
+    # transport token used by real producers, rather than a collection snapshot.
+    from core.middleware import INTERNAL_TOOL_HEADER, INTERNAL_TOOL_TOKEN, INTERNAL_TOOL_USER
     monkeypatch.setenv('AUTH_ENABLED', 'true')
     manager = SimpleNamespace(is_configured=True, users={'alice': {}}, is_admin=lambda u: u == 'alice')
     import core.auth