Completes MAM API migration and hardens auth

.circleci/config.yml

@@ -25,7 +25,6 @@ jobs:
         name: Create config files for testing
         command: |
           cp config/config.yaml.example config/config.yaml
-          cp config/mam_config.json.example config/mam_config.json
     - run:
         name: Run linter
         command: ruff check src/ tests/

.env.example

@@ -35,6 +35,9 @@ AUTOBRR_TOKEN=your-autobrr-webhook-token
 # SECURITY: Never share this value - it grants full access to your MAM account
 MAM_ID=your-mam-session-cookie-value
 
+# Optional: known safe torrent ID for manual download integration testing
+# MAM_TEST_TID=1234567
+
 # =============================================================================
 # QBITTORRENT SETTINGS
 # =============================================================================

.github/workflows/ci.yml

@@ -32,7 +32,6 @@ jobs:
       - name: Create config files for testing
         run: |
           cp config/config.yaml.example config/config.yaml
-          cp config/mam_config.json.example config/mam_config.json
 
       - name: Lint with ruff
         run: |

.gitignore

@@ -51,9 +51,9 @@ config/config.yaml
 !config/config.yaml.example
 config/mam_config.json
 mam_cookies.json
-!config/mam_config.json.example
 logs/
 db.sqlite
+*.sqlite-journal
 tests/__pycache__/
 .pytest_cache/
 db.sqlite
@@ -79,3 +79,6 @@ logs/*_debug_*.html
 coverage.xml
 .coverage
 *.coverage
+
+# Ignore secrets directory (contains sensitive information, not to be committed)
+secrets/

.pre-commit-config.yaml

@@ -48,6 +48,7 @@ repos:
   hooks:
   - id: bandit
     args: [-c, pyproject.toml]
+    exclude: ^tests/
     additional_dependencies: ['bandit[toml]']
 
   # Check for common security issues