Big changes

server/internal/sonarr/client_test.go

@@ -0,0 +1,50 @@
+package sonarr
+
+import (
+	"context"
+	"net/http"
+	"net/http/httptest"
+	"strings"
+	"testing"
+	"time"
+)
+
+func TestCalendarUsesV3APIAndKeepsKeyInHeader(t *testing.T) {
+	var gotQuery string
+	upstream := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if r.URL.Path != "/api/v3/calendar" {
+			t.Errorf("path = %q", r.URL.Path)
+		}
+		if got := r.Header.Get("X-Api-Key"); got != "secret" {
+			t.Errorf("X-Api-Key = %q", got)
+		}
+		if r.URL.Query().Get("includeSeries") != "true" ||
+			r.URL.Query().Get("includeEpisodeFile") != "true" {
+			t.Errorf("missing include flags: %s", r.URL.RawQuery)
+		}
+		gotQuery = r.URL.RawQuery
+		w.Header().Set("Content-Type", "application/json")
+		_, _ = w.Write([]byte(`[{"id":7,"seriesId":2,"title":"Arrival","hasFile":true}]`))
+	}))
+	defer upstream.Close()
+
+	client := New(upstream.URL, "secret", time.Second)
+	episodes, err := client.Calendar(
+		context.Background(),
+		time.Date(2026, 7, 27, 0, 0, 0, 0, time.UTC),
+		time.Date(2026, 7, 28, 0, 0, 0, 0, time.UTC),
+	)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if len(episodes) != 1 || episodes[0].ID != 7 || !episodes[0].HasFile {
+		t.Fatalf("unexpected episodes: %+v", episodes)
+	}
+	if gotQuery == "" || rHasAPIKey(gotQuery) {
+		t.Fatalf("API key leaked into query: %q", gotQuery)
+	}
+}
+
+func rHasAPIKey(query string) bool {
+	return strings.Contains(query, "secret")
+}