fix: resolve all linting errors, add tests, bump base image

Linting (ruff):
- cli.py: sort relative imports (I001)
- jobs.py: remove unused get_people import (F401), wrap long line (E501)
- executor.py: remove unused success variable (F841), wrap 4 long lines (E501)

Tests (24 passing):
- tests/test_config.py: config singleton defaults + env var overrides
- tests/test_upload_tracker.py: mark/filter/reset/summary logic
- tests/test_immich_api.py: filter_recent_assets date boundary cases
- tests/test_jobs.py: _resolve_strategy with LIMIT env var and fallbacks
- pyproject.toml: add [tool.pytest.ini_options] testpaths=["tests"] so
  pytest doesn't scan .venv in CI

Security:
- Dockerfile: bump CUDA base from 12.6.3 to 12.9.2 to pick up patched
  Ubuntu packages (fixes Dependabot low-severity alert)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

tests/test_config.py

@@ -0,0 +1,80 @@
+"""Smoke tests for configuration loading."""
+
+import os
+
+import pytest
+
+
+def test_config_loads_defaults(monkeypatch):
+    """Config reads env vars and falls back to documented defaults."""
+    monkeypatch.setenv("IMMICH_URL", "http://test:2283")
+    monkeypatch.setenv("API_KEY", "test-key")
+
+    from if_curator.config import _Config
+
+    _Config.reset()
+    cfg = _Config()
+
+    assert cfg.IMMICH_URL == "http://test:2283"
+    assert cfg.API_KEY == "test-key"
+    assert cfg.OUTPUT_DIR == "./frigate_train"
+    assert cfg.YEARS_FILTER == 10
+    assert cfg.MIN_FACE_WIDTH == 50
+    assert cfg.MIN_FACE_COUNT == 0
+    assert cfg.BLUR_THRESHOLD == 100.0
+    assert cfg.MIN_CONFIDENCE == 0.7
+    assert cfg.MAX_AUTO_IMAGES == 80
+    assert cfg.FACE_MARGIN == 0.15
+    assert cfg.USE_FULL_RESOLUTION is True
+    assert cfg.ENABLE_FACE_ALIGNMENT is True
+    assert cfg.ENABLE_CACHE is False
+
+    _Config.reset()
+
+
+def test_config_env_overrides(monkeypatch):
+    """All quality settings are overridable via environment variables."""
+    monkeypatch.setenv("IMMICH_URL", "http://test:2283")
+    monkeypatch.setenv("API_KEY", "test-key")
+    monkeypatch.setenv("YEARS_FILTER", "5")
+    monkeypatch.setenv("MIN_FACE_WIDTH", "80")
+    monkeypatch.setenv("BLUR_THRESHOLD", "50.0")
+    monkeypatch.setenv("MIN_CONFIDENCE", "0.9")
+    monkeypatch.setenv("MAX_AUTO_IMAGES", "40")
+    monkeypatch.setenv("FACE_MARGIN", "0.2")
+    monkeypatch.setenv("USE_FULL_RESOLUTION", "false")
+    monkeypatch.setenv("ENABLE_FACE_ALIGNMENT", "false")
+    monkeypatch.setenv("ENABLE_CACHE", "true")
+
+    from if_curator.config import _Config
+
+    _Config.reset()
+    cfg = _Config()
+
+    assert cfg.YEARS_FILTER == 5
+    assert cfg.MIN_FACE_WIDTH == 80
+    assert cfg.BLUR_THRESHOLD == 50.0
+    assert cfg.MIN_CONFIDENCE == 0.9
+    assert cfg.MAX_AUTO_IMAGES == 40
+    assert cfg.FACE_MARGIN == 0.2
+    assert cfg.USE_FULL_RESOLUTION is False
+    assert cfg.ENABLE_FACE_ALIGNMENT is False
+    assert cfg.ENABLE_CACHE is True
+
+    _Config.reset()
+
+
+def test_get_headers_returns_api_key(monkeypatch):
+    """get_headers() returns the correct auth header dict."""
+    monkeypatch.setenv("IMMICH_URL", "http://test:2283")
+    monkeypatch.setenv("API_KEY", "my-secret-key")
+
+    from if_curator.config import _Config, get_headers
+
+    _Config.reset()
+    headers = get_headers()
+
+    assert headers["x-api-key"] == "my-secret-key"
+    assert headers["Accept"] == "application/json"
+
+    _Config.reset()

tests/test_immich_api.py

@@ -0,0 +1,53 @@
+"""Tests for Immich API utility functions (no network required)."""
+
+from datetime import datetime, timedelta, timezone
+
+
+def _asset(days_ago: int) -> dict:
+    ts = (datetime.now(timezone.utc) - timedelta(days=days_ago)).isoformat()
+    return {"id": f"id-{days_ago}d", "fileCreatedAt": ts}
+
+
+def test_filter_recent_keeps_new_assets(monkeypatch):
+    from if_curator.immich_api import filter_recent_assets
+    assets = [_asset(1), _asset(30), _asset(365 * 5)]
+    result = filter_recent_assets(assets, years=10)
+    assert len(result) == 3
+
+
+def test_filter_recent_removes_old_assets(monkeypatch):
+    from if_curator.immich_api import filter_recent_assets
+    old = _asset(365 * 15)
+    recent = _asset(10)
+    result = filter_recent_assets([old, recent], years=10)
+    assert len(result) == 1
+    assert result[0]["id"] == "id-10d"
+
+
+def test_filter_recent_boundary(monkeypatch):
+    from if_curator.immich_api import filter_recent_assets
+    just_inside = _asset(365 * 10 - 1)
+    just_outside = _asset(365 * 10 + 1)
+    result = filter_recent_assets([just_inside, just_outside], years=10)
+    assert len(result) == 1
+    assert result[0] == just_inside
+
+
+def test_filter_recent_skips_missing_date():
+    from if_curator.immich_api import filter_recent_assets
+    assets = [{"id": "no-date"}, _asset(5)]
+    result = filter_recent_assets(assets, years=10)
+    assert len(result) == 1
+    assert result[0]["id"] == "id-5d"
+
+
+def test_filter_recent_skips_bad_date():
+    from if_curator.immich_api import filter_recent_assets
+    assets = [{"id": "bad", "fileCreatedAt": "not-a-date"}, _asset(5)]
+    result = filter_recent_assets(assets, years=10)
+    assert len(result) == 1
+
+
+def test_filter_recent_empty_list():
+    from if_curator.immich_api import filter_recent_assets
+    assert filter_recent_assets([], years=10) == []

tests/test_jobs.py

@@ -0,0 +1,68 @@
+"""Tests for job strategy resolution and env var handling."""
+
+import pytest
+
+
+@pytest.fixture(autouse=True)
+def clean_env(monkeypatch):
+    """Ensure LIMIT and STRATEGY are unset before each test."""
+    monkeypatch.delenv("LIMIT", raising=False)
+    monkeypatch.delenv("STRATEGY", raising=False)
+
+
+def test_resolve_strategy_default_auto():
+    from if_curator.jobs import _resolve_strategy
+    limit, mode = _resolve_strategy("auto", has_embedding=True)
+    assert limit == "auto"
+    assert mode == "smart"
+
+
+def test_resolve_strategy_standard():
+    from if_curator.jobs import _resolve_strategy
+    limit, mode = _resolve_strategy("standard", has_embedding=True)
+    assert limit == 30
+    assert mode == "smart"
+
+
+def test_resolve_strategy_broad():
+    from if_curator.jobs import _resolve_strategy
+    limit, mode = _resolve_strategy("broad", has_embedding=True)
+    assert limit == 100
+    assert mode == "smart"
+
+
+def test_resolve_strategy_custom_limit_env(monkeypatch):
+    monkeypatch.setenv("LIMIT", "50")
+    from if_curator.jobs import _resolve_strategy
+    limit, mode = _resolve_strategy("auto", has_embedding=True)
+    assert limit == 50
+    assert mode == "smart"
+
+
+def test_resolve_strategy_limit_overrides_strategy(monkeypatch):
+    monkeypatch.setenv("LIMIT", "25")
+    from if_curator.jobs import _resolve_strategy
+    limit, mode = _resolve_strategy("broad", has_embedding=True)
+    assert limit == 25
+
+
+def test_resolve_strategy_no_embedding_falls_back_to_time():
+    from if_curator.jobs import _resolve_strategy
+    limit, mode = _resolve_strategy("auto", has_embedding=False)
+    assert mode == "time"
+    assert isinstance(limit, int)
+
+
+def test_resolve_strategy_no_embedding_respects_limit(monkeypatch):
+    monkeypatch.setenv("LIMIT", "60")
+    from if_curator.jobs import _resolve_strategy
+    limit, mode = _resolve_strategy("auto", has_embedding=False)
+    assert limit == 60
+    assert mode == "time"
+
+
+def test_resolve_strategy_unknown_falls_back_to_auto():
+    from if_curator.jobs import _resolve_strategy
+    limit, mode = _resolve_strategy("unknown-strategy", has_embedding=True)
+    assert limit == "auto"
+    assert mode == "smart"

tests/test_upload_tracker.py

@@ -0,0 +1,74 @@
+"""Tests for upload tracker — mark, filter, reset, and summary logic."""
+
+import json
+import os
+import tempfile
+
+import pytest
+
+
+@pytest.fixture(autouse=True)
+def isolated_cache(monkeypatch, tmp_path):
+    """Point tracker at a temp directory so tests don't touch real cache files."""
+    monkeypatch.setenv("CACHE_DIR", str(tmp_path))
+    from if_curator.config import _Config
+    _Config.reset()
+    yield tmp_path
+    _Config.reset()
+
+
+def test_filter_returns_all_when_empty():
+    from if_curator.upload_tracker import filter_already_uploaded
+    ids = ["a1", "b2", "c3"]
+    assert filter_already_uploaded(ids) == ids
+
+
+def test_mark_uploaded_excludes_from_filter():
+    from if_curator.upload_tracker import filter_already_uploaded, mark_uploaded
+    mark_uploaded("a1", person_name="Alice")
+    result = filter_already_uploaded(["a1", "b2"])
+    assert result == ["b2"]
+
+
+def test_mark_rejected_excludes_from_filter():
+    from if_curator.upload_tracker import filter_already_uploaded, mark_rejected
+    mark_rejected("x9", person_name="Bob")
+    result = filter_already_uploaded(["x9", "y8"])
+    assert result == ["y8"]
+
+
+def test_retry_rejected_includes_rejected():
+    from if_curator.upload_tracker import filter_already_uploaded, mark_rejected
+    mark_rejected("x9", person_name="Bob")
+    result = filter_already_uploaded(["x9", "y8"], retry_rejected=True)
+    assert "x9" in result
+
+
+def test_reset_person_clears_records():
+    from if_curator.upload_tracker import filter_already_uploaded, mark_uploaded, reset_person
+    mark_uploaded("a1", person_name="Alice")
+    mark_uploaded("a2", person_name="Alice")
+    mark_uploaded("b1", person_name="Bob")
+    reset_person("Alice")
+    assert filter_already_uploaded(["a1", "a2"]) == ["a1", "a2"]
+    assert filter_already_uploaded(["b1"]) == []
+
+
+def test_get_person_summary():
+    from if_curator.upload_tracker import get_person_summary, mark_rejected, mark_uploaded
+    mark_uploaded("a1", person_name="Alice")
+    mark_uploaded("a2", person_name="Alice")
+    mark_rejected("a3", person_name="Alice")
+    mark_uploaded("b1", person_name="Bob")
+    summary = get_person_summary()
+    assert summary["Alice"]["uploaded"] == 2
+    assert summary["Alice"]["rejected"] == 1
+    assert summary["Bob"]["uploaded"] == 1
+    assert summary["Bob"]["rejected"] == 0
+
+
+def test_duplicate_marks_are_idempotent():
+    from if_curator.upload_tracker import filter_already_uploaded, mark_uploaded
+    mark_uploaded("dup", person_name="Alice")
+    mark_uploaded("dup", person_name="Alice")
+    assert filter_already_uploaded(["dup", "new"]) == ["new"]