diff --git a/.cursor/rules/use-bun-instead-of-node-vite-npm-pnpm.mdc b/.cursor/rules/use-bun-instead-of-node-vite-npm-pnpm.mdc
deleted file mode 120000
index 6100270..0000000
--- a/.cursor/rules/use-bun-instead-of-node-vite-npm-pnpm.mdc
+++ /dev/null
@@ -1 +0,0 @@
-../../CLAUDE.md
\ No newline at end of file
diff --git a/.mise/tasks/test/e2e b/.mise/tasks/test/e2e
index 2ed2cb7..4642099 100755
--- a/.mise/tasks/test/e2e
+++ b/.mise/tasks/test/e2e
@@ -51,11 +51,11 @@ echo "🚀 Starting Jack instances..."
 docker compose -f "$E2E_DIR/docker-compose.yml" up -d --build jack-alpha jack-beta
 
 echo "⏳ Waiting for Jack Alpha..."
-timeout 60 bash -c 'until curl -sf -H "X-Api-Key: '"$JACK_ALPHA_API_KEY"'" http://localhost:13000/servers > /dev/null 2>&1; do sleep 2; done'
+timeout 60 bash -c 'until curl -sf -H "X-Api-Key: '"$JACK_ALPHA_API_KEY"'" http://localhost:13000/handshake > /dev/null 2>&1; do sleep 2; done'
 echo "✅ Jack Alpha ready"
 
 echo "⏳ Waiting for Jack Beta..."
-timeout 60 bash -c 'until curl -sf -H "X-Api-Key: '"$JACK_BETA_API_KEY"'" http://localhost:13001/servers > /dev/null 2>&1; do sleep 2; done'
+timeout 60 bash -c 'until curl -sf -H "X-Api-Key: '"$JACK_BETA_API_KEY"'" http://localhost:13001/handshake > /dev/null 2>&1; do sleep 2; done'
 echo "✅ Jack Beta ready"
 
 echo ""
diff --git a/e2e/tests/torznab-search.test.ts b/e2e/tests/torznab-search.test.ts
index 9ece154..a66835c 100644
--- a/e2e/tests/torznab-search.test.ts
+++ b/e2e/tests/torznab-search.test.ts
@@ -41,7 +41,10 @@ describe('Torznab Search (e2e)', () => {
     expect(res.status).toBe(200)
     const xml = await res.text()
     expect(xml).toContain('<error code="100"')
-    expect(xml).toContain('Unauthorized: invalid API key')
+    // The peer-facing app returns opaque errors — a generic reason, never the
+    // detailed "invalid API key" (which would leak auth detail to clients).
+    expect(xml).toContain('Unauthorized')
+    expect(xml).not.toContain('invalid API key')
   })
 
   test('Torznab rejects unknown function', async () => {