fix: remove permissions module mock from tournament-update tests to prevent test pollution

tournament-update.test.ts was mocking the entire @/lib/permissions module,
which replaced canManageTournament globally and caused permissions.test.ts
to fail when run in the same process.

Instead of mocking permissions, mock its dependencies (auth-simple and prisma)
so canManageTournament runs through naturally.

.gitea/workflows/build-ci-images.yml

@@ -52,11 +52,9 @@ jobs:
 
       - name: Build and push CI base image
         run: |
-          WORKSPACE_DIR="$GITHUB_WORKSPACE"
           # Build with multiple tags
           docker build \
-            --context "$WORKSPACE_DIR" \
-            --file "$WORKSPACE_DIR/Dockerfile.ci-base" \
+            --file Dockerfile.ci-base \
             --tag ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}/ci-base:latest \
             --tag ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}/ci-base:playwright-${{ steps.meta.outputs.playwright_version }} \
             --tag ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}/ci-base:${{ github.sha }} \

.gitea/workflows/pr.yml

@@ -37,6 +37,9 @@ jobs:
     container:
       image: docker.notsosm.art/euchre-camp/ci-base:latest
       options: --user root
+      volumes:
+        - /apps:/apps
+        - /var/run/docker.sock:/var/run/docker.sock
 
     steps:
       - name: Checkout code
@@ -58,15 +61,12 @@ jobs:
 
       - name: Build Docker image for PR
         run: |
-          WORKSPACE_DIR="$GITHUB_WORKSPACE"
           IMAGE_TAG="pr-${{ steps.info.outputs.pr_number }}-${{ steps.info.outputs.short_sha }}"
           docker build \
-            --context "$WORKSPACE_DIR" \
-            --file "$WORKSPACE_DIR/Dockerfile" \
             --target runner \
             --build-arg GIT_COMMIT=$GITHUB_SHA \
             -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${IMAGE_TAG} \
-            "$WORKSPACE_DIR"
+            .
 
       - name: Update CI site compose and restart
         run: |

.gitea/workflows/release.yml

@@ -110,14 +110,11 @@ jobs:
       - name: Build test-capable image
         if: steps.commit.outputs.committed == 'true'
         run: |
-          WORKSPACE_DIR="$GITHUB_WORKSPACE"
           docker build \
-            --context "$WORKSPACE_DIR" \
-            --file "$WORKSPACE_DIR/Dockerfile" \
             --target test-runner \
             --build-arg GIT_COMMIT=${{ github.sha }} \
             -t ${{ env.IMAGE_NAME }}-test:${{ steps.version.outputs.new_version }} \
-            "$WORKSPACE_DIR"
+            .
 
       - name: Run tests inside test-capable container
         if: steps.commit.outputs.committed == 'true'
@@ -130,15 +127,12 @@ jobs:
       - name: Build production image
         if: steps.commit.outputs.committed == 'true'
         run: |
-          WORKSPACE_DIR="$GITHUB_WORKSPACE"
           docker build \
-            --context "$WORKSPACE_DIR" \
-            --file "$WORKSPACE_DIR/Dockerfile" \
             --target runner \
             --build-arg GIT_COMMIT=${{ github.sha }} \
             -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.version.outputs.new_version }} \
             -t ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest \
-            "$WORKSPACE_DIR"
+            .
 
       - name: Push Docker images
         if: steps.commit.outputs.committed == 'true'

src/__tests__/auth-simple.test.ts

@@ -47,9 +47,7 @@ describe('getSession', () => {
   })
 
   it('returns null when an error occurs', async () => {
-    mockFetch.mockImplementation(async () => {
-      throw new Error('Network error')
-    })
+    mockFetch.mockRejectedValue(new Error('Network error'))
 
     const result = await getSession()
 

src/__tests__/unit/tournament-update.test.ts

@@ -3,17 +3,37 @@
  * Tests the allowTies field is properly saved when updating tournaments
  */
 
-import { describe, it, expect, mock, beforeEach, afterAll } from 'bun:test';
+import { describe, it, expect, mock, beforeEach,} from 'bun:test';
 
 // Create mock functions at module level
 const eventFindUniqueMock = mock(async () => ({}));
 const eventUpdateMock = mock(async () => ({}));
-const canManageTournamentMock = mock(async () => ({ allowed: true }));
-const canDeleteTournamentMock = mock(async () => ({ allowed: true }));
+const userFindUniqueMock = mock(async () => ({
+  id: 'admin-1',
+  email: 'admin@example.com',
+  role: 'club_admin',
+  emailVerified: false,
+  name: null,
+  image: null,
+  playerId: null,
+  createdAt: new Date(),
+  updatedAt: new Date(),
+}));
 
-// Mock prisma first
+// Mock auth-simple to return a valid session
+mock.module('@/lib/auth-simple', () => ({
+  getSession: mock(async () => ({
+    user: { id: 'admin-1', email: 'admin@example.com' },
+    session: { token: 'test', expiresAt: new Date() }
+  })),
+}));
+
+// Mock prisma with user and event
 mock.module('@/lib/prisma', () => ({
   prisma: {
+    user: {
+      findUnique: userFindUniqueMock,
+    },
     event: {
       findUnique: eventFindUniqueMock,
       update: eventUpdateMock,
@@ -21,17 +41,6 @@ mock.module('@/lib/prisma', () => ({
   },
 }));
 
-// Mock the permissions module
-mock.module('@/lib/permissions', () => ({
-  canManageTournament: canManageTournamentMock,
-  canDeleteTournament: canDeleteTournamentMock,
-}));
-
-// Cleanup after all tests in this file
-afterAll(() => {
-  mock.restore('module');
-});
-
 // Import the route handler after mocking
 import { PUT } from '@/app/api/tournaments/[id]/route';
 import { prisma } from '@/lib/prisma';
@@ -41,8 +50,7 @@ describe('Tournament Update API', () => {
     // Clear all mock history before each test
     eventFindUniqueMock.mockClear();
     eventUpdateMock.mockClear();
-    canManageTournamentMock.mockClear();
-    canDeleteTournamentMock.mockClear();
+    userFindUniqueMock.mockClear();
   });
 
   it('should update allowTies field when provided', async () => {