@saluzi/saluzi-edu 0.3.3 → 0.3.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@saluzi/saluzi-edu",
-  "version": "0.3.3",
+  "version": "0.3.5",
   "description": "Saluzi CLI - interactive AI coding assistant in the terminal",
   "license": "MIT",
   "type": "module",

package/packages/remote-control-server/src/__tests__/auth-security.test.ts

@@ -105,13 +105,11 @@ describe('Security: /setup concurrent protection', () => {
     app = createApp()
   })
 
-  // Under bun --isolate, each test file gets its own module graph, so the
-  // SQLite singleton in db/sqlite.ts drifts between the test's freshDb() and
-  // the route handler's getDb() — the DELETE runs on a different _db than
-  // the INSERT, so both concurrent requests see stale rows and return 409.
-  // The production code (atomic INSERT ... WHERE NOT EXISTS) is race-free;
-  // this test only validates under non-isolate mode.
-  test.skip('concurrent setup requests only create one admin', async () => {
+  // freshDb() resets the db/sqlite.ts singleton and points it at a unique
+  // temp file per test, so the route handler's getDb() resolves to the same
+  // connection as this test. The production INSERT ... WHERE NOT EXISTS is
+  // atomic, so exactly one of two concurrent setup requests succeeds.
+  test('concurrent setup requests only create one admin', async () => {
     // Fire two setup requests concurrently
     const [res1, res2] = await Promise.all([
       app.request('/web/auth/setup', {

package/packages/remote-control-server/src/__tests__/design-gaps.test.ts

@@ -1,5 +1,7 @@
 import { describe, test, expect, beforeEach, mock } from 'bun:test'
 import { randomUUID } from 'node:crypto'
+import { tmpdir } from 'node:os'
+import { join } from 'node:path'
 import { mockConfigModule } from './helpers/mock-config'
 
 mock.module('../config', () => mockConfigModule())
@@ -37,7 +39,10 @@ function freshDb(): Database {
   try {
     resetDbSingleton()
   } catch {}
-  const uniquePath = `/tmp/rcs-design-gap-${randomUUID().replace(/-/g, '').slice(0, 8)}.db`
+  const uniquePath = join(
+    tmpdir(),
+    `rcs-design-gap-${randomUUID().replace(/-/g, '').slice(0, 8)}.db`,
+  )
   return initDatabase(uniquePath)
 }
 
@@ -330,7 +335,10 @@ describe('Gap 2: resolveOwnedWebSessionId removes auto-bind', () => {
       resetDbSingleton()
     } catch {}
     initDatabase(
-      `/tmp/rcs-gap2-${randomUUID().replace(/-/g, '').slice(0, 8)}.db`,
+      join(
+        tmpdir(),
+        `rcs-gap2-${randomUUID().replace(/-/g, '').slice(0, 8)}.db`,
+      ),
     )
   })
 

package/packages/remote-control-server/src/__tests__/low-priority-fixes.test.ts

@@ -1,6 +1,7 @@
 import { describe, test, expect, beforeEach, mock } from 'bun:test'
 import { readFileSync } from 'node:fs'
-import { resolve } from 'node:path'
+import { tmpdir } from 'node:os'
+import { join, resolve } from 'node:path'
 import { randomUUID } from 'node:crypto'
 import { mockConfigModule } from './helpers/mock-config'
 
@@ -34,7 +35,10 @@ function freshDb() {
   } catch {
     // ignore
   }
-  const uniquePath = `/tmp/rcs-low-fixes-${randomUUID().replace(/-/g, '').slice(0, 8)}.db`
+  const uniquePath = join(
+    tmpdir(),
+    `rcs-low-fixes-${randomUUID().replace(/-/g, '').slice(0, 8)}.db`,
+  )
   return initDatabase(uniquePath)
 }
 

package/packages/remote-control-server/src/nodeServer.ts

@@ -162,6 +162,21 @@ export async function startRcsServer(
       // eslint-disable-next-line custom-rules/no-process-exit
       process.exit(1)
     }
+    if (opts.singleUser && err.code === 'EADDRINUSE') {
+      // Single-user embedded mode (`slz rcs one` / `/rcs one`) breaks
+      // silently when another RCS instance owns the port: the one-time
+      // login codes and the worker-session poll live in THIS process's
+      // memory, while the browser talks to the OTHER server — its /otp/
+      // route doesn't know the code and bounces the user to the login
+      // page, defeating the auto-open-into-session flow. Fail loudly.
+      console.error(
+        '[RCS] Single-user mode needs this process to own the port ' +
+          '(one-time login codes are in-memory). ' +
+          'Stop the other RCS instance or set RCS_PORT.',
+      )
+      // eslint-disable-next-line custom-rules/no-process-exit
+      process.exit(1)
+    }
   })
 
   // Inject WebSocket support for Node.js