test(ci): give bulk durable-IO tests a real budget and a clean memo slate

windows-latest measured 18s and 34s for the two spill tests whose hundreds
of fsync'd writes are the assertion itself, against Bun's 5s default — the
wait is intrinsic, so they get a dedicated bulk-durable-IO budget with the
measurement recorded. The ACL memo-lifecycle test also inherited success
memos from earlier win32-override cases and asserted absolute counts, so it
now resets the harden state first.

Author: lidge-jun

tests/helpers/test-budget.ts

@@ -39,6 +39,13 @@ export const SERVER_BUDGET_MS = 30_000;
 /** Touches SQLite or the filesystem repeatedly. Slow on Windows for reasons outside our code. */
 export const STORE_BUDGET_MS = 30_000;
 
+/**
+ * Hundreds of individually fsync'd durable writes in one test. The fsyncs ARE the
+ * assertion (durable spill is the product contract), so the wait is intrinsic; the
+ * orphan-cleanup cap test measured ~34s on windows-latest against Bun's 5s default.
+ */
+export const BULK_DURABLE_IO_BUDGET_MS = 90_000;
+
 /**
  * A deadline *inside* a test, for an await that would otherwise hang forever.
  *

tests/responses-state.test.ts

@@ -1,4 +1,5 @@
 import { afterEach, beforeEach, describe, expect, test } from "bun:test";
+import { BULK_DURABLE_IO_BUDGET_MS } from "./helpers/test-budget";
 import {
   existsSync,
   linkSync,
@@ -986,7 +987,7 @@ describe("Responses previous_response_id state", () => {
     expect(files.length).toBeLessThanOrEqual(129);
     expect(files.length).toBeGreaterThan(1); // deferral is real, not immediate unlink
     void dir;
-  });
+  }, BULK_DURABLE_IO_BUDGET_MS); // 140 fsync'd durable writes ARE the assertion; Windows CI measured ~18s.
 
   test("write fsync or publication failure cleans its temp and preserves no unmeasured resident payload", () => {
     const failures = [
@@ -1048,7 +1049,7 @@ describe("Responses previous_response_id state", () => {
     expect(result.scanned).toBeLessThanOrEqual(4_096);
     expect(result.failed).toBe(1);
     expect(existsSync(join(dir, symlinkName))).toBe(true);
-  });
+  }, BULK_DURABLE_IO_BUDGET_MS); // 521 fsync'd spill writes build the workload; Windows CI measured ~34s.
 
   test("orphan scan cap stops enumeration at the limit with an injected directory", () => {
     // Prove RESPONSE_SPILL_SCAN_MAX itself binds: enumerate more entries than

tests/windows-secret-acl.test.ts

@@ -109,6 +109,10 @@ describe("hardenSecretPath – required mode (required: true)", () => {
 
 describe("ephemeral harden success memo lifecycle", () => {
   test("forgetHardenedSecretPath releases only the actual temp and a second temp hardens again", () => {
+    // Earlier cases in this file harden real paths under the win32 override and
+    // legitimately leave success memos behind; this test asserts exact memo
+    // counts, so it must start from a clean slate rather than inherit them.
+    resetHardenedStateForTests();
     const tempA = join(testDir, "config.json.ocx.1.1.tmp");
     const tempB = join(testDir, "config.json.ocx.1.2.tmp");
     writeFileSync(tempA, "first", "utf8");