test: trim fixed 1s wall-clock ceilings in slowest unit tests

Author: Gustav-Simonsson

scripts/ci-timings.json

@@ -2,7 +2,7 @@
   "version": 1,
   "files": {
     "scripts/check-dead-exports.test.ts": 1769,
-    "scripts/test-parallel.test.ts": 2496,
+    "scripts/test-parallel.test.ts": 2400,
     "src/plugins/shell-guard-plugin.test.ts": 1883,
     "src/tui/tool-execution-watchdog.test.ts": 1853,
     "src/auth/codex/refresh-lock.test.ts": 930,
@@ -12,8 +12,8 @@
     "src/tui/product-host.test.ts": 1296,
     "e2e/exec-shutdown-reap.test.ts": 1175,
     "src/agent/tools-mcp-disconnect.test.ts": 1167,
-    "src/subagent/run-shell-child-reap.test.ts": 1050,
-    "src/auth/codex/session-refresh-race.test.ts": 1008,
+    "src/subagent/run-shell-child-reap.test.ts": 850,
+    "src/auth/codex/session-refresh-race.test.ts": 460,
     "e2e/crash-finalize.test.ts": 892,
     "e2e/compaction-baseline.test.ts": 836,
     "src/subagent/agent-fleet.test.ts": 806,

scripts/test-parallel.test.ts

@@ -23,8 +23,10 @@ function processAlive(pid: number): boolean {
 // remaining tests drive children that never emit output, so their stall is
 // declared deterministically on the watchdog's first tick; they use a short
 // window so the suite does not pay the tick test's headroom in wall clock.
+// The silent-child window stays a few bun -e spawn times wide so a retried
+// child's first output cannot be mistaken for a stall under load.
 const TEST_STALL_MS = 500;
-const SILENT_CHILD_STALL_MS = 250;
+const SILENT_CHILD_STALL_MS = 200;
 
 describe("runWithWatchdog", () => {
   test("passes through a successful run without retrying", async () => {

src/auth/codex/session-refresh-race.test.ts

@@ -103,9 +103,14 @@ describe("codex shared-credential refresh race", () => {
       if (arrivals === 1) {
         // Rendezvous: hold the first grant until the second refresh arrives
         // (or a timeout), forcing the two refreshes to overlap the way two
-        // concurrent headless runs do.
+        // concurrent headless runs do. The store serializes refreshes, so in
+        // the passing implementation the second session blocks on the lock
+        // and never starts a second grant: the hold always times out, so the
+        // ceiling is pure wall clock. 200ms is far past the few-ms window
+        // between two Promise.all-launched refreshes in a broken (unserialized)
+        // implementation, and the serialized path is unaffected.
         const start = Date.now();
-        while (arrivals < 2 && Date.now() - start < 1_000)
+        while (arrivals < 2 && Date.now() - start < 200)
           await new Promise((resolve) => setTimeout(resolve, 5));
       }
       const presented = new URLSearchParams(String(init?.body ?? "")).get(

src/subagent/run-shell-child-reap.test.ts

@@ -289,10 +289,12 @@ describe("CL-7990 shell-child reap: sessions holding a live shell child settle",
           persist: false,
           // Test injection: the run's own bounded teardown fires after this
           // short deadline instead of the production 30s bound, so the
-          // wedged close is proven to settle the run in ~1s, not 30s.
-          teardownDeadlineMs: 1_000,
+          // wedged close is proven to settle the run in ~0.4s, not 30s.
+          // Kept above the close bound below so the close error surfaces
+          // before the run settles.
+          teardownDeadlineMs: 400,
         });
-        const closeError = await handles.close(500).then(
+        const closeError = await handles.close(200).then(
           () => undefined,
           (err: unknown) => err,
         );