fix(test): repair CI regressions from state.db rewiring + daemon preset flake

edit_lines_aborts_when_txn_begin_fails and
format_files_skips_one_file_when_txn_begin_fails_without_aborting_the_batch
chmod'd index.db read-only to force a txn::begin failure, but the
2026-08-05 state.db rewiring (86f56ab) moved edit_transactions/tx_events
into a separate .calm/state.db. txn::begin's BEGIN IMMEDIATE now runs
against state.db, so the old fixture no longer triggers
TRANSACTION_INIT_FAILED -- the write proceeds and only the later reindex
against read-only index.db fails, surfacing as a soft index_stale
warning instead. Point the read-only chmod at state.db, which is what
txn::begin actually writes to now.

daemon_respects_per_connection_preset failed intermittently in CI (2 of
the last 4 runs) but never locally (4/4 clean runs). It's the only test
in the file where connection B attaches to a daemon A is concurrently
still spawning, leaving less timing headroom than other wait_for call
sites here. Widen its wait_for from 8s to 20s, same class of fix as the
already-merged watch_supervisor wait_until widening (b4c43d7).

Verified locally: calm-server --lib 341/341, calm-cli daemon_integration
10/10 x3, fmt/clippy clean on both crates.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Author: Your Name

crates/calm-cli/tests/daemon_integration.rs

@@ -408,7 +408,14 @@ fn daemon_respects_per_connection_preset() {
     let watcher_b = StdoutWatcher::spawn(stdout_b);
     stdin_b.write_all(initialize).unwrap();
     stdin_b.write_all(list_tools).unwrap();
-    watcher_b.wait_for("\"id\":2", Duration::from_secs(8));
+    // 20s, not the usual 8s (see other `wait_for` call sites in this file): this
+    // is the one test where B must attach to a daemon A is *concurrently still
+    // spawning/initializing* rather than one already confirmed live, so the full
+    // round trip (connect_live_and_current's own up-to-5s budget, plus B's real
+    // tools/list) has less headroom than elsewhere -- flaky in CI under load
+    // (missing content in stdout_b_text) but never locally, same class of fix as
+    // the watch_supervisor wait_until widening in b4c43d7.
+    watcher_b.wait_for("\"id\":2", Duration::from_secs(20));
     drop(stdin_b);
     let mut stderr_b = Vec::new();
     if let Some(mut stderr) = child_b.stderr.take() {

crates/calm-server/src/tools.rs

@@ -9908,18 +9908,22 @@ mod tests {
         // WS-1 enforce transition (docs/plans/2026-08-02-ws1-enforce-and-critical-
         // risk-execution-plan.md §2): a txn::begin failure must abort the write
         // entirely rather than proceed with no journal. Forced deterministically by
-        // making the DB file read-only at the OS level after setup -- open_writer
-        // requires write access, so the very first `open_writer` inside
-        // `begin_result`'s construction fails, exercising the same enforce path a
-        // real disk-full/permission problem would.
+        // making state.db read-only at the OS level after setup -- since the
+        // 2026-08-05 state.db rewiring (docs/plans/2026-08-05-state-db-rewiring-
+        // execution-plan.md), `edit_transactions`/`tx_events` live in state.db, not
+        // index.db, so it's `txn::begin`'s own `BEGIN IMMEDIATE` against state.db
+        // that must fail here, exercising the same enforce path a real
+        // disk-full/permission problem would. (index.db itself is untouched -- a
+        // read-only *index.db* only surfaces later, as a non-fatal `index_stale`
+        // warning on an otherwise-applied write, not a TRANSACTION_INIT_FAILED.)
         let (dir, server) = test_server("txn_begin_failure_aborts_write");
         std::fs::write(dir.join("a.py"), "def helper():\n    return 1\n").unwrap();
         let hash = calm_core::edit::range_checksum("def helper():\n    return 1\n", 2, 2).unwrap();
 
-        let db_path = dir.join("index.db");
-        let mut perms = std::fs::metadata(&db_path).unwrap().permissions();
+        let state_db_path = dir.join(".calm").join("state.db");
+        let mut perms = std::fs::metadata(&state_db_path).unwrap().permissions();
         perms.set_readonly(true);
-        std::fs::set_permissions(&db_path, perms).unwrap();
+        std::fs::set_permissions(&state_db_path, perms).unwrap();
 
         let out = jv(
             server.edit_lines(rmcp::handler::server::wrapper::Parameters(
@@ -9952,7 +9956,7 @@ mod tests {
         {
             use std::os::unix::fs::PermissionsExt;
             let perms = std::fs::Permissions::from_mode(0o644);
-            std::fs::set_permissions(&db_path, perms).unwrap();
+            std::fs::set_permissions(&state_db_path, perms).unwrap();
         }
         let _ = std::fs::remove_dir_all(&dir);
     }
@@ -9961,18 +9965,21 @@ mod tests {
     fn format_files_skips_one_file_when_txn_begin_fails_without_aborting_the_batch() {
         // Same enforce posture as edit_lines, but format_files processes a batch --
         // a per-file begin failure must surface as that file's own "error" result,
-        // not a batch-wide abort of files that would otherwise succeed.
+        // not a batch-wide abort of files that would otherwise succeed. See
+        // edit_lines_aborts_when_txn_begin_fails's comment above for why state.db
+        // (not index.db) is the file that must be read-only to force this path
+        // since the 2026-08-05 state.db rewiring.
         let (dir, server) = test_server("format_files_txn_begin_failure_per_file");
         std::fs::write(
             dir.join("ugly.rs"),
             "fn   main( ) { let x=1  ;println!(\"{}\",x);}\n",
         )
         .unwrap();
 
-        let db_path = dir.join("index.db");
-        let mut perms = std::fs::metadata(&db_path).unwrap().permissions();
+        let state_db_path = dir.join(".calm").join("state.db");
+        let mut perms = std::fs::metadata(&state_db_path).unwrap().permissions();
         perms.set_readonly(true);
-        std::fs::set_permissions(&db_path, perms).unwrap();
+        std::fs::set_permissions(&state_db_path, perms).unwrap();
 
         let out = jv(
             server.format_files(rmcp::handler::server::wrapper::Parameters(
@@ -9999,7 +10006,7 @@ mod tests {
         {
             use std::os::unix::fs::PermissionsExt;
             let perms = std::fs::Permissions::from_mode(0o644);
-            std::fs::set_permissions(&db_path, perms).unwrap();
+            std::fs::set_permissions(&state_db_path, perms).unwrap();
         }
         let _ = std::fs::remove_dir_all(&dir);
     }