diff --git a/apps/api/vitest.config.ts b/apps/api/vitest.config.ts
index def2e31..e6fad98 100644
--- a/apps/api/vitest.config.ts
+++ b/apps/api/vitest.config.ts
@@ -2,6 +2,13 @@ import { cloudflareTest } from '@cloudflare/vitest-pool-workers'
 import { defineConfig } from 'vitest/config'
 
 export default defineConfig({
+	test: {
+		// Requests dispatched into the worker (`exports.default.fetch`/`SELF.fetch`) get slower
+		// the more have run before them in the same file — a vitest-pool-workers/workerd issue,
+		// reproducible in every app. The tail of api.test.ts runs ~250ms per request, which
+		// puts some tests past the 5s default under a loaded full-repo run.
+		testTimeout: 30_000,
+	},
 	plugins: [
 		cloudflareTest({
 			wrangler: { configPath: `${__dirname}/wrangler.jsonc` },
diff --git a/apps/match/src/test/integration/api.test.ts b/apps/match/src/test/integration/api.test.ts
index 9a3ed42..2e28101 100644
--- a/apps/match/src/test/integration/api.test.ts
+++ b/apps/match/src/test/integration/api.test.ts
@@ -4291,6 +4291,7 @@ describe('auth-gated endpoints', () => {
 			'POST /player/login',
 			'POST /player/logout',
 			'POST /player/notifydisconnect',
+			'POST /player/verifylock',
 			'POST /roominstance/{id}/markprivate',
 			'POST /roominstance/{id}/reportjoinresult',
 			'PUT /player/avoidjuniors',
diff --git a/apps/studio/src/test/integration/cloud-builds.test.ts b/apps/studio/src/test/integration/cloud-builds.test.ts
index 521d8e9..9e7c098 100644
--- a/apps/studio/src/test/integration/cloud-builds.test.ts
+++ b/apps/studio/src/test/integration/cloud-builds.test.ts
@@ -8,6 +8,7 @@ import {
 	UNITY_ASSET_SCHEMA_DDL,
 } from '@repo/domain'
 
+import { SCHEMA_DDL as CUSTOM_AVATAR_ITEM_SCHEMA_DDL } from '../../../../api/src/custom-avatar-items-db'
 import cloudBuilds, { CLOUD_JOB_SCHEMA } from '../../cloud-builds'
 
 import type { Env } from '../../context'
@@ -56,6 +57,9 @@ beforeAll(async () => {
 		...SUBROOM_SCHEMA_DDL,
 		...STUDIO_CLOUD_BUILD_SCHEMA_DDL,
 		...UNITY_ASSET_SCHEMA_DDL,
+		// Custom avatar items (owned by the api worker) — every room read joins the published
+		// room badges from this table.
+		...CUSTOM_AVATAR_ITEM_SCHEMA_DDL,
 		CLOUD_JOB_SCHEMA,
 	])
 		await env.DB.prepare(sql).run()