perf: batch MinHook enable calls for 10x faster test startup

Replace per-hook MinHook::enable_hook() with queue_enable_hook(), then
call apply_queued() once after all hooks are installed. This batches
~90 VirtualProtect syscalls into a single pass per code page.

Results (17 tests):
j=4: ~35s → ~3s
j=16: ~25s → ~1.8s

The VirtualProtect calls were the entire startup bottleneck — each one
flushes the instruction cache and modifies page tables, and they were
serialized across all hooks.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

crates/openwa-wormkit/src/hook.rs

@@ -384,8 +384,8 @@ pub unsafe fn install(
     let trampoline = MinHook::create_hook(target, detour)
         .map_err(|e| format!("MinHook create_hook failed for {name}: {e}"))?;
 
-    MinHook::enable_hook(target)
-        .map_err(|e| format!("MinHook enable_hook failed for {name}: {e}"))?;
+    MinHook::queue_enable_hook(target)
+        .map_err(|e| format!("MinHook queue_enable_hook failed for {name}: {e}"))?;
 
     let _ = log_line(&format!(
         "  [REPLACE] {name}: target 0x{:08X}, trampoline 0x{:08X}",

crates/openwa-wormkit/src/lib.rs

@@ -82,6 +82,13 @@ fn run() -> Result<(), String> {
 
     replacements::install_all()?;
 
+    // All hooks were queued during install_all() — now enable them in one
+    // batched VirtualProtect pass instead of one syscall per hook.
+    unsafe {
+        minhook::MinHook::apply_queued()
+            .map_err(|e| format!("MinHook apply_queued failed: {e}"))?;
+    }
+
     let _ = log_line("=== All replacements installed ===");
 
     // Signal the launcher that all hooks are installed and the main thread

crates/openwa-wormkit/src/replacements/file_isolation.rs

@@ -163,8 +163,8 @@ pub fn install() -> Result<(), String> {
         let target = addr as *mut c_void;
         let trampoline = minhook::MinHook::create_hook(target, hook_create_file_a as *mut c_void)
             .map_err(|e| format!("MinHook create_hook failed for CreateFileA: {e}"))?;
-        minhook::MinHook::enable_hook(target)
-            .map_err(|e| format!("MinHook enable_hook failed for CreateFileA: {e}"))?;
+        minhook::MinHook::queue_enable_hook(target)
+            .map_err(|e| format!("MinHook queue_enable_hook failed for CreateFileA: {e}"))?;
 
         ORIG_CREATE_FILE_A.store(trampoline as u32, Ordering::Relaxed);
 

crates/openwa-wormkit/src/replacements/headless.rs

@@ -99,7 +99,7 @@ pub fn install() -> Result<(), String> {
             if let Some(addr) = proc {
                 let target = addr as *mut core::ffi::c_void;
                 if let Ok(trampoline) = minhook::MinHook::create_hook(target, hook_fn) {
-                    let _ = minhook::MinHook::enable_hook(target);
+                    let _ = minhook::MinHook::queue_enable_hook(target);
                     let fn_name = std::str::from_utf8(&name[..name.len() - 1]).unwrap_or("?");
                     let _ = log_line(&format!(
                         "[Headless]   user32!{fn_name} hooked at 0x{:08X}, trampoline 0x{:08X}",
@@ -130,7 +130,7 @@ pub fn install() -> Result<(), String> {
                     target,
                     hook_create_semaphore_a as *mut core::ffi::c_void,
                 ) {
-                    let _ = minhook::MinHook::enable_hook(target);
+                    let _ = minhook::MinHook::queue_enable_hook(target);
                     ORIG_CREATE_SEMAPHORE_A
                         .store(trampoline as u32, core::sync::atomic::Ordering::Relaxed);
                     let _ = log_line(&format!(