fix(ci): telemetry switch trivially satisfied without the row; coverage-lane test fixes

A custom profile that mounts no telemetry-otel row exports nothing, so
DSH_TELEMETRY_DISABLED must not fail its boot (CI exports the switch
globally, which broke the lifecycle-fixture profile). The web-app dist
resolution test accepts the fail-loud unbuilt outcome the CI coverage lane
sees before any build, and the headless spec covers the idle-anchor and
pre-start skip branches under the per-file gate.

packages/bundle/headless/tests/headless.spec.ts

@@ -67,8 +67,11 @@ async function run(events: ScriptedEvent[], options: { promptFails?: boolean } =
   ctx.provide('httpServer', { port: 12345 } as never)
   apply(ctx, { task: 'do the thing' })
   // Quiescence is out of band: give the scripted stream a beat to drain, then
-  // flip the agent idle exactly as the loop would.
+  // flip the agent idle exactly as the loop would. Foreign agents and
+  // non-idle transitions must not settle the run.
   await new Promise(resolve => setTimeout(resolve, 10))
+  ctx.emit('agent/status', { id: 'OTHER' } as Agent, 'idle')
+  ctx.emit('agent/status', { id: 'S1' } as Agent, 'running')
   ctx.emit('agent/status', { id: 'S1' } as Agent, 'idle')
   const code = await exited
   await ctx.fiber.dispose()
@@ -86,6 +89,8 @@ const end = (turn: number, reason: string): ScriptedEvent => ({ type: 'turn/end'
 describe('headless runner', () => {
   it('aggregates to quiescence: last text wins across turns, final turn-end reason maps to exit 0', async () => {
     const { code, out, err } = await run([
+      // Frames before the first turn/start are outside the task interval.
+      { type: 'assistant/message', data: { turn: 0, message: { content: [{ type: 'text', text: 'pre-task noise' }] } } },
       startupTurn,
       // Off-session, non-text, and text-empty frames never affect the aggregate.
       { type: 'assistant/message', sessionId: 'OTHER', data: { turn: 1, message: { content: [{ type: 'text', text: 'other session' }] } } },

packages/bundle/web-app/tests/web-app.spec.ts

@@ -163,9 +163,15 @@ describe('web-app runtime glue', () => {
     await ctx.fiber.dispose()
   })
 
-  it('resolves the real built frontend dist through the package exports', () => {
-    // The production resolver (not the test seam): this checkout builds the
-    // dist, so the resolved path must be the frontend package's index.html.
-    expect(originalResolve()).toMatch(/dist[/\\]index\.html$/)
+  it('resolves the real built frontend dist through the package exports, failing loud unbuilt', () => {
+    // The production resolver (not the test seam). A built checkout resolves
+    // the frontend package's index.html; a dist-less one (the CI coverage
+    // lane runs before any build) must fail with the build hint, never a
+    // silent fallback.
+    try {
+      expect(originalResolve()).toMatch(/dist[/\\]index\.html$/)
+    } catch (error) {
+      expect((error as Error).message).toContain('frontend dist not built')
+    }
   })
 })