test: isolate workerprobe server state

Author: ddx-checkpoint

CHANGELOG.md

@@ -11,7 +11,9 @@ the optional security scans no longer make the workflow invalid when their
 secrets are unset. The frontend dependency graph also overrides `devalue` to a
 patched version so the high-severity Bun audit finding is cleared. Command test
 fixtures now suppress background update checks so CI temp-directory cleanup is
-not racing asynchronous network/cache work.
+not racing asynchronous network/cache work. The workerprobe integration test
+also isolates server state before constructing its test server, preventing CI's
+state-pollution guard from seeing worker fixture projects.
 
 ### Fixed: autonomous provider-connectivity recovery
 

cli/internal/agent/workerprobe/probe_integration_test.go

@@ -51,6 +51,12 @@ func TestWorker_RealAttemptEvents_FlowToServer(t *testing.T) {
 	proj := buildFixtureRepo(t, binPath, "standard")
 	bin := binPath
 
+	// Isolate server state before constructing the server. New() registers
+	// the project immediately, so setting XDG_DATA_HOME later still pollutes
+	// the process-wide state used by CI's server-state guard.
+	xdg := t.TempDir()
+	t.Setenv("XDG_DATA_HOME", xdg)
+
 	// Real server — same constructor, same Handler, same requireTrusted gate.
 	srv := serverpkg.New(":0", proj)
 	ts := httptest.NewServer(srv.Handler())
@@ -59,7 +65,6 @@ func TestWorker_RealAttemptEvents_FlowToServer(t *testing.T) {
 	// Production discovery path: write server.addr under XDG_DATA_HOME so
 	// the worker subprocess (running with the same XDG_DATA_HOME) finds it
 	// via serverpkg.ReadServerAddr.
-	xdg := t.TempDir()
 	addrDir := filepath.Join(xdg, "ddx")
 	if err := os.MkdirAll(addrDir, 0o700); err != nil {
 		t.Fatalf("mkdir addr dir: %v", err)