fix(telemetry): dispose the response body so no socket outlives shutdown

undici keeps the connection occupied until the response body is consumed
or canceled, and telemetry never reads it — on both the success and
non-2xx paths the socket could linger after shutdown() returned. Cancel
the body before the tracked promise resolves, with coverage for both
paths (bodyUsed asserted after shutdown), and the live endpoint
re-verified with disposal in place.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: clay-good

src/telemetry/index.ts

@@ -41,6 +41,12 @@ const pendingEvents = new Set<Promise<void>>();
 async function safeTelemetryFetch(url: string, options: RequestInit): Promise<Response> {
   try {
     const response = await fetch(url, options);
+    // Telemetry never reads the body, but undici keeps the connection
+    // occupied until the body is consumed or canceled — dispose of it on
+    // every path so no socket outlives shutdown().
+    if (response.body) {
+      await response.body.cancel();
+    }
     if (response.ok) {
       return response;
     }

test/telemetry/index.test.ts

@@ -164,6 +164,30 @@ describe('telemetry/index', () => {
       await trackCommand('test', '1.0.0');
       await expect(shutdown()).resolves.not.toThrow();
     });
+
+    it('should dispose the response body of a successful response before the event settles', async () => {
+      // Undici holds the connection until the body is consumed or canceled;
+      // an undisposed body would let the socket outlive shutdown().
+      enableTelemetry();
+      const response = new Response('{"status": 1}', { status: 200 });
+      fetchSpy.mockResolvedValueOnce(response);
+
+      await trackCommand('test', '1.0.0');
+      await shutdown();
+
+      expect(response.bodyUsed).toBe(true);
+    });
+
+    it('should dispose the response body of a non-2xx response before the event settles', async () => {
+      enableTelemetry();
+      const response = new Response('rate limited', { status: 429 });
+      fetchSpy.mockResolvedValueOnce(response);
+
+      await trackCommand('test', '1.0.0');
+      await shutdown();
+
+      expect(response.bodyUsed).toBe(true);
+    });
   });
 
   describe('shutdown', () => {