@dzhechkov/harness-core 0.8.11 → 0.8.21

package/src/trace-bundle.ts

@@ -8,6 +8,7 @@
  * completed mutation.
  */
 
+import { isNonRunRow } from './ledger-backfill.js';
 import { traceValidateEvent } from './loop-trace.js';
 
 /** The version is part of the wire contract: readers refuse versions they do not understand. */
@@ -209,6 +210,14 @@ function normalizedSlot(value: MemberSlot | BundleMember | null | undefined, abs
 /**
  * Select only rows attributable to this logical run. Slug fallback is deliberately disabled when
  * a row carries any run id: otherwise a foreign loop run sharing a slug leaks into the slice.
+ *
+ * fa-phase-statusline AM-4 (MEASURED on `main` 2026-09-05, not inherited from the review): a
+ * `kind:"phase"` telemetry row carries a `slug` and NO `runId`, so before this filter the slug
+ * fallback matched it and every phase row of the slug entered the bundle. That is worse than a
+ * cosmetic leak — `planImport` writes `bundle.ledger.lines` back into a DESTINATION ledger, so a
+ * telemetry row would arrive there as a row of an imported run. The ledger header's contract is the
+ * same one `planLedgerBackfill` reads: the one-line-one-run invariant applies only to rows WITHOUT
+ * `kind`, so a row that carries one is never a run row.
  */
 export function selectLedgerRows(
   lines: readonly string[] | null | undefined,
@@ -236,6 +245,7 @@ export function selectLedgerRows(
     }
     if (!isObject(row)) continue;
 
+    if (isNonRunRow(row)) continue; // telemetry (kind:"phase"), never a run row — AM-4
     const rowRunId = row['runId'];
     const carriesRunId = nonEmptyString(rowRunId);
     const byRunId = carriesRunId && targetRunId !== null && rowRunId === targetRunId;