@hizliemre/horse-code 0.1.1 → 0.1.2

package/README.md

@@ -33,7 +33,7 @@ Implementation tasks run in parallel, each in its own worktree, and escalate thr
 
 Three constraints drove most of the design:
 
-**One session, one worktree.** A run never writes to the checkout you are working in. Every file an agent writes is committed as a `wip(…)` checkpoint, so a bad change is recoverable and the review always sees the whole diff — an unstaged file is a hole in the evidence.
+**One session, one worktree.** A run never writes to the checkout you are working in — enforced, not intended: `merge`, `commit`, `reset`, `checkout` and the rest are refused outright at the project root, so a finished run hands you a branch and the command to bring it in, and the decision stays yours. Every file an agent writes is committed as a `wip(…)` checkpoint, so a bad change is recoverable and the review always sees the whole diff — an unstaged file is a hole in the evidence.
 
 **Every message an agent reads is a decision point.** A tool that answers "unknown tool: `view_file`" costs a full model turn to say nothing. So error messages name what exists, suggest the near miss, and say what to do next. Much of this repository is that: the difference between a syscall name and an answer.
 

package/dist/{app-UGFQKMLX.js → app-LAJN3TWC.js}

@@ -11,8 +11,8 @@ import {
   restoreTerminal,
   runJob,
   sttySane
-} from "./chunk-2DGO2BUB.js";
-import "./chunk-F2IALVBU.js";
+} from "./chunk-K2VERI5Q.js";
+import "./chunk-3UYA3KUG.js";
 import {
   CODE_TEAM,
   DEFAULT_COUNCIL,
@@ -24,9 +24,9 @@ import {
   describeUnfinished,
   toSlug,
   unfinishedSessions
-} from "./chunk-3XVZXTB6.js";
+} from "./chunk-RPVAIS3P.js";
 import "./chunk-QF4MP6BS.js";
-import "./chunk-HBSC2HT2.js";
+import "./chunk-EQX7BQYN.js";
 import "./chunk-FGVJFMK5.js";
 import {
   saveRoleSkills
@@ -41,7 +41,7 @@ import {
   memoryNote,
   memoryState,
   walkFiles
-} from "./chunk-TOPZL5SU.js";
+} from "./chunk-DRZSUQ7Q.js";
 import "./chunk-2SVAHH5N.js";
 import {
   estimateFreezeSeconds,
@@ -51,7 +51,7 @@ import {
   relTime,
   stripThinking,
   writeHeapSnapshot
-} from "./chunk-YILDXPSI.js";
+} from "./chunk-VPAWRRHL.js";
 import "./chunk-DTWKSZXY.js";
 import {
   traceRootRel
@@ -5904,7 +5904,7 @@ _${saved ? `Saved to your config \u2014 future sessions start with these. ` : ""
       const cwd = process.cwd();
       const main = await recordedMainBranch(cwd) ?? await detectMainBranch(cwd, defaultGitRunner);
       if (!main) return;
-      const { ongoingWork, chooseOngoing } = await import("./ongoing-OV5XROTU.js");
+      const { ongoingWork, chooseOngoing } = await import("./ongoing-XP6WXNI7.js");
       const open = await ongoingWork(defaultGitRunner, cwd, main);
       if (!open.length) return;
       const picked = await chooseOngoing(deps, read, open[0]?.language, open);

package/dist/{chunk-F2IALVBU.js → chunk-3UYA3KUG.js}

@@ -2,16 +2,16 @@ import {
   buildSkillTool,
   editFileTool,
   writeFileTool
-} from "./chunk-3XVZXTB6.js";
+} from "./chunk-RPVAIS3P.js";
 import {
   globTool,
   grepTool,
   readFileTool
-} from "./chunk-TOPZL5SU.js";
+} from "./chunk-DRZSUQ7Q.js";
 import {
   ToolRegistry,
   runStructuredRole
-} from "./chunk-YILDXPSI.js";
+} from "./chunk-VPAWRRHL.js";
 
 // src/engine/language.ts
 function respondIn(language) {

package/dist/{chunk-TOPZL5SU.js → chunk-DRZSUQ7Q.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-2SVAHH5N.js";
 import {
   telemetry
-} from "./chunk-YILDXPSI.js";
+} from "./chunk-VPAWRRHL.js";
 import {
   readBriefSync
 } from "./chunk-DTWKSZXY.js";
@@ -83,6 +83,23 @@ async function sameNameElsewhere(cwd, asked) {
   if (!hits.length) return "";
   return hits.length === 1 ? ` There is one file named \`${base}\` in this project, at \`${hits[0]}\` \u2014 read that if it is what you meant.` : ` Files named \`${base}\` in this project: ${hits.map((h) => `\`${h}\``).join(", ")}.`;
 }
+var MAX_SIBLINGS = 12;
+async function whatIsInThatDirectory(cwd, asked) {
+  const slash = asked.lastIndexOf("/");
+  if (slash <= 0) return "";
+  const dir = asked.slice(0, slash);
+  try {
+    const { readdir: readdir2 } = await import("fs/promises");
+    const entries = await readdir2(resolve(cwd, dir), { withFileTypes: true });
+    const names = entries.filter((e) => !e.name.startsWith(".")).map((e) => e.isDirectory() ? `${e.name}/` : e.name);
+    if (!names.length) return ` \`${dir}/\` exists but is empty.`;
+    const shown = names.slice(0, MAX_SIBLINGS).map((n) => `\`${n}\``).join(", ");
+    const rest = names.length - Math.min(names.length, MAX_SIBLINGS);
+    return ` \`${dir}/\` does exist, and holds: ${shown}${rest > 0 ? `, and ${rest} more` : ""}.`;
+  } catch {
+    return "";
+  }
+}
 function numbered(lines, startLine) {
   const width = String(startLine + lines.length - 1).length;
   return lines.map((l, i) => `${String(startLine + i).padStart(width, " ")}	${l}`).join("\n");
@@ -132,8 +149,12 @@ var readFileTool = {
           isError: true
         };
       }
-      const elsewhere = said.includes("ENOENT") ? await sameNameElsewhere(ctx.cwd, args.path) : "";
-      return { content: `read_file error: ${said}${elsewhere}`, isError: true };
+      let hint = "";
+      if (said.includes("ENOENT")) {
+        hint = await sameNameElsewhere(ctx.cwd, args.path);
+        if (!hint) hint = await whatIsInThatDirectory(ctx.cwd, args.path);
+      }
+      return { content: `read_file error: ${said}${hint}`, isError: true };
     }
     const all = raw.split("\n");
     if (args.offset === void 0 && args.limit === void 0 && raw.length <= MAX_READ_CHARS) {

package/dist/{chunk-HBSC2HT2.js → chunk-EQX7BQYN.js}

@@ -1,7 +1,7 @@
 import {
   ToolRegistry,
   runStructuredRole
-} from "./chunk-YILDXPSI.js";
+} from "./chunk-VPAWRRHL.js";
 
 // src/engine/user-language.ts
 import { z } from "zod";

package/dist/{chunk-2DGO2BUB.js → chunk-K2VERI5Q.js}

@@ -4,7 +4,7 @@ import {
   normalizeQuestion,
   respondIn,
   writerRegistry
-} from "./chunk-F2IALVBU.js";
+} from "./chunk-3UYA3KUG.js";
 import {
   Board,
   LONG_CALL_MS,
@@ -36,14 +36,14 @@ import {
   squashTask,
   worktreeState,
   writeFileTool
-} from "./chunk-3XVZXTB6.js";
+} from "./chunk-RPVAIS3P.js";
 import {
   resolveMainBranch
 } from "./chunk-QF4MP6BS.js";
 import {
   askInUserLanguage,
   inUserLanguage
-} from "./chunk-HBSC2HT2.js";
+} from "./chunk-EQX7BQYN.js";
 import {
   clearCheckpoint,
   isContinuePrompt,
@@ -71,7 +71,7 @@ import {
   relationStrength,
   supersedes,
   verifyAnchors
-} from "./chunk-TOPZL5SU.js";
+} from "./chunk-DRZSUQ7Q.js";
 import {
   ToolRegistry,
   handedOver,
@@ -80,7 +80,7 @@ import {
   sanitizeForJson,
   stripThinking,
   telemetry
-} from "./chunk-YILDXPSI.js";
+} from "./chunk-VPAWRRHL.js";
 import {
   TRACE_INDEX,
   mergeTraceIndexes,
@@ -372,7 +372,52 @@ var AnthropicDecoder = class {
   }
 };
 
+// src/providers/transport.ts
+var SAYS = {
+  ECONNREFUSED: (w) => `nothing is listening at ${w} \u2014 connection refused`,
+  ENOTFOUND: (w) => `${w} could not be resolved \u2014 no such host`,
+  EAI_AGAIN: (w) => `${w} could not be resolved right now \u2014 DNS is not answering`,
+  ECONNRESET: (w) => `${w} closed the connection`,
+  EPIPE: (w) => `${w} closed the connection while it was being written to`,
+  ETIMEDOUT: (w) => `${w} did not accept a connection in time`,
+  EHOSTUNREACH: (w) => `${w} is unreachable from this machine`,
+  ENETUNREACH: (w) => `${w} is unreachable \u2014 no route`,
+  CERT_HAS_EXPIRED: (w) => `${w} presented an expired TLS certificate`,
+  DEPTH_ZERO_SELF_SIGNED_CERT: (w) => `${w} presented a self-signed TLS certificate`,
+  UNABLE_TO_VERIFY_LEAF_SIGNATURE: (w) => `${w} presented a certificate that could not be verified`
+};
+function causeCode(e) {
+  const queue = [e];
+  for (let i = 0; i < queue.length && i < 32; i++) {
+    const cur = queue[i];
+    if (typeof cur !== "object" || cur === null) continue;
+    const code = cur.code;
+    if (typeof code === "string" && code) return code;
+    const errors = cur.errors;
+    if (Array.isArray(errors)) queue.push(...errors);
+    const cause = cur.cause;
+    if (cause !== void 0) queue.push(cause);
+  }
+  return void 0;
+}
+function origin(url) {
+  try {
+    return new URL(url).origin;
+  } catch {
+    return url;
+  }
+}
+function transportMessage(e, url) {
+  const said = e instanceof Error ? e.message : String(e);
+  const code = causeCode(e);
+  if (code === void 0) return said;
+  const where = origin(url);
+  const say = SAYS[code];
+  return say ? `${say(where)} (${code})` : `${where} could not be reached (${code})`;
+}
+
 // src/providers/omniroute.ts
+var UNPRODUCTIVE_BUDGET = 3;
 async function* withIdleTimeout(source, idleMs, onIdle) {
   const it = source[Symbol.asyncIterator]();
   for (; ; ) {
@@ -457,6 +502,11 @@ var OmniRouteProvider = class {
     if (this.apiKey) headers.Authorization = `Bearer ${this.apiKey}`;
     const idleAc = new AbortController();
     const combined = AbortSignal.any([signal, idleAc.signal]);
+    let silent = false;
+    const firstByte = setTimeout(() => {
+      silent = true;
+      idleAc.abort();
+    }, this.idleMs);
     let res;
     try {
       res = await this.fetchFn(`${this.baseUrl}${native ? "/v1/messages" : "/api/v1/chat/completions"}`, {
@@ -467,7 +517,17 @@ var OmniRouteProvider = class {
         body: JSON.stringify(sanitizeForJson(native ? toAnthropicBody(req) : toOpenAIBody(req))),
         signal: combined
       });
+      clearTimeout(firstByte);
     } catch (e) {
+      clearTimeout(firstByte);
+      if (silent && !isCallerAbort(signal)) {
+        yield {
+          type: "error",
+          retryable: true,
+          message: `the model sent nothing at all for ${Math.round(this.idleMs / 1e3)}s \u2014 not even a response header`
+        };
+        return;
+      }
       if (isCallerAbort(signal)) {
         yield { type: "error", message: "cancelled", retryable: false };
         return;
@@ -476,7 +536,7 @@ var OmniRouteProvider = class {
         yield { type: "error", message: "the model did not answer within its deadline", retryable: true };
         return;
       }
-      yield { type: "error", message: e instanceof Error ? e.message : String(e), retryable: true };
+      yield { type: "error", message: transportMessage(e, this.baseUrl), retryable: true };
       return;
     }
     if (!res.ok) {
@@ -504,9 +564,17 @@ var OmniRouteProvider = class {
     let sawText = false;
     let usage;
     const billed = {};
+    let producedAt = Date.now();
+    const budget = this.idleMs * UNPRODUCTIVE_BUDGET;
+    const noProduction = () => Date.now() - producedAt > budget;
     try {
       for await (const line of withIdleTimeout(parseSSE(stream), this.idleMs, () => idleAc.abort())) {
+        if (noProduction()) {
+          idleAc.abort();
+          throw new Error(`omniroute: the stream stayed open for ${Math.round(budget / 1e3)}s without the model producing anything \u2014 aborted`);
+        }
         if (line.kind === "comment") {
+          producedAt = Date.now();
           const m = line.value.match(/^x-omniroute-tokens-(in|out)\s*=\s*(\d+)/i);
           if (m) billed[m[1] === "in" ? "in" : "out"] = Number(m[2]);
           continue;
@@ -517,7 +585,13 @@ var OmniRouteProvider = class {
         } catch {
           continue;
         }
+        const c = chunk;
+        if (c.usage !== void 0 || (c.choices ?? []).some((ch) => ch.finish_reason || Object.keys(ch.delta ?? {}).length > 0)) {
+          producedAt = Date.now();
+        }
         if (decoder) {
+          const type = chunk.type;
+          if (type !== void 0 && type !== "ping") producedAt = Date.now();
           for (const ev of decoder.push(chunk)) yield ev;
           continue;
         }
@@ -560,7 +634,7 @@ var OmniRouteProvider = class {
         yield { type: "error", message: "the model did not answer within its deadline", retryable: true };
         return;
       }
-      yield { type: "error", message: e instanceof Error ? e.message : String(e), retryable: true };
+      yield { type: "error", message: transportMessage(e, this.baseUrl), retryable: true };
       return;
     }
     const cut = sawText ? void 0 : [...toolCalls.values()].find((a) => !argumentsComplete(a.arguments));
@@ -3500,7 +3574,7 @@ async function runUpstream(deps, ensureWorktree, prompt, askUser, maxRounds, his
     emitPhase("verify");
     const cwd = await documentWorkdir(process.cwd(), prompt, ensureWorktree, r.title);
     laneCheckpoint(cwd, "verify", resume, prompt, r);
-    const { runVerify, describeVerify, currentBranchOf } = await import("./verify-WQ3GHION.js");
+    const { runVerify, describeVerify, currentBranchOf } = await import("./verify-3R7DGUSI.js");
     const branch = await currentBranchOf(cwd);
     const res = await runVerify({
       deps,
@@ -3543,11 +3617,11 @@ async function runUpstream(deps, ensureWorktree, prompt, askUser, maxRounds, his
   if (!resume && !hasPreservedWork && routeIntent(r.intent) === "pipeline") {
     const cwd = workingIn?.() ?? process.cwd();
     emitPhase("sizing");
-    const { sizeRequest } = await import("./triage-2J3T5PVQ.js");
+    const { sizeRequest } = await import("./triage-ES5OHZOS.js");
     const size = await sizeRequest(deps, cwd, r.refinedPrompt);
     let small = size.verdict === "small";
     if (size.verdict === "unsure") {
-      const { describeSizeDoubt } = await import("./triage-2J3T5PVQ.js");
+      const { describeSizeDoubt } = await import("./triage-ES5OHZOS.js");
       const answer = await askInUserLanguage(
         deps,
         askUser,
@@ -3565,8 +3639,8 @@ Which is it?`,
     if (small) {
       emitPhase("small change");
       emit({ kind: "note", text: `\u26A1 Small change \u2014 ${size.reason}. No branch, no spec, no plan.` });
-      const { runSmallChange, describeSmallChange } = await import("./fix-HBBOTUWM.js");
-      const { currentBranchOf } = await import("./verify-WQ3GHION.js");
+      const { runSmallChange, describeSmallChange } = await import("./fix-CMARU6JR.js");
+      const { currentBranchOf } = await import("./verify-3R7DGUSI.js");
       const res = await runSmallChange(deps, cwd, r.title, r.refinedPrompt, size);
       return {
         intent: r.intent,
@@ -4370,14 +4444,7 @@ async function runJob(deps, opts) {
       }
     }
     if (!wave.pr && reviewable) {
-      const landed = await deps.manager.deliverLocally(session, opts.fromBranch);
-      if (landed.ok) {
-        wave.delivery.mergedInto = opts.fromBranch;
-        emit({ kind: "note", text: `\u{1F4E6} Merged into \`${opts.fromBranch}\` \u2014 the files are in your working copy.` });
-      } else {
-        wave.delivery.notMerged = landed.why;
-        emit({ kind: "note", text: `\u{1F4E6} Not merged (${landed.why}) \u2014 the work is on \`${wave.delivery.branch}\`.` });
-      }
+      emit({ kind: "note", text: `\u{1F4E6} The work is on \`${wave.delivery.branch}\` \u2014 merge it when you are ready.` });
     }
     await curate(deps, up.refinedPrompt ?? opts.prompt, board.list(), deferredAll, session.baseWorktree);
     emit({ kind: "phase", phase: "report" });

package/dist/{chunk-JWAEW7AJ.js → chunk-KOWMHL23.js}

@@ -2,7 +2,7 @@ import {
   Board,
   refreshAfterChange,
   runTaskCycle
-} from "./chunk-3XVZXTB6.js";
+} from "./chunk-RPVAIS3P.js";
 import {
   defaultGitRunner
 } from "./chunk-IW2KBAVZ.js";

package/dist/{chunk-3XVZXTB6.js → chunk-RPVAIS3P.js}

@@ -22,7 +22,7 @@ import {
   readFileTool,
   reinforceTouched,
   reinforceUsed
-} from "./chunk-TOPZL5SU.js";
+} from "./chunk-DRZSUQ7Q.js";
 import {
   ToolRegistry,
   handedOver,
@@ -30,7 +30,7 @@ import {
   runToCompletion,
   telemetry,
   truncateSafe
-} from "./chunk-YILDXPSI.js";
+} from "./chunk-VPAWRRHL.js";
 import {
   loadTraceIndex,
   pruneTraces,
@@ -262,6 +262,43 @@ function sessionName(now, taken) {
   }
   return `${day}_${Date.now()}`;
 }
+var FORBIDDEN_AT_ROOT = /* @__PURE__ */ new Set([
+  "merge",
+  "rebase",
+  "cherry-pick",
+  "revert",
+  "reset",
+  "checkout",
+  "switch",
+  "restore",
+  "commit",
+  "am",
+  "apply",
+  "stash",
+  "pull",
+  "clean"
+]);
+var TAKES_A_VALUE = /* @__PURE__ */ new Set(["-c", "-C", "--git-dir", "--work-tree", "--namespace", "--exec-path", "--config-env"]);
+function gitVerb(args) {
+  for (let i = 0; i < args.length; i++) {
+    const a = args[i];
+    if (a === void 0) continue;
+    if (!a.startsWith("-")) return a;
+    if (TAKES_A_VALUE.has(a)) i++;
+  }
+  return void 0;
+}
+function guardRoot(run, repoRoot) {
+  return async (args, cwd) => {
+    const verb = gitVerb(args);
+    if (cwd === repoRoot && verb !== void 0 && FORBIDDEN_AT_ROOT.has(verb)) {
+      throw new Error(
+        `refusing to run \`git ${verb}\` in the project checkout (${repoRoot}). A session's work stays on its own branch and in its own worktree; bringing it in is the user's decision, taken in their own time.`
+      );
+    }
+    return run(args, cwd);
+  };
+}
 var WorktreeManager = class {
   repoRoot;
   /** The project checkout this manager was built for — where per-project settings and the remote live. */
@@ -281,12 +318,23 @@ var WorktreeManager = class {
    */
   worktreeHome;
   git;
+  /**
+   * The unguarded runner, for the one case that legitimately needs a forbidden verb: turning a directory
+   * that is not a repository into one.
+   *
+   * `git worktree add` needs a commit to branch from, and an empty repository has none — so a first commit
+   * is not delivery, it is the precondition for ever leaving the root alone again. It runs only when there
+   * is no HEAD, so there is no branch to disturb and no work to overwrite. Named rather than flagged, so
+   * grepping for it finds every use.
+   */
+  rawGit;
   /** Injectable clock: a session's NAME is the day it opened, so a test has to be able to say which day. */
   now;
   constructor(deps) {
     this.repoRoot = deps.repoRoot;
     this.worktreeHome = deps.worktreeHome ?? deps.repoRoot;
-    this.git = deps.runGit ?? defaultGitRunner;
+    this.rawGit = deps.runGit ?? defaultGitRunner;
+    this.git = guardRoot(this.rawGit, deps.repoRoot);
     this.now = deps.now ?? (() => /* @__PURE__ */ new Date());
   }
   /** Runs git; nonzero exit → throws a clear error. Returns output (stdout). */
@@ -318,7 +366,8 @@ var WorktreeManager = class {
     await this.ensureRepo();
     const head = await this.git(["rev-parse", "--verify", "--quiet", "HEAD"], this.repoRoot);
     if (head.code === 0) return;
-    await this.run(["commit", "--allow-empty", "-m", "hc: initial commit"], this.repoRoot);
+    const r = await this.rawGit(["commit", "--allow-empty", "-m", "hc: initial commit"], this.repoRoot);
+    if (r.code !== 0) throw new Error(`git commit --allow-empty failed (${r.code}): ${(r.stderr || r.stdout).trim()}`);
   }
   /**
    * The ref to base the session's worktree on. Uses `fromBranch` when it resolves; otherwise falls back to
@@ -602,39 +651,6 @@ ${out.slice(0, MAX_DIFF_CHARS)}`;
     if (check.code !== 0) return;
     await this.run(["push", remote, session.baseBranch], session.baseWorktree);
   }
-  /**
-   * Lands the finished work on the branch the job started from, in the main working copy.
-   *
-   * Without this, a project with no git remote gets nothing: `push` is a no-op and a pull request has
-   * nowhere to go, so every completed task sits on `hc/<job>/base` — invisible from the repository root.
-   * A user who watched thirty tasks succeed then finds an empty directory and cannot run the project.
-   *
-   * A pull request is delivery when there is a remote to open it against. When there is not, merging is.
-   *
-   * Refuses rather than forces. A dirty working copy or a checkout on some other branch means the user has
-   * something in progress, and overwriting that to deliver would be a worse failure than not delivering:
-   * the branch still exists and the caller reports how to merge it by hand.
-   */
-  async deliverLocally(session, targetBranch) {
-    const dirty = await this.git(["status", "--porcelain"], this.repoRoot);
-    if (dirty.code !== 0) return { ok: false, why: "the repository could not be read" };
-    if (dirty.stdout.split("\n").some((l) => l.trim() && !l.startsWith("??"))) {
-      return { ok: false, why: "the working copy has uncommitted changes" };
-    }
-    const head = await this.git(["symbolic-ref", "--short", "HEAD"], this.repoRoot);
-    const current = head.stdout.trim();
-    if (head.code !== 0 || !current) return { ok: false, why: "the repository is not on a branch" };
-    if (current !== targetBranch) return { ok: false, why: `the repository is on \`${current}\`, not \`${targetBranch}\`` };
-    const count = await this.git(["rev-list", "--count", `${targetBranch}..${session.baseBranch}`], this.repoRoot);
-    const commits = Number(count.stdout.trim()) || 0;
-    if (!commits) return { ok: true, commits: 0 };
-    const merged = await this.git(
-      ["merge", "--no-ff", "-m", `hc: ${session.jobSlug}`, session.baseBranch],
-      this.repoRoot
-    );
-    if (merged.code !== 0) return { ok: false, why: "the merge did not apply cleanly" };
-    return { ok: true, commits };
-  }
   async openPR(session, adapter, input) {
     const res = await adapter.createPR({
       branch: session.baseBranch,
@@ -2148,7 +2164,7 @@ function destroysWork(command) {
   for (const seg of command.split(/&&|\|\||;|\|/)) {
     const m = /^\s*git\s+(.*)$/.exec(seg.trim());
     if (!m) continue;
-    const rest = (m[1] ?? "").replace(/^(?:-\S+\s+)*/, "").trim();
+    const rest = (m[1] ?? "").replace(/^(?:(?:-[cC]|--(?:git-dir|work-tree|namespace|exec-path|config-env))\s+\S+|-\S+)\s+/g, "").trim();
     const hit = DESTROYS_WORK.find((d) => d.re.test(rest));
     if (hit) return hit.what;
   }

package/dist/{chunk-YILDXPSI.js → chunk-VPAWRRHL.js}

@@ -1241,6 +1241,23 @@ var ToolRegistry = class {
 };
 
 // src/agent/structured.ts
+function valueAt(args, path) {
+  let cur = args;
+  for (const key of path) {
+    if (typeof cur !== "object" || cur === null) return void 0;
+    cur = cur[key];
+  }
+  return cur;
+}
+function whatWasWrong(issues, args) {
+  return issues.map((i) => {
+    const where = i.path.length ? i.path.join(".") : void 0;
+    const got = valueAt(args, i.path);
+    const shown = got === void 0 ? "nothing" : JSON.stringify(got);
+    const head = where ? `${where}: ${i.message}` : i.message;
+    return `${head} \u2014 got ${shown.length > 120 ? `${shown.slice(0, 120)}\u2026` : shown}`;
+  }).join("; ");
+}
 function buildSubmitTool(schema) {
   let box;
   const tool = {
@@ -1251,10 +1268,7 @@ function buildSubmitTool(schema) {
     run: async (rawArgs) => {
       const parsed = schema.safeParse(rawArgs);
       if (!parsed.success) {
-        return {
-          content: `submit: invalid output: ${parsed.error.issues.map((i) => i.message).join("; ")}`,
-          isError: true
-        };
+        return { content: `submit: invalid output: ${whatWasWrong(parsed.error.issues, rawArgs)}`, isError: true };
       }
       box = { value: parsed.data };
       return { content: "received", isError: false };

package/dist/{chunk-7TBYMFMG.js → chunk-WYQBRCKY.js}

@@ -5,11 +5,11 @@ import {
   memoryHints,
   readFileTool,
   reinforceUsed
-} from "./chunk-TOPZL5SU.js";
+} from "./chunk-DRZSUQ7Q.js";
 import {
   ToolRegistry,
   runStructuredRole
-} from "./chunk-YILDXPSI.js";
+} from "./chunk-VPAWRRHL.js";
 
 // src/engine/triage.ts
 import { z } from "zod";

package/dist/cli.js

@@ -14,11 +14,11 @@ import {
   restoreTerminal,
   runJob,
   sttySane
-} from "./chunk-2DGO2BUB.js";
+} from "./chunk-K2VERI5Q.js";
 import {
   listOmniRouteModels
 } from "./chunk-O74BDQKS.js";
-import "./chunk-F2IALVBU.js";
+import "./chunk-3UYA3KUG.js";
 import {
   CODE_TEAM,
   DEFAULT_COUNCIL,
@@ -34,9 +34,9 @@ import {
   buildTeamRegistry,
   mainWorktreeRoot,
   toSlug
-} from "./chunk-3XVZXTB6.js";
+} from "./chunk-RPVAIS3P.js";
 import "./chunk-QF4MP6BS.js";
-import "./chunk-HBSC2HT2.js";
+import "./chunk-EQX7BQYN.js";
 import "./chunk-FGVJFMK5.js";
 import {
   parseFrontmatter
@@ -60,7 +60,7 @@ import {
 import {
   InjectionLog,
   memoryNote
-} from "./chunk-TOPZL5SU.js";
+} from "./chunk-DRZSUQ7Q.js";
 import "./chunk-2SVAHH5N.js";
 import {
   Telemetry,
@@ -70,7 +70,7 @@ import {
   stripThinking,
   telemetry,
   writeHeapSnapshot
-} from "./chunk-YILDXPSI.js";
+} from "./chunk-VPAWRRHL.js";
 import {
   briefStatus
 } from "./chunk-DTWKSZXY.js";
@@ -825,16 +825,18 @@ var FileSink = class {
     return this.dropped;
   }
   /**
-   * A stream that failed to open never calls `end`'s callback, and this awaited it forever.
+   * `flush()` is awaited as a run finishes, so whatever happens here decides whether the run can end.
    *
-   * `createWriteStream` does not throw when the path cannot be opened — it emits `error` on a later tick. So
+   * `createWriteStream` does not throw when the path cannot be opened — it emits `error` on a later tick, so
    * the constructor's `catch` does not run, `stream` is set, and whether the error handler has cleared it by
-   * the time anything flushes is a race with the event loop. Lose that race and `end(cb)` is called on a
-   * broken stream, the callback is never invoked, and the promise has nothing left to resolve it.
+   * the time anything flushes is a race with the event loop. Losing that race means `end(cb)` is called on a
+   * stream that never opened.
    *
-   * The observer then outlives what it observes: `flush()` is awaited as a run finishes, so a machine that
-   * cannot write the log cannot finish the run either. The `error` listener is the second exit, and either
-   * one is enough.
+   * The `error` listener is a second exit for that case. It was added believing the callback would otherwise
+   * never fire and hang the run — an honest guess that has since been TESTED and did not hold: with the
+   * listener removed, an EISDIR stream still resolves (test/obs/telemetry.test.ts). It stays because it
+   * costs one line and closes a path nothing else covers, not because a hang was ever reproduced through it.
+   * The 3h42m CI hang this was written during had a different cause, in the tests themselves.
    */
   async flush() {
     const s = this.stream;
@@ -959,12 +961,8 @@ function whereItLanded(path) {
   return `Written on ${branch ? `branch \`${branch}\`` : "its own branch"}, in the worktree at \`${base}\`. Review it there, then merge it in.`;
 }
 function describeDelivery(d) {
-  if (d.mergedInto) {
-    return `Merged into \`${d.mergedInto}\` \u2014 the files are in your working copy.`;
-  }
   return [
     `**The work is on branch \`${d.branch}\`** \u2014 not in your working copy yet.`,
-    d.notMerged ? `Not merged: ${d.notMerged}.` : "",
     "",
     "To bring it in:",
     "```",
@@ -973,6 +971,36 @@ function describeDelivery(d) {
     `Or inspect it first: \`git diff HEAD...${d.branch}\` \xB7 worktree: \`${d.worktree}\``
   ].filter((l) => l !== void 0).join("\n");
 }
+var DELIVERED_SHARE = 0.5;
+function describeOutcome(w) {
+  if (w.status === "completed") return w.pr ? `PR: ${w.pr.url}` : "all tasks merged";
+  const stuck = w.failed.length + w.skipped.length;
+  const total = w.waves.flat().length || stuck;
+  const merged = Math.max(0, total - stuck);
+  const parts = [
+    w.failed.length ? `${w.failed.length} failed` : "",
+    w.skipped.length ? `${w.skipped.length} blocked behind them` : ""
+  ].filter(Boolean).join(", ");
+  const head = `${merged} of ${total} tasks merged`;
+  return merged / total < DELIVERED_SHARE ? `\u26A0\uFE0F ${head} \u2014 ${parts}. Most of the plan did not land; the feature is not built.` : `${head} \u2014 ${parts}.`;
+}
+function describeTraceFailures(failed) {
+  if (!failed.length) return "";
+  const byError = /* @__PURE__ */ new Map();
+  for (const f of failed) byError.set(f.error, [...byError.get(f.error) ?? [], f.file]);
+  if (byError.size === 1) {
+    const [error, files] = [...byError][0];
+    const shown = files.slice(0, 3).map((f) => `- \`${f}\``);
+    if (files.length > shown.length) shown.push(`- \u2026and ${files.length - shown.length} more`);
+    return `\u26A0\uFE0F ${failed.length} failed, all for the same reason \u2014 ${error}
+${shown.join("\n")}`;
+  }
+  const rows = [...byError].sort((a, b) => b[1].length - a[1].length).slice(0, 5).map(([error, files]) => `- ${files.length}\xD7 ${error} (e.g. \`${files[0]}\`)`);
+  const rest = byError.size - rows.length;
+  if (rest > 0) rows.push(`- \u2026and ${rest} further cause(s)`);
+  return `\u26A0\uFE0F ${failed.length} failed:
+${rows.join("\n")}`;
+}
 function renderResult(res) {
   if (res.kind === "chat") return stripThinking(res.response);
   if (res.kind === "rejected") return `Not approved (stopped at the ${res.stage} stage).`;
@@ -984,7 +1012,7 @@ function renderResult(res) {
 
 _${whereItLanded(res.path)}_` : `The constitution phase finished without writing \`${res.path}\` \u2014 nothing was changed.`;
   }
-  const outcome = res.wave.status === "completed" ? res.wave.pr ? `PR: ${res.wave.pr.url}` : "all tasks completed" : `Partial: ${res.wave.failed.length} failed, ${res.wave.skipped.length} skipped`;
+  const outcome = describeOutcome(res.wave);
   const rev = res.revision ? `
 revision: ${res.revision.status}` : "";
   return `${stripThinking(res.report)}
@@ -1150,7 +1178,7 @@ async function main(argv) {
   const useTui = shouldUseTui(!!process.stdin.isTTY, !!process.stdout.isTTY, !!args.noTui);
   if (!args.prompt) {
     if (useTui) {
-      const { runTuiRepl } = await import("./app-UGFQKMLX.js");
+      const { runTuiRepl } = await import("./app-LAJN3TWC.js");
       const { fetchCatalog, makeProbe, discoverSources } = await import("./discover-5URG7C4J.js");
       const { loadSourceCache, saveSourceCache } = await import("./source-cache-XEK5WN7I.js");
       const manualSources = config.modelSources.length > 0;
@@ -1284,13 +1312,10 @@ _Every agent can query it: \`graph_impact\` (blast radius), \`graph_trace\`, \`g
         if (res.upToDate) bits.push(`${res.upToDate} already current`);
         if (res.pruned.length) bits.push(`${res.pruned.length} removed for deleted files`);
         if (res.wroteGitignore) bits.push("\n\n_Added .gitignore rules: traces are committed, the AST cache is not._");
-        if (res.failed.length) {
-          bits.push(`
+        const failures = describeTraceFailures(res.failed);
+        return `${bits.join(" \xB7 ")}${failures ? `
 
-\u26A0\uFE0F ${res.failed.length} failed:
-${res.failed.slice(0, 5).map((f) => `- \`${f.file}\` \u2014 ${f.error}`).join("\n")}`);
-        }
-        return `${bits.join(" \xB7 ")}
+${failures}` : ""}
 
 _Committed with the repo, so every clone starts with them. Agents read one with \`graph_trace\`._`;
       };
@@ -1333,7 +1358,7 @@ _Committed with the repo, so every clone starts with them. Agents read one with
     ...args.revisionRounds !== void 0 && { revisionRounds: args.revisionRounds }
   };
   if (useTui) {
-    const { runTui } = await import("./app-UGFQKMLX.js");
+    const { runTui } = await import("./app-LAJN3TWC.js");
     const res = await runTui({ buildDeps, job });
     console.log(renderResult(res));
     return;
@@ -1380,7 +1405,10 @@ if (isMainModule()) {
   });
 }
 export {
+  DELIVERED_SHARE,
   describeDelivery,
+  describeOutcome,
+  describeTraceFailures,
   main,
   parseArgs,
   renderResult,

package/dist/{fix-HBBOTUWM.js → fix-CMARU6JR.js}

@@ -8,14 +8,14 @@ import {
   dirtyPaths,
   runFix,
   runSmallChange
-} from "./chunk-JWAEW7AJ.js";
-import "./chunk-3XVZXTB6.js";
+} from "./chunk-KOWMHL23.js";
+import "./chunk-RPVAIS3P.js";
 import "./chunk-FGVJFMK5.js";
 import "./chunk-NNTIACT4.js";
 import "./chunk-IW2KBAVZ.js";
-import "./chunk-TOPZL5SU.js";
+import "./chunk-DRZSUQ7Q.js";
 import "./chunk-2SVAHH5N.js";
-import "./chunk-YILDXPSI.js";
+import "./chunk-VPAWRRHL.js";
 import "./chunk-DTWKSZXY.js";
 import "./chunk-FFYBY2NA.js";
 import "./chunk-PGOYDOI4.js";

package/dist/{ongoing-OV5XROTU.js → ongoing-XP6WXNI7.js}

@@ -3,12 +3,12 @@ import {
 } from "./chunk-YBWTCXUS.js";
 import {
   askInUserLanguage
-} from "./chunk-HBSC2HT2.js";
+} from "./chunk-EQX7BQYN.js";
 import {
   checkpointMtime,
   readCheckpoint
 } from "./chunk-FGVJFMK5.js";
-import "./chunk-YILDXPSI.js";
+import "./chunk-VPAWRRHL.js";
 import "./chunk-B67BK5GQ.js";
 
 // src/engine/ongoing.ts

package/dist/{triage-2J3T5PVQ.js → triage-ES5OHZOS.js}

@@ -8,10 +8,10 @@ import {
   describeSizeDoubt,
   sizeRequest,
   triageFinding
-} from "./chunk-7TBYMFMG.js";
-import "./chunk-TOPZL5SU.js";
+} from "./chunk-WYQBRCKY.js";
+import "./chunk-DRZSUQ7Q.js";
 import "./chunk-2SVAHH5N.js";
-import "./chunk-YILDXPSI.js";
+import "./chunk-VPAWRRHL.js";
 import "./chunk-DTWKSZXY.js";
 import "./chunk-FFYBY2NA.js";
 import "./chunk-PGOYDOI4.js";

package/dist/{verify-WQ3GHION.js → verify-3R7DGUSI.js}

@@ -3,11 +3,11 @@ import {
   describeFix,
   dirtyPaths,
   runFix
-} from "./chunk-JWAEW7AJ.js";
+} from "./chunk-KOWMHL23.js";
 import {
   buildAskUserTool,
   respondIn
-} from "./chunk-F2IALVBU.js";
+} from "./chunk-3UYA3KUG.js";
 import {
   buildRememberTool,
   buildSkillTool,
@@ -22,11 +22,11 @@ import {
   specsDir,
   verifyPaths,
   writeFileTool
-} from "./chunk-3XVZXTB6.js";
+} from "./chunk-RPVAIS3P.js";
 import {
   askInUserLanguage,
   inUserLanguage
-} from "./chunk-HBSC2HT2.js";
+} from "./chunk-EQX7BQYN.js";
 import "./chunk-FGVJFMK5.js";
 import "./chunk-NNTIACT4.js";
 import {
@@ -35,7 +35,7 @@ import {
 import {
   describeEscalation,
   triageFinding
-} from "./chunk-7TBYMFMG.js";
+} from "./chunk-WYQBRCKY.js";
 import {
   BATCH_TOOLS_NOTE,
   contextTools,
@@ -45,13 +45,13 @@ import {
   projectToolsNote,
   readFileTool,
   reinforceUsed
-} from "./chunk-TOPZL5SU.js";
+} from "./chunk-DRZSUQ7Q.js";
 import "./chunk-2SVAHH5N.js";
 import {
   ToolRegistry,
   handedOver,
   runToCompletion
-} from "./chunk-YILDXPSI.js";
+} from "./chunk-VPAWRRHL.js";
 import "./chunk-DTWKSZXY.js";
 import "./chunk-FFYBY2NA.js";
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hizliemre/horse-code",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Terminal coding agent: one sentence to reviewed, committed code — in its own git worktree",
   "license": "MIT",
   "author": "Emre Hızlı <hizliemre@gmail.com>",