[igorls]

Fixes #40.

• New console module with errln!/err!/outln! that drop write errors; all non-test eprintln!/println! calls use them, so 2>&1 | head -3 no longer panics (exit 101).
• A BrokenPipe while writing the document to -o - is reported as BrokenPipe (not a pile of per-file errors) and main exits 0, like other pipeline tools.
• E2E tests spawn the built binary with a pipe whose read end is already closed (stderr, then stdout) and check exit status, output file and no panic. They fail on master (verified) and pass here.

Follow-up: the demo script (#43) pipes through sed -n because of this bug; it can go back to head after this lands.
Note: CHANGELOG gets an ## Unreleased entry; later PRs in this series add to the same section, so merge in order or ask me to rebase.

[Copilot]

🟡 Changes recommended

The token-budget truncation notice can still convert a closed stdout pipe into a nonzero exit.

1 open finding

• Treat truncation notice BrokenPipe as a closed stdout pipe · New

What changed in this PR

Prevents closed stdout/stderr pipes from panicking or prematurely aborting document generation.

Changes:

• Adds best-effort console output macros.
• Treats stdout BrokenPipe as successful pipeline termination.
• Adds end-to-end closed-pipe regression tests.

File	Description
src/​console.rs	Adds non-panicking console macros.
src/​main.rs	Handles BrokenPipe as success.
src/​lib.rs	Migrates console output to safe macros.
src/​markdown.rs	Propagates parallel output pipe closure.
src/​tree.rs	Uses safe stdout output.
src/​file_utils.rs	Uses safe stderr prompting.
src/​content_filter.rs	Uses safe skip reporting.
src/​config.rs	Uses safe configuration warnings.
src/​cache.rs	Uses safe migration notices.
tests/​test_closed_pipes.rs	Tests closed stdout/stderr behavior.
CHANGELOG.md	Documents the fix.

🧠 Review effort: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[igorls]

Addressed review: the truncation-notice write now also records BrokenPipe. Note: with a reader that is already gone, the header write fails first, so the added token-budget test is a sanity check; the mid-stream case is covered by the shared pipe_closed flag on all three per-file write sites. Also fixed a Windows-only test assertion (path separator).