cli: after a failed write take only a refusal, since nothing can have run, and pin that the read keeps the ask's deadline (hq issue 444)

go/cli/cli.go

@@ -144,10 +144,16 @@ func AskWith(ctx context.Context, socket string, req Request) (Answer, error) {
 		// and the connection closed — and the write then fails on the close. That answer is already waiting, and
 		// it says why where the write error says only that the pipe broke (novox/hq issue 444, found under issue
 		// 434). So read it, within the deadline the connection already has, and only when none came say the write.
+		// Only a refusal is taken: the request was never wholly written, so nothing can have run, and any other
+		// answer here is not one a correct engine gives — passing it on as success would hide the failure.
 		a, rerr := ReadAnswer(conn)
 		if rerr != nil {
 			return Answer{}, fmt.Errorf("asking the node-engine: %w; and no answer came (%v)", err, rerr)
 		}
+		if a.Refused == "" {
+			return Answer{}, fmt.Errorf("asking the node-engine: %w; and the answer that came is not a refusal, "+
+				"though the request was never wholly written", err)
+		}
 		return a, nil
 	}
 	a, err := ReadAnswer(conn)