Enum CommandError 

pub enum CommandError {
    Empty,
    TooLong {
        len: usize,
        max: usize,
    },
    ControlByte {
        byte: u8,
        at: usize,
    },
    NotUtf8,
    UnknownCommand(String),
    NotServed {
        verb: &'static str,
        why: &'static str,
    },
    MissingPath(&'static str),
    MissingOperation {
        verb: &'static str,
        accepted: String,
    },
    UnknownOperation {
        verb: &'static str,
        operation: String,
        accepted: String,
    },
    BadQuoting(&'static str),
    Path {
        reason: Option<PathReject>,
        message: String,
    },
}

Why an exec request was refused.

Every variant means the same thing on the wire (channel_failure, no shell), but they are distinguished so the server log says which one happened.

Variants

Empty

Nothing was sent.

TooLong

Over MAX_EXEC_LEN.

Fields

len: usize

What arrived.

max: usize

What is allowed.

ControlByte

A NUL or other control byte was present.

Fields

byte: u8

The offending byte.

at: usize

Where it was.

NotUtf8

Not UTF-8.

UnknownCommand(String)

The verb is not one of SERVICES. This is the bash case.

NotServed

A git verb gunnar knows the name of and does not serve, refused by name so the client prints a sentence rather than exec request failed on channel 0. Today that is git-upload-archive (git archive --remote=): it is not a transfer, the archive is a local operation on a clone, and answering it would be a second read path beside upload-pack. The site test measured the bare channel failure on 2026-08-30 and asked for the sentence.

Fields

verb: &'static str

Which verb.

why: &'static str

The sentence the client is owed.

MissingPath(&'static str)

A known verb with no argument.

MissingOperation

A verb that takes an <operation> was sent without one.

Fields

verb: &'static str

Which verb.

accepted: String

What it would have accepted, comma-separated.

UnknownOperation

A verb that takes an <operation> was sent one it does not accept.

The offending token is carried escaped, because it came off the wire and goes into a log line.

Fields

verb: &'static str

Which verb.

operation: String

What arrived, with control bytes already refused upstream.

accepted: String

What it would have accepted, comma-separated.

BadQuoting(&'static str)

The quoting was malformed: unterminated, or trailing bytes after the closing quote.

Path

The path did not survive the sandbox in gunnar_core::resolve_repo_path.

The rendered refusal is carried rather than the gunnar_core::Error itself, which is neither Clone nor PartialEq, and reason is kept alongside it so a test can assert which rule fired rather than merely that something failed. A path refused for the wrong reason is one refactor away from being accepted.

Fields

reason: Option<PathReject>

Which sandbox rule fired, when the sandbox named one.

message: String

The rendered refusal, with the offending input already escaped for safe logging by gunnar-core.

Trait Implementations

impl Clone for CommandError

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CommandError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for CommandError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for CommandError

impl Error for CommandError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<CommandError> for DispatchError

fn from(source: CommandError) -> Self

Converts to this type from the input type.

impl From<Error> for CommandError

fn from(err: Error) -> Self

Converts to this type from the input type.

impl PartialEq for CommandError

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for CommandError