Function resolve_tool_path_refusing 

pub fn resolve_tool_path_refusing(
    project_root: Option<&str>,
    shell_cwd: Option<&str>,
    raw: &str,
    extra_roots: &[String],
) -> Result<String, PathRefusal>

resolve_tool_path_with_roots, saying which boundary refused the path.