Enum ReachReason 

pub enum ReachReason {
    Credential,
    FrozenTrustFile,
    FrozenTrustRoot,
    FrozenSystemIntegrity,
    OutsideWorkspace,
    Unconfined,
    ForeignTemp,
}

Why a not-auto-approved command’s path reach was flagged — so the nudge can explain the actual reason instead of a one-size-fits-all “outside the working directory”. A peer’s hidden file and a path genuinely above cwd both deny, but the remedy differs, and conflating them is what reads as “directory parsing is broken”.

Variants

Credential

A known credential store (.ssh, .aws, keychain…).

FrozenTrustFile

A file safe-chains reads its OWN permissions from (~/.config/safe-chains.toml, ~/.claude/settings.json). Distinct from OutsideWorkspace because the generic remedy there — grant the path — is not merely unhelpful but FALSE: the write face is frozen, so following the advice changes nothing. For safe-chains’ own config it is also circular, telling the user to edit the file they are being stopped from editing.

FrozenTrustRoot

The DIRECTORY a trust file lives in. Distinct from FrozenTrustFile because only HALF of it is refused: writing a file into ~/.config is ordinary and stays allowed, and only removing or replacing the directory is not. Copy that said “this is refused” flatly would misdescribe a directory the user explicitly granted.

FrozenSystemIntegrity

One of the files that decide who may log in (/etc/passwd, /etc/sudoers, /etc/pam.d, the loader and boot). Same false-remedy problem as FrozenTrustFile.

OutsideWorkspace

Genuinely above/outside the working directory.

Unconfined

A path built by an interpolation that nothing confines (./out/$i, > $(cmd)). It is not outside anything — it names WHATEVER the value turns out to be, which is why it cannot be admitted — so the remedy is to constrain the spelling, not to grant a directory.

ForeignTemp

A temp path that is NOT this session’s scratchpad. Reading and writing it is fine; RUNNING code from it is not, because anonymous /tmp is where downloaded/foreign code lands. This is the one reach whose remedy is usually “that IS my working directory” — so the nudge says how to bless it rather than implying the agent did something wrong.

Implementations

impl ReachReason

pub fn message(self, path: &str) -> String

The self-contained nudge body (“it reaches X, …”) including the reason-appropriate remedy. Callers add their own framing (block / please-confirm) and the docs link.

Trait Implementations

impl Clone for ReachReason

fn clone(&self) -> ReachReason

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ReachReason

impl Debug for ReachReason

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for ReachReason

impl PartialEq for ReachReason

fn eq(&self, other: &ReachReason) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for ReachReason