Enum ReachReason 

pub enum ReachReason {
    Credential,
    FrozenTrustFile,
    FrozenTrustRoot,
    FrozenSystemIntegrity,
    RawDevice,
    OutsideWorkspace,
    Unconfined,
    ForeignTemp,
}

Why a not-auto-approved command’s path reach was flagged — so the nudge can explain the actual reason instead of a one-size-fits-all “outside the working directory”. A peer’s hidden file and a path genuinely above cwd both deny, but the remedy differs, and conflating them is what reads as “directory parsing is broken”.

Variants

Credential

A known credential store (.ssh, .aws, keychain…).

FrozenTrustFile

A file safe-chains reads its OWN permissions from (~/.config/safe-chains.toml, ~/.claude/settings.json). Distinct from OutsideWorkspace because the generic remedy there — grant the path — is not merely unhelpful but FALSE: the write face is frozen, so following the advice changes nothing. For safe-chains’ own config it is also circular, telling the user to edit the file they are being stopped from editing.

FrozenTrustRoot

The DIRECTORY a trust file lives in. Distinct from FrozenTrustFile because only HALF of it is refused: writing a file into ~/.config is ordinary and stays allowed, and only removing or replacing the directory is not. Copy that said “this is refused” flatly would misdescribe a directory the user explicitly granted.

FrozenSystemIntegrity

One of the files that decide who may log in (/etc/passwd, /etc/sudoers, /etc/pam.d, the loader and boot). Same false-remedy problem as FrozenTrustFile.

RawDevice

A raw block or character device (/dev/mem, /dev/rdisk0, /dev/sda). Distinct from FrozenSystemIntegrity because the device rung outranks system-integrity, so without its own arm every device was explained as a file that “decides who may log in” — which is both false and unhelpful about the thing that actually makes a device dangerous.

OutsideWorkspace

Genuinely above/outside the working directory.

Unconfined

A path built by an interpolation that nothing confines (./out/$i, > $(cmd)). It is not outside anything — it names WHATEVER the value turns out to be, which is why it cannot be admitted — so the remedy is to constrain the spelling, not to grant a directory.

ForeignTemp

A temp path that is NOT this session’s scratchpad. Reading and writing it is fine; RUNNING code from it is not, because anonymous /tmp is where downloaded/foreign code lands. This is the one reach whose remedy is usually “that IS my working directory” — so the nudge says how to bless it rather than implying the agent did something wrong.

Implementations

impl ReachReason

pub fn grant_helps(self) -> bool

The self-contained nudge body (“it reaches X, …”) including the reason-appropriate remedy. Callers add their own framing (block / please-confirm) and the docs link. Whether naming this path in ~/.config/safe-chains.toml actually changes the verdict.

The refusal copy offers a grant, or explains that granting will not help, and the two must not diverge: advice that does nothing costs more than silence, because the reader follows it, sees no change, and stops believing the rest. a_refusal_offers_a_grant_only_when_one_ would_work runs the verdict twice — once with the grant applied — and holds this to it.

Credential is true as of 2026-09-01 and was false before it. A grant naming a store used to move the locus and leave reads_secret set, so the message’s “name that path” advice was FALSE while reading exactly right. That is the failure this pairing exists to catch, and it went unnoticed because nothing compared the sentence to the behaviour.

pub fn message(self, path: &str) -> String

Trait Implementations

impl Clone for ReachReason

fn clone(&self) -> ReachReason

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ReachReason

impl Debug for ReachReason

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for ReachReason

impl PartialEq for ReachReason

fn eq(&self, other: &ReachReason) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for ReachReason