Enum RejectReason 

pub enum RejectReason {
    Disabled,
    NoAllowedRoots,
    PathUnresolvable(String),
    OutsideAllowedRoots {
        resolved: PathBuf,
    },
    TooLarge {
        size: u64,
        cap: u64,
    },
    ScannerRejected {
        detail: String,
    },
    ScannerNotProvided,
    ReadFailed(String),
}

Reasons the broker can refuse to read an attachment. The agent surfaces the variant + a short string back to the operator via the originating-channel notification path; the operator never sees raw filesystem errors verbatim.

Variants

Disabled

Operator set attachments.enabled: false. Agent should treat the request as if attachments were unsupported.

NoAllowedRoots

allowed_roots was empty after $HOME expansion. The operator misconfigured — no path can ever resolve.

PathUnresolvable(String)

Path failed to canonicalize (does not exist, broken symlink, permission denied during traversal). Carries the OS-level reason for operator-side debugging.

OutsideAllowedRoots

Resolved path is not a descendant of any allowed_root.

Fields

resolved: PathBuf

TooLarge

Resolved path stat’d > max_size_bytes.

Fields

size: u64

cap: u64

ScannerRejected

Scanner subprocess returned non-zero, timed out, or could not be spawned. detail carries the scanner’s stderr (truncated) or a wrapper-level error.

Fields

detail: String

ScannerNotProvided

Compose configured a scanner but the caller passed scanner: None to check_and_read. Tighter than silently skipping the scan: a refactor that drops the scanner arg anywhere upstream surfaces here instead of disabling malware checking with no test failure.

ReadFailed(String)

Read raced with deletion or another fs::read failure surfaced after the size check passed.

Implementations

impl RejectReason

pub fn human(&self) -> String

One-liner suitable for inclusion in an operator-facing notification. Avoids markdown chars so HTML / plain renderers both reproduce it byte-for-byte (T-134 coordination with wren — no _*<>& that would need escaping in either path).

Trait Implementations

impl Clone for RejectReason

fn clone(&self) -> RejectReason

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RejectReason

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for RejectReason

fn eq(&self, other: &RejectReason) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for RejectReason

impl StructuralPartialEq for RejectReason