Crate cleanlib_client 

Re-exports

pub use customer_state::CustomerState;

pub use customer_state::Tier;

pub use gate::enforce;

pub use gate::verdict;

pub use gate::Assessment;

pub use gate::GateError;

pub use ecosystem_detect::ecosystem_from_path;

pub use derive_status::derive_status;

pub use derive_status::DerivedStatus;

pub use envelope::ReasonCode;

pub use envelope::Status;

pub use envelope::VerdictEnvelopeV1;

pub use envelope::ALL_REASON_CODES;

pub use envelope::ALL_VERDICT_SOURCES;

pub use verdict_to_envelope::verdict_to_envelope_v1;

pub use transport::Client;

pub use transport::RemediationOutcome;

pub use types::PolicyDecision;

pub use types::PreviousVerdict;

pub use types::Verdict;

pub use attestation_verify::verify_attestation;

pub use attestation_verify::AttestationKeyLookup;

pub use attestation_verify::PubkeysEndpointLookup;

pub use attestation_verify::DEFAULT_PUBKEY_CACHE_TTL;

pub use errors::CleanLibraryError;

pub use errors::ProblemDetails;

Modules

attestation_verify

Cosign migration gate 3 (Q6=a, CLEANLIB-379 overnight arc) — Rust reference implementation of SDK-side attestation signature verification.

config

Config-file + env-var loader per Client spec rev1 §5 and SDK config-file format decision 2026-05-20. TOML on disk at ~/.cleanlibrary/config.toml; env vars override file values.

customer_state

CLEANLIB-178 — canonical customer-facing state taxonomy (Rust surfaces).

derive_status

derive_status — canonical algorithm per App dispatch §4 binding contract.

ecosystem_detect

CLEANLIB-691 — canonical manifest-filename → ecosystem detection.

envelope

VerdictEnvelopeV1 + ReasonCode — schema-locked mirror of @cleanstart/cleanlib-sdk@0.4.1 (tarball sha-1 b5f00c160907a6ea1f490f14a9bda6f6de34b8b6).

errors

CleanLibraryError hierarchy per Client spec rev1 §2.3 + Rev 2 amendment §2. Mirrors App Rev 4 §9.2 reason-code enum surfaced via X-CleanLibrary-Reason response header.

gate

CLEANLIB-657 (CX-8 P1-b) — the verdict() / enforce() dual consumption API.

proxy

Per-ecosystem proxy-config emit per [per-ecosystem-proxy-config-emit-format decision 2026-05-20]. Phase 1 Tier A: npm + pypi + go.

risk_acceptance

Risk-acceptance rule YAML emit per Client spec rev1 §11.1 + phase-1-storage-architecture §3 customer-flow.

transport

HTTP transport — Client wraps reqwest with auth header injection + timeout + per Client spec rev1 §2 + Rev 2 amendment §2 + §4.

types

Verdict + ancillary response types per Client spec rev1 §2.4 + App Rev 4 §4.1 Vector verdict shape.

verdict_to_envelope

verdict_to_envelope_v1 — structural adapter from the App’s wire-shape Verdict to the canonical customer-facing VerdictEnvelopeV1.