Rust client#

silicon-commit-client is the stateless Rust client for the Commit HTTP API. It never writes credentials or session state; callers own token persistence and refresh policy. Build a client from a backend origin or /api/v1/ URL, then attach the IAM access token, organization ID, and (for sandbox requests) the imported IAM testing application secret:

use silicon_commit_client::{Client, Mutation};
let commit = Client::new("https://backend.commit.teamofsilicons.com/api/v1/")?
    .with_bearer(access_token)
    .with_org_id("my-org");
let todos = commit.list_todos(&[("status", "in_progress")]).await?;
let create = commit.with_mutation(Mutation::new());
create.create_todo(&serde_json::json!({"title":"Ship it", "assigned_to":"actor"})).await?;

login_with_slt exchanges a Silicon IAm short-lived token at Commit and returns access and refresh tokens. refresh_session rotates a refresh token and logout revokes its family. Save these values only in the caller's secure store. A SessionTokens debug representation redacts token contents.

Every mutating method carries an idempotency key. Keep and reuse a Mutation when retrying an uncertain request; call if_match(version) for optimistic concurrency. Resource identifiers are escaped as one URL segment, redirects are disabled, and response bodies are capped at 8 MiB. Error preserves HTTP status, stable API error code, and request ID without retaining response bodies or secrets.

Methods cover health/readiness/version, sessions, todos and notes, list and todo subscriptions, notification settings, projects (diary, tasks, blockers, updates, completion), and test-environment lifecycle (create/list/key/rotate/clean/restore/delete). To target a sandbox, use with_test_key on the same client; all resource methods then operate against that isolated environment.

latest_release provides the crates.io version check used by the CLI. It performs a bounded, redirect-free request and does not mutate the running process. Applications may use it to schedule dependency updates while keeping their own update policy.

IAM discovery and authentication checks#

let public = Client::new("https://backend.commit.teamofsilicons.com")?;
let iam = public.iam().await?; // {"app_id": "…", "iam_url": "…"}
let session = public.login_with_slt(slt).await?;
let mut signed_in = public.with_bearer(session.access_token);
if let Some(org) = session.org_id {
    signed_in = signed_in.with_org_id(org);
}
let status = signed_in.login_status().await?;
// status["authenticated"], status["actor"]["type"], status["actor"]["id"]

iam() omits all caller credentials and organization/test context. login_status() uses the configured bearer and optional organization and test key, and checks live IAM authorization. Success includes authenticated: true, app_id, public actor (type and id), org_id, and organizations. No token or internal principal ID is included. An absent bearer or HTTP 401 becomes authenticated: false with null actor and org_id; other errors are preserved. No active organization grant also means unauthenticated for Commit. Without an organization, all selected active organizations are checked and org_id is null if multiple are available.

The library remains stateless and does not read SILICON_HOME or save credentials. The CLI uses that environment variable as its default storage home; applications using the library own their storage policy.

Collaboration and preferences#

Version 0.2 adds claim_project_task, delete_project_task, project_versions, project_version, email_settings, set_email_settings, report, contracts, testing_context, and with_test_app_secret. See projects, testing, contracts, telemetry, and development.