enlil 0.1.0

Vendor-neutral open-source control and audit plane for AI agent actions. Sits inline between your agents and any model or tool: enforce what each agent may do, and prove what it did.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124

use dashmap::DashMap;
use std::sync::atomic::{AtomicU32, AtomicU64, Ordering};
use std::time::Duration;

#[derive(Debug, Clone, Copy, PartialEq)]
pub enum CircuitState {
    Closed,   // healthy — requests flow normally
    Open,     // tripped — all requests fail-fast to fallback
    HalfOpen, // testing — allow one request through to check recovery
}

struct ProviderState {
    failures: AtomicU32,
    successes: AtomicU32,
    last_failure: AtomicU64,            // epoch millis
    state: std::sync::atomic::AtomicU8, // 0=Closed, 1=Open, 2=HalfOpen
}

impl Default for ProviderState {
    fn default() -> Self {
        Self {
            failures: AtomicU32::new(0),
            successes: AtomicU32::new(0),
            last_failure: AtomicU64::new(0),
            state: std::sync::atomic::AtomicU8::new(0),
        }
    }
}

impl ProviderState {
    fn get_state(&self) -> CircuitState {
        match self.state.load(Ordering::Relaxed) {
            1 => CircuitState::Open,
            2 => CircuitState::HalfOpen,
            _ => CircuitState::Closed,
        }
    }

    fn set_state(&self, s: CircuitState) {
        self.state.store(
            match s {
                CircuitState::Closed => 0,
                CircuitState::Open => 1,
                CircuitState::HalfOpen => 2,
            },
            Ordering::Relaxed,
        );
    }
}

pub struct CircuitBreaker {
    providers: DashMap<String, ProviderState>,
    failure_threshold: u32,
    recovery_timeout: Duration,
}

impl Default for CircuitBreaker {
    fn default() -> Self {
        Self::new()
    }
}

impl CircuitBreaker {
    pub fn new() -> Self {
        Self {
            providers: DashMap::new(),
            failure_threshold: 3,
            recovery_timeout: Duration::from_secs(30),
        }
    }

    /// Check if a provider is available. Returns the circuit state.
    pub fn check(&self, provider: &str) -> CircuitState {
        let entry = self.providers.entry(provider.to_string()).or_default();
        let state = entry.get_state();

        if state == CircuitState::Open {
            // Check if recovery timeout has elapsed
            let last = entry.last_failure.load(Ordering::Relaxed);
            let now = epoch_millis();
            if now - last > self.recovery_timeout.as_millis() as u64 {
                entry.set_state(CircuitState::HalfOpen);
                return CircuitState::HalfOpen;
            }
        }
        state
    }

    /// Record a successful response from a provider
    pub fn record_success(&self, provider: &str) {
        let entry = self.providers.entry(provider.to_string()).or_default();
        entry.successes.fetch_add(1, Ordering::Relaxed);
        entry.failures.store(0, Ordering::Relaxed);
        entry.set_state(CircuitState::Closed);
    }

    /// Record a failure from a provider
    pub fn record_failure(&self, provider: &str) {
        let entry = self.providers.entry(provider.to_string()).or_default();
        let failures = entry.failures.fetch_add(1, Ordering::Relaxed) + 1;
        entry.last_failure.store(epoch_millis(), Ordering::Relaxed);

        if failures >= self.failure_threshold {
            entry.set_state(CircuitState::Open);
            tracing::warn!(
                "Circuit OPEN for provider: {} ({} failures)",
                provider,
                failures
            );
        }
    }

    /// Check if provider is healthy (Closed or HalfOpen)
    pub fn is_available(&self, provider: &str) -> bool {
        self.check(provider) != CircuitState::Open
    }
}

fn epoch_millis() -> u64 {
    std::time::SystemTime::now()
        .duration_since(std::time::UNIX_EPOCH)
        .unwrap_or_default()
        .as_millis() as u64
}