enlil 0.1.0

Vendor-neutral open-source control and audit plane for AI agent actions. Sits inline between your agents and any model or tool: enforce what each agent may do, and prove what it did.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73

//! The Enlil core state.

use reqwest::Client;
use std::sync::Arc;

use crate::cache::store::CacheManager;
use crate::config::ProxyConfig;
use crate::engine::pii_redact::PiiVault;
use crate::engine::risk_chain::RiskChain;
use crate::middleware::telemetry::MetricsCollector;
use crate::routing::circuit_breaker::CircuitBreaker;

/// The **OSS (Enlil) core state.**
///
/// Holds only the concerns that ship in the open-source `enlil` binary: the inline
/// enforcement engine, the exact-intent cache, local observability, and the HTTP
/// client/config needed to proxy a request.
///
/// Structural invariant (now enforced by the crate boundary, see
/// `DEVELOPMENT_PLAN.md`): nothing reachable from here may depend on multi-tenant
/// persistence, billing/quotas, Redis, or the memory fabric. Those live in the
/// `plumb` crate and attach via the [`crate::usage::ProxyEnv`] hooks.
pub struct EnlilState {
    pub client: Client,
    pub upstream_url: String,
    pub config: ProxyConfig,
    pub cache_manager: CacheManager,
    pub metrics: Arc<MetricsCollector>,
    pub risk_chain: RiskChain,
    pub circuit_breaker: CircuitBreaker,
    pub pii_vault: PiiVault,
    pub agent_registry: Arc<crate::engine::agent_identity::AgentRegistry>,
    pub loop_breaker: crate::engine::loop_breaker::LoopBreaker,
    pub anomaly_detector: crate::engine::anomaly::AnomalyDetector,
    pub rule_engine: crate::engine::rules::RuleEngine,
    pub prompt_guard: crate::engine::prompt_guard::PromptGuard,
    pub trace_store: crate::observability::TraceBackend,
}

impl EnlilState {
    /// Builds the OSS core from configuration.
    ///
    /// Shared by the open-source `enlil` binary and the cloud `plumb` binary, so
    /// both run an identical enforcement engine.
    pub async fn from_config(config: ProxyConfig) -> Self {
        let client = Client::builder()
            .no_gzip()
            .no_brotli()
            .no_deflate()
            .build()
            .expect("Failed to build HTTP client");

        Self {
            client,
            upstream_url: config.upstream_url.clone(),
            cache_manager: CacheManager::new_with_config(
                config.cache_ttl_secs,
                config.cache_max_capacity,
            ),
            config,
            metrics: Arc::new(MetricsCollector::new()),
            risk_chain: RiskChain::new(),
            circuit_breaker: CircuitBreaker::new(),
            pii_vault: PiiVault::new(),
            agent_registry: crate::engine::agent_identity::AgentRegistry::new(),
            loop_breaker: crate::engine::loop_breaker::LoopBreaker::new(),
            anomaly_detector: crate::engine::anomaly::AnomalyDetector::new(),
            rule_engine: crate::engine::rules::RuleEngine::new(),
            prompt_guard: crate::engine::prompt_guard::PromptGuard::new(),
            trace_store: crate::observability::TraceBackend::from_env().await,
        }
    }
}