Struct CircuitBreaker 

pub struct CircuitBreaker { /* private fields */ }

Gates access to a flaky resource: trips after failure_threshold consecutive unresponsive reports, stays open for a fixed cooldown, then admits exactly one probe request to test recovery.

Each clock-dependent method has an _at(now: Instant) form (the real logic) plus a wrapper that passes Instant::now(), so the state machine is unit-testable with a synthetic clock and no sleeps.

Implementations

impl CircuitBreaker

pub fn new(config: CircuitBreakerConfig) -> CircuitBreaker

pub fn admit(&self) -> Admission

pub fn admit_at(&self, now: Instant) -> Admission

pub fn admit_bypass_only(&self) -> Admission

Same read of state as admit, but never returns Probe and never mutates open_until — for a caller (prefetch) that must not be able to consume the single per-cooldown probe slot a demand read would otherwise receive.

pub fn record_responsive(&self) -> Transition

The resource completed an operation (any HTTP status counts — it’s alive).

pub fn record_responsive_at(&self, _now: Instant) -> Transition

pub fn record_unresponsive(&self) -> Transition

The resource lost: an abandon-budget expiry, a stall, a connect failure, or a transport error (see “Abandon vs. unresponsive”).

pub fn record_unresponsive_at(&self, now: Instant) -> Transition

Trait Implementations

impl Debug for CircuitBreaker

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.