feat(cli): add tower-resilience integration framework

Implements Phase 1 of issue #446 - Tower resilience patterns infrastructure

## Changes

### Core Infrastructure
- Add tower-resilience dependency with circuitbreaker, retry, and ratelimiter features
- Create resilience.rs module with framework for wrapping API clients
- Add ResilienceConfig to profile configuration structure
- Add CLI flags for controlling resilience patterns

### CLI Flags
- --no-resilience: Disable all resilience patterns
- --no-circuit-breaker: Disable circuit breaker only
- --no-retry: Disable retry only
- --retry-attempts N: Override retry attempts
- --rate-limit N: Set rate limit (requests per minute)

### Configuration
- Profiles can now include resilience configuration
- Support for circuit breaker, retry, and rate limiting settings
- Configurable failure thresholds, timeouts, and backoff strategies

## Implementation Status
- Infrastructure and configuration: ✅ Complete
- Tower middleware integration: 🚧 TODO (awaiting stable tower-resilience API)
- The wrap_cloud_client() and wrap_enterprise_client() functions currently
  pass through the service unchanged until tower-resilience API stabilizes

## Testing
- Added unit tests for configuration defaults and CLI overrides
- All existing tests pass
- Clippy and fmt checks pass

Next steps will implement the actual middleware once tower-resilience API is stable.

Author: joshrotenberg

Cargo.lock

@@ -44,6 +44,9 @@ pub struct Profile {
     /// Supports keyring: prefix for secure storage.
     #[serde(default, skip_serializing_if = "Option::is_none")]
     pub files_api_key: Option<String>,
+    /// Resilience configuration for this profile
+    #[serde(default, skip_serializing_if = "Option::is_none")]
+    pub resilience: Option<crate::ResilienceConfig>,
 }
 
 /// Supported deployment types
@@ -460,6 +463,7 @@ mod tests {
                 api_url: "https://api.redislabs.com/v1".to_string(),
             },
             files_api_key: None,
+            resilience: None,
         };
 
         config.set_profile("test".to_string(), cloud_profile);
@@ -482,6 +486,7 @@ mod tests {
                 api_url: "url".to_string(),
             },
             files_api_key: None,
+            resilience: None,
         };
 
         let (key, secret, url) = cloud_profile.cloud_credentials().unwrap();
@@ -616,6 +621,7 @@ api_url = "${REDIS_TEST_URL:-https://api.redislabs.com/v1}"
                 insecure: false,
             },
             files_api_key: None,
+            resilience: None,
         };
         config.set_profile("ent1".to_string(), enterprise_profile);
 
@@ -646,6 +652,7 @@ api_url = "${REDIS_TEST_URL:-https://api.redislabs.com/v1}"
                 api_url: "https://api.redislabs.com/v1".to_string(),
             },
             files_api_key: None,
+            resilience: None,
         };
         config.set_profile("cloud1".to_string(), cloud_profile);
 
@@ -676,6 +683,7 @@ api_url = "${REDIS_TEST_URL:-https://api.redislabs.com/v1}"
                 api_url: "https://api.redislabs.com/v1".to_string(),
             },
             files_api_key: None,
+            resilience: None,
         };
         config.set_profile("cloud1".to_string(), cloud_profile.clone());
         config.set_profile("cloud2".to_string(), cloud_profile);
@@ -690,6 +698,7 @@ api_url = "${REDIS_TEST_URL:-https://api.redislabs.com/v1}"
                 insecure: false,
             },
             files_api_key: None,
+            resilience: None,
         };
         config.set_profile("ent1".to_string(), enterprise_profile.clone());
         config.set_profile("ent2".to_string(), enterprise_profile);
@@ -729,6 +738,7 @@ api_url = "${REDIS_TEST_URL:-https://api.redislabs.com/v1}"
                 api_url: "https://api.redislabs.com/v1".to_string(),
             },
             files_api_key: None,
+            resilience: None,
         };
         config.set_profile("cloud1".to_string(), cloud_profile);
 

crates/redisctl-config/src/config.rs

@@ -35,6 +35,7 @@
 //!         api_url: "https://api.redislabs.com/v1".to_string(),
 //!     },
 //!     files_api_key: None,
+//!     resilience: None,
 //! };
 //!
 //! let mut config = Config::default();
@@ -44,8 +45,10 @@
 pub mod config;
 pub mod credential;
 pub mod error;
+pub mod resilience;
 
 // Re-export main types for convenience
 pub use config::{Config, DeploymentType, Profile, ProfileCredentials};
 pub use credential::{CredentialStorage, CredentialStore};
 pub use error::{ConfigError, Result};
+pub use resilience::ResilienceConfig;

crates/redisctl-config/src/lib.rs

@@ -0,0 +1,138 @@
+//! Resilience configuration for API clients
+//!
+//! This module defines configuration structures for resilience patterns
+//! (circuit breaker, retry, rate limiting) that can be stored in profiles.
+
+use serde::{Deserialize, Serialize};
+
+/// Configuration for resilience patterns
+#[derive(Debug, Clone, Default, Serialize, Deserialize)]
+pub struct ResilienceConfig {
+    /// Circuit breaker configuration
+    #[serde(default)]
+    pub circuit_breaker: CircuitBreakerConfig,
+
+    /// Retry configuration
+    #[serde(default)]
+    pub retry: RetryConfig,
+
+    /// Rate limiting configuration
+    #[serde(default)]
+    pub rate_limit: RateLimitConfig,
+}
+
+/// Circuit breaker configuration
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct CircuitBreakerConfig {
+    /// Whether circuit breaker is enabled
+    #[serde(default = "default_true")]
+    pub enabled: bool,
+
+    /// Failure rate threshold (0.0 to 1.0) to open the circuit
+    #[serde(default = "default_failure_threshold")]
+    pub failure_threshold: f32,
+
+    /// Number of calls to track in the sliding window
+    #[serde(default = "default_window_size")]
+    pub window_size: u32,
+
+    /// Duration in seconds to wait before attempting to close the circuit
+    #[serde(default = "default_reset_timeout")]
+    pub reset_timeout_secs: u64,
+}
+
+impl Default for CircuitBreakerConfig {
+    fn default() -> Self {
+        Self {
+            enabled: true,
+            failure_threshold: 0.5,
+            window_size: 20,
+            reset_timeout_secs: 60,
+        }
+    }
+}
+
+/// Retry configuration
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct RetryConfig {
+    /// Whether retry is enabled
+    #[serde(default = "default_true")]
+    pub enabled: bool,
+
+    /// Maximum number of retry attempts
+    #[serde(default = "default_max_attempts")]
+    pub max_attempts: u32,
+
+    /// Initial backoff in milliseconds
+    #[serde(default = "default_backoff_ms")]
+    pub backoff_ms: u64,
+
+    /// Maximum backoff in milliseconds
+    #[serde(default = "default_max_backoff_ms")]
+    pub max_backoff_ms: u64,
+}
+
+impl Default for RetryConfig {
+    fn default() -> Self {
+        Self {
+            enabled: true,
+            max_attempts: 3,
+            backoff_ms: 100,
+            max_backoff_ms: 5000,
+        }
+    }
+}
+
+/// Rate limiting configuration
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct RateLimitConfig {
+    /// Whether rate limiting is enabled
+    #[serde(default)]
+    pub enabled: bool,
+
+    /// Maximum requests per minute
+    #[serde(default = "default_requests_per_minute")]
+    pub requests_per_minute: u32,
+}
+
+impl Default for RateLimitConfig {
+    fn default() -> Self {
+        Self {
+            enabled: false,
+            requests_per_minute: 100,
+        }
+    }
+}
+
+// Default value functions for serde
+fn default_true() -> bool {
+    true
+}
+
+fn default_failure_threshold() -> f32 {
+    0.5
+}
+
+fn default_window_size() -> u32 {
+    20
+}
+
+fn default_reset_timeout() -> u64 {
+    60
+}
+
+fn default_max_attempts() -> u32 {
+    3
+}
+
+fn default_backoff_ms() -> u64 {
+    100
+}
+
+fn default_max_backoff_ms() -> u64 {
+    5000
+}
+
+fn default_requests_per_minute() -> u32 {
+    100
+}

crates/redisctl-config/src/resilience.rs

@@ -19,8 +19,8 @@ path = "src/main.rs"
 
 [dependencies]
 redisctl-config = { version = "0.1.1", path = "../redisctl-config" }
-redis-cloud = { version = "0.7.1", path = "../redis-cloud" }
-redis-enterprise = { version = "0.6.4", path = "../redis-enterprise" }
+redis-cloud = { version = "0.7.1", path = "../redis-cloud", features = ["tower-integration"] }
+redis-enterprise = { version = "0.6.4", path = "../redis-enterprise", features = ["tower-integration"] }
 files-sdk = { workspace = true, optional = true }
 
 # CLI dependencies
@@ -56,6 +56,10 @@ config = { workspace = true }
 # Keyring for Files.com API key storage (separate from profile credentials)
 keyring = { version = "3.6", optional = true, features = ["apple-native", "windows-native", "linux-native"] }
 
+# Tower and resilience patterns
+tower = { version = "0.5", features = ["util", "timeout", "buffer", "ready-cache"] }
+tower-resilience = { version = "0.1", features = ["circuitbreaker", "retry", "ratelimiter"] }
+
 [target.'cfg(unix)'.dependencies]
 pager = "0.16"
 

crates/redisctl/Cargo.toml

@@ -69,6 +69,26 @@ pub struct Cli {
     #[arg(long, short, global = true, action = clap::ArgAction::Count)]
     pub verbose: u8,
 
+    /// Disable all resilience patterns (circuit breaker, retry, rate limiting)
+    #[arg(long, global = true)]
+    pub no_resilience: bool,
+
+    /// Disable circuit breaker only
+    #[arg(long, global = true)]
+    pub no_circuit_breaker: bool,
+
+    /// Disable retry only
+    #[arg(long, global = true)]
+    pub no_retry: bool,
+
+    /// Override retry attempts (implies --retry-enabled if set)
+    #[arg(long, global = true)]
+    pub retry_attempts: Option<u32>,
+
+    /// Set rate limit (requests per minute, implies --rate-limit-enabled if set)
+    #[arg(long, global = true)]
+    pub rate_limit: Option<u32>,
+
     #[command(subcommand)]
     pub command: Commands,
 }