Managers

Libraries/Esiur/Security/Management/ResourceManagerContext.cs

@@ -10,9 +10,9 @@ using System.Linq;
 namespace Esiur.Security.Management;
 
 /// <summary>
-/// Immutable metadata describing a resource operation being evaluated by managers.
-/// <see cref="Delay"/> is the sole mutable value and allows rate-control managers to
-/// request deferred execution.
+/// Metadata describing a resource operation being evaluated by managers. Operation
+/// identity is immutable; <see cref="Delay"/> and <see cref="DenialReason"/> let a
+/// manager return admission details.
 /// </summary>
 public sealed class ResourceManagerContext
 {
@@ -23,9 +23,16 @@ public sealed class ResourceManagerContext
     public Session? Session { get; }
     public IResource? Resource { get; }
     public MemberDef? Member { get; }
+    public TypeDef? TypeDefinition { get; }
     public ActionType Action { get; }
     public object? Inquirer { get; }
 
+    /// <summary>
+    /// Indicates whether the protocol operation can honor an allowed delayed ruling.
+    /// Rate managers should inspect this before reserving queued capacity.
+    /// </summary>
+    public bool SupportsDelay { get; }
+
     /// <summary>
     /// Gets the local attributes that configure manager policy for the target member.
     /// The collection is a defensive, read-only snapshot.
@@ -33,10 +40,17 @@ public sealed class ResourceManagerContext
     public IReadOnlyList<Attribute> MemberPolicyAttributes => _memberPolicyAttributes;
 
     /// <summary>
-    /// Gets or sets an optional delay requested by a rate-control manager.
+    /// Gets or sets an optional delay requested by a rate-control manager. Execute,
+    /// property-set, and pull-stream operations honor delayed rulings; operations
+    /// that cannot be delayed fail closed.
     /// </summary>
     public TimeSpan Delay { get; set; }
 
+    /// <summary>
+    /// Optional public-safe reason supplied by a manager when it denies an operation.
+    /// </summary>
+    public string? DenialReason { get; set; }
+
     public ResourceManagerContext(
         Warehouse warehouse,
         EpConnection? connection,
@@ -45,15 +59,19 @@ public sealed class ResourceManagerContext
         MemberDef? member,
         ActionType action,
         object? inquirer = null,
-        IEnumerable<Attribute>? memberPolicyAttributes = null)
+        IEnumerable<Attribute>? memberPolicyAttributes = null,
+        TypeDef? typeDefinition = null,
+        bool supportsDelay = false)
     {
         Warehouse = warehouse ?? throw new ArgumentNullException(nameof(warehouse));
         Connection = connection;
         Session = session;
         Resource = resource;
         Member = member;
+        TypeDefinition = typeDefinition ?? resource?.Instance?.Definition ?? member?.Definition;
         Action = action;
         Inquirer = inquirer;
+        SupportsDelay = supportsDelay;
 
         var policies = memberPolicyAttributes?.ToArray() ?? Array.Empty<Attribute>();
         if (policies.Any(attribute => attribute == null))