flipped to RLS (#13)

* flipped to RLS

* queries

* v1my

* fixed actor route

* port update

Author: goodtocode

README.md

@@ -7,7 +7,7 @@
 
 [![Web & API & SQL CI/CD](https://github.com/goodtocode/agent-framework-quick-start/actions/workflows/gtc-agent-standalone-web-api-sql.yml/badge.svg)](https://github.com/goodtocode/agent-framework-quick-start/actions/workflows/gtc-agent-standalone-web-api-sql.yml)
 
-Microsoft Agent Framework Quick-start is a 100% Microsoft, enterprise-ready starter kit for building modern, agentic applications with C#, Blazor (Fluent UI), and ASP.NET Core Web API. This solution demonstrates how to use the Microsoft Agent Framework to create a Copilot-style chat client, fully integrated with SQL Server for persistent storage of authors, chat sessions, and messages—all orchestrated through a clean architecture pattern. 
+Microsoft Agent Framework Quick-start is a enterprise-ready starter kit for building modern, agentic applications with C#, Blazor (Fluent UI), and ASP.NET Core Web API. This solution demonstrates how to use the Microsoft Agent Framework to create a Copilot-style chat client, fully integrated with SQL Server for persistent storage of authors, chat sessions, and messages—all orchestrated through a clean architecture pattern. 
 
 With built-in tools (plugins) for querying and managing your own data, automated Azure infrastructure (Bicep), and seamless CI/CD (GitHub Actions), this repo provides everything you need to build, deploy, and extend real-world AI-powered apps on a traditional .NET stack—no JavaScript, no raw HTML, just pure Blazor and Fluent UI. Perfect for teams looking to modernize with AI while leveraging familiar, pragmatic enterprise patterns.
 
@@ -257,26 +257,15 @@ dotnet user-secrets set "ConnectionStrings:DefaultConnection" "YOUR_SQL_CONNECTI
 
 1. Open Windows Terminal in Powershell or Cmd mode
 2. cd to root of repository
-3. (Optional) If you have an existing database, scaffold current entities into your project
-	
-	```
-	dotnet ef dbcontext scaffold "Data Source=localhost;Initial Catalog=AgentFramework;Min Pool Size=3;MultipleActiveResultSets=True;Trusted_Connection=Yes;TrustServerCertificate=True;" Microsoft.EntityFrameworkCore.SqlServer -t WeatherForecastView -c WeatherChannelContext -f -o WebApi
-	```
-
-4. Create an initial migration
-	```
-	dotnet ef migrations add InitialCreate --project .\src\Infrastructure.SqlServer\Infrastructure.SqlServer.csproj --startup-project .\src\Presentation.WebApi\Presentation.WebApi.csproj --context AgentFrameworkContext
-	```
-
-5. Develop new entities and configurations
-6. When ready to deploy new entities and configurations
+3. Deploy new entities and configurations to database
 
 	```	
 	dotnet ef database update --project .\src\Infrastructure.SqlServer\Infrastructure.SqlServer.csproj --startup-project .\src\Presentation.WebApi\Presentation.WebApi.csproj --context AgentFrameworkContext --connection "Data Source=(localdb)\MSSQLLocalDB;Initial Catalog=AgentFramework;Min Pool Size=3;MultipleActiveResultSets=True;Trusted_Connection=Yes;TrustServerCertificate=True;MultipleActiveResultSets=False;Encrypt=True;TrustServerCertificate=False;Connection Timeout=30"
 	```
-7. When an entity changes, is created or deleted, create a new migration. Suggest doing this each new version.
+4. When an entity changes, is created or deleted, create a new migration. Suggest doing this each new version.
 	```
 	dotnet ef migrations add v1.1.1 --project .\src\Infrastructure.SqlServer\Infrastructure.SqlServer.csproj --startup-project .\src\Presentation.WebApi\Presentation.WebApi.csproj --context AgentFrameworkContext
+	dotnet ef database update --project .\src\Infrastructure.SqlServer\Infrastructure.SqlServer.csproj --startup-project .\src\Presentation.WebApi\Presentation.WebApi.csproj --context AgentFrameworkContext --connection "Data Source=(localdb)\MSSQLLocalDB;Initial Catalog=AgentFramework;Min Pool Size=3;MultipleActiveResultSets=True;Trusted_Connection=Yes;TrustServerCertificate=True;MultipleActiveResultSets=False;Encrypt=True;TrustServerCertificate=False;Connection Timeout=30"
 	```
 
 # Running the Application
@@ -286,9 +275,9 @@ Right-click Presentation.WebApi and select Set as Default Project
 dotnet run --project src/Presentation.WebApi/Presentation.WebApi.csproj
 ```
 
-## Open http://localhost:7777/swagger/index.html 
+## Open http://localhost:7175/swagger/index.html 
 Open Microsoft Edge or modern browser
-Navigate to: http://localhost:7777/swagger/index.html in your browser to the Swagger API Interface
+Navigate to: http://localhost:7175/swagger/index.html in your browser to the Swagger API Interface
 
 # Github Actions for Azure IaC and CI/CD
 ## GitHub Actions (.github folder)

data/Chat/Actor.sql

@@ -0,0 +1,2 @@
+Select top 1000 *
+From Actors

data/Chat/ChatSessions.sql

@@ -0,0 +1,2 @@
+Select Top 1000 *
+From ChatSessions

src/.github/copilot-instructions.md

@@ -0,0 +1,4 @@
+# Copilot Instructions
+
+## General Guidelines
+- Use custom .NotEmpty("message") validation convention instead of .NotEmpty().WithMessage("message") in FluentValidation validators. The Goodtocode.Validation library extends FluentValidation with custom syntax where validation methods accept message as a parameter: .NotEmpty("message"), .NotEqual(value, "message"), etc. Do not use .WithMessage() - pass the message directly as a parameter to the validation method.

src/Core.Application/Abstractions/ICurrentUserContext.cs

@@ -0,0 +1,7 @@
+namespace Goodtocode.AgentFramework.Core.Application.Abstractions;
+
+public interface ICurrentUserContext
+{
+    Guid OwnerId { get; }
+    Guid TenantId { get; }
+}

src/Core.Application/Abstractions/IRequiresUserContext.cs

@@ -0,0 +1,20 @@
+using Goodtocode.AgentFramework.Core.Domain.Auth;
+
+namespace Goodtocode.AgentFramework.Core.Application.Abstractions;
+
+/// <summary>
+/// Marker interface for requests that require user context to be injected via pipeline behavior.
+/// </summary>
+/// <remarks>This interface is used to identify requests that need authenticated user information.
+/// When a request implements this interface, the UserInfoBehavior pipeline will automatically
+/// populate the <see cref="UserContext"/> property with the current user's context before
+/// the request handler executes.</remarks>
+public interface IRequiresUserContext
+{
+    /// <summary>
+    /// Gets or sets the authenticated user's context.
+    /// </summary>
+    /// <remarks>This property is automatically populated by the pipeline behavior
+    /// before the request handler is invoked.</remarks>
+    IUserContext? UserContext { get; set; }
+}

src/Core.Application/Abstractions/IUserInfoRequest.cs

@@ -14,7 +14,7 @@ public class CreateActorCommand : IRequest<ActorDto>
     public Guid TenantId { get; set; }
 }
 
-public class CreateAuthorCommandHandler(IAgentFrameworkContext context) : IRequestHandler<CreateActorCommand, ActorDto>
+public class CreateActorCommandHandler(IAgentFrameworkContext context) : IRequestHandler<CreateActorCommand, ActorDto>
 {
     private readonly IAgentFrameworkContext _context = context;
 
@@ -23,7 +23,7 @@ public async Task<ActorDto> Handle(CreateActorCommand request, CancellationToken
         GuardAgainstEmptyOwnerId(request?.OwnerId);
         GuardAgainstIdExists(_context.Actors, request!.Id);
 
-        var Actor = ActorEntity.Create(request!.Id == Guid.Empty ? Guid.NewGuid() : request!.Id, request.OwnerId, request.TenantId, request.FirstName, request.LastName, request.Email);
+        var Actor = ActorEntity.Create(request!.Id == Guid.Empty ? Guid.NewGuid() : request!.Id, request.FirstName, request.LastName, request.Email);
         _context.Actors.Add(Actor);
         try
         {

src/Core.Application/Actor/CreateActorCommand.cs

@@ -9,7 +9,7 @@ public class DeleteActorByOwnerIdCommand : IRequest
     public Guid OwnerId { get; set; }
 }
 
-public class DeleteAuthorByOwnerIdCommandHandler(IAgentFrameworkContext context) : IRequestHandler<DeleteActorByOwnerIdCommand>
+public class DeleteActorByOwnerIdCommandHandler(IAgentFrameworkContext context) : IRequestHandler<DeleteActorByOwnerIdCommand>
 {
     private readonly IAgentFrameworkContext _context = context;
 

src/Core.Application/Actor/DeleteActorByExternalIdCommand.cs

@@ -9,7 +9,7 @@ public class DeleteActorCommand : IRequest
     public Guid Id { get; set; }
 }
 
-public class DeleteAuthorCommandHandler(IAgentFrameworkContext context) : IRequestHandler<DeleteActorCommand>
+public class DeleteActorCommandHandler(IAgentFrameworkContext context) : IRequestHandler<DeleteActorCommand>
 {
     private readonly IAgentFrameworkContext _context = context;