2 commits

Author	SHA1	Message	Date
Snider	c432a45ca9	feat(security): switch API key to Argon2id with comprehensive tests ... P2 Items Completed (P2-062 to P2-068): - Switch AgentApiKey from SHA-256 to Argon2id hashing - Add 200+ tests for models, services, and AI providers - Create agent_plans migration with phases and workspace states Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-29 13:36:53 +00:00
Snider	a2a9423ad6	security: fix SQL injection and add workspace scoping to MCP tools ... - Replace orderByRaw with parameterised CASE statements - Add Task::scopeOrderByPriority() and scopeOrderByStatus() - Add AgentPlan::scopeOrderByStatus() - Add workspace validation to StateSet, StateGet, StateList tools - Add workspace validation to PlanGet, PlanList tools - Add SecurityTest.php with comprehensive isolation tests Fixes SEC-002, SEC-003 from security audit. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-29 12:21:01 +00:00