php-agentic/Models
Snider a2a9423ad6 security: fix SQL injection and add workspace scoping to MCP tools
- Replace orderByRaw with parameterised CASE statements
- Add Task::scopeOrderByPriority() and scopeOrderByStatus()
- Add AgentPlan::scopeOrderByStatus()
- Add workspace validation to StateSet, StateGet, StateList tools
- Add workspace validation to PlanGet, PlanList tools
- Add SecurityTest.php with comprehensive isolation tests

Fixes SEC-002, SEC-003 from security audit.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-29 12:21:01 +00:00
..
AgentApiKey.php refactor: update namespaces for L1/L2 package convention 2026-01-27 17:34:46 +00:00
AgentPhase.php refactor: rename namespace Core\Agentic to Core\Mod\Agentic 2026-01-27 16:12:58 +00:00
AgentPlan.php security: fix SQL injection and add workspace scoping to MCP tools 2026-01-29 12:21:01 +00:00
AgentSession.php refactor: update namespaces for L1/L2 package convention 2026-01-27 17:34:46 +00:00
AgentWorkspaceState.php refactor: rename namespace Core\Agentic to Core\Mod\Agentic 2026-01-27 16:12:58 +00:00
Prompt.php refactor: rename namespace Core\Agentic to Core\Mod\Agentic 2026-01-27 16:12:58 +00:00
PromptVersion.php refactor: update namespaces for L1/L2 package convention 2026-01-27 17:34:46 +00:00
Task.php security: fix SQL injection and add workspace scoping to MCP tools 2026-01-29 12:21:01 +00:00
WorkspaceState.php refactor: rename namespace Core\Agentic to Core\Mod\Agentic 2026-01-27 16:12:58 +00:00