DevKit

Developer Roadmap

• Module key validation: ajaxLoadModule accepts raw module keys and should guard against path traversal with basename/realpath checks.
• Generation rollback: if generation fails mid-run, partial directories are left behind with no cleanup.
• Template drift: generator templates can fall behind module standards; add versioned templates.
• AI status visibility: no admin indicator for AI task availability or provider health.
• Preview completeness: preview does not include asset files or README content.