feat: Complete Phase M — Technical Debt Resolution (M.1 + M.2 + M.3)#252

Merged

hotlong merged 13 commits intomainfrom

copilot/complete-development-roadmap-again

Feb 12, 2026

Commits on Feb 12, 2026

Initial plan
Copilot
committed
feat(M.1): implement Phase M.1 — Critical Security

Copilot
and
hotlong
committed
feat(M.1): complete Phase M.1 — add tests, update roadmap

Copilot
and
hotlong
committed
feat(jobs): add PersistentJobStorage with DLQ and replay API (M.2.1 + M.2.2)

Copilot
and
hotlong
committed
docs: fix persistent-storage JSDoc to say KV-backed instead of SQLite-backed

Copilot
and
hotlong
committed
feat(storage): add schema migration engine (Phase M.2.3)

Copilot
and
hotlong
committed
fix(storage): address code review - stable checksum, document operations array

Copilot
and
hotlong
committed
feat(M.2): complete Phase M.2 — Infrastructure

Copilot
and
hotlong
committed
feat(storage): implement Phase M.3 — Platform Hardening plugin isolation

Copilot
and
hotlong
committed
fix(storage): validate plugin paths are absolute in entry scripts

Copilot
and
hotlong
committed
feat(M.3): complete Phase M.3 — Platform Hardening + update roadmap

Copilot
and
hotlong
committed
fix: address code review — ESM-safe plugin hosts, improved sanitize regex

Copilot
and
hotlong
committed
fix(security): replace regex HTML stripping with entity encoding in sanitize middleware

Copilot
and
hotlong
committed