v9.8.0 Controlled Source VM Clone

v9.8.0-controlled-source-vm-clone

v9.8.0-controlled-source-vm-clone adds a lab-only controlled clone path for environments where Prism exposes a golden VM but no Image Service disk image.

Highlights

• Platform Admins can approve discovered VM inventory records as bounded source VM clone candidates.
• Controlled AHV lifecycle selection now supports either an approved image or an approved source VM.
• Prism Central connection tests now discover VMs as read-only inventory.
• Lab configuration accepts NDC_AHV_ALLOWED_SOURCE_VM_UUID or NDC_AHV_PE_ALLOWED_SOURCE_VM_UUID as an alternative to image UUIDs.
• Clone submission uses explicit Prism clone endpoints and records source-VM evidence in the lifecycle event ledger.
• Dedicated smoke:ahv-source-vm-clone command validates the approved-source-VM path without falling back to Image Service create.

Safety Boundary

• Source VM clone remains disabled unless APP_ENV=lab, real AHV adapter, controlled provisioning, lifecycle switches, approved NDC scope, lifecycle proof, and authorization envelope are all present.
• The selected source VM must be approved in NDC and must match the private allowed source VM UUID.
• No credential material is persisted in inventory records, audit metadata, frontend state, docs, or exported evidence.

Suggested Checks

npm run validate:ahv-lab-config
npm run smoke:ahv-source-vm-clone -- -BaseUrl http://127.0.0.1:18080 -EnvironmentName ndc-lab-source-clone-01
npm run test -- server/ahvLabRuntime.test.ts server/apiServer.test.ts src/services/cloudStudioApi.test.ts
npm run build

v9.1.0 Prism Element Lab Adapter

v9.1.0-prism-element-lab-adapter

v9.1.0-prism-element-lab-adapter adds a lab-only Prism Element provider path for one-node AHV test infrastructure.

Added

• Prism Element provider mode selected with NDC_AHV_LAB_PROVIDER=prism-element.
• PE-specific endpoint, credential, cluster, subnet/network, and image configuration.
• PE adapter switch NDC_AHV_PE_LAB_ADAPTER_ENABLED=false by default.
• Prism Element v2 client request paths for cluster, image, network, VM, task, power, and delete operations.
• Admin Settings visibility for the selected provider and PE adapter readiness.
• smoke:ahv-pe-readonly script for read-only PE validation.

Security Notes

• Real PE credentials and endpoint values are not committed.
• PE lifecycle remains disabled by default and lab-only.
• Read-only smoke performs no create, power, or destroy operation.
• Prism Element does not provide full Prism Central project and multi-cluster governance semantics.

Validation

• Unit tests cover PE config readiness, PE v2 request path construction, and PE read-only preflight with injected transport.
• API tests cover PE runtime config reporting without secret exposure.
• Run npm run validate:ahv-lab-config and npm run smoke:ahv-pe-readonly on the private lab host.

v9.0.0 AHV Lab Acceptance Pack

v9.0.0-ahv-lab-acceptance-pack

v9.0.0-ahv-lab-acceptance-pack prepares the operational evidence needed before testing NDC Studio against an authorized AHV/Prism Central lab.

Added

• AHV lab acceptance pack covering authorization, private configuration, execution sequence, evidence capture, go/no-go criteria, and closure.
• AHV lab acceptance report template for operator and platform reviewer sign-off.
• validate:ahv-lab-acceptance-pack script that checks required docs, lab deployment files, smoke scripts, and disabled lifecycle defaults.

Security Notes

• The pack keeps real AHV lifecycle disabled by default in .env.lab.example.
• The acceptance flow requires private environment variables and explicitly warns against committing .env.lab, credentials, endpoint secrets, or private/customer screenshots.
• The validator is metadata-only and does not call Prism Central.

Validation

• Run npm run validate:ahv-lab-acceptance-pack.
• Run npm run validate:ahv-lab-config only on the private lab host with authorized configuration.
• Run lifecycle smoke only after written approval and rollback ownership are confirmed.

v8.9.0 Provisioning Mode Selector

v8.9.0-provisioning-mode-selector

v8.9.0-provisioning-mode-selector clarifies how provisioning can be tested in each runtime.

Added

• API endpoint /api/provisioning/mode.
• Dashboard mode panel for Static Demo, Simulated API, Mock Prism, and Real AHV Lab.
• Mode-specific safety boundary, checks, next actions, and operator commands.
• Mock Prism endpoint classification for local mock lifecycle testing.

Security Notes

• The mode API does not return Prism passwords, tokens, Authorization headers, or secret values.
• Real infrastructure mutation is reported as active only for explicitly armed Real AHV Lab mode.
• Static demo and Mock Prism modes remain non-production testing surfaces.

Validation

• API and client tests cover provisioning mode fetch and mock Prism classification.
• Build verification should be run before release.

v8.8.0 Mock Prism Console Integration

v8.8.0-mock-prism-console-integration

Summary

Adds an Admin console view for the standalone mock Prism Central harness.

Highlights

• Adds /api/mock-prism/harness-console for Platform Admins.
• Shows fixture inventory counts, mock endpoint/config status, lifecycle steps, operator commands, and safety boundaries.
• Surfaces latest lab AHV run, task UUID, destroy state, and reconciliation status when available.

Safety

• The console does not execute shell commands from the browser.
• Prism passwords and Authorization headers are not returned to the frontend.
• Real Prism Central calls remain disabled for the mock harness view.

v8.7.0 Mock Prism Central Harness

v8.7.0-mock-prism-central-harness

Summary

Adds a local mock Prism Central harness so the AHV lifecycle path can be tested end to end without a Nutanix lab.

Highlights

• Adds a standalone Node-based mock Prism Central server.
• Adds fixture data for clusters, projects, subnets, images, VMs, and tasks.
• Adds .env.mock-prism.example and docker-compose.mock-prism.yml for running NDC Studio with the mock Prism service.
• Adds mock Prism validation and lifecycle smoke scripts.
• Adds unit coverage for Basic Auth, read-only inventory, create, poll, power, destroy, inventory reconciliation, and safety-prefix enforcement.

Safety

• Real AHV lab mode remains disabled by default.
• The mock harness uses fixture and in-memory state only.
• Public/static demo behavior remains simulated.
• Real Prism Central credentials must not be placed in .env.mock-prism.

v8.6.0 Console Operations Hardening

v8.6.0-console-operations-hardening

Summary

Packages the post-AHV-lab console operations work into a public release milestone.

Highlights

• Adds the Admin Settings surface for identity context, provider status, AHV lab runtime flags, configuration boundaries, and recent audit/log review.
• Adds API-backed settings summary and redacted audit event listing for operator review.
• Adds configurable IAM, local-user policy, and Active Directory connectivity settings using credential references instead of inline secrets.
• Hardens console operations with settings validation, connection tests, role mappings, audit filters, admin activity timeline, redacted configuration export, provider drill-down, operations queue triage, and controlled environment lifecycle actions.

Safety

• Real AHV lifecycle remains lab-only, opt-in, and gated by Platform Admin controls.
• Public/static demo behavior remains simulated.
• Admin settings reject inline secrets and expose redacted configuration evidence only.
• The next major technical phase is v9.0.0-ahv-lab-acceptance, focused on proving real AHV lifecycle against an authorized Prism Central test environment.

v8.5.0 AHV Lab Lifecycle

v8.5.0-ahv-lab-lifecycle

Summary

Adds the first lab-only AHV lifecycle path for authorized Prism Central test infrastructure.

Highlights

• Adds sanitized AHV lab runtime config and read-only preflight endpoints.
• Adds opt-in Prism Central v3 create, poll, power, and destroy lifecycle handling.
• Adds Docker Compose lab deployment, .env.lab.example, and AHV lab validation/smoke scripts.
• Keeps mock and disabled adapter paths intact for public/default deployments.

Safety

• Disabled by default.
• Requires APP_ENV=lab, AHV real adapter switch, controlled provisioning switch, and lab lifecycle switch.
• Requires Platform Admin API access.
• Redacts password, token, secret, and Authorization-shaped fields from audit metadata.

v7.5.0 On-Prem Install Profile Pack

v7.5.0-on-prem-install-profile-pack

Summary

Adds the durable on-prem operations foundation and install profile pack, then updates the public positioning to show simulated provisioning as enabled while real Nutanix infrastructure mutation remains disabled.

Highlights

• Adds durable persistence, migration baseline, JWT/OIDC boundary, signed audit export, admin upgrade health, and on-prem install profile pack API surfaces.
• Adds profile templates under docs/on-prem-profiles/.
• Adds validate:onprem-profile-pack and updates hosted starter validation.
• Updates README and repository About copy for a hosted/on-prem internal developer platform prototype.
• Reports simulated provisioning as enabled for prototype workflows.

Safety

• Real Prism Central calls remain disabled.
• Real Nutanix adapters remain disabled.
• Credential resolution remains disabled.
• No real infrastructure create, update, or delete operation is enabled.

v6.5.0 Operations Runbook Console

v6.5.0-operations-runbook-console

Summary

Adds an Admin Operations runbook console for production hardening review.

Highlights

• Adds GET /api/operations/runbook-console.
• Adds an Admin Operations panel for readiness score, blocked gates, runbook steps, evidence counters, and fail-closed controls.
• Keeps real adapter execution blocked.

Validation

• API, client helper, and build checks cover the endpoint and UI wiring.