Roadmap¶

Milestones from DESIGN.md.

1. Done. Repo scaffold, models, REST and GraphQL API, connection test.
2. Done. PowerShell layer ported from terraform-provider-windowsddi, with fake server and pwsh stub tests. Cmdlets the provider did not use are marked # unverified: in windows/client.py until checked on a real server.
3. Done. Import from Windows: a branch per import with branching (reused while open, change request submitted when change control is installed), an import proposal review queue without it. IPv4 scopes, exclusions, reservations, user and vendor classes, option definitions and values. A pure diff engine (sync/diff.py) that push will reuse. Scheduled by a system job from import_interval.
4. Done. Push to Windows: a reconcile per server (sync/push.py plans, sync/windows_writer.py writes) on branch merge or revert, or after saves without branching. Dry-run and "Sync now". Deletes only what sync state records as managed. One import or push per server at a time across all workers (a PostgreSQL advisory lock, not Redis: import already used one). Failover: replication after pushing to a primary.
5. Done. Remaining objects end to end, in two PRs.
6. PR A (#4, merged): superscopes, policies (and policy-qualified option values), vendor class option definitions and values (WindowsVendorOptionDefinition, WindowsVendorOption), failover relationships (secret from a credential profile), MAC filters and list switches (MacFilterLists), option values containing commas (Kea's \,).
7. PR B (#5, merged): DHCPv6 scopes, reservations, user classes and option values against sys4's standard dhcp6 definitions (v6 custom definitions, vendor classes and values, and exclusions are skipped, logged and kept); IAID on WindowsReservation; live leases on a Leases tab of the subnet page through a job and an HTMX panel, without a cache model.
8. In progress. Lab acceptance tests against a real Windows server, then the first release.
9. Built: the opt-in lab tier. make test-lab (tests/lab/) runs the real client over WinRM with one round trip test per # unverified: marker and known question; make lab-e2e (dev/scripts/lab_e2e.py) imports the lab server into the dev stack, pushes creates, updates and deletes back for every kind, checks that a second push and import change nothing, and reads live leases. Both only touch nbwd-test- objects in 198.18.0.0/15 and 2001:db8:4e42::/64, check before every delete and clean up on failure.
10. Deferred (no lab server available yet): running them, fixing what they find (with fake, fixture and stub regression tests), recording scrubbed fixtures and removing the settled markers. With a single server the two failover markers (scope removal while in a relationship, what replication copies) stay unverified.
11. Release prep: README, DESIGN section 12 and CHANGELOG made ready for 0.1.0. A documentation site (Zensical, make docs, published to GitHub Pages from release tags) with installation, Windows preparation, configuration, a first-sync walkthrough, import, push, DHCPv6, failover, leases, permissions, API, security, workers, troubleshooting and limitations. Version bump, tag and PyPI publishing (trusted publisher and pypi environment ready) wait for the owner's go.