arcature-cli 2026.2.0

# Arcature Certified Stack Contract — machine-readable.
#
# This is the single source of truth for the cross-ecosystem stack Arcature
# certifies. Embedded in the CLI via include_str! and consumed by `arc doctor`
# to report PASS or UNVERIFIED OVERRIDE. Certification is information and
# testing policy, not ecosystem lock-in: Cargo overrides are not prevented;
# an override outside this matrix is reported clearly as unverified.
#
# Snapshot date: 2026-08-14
# Arcature version: 2026.1.0
# @arcature/client version: 0.0.0 (placeholder while unpublished — the real
# shipping npm dependency written into generated package.json; replaced by a
# real semver through the separately-secured npm publication lifecycle)
#
# Do not claim compatibility with "latest". Every entry is an exact version or
# an explicit range tested in governance CI.

[snapshot]
date = "2026-08-19"
arcature_version = "2026.2.1"
arcature_build_version = "2026.1.0"
arcature_client_version = "0.0.0"
rust_toolchain = "1.97.1"

# --- Backend foundation (Rust crates) ---
# Each entry: the exact version certified in the workspace dependency graph
# and tested by governance CI.

[components.rust]
version = "1.97.1"
status = "certified"
role = "Rust toolchain (rustc + cargo)"
source = "rust-toolchain.toml"

[components.tokio]
version = "1.53.1"
status = "certified"
role = "async runtime"

[components.axum]
version = "0.8.9"
status = "certified"
role = "HTTP server and router foundation"

[components.tower]
version = "0.5.3"
status = "certified"
role = "middleware ecosystem"

[components.tower_http]
version = "0.6.6"
status = "certified"
role = "HTTP middleware utilities"

[components.hyper]
version = "1.11.0"
status = "certified"
role = "HTTP engine (transitive via axum)"

[components.rustls]
version = "0.23"
status = "certified"
role = "TLS (rustls with aws-lc-rs)"

[components.aws_lc_rs]
version = "0.7.0"
status = "certified"
role = "crypto provider (aws-lc-rs)"

[components.serde]
version = "1.0.229"
status = "certified"
role = "serialization"

[components.serde_json]
version = "1.0.145"
status = "certified"
role = "JSON serialization (exact-pinned)"

[components.sqlx]
version = "0.9.0"
status = "certified"
role = "PostgreSQL driver, compile-time checked SQL"

[components.sea_orm]
version = "2.0.1"
status = "certified"
role = "ORM over the same SQLx pool"

[components.sea_orm_migration]
version = "2.0.1"
status = "certified"
role = "schema migration authority"

[components.redis]
version = "1.5.0"
status = "certified"
role = "Valkey/Redis client"

[components.opendal]
version = "0.58.1"
status = "certified"
role = "object storage (S3-compatible)"

[components.reqwest]
version = "0.13.4"
status = "certified"
role = "outbound HTTP client (rustls)"

[components.lettre]
version = "0.11.23"
status = "certified"
role = "SMTP mail client"

[components.argon2]
version = "0.5.3"
status = "certified"
role = "password hashing (Argon2id)"

[components.tower_sessions]
version = "0.15.0"
status = "certified"
role = "session store"

[components.tracing]
version = "0.1.44"
status = "certified"
role = "structured logging / observability"

# --- Protocol ---
[components.inertia]
version = "3"
status = "certified"
role = "Inertia protocol version"

# --- Frontend toolchain ---
[components.node]
version = ">=24.19.0,<25"
status = "certified"
role = "Node.js LTS (development/build only)"

[components.pnpm]
version = "11.20.0"
status = "certified"
role = "frontend package manager"

[components.vite]
version = "8.2.1"
status = "certified"
role = "frontend dev server and production bundler"

[components.typescript]
version = "7.0.2"
status = "certified"
role = "frontend type checking"

[components.react]
version = "19.2.8"
status = "certified"
role = "default frontend framework"

[components.react_dom]
version = "19.2.8"
status = "certified"
role = "React DOM renderer"

[components.vue]
version = "3.5.41"
status = "certified"
role = "first-class alternate frontend"

[components.inertia_react]
version = "3.6.1"
status = "certified"
role = "official Inertia React client"

[components.inertia_vue]
version = "3.6.1"
status = "certified"
role = "official Inertia Vue client"

# --- Backend services (CI-tested matrix) ---
[services.postgresql]
certified_versions = ["15.13", "16.9", "17.5", "18.4"]
status = "certified"
role = "database"

[services.valkey]
certified_versions = ["8.1.2", "9.1.1"]
status = "certified"
role = "cache/KV"

[services.smtp]
certified_versions = ["v1.30.7"]
status = "certified"
role = "mail testing (Mailpit)"

[services.s3]
certified_versions = ["RELEASE.2025-09-07T16-13-09Z"]
status = "certified"
role = "object storage testing (MinIO)"

# --- Known incompatible versions ---
# Entries here are versions known to break Arcature. They are reported as
# errors (not mere unverified) by `arc doctor`.
[incompatible]
# No known incompatible versions at this snapshot. When a version is
# discovered to break Arcature, record it here with a reason.