Support Matrix & Supported Versions (v1.0)
What AI Software Factory v1.0.0 runs on, and when each component reaches EOL.
This is the support contract for self-hosters and enterprise customers; the
operating instructions live in docs/development/admin-guide.md
and docs/development/deployment.md.
1. Runtime
| Component |
Supported |
Pinned in this repo |
Notes |
| Node.js |
20 LTS (current line) and 22 LTS |
engines.node >= 20 (package.json); CI builds on Node 20 |
v1 targets the Node 20 LTS line (active until 2026-04); 22 LTS (maintenance until 2027-04) is supported by the same builds. Node 18 is not supported (EOL 2025-04). |
| pnpm |
9.15.0 (corepack, packageManager field) |
pnpm@9.15.0 |
pnpm install --frozen-lockfile in CI; other 9.x minor versions are supported for local development |
| TypeScript |
5.x (workspace tsconfig presets in packages/config) |
— |
build-time only |
| Docker |
Engine 24+ with compose v2 |
compose uses name: + profiles: |
data layer + app profile (infrastructure/docker/) |
| Kubernetes |
1.28+ |
manifests are plain apps/v1 / networking.k8s.io/v1 |
nginx ingress controller + cert-manager required (TLS) |
2. Data & infrastructure
| Component |
Supported |
Pinned in this repo |
EOL / notes |
| PostgreSQL |
16 (15 supported) |
postgres:16-alpine (dev compose + k8s StatefulSet) |
PG 16 → 2028-11 (15 → 2027-11). PITR via wal-g (chekkan/wal-g:v3.0.7 pinned) — see deployment.md §8 |
| Redis |
7 |
redis:7-alpine |
7.x supported; AOF on by default. Redis is not a DR artifact (rebuildable queue/cache — deployment.md §8) |
| OpenSearch |
2.x (2.15 in dev) |
opensearchproject/opensearch:2.15.0 (dev), :2 (CI) |
2.x line; single-node in dev (security off), managed/3-node in prod (security on) |
| Object storage |
S3-compatible: MinIO or cloud S3 |
minio/minio (dev compose) |
upload buckets must be versioned; MinIO 4-node erasure for self-host prod (admin-guide.md §3) |
| Mail |
SMTP relay (any) |
— |
no SMTP ⇒ stub transport (logs only); verification mail flow requires a relay in staging/prod |
| Virus scan |
ClamAV |
clamav/clamav (:3310 in dev) |
optional in dev, on by default in prod (files pipeline) |
3. Browsers (PR-167, Phase 0 policy)
Latest two major versions of: Chrome, Edge, Firefox, Safari (desktop),
plus responsive behavior on tablet/mobile. The Playwright E2E matrix runs
chromium-desktop (1440×900) and chromium-mobile (375×812 @dpr3) as the
regression gate; Safari/Firefox are supported but not CI-gated in v1.0.
| Browser |
Support window |
EOL reference (v1.0 era) |
| Chrome / Edge |
current − 1 major |
Chromium ~42-day channel cadence |
| Firefox |
current − 1 major |
~4-week ESR-adjacent cadence |
| Safari (macOS/iOS) |
current − 1 major |
tied to macOS/iOS release |
4. AI providers
| Provider |
Status in v1.0 |
mock |
default in dev & staging — deterministic echo provider (release E2E runs against it) |
| OpenAI / Anthropic / Google / OSS / custom endpoints |
supported via AI_PROVIDER + AI_API_KEY (packages/ai gateway) |
5. API & platform compatibility
| Surface |
Support |
| REST API |
/api/v1 — stable, additive-only; breaking changes ship as /api/v2 side-by-side with a Sunset window (docs/api/versioning.md) |
| OpenAPI |
docs/api/openapi.yaml is canonical; served at GET /api/v1/docs/openapi.yaml; enforced by the contract test |
| Webhooks |
HMAC-SHA256 signature X-Factory-Signature: t=…,v1=… over "<t>.<rawBody>"; retries ≤ 8 |
| SSO |
SAML 2.0 + OIDC (enforce mode); SCIM 2.0 (Okta/Entra) |
| Telemetry |
OpenTelemetry (OTLP) — opt-in (OTEL_ENABLED, NFR-H5) |
6. Support policy
- v1.0.0 (2026-10-04) is supported for 12 months (bugfix + security
patches); the patch line receives security fixes until the next minor.
- Upgrade path: deploy the next tag — migrations run on api startup;
rollback = redeploy the previous tag (schema is forward-only; a schema
rollback uses the PITR restore runbook,
deployment.md §8).
- Unsupported (explicit): Node 18, PostgreSQL < 15, Redis < 6, OpenSearch 1.x,
IE / legacy Edge (pre-Chromium), non-versioned upload buckets.