chore: version packages (rc)

.changeset/pre.json

@@ -23,6 +23,7 @@
     "api-client-rate-limit-retry",
     "api-middleware-framework-home",
     "api-public-schema-topology",
+    "app-only-slot-stamping",
     "artifact-control-plugin",
     "atomic-deploys-phase-a",
     "atomic-deploys-phase-a2",

packages/everything-dev/CHANGELOG.md

@@ -1,5 +1,11 @@
 # everything-dev
 
+## 2.0.0-rc.27
+
+### Patch Changes
+
+- ccaa284: Hotfix for the rc.26 slot-stamping incident: the deploy train now stamps only `app.*` slots (the base-runtime slots children never author — auth, host) from the release manifest's slots map. Plugin slots were being stamped into the child's leaf payload, which both expanded a declared-plugin child's composed plugin set to the whole parent set (violating the extends contract — a child's declared `plugins` object owns the entire plugin domain via a wholesale replace) and produced schema-invalid `plugins.<id>.ui` records (stamped ui entries carry no required `name`, and the wholesale replace never fills it) — blocking every child with authored plugins from deploying. Children pinned to rc.26 with authored `plugins` are CI-blocked until they run `bos upgrade`; live apps are unaffected (the boot-check refused the publish before any registry write).
+
 ## 2.0.0-rc.26
 
 ### Minor Changes

packages/everything-dev/package.json

@@ -1,6 +1,6 @@
 {
   "name": "everything-dev",
-  "version": "2.0.0-rc.26",
+  "version": "2.0.0-rc.27",
   "type": "module",
   "engines": {
     "node": ">=20.11"

pnpm-workspace.yaml

@@ -64,7 +64,7 @@ catalog:
   drizzle-orm: ^0.45.1
   effect: 4.0.0-rc.117
   every-plugin: ^3.0.0-rc.14
-  everything-dev: ^2.0.0-rc.26
+  everything-dev: ^2.0.0-rc.27
   near-kit: ^0.20.2
   pg: ^8.12.0
   react: 19.2.9