v0.47.0

0.47.0 (2026-07-31)

Features

• contracts: execute every rule the contracts package states, and gate it (83bb319)
• release: assert the console and the api are the same build (91c2ca8)

Bug Fixes

• auth: close four request-boundary gaps (1a7b381)
• boot-smoke: a completed WebSocket upgrade no longer fails the probe (afc3169)
• ci: make the path filter fail open instead of silently skipping gates (689049c)
• cors: admit the header the console now sends, from one declaration (5564b85)
• release: a rehearsal must not move latest either (dc4ba44)
• release: a rehearsal must not move latest either (32c97b4)
• release: a rehearsal must not move production, and must bake an identity (d5d0259)
• release: a rehearsal must not move production, and must bake an identity (9869f2d)
• release: the console deploy was publishing to a project it invented (7c0057a)
• release: the console job had no pnpm, so the build could never have run (48de455)
• release: the console job had no pnpm, so the build could never have run (828bdfd)
• test: make the SIGTERM stop barrier a barrier (0c3cbae)
• web: move the Vercel build command into the repo and off the package name (fcd45c4)