v2.0.0

What's Changed

• feat(tools)!: zod single source of truth + enforced numeric bounds by @PaSympa in #34
• fix(tools): correct destructiveHint on data-overwriting tools by @PaSympa in #35
• fix(tools): remove as-any casts (Findings #5, #34) by @PaSympa in #36
• feat(tools): outputSchema + structuredContent on read tools (Finding #3) by @PaSympa in #37
• feat: land remaining v2.0 chain — input validation, dispatch, intents, toolsets, mass-op safety by @PaSympa in #50
• fix: close remaining allow-list bypasses, spec-align protocol errors (audit round 2) by @PaSympa in #51
• chore(release): sync main and prep v2.0 metadata by @PaSympa in #52
• fix: doc-audit round — docs aligned with behavior, crosspost + delete-reason bugs by @PaSympa in #53
• fix: doc-audit round 2 — 20 confirmed findings by @PaSympa in #54
• fix: audit round 5 — pipeline, robustness, test debt (22 findings) by @PaSympa in #55
• chore!: drop Node 20 (EOL) — engines >=22 by @PaSympa in #56
• fix: audit round 6 — CI gap, behavioral tests, supply chain (19 findings) by @PaSympa in #58
• release: 1.7.3 by @PaSympa in #59
• docs: complete the OAuth permission list (live-campaign findings) by @PaSympa in #60
• chore(deps-dev): bump eslint from 10.4.1 to 10.5.0 by @dependabot[bot] in #61
• chore(deps-dev): bump @types/node from 25.9.2 to 25.9.3 by @dependabot[bot] in #62
• chore(deps-dev): bump typescript-eslint from 8.60.1 to 8.61.0 by @dependabot[bot] in #63
• chore(deps-dev): bump prettier from 3.8.3 to 3.8.4 by @dependabot[bot] in #64

Full Changelog: v1.7.3...v2.0.0