chore(main): release 2.0.0

[chrischall]

🤖 I have created a release beep boop

2.0.0 (2026-08-06)

⚠ BREAKING CHANGES

• protocol: bind the ephemeral key into the ready signature (#222)

Features

• protocol: add write_cookies, the one verb that can repair a rotated session (#211) (b2557c2)
• protocol: bind the ephemeral key into the ready signature (#222) (c13aeed)
• server: let a request name the tab that relays it (#207) (c5d3f4d)
• server: pin the extension's identity, and verify it on the peer path (#213) (0eeced7)

Bug Fixes

• cli: let a real filesystem error be itself, not "no extension pin" (#221) (c87a864), closes #220
• cli: validate --via-tab before connecting, like the request URL (#210) (959fcc5)
• extension: reattach the write_cookies doc block, and name the writable cookies as writable (#215) (2730c4a)
• extension: use the guarded caps local for the cookie heading (#217) (f95c832)
• server: release only our own extension claim, and stop guessing scoped names (#219) (3d90a64), closes #218
• server: type no-tab rejections so they stop reading as version mismatches (#205) (dc30bd9)

Refactor

• server: drop the concatBytes imports the signature change orphaned (#224) (4985ba7), closes #223

---

This PR was generated with Release Please. See documentation.

[claude]

Reviewed this as a standard release-please release PR for 2.0.0 (version bump + CHANGELOG + cross-package dep sync commit) — no source code changes.

Checks performed:

• All 8 package.json files (root + 7 workspaces) are in lockstep at 2.0.0, per the "all packages share one version" convention.
• All inter-package @fetchproxy/* deps were bumped to ^2.0.0 using caret ranges (bootstrap, cli, extension-chrome, extension-core, server, test-helpers) — matches the "always caret, never literal" convention.
• Remaining 1.11.0 string occurrences in the tree are unrelated: an external @exodus/bytes dep pin, historical "1.11.0+" feature-introduction doc comments, and mock extension version fixtures in tests — none of these should be bumped.
• CHANGELOG commit inclusion was pre-verified by the pipeline; not re-litigated here.

No issues found.

Verdict: pass

[github-actions]

✅ Auto-review verdict: pass — PR #206 is a mechanical release-please release PR for 2.0.0 (version bump, CHANGELOG, and cross-package dep sync) with no source code changes; all versions and caret-range cross-deps are consistent.

[chrischall]

🤖 Created releases:

• v2.0.0

🌻