chore(release): 2.0.0

[karlwaldman]

Bumps the version to 2.0.0 in all four places that carry it (package.json, package-lock.json root entries, src/version.ts, and the pin in tests/release-readiness.test.ts) and adds the ## [2.0.0] - 2026-09-14 CHANGELOG section as the first heading, which the release-readiness guard requires.

Why a major

Approved by Karl 2026-09-13 ("approve node 2.0 and include 112"). Several resources were typed and called in ways production never supported, and correcting them changes signatures and return types. The CHANGELOG section lists every breaking change with its migration; in brief:

• client.spreads / client.indicators ([P2] spreads and indicators resources are typed against a shape the API does not send, and omit required parameters #112, PR fix(spreads,indicators): send required params and type the payloads production returns (#112) #119): untyped get/historical/all removed; required selectors; return types match the wire; congressionalTrades() removed.
• client.rigCounts ([P1][bug] client.rigCounts types describe none of the live payloads, and historical() returns undefined #108, PR fix(rig-counts): type client.rigCounts as the payloads production returns (#108) #113): latest() value is count; historical() returns a page envelope (it returned undefined).
• client.ei ([P2][bug] RigCountRecord describes fields the API never returns, and covers two different endpoint shapes #104/[P2][bug] Six EI by-* methods omit the query param their route requires, and the API answers the failure with HTTP 200 #105, PRs fix(ei): type rig-count reports as the payloads production returns (#104) #109/fix(ei): make the six by-* methods send their required filter and return the page (#105) #110): report types; the six by* methods require their filter and return records + pagination meta.
• subscriptions.list() ([P1][Sprint 1][Subscriptions] Complete get, update, pause, and resume lifecycle #78, PR feat(subscriptions): add get, update, pause and resume (#78) #115): throws on an unmappable body instead of resolving [].
• Types ([P2][bug] Published types describe payloads production does not return: categories(), Price freshness fields, Commodity.category #94, PR fix(types): describe the payloads production actually returns (#94) #102): CategoriesResponse reshaped.
• Errors ([P2][bug] Errors from {status:"fail", data:{error}} responses lose the API's message and read "HTTP 404: Not Found" #111/[P2][errors] lower-snake fail codes (invalid_code, no_price_data, invalid_request) are dropped from error.code #117, PRs fix(errors): read the reason from {status:"fail", data} failure bodies (#111) #114/fix(errors): keep lower-snake fail-envelope codes in error.code (#117) #120): fail-envelope reason and snake-case codes reach error.message / error.code.
• Base URL ([P2][bug] Origin guard pins the origin but not the base path, and a baseUrl with a query silently rewrites every request #89, PR fix(url): pin the base path, and reject a baseUrl with a query or fragment (#89) #99): a query or fragment throws at construction.

Plus additions (spreads/indicators history and all methods, subscriptions get/update/pause/resume, typed fuel-surcharge clients) and fixes (timeout through body read, pagination past the 500-row cap, path encoding, streaming lifecycle, .d.cts for CommonJS).

Verification (local, this branch)

• npm test → 56 files, 919 passed, 1 skipped (includes release-readiness: package, runtime and changelog versions agree at 2.0.0)
• tsc --noEmit clean · npm run lint (--max-warnings=0) clean · npm run build clean (37 .d.cts emitted)
• check:secrets, storefront:check (40 surfaces), snippets:check pass
• smoke:package did not pass locally, for an environmental reason: it builds, packs, installs the tarball and validates storefront claims, then calls the live /v1/demo/prices endpoint, which answered 429 because this workstation's IP had already made 486 demo requests that day. CI's Exact package ESM and CJS smoke job runs the same script from a runner IP and is the gate for this PR; publish.yml runs it again before publishing.
• Base main at 26e5694 passed Test, Live API Tests and Docs deploy

npm publish runs on the GitHub release event after merge.

🤖 Generated with Claude Code

https://claude.ai/code/session_015ao5paex73xXvuM424Libo

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 432572aa-02d9-4da7-927c-940598b37561

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}