release: v2.0.0

[github-actions]

Release v2.0.0.

Merging creates the v2.0.0 tag and triggers the release build.

Gmux now persists the scrollback and metadata for finished processes. This allows gmux to be more ergonomic to use for agents and automations from the CLI. See the new documentation for details, including the new gmux skill!
https://gmux.app/scripts-and-agents

Breaking

• remove protocol-1 SSE/bulk-GET compat surface (#224)
• (gmuxd) host identity, naming & peer URLs (ADR 0007) (#265)
• (gmuxd) token-authenticate tailnet peers; remove tailscale autodiscovery (ADR 0008) (#280)
• (cli) verb-first gmux 2.0 CLI (#314)

Security

• (daemon) create clipboard paste files with 0600 permissions (#291)
• (daemon) drop google fonts from login page (#287)
• move per-session sockets off shared /tmp to a per-user dir (#295)
• validate session ids and slugs before filesystem and url use (#297)

Features

• snapshot push protocol + cross-host project ownership (#191)
• (cli) route session actions through gmuxd; add --host/@suffix; local-default --list (#225)
• project ownership polish (references over adoption) (#227)
• (daemon) stamp sessions with last_activity_at on noteworthy state transitions (#229)
• (web) cross-host indicators — host suffix + devcontainer marker (#230)
• (web) activity-first home dashboard (#231)
• (web) rewrite project page with three activity sections and adaptive cwd subtitle (#232)
• (web) home owns reorder/remove; modal trimmed to additions only (#233)
• (web) auto-reload tab when bundle goes stale relative to daemon (#234)
• (web) tidy home/project navigation; fix terminal color bleed and replay width (#237)
• (gmuxd) keepalive ping on browser-facing PTY WebSocket (#245)
• (gmuxd) permessage-deflate on browser-facing PTY WebSocket (#245)
• (env) source a fresh login environment when launching sessions (#246)
• (web) show waiting indicator on sidebar logo (#248)
• (web) hamburger badge shows only the waiting state (#248)
• (web) move enable-notifications into Activity header as a ghost pill (#248)
• (web) show local host on project headers when projects span multiple hosts (#248)
• (web) settings modal shell + gear button (deep-linkable via ?settings) (#248)
• (web) move project management into Settings; home becomes pure overview (#248)
• (web) hosts tab in settings (read-only roster: self + peers) (#248)
• (web) home recency buckets (last hour / earlier today / yesterday / earlier this week) (#248)
• (web) settings modal — fixed-size panel with side tab rail (responsive) (#248)
• rename-proof peer references — surface & recover unresolved references (#278)
• 2.0 upgrade migration and explicit host auth status (#282)
• (web) show unavailable state for projects in the settings modal (#284)
• make project discovery host-authoritative (#305)
• (web) long-press a terminal link on mobile to copy or open it (#302)
• (web) collapse the session header while the keyboard is open on phones (#307)
• (web) rework the mobile terminal — toolbar, keyboard, resize, copy & paste (#308)

Fixes

• (web) break suggested_slug ties on path in discoverProjects sort (#226)
• project sidebar polish (stamps, dismiss, peer scoping, manage UX) (#228)
• (web) hide session close buttons in mock mode (dangling comma) (#235)
• (daemon) preserve PTY size across /resume and /restart (#238)
• (daemon) reconcile alive runners after daemon restart (#239)
• (daemon) suppress no-op session broadcasts; deterministic snapshot order (#240)
• (env) stop leaking session identity into spawned daemons (#246)
• (web) unique keys for discovered project rows (#260)
• (web) black rectangles in WebGL terminal — atlas mipmap driver bug + context-loss recovery (#267)
• (gmuxd) warn instead of fail on removed ADR 0007 config keys (#269)
• (gmuxd) disable permessage-deflate on the browser PTY WebSocket (mobile reconnect storm) (#279)
• (gmuxd) make restart wait for health; clarify install behavior (#268)
• (gmuxd) disable permessage-deflate on the peer-proxy browser WebSocket too (mobile reconnect storm) (#285)
• (web) make filteredSessions reactive to the URL query string (#294)
• terminal resize/scrollbar feedback loop; standardize scrollbars (#299)
• (web) mobile toolbar respects armed ctrl/alt modifiers (#300)
• (web) open links reliably on mobile by replaying the Linkifier mouse handshake on tap (#301)
• (gmuxd) reject /v1/projects/add on validation failure instead of reporting phantom success (#303)
• (web) blip counts only sidebar sessions, not discovered (#304)
• (daemon) recover the login page when a Strict-SameSite cookie was withheld (#309)
• (web) keep session URL on refresh until world snapshot loads (#311)

Docs

• correct scrollback size and architecture description (#288)

[github-actions]

Try this PR

curl -sSfL https://gmux.app/install-pr.sh | sh -s -- 223

Built from 10a65d5 — release: v2.0.0
_{Requires GitHub CLI with auth. Artifacts expire after 7 days.}