diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3da9a6e..aaaaa55 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,15 @@ orchestration code; see each submodule's own `CHANGELOG.md`
 [sso-manager-node](https://github.com/theta42/sso-manager-node/blob/master/CHANGELOG.md))
 for what changed inside the apps it composes.
 
+## [v2.0.0] - 2026-08-09
+
+Rolls up **sso-manager-node v2.0.0**, **theta-agent v2.0.0**, **jump-host v2.0.0**.
+
+### Added
+- **Theta Gateway (\`jump-host\` v2.0.0)**: WireGuard mesh exit node management, QR code profiles, \`.conf\` file downloads, and automatic X25519 keypair bootstrap.
+- **Theta Agent (v2.0.0)**: System tray status companion badge, systemd logind desktop session detection, and real-time CPU / disk / process telemetry stream.
+- **SSO Directory (\`sso-manager-node\` v2.0.0)**: Live telemetry dashboard cards, desktop session power controls (lock, display off, logout, sleep), and site reconciler.
+
 ## [v1.48.0] - 2026-08-08
 
 Rolls up **sso-manager-node v1.33.0**, **theta-agent v1.8.0**, **proxy v1.35.1**, **jump-host v1.19.1**.
diff --git a/jump-host b/jump-host
index 03dd903..da03cdd 160000
--- a/jump-host
+++ b/jump-host
@@ -1 +1 @@
-Subproject commit 03dd903e07ed7f8f4260c73172d7885a915b22c3
+Subproject commit da03cdd6669eb9157bf587d52bb17110ed6435e8
diff --git a/sso-manager-node b/sso-manager-node
index d442f1e..420a9c9 160000
--- a/sso-manager-node
+++ b/sso-manager-node
@@ -1 +1 @@
-Subproject commit d442f1e3f92419a6a92e4e7d60e7188d95ab5c7c
+Subproject commit 420a9c9f8aa4110637edd5e4b1ec8001a1362cbb
diff --git a/theta-agent b/theta-agent
index a423fec..a3a21c3 160000
--- a/theta-agent
+++ b/theta-agent
@@ -1 +1 @@
-Subproject commit a423fec835d090c68d6e29a1f5c70ff3ca76961c
+Subproject commit a3a21c38844f6b673eb6d52552db9b3759432d6b