diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 895bf0e..b725ab0 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "2.0.0"
+  ".": "2.0.1"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 222510c..e605b8d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,6 +13,16 @@ Regression coverage in `tests/kyte.test.js`:
 
 No API surface change for the consuming app. Recommended pairing with kyte-php 4.5.0 (`KYTE_JWT_FAMILY_MAX_LIFETIME` introduces a 12-hour absolute session cap; the cookie-TTL fix here ensures the client-side cookie expires in lockstep).
 
+## [2.0.1](https://github.com/keyqcloud/kyte-api-js/compare/v2.0.0...v2.0.1) (2026-05-28)
+
+
+### Bug Fixes
+
+* **jwt:** _sessionDestroyJwt must invoke completion callback on all paths ([e9213a6](https://github.com/keyqcloud/kyte-api-js/commit/e9213a634aaa590480a04c76e9369ffb6e393fea))
+* **jwt:** _sessionDestroyJwt must invoke completion callback on all paths ([ebb5225](https://github.com/keyqcloud/kyte-api-js/commit/ebb5225b5e550459951ea7bf556f9bc38e0cc7b2))
+* **jwt:** derive refresh cookie TTL from server's refresh_expires_at ([aeb0f78](https://github.com/keyqcloud/kyte-api-js/commit/aeb0f783cbdc954ff1c149b48fbec99c0e67c42c))
+* **jwt:** derive refresh cookie TTL from server's refresh_expires_at ([0b9363f](https://github.com/keyqcloud/kyte-api-js/commit/0b9363f026dbfba3a0aae981717f466d5a01186b))
+
 ## 2.0.1
 
 ### Bug Fix: JWT logout drops completion callback, breaking `addLogoutHandler`
diff --git a/package-lock.json b/package-lock.json
index 63c8575..3f6c5f3 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@keyqcloud/kyte-api-js",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@keyqcloud/kyte-api-js",
-      "version": "2.0.0",
+      "version": "2.0.1",
       "license": "MIT",
       "devDependencies": {
         "@vitest/coverage-v8": "^2.1.0",
diff --git a/package.json b/package.json
index f69df62..3e6b3ae 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@keyqcloud/kyte-api-js",
-  "version": "2.0.2",
+  "version": "2.0.1",
   "description": "Browser-side JavaScript SDK for the Kyte low-code platform",
   "private": true,
   "main": "kyte-source.js",