2.10.0

What's Changed

• docs(release): add the release-notes step and the re-cut procedure by @cliffhall in #2555
• Scope secret-store entries by a per-state-file namespace by @BobDickinson in #2556
• Promote recurring pr-flow/board-ops command blocks into scripts/ helpers by @BobDickinson in #2559
• refactor(core): adopt @modelcontextprotocol/ext-tasks; host adapter in core/extension/tasks by @cliffhall in #2564
• test(web): drop the unjustified double cast in storage-browser.test.ts by @cliffhall in #2584
• test(cli): prove the catalog-budget escape hatch round-trips by @cliffhall in #2595
• test(core): crashable stdio fixture + mid-session crash reconciliation tests by @cliffhall in #2598
• fix(web): one scrollbar for long JSON tool results by @cliffhall in #2593
• fix(web): compare deep-link auth tokens in constant time by @cliffhall in #2577
• feat(web): add an unauthenticated GET /healthz probe to the backend by @cliffhall in #2585
• feat(web): show the OAuth redirect URI with copy in Server Settings by @cliffhall in #2586
• fix: redact URL query secrets in error text shown by the web and TUI clients by @cliffhall in #2588
• fix(core): --server with an Object.prototype name reports not found (#2537) by @cliffhall in #2583
• fix(cli): read stored-auth tokens from the active issuer slot (#2517) by @cliffhall in #2572
• feat(cli): add -q/--quiet to print only the result or the error by @cliffhall in #2576
• feat(cli): bash/zsh/fish shell completion via --completion by @cliffhall in #2579
• Purge secret-store entries orphaned when a state file's namespace stamp is stripped by @cliffhall in #2600
• feat(cli): servers/add, servers/edit, servers/remove catalog writes by @cliffhall in #2581
• feat(scripts): script the release notes and Release creation (release:notes) by @cliffhall in #2591
• feat(cli): --output / --output-format raw|json to save a result to a file by @cliffhall in #2582
• feat(cli,tui): skills catalog budget flags (--skill-catalog-max-skills/--skill-catalog-max-bytes) by @cliffhall in #2587
• ci: replace the suspended DCO app with a signoff check we own by @cliffhall in #2603
• fix(tui): cap Protocol tab request/response bodies like the Network pane by @cliffhall in #2597
• fix(tui,web): handle a browser opener that cannot be spawned by @cliffhall in #2575
• feat(tui): copy values via OSC 52, with a save-to-file fallback (#2421) by @cliffhall in #2573
• feat(tui): add a / filter to the Tools, Resources, Prompts and Skills lists by @cliffhall in #2578
• feat(tui): w on the tool result view saves the result to a file by @cliffhall in #2594
• feat(tui): add a '?' keybinding help overlay by @cliffhall in #2592
• feat(tui): Tasks and Subscriptions tabs and a Roots editor by @cliffhall in #2599
• test(web): subscribe the fetch log before connecting in timeout-diagnostics (#2580) by @cliffhall in #2612
• feat(daemon-cli): mcpdo — experimental connection CLI client (#1432) by @BobDickinson in #1783
• fix(web): chain MRTR rounds when the server rotates requestState by @cliffhall in #2610
• ci: run the DCO check on every v2 PR now, before push, and after merge (#2616) by @cliffhall in #2619
• chore(core): promote the CLI surface mcpdo shares into core/cli (#2461) by @cliffhall in #2613
• feat(tui): verify the whole skills catalog with v, so the catalog budget applies by @cliffhall in #2620
• test(tui): stop parsing the wrapped frame for the saved-copy path by @cliffhall in #2626
• chore(release): 2.10.0 step 1 — audit, audit fixes, bump to 2.10.0 by @cliffhall in #2627
• fix(cli): complete servers/add|edit|remove and --output-format values by @cliffhall in #2634
• fix: v2.10.0 merge review findings — TUI error redaction, mcpdo daemon flush, CodeQL #78-#81 by @cliffhall in #2639
• ci: make DCO a required status check on v2/main (#2621) by @cliffhall in #2635
• fix: sweep table-cell escaping (CodeQL #74-#76) and document mcpdo's environment variables by @cliffhall in #2641
• chore(release): merge v2/main into main for v2.10.0 by @cliffhall in #2637

Full Changelog: 2.9.0...2.10.0
Smoke test ledger for milestone branch: v2/chore/milestone-merge-v2.10.0

Thanks for helping us improve

This release addresses issues reported by these community members. Thank you for taking the time to file them:

• @CloneOfAlex (#2420, #2421, #2428, #2429, #2430, #2431, #2432, #2433, #2434, #2435, #2436, #2437, #2438)