v2026.7.10

Release v2026.7.10

Fixed

• Made mcp_config.json valid JSON.
• Corrected invalid YAML frontmatter in lint-and-validate and design-rules.
• Added the missing allowed-tools contract to intelligent-routing.
• Fixed verify_all.py using an uninitialized results variable.
• Fixed toolkit-root discovery and URL argument routing in validation runners.
• Removed orchestration deadlocks caused by mandatory missing plan/CODEBASE files.
• Prevented the security scanner from flagging its own regex definitions.
• Made high/critical security findings return a failing exit code.
• Registered Playwright error listeners before navigation and corrected empty-label checks.
• Ensured Lighthouse temporary files are cleaned up and thresholds affect exit status.

Added

• Shared validation runner with JSON reporting and duration/error capture.
• Offline dependency hygiene analyzer.
• Build bundle-size analyzer.
• Toolkit self-validator for configuration, frontmatter, links, references, inventory, and Python syntax.
• Root quick-start guide and runtime-script documentation.
• Regression tests for the highest-impact failures.

Changed

• Runtime checks are optional when no URL is supplied.
• Full verification can run in static-only mode with --no-runtime.
• Architecture inventory and script counts now match the package contents.