chore(release): merge v2/main into main for v2.10.1

[cliffhall]

Closes #2654

Milestone merge of v2/main into main for the v2.10.1 patch release, which is step 2 of the release skill. 2.10.1 fixes #2651: on 2.10.0, npx @modelcontextprotocol/inspector fails with "could not determine executable to run".

This is a pure merge

$ git rev-list HEAD --not origin/main origin/v2/main
d2a4be55 chore: merge v2/main into main for the v2.10.1 release
895e57a9 chore: merge v2/main into main for the v2.10.1 release
#   two merges: review of this PR found #2658 (fixed by #2659 on v2/main), re-merged

$ git rev-parse origin/v2/main^{tree}
d5fb57a8ac7f0504dbe0003a4f94e6f4492d701b
$ git rev-parse HEAD^{tree}
d5fb57a8ac7f0504dbe0003a4f94e6f4492d701b

The merged tree is byte-identical to origin/v2/main and reads 2.10.1, bumped on v2/main in #2653 / PR #2655. The payload since 2.10.0 is PR #2652 (the inspector bin alias, its two guards, and the README's mcpdo entry) plus the bump.

Verification

Ledger: https://claude.ai/artifact/NKoqS9ANaGb6Yx5ANPdcdU (for maintainer review; one row per closed milestone issue, with what was run and what was observed)

• npm run local:gate on this tree passes every stage except smoke:web:firefox. That stage cannot launch Playwright's Firefox on macOS 27 (smoke:web:firefox cannot launch Playwright's Firefox on macOS 27 #2625). The three Firefox smokes were run from a clean export of this exact tree in the Linux Playwright container, and all passed. Storybook (529) was run separately, since the Firefox failure stops the gate chain before that stage.
• npm run pack:verify: OK (27 files, 5.70 MB unpacked), including its new npm exec @modelcontextprotocol/inspector step.
• npm audit: 0 vulnerabilities in all six installs.
• 3 / 3 milestone issues driven from the packed tarball:
  • Before: a bare npx of the published 2.10.0 fails.
  • After: npx -y file:<tgz> and npm exec @modelcontextprotocol/inspector both run the launcher.
  • Version: web, CLI and mcpdo all report 2.10.1.

Found by review, fixed on v2/main

• docs(publishing): pack:verify inventory omits the npm default-bin check #2658 → PR docs(publishing): list pack:verify's npm default-bin check #2659: docs/publishing.md did not list the new pack:verify default-bin step (Copilot, round 1). The fix is one line in docs/publishing.md, which no gate stage or smoke reads, so the gate, pack:verify and smoke results above stand for the final tree.

🤖 Generated with Claude Code

[Copilot]

🟡 Changes recommended

The canonical publishing guide does not document the newly added release verification step.

1 open finding

• Document npm default-bin check in publishing guide · New

What changed in this PR

Merges the v2.10.1 release payload into main, restoring bare npx invocation after adding the mcpdo binary.

Changes:

• Adds the inspector launcher alias and bumps version to 2.10.1.
• Adds offline and packaged-tarball verification of npm’s default-bin resolution.
• Documents mcpdo and the launcher alias.

File	Description
README.md	Documents the fourth client and invocation command.
clients/​launcher/​README.md	Explains the required inspector alias.
package.json	Bumps the version and adds the alias.
package-lock.json	Records manifest changes.
scripts/​lib/​npx-default-bin.mjs	Mirrors npm’s bin-selection behavior.
scripts/​lib/​npx-default-bin.test.mjs	Tests bin resolution and the root manifest.
scripts/​pack-and-verify.mjs	Exercises default-bin selection from the installed tarball.

🧠 Review effort: Balanced

---

Give feedback about Copilot approvals in this survey to enter a drawing for a $150 gift card.

[cliffhall]

Copilot round 1: 1 finding (publishing guide omitted the new pack:verify step). Fixed on v2/main via #2658 / PR #2659 and re-merged as d2a4be5; tree still byte-identical to origin/v2/main (d5fb57a8). Ledger updated. Requesting round 2.

[Copilot]

🟢 Approval recommended

The release payload is consistent, adequately tested, and the prior documentation gap is resolved.

0 open findings

1 resolved since last review

• Document npm default-bin check in publishing guide

🧠 Review effort: Balanced

---

Give feedback about Copilot approvals in this survey to enter a drawing for a $150 gift card.

[cliffhall]

Copilot review loop closed: round 2 (at d2a4be5) was clean — 0 inline comments, nothing in the headline or a suppressed block; the round-1 finding (#2658) is resolved.