@akira-tl/forgerelay 1.1.0 → 1.1.2

package/dist/ui/assets/xml-_44rx9_2.js

@@ -0,0 +1 @@
+import{t as e}from"./java-CW9pZ5bh.js";import{t}from"./heavy-payload-Cqx9MOkH.js";var n=t({default:()=>i}),r=Object.freeze(JSON.parse(`{"displayName":"XML","name":"xml","patterns":[{"begin":"(<\\\\?)\\\\s*([-0-9A-Z_a-z]+)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.xml"}},"end":"(\\\\?>)","name":"meta.tag.preprocessor.xml","patterns":[{"match":" ([-A-Za-z]+)","name":"entity.other.attribute-name.xml"},{"include":"#doublequotedString"},{"include":"#singlequotedString"}]},{"begin":"(<!)(DOCTYPE)\\\\s+([:A-Z_a-z][-.0-:A-Z_a-z]*)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"keyword.other.doctype.xml"},"3":{"name":"variable.language.documentroot.xml"}},"end":"\\\\s*(>)","name":"meta.tag.sgml.doctype.xml","patterns":[{"include":"#internalSubset"}]},{"include":"#comments"},{"begin":"(<)((?:([-0-9A-Z_a-z]+)(:))?([-0-:A-Z_a-z]+))(?=(\\\\s[^>]*)?></\\\\2>)","beginCaptures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.xml"},"3":{"name":"entity.name.tag.namespace.xml"},"4":{"name":"punctuation.separator.namespace.xml"},"5":{"name":"entity.name.tag.localname.xml"}},"end":"(>)(</)((?:([-0-9A-Z_a-z]+)(:))?([-0-:A-Z_a-z]+))(>)","endCaptures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"punctuation.definition.tag.xml"},"3":{"name":"entity.name.tag.xml"},"4":{"name":"entity.name.tag.namespace.xml"},"5":{"name":"punctuation.separator.namespace.xml"},"6":{"name":"entity.name.tag.localname.xml"},"7":{"name":"punctuation.definition.tag.xml"}},"name":"meta.tag.no-content.xml","patterns":[{"include":"#tagStuff"}]},{"begin":"(</?)(?:([-.\\\\w]+)((:)))?([-.:\\\\w]+)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.namespace.xml"},"3":{"name":"entity.name.tag.xml"},"4":{"name":"punctuation.separator.namespace.xml"},"5":{"name":"entity.name.tag.localname.xml"}},"end":"(/?>)","name":"meta.tag.xml","patterns":[{"include":"#tagStuff"}]},{"include":"#entity"},{"include":"#bare-ampersand"},{"begin":"<%@","beginCaptures":{"0":{"name":"punctuation.section.embedded.begin.xml"}},"end":"%>","endCaptures":{"0":{"name":"punctuation.section.embedded.end.xml"}},"name":"source.java-props.embedded.xml","patterns":[{"match":"page|include|taglib","name":"keyword.other.page-props.xml"}]},{"begin":"<%[!=]?(?!--)","beginCaptures":{"0":{"name":"punctuation.section.embedded.begin.xml"}},"end":"(?!--)%>","endCaptures":{"0":{"name":"punctuation.section.embedded.end.xml"}},"name":"source.java.embedded.xml","patterns":[{"include":"source.java"}]},{"begin":"<!\\\\[CDATA\\\\[","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"]]>","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.unquoted.cdata.xml"}],"repository":{"EntityDecl":{"begin":"(<!)(ENTITY)\\\\s+(%\\\\s+)?([:A-Z_a-z][-.0-:A-Z_a-z]*)(\\\\s+(?:SYSTEM|PUBLIC)\\\\s+)?","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"keyword.other.entity.xml"},"3":{"name":"punctuation.definition.entity.xml"},"4":{"name":"variable.language.entity.xml"},"5":{"name":"keyword.other.entitytype.xml"}},"end":"(>)","patterns":[{"include":"#doublequotedString"},{"include":"#singlequotedString"}]},"bare-ampersand":{"match":"&","name":"invalid.illegal.bad-ampersand.xml"},"comments":{"patterns":[{"begin":"<%--","captures":{"0":{"name":"punctuation.definition.comment.xml"},"end":"--%>","name":"comment.block.xml"}},{"begin":"<!--","captures":{"0":{"name":"punctuation.definition.comment.xml"}},"end":"-->","name":"comment.block.xml","patterns":[{"begin":"--(?!>)","captures":{"0":{"name":"invalid.illegal.bad-comments-or-CDATA.xml"}}}]}]},"doublequotedString":{"begin":"\\"","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"\\"","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.double.xml","patterns":[{"include":"#entity"},{"include":"#bare-ampersand"}]},"entity":{"captures":{"1":{"name":"punctuation.definition.constant.xml"},"3":{"name":"punctuation.definition.constant.xml"}},"match":"(&)([:A-Z_a-z][-.0-:A-Z_a-z]*|#[0-9]+|#x\\\\h+)(;)","name":"constant.character.entity.xml"},"internalSubset":{"begin":"(\\\\[)","captures":{"1":{"name":"punctuation.definition.constant.xml"}},"end":"(])","name":"meta.internalsubset.xml","patterns":[{"include":"#EntityDecl"},{"include":"#parameterEntity"},{"include":"#comments"}]},"parameterEntity":{"captures":{"1":{"name":"punctuation.definition.constant.xml"},"3":{"name":"punctuation.definition.constant.xml"}},"match":"(%)([:A-Z_a-z][-.0-:A-Z_a-z]*)(;)","name":"constant.character.parameter-entity.xml"},"singlequotedString":{"begin":"'","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"'","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.single.xml","patterns":[{"include":"#entity"},{"include":"#bare-ampersand"}]},"tagStuff":{"patterns":[{"captures":{"1":{"name":"entity.other.attribute-name.namespace.xml"},"2":{"name":"entity.other.attribute-name.xml"},"3":{"name":"punctuation.separator.namespace.xml"},"4":{"name":"entity.other.attribute-name.localname.xml"}},"match":"(?:^|\\\\s+)(?:([-.\\\\w]+)((:)))?([-.:\\\\w]+)\\\\s*="},{"include":"#doublequotedString"},{"include":"#singlequotedString"}]}},"scopeName":"text.xml","embeddedLangs":["java"]}`)),i=[...e,r];export{n,i as t};

package/dist/ui/assets/{xsl-DvDSndNI.js → xsl-B5QWQPoi.js}

@@ -1 +1 @@
-import{t as e}from"./xml-CfeBNlMP.js";var t=Object.freeze(JSON.parse(`{"displayName":"XSL","name":"xsl","patterns":[{"begin":"(<)(xsl)((:))(template)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.namespace.xml"},"3":{"name":"entity.name.tag.xml"},"4":{"name":"punctuation.separator.namespace.xml"},"5":{"name":"entity.name.tag.localname.xml"}},"end":"(>)","name":"meta.tag.xml.template","patterns":[{"captures":{"1":{"name":"entity.other.attribute-name.namespace.xml"},"2":{"name":"entity.other.attribute-name.xml"},"3":{"name":"punctuation.separator.namespace.xml"},"4":{"name":"entity.other.attribute-name.localname.xml"}},"match":" (?:([-0-9A-Z_a-z]+)((:)))?([-A-Za-z]+)"},{"include":"#doublequotedString"},{"include":"#singlequotedString"}]},{"include":"text.xml"}],"repository":{"doublequotedString":{"begin":"\\"","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"\\"","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.double.xml"},"singlequotedString":{"begin":"'","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"'","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.single.xml"}},"scopeName":"text.xml.xsl","embeddedLangs":["xml"]}`)),n=[...e,t];export{n as default};
+import{t as e}from"./xml-_44rx9_2.js";var t=Object.freeze(JSON.parse(`{"displayName":"XSL","name":"xsl","patterns":[{"begin":"(<)(xsl)((:))(template)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.namespace.xml"},"3":{"name":"entity.name.tag.xml"},"4":{"name":"punctuation.separator.namespace.xml"},"5":{"name":"entity.name.tag.localname.xml"}},"end":"(>)","name":"meta.tag.xml.template","patterns":[{"captures":{"1":{"name":"entity.other.attribute-name.namespace.xml"},"2":{"name":"entity.other.attribute-name.xml"},"3":{"name":"punctuation.separator.namespace.xml"},"4":{"name":"entity.other.attribute-name.localname.xml"}},"match":" (?:([-0-9A-Z_a-z]+)((:)))?([-A-Za-z]+)"},{"include":"#doublequotedString"},{"include":"#singlequotedString"}]},{"include":"text.xml"}],"repository":{"doublequotedString":{"begin":"\\"","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"\\"","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.double.xml"},"singlequotedString":{"begin":"'","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"'","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.single.xml"}},"scopeName":"text.xml.xsl","embeddedLangs":["xml"]}`)),n=[...e,t];export{n as default};

package/dist/ui/assets/yaml-CKL2pEWe.js

@@ -0,0 +1 @@
+import{t as e}from"./heavy-payload-Cqx9MOkH.js";var t=e({default:()=>n}),n=[Object.freeze(JSON.parse(`{"displayName":"YAML","fileTypes":["yaml","yml","rviz","reek","clang-format","yaml-tmlanguage","syntax","sublime-syntax"],"firstLineMatch":"^%YAML( ?1.\\\\d+)?","name":"yaml","patterns":[{"include":"#comment"},{"include":"#property"},{"include":"#directive"},{"match":"^---","name":"entity.other.document.begin.yaml"},{"match":"^\\\\.{3}","name":"entity.other.document.end.yaml"},{"include":"#node"}],"repository":{"block-collection":{"patterns":[{"include":"#block-sequence"},{"include":"#block-mapping"}]},"block-mapping":{"patterns":[{"include":"#block-pair"}]},"block-node":{"patterns":[{"include":"#prototype"},{"include":"#block-scalar"},{"include":"#block-collection"},{"include":"#flow-scalar-plain-out"},{"include":"#flow-node"}]},"block-pair":{"patterns":[{"begin":"\\\\?","beginCaptures":{"1":{"name":"punctuation.definition.key-value.begin.yaml"}},"end":"(?=\\\\?)|^ *(:)|(:)","endCaptures":{"1":{"name":"punctuation.separator.key-value.mapping.yaml"},"2":{"name":"invalid.illegal.expected-newline.yaml"}},"name":"meta.block-mapping.yaml","patterns":[{"include":"#block-node"}]},{"begin":"(?=(?:[^-\\\\]!\\"#%\\\\&'*,:>?@\\\\[\`{|}\\\\s]|[-:?]\\\\S)([^:\\\\s]|:\\\\S|\\\\s+(?![#\\\\s]))*\\\\s*:(\\\\s|$))","end":"(?=\\\\s*$|\\\\s+#|\\\\s*:(\\\\s|$))","patterns":[{"include":"#flow-scalar-plain-out-implicit-type"},{"begin":"[^-\\\\]!\\"#%\\\\&'*,:>?@\\\\[\`{|}\\\\s]|[-:?]\\\\S","beginCaptures":{"0":{"name":"entity.name.tag.yaml"}},"contentName":"entity.name.tag.yaml","end":"(?=\\\\s*$|\\\\s+#|\\\\s*:(\\\\s|$))","name":"string.unquoted.plain.out.yaml"}]},{"match":":(?=\\\\s|$)","name":"punctuation.separator.key-value.mapping.yaml"}]},"block-scalar":{"begin":"(?:(\\\\|)|(>))([1-9])?([-+])?(.*\\\\n?)","beginCaptures":{"1":{"name":"keyword.control.flow.block-scalar.literal.yaml"},"2":{"name":"keyword.control.flow.block-scalar.folded.yaml"},"3":{"name":"constant.numeric.indentation-indicator.yaml"},"4":{"name":"storage.modifier.chomping-indicator.yaml"},"5":{"patterns":[{"include":"#comment"},{"match":".+","name":"invalid.illegal.expected-comment-or-newline.yaml"}]}},"end":"^(?=\\\\S)|(?!\\\\G)","patterns":[{"begin":"^( +)(?! )","end":"^(?!\\\\1|\\\\s*$)","name":"string.unquoted.block.yaml"}]},"block-sequence":{"match":"(-)(?!\\\\S)","name":"punctuation.definition.block.sequence.item.yaml"},"comment":{"begin":"(?:^([\\\\t ]*)|[\\\\t ]+)(?=#\\\\p{print}*$)","beginCaptures":{"1":{"name":"punctuation.whitespace.comment.leading.yaml"}},"end":"(?!\\\\G)","patterns":[{"begin":"#","beginCaptures":{"0":{"name":"punctuation.definition.comment.yaml"}},"end":"\\\\n","name":"comment.line.number-sign.yaml"}]},"directive":{"begin":"^%","beginCaptures":{"0":{"name":"punctuation.definition.directive.begin.yaml"}},"end":"(?=$|[\\\\t ]+($|#))","name":"meta.directive.yaml","patterns":[{"captures":{"1":{"name":"keyword.other.directive.yaml.yaml"},"2":{"name":"constant.numeric.yaml-version.yaml"}},"match":"\\\\G(YAML)[\\\\t ]+(\\\\d+\\\\.\\\\d+)"},{"captures":{"1":{"name":"keyword.other.directive.tag.yaml"},"2":{"name":"storage.type.tag-handle.yaml"},"3":{"name":"support.type.tag-prefix.yaml"}},"match":"\\\\G(TAG)(?:[\\\\t ]+(!(?:[-0-9A-Za-z]*!)?)(?:[\\\\t ]+(!(?:%\\\\h{2}|[]!#$\\\\&-;=?-\\\\[_a-z~])*|(?![]!,\\\\[{}])(?:%\\\\h{2}|[]!#$\\\\&-;=?-\\\\[_a-z~])+))?)?"},{"captures":{"1":{"name":"support.other.directive.reserved.yaml"},"2":{"name":"string.unquoted.directive-name.yaml"},"3":{"name":"string.unquoted.directive-parameter.yaml"}},"match":"\\\\G(\\\\w+)(?:[\\\\t ]+(\\\\w+)(?:[\\\\t ]+(\\\\w+))?)?"},{"match":"\\\\S+","name":"invalid.illegal.unrecognized.yaml"}]},"flow-alias":{"captures":{"1":{"name":"keyword.control.flow.alias.yaml"},"2":{"name":"punctuation.definition.alias.yaml"},"3":{"name":"variable.other.alias.yaml"},"4":{"name":"invalid.illegal.character.anchor.yaml"}},"match":"((\\\\*))([^],/\\\\[{}\\\\s]+)([^],}\\\\s]\\\\S*)?"},"flow-collection":{"patterns":[{"include":"#flow-sequence"},{"include":"#flow-mapping"}]},"flow-mapping":{"begin":"\\\\{","beginCaptures":{"0":{"name":"punctuation.definition.mapping.begin.yaml"}},"end":"}","endCaptures":{"0":{"name":"punctuation.definition.mapping.end.yaml"}},"name":"meta.flow-mapping.yaml","patterns":[{"include":"#prototype"},{"match":",","name":"punctuation.separator.mapping.yaml"},{"include":"#flow-pair"}]},"flow-node":{"patterns":[{"include":"#prototype"},{"include":"#flow-alias"},{"include":"#flow-collection"},{"include":"#flow-scalar"}]},"flow-pair":{"patterns":[{"begin":"\\\\?","beginCaptures":{"0":{"name":"punctuation.definition.key-value.begin.yaml"}},"end":"(?=[],}])","name":"meta.flow-pair.explicit.yaml","patterns":[{"include":"#prototype"},{"include":"#flow-pair"},{"include":"#flow-node"},{"begin":":(?=\\\\s|$|[],\\\\[{}])","beginCaptures":{"0":{"name":"punctuation.separator.key-value.mapping.yaml"}},"end":"(?=[],}])","patterns":[{"include":"#flow-value"}]}]},{"begin":"(?=(?:[^-\\\\]!\\"#%\\\\&'*,:>?@\\\\[\`{|}\\\\s]|[-:?][^],\\\\[{}\\\\s])([^],:\\\\[{}\\\\s]|:[^],\\\\[{}\\\\s]|\\\\s+(?![#\\\\s]))*\\\\s*:(\\\\s|$))","end":"(?=\\\\s*$|\\\\s+#|\\\\s*:(\\\\s|$)|\\\\s*:[],\\\\[{}]|\\\\s*[],\\\\[{}])","name":"meta.flow-pair.key.yaml","patterns":[{"include":"#flow-scalar-plain-in-implicit-type"},{"begin":"[^-\\\\]!\\"#%\\\\&'*,:>?@\\\\[\`{|}\\\\s]|[-:?][^],\\\\[{}\\\\s]","beginCaptures":{"0":{"name":"entity.name.tag.yaml"}},"contentName":"entity.name.tag.yaml","end":"(?=\\\\s*$|\\\\s+#|\\\\s*:(\\\\s|$)|\\\\s*:[],\\\\[{}]|\\\\s*[],\\\\[{}])","name":"string.unquoted.plain.in.yaml"}]},{"include":"#flow-node"},{"begin":":(?=\\\\s|$|[],\\\\[{}])","captures":{"0":{"name":"punctuation.separator.key-value.mapping.yaml"}},"end":"(?=[],}])","name":"meta.flow-pair.yaml","patterns":[{"include":"#flow-value"}]}]},"flow-scalar":{"patterns":[{"include":"#flow-scalar-double-quoted"},{"include":"#flow-scalar-single-quoted"},{"include":"#flow-scalar-plain-in"}]},"flow-scalar-double-quoted":{"begin":"\\"","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.yaml"}},"end":"\\"","endCaptures":{"0":{"name":"punctuation.definition.string.end.yaml"}},"name":"string.quoted.double.yaml","patterns":[{"match":"\\\\\\\\([ \\"/0LN\\\\\\\\_abefnprtv]|x\\\\d\\\\d|u\\\\d{4}|U\\\\d{8})","name":"constant.character.escape.yaml"},{"match":"\\\\\\\\\\\\n","name":"constant.character.escape.double-quoted.newline.yaml"}]},"flow-scalar-plain-in":{"patterns":[{"include":"#flow-scalar-plain-in-implicit-type"},{"begin":"[^-\\\\]!\\"#%\\\\&'*,:>?@\\\\[\`{|}\\\\s]|[-:?][^],\\\\[{}\\\\s]","end":"(?=\\\\s*$|\\\\s+#|\\\\s*:(\\\\s|$)|\\\\s*:[],\\\\[{}]|\\\\s*[],\\\\[{}])","name":"string.unquoted.plain.in.yaml"}]},"flow-scalar-plain-in-implicit-type":{"patterns":[{"captures":{"1":{"name":"constant.language.null.yaml"},"2":{"name":"constant.language.boolean.yaml"},"3":{"name":"constant.numeric.integer.yaml"},"4":{"name":"constant.numeric.float.yaml"},"5":{"name":"constant.other.timestamp.yaml"},"6":{"name":"constant.language.value.yaml"},"7":{"name":"constant.language.merge.yaml"}},"match":"(?:(null|Null|NULL|~)|([Yy]|yes|Yes|YES|[Nn]|no|No|NO|true|True|TRUE|false|False|FALSE|on|On|ON|off|Off|OFF)|([-+]?0b[01_]+|[-+]?0[0-7_]+|[-+]?(?:0|[1-9][0-9_]*)|[-+]?0x[_\\\\h]+|[-+]?[1-9][0-9_]*(?::[0-5]?[0-9])+)|([-+]?(?:[0-9][0-9_]*)?\\\\.[.0-9]*(?:[Ee][-+][0-9]+)?|[-+]?[0-9][0-9_]*(?::[0-5]?[0-9])+\\\\.[0-9_]*|[-+]?\\\\.(?:inf|Inf|INF)|\\\\.(?:nan|NaN|NAN))|(\\\\d{4}-\\\\d{2}-\\\\d{2}|\\\\d{4}-\\\\d{1,2}-\\\\d{1,2}(?:[Tt]|[\\\\t ]+)\\\\d{1,2}:\\\\d{2}:\\\\d{2}(?:\\\\.\\\\d*)?(?:[\\\\t ]*Z|[-+]\\\\d{1,2}(?::\\\\d{1,2})?)?)|(=)|(<<))(?=\\\\s*$|\\\\s+#|\\\\s*:(\\\\s|$)|\\\\s*:[],\\\\[{}]|\\\\s*[],\\\\[{}])"}]},"flow-scalar-plain-out":{"patterns":[{"include":"#flow-scalar-plain-out-implicit-type"},{"begin":"[^-\\\\]!\\"#%\\\\&'*,:>?@\\\\[\`{|}\\\\s]|[-:?]\\\\S","end":"(?=\\\\s*$|\\\\s+#|\\\\s*:(\\\\s|$))","name":"string.unquoted.plain.out.yaml"}]},"flow-scalar-plain-out-implicit-type":{"patterns":[{"captures":{"1":{"name":"constant.language.null.yaml"},"2":{"name":"constant.language.boolean.yaml"},"3":{"name":"constant.numeric.integer.yaml"},"4":{"name":"constant.numeric.float.yaml"},"5":{"name":"constant.other.timestamp.yaml"},"6":{"name":"constant.language.value.yaml"},"7":{"name":"constant.language.merge.yaml"}},"match":"(?:(null|Null|NULL|~)|([Yy]|yes|Yes|YES|[Nn]|no|No|NO|true|True|TRUE|false|False|FALSE|on|On|ON|off|Off|OFF)|([-+]?0b[01_]+|[-+]?0[0-7_]+|[-+]?(?:0|[1-9][0-9_]*)|[-+]?0x[_\\\\h]+|[-+]?[1-9][0-9_]*(?::[0-5]?[0-9])+)|([-+]?(?:[0-9][0-9_]*)?\\\\.[.0-9]*(?:[Ee][-+][0-9]+)?|[-+]?[0-9][0-9_]*(?::[0-5]?[0-9])+\\\\.[0-9_]*|[-+]?\\\\.(?:inf|Inf|INF)|\\\\.(?:nan|NaN|NAN))|(\\\\d{4}-\\\\d{2}-\\\\d{2}|\\\\d{4}-\\\\d{1,2}-\\\\d{1,2}(?:[Tt]|[\\\\t ]+)\\\\d{1,2}:\\\\d{2}:\\\\d{2}(?:\\\\.\\\\d*)?(?:[\\\\t ]*Z|[-+]\\\\d{1,2}(?::\\\\d{1,2})?)?)|(=)|(<<))(?=\\\\s*$|\\\\s+#|\\\\s*:(\\\\s|$))"}]},"flow-scalar-single-quoted":{"begin":"'","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.yaml"}},"end":"'(?!')","endCaptures":{"0":{"name":"punctuation.definition.string.end.yaml"}},"name":"string.quoted.single.yaml","patterns":[{"match":"''","name":"constant.character.escape.single-quoted.yaml"}]},"flow-sequence":{"begin":"\\\\[","beginCaptures":{"0":{"name":"punctuation.definition.sequence.begin.yaml"}},"end":"]","endCaptures":{"0":{"name":"punctuation.definition.sequence.end.yaml"}},"name":"meta.flow-sequence.yaml","patterns":[{"include":"#prototype"},{"match":",","name":"punctuation.separator.sequence.yaml"},{"include":"#flow-pair"},{"include":"#flow-node"}]},"flow-value":{"patterns":[{"begin":"\\\\G(?![],}])","end":"(?=[],}])","name":"meta.flow-pair.value.yaml","patterns":[{"include":"#flow-node"}]}]},"node":{"patterns":[{"include":"#block-node"}]},"property":{"begin":"(?=[!\\\\&])","end":"(?!\\\\G)","name":"meta.property.yaml","patterns":[{"captures":{"1":{"name":"keyword.control.property.anchor.yaml"},"2":{"name":"punctuation.definition.anchor.yaml"},"3":{"name":"entity.name.type.anchor.yaml"},"4":{"name":"invalid.illegal.character.anchor.yaml"}},"match":"\\\\G((&))([^],/\\\\[{}\\\\s]+)(\\\\S+)?"},{"match":"\\\\G!(?:<(?:%\\\\h{2}|[]!#$\\\\&-;=?-\\\\[_a-z~])+>|(?:[-0-9A-Za-z]*!)?(?:%\\\\h{2}|[#$\\\\&-+\\\\--;=?-Z_a-z~])+|)(?=[\\\\t ]|$)","name":"storage.type.tag-handle.yaml"},{"match":"\\\\S+","name":"invalid.illegal.tag-handle.yaml"}]},"prototype":{"patterns":[{"include":"#comment"},{"include":"#property"}]}},"scopeName":"source.yaml","aliases":["yml"]}`))];export{t as n,n as t};

package/dist/workspaces/relay/auth/remote-auth.js

@@ -1,7 +1,5 @@
 import { readFileSync } from "node:fs";
-import { UnauthorizedError } from "@modelcontextprotocol/sdk/client/auth.js";
-import { Client } from "@modelcontextprotocol/sdk/client/index.js";
-import { StreamableHTTPClientTransport, StreamableHTTPError, } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+import { Client, SdkHttpError, StreamableHTTPClientTransport, UnauthorizedError, } from "@modelcontextprotocol/client";
 import { publicEndpointUrl } from "../../../mcp/oauth/public-url.js";
 const REMOTE_AUTH_TIMEOUT_MS = 15_000;
 const packageVersion = readForgeRelayVersion();
@@ -45,11 +43,11 @@ export async function refreshRemoteAuthentication(remote, endpointInput = remote
 }
 export function isRemoteMcpUnauthorized(error) {
     return error instanceof UnauthorizedError ||
-        (error instanceof StreamableHTTPError && error.code === 401);
+        (error instanceof SdkHttpError && error.status === 401);
 }
 export async function connectRemoteMcpClient(remote, endpointInput) {
     const endpoint = normalizeRemoteServiceTarget(endpointInput);
-    const client = new Client({ name: "forgerelay-cli", version: packageVersion });
+    const client = new Client({ name: "forgerelay-cli", version: packageVersion }, { versionNegotiation: { mode: "legacy" } });
     const transport = new StreamableHTTPClientTransport(publicEndpointUrl(endpoint, "mcp"), {
         requestInit: {
             headers: { Authorization: `Bearer ${remote.accessToken}` },

package/dist/workspaces/relay/tests/test-support.js

@@ -3,9 +3,8 @@ import { execFileSync } from "node:child_process";
 import { mkdir, writeFile } from "node:fs/promises";
 import { createRequire, syncBuiltinESMExports } from "node:module";
 import { dirname, join } from "node:path";
-import { Client } from "@modelcontextprotocol/sdk/client/index.js";
-import { InMemoryTransport } from "@modelcontextprotocol/sdk/inMemory.js";
-import { CallToolResultSchema } from "@modelcontextprotocol/sdk/types.js";
+import { Client, InMemoryTransport } from "@modelcontextprotocol/client";
+import { CompatibilityCallToolResultSchema } from "@modelcontextprotocol/core";
 import { ActivityAuditStore } from "../../../activity/history/audit-store.js";
 import { BashOutputStore } from "../../../activity/history/bash-output-store.js";
 import { HostTurnStore } from "../../../activity/history/host-turn-store.js";
@@ -224,5 +223,9 @@ export function resultText(result) {
         .join("\n");
 }
 function parseToolResult(result) {
-    return CallToolResultSchema.parse(result);
+    const parsed = CompatibilityCallToolResultSchema.parse(result);
+    if (!Array.isArray(parsed.content)) {
+        throw new Error("Expected a content-based compatibility tool result.");
+    }
+    return parsed;
 }

package/dist/workspaces/relay/workspace-relay.js

@@ -1,7 +1,7 @@
 import { randomBytes } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
 import { join } from "node:path";
-import { CallToolResultSchema } from "@modelcontextprotocol/sdk/types.js";
+import { CompatibilityCallToolResultSchema } from "@modelcontextprotocol/core";
 import { isRemoteMcpUnauthorized, refreshRemoteAuthentication, } from "./auth/remote-auth.js";
 import { RemoteMcpConnectionPool } from "./transport/remote-mcp-connection-pool.js";
 import { withFileLock } from "../../runtime/state/lock/file-lock.js";
@@ -465,13 +465,19 @@ export class RemoteWorkspaceRelay {
                 throw new Error(`Remote ForgeRelay ${alias} request failed: ${errorMessage(error)}`, { cause: error });
             }
         }
-        const invoke = async (active) => CallToolResultSchema.parse(await active.client.callTool({
-            name,
-            arguments: args,
-            ...(conversationScopeId
-                ? { _meta: { "openai/session": conversationScopeId } }
-                : {}),
-        }));
+        const invoke = async (active) => {
+            const parsed = CompatibilityCallToolResultSchema.parse(await active.client.callTool({
+                name,
+                arguments: args,
+                ...(conversationScopeId
+                    ? { _meta: { "openai/session": conversationScopeId } }
+                    : {}),
+            }));
+            if (!Array.isArray(parsed.content)) {
+                throw new Error("Remote ForgeRelay returned a modern-only tool result on the legacy Relay protocol path.");
+            }
+            return parsed;
+        };
         try {
             return await invoke(connection);
         }

package/dist/workspaces/resources/skills.js

@@ -7,8 +7,8 @@ import { expandHomePath, isPathInsideRoot } from "../../mcp/filesystem/roots.js"
 const FRONTMATTER_DELIMITER = "---";
 export function effectiveSkillPaths(config, cwd) {
     const defaultPathCandidates = [
-        join(homedir(), ".agents", "skills"),
         resolve(cwd, ".agents", "skills"),
+        join(homedir(), ".agents", "skills"),
         config.configSkillsDir,
         join(config.agentDir, "skills"),
     ];

package/docs/chatgpt-coding-workflow.md

@@ -201,12 +201,16 @@ gateway rather than each receiving another top-level tool schema.
 `open_workspace` adds lightweight discovery surfaces:
 
 - `capabilityFingerprint` is returned on every open/resume and includes the
-  ForgeRelay version, active tool mode, and stable semantic capability names;
-- `capabilityCatalog` lists currently available registered actions such as
-  `hooks.check`, with compact guide metadata;
+  ForgeRelay version, active tool mode, and stable semantic capability names. It
+  is a feature fingerprint, not a callable registry;
+- `capabilityCatalog` is the callable registry for the `capability` gateway and
+  lists currently available registered actions such as `hooks.check`, with
+  compact guide metadata. Only names present here are valid for
+  `capability(action="describe"|"run")`;
 - `capabilityGuides` is returned with bootstrap context and contains compact
   descriptors for ForgeRelay-owned, versioned guides that can be loaded with
-  the normal `read` tool.
+  the normal `read` tool. Guide names are documentation descriptors, not
+  callable capability names.
 
 Do not preload every capability guide. Read a guide only when the current task
 needs that domain. Built-in guides cover lifecycle Hooks, advanced managed
@@ -228,14 +232,16 @@ force the Host to discard a cached tool schema.
 
 ## Agent Skills
 
-ForgeRelay discovers standard Agent Skills from:
+ForgeRelay discovers standard Agent Skills in precedence order from:
 
-- `~/.agents/skills`
 - project `.agents/skills`
+- `~/.agents/skills`
 - the active ForgeRelay config directory's `skills` folder
 - `FORGERELAY_AGENT_DIR/skills` (defaults to `~/.codex/skills`)
 - paths from `FORGERELAY_SKILL_PATHS`
 
+Same-named collisions use the first source, so project Skills override global Skills.
+
 When a task matches an advertised skill, read its `SKILL.md` before using other
 files in the skill directory.
 

package/docs/configuration.md

@@ -10,8 +10,18 @@ New installations use:
 ```text
 ~/.forgerelay/config.json
 ~/.forgerelay/auth.json
+~/.forgerelay/mcp.json       # optional External MCP registry
+~/.forgerelay/mcp-auth.json  # created only when External MCP OAuth state exists
 ```
 
+A Workspace may also define project-scoped External MCP servers in:
+
+```text
+<workspace>/.forgerelay/mcp.json
+```
+
+`mcp-auth.json` is ForgeRelay-private credential state and must not be copied into a project.
+
 Override the directory with:
 
 ```bash
@@ -26,6 +36,10 @@ npx @akira-tl/forgerelay serve
 npx @akira-tl/forgerelay doctor
 npx @akira-tl/forgerelay config get
 npx @akira-tl/forgerelay config set publicBaseUrl https://forge.example.com/forgerelay/main,https://forge-alt.example.com/relay
+npx @akira-tl/forgerelay mcp list
+npx @akira-tl/forgerelay mcp test <server>
+npx @akira-tl/forgerelay mcp auth <server>
+npx @akira-tl/forgerelay mcp logout <server>
 npx @akira-tl/forgerelay maintenance inspect
 ```
 
@@ -160,11 +174,27 @@ The same value may be persisted as `mediaMaxBytes` in `config.json`. The budget
 
 Media content is transient. Image base64 is present only in the live MCP result delivered to the Host; Activity/Audit, structured output, UI state, Workspace state, and logs keep bounded metadata such as MIME type and decoded byte size. Reading or forwarding an image does **not** create an Artifact. Artifact download/materialization remains a separate explicit workflow.
 
-User-configured MCP servers are registered in `config.json` under `mcpServers` and are exposed through the workspace-scoped `mcp.external` Capability rather than becoming new top-level MCP tools. For example:
+User-configured MCP servers are exposed through the workspace-scoped `mcp.external` Capability rather than becoming new top-level MCP tools. The capability remains discoverable even when the effective server registry is empty, so servers added later by hot reload become usable without reconnecting the Host.
+
+### External MCP configuration files
+
+New configuration uses a dedicated `mcp.json` file. The machine-wide registry is:
+
+```text
+~/.forgerelay/mcp.json
+```
+
+or the equivalent path below `FORGERELAY_CONFIG_DIR`. A Workspace may add or override servers in:
+
+```text
+<workspace>/.forgerelay/mcp.json
+```
+
+Both files use this shape:
 
 ```json
 {
-  "mcpServers": {
+  "servers": {
     "renderer": {
       "transport": "stdio",
       "command": "node",
@@ -172,15 +202,135 @@ User-configured MCP servers are registered in `config.json` under `mcpServers` a
     },
     "remote-renderer": {
       "transport": "streamable-http",
-      "url": "https://renderer.example.com/mcp",
+      "url": "https://renderer.example.com/mcp"
+    }
+  }
+}
+```
+
+Server names are stable lowercase identifiers matching `^[a-z][a-z0-9._-]{0,63}$`; one source may contain at most 32 servers.
+
+Effective configuration is merged by server name in this order:
+
+```text
+Project mcp.json > global mcp.json > legacy config.json.mcpServers
+```
+
+A Project entry may explicitly hide an inherited server:
+
+```json
+{
+  "servers": {
+    "remote-renderer": {
+      "disabled": true
+    }
+  }
+}
+```
+
+`disabled` defaults to `false` and normally does not need to be written. Removing the Project entry exposes the lower-precedence global/legacy server again. A complete server entry may also contain `"disabled": true`; ForgeRelay validates the entry but does not activate it.
+
+The historical `config.json -> mcpServers` object remains a deprecated read-compatible source. New configuration and documentation use `mcp.json`; the legacy source is retained for at least the next two feature-release compatibility windows and should not be used for new setups.
+
+ForgeRelay reloads global and Project `mcp.json` on demand before External MCP operations. A valid changed file becomes visible to the next `servers`, `tools`, or `call` operation without restarting ForgeRelay. Each operation uses one immutable snapshot, so an in-flight call is not switched underneath itself. If a previously valid source becomes invalid, that running ForgeRelay process keeps the whole previous valid source as last-known-good and reports a bounded diagnostic; no partially parsed subset is activated. A fresh CLI process cannot reconstruct another process's in-memory last-known-good snapshot, so it reports the invalid source while noting that an existing runtime may still be using its prior valid snapshot.
+
+### External MCP transports and authentication
+
+A stdio server supports `command`, optional `args`, `env`, and `cwd`. It is launched directly, not through a shell. Its process still runs with the operating-system authority of the user running ForgeRelay. A Project `.forgerelay/mcp.json` can therefore introduce executable project configuration; opening an allowed project is the trust boundary, and ForgeRelay does not add a second per-server approval prompt.
+
+A Streamable HTTP server supports `url` and optional static `headers`:
+
+```json
+{
+  "servers": {
+    "private-api": {
+      "transport": "streamable-http",
+      "url": "https://mcp.example.com/mcp",
       "headers": {
-        "Authorization": "Bearer <token>"
+        "Authorization": "Bearer <user-managed-secret>"
       }
     }
   }
 }
 ```
 
+ForgeRelay does not require every HTTP MCP server to use OAuth. The effective models are:
+
+- no authentication: connect directly;
+- static credentials: user-managed `headers` for HTTP or `env` for stdio;
+- interactive OAuth: explicitly initiated by a human through the CLI.
+
+Do not commit static secrets in Project `mcp.json`. ForgeRelay does not move project-defined header/env secrets into a separate secret manager in v1.1.1.
+
+Interactive OAuth state is stored only in the machine-private:
+
+```text
+~/.forgerelay/mcp-auth.json
+```
+
+(or the configured ForgeRelay config directory). Project OAuth credentials are still stored there, keyed to the canonical Project root and server; they are not written into the project. Global/legacy servers use a global credential identity. Project credentials are not reused across Projects merely because the server name or URL matches.
+
+Authenticate explicitly:
+
+```bash
+forgerelay mcp auth <server>
+forgerelay mcp auth <server> --project /path/to/project
+forgerelay mcp auth <server> --global
+```
+
+The CLI performs OAuth discovery, PKCE and the browser/callback exchange, then atomically commits the credential. The running ForgeRelay server is not an OAuth callback broker; it simply reads the updated credential store on later External MCP calls. On a desktop the CLI opens the authorization URL and listens on a short-lived loopback callback. On SSH/headless systems it prints the authorization URL and asks for the final callback URL to be pasted; pasted input is displayed only as `*` mask characters.
+
+Normal token refresh is non-interactive and may be performed by the runtime. If refresh fails, the resource/issuer binding changes, or the server requires additional scope, the runtime does not open a browser: it returns `mcp.auth_required` or `mcp.reauthorization_required`, and the human reruns `forgerelay mcp auth <server>`. Multiple ForgeRelay processes coordinate refresh through the shared credential store so refresh-token rotation does not turn a successful refresh in one process into a false reauthorization failure in another.
+
+ForgeRelay uses Dynamic Client Registration when the authorization server supports the compatible flow. For CIMD-only authorization servers, configure a stable public HTTPS client metadata document and the exact loopback callback port it advertises:
+
+```json
+{
+  "servers": {
+    "modern": {
+      "transport": "streamable-http",
+      "url": "https://mcp.example.com/mcp",
+      "oauth": {
+        "clientMetadataUrl": "https://client.example.com/forgerelay.json",
+        "callbackPort": 49152
+      }
+    }
+  }
+}
+```
+
+`clientMetadataUrl` must use HTTPS with a non-root path; `callbackPort` must be `1024..65535`. ForgeRelay does not operate a hosted CIMD service, so this advanced configuration is supplied by the operator when a server requires it.
+
+Remove local OAuth state with:
+
+```bash
+forgerelay mcp logout <server>
+```
+
+ForgeRelay removes the local credential even when remote token revocation is unsupported or fails, and reports that distinction.
+
+### External MCP diagnostics
+
+Use the CLI before editing runtime state by guesswork:
+
+```bash
+forgerelay mcp list
+forgerelay mcp test <server>
+forgerelay doctor
+```
+
+`mcp list` is passive: it reports the resolved Project/global/legacy sources, disabled entries, authentication state, credential-store health, and invalid/last-known-good configuration diagnostics. With no explicit scope it uses the active Workspace root when supplied by ForgeRelay, otherwise walks upward from the current directory for the nearest `.forgerelay/mcp.json`; `--project` selects a Project explicitly and `--global` excludes Project configuration.
+
+`mcp test` is the active probe. It connects to the selected server and performs tool discovery, reporting source, transport, auth state, negotiated MCP era/version, tool count, and actionable failures such as authentication required, unreachable transport, or tool discovery failure.
+
+`doctor` remains passive. Its External MCP section reads configuration and credential metadata only; it does not launch configured stdio servers or make HTTP MCP requests. Use `mcp test` when an active connectivity check is intended.
+
+### External MCP protocol compatibility and Relay
+
+ForgeRelay's External MCP client negotiates modern MCP 2026-07-28 when available and falls back to supported legacy MCP servers. Host-facing HTTP similarly supports the modern stateless protocol while retaining the legacy sessionful path for compatible Hosts.
+
+For a relayed Workspace, External MCP configuration, credentials, process launches, OAuth refreshes, and upstream MCP calls belong to the **Execution ForgeRelay**. The Gateway does not copy or forward External MCP credentials. Run `forgerelay mcp auth` on the machine/configuration that owns execution when a relayed Workspace needs OAuth.
+
 The Agent explicitly selects the configured server, advertised tool, and arguments through `capability(name="mcp.external", action="run", ...)`. Direct upstream PNG/JPEG/WebP/GIF `ImageContent` is validated and forwarded without decode/re-encode. Text, paths, URLs, `resource_link` values, and other references remain exactly that by default: ForgeRelay does not automatically fetch them, call `read`, infer that they refer to an image, or create an Artifact.
 
 A known server/tool may opt into explicit request/result adaptation with `ExternalMcpBeforeForward` or `ExternalMcpAfterForward` project/global Hooks. These transforms use the structured versioned stdin/stdout protocol described under [Lifecycle hooks](#lifecycle-hooks); ordinary Hook stdout never rewrites MCP data. For example, a project can match one renderer tool whose normal result is a path and deliberately convert that result into `ImageContent`. The Hook command performs any file/network access with its normal local-user authority, and the transformed result still passes through the same MCP shape, MIME/base64, and `mediaMaxBytes` validation before Host delivery.
@@ -710,14 +860,16 @@ select a global instruction file; its `skills` child is an additional Agent Skil
 | `FORGERELAY_AGENT_DIR` | Defaults to `~/.codex`; its `skills` child is included as an additional Skill source. |
 | `FORGERELAY_SKILL_PATHS` | Optional comma-separated additional skill directories. |
 
-Standard Agent Skills are discovered from:
+Standard Agent Skills are discovered in precedence order from:
 
-- `~/.agents/skills`
 - project `.agents/skills`
+- `~/.agents/skills`
 - the active ForgeRelay config directory's `skills` folder
 - `FORGERELAY_AGENT_DIR/skills`
 - paths from `FORGERELAY_SKILL_PATHS`
 
+When the same Skill name appears in more than one source, the first source wins. Project Skills therefore override same-named global `~/.agents/skills` entries, matching ForgeRelay's project-over-global configuration model.
+
 When subagents are enabled, profiles are discovered from:
 
 - the active ForgeRelay config directory's `agents/*.md`;

package/docs/debugging.md

@@ -54,7 +54,7 @@ The selected debug config is authoritative for its own `host` and `port`; the
 launcher reports endpoints derived from that file instead of assuming `7677`.
 This makes parallel isolated instances straightforward: give each instance its
 own config, state, and worktree directories and configure different ports (for
-example `7677` for a Gateway and `6768` for an Execution ForgeRelay), then launch
+example `7677` for a Gateway and `7678` for an Execution ForgeRelay), then launch
 each with its own `FORGERELAY_DEBUG_CONFIG_DIR`.
 
 ## Run a local MCP Apps Host
@@ -107,12 +107,15 @@ behavior.
 
 ```bash
 npm run debug:accept
+npm run debug:accept:modern
+npm run debug:accept:relay
 ```
 
-The acceptance runner starts its own fully isolated ForgeRelay fixture on
-`127.0.0.1:7677`, with its own generated Owner password and checked-in debug
-configuration. It sends real HTTP requests with `curl` and shuts the server down
-when it finishes.
+`debug:accept` starts its own fully isolated legacy/sessionful ForgeRelay fixture on
+`127.0.0.1:7677`. `debug:accept:modern` exercises the MCP 2026-07-28 stateless Host
+path on isolated `7678`, and `debug:accept:relay` exercises an isolated
+7677 Gateway → 7678 Execution topology. Each runner owns its temporary config/state,
+generates its own authentication material, and shuts down what it started.
 It refuses to start when port `7677` is already occupied so it cannot
 accidentally validate an older debug process.
 

package/docs/roadmap.md

@@ -348,9 +348,70 @@ recovery, checkpoint, and retention facts; the Gateway only routes and presents
 results. Development acceptance remains on isolated 7677/7678 instances and never uses
 the normal 7676 installation.
 
-Native Windows Command Shell Runtime support was intentionally kept out of the
-0.9 recovery/history line and was subsequently delivered across the 0.10.x P3
-work for PowerShell 7, Windows PowerShell 5.1, and `cmd.exe`.
+## 0.10 — Command Shell Runtime P3
+
+0.10 把 ForgeRelay 的命令执行从“默认假设 Bash”提升为显式、可观察、跨平台的
+Command Shell Runtime，同时保持公开 Core tool 名称 `bash` 不变，避免因为 Windows
+支持而扩大 Host 的常驻 MCP surface。
+
+- **0.10.0** — 建立 server-lifetime Command Shell Runtime identity 与选择优先级；
+  `forgerelay init` 管理可编辑 shell Instructions；系统级高权限启动默认拒绝，只有
+  显式 `--allow-elevated` 才允许继续；
+- **0.10.1** — 将 PowerShell 7（`pwsh`）作为 Windows 上的一等 Agent/Hook/PTY
+  runtime，并补齐真实 packaged npm acceptance；
+- **0.10.2** — 加入 Windows PowerShell 5.1，完成 ConPTY、Unicode、进程树清理和
+  packaged launcher 路径；
+- **0.10.3** — 将 `cmd.exe` 提升为一等 runtime，覆盖其独立 quoting、escaping、
+  `%ERRORLEVEL%`、pipe/PTY 与 `.cmd` launcher contract；
+- **0.10.4** — 让 shell identity 跟随实际 Execution ForgeRelay，并贯通 Workspace
+  Relay、Composite Workspace、doctor、UI、Instructions 与公开 tool description；
+- **0.10.5** — 移除 ForgeRelay 对 legacy `disable-model-invocation` Skill frontmatter
+  的过滤，保持 Skill discovery 由 Agent 侧匹配决定。
+
+P3 的发布验收以真实 Windows shell matrix 与 packed artifact 为核心，同时继续保留
+Linux/macOS 回归验证。开发与运行时验收只使用隔离的 7677/7678 实例，不触碰 7676。
+
+## 1.0 — Stable product baseline
+
+1.0 将已经完成的 Workspace、Capability Gateway、Hooks、LSP、Activity/Audit、Tasks、
+Recovery/Checkpoint、Relay/Composite 与跨平台 shell contract 提升为稳定的 1.x 产品
+基线，而不是重新设计一套运行时模型。
+
+- **1.0.0** — 固化当前 MCP Core tool surface、CLI、Workspace 生命周期、managed
+  worktree finalize 与 Capability Gateway，现有 0.10.5 配置和持久化状态无需迁移；
+- **1.0.1** — 修复 Capability 与 Workspace lifecycle pretty logging，使日志保留
+  semantic operation identity，并补齐 Composite capability attribution。
+
+1.x 继续遵守现有发布规则：稳定版本只有在本地 release gate 与真实 7677/7678 路径
+验收通过后才创建 tag；tag-triggered Linux/macOS/Windows workflow 成功后才形成正式
+npm/GitHub Release。
+
+## 1.1 — First-class image transport
+
+1.1 把 image-bearing MCP result 纳入 ForgeRelay 的一等、受预算约束的传输路径，
+同时保持“ForgeRelay 不是图片仓库，也不自动解引用外部引用”的边界。
+
+- `read` 依据文件签名把 PNG、JPEG、WebP、GIF 返回为标准 MCP `ImageContent`，bulk
+  Read 保留 text/image 输入顺序；
+- Workspace Relay 在 Execution ForgeRelay → Gateway ForgeRelay 路径中原样保留
+  image content，并在 Gateway 侧再次执行 media budget；
+- 用户显式配置的外部 MCP server 通过 `mcp.external` Capability 调用，原生
+  `ImageContent` 可直接转发，但 path/URL/resource reference 默认仍只是 reference；
+- `ExternalMcpBeforeForward` / `ExternalMcpAfterForward` Transform Hook 为特定
+  server/tool 提供显式结构化适配 seam，但不能改写已选择的 server/tool；
+- Media content 保持瞬时 MCP payload，不自动成为 Artifact；Activity/Audit、日志、
+  structured output 与 Workspace state 只持久化受限 metadata，不保存 image base64；
+- 每个 tool result 默认采用 20 MiB decoded-media budget，超限显式失败，不静默截断、
+  resize 或转码。
+
+1.1.0 已完成真实 7677 HTTP/OAuth/MCP、7677 → 7678 Relay、external MCP、Transform
+Hook、packed artifact 和 ChatGPT Host 图像呈现验收，并作为正式稳定版本发布。
+
+## 1.x forward planning
+
+当前 roadmap 没有承诺 1.1 之后的下一条 minor feature line。新的 1.x 产品工作应从
+明确的用户目标、架构问题或外部 issue 出发，先形成可验证的 spec/tickets，再进入实现；
+不要仅根据历史版本号顺序推断或虚构 1.2 功能范围。
 
 ## Workspace Task Lists
 

package/docs/security.md

@@ -147,6 +147,24 @@ Workspace from another conversation intentionally shares the same completion sco
 as well. Hook handlers keep their separate bounded timeout
 policy because they are lifecycle gates rather than user-command execution.
 
+## External MCP configuration and credentials
+
+External MCP extends the same local-authority model rather than creating a sandbox. Machine-wide servers live in the ForgeRelay config directory's `mcp.json`; Project servers may live in `<workspace>/.forgerelay/mcp.json`. A Project stdio entry can launch a configured executable with the same operating-system user authority as ForgeRelay, so Project MCP configuration is executable project configuration. ForgeRelay does not add a second per-server approval prompt after the operator has allowed and opened that project root.
+
+Static HTTP headers and stdio environment values are user-managed configuration. Do not commit secrets in Project `mcp.json`; v1.1.1 does not automatically extract project-defined secrets into a secret manager.
+
+Interactive External MCP OAuth credentials are different. They are kept in the machine-private ForgeRelay config directory:
+
+```text
+~/.forgerelay/mcp-auth.json
+```
+
+Project OAuth credentials are keyed to the Project root but still stay in this private machine file; ForgeRelay does not write access tokens, refresh tokens, authorization codes, PKCE verifiers, or client secrets into the project. Callback URLs pasted in headless mode are masked in the terminal. Runtime token refresh is non-interactive; any fresh consent/authorization requires an explicit human `forgerelay mcp auth <server>` invocation.
+
+External MCP configuration and OAuth state belong to the Execution ForgeRelay for relayed Workspaces. The Gateway does not receive or replicate those credentials merely because it forwards the Workspace operation.
+
+External MCP result references are not implicitly dereferenced. Paths, URLs and MCP resource references returned by an upstream server remain references unless the Agent explicitly reads them or an explicitly configured External MCP transform Hook changes the result.
+
 ## Lifecycle hooks
 
 Hook command 是本地代码执行，使用与 ForgeRelay 相同的操作系统用户权限并继承进程环境。