@akira-tl/forgerelay 1.0.1 → 1.1.1

package/dist/ui/assets/xml-_44rx9_2.js

@@ -0,0 +1 @@
+import{t as e}from"./java-CW9pZ5bh.js";import{t}from"./heavy-payload-Cqx9MOkH.js";var n=t({default:()=>i}),r=Object.freeze(JSON.parse(`{"displayName":"XML","name":"xml","patterns":[{"begin":"(<\\\\?)\\\\s*([-0-9A-Z_a-z]+)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.xml"}},"end":"(\\\\?>)","name":"meta.tag.preprocessor.xml","patterns":[{"match":" ([-A-Za-z]+)","name":"entity.other.attribute-name.xml"},{"include":"#doublequotedString"},{"include":"#singlequotedString"}]},{"begin":"(<!)(DOCTYPE)\\\\s+([:A-Z_a-z][-.0-:A-Z_a-z]*)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"keyword.other.doctype.xml"},"3":{"name":"variable.language.documentroot.xml"}},"end":"\\\\s*(>)","name":"meta.tag.sgml.doctype.xml","patterns":[{"include":"#internalSubset"}]},{"include":"#comments"},{"begin":"(<)((?:([-0-9A-Z_a-z]+)(:))?([-0-:A-Z_a-z]+))(?=(\\\\s[^>]*)?></\\\\2>)","beginCaptures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.xml"},"3":{"name":"entity.name.tag.namespace.xml"},"4":{"name":"punctuation.separator.namespace.xml"},"5":{"name":"entity.name.tag.localname.xml"}},"end":"(>)(</)((?:([-0-9A-Z_a-z]+)(:))?([-0-:A-Z_a-z]+))(>)","endCaptures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"punctuation.definition.tag.xml"},"3":{"name":"entity.name.tag.xml"},"4":{"name":"entity.name.tag.namespace.xml"},"5":{"name":"punctuation.separator.namespace.xml"},"6":{"name":"entity.name.tag.localname.xml"},"7":{"name":"punctuation.definition.tag.xml"}},"name":"meta.tag.no-content.xml","patterns":[{"include":"#tagStuff"}]},{"begin":"(</?)(?:([-.\\\\w]+)((:)))?([-.:\\\\w]+)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.namespace.xml"},"3":{"name":"entity.name.tag.xml"},"4":{"name":"punctuation.separator.namespace.xml"},"5":{"name":"entity.name.tag.localname.xml"}},"end":"(/?>)","name":"meta.tag.xml","patterns":[{"include":"#tagStuff"}]},{"include":"#entity"},{"include":"#bare-ampersand"},{"begin":"<%@","beginCaptures":{"0":{"name":"punctuation.section.embedded.begin.xml"}},"end":"%>","endCaptures":{"0":{"name":"punctuation.section.embedded.end.xml"}},"name":"source.java-props.embedded.xml","patterns":[{"match":"page|include|taglib","name":"keyword.other.page-props.xml"}]},{"begin":"<%[!=]?(?!--)","beginCaptures":{"0":{"name":"punctuation.section.embedded.begin.xml"}},"end":"(?!--)%>","endCaptures":{"0":{"name":"punctuation.section.embedded.end.xml"}},"name":"source.java.embedded.xml","patterns":[{"include":"source.java"}]},{"begin":"<!\\\\[CDATA\\\\[","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"]]>","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.unquoted.cdata.xml"}],"repository":{"EntityDecl":{"begin":"(<!)(ENTITY)\\\\s+(%\\\\s+)?([:A-Z_a-z][-.0-:A-Z_a-z]*)(\\\\s+(?:SYSTEM|PUBLIC)\\\\s+)?","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"keyword.other.entity.xml"},"3":{"name":"punctuation.definition.entity.xml"},"4":{"name":"variable.language.entity.xml"},"5":{"name":"keyword.other.entitytype.xml"}},"end":"(>)","patterns":[{"include":"#doublequotedString"},{"include":"#singlequotedString"}]},"bare-ampersand":{"match":"&","name":"invalid.illegal.bad-ampersand.xml"},"comments":{"patterns":[{"begin":"<%--","captures":{"0":{"name":"punctuation.definition.comment.xml"},"end":"--%>","name":"comment.block.xml"}},{"begin":"<!--","captures":{"0":{"name":"punctuation.definition.comment.xml"}},"end":"-->","name":"comment.block.xml","patterns":[{"begin":"--(?!>)","captures":{"0":{"name":"invalid.illegal.bad-comments-or-CDATA.xml"}}}]}]},"doublequotedString":{"begin":"\\"","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"\\"","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.double.xml","patterns":[{"include":"#entity"},{"include":"#bare-ampersand"}]},"entity":{"captures":{"1":{"name":"punctuation.definition.constant.xml"},"3":{"name":"punctuation.definition.constant.xml"}},"match":"(&)([:A-Z_a-z][-.0-:A-Z_a-z]*|#[0-9]+|#x\\\\h+)(;)","name":"constant.character.entity.xml"},"internalSubset":{"begin":"(\\\\[)","captures":{"1":{"name":"punctuation.definition.constant.xml"}},"end":"(])","name":"meta.internalsubset.xml","patterns":[{"include":"#EntityDecl"},{"include":"#parameterEntity"},{"include":"#comments"}]},"parameterEntity":{"captures":{"1":{"name":"punctuation.definition.constant.xml"},"3":{"name":"punctuation.definition.constant.xml"}},"match":"(%)([:A-Z_a-z][-.0-:A-Z_a-z]*)(;)","name":"constant.character.parameter-entity.xml"},"singlequotedString":{"begin":"'","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"'","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.single.xml","patterns":[{"include":"#entity"},{"include":"#bare-ampersand"}]},"tagStuff":{"patterns":[{"captures":{"1":{"name":"entity.other.attribute-name.namespace.xml"},"2":{"name":"entity.other.attribute-name.xml"},"3":{"name":"punctuation.separator.namespace.xml"},"4":{"name":"entity.other.attribute-name.localname.xml"}},"match":"(?:^|\\\\s+)(?:([-.\\\\w]+)((:)))?([-.:\\\\w]+)\\\\s*="},{"include":"#doublequotedString"},{"include":"#singlequotedString"}]}},"scopeName":"text.xml","embeddedLangs":["java"]}`)),i=[...e,r];export{n,i as t};

package/dist/ui/assets/{xsl-DvDSndNI.js → xsl-B5QWQPoi.js}

@@ -1 +1 @@
-import{t as e}from"./xml-CfeBNlMP.js";var t=Object.freeze(JSON.parse(`{"displayName":"XSL","name":"xsl","patterns":[{"begin":"(<)(xsl)((:))(template)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.namespace.xml"},"3":{"name":"entity.name.tag.xml"},"4":{"name":"punctuation.separator.namespace.xml"},"5":{"name":"entity.name.tag.localname.xml"}},"end":"(>)","name":"meta.tag.xml.template","patterns":[{"captures":{"1":{"name":"entity.other.attribute-name.namespace.xml"},"2":{"name":"entity.other.attribute-name.xml"},"3":{"name":"punctuation.separator.namespace.xml"},"4":{"name":"entity.other.attribute-name.localname.xml"}},"match":" (?:([-0-9A-Z_a-z]+)((:)))?([-A-Za-z]+)"},{"include":"#doublequotedString"},{"include":"#singlequotedString"}]},{"include":"text.xml"}],"repository":{"doublequotedString":{"begin":"\\"","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"\\"","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.double.xml"},"singlequotedString":{"begin":"'","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"'","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.single.xml"}},"scopeName":"text.xml.xsl","embeddedLangs":["xml"]}`)),n=[...e,t];export{n as default};
+import{t as e}from"./xml-_44rx9_2.js";var t=Object.freeze(JSON.parse(`{"displayName":"XSL","name":"xsl","patterns":[{"begin":"(<)(xsl)((:))(template)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.namespace.xml"},"3":{"name":"entity.name.tag.xml"},"4":{"name":"punctuation.separator.namespace.xml"},"5":{"name":"entity.name.tag.localname.xml"}},"end":"(>)","name":"meta.tag.xml.template","patterns":[{"captures":{"1":{"name":"entity.other.attribute-name.namespace.xml"},"2":{"name":"entity.other.attribute-name.xml"},"3":{"name":"punctuation.separator.namespace.xml"},"4":{"name":"entity.other.attribute-name.localname.xml"}},"match":" (?:([-0-9A-Z_a-z]+)((:)))?([-A-Za-z]+)"},{"include":"#doublequotedString"},{"include":"#singlequotedString"}]},{"include":"text.xml"}],"repository":{"doublequotedString":{"begin":"\\"","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"\\"","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.double.xml"},"singlequotedString":{"begin":"'","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"'","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.single.xml"}},"scopeName":"text.xml.xsl","embeddedLangs":["xml"]}`)),n=[...e,t];export{n as default};

package/dist/ui/assets/yaml-CKL2pEWe.js

@@ -0,0 +1 @@
+import{t as e}from"./heavy-payload-Cqx9MOkH.js";var t=e({default:()=>n}),n=[Object.freeze(JSON.parse(`{"displayName":"YAML","fileTypes":["yaml","yml","rviz","reek","clang-format","yaml-tmlanguage","syntax","sublime-syntax"],"firstLineMatch":"^%YAML( ?1.\\\\d+)?","name":"yaml","patterns":[{"include":"#comment"},{"include":"#property"},{"include":"#directive"},{"match":"^---","name":"entity.other.document.begin.yaml"},{"match":"^\\\\.{3}","name":"entity.other.document.end.yaml"},{"include":"#node"}],"repository":{"block-collection":{"patterns":[{"include":"#block-sequence"},{"include":"#block-mapping"}]},"block-mapping":{"patterns":[{"include":"#block-pair"}]},"block-node":{"patterns":[{"include":"#prototype"},{"include":"#block-scalar"},{"include":"#block-collection"},{"include":"#flow-scalar-plain-out"},{"include":"#flow-node"}]},"block-pair":{"patterns":[{"begin":"\\\\?","beginCaptures":{"1":{"name":"punctuation.definition.key-value.begin.yaml"}},"end":"(?=\\\\?)|^ *(:)|(:)","endCaptures":{"1":{"name":"punctuation.separator.key-value.mapping.yaml"},"2":{"name":"invalid.illegal.expected-newline.yaml"}},"name":"meta.block-mapping.yaml","patterns":[{"include":"#block-node"}]},{"begin":"(?=(?:[^-\\\\]!\\"#%\\\\&'*,:>?@\\\\[\`{|}\\\\s]|[-:?]\\\\S)([^:\\\\s]|:\\\\S|\\\\s+(?![#\\\\s]))*\\\\s*:(\\\\s|$))","end":"(?=\\\\s*$|\\\\s+#|\\\\s*:(\\\\s|$))","patterns":[{"include":"#flow-scalar-plain-out-implicit-type"},{"begin":"[^-\\\\]!\\"#%\\\\&'*,:>?@\\\\[\`{|}\\\\s]|[-:?]\\\\S","beginCaptures":{"0":{"name":"entity.name.tag.yaml"}},"contentName":"entity.name.tag.yaml","end":"(?=\\\\s*$|\\\\s+#|\\\\s*:(\\\\s|$))","name":"string.unquoted.plain.out.yaml"}]},{"match":":(?=\\\\s|$)","name":"punctuation.separator.key-value.mapping.yaml"}]},"block-scalar":{"begin":"(?:(\\\\|)|(>))([1-9])?([-+])?(.*\\\\n?)","beginCaptures":{"1":{"name":"keyword.control.flow.block-scalar.literal.yaml"},"2":{"name":"keyword.control.flow.block-scalar.folded.yaml"},"3":{"name":"constant.numeric.indentation-indicator.yaml"},"4":{"name":"storage.modifier.chomping-indicator.yaml"},"5":{"patterns":[{"include":"#comment"},{"match":".+","name":"invalid.illegal.expected-comment-or-newline.yaml"}]}},"end":"^(?=\\\\S)|(?!\\\\G)","patterns":[{"begin":"^( +)(?! )","end":"^(?!\\\\1|\\\\s*$)","name":"string.unquoted.block.yaml"}]},"block-sequence":{"match":"(-)(?!\\\\S)","name":"punctuation.definition.block.sequence.item.yaml"},"comment":{"begin":"(?:^([\\\\t ]*)|[\\\\t ]+)(?=#\\\\p{print}*$)","beginCaptures":{"1":{"name":"punctuation.whitespace.comment.leading.yaml"}},"end":"(?!\\\\G)","patterns":[{"begin":"#","beginCaptures":{"0":{"name":"punctuation.definition.comment.yaml"}},"end":"\\\\n","name":"comment.line.number-sign.yaml"}]},"directive":{"begin":"^%","beginCaptures":{"0":{"name":"punctuation.definition.directive.begin.yaml"}},"end":"(?=$|[\\\\t ]+($|#))","name":"meta.directive.yaml","patterns":[{"captures":{"1":{"name":"keyword.other.directive.yaml.yaml"},"2":{"name":"constant.numeric.yaml-version.yaml"}},"match":"\\\\G(YAML)[\\\\t ]+(\\\\d+\\\\.\\\\d+)"},{"captures":{"1":{"name":"keyword.other.directive.tag.yaml"},"2":{"name":"storage.type.tag-handle.yaml"},"3":{"name":"support.type.tag-prefix.yaml"}},"match":"\\\\G(TAG)(?:[\\\\t ]+(!(?:[-0-9A-Za-z]*!)?)(?:[\\\\t ]+(!(?:%\\\\h{2}|[]!#$\\\\&-;=?-\\\\[_a-z~])*|(?![]!,\\\\[{}])(?:%\\\\h{2}|[]!#$\\\\&-;=?-\\\\[_a-z~])+))?)?"},{"captures":{"1":{"name":"support.other.directive.reserved.yaml"},"2":{"name":"string.unquoted.directive-name.yaml"},"3":{"name":"string.unquoted.directive-parameter.yaml"}},"match":"\\\\G(\\\\w+)(?:[\\\\t ]+(\\\\w+)(?:[\\\\t ]+(\\\\w+))?)?"},{"match":"\\\\S+","name":"invalid.illegal.unrecognized.yaml"}]},"flow-alias":{"captures":{"1":{"name":"keyword.control.flow.alias.yaml"},"2":{"name":"punctuation.definition.alias.yaml"},"3":{"name":"variable.other.alias.yaml"},"4":{"name":"invalid.illegal.character.anchor.yaml"}},"match":"((\\\\*))([^],/\\\\[{}\\\\s]+)([^],}\\\\s]\\\\S*)?"},"flow-collection":{"patterns":[{"include":"#flow-sequence"},{"include":"#flow-mapping"}]},"flow-mapping":{"begin":"\\\\{","beginCaptures":{"0":{"name":"punctuation.definition.mapping.begin.yaml"}},"end":"}","endCaptures":{"0":{"name":"punctuation.definition.mapping.end.yaml"}},"name":"meta.flow-mapping.yaml","patterns":[{"include":"#prototype"},{"match":",","name":"punctuation.separator.mapping.yaml"},{"include":"#flow-pair"}]},"flow-node":{"patterns":[{"include":"#prototype"},{"include":"#flow-alias"},{"include":"#flow-collection"},{"include":"#flow-scalar"}]},"flow-pair":{"patterns":[{"begin":"\\\\?","beginCaptures":{"0":{"name":"punctuation.definition.key-value.begin.yaml"}},"end":"(?=[],}])","name":"meta.flow-pair.explicit.yaml","patterns":[{"include":"#prototype"},{"include":"#flow-pair"},{"include":"#flow-node"},{"begin":":(?=\\\\s|$|[],\\\\[{}])","beginCaptures":{"0":{"name":"punctuation.separator.key-value.mapping.yaml"}},"end":"(?=[],}])","patterns":[{"include":"#flow-value"}]}]},{"begin":"(?=(?:[^-\\\\]!\\"#%\\\\&'*,:>?@\\\\[\`{|}\\\\s]|[-:?][^],\\\\[{}\\\\s])([^],:\\\\[{}\\\\s]|:[^],\\\\[{}\\\\s]|\\\\s+(?![#\\\\s]))*\\\\s*:(\\\\s|$))","end":"(?=\\\\s*$|\\\\s+#|\\\\s*:(\\\\s|$)|\\\\s*:[],\\\\[{}]|\\\\s*[],\\\\[{}])","name":"meta.flow-pair.key.yaml","patterns":[{"include":"#flow-scalar-plain-in-implicit-type"},{"begin":"[^-\\\\]!\\"#%\\\\&'*,:>?@\\\\[\`{|}\\\\s]|[-:?][^],\\\\[{}\\\\s]","beginCaptures":{"0":{"name":"entity.name.tag.yaml"}},"contentName":"entity.name.tag.yaml","end":"(?=\\\\s*$|\\\\s+#|\\\\s*:(\\\\s|$)|\\\\s*:[],\\\\[{}]|\\\\s*[],\\\\[{}])","name":"string.unquoted.plain.in.yaml"}]},{"include":"#flow-node"},{"begin":":(?=\\\\s|$|[],\\\\[{}])","captures":{"0":{"name":"punctuation.separator.key-value.mapping.yaml"}},"end":"(?=[],}])","name":"meta.flow-pair.yaml","patterns":[{"include":"#flow-value"}]}]},"flow-scalar":{"patterns":[{"include":"#flow-scalar-double-quoted"},{"include":"#flow-scalar-single-quoted"},{"include":"#flow-scalar-plain-in"}]},"flow-scalar-double-quoted":{"begin":"\\"","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.yaml"}},"end":"\\"","endCaptures":{"0":{"name":"punctuation.definition.string.end.yaml"}},"name":"string.quoted.double.yaml","patterns":[{"match":"\\\\\\\\([ \\"/0LN\\\\\\\\_abefnprtv]|x\\\\d\\\\d|u\\\\d{4}|U\\\\d{8})","name":"constant.character.escape.yaml"},{"match":"\\\\\\\\\\\\n","name":"constant.character.escape.double-quoted.newline.yaml"}]},"flow-scalar-plain-in":{"patterns":[{"include":"#flow-scalar-plain-in-implicit-type"},{"begin":"[^-\\\\]!\\"#%\\\\&'*,:>?@\\\\[\`{|}\\\\s]|[-:?][^],\\\\[{}\\\\s]","end":"(?=\\\\s*$|\\\\s+#|\\\\s*:(\\\\s|$)|\\\\s*:[],\\\\[{}]|\\\\s*[],\\\\[{}])","name":"string.unquoted.plain.in.yaml"}]},"flow-scalar-plain-in-implicit-type":{"patterns":[{"captures":{"1":{"name":"constant.language.null.yaml"},"2":{"name":"constant.language.boolean.yaml"},"3":{"name":"constant.numeric.integer.yaml"},"4":{"name":"constant.numeric.float.yaml"},"5":{"name":"constant.other.timestamp.yaml"},"6":{"name":"constant.language.value.yaml"},"7":{"name":"constant.language.merge.yaml"}},"match":"(?:(null|Null|NULL|~)|([Yy]|yes|Yes|YES|[Nn]|no|No|NO|true|True|TRUE|false|False|FALSE|on|On|ON|off|Off|OFF)|([-+]?0b[01_]+|[-+]?0[0-7_]+|[-+]?(?:0|[1-9][0-9_]*)|[-+]?0x[_\\\\h]+|[-+]?[1-9][0-9_]*(?::[0-5]?[0-9])+)|([-+]?(?:[0-9][0-9_]*)?\\\\.[.0-9]*(?:[Ee][-+][0-9]+)?|[-+]?[0-9][0-9_]*(?::[0-5]?[0-9])+\\\\.[0-9_]*|[-+]?\\\\.(?:inf|Inf|INF)|\\\\.(?:nan|NaN|NAN))|(\\\\d{4}-\\\\d{2}-\\\\d{2}|\\\\d{4}-\\\\d{1,2}-\\\\d{1,2}(?:[Tt]|[\\\\t ]+)\\\\d{1,2}:\\\\d{2}:\\\\d{2}(?:\\\\.\\\\d*)?(?:[\\\\t ]*Z|[-+]\\\\d{1,2}(?::\\\\d{1,2})?)?)|(=)|(<<))(?=\\\\s*$|\\\\s+#|\\\\s*:(\\\\s|$)|\\\\s*:[],\\\\[{}]|\\\\s*[],\\\\[{}])"}]},"flow-scalar-plain-out":{"patterns":[{"include":"#flow-scalar-plain-out-implicit-type"},{"begin":"[^-\\\\]!\\"#%\\\\&'*,:>?@\\\\[\`{|}\\\\s]|[-:?]\\\\S","end":"(?=\\\\s*$|\\\\s+#|\\\\s*:(\\\\s|$))","name":"string.unquoted.plain.out.yaml"}]},"flow-scalar-plain-out-implicit-type":{"patterns":[{"captures":{"1":{"name":"constant.language.null.yaml"},"2":{"name":"constant.language.boolean.yaml"},"3":{"name":"constant.numeric.integer.yaml"},"4":{"name":"constant.numeric.float.yaml"},"5":{"name":"constant.other.timestamp.yaml"},"6":{"name":"constant.language.value.yaml"},"7":{"name":"constant.language.merge.yaml"}},"match":"(?:(null|Null|NULL|~)|([Yy]|yes|Yes|YES|[Nn]|no|No|NO|true|True|TRUE|false|False|FALSE|on|On|ON|off|Off|OFF)|([-+]?0b[01_]+|[-+]?0[0-7_]+|[-+]?(?:0|[1-9][0-9_]*)|[-+]?0x[_\\\\h]+|[-+]?[1-9][0-9_]*(?::[0-5]?[0-9])+)|([-+]?(?:[0-9][0-9_]*)?\\\\.[.0-9]*(?:[Ee][-+][0-9]+)?|[-+]?[0-9][0-9_]*(?::[0-5]?[0-9])+\\\\.[0-9_]*|[-+]?\\\\.(?:inf|Inf|INF)|\\\\.(?:nan|NaN|NAN))|(\\\\d{4}-\\\\d{2}-\\\\d{2}|\\\\d{4}-\\\\d{1,2}-\\\\d{1,2}(?:[Tt]|[\\\\t ]+)\\\\d{1,2}:\\\\d{2}:\\\\d{2}(?:\\\\.\\\\d*)?(?:[\\\\t ]*Z|[-+]\\\\d{1,2}(?::\\\\d{1,2})?)?)|(=)|(<<))(?=\\\\s*$|\\\\s+#|\\\\s*:(\\\\s|$))"}]},"flow-scalar-single-quoted":{"begin":"'","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.yaml"}},"end":"'(?!')","endCaptures":{"0":{"name":"punctuation.definition.string.end.yaml"}},"name":"string.quoted.single.yaml","patterns":[{"match":"''","name":"constant.character.escape.single-quoted.yaml"}]},"flow-sequence":{"begin":"\\\\[","beginCaptures":{"0":{"name":"punctuation.definition.sequence.begin.yaml"}},"end":"]","endCaptures":{"0":{"name":"punctuation.definition.sequence.end.yaml"}},"name":"meta.flow-sequence.yaml","patterns":[{"include":"#prototype"},{"match":",","name":"punctuation.separator.sequence.yaml"},{"include":"#flow-pair"},{"include":"#flow-node"}]},"flow-value":{"patterns":[{"begin":"\\\\G(?![],}])","end":"(?=[],}])","name":"meta.flow-pair.value.yaml","patterns":[{"include":"#flow-node"}]}]},"node":{"patterns":[{"include":"#block-node"}]},"property":{"begin":"(?=[!\\\\&])","end":"(?!\\\\G)","name":"meta.property.yaml","patterns":[{"captures":{"1":{"name":"keyword.control.property.anchor.yaml"},"2":{"name":"punctuation.definition.anchor.yaml"},"3":{"name":"entity.name.type.anchor.yaml"},"4":{"name":"invalid.illegal.character.anchor.yaml"}},"match":"\\\\G((&))([^],/\\\\[{}\\\\s]+)(\\\\S+)?"},{"match":"\\\\G!(?:<(?:%\\\\h{2}|[]!#$\\\\&-;=?-\\\\[_a-z~])+>|(?:[-0-9A-Za-z]*!)?(?:%\\\\h{2}|[#$\\\\&-+\\\\--;=?-Z_a-z~])+|)(?=[\\\\t ]|$)","name":"storage.type.tag-handle.yaml"},{"match":"\\\\S+","name":"invalid.illegal.tag-handle.yaml"}]},"prototype":{"patterns":[{"include":"#comment"},{"include":"#property"}]}},"scopeName":"source.yaml","aliases":["yml"]}`))];export{t as n,n as t};

package/dist/workspaces/relay/auth/remote-auth.js

@@ -1,7 +1,5 @@
 import { readFileSync } from "node:fs";
-import { UnauthorizedError } from "@modelcontextprotocol/sdk/client/auth.js";
-import { Client } from "@modelcontextprotocol/sdk/client/index.js";
-import { StreamableHTTPClientTransport, StreamableHTTPError, } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+import { Client, SdkHttpError, StreamableHTTPClientTransport, UnauthorizedError, } from "@modelcontextprotocol/client";
 import { publicEndpointUrl } from "../../../mcp/oauth/public-url.js";
 const REMOTE_AUTH_TIMEOUT_MS = 15_000;
 const packageVersion = readForgeRelayVersion();
@@ -45,11 +43,11 @@ export async function refreshRemoteAuthentication(remote, endpointInput = remote
 }
 export function isRemoteMcpUnauthorized(error) {
     return error instanceof UnauthorizedError ||
-        (error instanceof StreamableHTTPError && error.code === 401);
+        (error instanceof SdkHttpError && error.status === 401);
 }
 export async function connectRemoteMcpClient(remote, endpointInput) {
     const endpoint = normalizeRemoteServiceTarget(endpointInput);
-    const client = new Client({ name: "forgerelay-cli", version: packageVersion });
+    const client = new Client({ name: "forgerelay-cli", version: packageVersion }, { versionNegotiation: { mode: "legacy" } });
     const transport = new StreamableHTTPClientTransport(publicEndpointUrl(endpoint, "mcp"), {
         requestInit: {
             headers: { Authorization: `Bearer ${remote.accessToken}` },

package/dist/workspaces/relay/result-support.js

@@ -108,6 +108,25 @@ export function toolResultText(result) {
         .map((entry) => entry.text)
         .join("\n") || "remote tool returned an error";
 }
+export function enforceRelayedMediaBudget(result, maxBytes) {
+    let remainingBytes = maxBytes;
+    for (const entry of result.content ?? []) {
+        if (entry.type !== "image")
+            continue;
+        const bytes = Buffer.byteLength(entry.data, "base64");
+        if (bytes > remainingBytes) {
+            return {
+                content: [{
+                        type: "text",
+                        text: `Relayed media content exceeds the Gateway media limit of ${maxBytes} bytes.`,
+                    }],
+                isError: true,
+            };
+        }
+        remainingBytes -= bytes;
+    }
+    return result;
+}
 export function remapToolResultWorkspaceId(result, remoteWorkspaceId, gatewayWorkspaceId) {
     return {
         ...result,

package/dist/workspaces/relay/tests/test-support.js

@@ -3,9 +3,8 @@ import { execFileSync } from "node:child_process";
 import { mkdir, writeFile } from "node:fs/promises";
 import { createRequire, syncBuiltinESMExports } from "node:module";
 import { dirname, join } from "node:path";
-import { Client } from "@modelcontextprotocol/sdk/client/index.js";
-import { InMemoryTransport } from "@modelcontextprotocol/sdk/inMemory.js";
-import { CallToolResultSchema } from "@modelcontextprotocol/sdk/types.js";
+import { Client, InMemoryTransport } from "@modelcontextprotocol/client";
+import { CompatibilityCallToolResultSchema } from "@modelcontextprotocol/core";
 import { ActivityAuditStore } from "../../../activity/history/audit-store.js";
 import { BashOutputStore } from "../../../activity/history/bash-output-store.js";
 import { HostTurnStore } from "../../../activity/history/host-turn-store.js";
@@ -67,6 +66,8 @@ export async function startForge(t, options) {
         stateDir,
         worktreeRoot: join(options.root, "worktrees"),
         ...(options.taskReminderInterval !== undefined ? { taskReminderInterval: options.taskReminderInterval } : {}),
+        ...(options.mediaMaxBytes !== undefined ? { mediaMaxBytes: options.mediaMaxBytes } : {}),
+        ...(options.mcpServers ? { mcpServers: options.mcpServers } : {}),
         ...(options.hooks ? { hooks: options.hooks } : {}),
     }, null, 2));
     const env = {
@@ -104,6 +105,7 @@ export async function startGatewayClient(t, options) {
     await writeFile(join(options.configDir, "config.json"), JSON.stringify({
         allowedRoots: [options.allowedRoot],
         stateDir,
+        ...(options.mediaMaxBytes !== undefined ? { mediaMaxBytes: options.mediaMaxBytes } : {}),
         ...(options.hooks ? { hooks: options.hooks } : {}),
     }, null, 2));
     const config = loadConfig({
@@ -221,5 +223,9 @@ export function resultText(result) {
         .join("\n");
 }
 function parseToolResult(result) {
-    return CallToolResultSchema.parse(result);
+    const parsed = CompatibilityCallToolResultSchema.parse(result);
+    if (!Array.isArray(parsed.content)) {
+        throw new Error("Expected a content-based compatibility tool result.");
+    }
+    return parsed;
 }

package/dist/workspaces/relay/workspace-relay.js

@@ -1,21 +1,23 @@
 import { randomBytes } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
 import { join } from "node:path";
-import { CallToolResultSchema } from "@modelcontextprotocol/sdk/types.js";
+import { CompatibilityCallToolResultSchema } from "@modelcontextprotocol/core";
 import { isRemoteMcpUnauthorized, refreshRemoteAuthentication, } from "./auth/remote-auth.js";
 import { RemoteMcpConnectionPool } from "./transport/remote-mcp-connection-pool.js";
 import { withFileLock } from "../../runtime/state/lock/file-lock.js";
 import { withRemoteServiceEndpoint } from "./transport/remote-transport.js";
 import { loadForgeRelayFiles, writeForgeRelayRemote, } from "../../runtime/config/user-config.js";
-import { assertRemoteToolSucceeded, copyBooleanField, copyNumberField, copyStringField, errorMessage, remapToolResultWorkspaceId, replaceExactWorkspaceId, safeManagedWorktreeRecovery, safeTaskSummary, sanitizedRemoteError, stringField, toolResultText, } from "./result-support.js";
+import { assertRemoteToolSucceeded, copyBooleanField, copyNumberField, copyStringField, enforceRelayedMediaBudget, errorMessage, remapToolResultWorkspaceId, replaceExactWorkspaceId, safeManagedWorktreeRecovery, safeTaskSummary, sanitizedRemoteError, stringField, toolResultText, } from "./result-support.js";
 export class RemoteWorkspaceRelay {
+    mediaMaxBytes;
     routes = new Map();
     turnRoutes = new Map();
     authEnv;
     routeStateDir;
     routeStatePath;
     mcpConnections = new RemoteMcpConnectionPool();
-    constructor(configDir, stateDir) {
+    constructor(configDir, stateDir, mediaMaxBytes) {
+        this.mediaMaxBytes = mediaMaxBytes;
         this.authEnv = { FORGERELAY_CONFIG_DIR: configDir };
         this.routeStateDir = stateDir;
         this.routeStatePath = join(stateDir, "remote-workspace-routes.json");
@@ -184,7 +186,7 @@ export class RemoteWorkspaceRelay {
         return result;
     }
     async read(gatewayWorkspaceId, input, conversationScopeId) {
-        return this.callWorkspaceTool(gatewayWorkspaceId, "read", input, conversationScopeId);
+        return enforceRelayedMediaBudget(await this.callWorkspaceTool(gatewayWorkspaceId, "read", input, conversationScopeId), this.mediaMaxBytes);
     }
     async write(gatewayWorkspaceId, input, conversationScopeId) {
         return this.callWorkspaceTool(gatewayWorkspaceId, "write", input, conversationScopeId);
@@ -214,7 +216,7 @@ export class RemoteWorkspaceRelay {
         return this.callWorkspaceTool(gatewayWorkspaceId, "apply_patch", input, conversationScopeId);
     }
     async capability(gatewayWorkspaceId, input, conversationScopeId) {
-        return this.callWorkspaceTool(gatewayWorkspaceId, "capability", input, conversationScopeId);
+        return enforceRelayedMediaBudget(await this.callWorkspaceTool(gatewayWorkspaceId, "capability", input, conversationScopeId), this.mediaMaxBytes);
     }
     async activityPanel(gatewayWorkspaceId, conversationScopeId) {
         const result = await this.callWorkspaceTool(gatewayWorkspaceId, "activity_panel", {}, conversationScopeId);
@@ -463,13 +465,19 @@ export class RemoteWorkspaceRelay {
                 throw new Error(`Remote ForgeRelay ${alias} request failed: ${errorMessage(error)}`, { cause: error });
             }
         }
-        const invoke = async (active) => CallToolResultSchema.parse(await active.client.callTool({
-            name,
-            arguments: args,
-            ...(conversationScopeId
-                ? { _meta: { "openai/session": conversationScopeId } }
-                : {}),
-        }));
+        const invoke = async (active) => {
+            const parsed = CompatibilityCallToolResultSchema.parse(await active.client.callTool({
+                name,
+                arguments: args,
+                ...(conversationScopeId
+                    ? { _meta: { "openai/session": conversationScopeId } }
+                    : {}),
+            }));
+            if (!Array.isArray(parsed.content)) {
+                throw new Error("Remote ForgeRelay returned a modern-only tool result on the legacy Relay protocol path.");
+            }
+            return parsed;
+        };
         try {
             return await invoke(connection);
         }

package/docs/configuration.md

@@ -10,8 +10,18 @@ New installations use:
 ```text
 ~/.forgerelay/config.json
 ~/.forgerelay/auth.json
+~/.forgerelay/mcp.json       # optional External MCP registry
+~/.forgerelay/mcp-auth.json  # created only when External MCP OAuth state exists
 ```
 
+A Workspace may also define project-scoped External MCP servers in:
+
+```text
+<workspace>/.forgerelay/mcp.json
+```
+
+`mcp-auth.json` is ForgeRelay-private credential state and must not be copied into a project.
+
 Override the directory with:
 
 ```bash
@@ -26,6 +36,10 @@ npx @akira-tl/forgerelay serve
 npx @akira-tl/forgerelay doctor
 npx @akira-tl/forgerelay config get
 npx @akira-tl/forgerelay config set publicBaseUrl https://forge.example.com/forgerelay/main,https://forge-alt.example.com/relay
+npx @akira-tl/forgerelay mcp list
+npx @akira-tl/forgerelay mcp test <server>
+npx @akira-tl/forgerelay mcp auth <server>
+npx @akira-tl/forgerelay mcp logout <server>
 npx @akira-tl/forgerelay maintenance inspect
 ```
 
@@ -146,6 +160,181 @@ A single persisted string remains fully supported, so existing configs require n
 migration. For environment configuration, use a comma-separated list in
 `FORGERELAY_PUBLIC_BASE_URL`.
 
+## Media content and external MCP
+
+The existing `read` tool recognizes PNG, JPEG, WebP, and GIF by file signature and returns the original bytes as standard MCP `ImageContent`. Image reads do not use filename extensions for recognition, and text-only `offset` / `limit` arguments are rejected for image targets.
+
+Inline media uses a separate decoded-byte budget:
+
+| Variable | Default | Purpose |
+| --- | --- | --- |
+| `FORGERELAY_MEDIA_MAX_BYTES` | `20971520` | Maximum aggregate decoded image bytes in one Host-facing tool result (20 MiB). |
+
+The same value may be persisted as `mediaMaxBytes` in `config.json`. The budget applies at each ForgeRelay media ingress boundary, including local Read, Workspace Relay Gateway delivery, and configured external MCP results. ForgeRelay fails an oversize result instead of truncating, resizing, recompressing, transcoding, or silently creating an Artifact.
+
+Media content is transient. Image base64 is present only in the live MCP result delivered to the Host; Activity/Audit, structured output, UI state, Workspace state, and logs keep bounded metadata such as MIME type and decoded byte size. Reading or forwarding an image does **not** create an Artifact. Artifact download/materialization remains a separate explicit workflow.
+
+User-configured MCP servers are exposed through the workspace-scoped `mcp.external` Capability rather than becoming new top-level MCP tools. The capability remains discoverable even when the effective server registry is empty, so servers added later by hot reload become usable without reconnecting the Host.
+
+### External MCP configuration files
+
+New configuration uses a dedicated `mcp.json` file. The machine-wide registry is:
+
+```text
+~/.forgerelay/mcp.json
+```
+
+or the equivalent path below `FORGERELAY_CONFIG_DIR`. A Workspace may add or override servers in:
+
+```text
+<workspace>/.forgerelay/mcp.json
+```
+
+Both files use this shape:
+
+```json
+{
+  "servers": {
+    "renderer": {
+      "transport": "stdio",
+      "command": "node",
+      "args": ["/opt/renderer/server.mjs"]
+    },
+    "remote-renderer": {
+      "transport": "streamable-http",
+      "url": "https://renderer.example.com/mcp"
+    }
+  }
+}
+```
+
+Server names are stable lowercase identifiers matching `^[a-z][a-z0-9._-]{0,63}$`; one source may contain at most 32 servers.
+
+Effective configuration is merged by server name in this order:
+
+```text
+Project mcp.json > global mcp.json > legacy config.json.mcpServers
+```
+
+A Project entry may explicitly hide an inherited server:
+
+```json
+{
+  "servers": {
+    "remote-renderer": {
+      "disabled": true
+    }
+  }
+}
+```
+
+`disabled` defaults to `false` and normally does not need to be written. Removing the Project entry exposes the lower-precedence global/legacy server again. A complete server entry may also contain `"disabled": true`; ForgeRelay validates the entry but does not activate it.
+
+The historical `config.json -> mcpServers` object remains a deprecated read-compatible source. New configuration and documentation use `mcp.json`; the legacy source is retained for at least the next two feature-release compatibility windows and should not be used for new setups.
+
+ForgeRelay reloads global and Project `mcp.json` on demand before External MCP operations. A valid changed file becomes visible to the next `servers`, `tools`, or `call` operation without restarting ForgeRelay. Each operation uses one immutable snapshot, so an in-flight call is not switched underneath itself. If a previously valid source becomes invalid, that running ForgeRelay process keeps the whole previous valid source as last-known-good and reports a bounded diagnostic; no partially parsed subset is activated. A fresh CLI process cannot reconstruct another process's in-memory last-known-good snapshot, so it reports the invalid source while noting that an existing runtime may still be using its prior valid snapshot.
+
+### External MCP transports and authentication
+
+A stdio server supports `command`, optional `args`, `env`, and `cwd`. It is launched directly, not through a shell. Its process still runs with the operating-system authority of the user running ForgeRelay. A Project `.forgerelay/mcp.json` can therefore introduce executable project configuration; opening an allowed project is the trust boundary, and ForgeRelay does not add a second per-server approval prompt.
+
+A Streamable HTTP server supports `url` and optional static `headers`:
+
+```json
+{
+  "servers": {
+    "private-api": {
+      "transport": "streamable-http",
+      "url": "https://mcp.example.com/mcp",
+      "headers": {
+        "Authorization": "Bearer <user-managed-secret>"
+      }
+    }
+  }
+}
+```
+
+ForgeRelay does not require every HTTP MCP server to use OAuth. The effective models are:
+
+- no authentication: connect directly;
+- static credentials: user-managed `headers` for HTTP or `env` for stdio;
+- interactive OAuth: explicitly initiated by a human through the CLI.
+
+Do not commit static secrets in Project `mcp.json`. ForgeRelay does not move project-defined header/env secrets into a separate secret manager in v1.1.1.
+
+Interactive OAuth state is stored only in the machine-private:
+
+```text
+~/.forgerelay/mcp-auth.json
+```
+
+(or the configured ForgeRelay config directory). Project OAuth credentials are still stored there, keyed to the canonical Project root and server; they are not written into the project. Global/legacy servers use a global credential identity. Project credentials are not reused across Projects merely because the server name or URL matches.
+
+Authenticate explicitly:
+
+```bash
+forgerelay mcp auth <server>
+forgerelay mcp auth <server> --project /path/to/project
+forgerelay mcp auth <server> --global
+```
+
+The CLI performs OAuth discovery, PKCE and the browser/callback exchange, then atomically commits the credential. The running ForgeRelay server is not an OAuth callback broker; it simply reads the updated credential store on later External MCP calls. On a desktop the CLI opens the authorization URL and listens on a short-lived loopback callback. On SSH/headless systems it prints the authorization URL and asks for the final callback URL to be pasted; pasted input is displayed only as `*` mask characters.
+
+Normal token refresh is non-interactive and may be performed by the runtime. If refresh fails, the resource/issuer binding changes, or the server requires additional scope, the runtime does not open a browser: it returns `mcp.auth_required` or `mcp.reauthorization_required`, and the human reruns `forgerelay mcp auth <server>`. Multiple ForgeRelay processes coordinate refresh through the shared credential store so refresh-token rotation does not turn a successful refresh in one process into a false reauthorization failure in another.
+
+ForgeRelay uses Dynamic Client Registration when the authorization server supports the compatible flow. For CIMD-only authorization servers, configure a stable public HTTPS client metadata document and the exact loopback callback port it advertises:
+
+```json
+{
+  "servers": {
+    "modern": {
+      "transport": "streamable-http",
+      "url": "https://mcp.example.com/mcp",
+      "oauth": {
+        "clientMetadataUrl": "https://client.example.com/forgerelay.json",
+        "callbackPort": 49152
+      }
+    }
+  }
+}
+```
+
+`clientMetadataUrl` must use HTTPS with a non-root path; `callbackPort` must be `1024..65535`. ForgeRelay does not operate a hosted CIMD service, so this advanced configuration is supplied by the operator when a server requires it.
+
+Remove local OAuth state with:
+
+```bash
+forgerelay mcp logout <server>
+```
+
+ForgeRelay removes the local credential even when remote token revocation is unsupported or fails, and reports that distinction.
+
+### External MCP diagnostics
+
+Use the CLI before editing runtime state by guesswork:
+
+```bash
+forgerelay mcp list
+forgerelay mcp test <server>
+forgerelay doctor
+```
+
+`mcp list` is passive: it reports the resolved Project/global/legacy sources, disabled entries, authentication state, credential-store health, and invalid/last-known-good configuration diagnostics. With no explicit scope it uses the active Workspace root when supplied by ForgeRelay, otherwise walks upward from the current directory for the nearest `.forgerelay/mcp.json`; `--project` selects a Project explicitly and `--global` excludes Project configuration.
+
+`mcp test` is the active probe. It connects to the selected server and performs tool discovery, reporting source, transport, auth state, negotiated MCP era/version, tool count, and actionable failures such as authentication required, unreachable transport, or tool discovery failure.
+
+`doctor` remains passive. Its External MCP section reads configuration and credential metadata only; it does not launch configured stdio servers or make HTTP MCP requests. Use `mcp test` when an active connectivity check is intended.
+
+### External MCP protocol compatibility and Relay
+
+ForgeRelay's External MCP client negotiates modern MCP 2026-07-28 when available and falls back to supported legacy MCP servers. Host-facing HTTP similarly supports the modern stateless protocol while retaining the legacy sessionful path for compatible Hosts.
+
+For a relayed Workspace, External MCP configuration, credentials, process launches, OAuth refreshes, and upstream MCP calls belong to the **Execution ForgeRelay**. The Gateway does not copy or forward External MCP credentials. Run `forgerelay mcp auth` on the machine/configuration that owns execution when a relayed Workspace needs OAuth.
+
+The Agent explicitly selects the configured server, advertised tool, and arguments through `capability(name="mcp.external", action="run", ...)`. Direct upstream PNG/JPEG/WebP/GIF `ImageContent` is validated and forwarded without decode/re-encode. Text, paths, URLs, `resource_link` values, and other references remain exactly that by default: ForgeRelay does not automatically fetch them, call `read`, infer that they refer to an image, or create an Artifact.
+
+A known server/tool may opt into explicit request/result adaptation with `ExternalMcpBeforeForward` or `ExternalMcpAfterForward` project/global Hooks. These transforms use the structured versioned stdin/stdout protocol described under [Lifecycle hooks](#lifecycle-hooks); ordinary Hook stdout never rewrites MCP data. For example, a project can match one renderer tool whose normal result is a path and deliberately convert that result into `ImageContent`. The Hook command performs any file/network access with its normal local-user authority, and the transformed result still passes through the same MCP shape, MIME/base64, and `mediaMaxBytes` validation before Host delivery.
+
 ## Native artifact download
 
 Native-file download is disabled by default. Enable it with:
@@ -553,7 +742,7 @@ Hooks v1 是自动生命周期规则。规则由用户或 Agent 主动写入；
 
 | 字段 | 含义 |
 | --- | --- |
-| `event` | 必填，九个 Hook event 之一。 |
+| `event` | 必填，当前 Hook event 之一。 |
 | `matcher` | 可选，只在匹配当前生命周期上下文时执行。 |
 | `command` | 必填，本地 shell 命令。 |
 | `timeoutSeconds` | 默认 `30`，范围 `1` 到 `300`。 |
@@ -587,6 +776,11 @@ forgerelay hooks check --project /path/to/project
 | `pathRegex` | 对 payload 中的 `path` 或 `paths` 做正则匹配。 |
 | `provider` | 精确匹配 subagent provider。 |
 | `workspaceMode` | `checkout` 或 `worktree`。 |
+| `capability` | 精确匹配 Capability 名；external MCP transform 使用 `mcp.external`。 |
+| `externalServer` | 精确匹配已经配置的 external MCP server 名。 |
+| `externalTool` | 精确匹配该 server 当前调用的 upstream tool 名。 |
+
+`capability` / `externalServer` / `externalTool` 只匹配当前已选择的 Capability target，不允许 Hook 输出改写 server/tool 或提供新的连接地址、命令、凭据。
 
 Matcher 匹配 ForgeRelay 收到的那次 tool request，不会窥探该命令内部后续启动的子进程。例如 `bash` 参数本身是 `git push origin v0.2.0` 时可以命中；若参数只是 `./release.sh`，而脚本内部再执行 `git push`，ForgeRelay 不会把内部子进程重新解释成新的 Hook 事件。
 
@@ -600,13 +794,17 @@ Matcher 匹配 ForgeRelay 收到的那次 tool request，不会窥探该命令
 | `BeforeTool` | workspace-scoped MCP tool 执行前触发；失败或超时会阻断原操作。`open_workspace` 因执行前还没有 workspace，不走该事件。 |
 | `AfterTool` | tool 成功后触发。 |
 | `AfterToolFailure` | tool 失败或被 `BeforeTool` 拒绝后触发。 |
+| `ExternalMcpBeforeForward` | 已选择 `mcp.external` server/tool 后、upstream 调用前触发；使用 structured transform 协议，可替换当前 request arguments，但不能改写 server/tool。失败会阻止 upstream 调用。 |
+| `ExternalMcpAfterForward` | upstream external MCP 调用成功后触发；使用 structured transform 协议，可替换当前 MCP result。替换结果重新经过标准 MCP/Media 校验。失败会令 Capability 失败，但不会声称回滚 upstream 已发生的副作用。 |
 | `AfterFileChange` | `write`、`edit`、`rename`、`delete`、`apply_patch`、native artifact 等明确文件变更成功后触发；不会推断 shell 的文件副作用。 |
 | `BeforeWorktreeClose` | worktree commit、fast-forward、cleanup 前触发；失败会保留 worktree 并阻断 close。 |
 | `AfterWorktreeClose` | managed worktree 成功关闭后触发；此时从 source checkout 运行。 |
 | `SubagentStart` | 本地 subagent worker 进入执行时触发。 |
 | `SubagentStop` | subagent 完成或进入 error 状态时触发。 |
 
-`BeforeTool` 与 `BeforeWorktreeClose` 是 blocking 事件。其他事件是 observational：失败会被记录并报告，但不会回滚已经完成的文件、Git、进程或网络副作用。Blocking 同样不是事务；Hook 命令自己已经产生的副作用不会因 exit code 非零而撤销。Host 在 blocking Hook 仍运行时取消 MCP request，会终止该 Hook 并阻止原始 tool operation 开始，因此不会出现 Host 已放弃请求后 Hook 又放行后续原始副作用的情况。
+`BeforeTool` 与 `BeforeWorktreeClose` 是普通 lifecycle blocking 事件。`ExternalMcpBeforeForward` 也是 external-MCP forwarding 的前置阻断点；`ExternalMcpAfterForward` 则发生在 upstream 已成功返回之后，因此它只能阻止变换后结果继续交付，不能回滚或伪装撤销 upstream 副作用。其他 after-events 是 observational：失败会被记录并报告，但不会回滚已经完成的文件、Git、进程或网络副作用。Blocking 同样不是事务；Hook 命令自己已经产生的副作用不会因 exit code 非零而撤销。Host 在前置 blocking Hook 仍运行时取消 MCP request，会终止该 Hook 并阻止对应原始 operation 开始。
+
+External MCP transform 的可变数据不通过普通 Hook stdout 约定。ForgeRelay 把一个 `version: 1` JSON envelope 写到 transform Hook 的 stdin，并只接受 stdout 中一个合法 JSON envelope：before-forward 返回 `arguments`，after-forward 返回 `result`。这一协议只对两个 External MCP transform event 生效；现有 lifecycle Hook stdout 仍只是命令输出。
 
 ### Agent 可见报告
 

package/docs/debugging.md

@@ -54,7 +54,7 @@ The selected debug config is authoritative for its own `host` and `port`; the
 launcher reports endpoints derived from that file instead of assuming `7677`.
 This makes parallel isolated instances straightforward: give each instance its
 own config, state, and worktree directories and configure different ports (for
-example `7677` for a Gateway and `6768` for an Execution ForgeRelay), then launch
+example `7677` for a Gateway and `7678` for an Execution ForgeRelay), then launch
 each with its own `FORGERELAY_DEBUG_CONFIG_DIR`.
 
 ## Run a local MCP Apps Host
@@ -107,12 +107,15 @@ behavior.
 
 ```bash
 npm run debug:accept
+npm run debug:accept:modern
+npm run debug:accept:relay
 ```
 
-The acceptance runner starts its own fully isolated ForgeRelay fixture on
-`127.0.0.1:7677`, with its own generated Owner password and checked-in debug
-configuration. It sends real HTTP requests with `curl` and shuts the server down
-when it finishes.
+`debug:accept` starts its own fully isolated legacy/sessionful ForgeRelay fixture on
+`127.0.0.1:7677`. `debug:accept:modern` exercises the MCP 2026-07-28 stateless Host
+path on isolated `7678`, and `debug:accept:relay` exercises an isolated
+7677 Gateway → 7678 Execution topology. Each runner owns its temporary config/state,
+generates its own authentication material, and shuts down what it started.
 It refuses to start when port `7677` is already occupied so it cannot
 accidentally validate an older debug process.
 

package/docs/roadmap.md

@@ -348,9 +348,70 @@ recovery, checkpoint, and retention facts; the Gateway only routes and presents
 results. Development acceptance remains on isolated 7677/7678 instances and never uses
 the normal 7676 installation.
 
-Native Windows Command Shell Runtime support was intentionally kept out of the
-0.9 recovery/history line and was subsequently delivered across the 0.10.x P3
-work for PowerShell 7, Windows PowerShell 5.1, and `cmd.exe`.
+## 0.10 — Command Shell Runtime P3
+
+0.10 把 ForgeRelay 的命令执行从“默认假设 Bash”提升为显式、可观察、跨平台的
+Command Shell Runtime，同时保持公开 Core tool 名称 `bash` 不变，避免因为 Windows
+支持而扩大 Host 的常驻 MCP surface。
+
+- **0.10.0** — 建立 server-lifetime Command Shell Runtime identity 与选择优先级；
+  `forgerelay init` 管理可编辑 shell Instructions；系统级高权限启动默认拒绝，只有
+  显式 `--allow-elevated` 才允许继续；
+- **0.10.1** — 将 PowerShell 7（`pwsh`）作为 Windows 上的一等 Agent/Hook/PTY
+  runtime，并补齐真实 packaged npm acceptance；
+- **0.10.2** — 加入 Windows PowerShell 5.1，完成 ConPTY、Unicode、进程树清理和
+  packaged launcher 路径；
+- **0.10.3** — 将 `cmd.exe` 提升为一等 runtime，覆盖其独立 quoting、escaping、
+  `%ERRORLEVEL%`、pipe/PTY 与 `.cmd` launcher contract；
+- **0.10.4** — 让 shell identity 跟随实际 Execution ForgeRelay，并贯通 Workspace
+  Relay、Composite Workspace、doctor、UI、Instructions 与公开 tool description；
+- **0.10.5** — 移除 ForgeRelay 对 legacy `disable-model-invocation` Skill frontmatter
+  的过滤，保持 Skill discovery 由 Agent 侧匹配决定。
+
+P3 的发布验收以真实 Windows shell matrix 与 packed artifact 为核心，同时继续保留
+Linux/macOS 回归验证。开发与运行时验收只使用隔离的 7677/7678 实例，不触碰 7676。
+
+## 1.0 — Stable product baseline
+
+1.0 将已经完成的 Workspace、Capability Gateway、Hooks、LSP、Activity/Audit、Tasks、
+Recovery/Checkpoint、Relay/Composite 与跨平台 shell contract 提升为稳定的 1.x 产品
+基线，而不是重新设计一套运行时模型。
+
+- **1.0.0** — 固化当前 MCP Core tool surface、CLI、Workspace 生命周期、managed
+  worktree finalize 与 Capability Gateway，现有 0.10.5 配置和持久化状态无需迁移；
+- **1.0.1** — 修复 Capability 与 Workspace lifecycle pretty logging，使日志保留
+  semantic operation identity，并补齐 Composite capability attribution。
+
+1.x 继续遵守现有发布规则：稳定版本只有在本地 release gate 与真实 7677/7678 路径
+验收通过后才创建 tag；tag-triggered Linux/macOS/Windows workflow 成功后才形成正式
+npm/GitHub Release。
+
+## 1.1 — First-class image transport
+
+1.1 把 image-bearing MCP result 纳入 ForgeRelay 的一等、受预算约束的传输路径，
+同时保持“ForgeRelay 不是图片仓库，也不自动解引用外部引用”的边界。
+
+- `read` 依据文件签名把 PNG、JPEG、WebP、GIF 返回为标准 MCP `ImageContent`，bulk
+  Read 保留 text/image 输入顺序；
+- Workspace Relay 在 Execution ForgeRelay → Gateway ForgeRelay 路径中原样保留
+  image content，并在 Gateway 侧再次执行 media budget；
+- 用户显式配置的外部 MCP server 通过 `mcp.external` Capability 调用，原生
+  `ImageContent` 可直接转发，但 path/URL/resource reference 默认仍只是 reference；
+- `ExternalMcpBeforeForward` / `ExternalMcpAfterForward` Transform Hook 为特定
+  server/tool 提供显式结构化适配 seam，但不能改写已选择的 server/tool；
+- Media content 保持瞬时 MCP payload，不自动成为 Artifact；Activity/Audit、日志、
+  structured output 与 Workspace state 只持久化受限 metadata，不保存 image base64；
+- 每个 tool result 默认采用 20 MiB decoded-media budget，超限显式失败，不静默截断、
+  resize 或转码。
+
+1.1.0 已完成真实 7677 HTTP/OAuth/MCP、7677 → 7678 Relay、external MCP、Transform
+Hook、packed artifact 和 ChatGPT Host 图像呈现验收，并作为正式稳定版本发布。
+
+## 1.x forward planning
+
+当前 roadmap 没有承诺 1.1 之后的下一条 minor feature line。新的 1.x 产品工作应从
+明确的用户目标、架构问题或外部 issue 出发，先形成可验证的 spec/tickets，再进入实现；
+不要仅根据历史版本号顺序推断或虚构 1.2 功能范围。
 
 ## Workspace Task Lists
 

package/docs/security.md

@@ -147,6 +147,24 @@ Workspace from another conversation intentionally shares the same completion sco
 as well. Hook handlers keep their separate bounded timeout
 policy because they are lifecycle gates rather than user-command execution.
 
+## External MCP configuration and credentials
+
+External MCP extends the same local-authority model rather than creating a sandbox. Machine-wide servers live in the ForgeRelay config directory's `mcp.json`; Project servers may live in `<workspace>/.forgerelay/mcp.json`. A Project stdio entry can launch a configured executable with the same operating-system user authority as ForgeRelay, so Project MCP configuration is executable project configuration. ForgeRelay does not add a second per-server approval prompt after the operator has allowed and opened that project root.
+
+Static HTTP headers and stdio environment values are user-managed configuration. Do not commit secrets in Project `mcp.json`; v1.1.1 does not automatically extract project-defined secrets into a secret manager.
+
+Interactive External MCP OAuth credentials are different. They are kept in the machine-private ForgeRelay config directory:
+
+```text
+~/.forgerelay/mcp-auth.json
+```
+
+Project OAuth credentials are keyed to the Project root but still stay in this private machine file; ForgeRelay does not write access tokens, refresh tokens, authorization codes, PKCE verifiers, or client secrets into the project. Callback URLs pasted in headless mode are masked in the terminal. Runtime token refresh is non-interactive; any fresh consent/authorization requires an explicit human `forgerelay mcp auth <server>` invocation.
+
+External MCP configuration and OAuth state belong to the Execution ForgeRelay for relayed Workspaces. The Gateway does not receive or replicate those credentials merely because it forwards the Workspace operation.
+
+External MCP result references are not implicitly dereferenced. Paths, URLs and MCP resource references returned by an upstream server remain references unless the Agent explicitly reads them or an explicitly configured External MCP transform Hook changes the result.
+
 ## Lifecycle hooks
 
 Hook command 是本地代码执行，使用与 ForgeRelay 相同的操作系统用户权限并继承进程环境。