better-dsh 0.2.3-d → 0.2.3-e

package/lib/index.js

@@ -1,9 +1,10 @@
 import { a as RESERVED_ERROR_MEMBERS, i as RESERVED_BINDING_GLOBALS, n as DUNDER_MEMBER, o as ReplRuntime, r as PORTABLE_RESERVED_WORDS, t as isFlatBindableName } from "./py-sdk-Chvy92MB.js";
 import { s as resolveKernelEnv } from "./kernel-env-hxaihi9C.js";
+import { a as createDshHandler, c as createDvcHandler, d as registerDvcDevice, f as UrlSchemesError, i as createHttpHandler, l as dispatchDvcWrite, m as SCHEME_NAMES, n as wrapFsWithSchemes, o as UrlResolver, p as parseUrl, r as HTTP_SCHEMES, s as resolveDocsDir, u as listDvcDevices } from "./wrap-DC8O3SYz.js";
 import { createRequire } from "node:module";
 import { Context } from "@deepseek-ai/cordis";
 import { createHmac, randomBytes, randomUUID } from "node:crypto";
-import { accessSync, constants, existsSync, mkdirSync, mkdtempSync, promises, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { accessSync, constants, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";
 import * as path from "node:path";
 import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import z from "@deepseek-ai/schemastery";
@@ -1728,7 +1729,7 @@ const IDENTIFIER = /^[A-Za-z_][A-Za-z0-9_]*$/;
 const KERNEL_OWNED_NAME = /^_+dashr/i;
 /** Manifest format version; a snapshot written under a different version is not replayable. */
 const SNAPSHOT_FORMAT = 1;
-function messageOf$3(error) {
+function messageOf$2(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 /** Key under which the per-session kernel map stores agentless runs. */
@@ -1841,7 +1842,7 @@ var DashrRuntime = class extends ReplRuntime {
 		} catch (error) {
 			return finalizeOutput([], void 0, {
 				kind: "worker-exit",
-				message: `kernel failed to start: ${messageOf$3(error)}`
+				message: `kernel failed to start: ${messageOf$2(error)}`
 			}, this.config.maxOutputBytes);
 		}
 		if (!entry.restoreAttempted) {
@@ -2031,7 +2032,7 @@ var DashrRuntime = class extends ReplRuntime {
 		} catch (error) {
 			return {
 				ok: false,
-				message: messageOf$3(error)
+				message: messageOf$2(error)
 			};
 		}
 		const value = snapshotJsonValue(resolved);
@@ -2157,7 +2158,7 @@ var DashrRuntime = class extends ReplRuntime {
 		} catch (error) {
 			return finalizeOutput([], void 0, {
 				kind: "worker-exit",
-				message: `kernel died and respawn failed (${messageOf$3(error)}); the next run will retry a fresh kernel`
+				message: `kernel died and respawn failed (${messageOf$2(error)}); the next run will retry a fresh kernel`
 			}, this.config.maxOutputBytes);
 		}
 		entry.restoreAttempted = true;
@@ -2258,252 +2259,14 @@ var DashrRuntime = class extends ReplRuntime {
 			const saved = await kernel.snapshotState(join(dir, "state.dill"), join(dir, "manifest.json"), spec);
 			if (saved.kind !== "ok" && saved.kind !== "skipped") this.logger.warn(`kernel namespace snapshot for ${JSON.stringify(entry.key)} failed: ${saved.reason}`);
 		} catch (error) {
-			this.logger.warn(`kernel namespace snapshot for ${JSON.stringify(entry.key)} failed: ${messageOf$3(error)}`);
+			this.logger.warn(`kernel namespace snapshot for ${JSON.stringify(entry.key)} failed: ${messageOf$2(error)}`);
 		}
 		await kernel.dispose();
 	}
 };
 
 //#endregion
-//#region src/url-schema/selector.ts
-/** Structured error thrown by the URL-schema layer. */
-var UrlSchemaError = class extends Error {
-	code;
-	constructor(code, message) {
-		super(message);
-		this.name = "UrlSchemaError";
-		this.code = code;
-	}
-};
-/** Matches `scheme://rest` with a lowercase alphanumeric scheme. */
-const SCHEME_RE = /^([a-z][a-z0-9]*):\/\/(.*)$/;
-/** One line range token: `N`, `N-M`, or open `N-`. */
-const RANGE_RE = /^(\d+)(?:-(\d*))?$/;
-/**
-* Schemes whose URL syntax reserves `:` and `?` (ports, query strings): the
-* whole remainder is the path and NO selector is parsed. The http(s) handler
-* is documented as selector-free for exactly this reason — `:8443` is a port
-* and `?q=` a server query, never a line range or content filter.
-*/
-const SELECTOR_EXEMPT = {
-	http: true,
-	https: true
-};
-/**
-* Parse a `scheme://` URL into `{ scheme, path, selector }`.
-*
-* Throws a structured {@link UrlSchemaError} (code `URL_NO_SCHEME`) when the
-* URL has no `scheme://` prefix. Any lowercase scheme is accepted here; the
-* resolver rejects schemes with no registered handler. Selector-exempt
-* schemes ({@link SELECTOR_EXEMPT}) return the whole remainder as the path.
-*/
-function parseUrl(raw) {
-	const m = SCHEME_RE.exec(raw);
-	if (m === null) throw new UrlSchemaError("URL_NO_SCHEME", `URL "${raw}" has no scheme — expected "scheme://" (skill://, agent://, dsh://, ctx://, dvc://, http://, https://)`);
-	const scheme = m[1];
-	const rest = m[2];
-	if (SELECTOR_EXEMPT[scheme] === true) return {
-		scheme,
-		path: rest,
-		selector: null
-	};
-	const colon = rest.indexOf(":");
-	const question = rest.indexOf("?");
-	const hasColon = colon !== -1;
-	const hasQuestion = question !== -1;
-	if (!hasColon && !hasQuestion) return {
-		scheme,
-		path: rest,
-		selector: null
-	};
-	const isQuery = hasQuestion && (!hasColon || question < colon);
-	const marker = isQuery ? question : colon;
-	const path$1 = rest.slice(0, marker);
-	const selPart = rest.slice(marker + 1);
-	return {
-		scheme,
-		path: path$1,
-		selector: isQuery ? {
-			kind: "query",
-			q: selPart.startsWith("q=") ? selPart.slice(2) : selPart
-		} : parseColonSelector(selPart)
-	};
-}
-/** `:raw`, `:path/<subpath>`, or a `:N-M` line range list. */
-function parseColonSelector(selPart) {
-	if (selPart === "raw") return { kind: "raw" };
-	if (selPart.startsWith("path/")) return {
-		kind: "path",
-		value: selPart.slice(5)
-	};
-	return {
-		kind: "lines",
-		ranges: parseRanges(selPart)
-	};
-}
-/** `N`, `N-M`, `N-`, comma-separated → `[[start, end], ...]` (1-based). */
-function parseRanges(spec) {
-	return spec.split(",").map((part) => {
-		const token = part.trim();
-		const m = RANGE_RE.exec(token);
-		if (m === null) throw new UrlSchemaError("URL_BAD_SELECTOR", `invalid line selector ":${spec}" — expected N, N-M, or N-M,N2-M2`);
-		const start = Number(m[1]);
-		if (start < 1) throw new UrlSchemaError("URL_BAD_SELECTOR", `line numbers are 1-based — got ${start} in ":${spec}"`);
-		const end = m[2] === void 0 ? start : m[2] === "" ? Infinity : Number(m[2]);
-		if (end !== Infinity && end < start) throw new UrlSchemaError("URL_BAD_SELECTOR", `line range ${start}-${end} is empty — end must be >= start`);
-		return [start, end];
-	});
-}
-/**
-* Apply a selector to already-resolved text.
-*
-* `null` and `{ kind: 'raw' }` return the text unchanged. `lines` performs a
-* 1-based inclusive slice (open tail via `Infinity`). `path` navigates a JSON
-* sub-resource by dot-path. `query` navigates JSON by dot-path when the text
-* parses as JSON, and otherwise keeps the lines containing the query string.
-*/
-function applySelector(text, sel) {
-	if (sel === null) return text;
-	switch (sel.kind) {
-		case "raw": return text;
-		case "lines": return applyLines(text, sel.ranges);
-		case "path": return applyPath(text, sel.value);
-		case "query": return applyQuery(text, sel.q);
-	}
-}
-/** 1-based inclusive line slicing; `Infinity` end = open tail. */
-function applyLines(text, ranges) {
-	if (ranges.length === 0) return "";
-	const lines = text.split("\n");
-	const out = [];
-	for (const [startRaw, endRaw] of ranges) {
-		const start = Math.max(1, startRaw);
-		const end = endRaw === Infinity ? lines.length : Math.min(lines.length, endRaw);
-		if (start <= end) out.push(...lines.slice(start - 1, end));
-	}
-	return out.join("\n");
-}
-/** Navigate a JSON sub-resource by dot-path; non-JSON text passes through. */
-function applyPath(text, value) {
-	if (value === "") return text;
-	const parsed = tryParseJson(text);
-	if (parsed === void 0) return text;
-	const node = navigate(parsed, value);
-	return node === void 0 ? text : stringifyNode(node);
-}
-/** JSON dot-path query when the text is JSON, else a substring line filter. */
-function applyQuery(text, q) {
-	if (q === "") return text;
-	const parsed = tryParseJson(text);
-	if (parsed !== void 0) {
-		const node = navigate(parsed, q);
-		return node === void 0 ? text : stringifyNode(node);
-	}
-	return text.split("\n").filter((line) => line.includes(q)).join("\n");
-}
-function tryParseJson(text) {
-	try {
-		return JSON.parse(text);
-	} catch {
-		return;
-	}
-}
-/** Walk a dot-path through a parsed JSON value (numeric segments index arrays). */
-function navigate(node, path$1) {
-	let current$1 = node;
-	for (const segment of path$1.split(".")) {
-		if (segment === "") return void 0;
-		if (Array.isArray(current$1)) {
-			const idx = Number(segment);
-			if (!Number.isInteger(idx) || idx < 0) return void 0;
-			current$1 = current$1[idx];
-		} else if (current$1 !== null && typeof current$1 === "object") current$1 = current$1[segment];
-		else return;
-	}
-	return current$1;
-}
-/** Render a navigated leaf as text. */
-function stringifyNode(node) {
-	if (typeof node === "string") return node;
-	try {
-		return JSON.stringify(node) ?? "";
-	} catch {
-		return String(node);
-	}
-}
-
-//#endregion
-//#region src/url-schema/handlers/dvc.ts
-/** Module-level device registry: insertion-ordered, shared by every handler instance. */
-const devices = /* @__PURE__ */ new Map();
-/** Register (or replace) the device mounted under `name`. */
-function registerDvcDevice(name$2, device) {
-	devices.set(name$2, device);
-}
-/** Read-only view of the registered devices, in registration order. */
-function listDvcDevices() {
-	return devices;
-}
-/**
-* The first path segment is the device name (`dvc://name`, `dvc://name/sub`).
-* A leading `dvc://` is tolerated so callers may pass either the parsed path
-* (the write tool's contract) or the full URL.
-*/
-function deviceNameFromPath(path$1) {
-	const trimmed = (path$1.startsWith("dvc://") ? path$1.slice(6) : path$1).replace(/^\/+/, "");
-	const slash = trimmed.indexOf("/");
-	return slash === -1 ? trimmed : trimmed.slice(0, slash);
-}
-/** Uniform `unknown`-error rendering for structured error messages. */
-function messageOf$2(error) {
-	return error instanceof Error ? error.message : String(error);
-}
-/**
-* Build the `dvc://` scheme handler over the module-level device registry.
-* Bare `dvc://` yields the roster (`no devices mounted` while empty); a
-* registered `<device>` yields its summary plus a usage hint; an unregistered
-* name keeps the `unknown device` placeholder text.
-*/
-function createDvcHandler(_deps = {}) {
-	return { async resolve(_env, path$1) {
-		const name$2 = deviceNameFromPath(path$1);
-		if (name$2 === "") {
-			if (devices.size === 0) return "no devices mounted";
-			return [...devices].map(([n, device$1]) => `${n}\t${device$1.summary}`).join("\n");
-		}
-		const device = devices.get(name$2);
-		if (device === void 0) return `unknown device: ${name$2}`;
-		return `${device.summary}\nusage: write dvc://${name$2} with a JSON args object to execute this device`;
-	} };
-}
-/**
-* Write dispatch for `dvc://` URLs — called by the write tool's URL branch.
-* `path` addresses the device (parsed path or full `dvc://` URL); `content`
-* must be the JSON args payload.
-*
-* Routing and args failures (`DVC_NO_DEVICE`, `DVC_UNKNOWN_DEVICE`,
-* `DVC_BAD_ARGS`) throw synchronously — the placeholder wave's observable
-* contract — while a device-reported failure rejects the returned promise as
-* `DVC_DEVICE_ERROR` carrying the device name.
-*/
-function dispatchDvcWrite(path$1, content) {
-	if (devices.size === 0) throw new UrlSchemaError("DVC_NO_DEVICE", "dvc:// write dispatch: no devices mounted to route the write to");
-	const name$2 = deviceNameFromPath(path$1);
-	const device = devices.get(name$2);
-	if (device === void 0) throw new UrlSchemaError("DVC_UNKNOWN_DEVICE", `dvc:// write dispatch: no device named "${name$2}" (registered: ${[...devices.keys()].sort().join(", ")})`);
-	let args;
-	try {
-		args = JSON.parse(content);
-	} catch (error) {
-		throw new UrlSchemaError("DVC_BAD_ARGS", `dvc:// write dispatch: device "${name$2}" requires a JSON args payload (${messageOf$2(error)})`);
-	}
-	return Promise.resolve().then(() => device.execute(args)).catch((error) => {
-		throw new UrlSchemaError("DVC_DEVICE_ERROR", `dvc:// device "${name$2}" execute failed: ${messageOf$2(error)}`);
-	});
-}
-
-//#endregion
-//#region src/url-schema/vendored/devices/ast/natives-loader.ts
+//#region src/url-schemes/vendored/devices/ast/natives-loader.ts
 /** Platform tags with a published leaf package (mirrors the upstream loader). */
 const SUPPORTED_PLATFORM_TAGS = [
 	"linux-x64",
@@ -2616,7 +2379,7 @@ function loadPiNatives(options = {}) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/devices/ast/ast-device.ts
+//#region src/url-schemes/vendored/devices/ast/ast-device.ts
 /** Per-run cap on distinct rewritten files (upstream `PI_MAX_AST_FILES` default). */
 const MAX_FILES = 1e3;
 /** Glob metacharacters that mark a path segment as a pattern (upstream `GLOB_PATH_CHARS`). */
@@ -2809,14 +2572,14 @@ const summaries = {
 };
 
 //#endregion
-//#region src/url-schema/vendored/devices/browser/browser-device.ts
+//#region src/url-schemes/vendored/devices/browser/browser-device.ts
 let puppeteerModule;
 /** Load puppeteer-core once; missing package → structured BROWSER_NO_PUPPETEER. */
 async function loadPuppeteer() {
 	if (puppeteerModule === void 0) try {
 		puppeteerModule = await import("puppeteer-core");
 	} catch (err) {
-		throw new UrlSchemaError("BROWSER_NO_PUPPETEER", `puppeteer-core is not installed — the browser device needs it as a dependency (npm install puppeteer-core@^25.3.0): ${messageOf$1(err)}`);
+		throw new UrlSchemesError("BROWSER_NO_PUPPETEER", `puppeteer-core is not installed — the browser device needs it as a dependency (npm install puppeteer-core@^25.3.0): ${messageOf$1(err)}`);
 	}
 	return puppeteerModule;
 }
@@ -2844,18 +2607,18 @@ function withCause(error, cause) {
 }
 /** Assert the args payload is a plain JSON object and return it as a record. */
 function requireObjectArgs$1(args) {
-	if (args === null || typeof args !== "object" || Array.isArray(args)) throw new UrlSchemaError("BROWSER_BAD_ARGS", `browser device: args must be a JSON object with an "action" ("open" | "run" | "close"), got ${args === null ? "null" : Array.isArray(args) ? "array" : typeof args}`);
+	if (args === null || typeof args !== "object" || Array.isArray(args)) throw new UrlSchemesError("BROWSER_BAD_ARGS", `browser device: args must be a JSON object with an "action" ("open" | "run" | "close"), got ${args === null ? "null" : Array.isArray(args) ? "array" : typeof args}`);
 	return args;
 }
 /** Reject fields outside the action's allowlist (typo guard, DVC_BAD_ARGS-style). */
 function rejectUnknownFields$1(action, args, allowed) {
 	const unknown = Object.keys(args).filter((key) => !allowed.includes(key));
-	if (unknown.length > 0) throw new UrlSchemaError("BROWSER_BAD_ARGS", `browser device: unknown field(s) ${unknown.map((key) => JSON.stringify(key)).join(", ")} for action "${action}" — allowed: ${allowed.map((key) => JSON.stringify(key)).join(", ")}`);
+	if (unknown.length > 0) throw new UrlSchemesError("BROWSER_BAD_ARGS", `browser device: unknown field(s) ${unknown.map((key) => JSON.stringify(key)).join(", ")} for action "${action}" — allowed: ${allowed.map((key) => JSON.stringify(key)).join(", ")}`);
 }
 /** Require a non-empty string field; `field` names it in the error. */
 function requireString(args, field) {
 	const value = args[field];
-	if (typeof value !== "string" || value === "") throw new UrlSchemaError("BROWSER_BAD_ARGS", `browser device: this action requires a non-empty "${field}" string`);
+	if (typeof value !== "string" || value === "") throw new UrlSchemesError("BROWSER_BAD_ARGS", `browser device: this action requires a non-empty "${field}" string`);
 	return value;
 }
 /** Resolve the Chrome executable: open args → env `DASHR_BROWSER_BIN` → distro default. */
@@ -2878,7 +2641,7 @@ async function gotoUrl(target, url) {
 	try {
 		await target.goto(url, { waitUntil: "domcontentloaded" });
 	} catch (error) {
-		throw withCause(new UrlSchemaError("BROWSER_GOTO_FAILED", `browser device: goto(${url}) failed: ${messageOf$1(error)}`), error);
+		throw withCause(new UrlSchemesError("BROWSER_GOTO_FAILED", `browser device: goto(${url}) failed: ${messageOf$1(error)}`), error);
 	}
 }
 /**
@@ -2890,7 +2653,7 @@ async function gotoUrl(target, url) {
 */
 async function ensurePage(executablePath) {
 	if (page !== void 0) return page;
-	if (!existsSync(executablePath)) throw new UrlSchemaError("BROWSER_NO_CHROME", `browser device: Chrome executable not found at ${executablePath} — install Google Chrome (expected at ${DEFAULT_CHROME_PATH}), set DASHR_BROWSER_BIN, or pass "executablePath" in the open args`);
+	if (!existsSync(executablePath)) throw new UrlSchemesError("BROWSER_NO_CHROME", `browser device: Chrome executable not found at ${executablePath} — install Google Chrome (expected at ${DEFAULT_CHROME_PATH}), set DASHR_BROWSER_BIN, or pass "executablePath" in the open args`);
 	const puppeteer = await loadPuppeteer();
 	let launched;
 	try {
@@ -2901,13 +2664,13 @@ async function ensurePage(executablePath) {
 			protocolTimeout: PROTOCOL_TIMEOUT_MS
 		});
 	} catch (error) {
-		throw withCause(new UrlSchemaError("BROWSER_LAUNCH_FAILED", `browser device: Chrome launch failed (${executablePath}): ${messageOf$1(error)}`), error);
+		throw withCause(new UrlSchemesError("BROWSER_LAUNCH_FAILED", `browser device: Chrome launch failed (${executablePath}): ${messageOf$1(error)}`), error);
 	}
 	try {
 		page = await launched.newPage();
 	} catch (error) {
 		await closeQuietly(launched, () => launched.close());
-		throw withCause(new UrlSchemaError("BROWSER_LAUNCH_FAILED", `browser device: opening a page in the launched Chrome failed: ${messageOf$1(error)}`), error);
+		throw withCause(new UrlSchemesError("BROWSER_LAUNCH_FAILED", `browser device: opening a page in the launched Chrome failed: ${messageOf$1(error)}`), error);
 	}
 	browser = launched;
 	return page;
@@ -2945,11 +2708,11 @@ function jsonSafe(value) {
 }
 /** Validate run's `type` sub-action shape: `{selector: string, text: string}`. */
 function requireTypeSpec(action, value) {
-	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new UrlSchemaError("BROWSER_BAD_ARGS", `browser device: "${action}" field "type" must be {"selector": string, "text": string}`);
+	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new UrlSchemesError("BROWSER_BAD_ARGS", `browser device: "${action}" field "type" must be {"selector": string, "text": string}`);
 	const record = value;
 	const selector = record["selector"];
 	const text = record["text"];
-	if (typeof selector !== "string" || selector === "" || typeof text !== "string") throw new UrlSchemaError("BROWSER_BAD_ARGS", `browser device: "${action}" field "type" must be {"selector": string, "text": string}`);
+	if (typeof selector !== "string" || selector === "" || typeof text !== "string") throw new UrlSchemesError("BROWSER_BAD_ARGS", `browser device: "${action}" field "type" must be {"selector": string, "text": string}`);
 	return {
 		selector,
 		text
@@ -2957,7 +2720,7 @@ function requireTypeSpec(action, value) {
 }
 /** The live page for a run action — every run shape needs an open tab. */
 function requireLivePage() {
-	if (page === void 0) throw new UrlSchemaError("BROWSER_NO_PAGE", "browser device: no page open — write {\"action\":\"open\",\"url\":\"...\"} to dvc://browser first");
+	if (page === void 0) throw new UrlSchemesError("BROWSER_NO_PAGE", "browser device: no page open — write {\"action\":\"open\",\"url\":\"...\"} to dvc://browser first");
 	return page;
 }
 /** `{"action":"run"}` — evaluate `code`, or run the goto/type/click convenience steps. */
@@ -2971,8 +2734,8 @@ async function runAction(args) {
 	]);
 	const hasCode = "code" in args;
 	const hasConvenience = "click" in args || "type" in args || "goto" in args;
-	if (hasCode && hasConvenience) throw new UrlSchemaError("BROWSER_BAD_ARGS", "browser device: \"run\" takes either \"code\" or the convenience fields (\"goto\"/\"type\"/\"click\"), not both");
-	if (!hasCode && !hasConvenience) throw new UrlSchemaError("BROWSER_BAD_ARGS", "browser device: \"run\" requires \"code\" or at least one of \"goto\"/\"type\"/\"click\"");
+	if (hasCode && hasConvenience) throw new UrlSchemesError("BROWSER_BAD_ARGS", "browser device: \"run\" takes either \"code\" or the convenience fields (\"goto\"/\"type\"/\"click\"), not both");
+	if (!hasCode && !hasConvenience) throw new UrlSchemesError("BROWSER_BAD_ARGS", "browser device: \"run\" requires \"code\" or at least one of \"goto\"/\"type\"/\"click\"");
 	const goto = "goto" in args ? requireString(args, "goto") : void 0;
 	const typeSpec = "type" in args ? requireTypeSpec("run", args["type"]) : void 0;
 	const click = "click" in args ? requireString(args, "click") : void 0;
@@ -2986,7 +2749,7 @@ async function runAction(args) {
 				result: jsonSafe(await target.evaluate(expression))
 			};
 		} catch (error) {
-			throw withCause(new UrlSchemaError("BROWSER_EVAL_FAILED", `browser device: evaluate failed: ${messageOf$1(error)}`), error);
+			throw withCause(new UrlSchemesError("BROWSER_EVAL_FAILED", `browser device: evaluate failed: ${messageOf$1(error)}`), error);
 		}
 	}
 	try {
@@ -2994,8 +2757,8 @@ async function runAction(args) {
 		if (typeSpec !== void 0) await target.type(typeSpec.selector, typeSpec.text);
 		if (click !== void 0) await target.click(click);
 	} catch (error) {
-		if (error instanceof UrlSchemaError) throw error;
-		throw withCause(new UrlSchemaError("BROWSER_STEP_FAILED", `browser device: run step failed: ${messageOf$1(error)}`), error);
+		if (error instanceof UrlSchemesError) throw error;
+		throw withCause(new UrlSchemesError("BROWSER_STEP_FAILED", `browser device: run step failed: ${messageOf$1(error)}`), error);
 	}
 	return {
 		ok: true,
@@ -3006,7 +2769,7 @@ async function runAction(args) {
 /** `{"action":"close"}` — teardown; state clears before any await so a hung close never wedges it. */
 async function closeAction(args) {
 	rejectUnknownFields$1("close", args, ["action"]);
-	if (page === void 0 && browser === void 0) throw new UrlSchemaError("BROWSER_NOT_OPEN", "browser device: nothing to close — no browser is open (open one with {\"action\":\"open\",\"url\":\"...\"})");
+	if (page === void 0 && browser === void 0) throw new UrlSchemesError("BROWSER_NOT_OPEN", "browser device: nothing to close — no browser is open (open one with {\"action\":\"open\",\"url\":\"...\"})");
 	const openPage = page;
 	const openBrowser = browser;
 	page = void 0;
@@ -3023,7 +2786,7 @@ const browserDevice = {
 			case "open": return openAction(record);
 			case "run": return runAction(record);
 			case "close": return closeAction(record);
-			default: throw new UrlSchemaError("BROWSER_BAD_ARGS", `browser device: unknown action ${JSON.stringify(record["action"] ?? null)} — expected "open", "run", or "close"`);
+			default: throw new UrlSchemesError("BROWSER_BAD_ARGS", `browser device: unknown action ${JSON.stringify(record["action"] ?? null)} — expected "open", "run", or "close"`);
 		}
 	},
 	summary: "headless Chrome via puppeteer-core — open {url} / run {code|goto,type,click} / close; one tab per process (single-tab subset of omp's multi-tab browser)"
@@ -3039,7 +2802,7 @@ function registerBrowserDevice(registry = registerDvcDevice) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/devices/lsp/lsp-jsonrpc.ts
+//#region src/url-schemes/vendored/devices/lsp/lsp-jsonrpc.ts
 /**
 * Content-Length JSON-RPC framing for the vendored `dvc://lsp` device.
 *
@@ -3167,7 +2930,7 @@ var MessageFramer = class {
 };
 
 //#endregion
-//#region src/url-schema/vendored/devices/lsp/lsp-language.ts
+//#region src/url-schemes/vendored/devices/lsp/lsp-language.ts
 /** Extension (without dot) → LSP language id (defaults.json coverage). */
 const EXTENSION_LANGUAGE_ID = {
 	rs: "rust",
@@ -3270,7 +3033,7 @@ function detectLanguageId(filePath) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/devices/lsp/lsp-client.ts
+//#region src/url-schemes/vendored/devices/lsp/lsp-client.ts
 /** Default per-request timeout when no explicit budget is given (upstream 30s). */
 const DEFAULT_REQUEST_TIMEOUT_MS = 3e4;
 /** Max time to wait for the `initialize` response (upstream WARMUP/init budget). */
@@ -3801,7 +3564,7 @@ if (typeof process !== "undefined") process.on("beforeExit", () => {
 });
 
 //#endregion
-//#region src/url-schema/vendored/devices/lsp/defaults.json
+//#region src/url-schemes/vendored/devices/lsp/defaults.json
 var defaults_default = {
 	"rust-analyzer": {
 		"command": "rust-analyzer",
@@ -4552,7 +4315,7 @@ var defaults_default = {
 };
 
 //#endregion
-//#region src/url-schema/vendored/devices/lsp/lsp-server-registry.ts
+//#region src/url-schemes/vendored/devices/lsp/lsp-server-registry.ts
 /** The verbatim upstream registry (54 servers), keyed by server name. */
 const REGISTRY = defaults_default;
 /** Server names in registry (insertion) order — deterministic selection. */
@@ -4674,7 +4437,7 @@ function installHintFor(command) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/devices/lsp/lsp-device.ts
+//#region src/url-schemes/vendored/devices/lsp/lsp-device.ts
 const ACTIONS = new Set([
 	"diagnostics",
 	"definition",
@@ -4694,16 +4457,16 @@ function messageOf(error) {
 }
 /** Assert the args payload is a plain JSON object and return it as a record. */
 function requireObjectArgs(args) {
-	if (args === null || typeof args !== "object" || Array.isArray(args)) throw new UrlSchemaError("LSP_BAD_ARGS", `lsp device: args must be a JSON object with an "action" ("diagnostics" | "definition" | "references" | "hover"), got ${args === null ? "null" : Array.isArray(args) ? "array" : typeof args}`);
+	if (args === null || typeof args !== "object" || Array.isArray(args)) throw new UrlSchemesError("LSP_BAD_ARGS", `lsp device: args must be a JSON object with an "action" ("diagnostics" | "definition" | "references" | "hover"), got ${args === null ? "null" : Array.isArray(args) ? "array" : typeof args}`);
 	return args;
 }
 /** Resolve the request's server config: named `server` → `command` override → file-type lookup. */
 function resolveServerConfig(args, filePath) {
 	const server = args.server;
 	if (server !== void 0) {
-		if (typeof server !== "string" || server === "") throw new UrlSchemaError("LSP_BAD_ARGS", "lsp device: \"server\" must be a non-empty server name");
+		if (typeof server !== "string" || server === "") throw new UrlSchemesError("LSP_BAD_ARGS", "lsp device: \"server\" must be a non-empty server name");
 		const config = serverByName(server);
-		if (config === void 0) throw new UrlSchemaError("LSP_NO_SERVER", `lsp device: no defaults.json entry named "${server}"`);
+		if (config === void 0) throw new UrlSchemesError("LSP_NO_SERVER", `lsp device: no defaults.json entry named "${server}"`);
 		return {
 			name: server,
 			config
@@ -4711,9 +4474,9 @@ function resolveServerConfig(args, filePath) {
 	}
 	const command = args.command;
 	if (command !== void 0) {
-		if (typeof command !== "string" || command === "") throw new UrlSchemaError("LSP_BAD_ARGS", "lsp device: \"command\" override must be a non-empty string");
+		if (typeof command !== "string" || command === "") throw new UrlSchemesError("LSP_BAD_ARGS", "lsp device: \"command\" override must be a non-empty string");
 		const commandArgs = args.args;
-		if (commandArgs !== void 0 && (!Array.isArray(commandArgs) || commandArgs.some((a) => typeof a !== "string"))) throw new UrlSchemaError("LSP_BAD_ARGS", "lsp device: \"args\" override must be an array of strings");
+		if (commandArgs !== void 0 && (!Array.isArray(commandArgs) || commandArgs.some((a) => typeof a !== "string"))) throw new UrlSchemesError("LSP_BAD_ARGS", "lsp device: \"args\" override must be an array of strings");
 		return {
 			name: command,
 			config: {
@@ -4725,7 +4488,7 @@ function resolveServerConfig(args, filePath) {
 		};
 	}
 	const primary = primaryServerForFile(filePath);
-	if (primary === null) throw new UrlSchemaError("LSP_NO_SERVER", `lsp device: no defaults.json language server covers "${path.basename(filePath)}" — pass "server" or "command"/"args" to pick one explicitly`);
+	if (primary === null) throw new UrlSchemesError("LSP_NO_SERVER", `lsp device: no defaults.json language server covers "${path.basename(filePath)}" — pass "server" or "command"/"args" to pick one explicitly`);
 	return {
 		name: primary[0],
 		config: primary[1]
@@ -4736,7 +4499,7 @@ function requirePosition(args) {
 	const read = (field) => {
 		const value = args[field];
 		if (value === void 0) return 1;
-		if (typeof value !== "number" || !Number.isInteger(value) || value < 1) throw new UrlSchemaError("LSP_BAD_ARGS", `lsp device: "${field}" must be a 1-based positive integer (got ${JSON.stringify(value ?? null)})`);
+		if (typeof value !== "number" || !Number.isInteger(value) || value < 1) throw new UrlSchemesError("LSP_BAD_ARGS", `lsp device: "${field}" must be a 1-based positive integer (got ${JSON.stringify(value ?? null)})`);
 		return value;
 	};
 	return {
@@ -4753,13 +4516,13 @@ function requirePosition(args) {
 async function obtainClient(args, filePath) {
 	const { name: name$2, config } = resolveServerConfig(args, filePath);
 	const resolvedCommand = resolveCommandPath(config.command, path.dirname(filePath));
-	if (resolvedCommand === null) throw new UrlSchemaError("LSP_SERVER_MISSING", `lsp device: language server binary "${config.command}" not found (server "${name$2}") — ${installHintFor(config.command)}`);
+	if (resolvedCommand === null) throw new UrlSchemesError("LSP_SERVER_MISSING", `lsp device: language server binary "${config.command}" not found (server "${name$2}") — ${installHintFor(config.command)}`);
 	const root = findWorkspaceRoot(filePath, config.rootMarkers) ?? path.dirname(path.resolve(filePath));
 	let client;
 	try {
 		client = await getOrCreateClient(config, root, resolvedCommand);
 	} catch (error) {
-		throw new UrlSchemaError("LSP_INIT_FAILED", `lsp device: language server "${name$2}" (${config.command}) failed to initialize: ${messageOf(error)}`);
+		throw new UrlSchemesError("LSP_INIT_FAILED", `lsp device: language server "${name$2}" (${config.command}) failed to initialize: ${messageOf(error)}`);
 	}
 	return {
 		name: name$2,
@@ -4871,7 +4634,7 @@ async function lspPositionRequest(client, method, params, retryWhileEmpty) {
 			result = await sendRequest(client, method, params);
 		} catch (error) {
 			const message = messageOf(error);
-			if (!(retryWhileEmpty && /-3280[01]/.test(message) && Date.now() - client.readyAt <= COLD_START_RETRY_WINDOW_MS)) throw new UrlSchemaError("LSP_REQUEST_FAILED", `lsp device: ${method} failed on ${client.config.command}: ${message}`);
+			if (!(retryWhileEmpty && /-3280[01]/.test(message) && Date.now() - client.readyAt <= COLD_START_RETRY_WINDOW_MS)) throw new UrlSchemesError("LSP_REQUEST_FAILED", `lsp device: ${method} failed on ${client.config.command}: ${message}`);
 			await new Promise((resolve$1) => setTimeout(resolve$1, COLD_START_RETRY_DELAY_MS));
 			continue;
 		}
@@ -4897,16 +4660,16 @@ const lspDevice = {
 	async execute(args) {
 		const record = requireObjectArgs(args);
 		const action = record.action;
-		if (typeof action !== "string" || !ACTIONS.has(action)) throw new UrlSchemaError("LSP_BAD_ARGS", `lsp device: unknown action ${JSON.stringify(action ?? null)} — expected "diagnostics", "definition", "references", "hover", or "format"`);
+		if (typeof action !== "string" || !ACTIONS.has(action)) throw new UrlSchemesError("LSP_BAD_ARGS", `lsp device: unknown action ${JSON.stringify(action ?? null)} — expected "diagnostics", "definition", "references", "hover", or "format"`);
 		const file = record.file;
-		if (typeof file !== "string" || file === "") throw new UrlSchemaError("LSP_BAD_ARGS", "lsp device: this action requires a non-empty \"file\" string");
+		if (typeof file !== "string" || file === "") throw new UrlSchemesError("LSP_BAD_ARGS", "lsp device: this action requires a non-empty \"file\" string");
 		const content = record.content;
-		if (content !== void 0 && typeof content !== "string") throw new UrlSchemaError("LSP_BAD_ARGS", "lsp device: \"content\" override must be a string");
+		if (content !== void 0 && typeof content !== "string") throw new UrlSchemesError("LSP_BAD_ARGS", "lsp device: \"content\" override must be a string");
 		const saved = record.saved;
-		if (saved !== void 0 && typeof saved !== "boolean") throw new UrlSchemaError("LSP_BAD_ARGS", "lsp device: \"saved\" flag must be a boolean");
-		if (saved === true && content === void 0) throw new UrlSchemaError("LSP_BAD_ARGS", "lsp device: \"saved\" requires a \"content\" override (the save signal rides a content sync)");
+		if (saved !== void 0 && typeof saved !== "boolean") throw new UrlSchemesError("LSP_BAD_ARGS", "lsp device: \"saved\" flag must be a boolean");
+		if (saved === true && content === void 0) throw new UrlSchemesError("LSP_BAD_ARGS", "lsp device: \"saved\" requires a \"content\" override (the save signal rides a content sync)");
 		const filePath = path.resolve(file);
-		if (content === void 0 && !existsSync(filePath)) throw new UrlSchemaError("LSP_BAD_ARGS", `lsp device: file not found: ${filePath}`);
+		if (content === void 0 && !existsSync(filePath)) throw new UrlSchemesError("LSP_BAD_ARGS", `lsp device: file not found: ${filePath}`);
 		const position = requirePosition(record);
 		const { name: name$2, client } = await obtainClient(record, filePath);
 		const base = {
@@ -4988,7 +4751,7 @@ const lspDevice = {
 				};
 			}
 			case "format": {
-				if (content === void 0) throw new UrlSchemaError("LSP_BAD_ARGS", "lsp device: \"format\" requires a \"content\" string to format");
+				if (content === void 0) throw new UrlSchemesError("LSP_BAD_ARGS", "lsp device: \"format\" requires a \"content\" string to format");
 				const formatting = client.serverCapabilities?.documentFormattingProvider ?? client.serverCapabilities?.formattingProvider;
 				if (formatting === void 0 || formatting === false || formatting === null) return {
 					...base,
@@ -5014,7 +4777,7 @@ const lspDevice = {
 					changed: true
 				};
 			}
-			default: throw new UrlSchemaError("LSP_BAD_ARGS", `lsp device: unhandled action "${String(action)}"`);
+			default: throw new UrlSchemesError("LSP_BAD_ARGS", `lsp device: unhandled action "${String(action)}"`);
 		}
 	},
 	summary: "LSP queries over stdio language servers (defaults.json registry) — diagnostics / definition / references / hover on {file,line,character}"
@@ -5028,22 +4791,7 @@ function installLspDevices(registry = registerDvcDevice) {
 }
 
 //#endregion
-//#region src/url-schema/docs-dir.ts
-function resolveDocsDir() {
-	let dir = dirname(fileURLToPath(import.meta.url));
-	for (;;) {
-		const candidate = join(dir, "docs");
-		try {
-			if (statSync(candidate).isDirectory()) return candidate;
-		} catch {}
-		const parent = dirname(dir);
-		if (parent === dir) return void 0;
-		dir = parent;
-	}
-}
-
-//#endregion
-//#region src/url-schema/handlers/agent.ts
+//#region src/url-schemes/handlers/agent.ts
 /**
 * Build the `agent://` scheme handler. Handlers return the FULL text of the
 * resource; the resolver applies any `:raw`/`:N-M`/`/path`/`?q=` selector.
@@ -5067,13 +4815,13 @@ function createAgentHandler(deps) {
 			const grandChildren = children.filter((entry) => String(entry.parentId) === parent.rawId);
 			return await outputFor(requireAddress(await resolveAddress(rest, parent.rawId, grandChildren, family), rest, `unknown child agent "${rest}" of "${parent.rawId}"`), family);
 		}
-		throw new UrlSchemaError("AGENT_BAD_PATH", `agent:// path "${path$1}" has too many segments — expected <id>, <id>/transcript, or <id>/<child>`);
+		throw new UrlSchemesError("AGENT_BAD_PATH", `agent:// path "${path$1}" has too many segments — expected <id>, <id>/transcript, or <id>/<child>`);
 	} };
 }
 /** The calling agent's raw session id, or a structured error without one. */
 function requireCaller(env) {
 	const { agent } = env;
-	if (agent === void 0) throw new UrlSchemaError("AGENT_NO_AGENT", "agent:// requires the calling agent in the resolver env (this context has none)");
+	if (agent === void 0) throw new UrlSchemesError("AGENT_NO_AGENT", "agent:// requires the calling agent in the resolver env (this context has none)");
 	return String(agent.id);
 }
 /**
@@ -5101,7 +4849,7 @@ async function resolveAddress(segment, selfRaw, candidates, family) {
 }
 /** Turn a failed address resolution into its structured error. */
 function requireAddress(target, segment, message = `unknown agent "${segment}" — addressing is scoped to your family tree (self and descendants)`) {
-	if (target === void 0) throw new UrlSchemaError("AGENT_UNKNOWN_ID", message);
+	if (target === void 0) throw new UrlSchemesError("AGENT_UNKNOWN_ID", message);
 	return target;
 }
 /** The newest entry by creation time (live header, else persisted metadata). */
@@ -5157,7 +4905,7 @@ function requireLiveSession(target, family) {
 }
 /** A structured AGENT_UNKNOWN_ID with the label-ambiguity hint appended. */
 function unknownId(target, message) {
-	return new UrlSchemaError("AGENT_UNKNOWN_ID", `${message}${target.ambiguous === void 0 ? "" : `; label "${target.ambiguous.label}" is ambiguous (${target.ambiguous.matches} children share it) — address the raw session id to disambiguate`}`);
+	return new UrlSchemesError("AGENT_UNKNOWN_ID", `${message}${target.ambiguous === void 0 ? "" : `; label "${target.ambiguous.label}" is ambiguous (${target.ambiguous.matches} children share it) — address the raw session id to disambiguate`}`);
 }
 /**
 * Roster table: one row per continuable descendant, in enumeration (stable
@@ -5248,277 +4996,385 @@ function renderBlock(block) {
 }
 
 //#endregion
-//#region src/url-schema/handlers/ctx.ts
-/** The snapshot keys, in listing order. */
-const KEYS = [
-	"session",
-	"model",
-	"cwd"
-];
-/** Build the `ctx://` scheme handler over the resolver env. */
-function createCtxHandler() {
-	return { async resolve(env, path$1) {
-		const key = path$1.replace(/^\/+/, "").trim();
-		if (key === "") return KEYS.join("\n");
-		const { agent } = env;
-		if (agent === void 0) throw new UrlSchemaError("CTX_NO_AGENT", "ctx:// requires a live agent in the resolver env (this context has none)");
-		switch (key) {
-			case "session": return JSON.stringify({
-				id: agent.id,
-				status: agent.status,
-				origin: agent.session.header.origin,
-				delegationDepth: agent.session.header.delegationDepth
-			}, null, 2);
-			case "model": return JSON.stringify({
-				provider: agent.options.provider,
-				model: agent.options.model,
-				maxTokens: agent.options.maxTokens
-			}, null, 2);
-			case "cwd": return agent.session.header.cwd ?? "";
-			default: throw new UrlSchemaError("CTX_UNKNOWN_KEY", `ctx://${key}: unknown snapshot key (known: ${KEYS.join(", ")})`);
-		}
-	} };
+//#region src/url-schemes/handlers/ctx.ts
+function blocksOf(event) {
+	const message = event.data?.message;
+	const content = event.data?.content;
+	return message?.content ?? content ?? [];
 }
-
-//#endregion
-//#region src/url-schema/handlers/dsh.ts
-/** File extensions considered readable harness documentation. */
-const DOC_EXTENSIONS = {
-	".md": true,
-	".markdown": true,
-	".txt": true
-};
-/**
-* Key-name patterns for the defensive secret denylist, matched against a
-* normalized key (lowercased, separators removed). Complements schema-declared
-* `role('secret')` redaction for fields a schema did not mark secret.
-*/
-const SECRET_KEY_PATTERNS = [
-	/secret/,
-	/password/,
-	/passwd/,
-	/credential/,
-	/token/,
-	/apikey/,
-	/authorization/,
-	/privatekey/,
-	/accesskey/
-];
-/** True when a settings field name names credentials/env/API-key material. */
-function isSecretKey(key) {
-	const normalized = key.toLowerCase().replace(/[^a-z0-9]/g, "");
-	if (normalized === "env" || normalized === "environment") return true;
-	return SECRET_KEY_PATTERNS.some((re) => re.test(normalized));
-}
-/** Deep-copy a settings value, dropping every key the denylist names. */
-function stripSecrets(value) {
-	if (Array.isArray(value)) return value.map(stripSecrets);
-	if (value !== null && typeof value === "object") {
-		const out = {};
-		for (const [key, item] of Object.entries(value)) {
-			if (isSecretKey(key)) continue;
-			out[key] = stripSecrets(item);
-		}
-		return out;
-	}
-	return value;
+function textOf(blocks) {
+	return blocks.filter((b) => b.type === "text").map((b) => b.text ?? "").join("");
 }
-/** True when `name` has a doc extension (case-insensitive). */
-function isDocFile(name$2) {
-	const dot = name$2.lastIndexOf(".");
-	if (dot === -1) return false;
-	return DOC_EXTENSIONS[name$2.slice(dot).toLowerCase()] === true;
+function sourceKind(event) {
+	return event.data?.source?.kind ?? "";
 }
-/** Recursive, sorted list of readable doc paths relative to `dir`. */
-async function listDocs(dir) {
+function sourcePlugin(event) {
+	return event.data?.source?.plugin ?? "";
+}
+function resultTextOf(event) {
+	return blocksOf(event).flatMap((b) => b.content ?? []).map((c) => c.text ?? "").join("\n");
+}
+/** All reasoning blocks in event order (one message may carry several). */
+function thinkingItems(events) {
 	const out = [];
-	const entries = await promises.readdir(dir, { withFileTypes: true });
-	entries.sort((a, b) => a.name.localeCompare(b.name));
-	for (const entry of entries) {
-		if (entry.name.startsWith(".")) continue;
-		const abs = join(dir, entry.name);
-		if (entry.isDirectory()) for (const child of await listDocs(abs)) out.push(join(entry.name, child));
-		else if (isDocFile(entry.name)) out.push(entry.name);
+	for (const e of events) {
+		if (e.type !== "assistant/message") continue;
+		const turnStep = e.data;
+		for (const b of blocksOf(e)) {
+			if (b.type !== "reasoning") continue;
+			out.push({
+				seq: e.seq,
+				turn: turnStep?.turn,
+				step: turnStep?.step,
+				text: b.text ?? ""
+			});
+		}
 	}
 	return out;
 }
-/** Read one `<doc>` path inside `dir`, guarding against path traversal. */
-async function readDoc(dir, docPath) {
-	const abs = resolve(dir, docPath);
-	const rel = relative(dir, abs);
-	if (rel === "" || rel === ".." || rel.startsWith(".." + sep) || isAbsolute(rel)) throw new UrlSchemaError("URL_DOC_NOT_FOUND", `dsh://docs/${docPath}: path escapes the docs directory`);
-	let stat$1;
-	try {
-		stat$1 = await promises.stat(abs);
-	} catch {
-		throw new UrlSchemaError("URL_DOC_NOT_FOUND", `dsh://docs/${docPath}: document not found`);
-	}
-	if (stat$1.isDirectory()) return JSON.stringify(await listDocs(abs), null, 2);
-	if (stat$1.isFile()) return await promises.readFile(abs, "utf8");
-	throw new UrlSchemaError("URL_DOC_NOT_FOUND", `dsh://docs/${docPath}: not a regular file`);
-}
-/** Create the `dsh://` scheme handler, capturing `deps` by closure. */
-function createDshHandler(deps) {
-	const { settings, docsDir } = deps;
-	let docsDirPromise;
-	function findDocsDir() {
-		if (docsDirPromise === void 0) docsDirPromise = (async () => {
-			const candidates = [];
-			if (docsDir !== void 0) candidates.push(docsDir);
-			const pkgRoot = dirname(dirname(dirname(dirname(fileURLToPath(import.meta.url)))));
-			candidates.push(join(pkgRoot, "docs"), join(pkgRoot, "..", "docs"));
-			for (const dir of candidates) try {
-				if ((await promises.stat(dir)).isDirectory()) return dir;
-			} catch {}
-		})();
-		return docsDirPromise;
-	}
-	return { async resolve(_env, path$1) {
-		const [root, ...rest] = path$1.split("/");
-		const restPath = rest.join("/");
-		if (root === "docs") {
-			const dir = await findDocsDir();
-			if (dir === void 0) throw new UrlSchemaError("URL_DOCS_UNAVAILABLE", "dsh://docs: no docs directory found (provide `docsDir` to createDshHandler)");
-			if (restPath === "") return JSON.stringify(await listDocs(dir), null, 2);
-			return await readDoc(dir, restPath);
-		}
-		if (root === "config") {
-			if (settings === void 0) throw new UrlSchemaError("URL_SETTINGS_UNAVAILABLE", "dsh://config: no ctx.settings service is mounted");
-			const descriptors = settings.describe({ redactSecrets: true });
-			if (restPath === "") {
-				const out = {};
-				for (const descriptor of descriptors) out[String(descriptor.ns)] = stripSecrets(descriptor.value);
-				return JSON.stringify(out, null, 2);
-			}
-			const found = descriptors.find((descriptor) => String(descriptor.ns) === restPath);
-			if (found === void 0) throw new UrlSchemaError("URL_UNKNOWN_SETTINGS_NAMESPACE", `dsh://config/${restPath}: unknown settings namespace`);
-			return JSON.stringify(stripSecrets(found.value), null, 2);
-		}
-		throw new UrlSchemaError("URL_UNKNOWN_RESOURCE", `dsh://: unknown resource "${root || "(empty)"}" — expected "docs" or "config"`);
-	} };
+/** A system message: `data.text` when present, else the message content blocks. */
+function systemTextOf(event) {
+	const d = event.data;
+	if (typeof d?.text === "string") return d.text;
+	return textOf(d?.message?.content ?? d?.content ?? []);
 }
-
-//#endregion
-//#region src/url-schema/handlers/http.ts
-/** The schemes one handler instance serves; register it under each of these. */
-const HTTP_SCHEMES = ["http", "https"];
-/** Hard cap on a fetched body: 2 MiB. */
-const MAX_BODY_BYTES = 2 * 1024 * 1024;
-/** Abort the GET after this many milliseconds. */
-const TIMEOUT_MS = 2e4;
-/** First line of every resolved http(s) URL: flags plain-fetch semantics. */
-const DISCLAIMER = "[url-fetch] plain-text result of a direct HTTP GET (curl-equivalent). No JS execution or interaction — use browser tools, if any, for that.";
-/** `application/` MIME types treated as text (any `text/*` also is). */
-const APPLICATION_TEXT_TYPES = {
-	"application/json": true,
-	"application/xml": true,
-	"application/yaml": true,
-	"application/toml": true,
-	"application/xhtml+xml": true,
-	"application/javascript": true,
-	"application/plain": true
-};
-/** Strict whitelist: `text/*` or a known textual `application/*` MIME. A
-* missing header fails the check — binary decoding is never guessed. */
-function isTextContentType(headerValue) {
-	if (headerValue === null) return false;
-	const mime = headerValue.split(";", 1)[0].trim().toLowerCase();
-	return mime.startsWith("text/") || mime in APPLICATION_TEXT_TYPES;
-}
-/** Best-effort `err.cause` message — undici nests DNS/socket failures there. */
-function causeMessageOf(err) {
-	const cause = err?.cause;
-	if (cause instanceof Error) return cause.message;
-	if (typeof cause === "string" && cause !== "") return cause;
-	return null;
-}
-/** Stream the body as UTF-8 text, throwing past the 2 MiB byte cap. */
-async function readBodyCapped(body, href) {
-	const reader = body.getReader();
-	const decoder = new TextDecoder();
-	let received = 0;
-	let text = "";
-	try {
-		for (;;) {
-			const { done, value } = await reader.read().catch((err) => {
-				if (err instanceof Error && err.name === "AbortError") throw new UrlSchemaError("URL_HTTP_TIMEOUT", `HTTP GET ${href} aborted after the ${TIMEOUT_MS / 1e3} s deadline`);
-				throw err;
-			});
-			if (done) break;
-			received += value.byteLength;
-			if (received > MAX_BODY_BYTES) throw new UrlSchemaError("URL_HTTP_TOO_LARGE", `body of ${href} exceeded the ${MAX_BODY_BYTES}-byte (2 MiB) text limit after ${received} bytes`);
-			text += decoder.decode(value, { stream: true });
-		}
-		return text + decoder.decode();
-	} finally {
-		await reader.cancel().catch(() => {});
+/** All `system/message` events in log order. */
+function systemItems(events) {
+	return events.filter((e) => e.type === "system/message").map((e) => {
+		const source = [sourceKind(e), sourcePlugin(e)].filter((p) => p !== "").join("/");
+		return {
+			seq: e.seq,
+			source: source === "" ? "-" : source,
+			text: systemTextOf(e)
+		};
+	});
+}
+/** All injected `user/message` events in log order (the complement of `user_prompts`). */
+function injectionItems(events) {
+	return events.filter((e) => e.type === "user/message" && sourceKind(e) !== "user").map((e) => {
+		const kind = sourceKind(e) || "unknown";
+		return {
+			seq: e.seq,
+			source: kind,
+			text: `[${String(e.seq).padStart(7, "0")}] INJECTED ${kind}\n${textOf(blocksOf(e))}`
+		};
+	});
+}
+/** ~100-char single-line preview with an ellipsis when truncated. */
+function previewOf(text, n = 100) {
+	const flat = text.replace(/\s+/g, " ").trim();
+	return flat.length > n ? flat.slice(0, n) + "…" : flat;
+}
+function renderEntry(event, toolNameOf) {
+	const seq = String(event.seq ?? 0).padStart(7, "0");
+	if (event.type === "user/message") {
+		if (sourcePlugin(event) === "compact") return `[${seq}] CHECKPOINT\n${textOf(blocksOf(event))}`;
+		if (sourceKind(event) === "user") return `[${seq}] USER\n${textOf(blocksOf(event))}`;
+		return `[${seq}] USER-INJECTED (${sourcePlugin(event) || sourceKind(event)})\n${textOf(blocksOf(event))}`;
+	}
+	if (event.type === "assistant/message") {
+		const blocks = blocksOf(event);
+		const text = textOf(blocks);
+		const calls = blocks.filter((b) => b.type === "tool-call");
+		const parts = [];
+		if (text !== "") parts.push(`[${seq}] ASSISTANT\n${text}`);
+		for (const call of calls) parts.push(`[${seq}] TOOL-CALL ${call.name ?? "?"}\n${call.arguments ?? ""}`);
+		return parts.length > 0 ? parts.join("\n\n") : `[${seq}] ASSISTANT (no content)`;
+	}
+	if (event.type === "tool/result") {
+		const callSeq = event.sourceEventSeqs?.[0];
+		return `[${seq}] TOOL ${toolNameOf(callSeq) ?? "unknown-tool"}\n${resultTextOf(event)}`;
 	}
+	return "";
 }
-/** One capped, whitelisted GET of `url`; returns the decoded body text. */
-async function getUrl(url) {
-	const controller = new AbortController();
-	let timedOut = false;
-	const timer = setTimeout(() => {
-		timedOut = true;
-		controller.abort();
-	}, TIMEOUT_MS);
-	try {
-		let response;
+function sectionPreviews(text, n = 100) {
+	const out = {};
+	for (const part of text.split(/^## /m).slice(1)) {
+		const head = part.slice(0, part.indexOf("\n")).trim();
+		out[head] = part.slice(part.indexOf("\n") + 1).replace(/\s+/g, " ").trim().slice(0, n);
+	}
+	return out;
+}
+function applyLines(canonical, ranges) {
+	const lines = canonical.split("\n");
+	return ranges.map(([a, b]) => lines.slice(Math.max(0, a - 1), b).join("\n")).join("\n");
+}
+function applyFace(prepared, canonical, selector, face = "prepared") {
+	if (selector === void 0 || selector === null) return face === "canonical" ? canonical : prepared;
+	if (selector.kind === "raw") return canonical;
+	if (selector.kind === "lines") return applyLines(canonical, selector.ranges);
+	throw new UrlSchemesError("CTX_BAD_SELECTOR", `ctx://: unsupported selector kind "${selector.kind}"`);
+}
+function createCtxHandler(deps) {
+	const persistence = deps.sessionPersistence;
+	async function loadEvents(agent) {
+		if (persistence === void 0) throw new UrlSchemesError("CTX_NO_PERSISTENCE", "ctx:// recall requires the host session-persistence service (not mounted in this composition)");
+		const handle = await persistence.open(agent.id, "read");
 		try {
-			response = await fetch(url, {
-				method: "GET",
-				redirect: "follow",
-				signal: controller.signal
-			});
-		} catch (err) {
-			if (timedOut || err instanceof Error && err.name === "AbortError") throw new UrlSchemaError("URL_HTTP_TIMEOUT", `HTTP GET ${url.href} aborted after the ${TIMEOUT_MS / 1e3} s deadline`);
-			const cause = causeMessageOf(err);
-			const message = err instanceof Error ? err.message : String(err);
-			throw new UrlSchemaError("URL_HTTP_FETCH_FAILED", `HTTP GET ${url.href} failed: ${message}${cause === null ? "" : ` (${cause})`}`);
-		}
-		if (!response.ok) {
-			const statusText = response.statusText === "" ? "" : ` ${response.statusText}`;
-			throw new UrlSchemaError("URL_HTTP_STATUS", `HTTP GET ${url.href} returned ${response.status}${statusText}`);
-		}
-		const declared = response.headers.get("content-length");
-		if (declared !== null) {
-			const bytes = Number(declared);
-			if (Number.isFinite(bytes) && bytes > MAX_BODY_BYTES) throw new UrlSchemaError("URL_HTTP_TOO_LARGE", `body of ${url.href} is ${bytes} bytes, over the ${MAX_BODY_BYTES}-byte (2 MiB) text limit`);
-		}
-		const contentType = response.headers.get("content-type");
-		if (!isTextContentType(contentType)) throw new UrlSchemaError("URL_HTTP_UNSUPPORTED_MEDIA", `content-type of ${url.href} is "${contentType ?? "(none)"}", outside the text whitelist (text/* or application/{json,xml,yaml,toml,xhtml+xml,javascript,plain}) — binary decoding is deliberately not guessed`);
-		if (response.body === null) {
-			const text = await response.text();
-			const bytes = Buffer.byteLength(text, "utf8");
-			if (bytes > MAX_BODY_BYTES) throw new UrlSchemaError("URL_HTTP_TOO_LARGE", `body of ${url.href} is ${bytes} bytes, over the ${MAX_BODY_BYTES}-byte (2 MiB) text limit`);
-			return text;
+			return (await handle.read()).events ?? [];
+		} finally {
+			await handle.close().catch(() => {});
 		}
-		return await readBodyCapped(response.body, url.href);
-	} finally {
-		clearTimeout(timer);
 	}
+	return {
+		selectorAware: true,
+		async resolve(env, path$1, selector) {
+			const sel = selector ?? null;
+			const raw = path$1.replace(/^\/+/, "").trim();
+			if (raw === "") return [
+				"ctx://session                          statistics snapshot of this session (:raw = full transcript)",
+				"ctx://session/transcript               full session transcript (line windows via :N-M)",
+				"ctx://session/compactions              compaction manifest (labels, nested chain, previews)",
+				"ctx://session/compactions[<label|n>]   one episode's summary (:raw[:N-M] = its original span)",
+				"ctx://session/user_prompts[<n|seq>]    the n-th real user prompt (0-based)",
+				"ctx://session/tool_calls[<n|seq>]      the n-th tool call (name + arguments + result)",
+				"ctx://session/agent_responses[<n|seq>] the n-th assistant response",
+				"ctx://session/thinking[<n|seq>]        the n-th reasoning block (:raw = all blocks joined)",
+				"ctx://session/system[<n|seq>]          the n-th system message (:raw = all messages)",
+				"ctx://session/injections[<n|seq>]      the n-th injected user message (:raw = all joined)"
+			].join("\n");
+			const { agent } = env;
+			if (agent === void 0) throw new UrlSchemesError("CTX_NO_AGENT", "ctx:// requires a live agent in the resolver env (this context has none)");
+			if (raw.split("/")[0] !== "session") throw new UrlSchemesError("CTX_UNKNOWN_KEY", `ctx://${raw}: unknown key (known: session — model/cwd folded into the session info card; bare ctx:// lists the full roster)`);
+			const events = await loadEvents(agent);
+			const toolCallEvents = events.filter((e) => e.type === "tool/call");
+			const toolNameByCallSeq = new Map(toolCallEvents.map((e) => [e.seq, e.data.name ?? "?"]));
+			const toolNameOf = (seq) => seq === void 0 ? void 0 : toolNameByCallSeq.get(seq);
+			const userPromptEvents = events.filter((e) => e.type === "user/message" && sourceKind(e) === "user");
+			const agentResponseEvents = events.filter((e) => e.type === "assistant/message");
+			const transcript = () => events.map((e) => renderEntry(e, toolNameOf)).filter((t) => t !== "").join("\n\n");
+			const episodes = [];
+			{
+				let prevCheckpoint = null;
+				const nameOf = toolNameOf;
+				for (const e of events) {
+					if (e.type !== "compaction/summary") continue;
+					const d = e.data;
+					const originalText = d.shadowedSeqs.map((seq) => events.find((ev) => ev.seq === seq)).filter((ev) => ev !== void 0).map((ev) => renderEntry(ev, nameOf)).filter((t) => t !== "").join("\n\n");
+					episodes.push({
+						label: e.seq,
+						checkpointSeq: e.seq + 1,
+						compactionId: d.compactionId,
+						at: e.time,
+						shadowedRange: d.shadowedRange,
+						shadowedSeqs: d.shadowedSeqs,
+						shadowedTokenCount: d.shadowedTokenCount,
+						replacesCheckpoint: prevCheckpoint !== null && d.shadowedSeqs.includes(prevCheckpoint) ? prevCheckpoint : null,
+						summaryText: d.summary.map((s) => s.text).join(""),
+						originalText
+					});
+					prevCheckpoint = e.seq + 1;
+				}
+			}
+			const sub = raw.slice(7).replace(/^\/+/, "");
+			const segments = sub === "" ? [] : sub.split("/").filter((x) => x !== "");
+			const parseSeg = (seg) => {
+				const m = /^([a-z_]+)(?:\[(.+)\])?$/.exec(seg);
+				if (m === null) throw new UrlSchemesError("CTX_BAD_PATH", `ctx://${raw}: unparseable segment "${seg}"`);
+				return {
+					name: m[1],
+					bracket: m[2]
+				};
+			};
+			const seg0 = segments[0] === void 0 ? void 0 : parseSeg(segments[0]);
+			const seg1 = segments[1] === void 0 ? void 0 : parseSeg(segments[1]);
+			if (seg0 === void 0 || seg0.name === "transcript") {
+				seg0?.name;
+				const canonical = transcript();
+				return applyFace(buildSnapshot(agent, events, episodes), canonical, sel, seg0?.name === "transcript" ? "canonical" : "prepared");
+			}
+			if (seg0.name === "compactions") {
+				if (seg0.bracket === void 0) {
+					if (sel !== null && sel.kind !== "raw") throw new UrlSchemesError("CTX_BAD_SELECTOR", "ctx://session/compactions: only :raw (or no selector) is supported on the manifest");
+					const body = episodes.map((e) => [
+						`label=${e.label} (checkpoint_seq=${e.checkpointSeq})`,
+						`compactionId=${e.compactionId}`,
+						`at=${new Date(e.at ?? 0).toISOString()}`,
+						`shadowed=${e.shadowedRange.start}..${e.shadowedRange.end} (${e.shadowedSeqs.length} items, ${e.shadowedTokenCount} tokens)`,
+						`replaces_checkpoint=${e.replacesCheckpoint ?? "null"}`,
+						`preview=${e.summaryText.slice(0, 120)}…`
+					].join(" | ")).join("\n");
+					return body === "" ? "(no compactions recorded)" : body;
+				}
+				const episode = pickEpisode(episodes, seg0.bracket);
+				if (seg1 === void 0) {
+					if (sel !== null && sel.kind === "raw" && episode.originalText.length > 65536) return episode.originalText + `\n\n[ctx:// note: original span is ${episode.originalText.length} chars — page with :N-M line windows or grep this URL]`;
+					return applyFace(episode.summaryText, episode.originalText, sel, "prepared");
+				}
+				throw new UrlSchemesError("CTX_BAD_PATH", `ctx://${raw}: unknown sub-path "/${seg1.name}" ("/original" was superseded by the :raw / :raw:N-M selectors)`);
+			}
+			if (seg0.name === "thinking" || seg0.name === "system" || seg0.name === "injections") {
+				const items = seg0.name === "thinking" ? thinkingItems(events) : seg0.name === "system" ? systemItems(events) : injectionItems(events);
+				if (seg0.bracket === void 0) {
+					const index = items.map((it, i) => seg0.name === "thinking" ? `[${i}] seq=${it.seq} turn=${it.turn ?? "-"} step=${it.step ?? "-"} ${previewOf(it.text)}` : `seq=${it.seq} source=${it.source ?? "-"} ${previewOf(it.text)}`).join("\n");
+					return applyFace(index === "" ? `(no ${seg0.name} items recorded)` : index, items.map((it) => it.text).join("\n\n"), sel, "prepared");
+				}
+				const bySeq = items.find((it) => it.seq === Number(seg0.bracket));
+				if (bySeq !== void 0) return applyFace(bySeq.text, bySeq.text, sel, "prepared");
+				const ordinal = Number(seg0.bracket);
+				if (!Number.isInteger(ordinal) || ordinal < 0 || ordinal >= items.length) throw new UrlSchemesError("CTX_NO_SUCH_ELEMENT", `ctx://…[${seg0.bracket}]: no such element (collection "${seg0.name}" has ${items.length} items, 0-based; labels are event seqs)`);
+				return applyFace(items[ordinal].text, items[ordinal].text, sel, "prepared");
+			}
+			const collection = (name$2) => {
+				if (name$2 === "user_prompts") return userPromptEvents.map((e) => ({
+					seq: e.seq,
+					text: `[${String(e.seq).padStart(7, "0")}] USER\n${textOf(blocksOf(e))}`
+				}));
+				if (name$2 === "tool_calls") {
+					const resultByCallSeq = /* @__PURE__ */ new Map();
+					for (const e of events) {
+						if (e.type !== "tool/result") continue;
+						const callSeq = e.sourceEventSeqs?.[0];
+						if (callSeq !== void 0) resultByCallSeq.set(callSeq, resultTextOf(e));
+					}
+					return toolCallEvents.map((e) => ({
+						seq: e.seq,
+						text: `[${String(e.seq).padStart(7, "0")}] TOOL ${e.data.name ?? "?"}\narguments: ${e.data.arguments ?? ""}\nresult: ${resultByCallSeq.get(e.seq) ?? "(no result captured)"}`
+					}));
+				}
+				if (name$2 === "agent_responses") return agentResponseEvents.map((e) => ({
+					seq: e.seq,
+					text: `[${String(e.seq).padStart(7, "0")}] ASSISTANT\n${textOf(blocksOf(e)) || "(tool-call only)"}`
+				}));
+				throw new UrlSchemesError("CTX_BAD_PATH", `ctx://${raw}: unknown collection "${name$2}"`);
+			};
+			if (seg0.bracket !== void 0 || seg0.name === "user_prompts" || seg0.name === "tool_calls" || seg0.name === "agent_responses") {
+				const items = collection(seg0.name);
+				const bracket = seg0.bracket ?? "";
+				const bySeq = items.find((it) => it.seq === Number(bracket));
+				if (bySeq !== void 0) return applyFace(bySeq.text, bySeq.text, sel, "prepared");
+				const ordinal = Number(bracket);
+				if (bracket === "" || !Number.isInteger(ordinal) || ordinal < 0 || ordinal >= items.length) throw new UrlSchemesError("CTX_NO_SUCH_ELEMENT", `ctx://…[${bracket}]: no such element (collection "${seg0.name}" has ${items.length} items, 0-based; labels are event seqs)`);
+				return applyFace(items[ordinal].text, items[ordinal].text, sel, "prepared");
+			}
+			throw new UrlSchemesError("CTX_UNKNOWN_KEY", `ctx://${raw}: unknown path (known: session, session/transcript, session/compactions[...], session/user_prompts[...], session/tool_calls[...], session/agent_responses[...], session/thinking[...], session/system[...], session/injections[...]; bare ctx:// lists the full roster)`);
+			function pickEpisode(list, bracket) {
+				const byLabel = list.find((e) => String(e.label) === bracket);
+				if (byLabel !== void 0) return byLabel;
+				const ordinal = Number(bracket);
+				if (Number.isInteger(ordinal) && ordinal >= 0 && ordinal < list.length) return list[ordinal];
+				throw new UrlSchemesError("CTX_NO_SUCH_ELEMENT", `ctx://…[${bracket}]: no such compaction episode (labels: ${list.map((e) => e.label).join(", ") || "none"})`);
+			}
+			function buildSnapshot(agent$1, all, list) {
+				const headers = all.filter((e) => e.type === "request/header");
+				const system = (headers[headers.length - 1]?.data)?.header?.system;
+				const counts = {};
+				for (const e of all) if (e.type === "user/message") {
+					const k = sourceKind(e) === "user" ? "user_prompts" : "injected_user_messages";
+					counts[k] = (counts[k] ?? 0) + 1;
+				} else if (e.type === "assistant/message") {
+					counts.agent_messages = (counts.agent_messages ?? 0) + 1;
+					for (const b of blocksOf(e)) counts[`block_${b.type}`] = (counts[`block_${b.type}`] ?? 0) + 1;
+				} else if (e.type === "tool/call") counts.tool_calls = (counts.tool_calls ?? 0) + 1;
+				else if (e.type === "tool/result") counts.tool_results = (counts.tool_results ?? 0) + 1;
+				counts.compactions = list.length;
+				for (const key of [
+					"user_prompts",
+					"injected_user_messages",
+					"agent_messages",
+					"block_reasoning",
+					"block_text",
+					"block_tool-call",
+					"tool_calls",
+					"tool_results"
+				]) counts[key] = counts[key] ?? 0;
+				const header = agent$1.session.header;
+				return JSON.stringify({
+					resource: "ctx://session",
+					syntax: "/sub-path [<label|n>] [:N-M]; :raw = canonical full content; :raw:N-M ≡ :N-M",
+					session: {
+						id: header.id ?? agent$1.id,
+						createdAt: header.createdAt,
+						cwd: header.cwd,
+						agentPreset: header.agentPreset,
+						status: agent$1.status,
+						origin: header.origin,
+						delegationDepth: header.delegationDepth
+					},
+					storage: { format: "session.jsonl.zstd (read via sessionPersistence)" },
+					totals: counts,
+					segments: [...list.map((e) => ({
+						segment: `compaction:${e.label}`,
+						start: e.shadowedRange?.start ?? null,
+						end: e.shadowedRange?.end ?? null,
+						items: e.shadowedSeqs.length
+					})), (() => {
+						const lastSeq = all.reduce((m, e) => Math.max(m, e.seq), 0);
+						const start = (list.at(-1)?.shadowedRange?.end ?? -1) + 1;
+						return {
+							segment: "live",
+							start,
+							end: lastSeq,
+							items: all.filter((e) => e.seq >= start).length
+						};
+					})()],
+					system_prompt: {
+						chars: system?.length ?? 0,
+						preview: system === void 0 ? "" : system.slice(0, 200)
+					},
+					compacted: list.map((e) => ({
+						label: e.label,
+						checkpoint_seq: e.checkpointSeq,
+						compactionId: e.compactionId,
+						at: e.at,
+						shadowed_range: e.shadowedRange,
+						shadowed_items: e.shadowedSeqs.length,
+						shadowed_token_count: e.shadowedTokenCount,
+						replaces_checkpoint: e.replacesCheckpoint,
+						summary_preview: sectionPreviews(e.summaryText)
+					})),
+					hints: [
+						"ctx://session:raw → full transcript",
+						"ctx://session/compactions[<label>]:raw → original span",
+						"ctx://session/thinking / ctx://session/system / ctx://session/injections → index-faced collections"
+					]
+				}, void 0, 2);
+			}
+		}
+	};
 }
+
+//#endregion
+//#region src/url-schemes/general-section.ts
+const GENERAL_SECTION_NAME = "url-schema:general";
+const GENERAL_SECTION_ORDER = 129;
+/** The section file's name, resolved against the nearest ancestor directory. */
+const SECTION_FILE = "url-schemes-instruction.md";
 /**
-* Build the `http://`/`https://` handler. Register the returned instance
-* under BOTH schemes ({@link HTTP_SCHEMES}); it is stateless and safe to
-* share.
+* Load the section text at module load, walking up to the nearest copy.
+*
+* A fixed-depth `new URL('../…', import.meta.url)` breaks here: tsdown
+* inlines this module into `lib/index.js`, so the depth from the module to
+* the package root differs between source (`src/url-schemes/general-section.ts`)
+* and build (`lib/index.js`) — the same reason `docs-dir.ts` walks up. Near
+* layers are probed first, so an unrelated ancestor copy is only ever reached
+* when the package's own file is absent.
 */
-function createHttpHandler() {
-	return { async resolve(env, path$1) {
-		const raw = env.rawUrl ?? `https://${path$1}`;
-		let url;
+function loadSectionText() {
+	const here$1 = fileURLToPath(import.meta.url);
+	let dir = dirname(here$1);
+	for (;;) {
 		try {
-			url = new URL(raw);
-		} catch (err) {
-			throw new UrlSchemaError("URL_INVALID", `invalid http(s) URL "${raw}": ${err instanceof Error ? err.message : String(err)}`);
-		}
-		if (url.protocol !== "http:" && url.protocol !== "https:") throw new UrlSchemaError("URL_INVALID", `not an http(s) URL: "${raw}"`);
-		return `${DISCLAIMER}\n\n${await getUrl(url)}`;
-	} };
+			return readFileSync(join(dir, SECTION_FILE), "utf8");
+		} catch {}
+		const parent = dirname(dir);
+		if (parent === dir) throw new Error(`${SECTION_FILE} not found from ${here$1} — it must ship with the package (package.json "files")`);
+		dir = parent;
+	}
+}
+const SECTION_TEXT = loadSectionText();
+/** Render the section when the URL capability is on; `undefined` gates it off. */
+function generalSection(gates) {
+	if (!gates.urlSchemes) return void 0;
+	return {
+		name: GENERAL_SECTION_NAME,
+		order: GENERAL_SECTION_ORDER,
+		text: SECTION_TEXT
+	};
 }
 
 //#endregion
-//#region src/url-schema/handlers/skill.ts
+//#region src/url-schemes/handlers/skill.ts
 /** Split `path` into `{ name, subpath }`; `subpath` is `null` for a bare name. */
 function splitSkillPath(path$1) {
 	const slash = path$1.indexOf("/");
@@ -5536,22 +5392,24 @@ function splitSkillPath(path$1) {
 function resolveResourcePath(baseDir, subpath) {
 	const full = join(baseDir, subpath);
 	const rel = relative(baseDir, full);
-	if (rel === "" || rel === ".." || rel.startsWith("../")) throw new UrlSchemaError("URL_SKILL_RESOURCE_ESCAPE", `skill resource path "${subpath}" escapes its directory`);
+	if (rel === "" || rel === ".." || rel.startsWith("../")) throw new UrlSchemesError("URL_SKILL_RESOURCE_ESCAPE", `skill resource path "${subpath}" escapes its directory`);
 	return full;
 }
 /**
-* Registry lookup options for one env, mirroring `dsh-tool-skill`'s lookup:
-* the workspace cwd (explicit `cwd`, else the agent session's) plus the
-* calling agent as the viewing `scope` — without it a scoped skill layer
-* reads as absent. Both absent → `undefined`, the exact call shape of the
-* cwd-less era.
+* Registry lookup options for one env — the exact call shape of
+* `dsh-tool-skill`: the calling agent is the viewing `scope` (the agent is
+* its own scope key, so the layered registry resolves precisely as this
+* agent's composition sees it) and the workspace cwd comes from the agent's
+* session header. No agent in the env → `undefined` (the cwd-less global
+* view); the handler then reports the registry's own verdict.
 */
 function lookupOptions(env) {
-	const cwd = env.cwd ?? env.agent?.session.header.cwd;
-	if (cwd === void 0 && env.agent === void 0) return void 0;
+	const agent = env.agent;
+	if (agent === void 0) return void 0;
+	const cwd = agent.session.header.cwd;
 	return {
 		...cwd === void 0 ? {} : { cwd },
-		...env.agent === void 0 ? {} : { scope: env.agent }
+		scope: agent
 	};
 }
 /**
@@ -5565,9 +5423,9 @@ function createSkillHandler(deps) {
 		async resolve(env, path$1) {
 			const { name: name$2, subpath } = splitSkillPath(path$1);
 			const skill = await deps.skills.get(name$2, lookupOptions(env));
-			if (skill === void 0) throw new UrlSchemaError("URL_SKILL_NOT_FOUND", `skill "${name$2}" is unknown or no longer available`);
+			if (skill === void 0) throw new UrlSchemesError("URL_SKILL_NOT_FOUND", `skill "${name$2}" is unknown or no longer available`);
 			if (subpath === null) return skill.content;
-			if (skill.resourceBase === void 0 || skill.resourceBase.kind !== "directory") throw new UrlSchemaError("URL_SKILL_NO_RESOURCE_BASE", `skill "${name$2}" has no filesystem resource directory`);
+			if (skill.resourceBase === void 0 || skill.resourceBase.kind !== "directory") throw new UrlSchemesError("URL_SKILL_NO_RESOURCE_BASE", `skill "${name$2}" has no filesystem resource directory`);
 			const resourcePath = resolveResourcePath(skill.resourceBase.path, subpath);
 			const target = await deps.fs.resolve(resourcePath);
 			return await deps.fs.readText(target);
@@ -5589,9 +5447,10 @@ function createSkillHandler(deps) {
 }
 
 //#endregion
-//#region src/url-schema/native-capture.ts
-/** Tool names the wrappers shadow and delegate back to. */
+//#region src/url-schemes/native-capture.ts
+/** Tool names the chassis/wrappers shadow and delegate back to. */
 const NATIVE_TOOL_NAMES = [
+	"read",
 	"write",
 	"grep",
 	"glob"
@@ -5652,50 +5511,7 @@ function captureNativeTools(ctx, agent) {
 }
 
 //#endregion
-//#region src/url-schema/resolver.ts
-/** Scheme→handler registry that resolves `scheme://` URLs end-to-end. */
-var UrlResolver = class {
-	handlers = /* @__PURE__ */ new Map();
-	/** Register (or replace) the handler for `scheme`. */
-	register(scheme, handler) {
-		this.handlers.set(scheme, handler);
-	}
-	/**
-	* Resolve a `scheme://` URL to its selected text: parse the URL, dispatch
-	* to the registered handler for the scheme, then apply the selector.
-	*
-	* Throws a structured {@link UrlSchemaError} for a scheme-less URL
-	* (`URL_NO_SCHEME`, from {@link parseUrl}) or an unregistered scheme
-	* (`URL_UNREGISTERED_SCHEME`).
-	*/
-	async resolve(env, url) {
-		const parsed = parseUrl(url);
-		const handler = this.handlers.get(parsed.scheme);
-		if (handler === void 0) {
-			const registered = [...this.handlers.keys()].sort().join(", ");
-			throw new UrlSchemaError("URL_UNREGISTERED_SCHEME", `no handler registered for scheme "${parsed.scheme}" (registered: ${registered || "none"})`);
-		}
-		return applySelector(await handler.resolve(env, parsed.path), parsed.selector);
-	}
-	/**
-	* Resolve a `scheme://` URL to its on-disk path when its handler is
-	* path-backed: parse the URL, dispatch to the handler's optional
-	* `resolvePath`, and return the real disk location. Returns `undefined`
-	* for an unregistered scheme, a handler without `resolvePath`, or a path
-	* the handler cannot map — callers then fall back to text resolution
-	* (whose unregistered-scheme error is the structured generic one).
-	* Selectors are NOT applied: they operate on resolved text, not paths.
-	*/
-	async resolvePath(env, url) {
-		const parsed = parseUrl(url);
-		const handler = this.handlers.get(parsed.scheme);
-		if (handler?.resolvePath === void 0) return void 0;
-		return await handler.resolvePath(env, parsed.path);
-	}
-};
-
-//#endregion
-//#region src/url-schema/tools/materialize.ts
+//#region src/url-schemes/tools/materialize.ts
 /** Root preferred for materialization; temp dirs are `dashr-url-*` inside it. */
 const SHM_ROOT = "/dev/shm";
 /** Per-materialization shm ceiling (8 MiB); strictly larger goes to disk. */
@@ -5739,7 +5555,7 @@ async function withTempMaterialization(text, body) {
 }
 
 //#endregion
-//#region src/url-schema/tools/glob.ts
+//#region src/url-schemes/tools/glob.ts
 /** Build the resolver env from one tool execution (agent + session cwd + raw URL). */
 function execEnv$1(exec, rawUrl) {
 	return {
@@ -5754,13 +5570,13 @@ function isSchemeUrl$2(raw) {
 		parseUrl(raw);
 		return true;
 	} catch (error) {
-		if (error instanceof UrlSchemaError && error.code === "URL_NO_SCHEME") return false;
+		if (error instanceof UrlSchemesError && error.code === "URL_NO_SCHEME") return false;
 		throw error;
 	}
 }
 /** Structured error for calls that cannot run without the native delegate. */
 function nativeUnavailable$1() {
-	return new UrlSchemaError("NATIVE_GLOB_UNAVAILABLE", "the host did not deploy a native glob tool — URL-aware glob cannot delegate discovery");
+	return new UrlSchemesError("NATIVE_GLOB_UNAVAILABLE", "the host did not deploy a native glob tool — URL-aware glob cannot delegate discovery");
 }
 /**
 * Build the `glob` {@link ToolDefinition}: a `scheme://` URL lists the
@@ -5772,16 +5588,16 @@ function createGlobTool(deps) {
 	const { resolver, nativeGlob } = deps;
 	return defineTool({
 		name: "glob",
-		description: "Discover files matching a glob pattern. A scheme:// URL addresses a resource instead: in `pattern` it lists that resource, in `path` it scopes the glob to the resource.",
+		description: "Find files whose paths match a glob pattern. Returns matching file paths — never directories — including hidden and ignored files (VCS metadata directories are excluded). Up to 100 paths come back in modification-time order; a larger result returns the first 100 paths in modification-time order, says so, and reports where the complete sorted list was saved. This tool does not enumerate directory entries.",
 		parameters: {
 			pattern: {
 				type: "string",
 				required: true,
-				description: "Glob pattern, or a scheme:// URL addressing the resource to list."
+				description: "Glob pattern to match file paths against (e.g. \"**/*.ts\", \"src/**/*.test.js\"). A pattern with no \"/\" matches the basename at any depth, so \"*\" and \"*.ts\" both search the whole tree; include a separator to anchor the depth."
 			},
 			path: {
 				type: "string",
-				description: "Optional search root directory, or a scheme:// URL scoping the glob."
+				description: "Directory to search in. Defaults to the session workspace; a relative path resolves against it."
 			}
 		},
 		output: {
@@ -5845,7 +5661,7 @@ function createGlobTool(deps) {
 }
 
 //#endregion
-//#region src/url-schema/tools/grep.ts
+//#region src/url-schemes/tools/grep.ts
 /** Build the resolver env from one tool execution (agent + session cwd + raw URL). */
 function execEnv(exec, rawUrl) {
 	return {
@@ -5860,13 +5676,13 @@ function isSchemeUrl$1(raw) {
 		parseUrl(raw);
 		return true;
 	} catch (error) {
-		if (error instanceof UrlSchemaError && error.code === "URL_NO_SCHEME") return false;
+		if (error instanceof UrlSchemesError && error.code === "URL_NO_SCHEME") return false;
 		throw error;
 	}
 }
 /** Structured error for calls that cannot run without the native delegate. */
 function nativeUnavailable() {
-	return new UrlSchemaError("NATIVE_GREP_UNAVAILABLE", "the host did not deploy a native grep tool — URL-aware grep cannot delegate searches");
+	return new UrlSchemesError("NATIVE_GREP_UNAVAILABLE", "the host did not deploy a native grep tool — URL-aware grep cannot delegate searches");
 }
 /**
 * Build the `grep` {@link ToolDefinition}: a `scheme://` `path` translates
@@ -5878,7 +5694,7 @@ function createGrepTool(deps) {
 	const { resolver, nativeGrep } = deps;
 	return defineTool({
 		name: "grep",
-		description: "Search file contents with a regular expression. When `path` is a scheme:// URL, search the resolved resource: path-backed schemes search their real disk location, content-backed schemes search the resolved text.",
+		description: "Search file contents with a ripgrep regular expression. Returns matching lines with line numbers, grouped by file. Returns the first 250 matches inline; a capped result reports where the complete match list was saved. Use read on a matched file for surrounding context.",
 		parameters: {
 			pattern: {
 				type: "string",
@@ -5887,11 +5703,11 @@ function createGrepTool(deps) {
 			},
 			path: {
 				type: "string",
-				description: "Search root: a filesystem path, or a scheme:// URL to search the resolved resource."
+				description: "File or directory to search. Defaults to the session workspace; a relative path resolves against it."
 			},
 			include: {
 				type: "string",
-				description: "Optional file-glob filter."
+				description: "One glob filter for which files to search (e.g. \"*.ts\", \"*.{js,jsx}\"). Not a list; negation is not supported."
 			}
 		},
 		output: {
@@ -5951,7 +5767,7 @@ function createGrepTool(deps) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/constants.js
+//#region src/url-schemes/vendored/hashline/constants.js
 const MAX_BYTES = 100 * 1024 * 1024;
 const MAX_READ_LINE_BYTES = 200 * 1024;
 const HASH_STORE_BUSY_TIMEOUT = 1e3;
@@ -5963,7 +5779,7 @@ const NOOP_LOOP_THRESHOLD = 3;
 const NEW_CONTENT_NOT_STRING_MSG = "[E_BAD_SHAPE] \"replacement_text\" must be a string with \\n line separators, not an array. Do not pass an array of lines — pass the replacement text as one string: \"line1\\nline2\". Use \"\" to delete a range.";
 
 //#endregion
-//#region src/url-schema/vendored/hashline/utils.js
+//#region src/url-schemes/vendored/hashline/utils.js
 function isRec(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -6016,7 +5832,7 @@ function clipLine(line, maxLen = 200) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/contract.js
+//#region src/url-schemes/vendored/hashline/contract.js
 const normalizedEdit = Symbol("normalizedEdit");
 function isNormalizedEdit(input) {
 	return isRec(input) && input[normalizedEdit] === true;
@@ -6107,7 +5923,7 @@ function assertUndoRequest(request) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/paths.js
+//#region src/url-schemes/vendored/hashline/paths.js
 /**
 * On-disk home for dsh-better-edit state: ONE centralized store per harness
 * home — `$DSH_HOME/storages/dsh-better-edit` (default
@@ -6124,11 +5940,11 @@ function hashStorePath() {
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/fs-write.js
+//#region src/url-schemes/vendored/hashline/fs-write.js
 const STALE_TEMP_MS = 3600 * 1e3;
 
 //#endregion
-//#region src/url-schema/vendored/hashline/hashline/hash-assign.js
+//#region src/url-schemes/vendored/hashline/hashline/hash-assign.js
 let hasher = null;
 function getH() {
 	if (hasher) return hasher;
@@ -6342,7 +6158,7 @@ function mapStableHashes(oldContent, oldHashes, newContent, removedHashes) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/hash-store.js
+//#region src/url-schemes/vendored/hashline/hash-store.js
 function isValidHashList(value) {
 	if (!Array.isArray(value)) return false;
 	for (const hash of value) if (typeof hash !== "string" || !HASH_RE.test(hash)) return false;
@@ -6832,7 +6648,7 @@ async function upsertSnapshotFor(path$1, checksum, lineCount, hashes) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/hashline/hash.js
+//#region src/url-schemes/vendored/hashline/hashline/hash.js
 let defaultHashSnapshotIO;
 function snapshotIOFor(store) {
 	if (store) return {
@@ -6881,7 +6697,7 @@ async function lineHashes(content, path$1, previous, ioOrStore, persist) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/session-view.js
+//#region src/url-schemes/vendored/hashline/session-view.js
 const current = new AsyncLocalStorage();
 function withWorkspace(cwd, fn) {
 	return current.run(cwd, fn);
@@ -7102,7 +6918,7 @@ async function scanDrift(input) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/hashline/anchor-pipeline.js
+//#region src/url-schemes/vendored/hashline/hashline/anchor-pipeline.js
 function diagRef(ref) {
 	const trimmed = ref.trim();
 	if (!trimmed.length) return `[E_BAD_REF] Invalid anchor. Expected a 3-char alphanumeric anchor (e.g. "aB3").`;
@@ -7745,7 +7561,7 @@ function changedRange(original, result) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/edit-diff.js
+//#region src/url-schemes/vendored/hashline/edit-diff.js
 function detectEnding(content) {
 	const lfIdx = content.indexOf("\n");
 	if (lfIdx === -1) return content.indexOf("\r") >= 0 ? "\r" : "\n";
@@ -7860,7 +7676,7 @@ function genDiff(oldContent, newContent, contextLines = 2, newContentHashes, old
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/file-view.js
+//#region src/url-schemes/vendored/hashline/file-view.js
 const MAX_HASH_LINES$1 = HASH_SPACE;
 const DEFAULT_MAX_LINES = 2e3;
 const DEFAULT_MAX_BYTES = 50 * 1024;
@@ -8084,7 +7900,7 @@ async function readView(io, path$1, cwd, opts = {}) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/fs-bridge.js
+//#region src/url-schemes/vendored/hashline/fs-bridge.js
 /**
 * Map an `ctx.fs` failure onto the hashline model-facing vocabulary so the
 * model sees the same structured error codes as the pure pipeline.
@@ -8159,7 +7975,7 @@ function ctxFsIO(fs, ctx) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/read-and-serve.js
+//#region src/url-schemes/vendored/hashline/read-and-serve.js
 /** Appended when the file had non-UTF-8 bytes; editing rewrites it as UTF-8. */
 const UTF8_REWRITE_NOTE = "[Non-UTF-8 bytes shown as U+FFFD; editing rewrites the file as UTF-8.]";
 /**
@@ -8191,7 +8007,7 @@ async function readAndServe(io, rawPath, cwd, options) {
 }
 
 //#endregion
-//#region src/url-schema/tools/read.ts
+//#region src/url-schemes/tools/read.ts
 /** Mirrors `parseUrl`'s scheme prefix so the fork matches the resolver exactly. */
 const SCHEME_URL_RE = /^[a-z][a-z0-9]*:\/\//;
 /**
@@ -8201,15 +8017,15 @@ const SCHEME_URL_RE = /^[a-z][a-z0-9]*:\/\//;
 * scheme handlers read whichever fields they need off it.
 */
 function createReadTool(deps) {
-	const { resolver, fs, ctx } = deps;
+	const { resolver, fs, ctx, gates, capturedRead } = deps;
 	const io = ctxFsIO(fs, ctx);
 	return defineTool({
 		name: "read",
-		description: "Read a text file (each line returned as `HASH│content` with a 3-char hash anchor for later edit calls) or resolve a `scheme://` URL (skill/agent/dsh/dvc/http) to its selected text. File reads page with offset/limit; URL reads resolve end-to-end and ignore offset/limit.",
+		description: "Read a text file (each line returned as `HASH│content` with a 3-char hash anchor for later edit calls). File reads page with offset/limit.",
 		parameters: {
 			path: {
 				type: "string",
-				description: "File path (hashline-anchored read), or a `scheme://` URL to resolve (e.g. skill://name/path, agent://id/transcript, dsh://docs/doc, dvc://device, https://host/path)."
+				description: "File path (hashline-anchored read)."
 			},
 			offset: {
 				type: "number",
@@ -8231,7 +8047,8 @@ function createReadTool(deps) {
 			const canonical = normalizeRequest(args);
 			assertReadRequest(canonical);
 			const rawPath = canonical.path;
-			if (SCHEME_URL_RE.test(rawPath)) {
+			const isScheme = SCHEME_URL_RE.test(rawPath);
+			if (gates.urlSchemes && isScheme) {
 				const cwd = exec.agent?.session.header.cwd;
 				const env = cwd === void 0 ? {
 					agent: exec.agent,
@@ -8243,7 +8060,7 @@ function createReadTool(deps) {
 				};
 				return resolver.resolve(env, rawPath);
 			}
-			return withWorkspace(execCwd(exec), async () => {
+			if (gates.hashline && !isScheme) return withWorkspace(execCwd(exec), async () => {
 				const cwd = execCwd(exec);
 				const signal = exec.signal;
 				const { text, absolutePath } = await readAndServe(io, rawPath, cwd, {
@@ -8254,33 +8071,30 @@ function createReadTool(deps) {
 				await io.emitObserved(absolutePath, exec, signal);
 				return text;
 			});
+			if (capturedRead !== void 0 && capturedRead.execute !== void 0) return capturedRead.execute(args, exec);
+			throw new UrlSchemesError("NATIVE_READ_UNAVAILABLE", "no read delegate is available: urlSchemes and hashline gates are both disabled");
 		}
 	});
 }
 
 //#endregion
-//#region src/url-schema/tools/write.ts
+//#region src/url-schemes/tools/write.ts
 /**
 * Schemes the URL schema registers (v0.1.8d): the default write dispatch
-* keys off this static table; the integration step can replace the whole
+* keys off this table; the integration step can replace the whole
 * dispatch through `writeScheme` when it needs the live registry.
+*
+* Rendered from `catalog.ts` rather than written out here — this literal was
+* one of the hand-maintained copies that drifted from the scheme set.
 */
-const REGISTERED_SCHEMES = [
-	"agent",
-	"ctx",
-	"dsh",
-	"dvc",
-	"http",
-	"https",
-	"skill"
-];
+const REGISTERED_SCHEMES = SCHEME_NAMES;
 /** Detects a `scheme://` prefix with the resolver layer's own parser. */
 function isSchemeUrl(raw) {
 	try {
 		parseUrl(raw);
 		return true;
 	} catch (error) {
-		if (error instanceof UrlSchemaError && error.code === "URL_NO_SCHEME") return false;
+		if (error instanceof UrlSchemesError && error.code === "URL_NO_SCHEME") return false;
 		throw error;
 	}
 }
@@ -8298,9 +8112,9 @@ async function defaultSchemeWrite(scheme, path$1, content) {
 			after: JSON.stringify(result, null, 2)
 		};
 	}
-	if (scheme === "ctx") throw new UrlSchemaError("URL_READ_ONLY", `ctx:// is a curated read-only snapshot — write to ctx://${path$1} is not supported`);
-	if (REGISTERED_SCHEMES.includes(scheme)) throw new UrlSchemaError("URL_WRITE_UNSUPPORTED", `write to ${scheme}:// is not supported (read-only scheme, or its write channel is not wired yet)`);
-	throw new UrlSchemaError("URL_UNREGISTERED_SCHEME", `no handler registered for scheme "${scheme}" (registered: ${REGISTERED_SCHEMES.join(", ")})`);
+	if (scheme === "ctx") throw new UrlSchemesError("URL_READ_ONLY", `ctx:// is a curated read-only snapshot — write to ctx://${path$1} is not supported`);
+	if (REGISTERED_SCHEMES.includes(scheme)) throw new UrlSchemesError("URL_WRITE_UNSUPPORTED", `write to ${scheme}:// is not supported (read-only scheme, or its write channel is not wired yet)`);
+	throw new UrlSchemesError("URL_UNREGISTERED_SCHEME", `no handler registered for scheme "${scheme}" (registered: ${REGISTERED_SCHEMES.join(", ")})`);
 }
 /**
 * Build the `write` {@link ToolDefinition}: `scheme://` paths route to the
@@ -8312,17 +8126,17 @@ function createWriteTool(deps) {
 	const writeScheme = deps.writeScheme ?? defaultSchemeWrite;
 	return defineTool({
 		name: "write",
-		description: "Create or fully replace a file. `file_path` may be a filesystem path or a scheme:// URL (`dvc://<device>` executes the device with a JSON args payload; other scheme writes are rejected).",
+		description: "Create or fully replace a UTF-8 text file.",
 		parameters: {
 			file_path: {
 				type: "string",
 				required: true,
-				description: "Target filesystem path or scheme:// URL to write."
+				description: "Path to write, resolved by the filesystem backend."
 			},
 			content: {
 				type: "string",
 				required: true,
-				description: "Full new content (an empty string writes an empty file)."
+				description: "Full UTF-8 text content to write."
 			},
 			...sandbox !== void 0 && sandbox.escalationModes.length > 0 ? sandbox.schemaFields() : {}
 		},
@@ -8357,9 +8171,11 @@ function createWriteTool(deps) {
 			},
 			render: (_args, value) => {
 				const verb = value.operation === "update" ? "Updated" : value.operation === "execute" ? "Executed" : "Created";
+				let text = value.diagnostics === void 0 ? `${verb} ${value.path}` : `${verb} ${value.path}\n${value.diagnostics}`;
+				if (value.operation === "execute" && value.after !== void 0) text += `\n${value.after}`;
 				return [{
 					type: "text",
-					text: value.diagnostics === void 0 ? `${verb} ${value.path}` : `${verb} ${value.path}\n${value.diagnostics}`
+					text
 				}];
 			}
 		},
@@ -8368,7 +8184,7 @@ function createWriteTool(deps) {
 				const parsed = parseUrl(args.file_path);
 				return writeScheme(parsed.scheme, parsed.path, args.content, {});
 			}
-			if (nativeWrite === void 0) throw new UrlSchemaError("NATIVE_WRITE_UNAVAILABLE", "the host did not deploy a native write tool — URL-aware write cannot delegate filesystem writes");
+			if (nativeWrite === void 0) throw new UrlSchemesError("NATIVE_WRITE_UNAVAILABLE", "the host did not deploy a native write tool — URL-aware write cannot delegate filesystem writes");
 			let content = args.content;
 			try {
 				const formatted = await preWriteFormat?.(args.file_path, content);
@@ -8392,7 +8208,7 @@ function createWriteTool(deps) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/sandbox.js
+//#region src/url-schemes/vendored/hashline/sandbox.js
 /**
 * The filesystem escalation API: advertisement gating, per-call policy
 * resolution, the one-approved wider retry, and denial-marker mapping. A pure
@@ -8478,7 +8294,7 @@ var FsSandboxController = class {
 };
 
 //#endregion
-//#region src/url-schema/vendored/hashline/undo-edit.js
+//#region src/url-schemes/vendored/hashline/undo-edit.js
 /** Load the last undo row for a path from the active store, if any. */
 async function readUndo(path$1) {
 	return (await loadHashStore()).getUndo(path$1);
@@ -8560,7 +8376,7 @@ async function clearUndo(path$1) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/noop-guard.js
+//#region src/url-schemes/vendored/hashline/noop-guard.js
 const noopLoopTracker = /* @__PURE__ */ new Map();
 function noopPayloadKey(absolutePath, removeFrom, removeTo, replacementText) {
 	return JSON.stringify([
@@ -8584,7 +8400,7 @@ function clearNoopLoop(absolutePath) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/edit-engine.js
+//#region src/url-schemes/vendored/hashline/edit-engine.js
 /** The hashes a range edit removes, for stable re-hash bookkeeping. */
 function collectRemovedHashes(edit, originalHashes) {
 	const removedHashes = /* @__PURE__ */ new Set();
@@ -8919,7 +8735,7 @@ async function persistUndoAndWrite(opts) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/edit-response.js
+//#region src/url-schemes/vendored/hashline/edit-response.js
 function buildMetrics(args) {
 	const metrics = {
 		edits_attempted: args.editsAttempted,
@@ -9010,7 +8826,7 @@ function buildBatchResult(sections) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/mutation.js
+//#region src/url-schemes/vendored/hashline/mutation.js
 /**
 * Deep seam: execute the full mutation lifecycle.
 *
@@ -9113,7 +8929,7 @@ async function commit(opts) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/prompts.js
+//#region src/url-schemes/vendored/hashline/prompts.js
 /**
 * Model-facing prompt text for the hashline tools, embedded so the bundle
 * ships no external prompt files. Each tool's schema `description` is short;
@@ -9148,7 +8964,7 @@ const UNDO_GUIDANCE = {
 };
 
 //#endregion
-//#region src/url-schema/vendored/hashline/tool-edit.js
+//#region src/url-schemes/vendored/hashline/tool-edit.js
 async function resolveNullPath(edits) {
 	if (edits.length === 0) return void 0;
 	const first = edits[0];
@@ -9248,7 +9064,7 @@ function registerEditTool(_rootCtx, agentCtx, io, sandbox) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/tool-undo.js
+//#region src/url-schemes/vendored/hashline/tool-undo.js
 /**
 * Register the `undo_last_edit` tool on the calling agent's scope.
 * @param _rootCtx - host context.
@@ -9348,7 +9164,7 @@ function registerUndoTool(_rootCtx, agentCtx, io, sandbox) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/guidance/parse.js
+//#region src/url-schemes/vendored/hashline/guidance/parse.js
 /**
 * Pure parser for per-preset guidance override files.
 *
@@ -9419,7 +9235,7 @@ function isBlankOverride(content) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/guidance/resolve.js
+//#region src/url-schemes/vendored/hashline/guidance/resolve.js
 /**
 * Render one tool's guidance as its intro line, a blank line, then bullets.
 * Uniform across the four sections: no tool-schema description is duplicated
@@ -9517,7 +9333,7 @@ async function composeSections(presetId, homeDir) {
 }
 
 //#endregion
-//#region src/url-schema/vendored/hashline/guidance/materialize.js
+//#region src/url-schemes/vendored/hashline/guidance/materialize.js
 /** The presets shipped by the harness, each seeded with editable guidance. */
 const DEFAULT_PRESETS = [
 	"standard",
@@ -9693,9 +9509,9 @@ async function ensurePresetGuidance(homeDir) {
 }
 
 //#endregion
-//#region src/url-schema/index.ts
+//#region src/url-schemes/index.ts
 /** Cordis plugin name. */
-const name$1 = "dsh-url-schema";
+const name$1 = "dsh-url-schemes";
 /**
 * Required host-plane services — including the live agent registry
 * (`ctx.agents`, mounted by the `dsh-agent` row of `dsh-base`), which powers
@@ -9713,6 +9529,13 @@ const inject$1 = [
 	"agents",
 	"sessionPersistence"
 ];
+/** Every key defaults on — the service is opt-out, not opt-in. */
+function resolveGates(config) {
+	return {
+		urlSchemes: config?.urlSchemes !== false,
+		hashline: config?.hashline !== false
+	};
+}
 /** Register the four URL-aware tools on one agent's own scope layer. */
 /**
 * The lsp feedback loop (native-tools Wave3): both hooks route through the
@@ -9765,25 +9588,29 @@ function buildLspWriteFeedback() {
 		postWrite: (filePath, content) => lspFeedback("diagnostics", filePath, content)
 	};
 }
-function installAgentTools(rootCtx, agent, resolver) {
+function installAgentTools(rootCtx, agent, resolver, gates) {
 	agent.ctx.effect(async () => {
 		const native = captureNativeTools(rootCtx, agent);
 		const disposers = [];
 		const hashlineSandbox = new FsSandboxController(rootCtx);
-		disposers.push(agent.ctx.tools.register(createReadTool({
+		const hashlineIo = ctxFsIO(rootCtx.fs, rootCtx);
+		if (gates.hashline) disposers.push(agent.ctx.tools.register(createReadTool({
 			resolver,
 			fs: rootCtx.fs,
-			ctx: rootCtx
+			ctx: rootCtx,
+			gates,
+			capturedRead: native.read
 		})));
-		disposers.push(agent.ctx.tools.register(createWriteTool({
+		if (gates.urlSchemes) disposers.push(agent.ctx.tools.register(createWriteTool({
 			nativeWrite: native.write,
 			sandbox: hashlineSandbox,
 			...buildLspWriteFeedback()
 		})));
-		const hashlineIo = ctxFsIO(rootCtx.fs, rootCtx);
-		disposers.push(registerEditTool(rootCtx, agent.ctx, hashlineIo, hashlineSandbox));
-		disposers.push(registerUndoTool(rootCtx, agent.ctx, hashlineIo, hashlineSandbox));
-		{
+		if (gates.hashline) {
+			disposers.push(registerEditTool(rootCtx, agent.ctx, hashlineIo, hashlineSandbox));
+			disposers.push(registerUndoTool(rootCtx, agent.ctx, hashlineIo, hashlineSandbox));
+		}
+		if (gates.hashline) {
 			const diagnosticsHook = buildLspWriteFeedback().postWrite;
 			disposers.push(agent.ctx.on("tools/post-execute", async (exec, result, next) => {
 				const decision = await next();
@@ -9822,15 +9649,19 @@ function installAgentTools(rootCtx, agent, resolver) {
 				}));
 			} catch {}
 			for (const section of sections) disposers.push(agent.ctx.systemPrompt.section(section));
+			const general = generalSection(gates);
+			if (general !== void 0) disposers.push(agent.ctx.systemPrompt.section(general));
 		} catch {}
-		disposers.push(agent.ctx.tools.register(createGrepTool({
-			resolver,
-			nativeGrep: native.grep
-		})));
-		disposers.push(agent.ctx.tools.register(createGlobTool({
-			resolver,
-			nativeGlob: native.glob
-		})));
+		if (gates.urlSchemes) {
+			disposers.push(agent.ctx.tools.register(createGrepTool({
+				resolver,
+				nativeGrep: native.grep
+			})));
+			disposers.push(agent.ctx.tools.register(createGlobTool({
+				resolver,
+				nativeGlob: native.glob
+			})));
+		}
 		return () => {
 			for (const dispose of disposers) dispose();
 		};
@@ -9841,6 +9672,11 @@ function apply$1(ctx, config) {
 	initHasher().catch(() => {});
 	ensurePresetGuidance(configDir()).catch(() => {});
 	const resolver = new UrlResolver();
+	if (resolveGates(config).urlSchemes && ctx.fs) try {
+		wrapFsWithSchemes(ctx.fs, { settings: ctx.settings });
+	} catch (error) {
+		ctx.logger("dsh-url-schemes").warn(`fs scheme wrap failed; running on the stock filesystem service: ${error instanceof Error ? error.message : String(error)}`);
+	}
 	resolver.register("skill", createSkillHandler({
 		skills: ctx.skills,
 		fs: ctx.fs
@@ -9856,7 +9692,7 @@ function apply$1(ctx, config) {
 		docsDir: resolveDocsDir()
 	}));
 	resolver.register("dvc", createDvcHandler());
-	resolver.register("ctx", createCtxHandler());
+	resolver.register("ctx", createCtxHandler({ sessionPersistence: ctx.sessionPersistence }));
 	registerAstDevices();
 	registerBrowserDevice();
 	installLspDevices();
@@ -9867,13 +9703,13 @@ function apply$1(ctx, config) {
 		if (registered.has(agent)) return;
 		registered.add(agent);
 		try {
-			installAgentTools(ctx, agent, resolver);
+			installAgentTools(ctx, agent, resolver, resolveGates(config));
 		} catch (error) {
-			ctx.logger("dsh-url-schema").warn(`failed to install URL-aware tools for agent ${agent.id}: ${error instanceof Error ? error.message : String(error)}`);
+			ctx.logger("dsh-url-schemes").warn(`failed to install URL-aware tools for agent ${agent.id}: ${error instanceof Error ? error.message : String(error)}`);
 		}
 	});
 }
-var url_schema_default = {
+var url_schemes_default = {
 	name: name$1,
 	inject: inject$1,
 	apply: apply$1
@@ -10982,6 +10818,8 @@ const MOBILE_CONFIG = z.object({
 /** Runtime schema. */
 const Config = z.intersect([DashrRuntime.Config, z.object({
 	maxParallelSubCalls: z.natural().min(1).default(10),
+	urlSchemes: z.boolean().default(true),
+	hashline: z.boolean().default(true),
 	trustedPageAuthorities: z.array(String).default(deriveDefaultPageAuthorities(process.env.DSH_TRUSTED_HOSTS)),
 	mobile: MOBILE_CONFIG
 })]);
@@ -11003,12 +10841,16 @@ const EVAL_NAME = "eval";
 * (`modelSelectionSettings: true`) lands on the agent's OWN layer, outside
 * registry restriction reach, so it stays visible on every surface and the
 * control prompt annotates it as an alias of the `agent` delegation tool.
+* `skill` was REMOVED from this list (2026-09-12, user ruling): the native
+* skill tool stays visible and self-surfaces its session catalog
+* (`<available_skills>` is gated on the tool's registry visibility — masking
+* the tool silenced the catalog). dashr's dual pipeline keeps `read
+* skill://<name>` as the addressing form alongside native invocation.
 * own URL wrappers) is exempt from restrictions by construction — the
 * capability it carries stays reachable through the captured-definition
 * bridges below, never through the masked name.
 */
 const MASKED_TOOL_NAMES = new Set([
-	"skill",
 	"send_message",
 	"report",
 	"list_agents",
@@ -11547,7 +11389,7 @@ function pickRuntimeConfig(config) {
 }
 function apply(ctx, config) {
 	ctx.plugin(DashrRuntime, pickRuntimeConfig(config));
-	ctx.plugin(url_schema_default, config);
+	ctx.plugin(url_schemes_default, config);
 	installFailover(ctx);
 	installWebTrust(ctx, config);
 	const logger = ctx.logger("dashr-repl");