fix(agents): reject pathless media and direct file URLs

docs/development/agent-workflow.md

@@ -65,7 +65,8 @@ Inline iframe srcdoc documents are traversed too, with their own fragment anchor
 The first active HTML base href sets reference resolution, including nested srcdoc bases.
 Resolved file URLs use native filesystem conversion, including Windows drive paths.
 Explicit srcset attributes must contain at least one parsed candidate.
-Image and media references require nonempty targets that resolve to files, not directories.
+Image and media references require a nonempty path that resolves to a file, not a directory.
+Direct file URLs are rejected; use portable repository-relative paths.
 Image references check file existence without interpreting image fragments as
 Markdown headings; document links keep anchor checks even when sharing a target.
 HTML video, audio, source and track `src` assets and video posters use the same

tools/skills/validate-agent-guidance.mjs

@@ -41,6 +41,8 @@ async function validateReference(
 ) {
     if (unresolvedReference !== undefined)
         return `${source}: unresolved Markdown reference "${unresolvedReference}"`;
+    if (/^file:/iu.test(target))
+        return `${source}: use a repository-relative path instead of a file URL: ${target}`;
     if (image && !target) return `${source}: empty media target`;
     let resolvedBasePath;
     if (bases?.length) {
@@ -68,6 +70,8 @@ async function validateReference(
     } catch {
         return `${source}: malformed local link: ${target}`;
     }
+    if (image && !path && !resolvedBasePath)
+        return `${source}: media target requires a path: ${target}`;
     if (embeddedAnchors && !path && !image)
         return !anchor || embeddedAnchors.includes(anchor)
             ? undefined

tools/skills/validate-agent-guidance.test.mjs

@@ -1586,3 +1586,14 @@ for (const extension of ['pdf', 'rst', 'adoc', 'markdown', 'docm', 'latex']) {
         );
     });
 }
+
+for (const markup of [
+    '![logo](#missing)',
+    '<img src="?v=1">',
+    '[Guide](file:///tmp/missing.md)',
+    '<a href="file:///etc/hosts">Guide</a>',
+]) {
+    test(`nonportable or pathless target is rejected: ${markup}`, async (t) => {
+        assert.ok((await diagnostics(t, { 'AGENTS.md': markup })).length > 0);
+    });
+}