--- parser3/src/include/pa_request.h	2026/09/26 17:41:10	1.276
+++ parser3/src/include/pa_request.h	2026/09/29 02:56:52	1.279
@@ -8,10 +8,11 @@
 #ifndef PA_REQUEST_H
 #define PA_REQUEST_H
 
-#define IDENT_PA_REQUEST_H "$Id: pa_request.h,v 1.276 2026/09/26 17:41:10 moko Exp $"
+#define IDENT_PA_REQUEST_H "$Id: pa_request.h,v 1.279 2026/09/29 02:56:52 moko Exp $"
 
 #include "pa_pool.h"
 #include "pa_hash.h"
+#include "pa_file.h"
 #include "pa_wcontext.h"
 #include "pa_value.h"
 #include "pa_vhash.h"
@@ -251,6 +252,12 @@ public:
 		anti_endless_execute_recursion--;
 	}
 
+	/// take the recovery reserve back if recursion limit is far enough
+	void recursion_limit_try_restore() {
+		if(execute_recursion_limit>pa_execute_recursion_limit && anti_endless_execute_recursion<pa_execute_recursion_limit/2)
+			execute_recursion_limit=pa_execute_recursion_limit;
+	}
+
 	///
 	void use_file_directly(const String& file_spec, bool fail_on_file_absence=true, bool with_auto_p=false);
 
@@ -296,7 +303,10 @@ public:
 	/// returns relative to @a path  path to @a file 
 	const String& relative(const char* apath, const String& relative_name);
 
-	const String& full_disk_path(const String& relative_name);
+	/// disk path of a file name; a uri of another scheme is returned as is if allowed, otherwise throws
+	const String& full_disk_path(const String& relative_name, uint allowed=0);
+	/// full_disk_path of a real file on disk, which does not throw: 0 for a uri or a remote or invalid file:// one
+	const String* real_disk_path(const String& name);
 
 	/// returns the mime type of 'user_file_name'
 	const String& mime_type_of(const String* file_name);
@@ -450,7 +460,7 @@ class Request_context_saver {
 
 	/// execution stack
 	size_t stack;
-	uint anti_endless_execute_recursion;
+	int anti_endless_execute_recursion;
 	/// contexts
 	VMethodFrame* method_frame;
 	Value* rcontext;