@inetafrica/open-claudia 2.2.16 → 2.2.18

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## v2.2.18
+- Fix the legacy Telegram send/edit path so replies default to Telegram HTML parse mode and go through the shared formatter, preventing raw `<b>`, `<a>`, and related tags from leaking in chat.
+- Preserve safe Telegram HTML tags before Markdown conversion, so underscores inside link URLs such as Higgsfield `wan2_2_video` are not misread as italics and do not break rendered links.
+
+## v2.2.17
+- Telegram output now uses `parse_mode: "HTML"` instead of legacy Markdown. The Telegram adapter normalizes both model-authored Telegram HTML and ordinary Markdown/CommonMark into Telegram's safe HTML subset before sending, so `<b>...</b>`, `**bold**`, backticks, links, headings, code blocks, strikethrough, and spoilers render cleanly instead of leaking literal markup or being rejected by Telegram. Messages still fall back to plain text if Telegram rejects the markup.
+- Updated the Telegram system prompt to ask agents for short mobile-readable Telegram HTML (`<b>`, `<code>`, `<pre>`, `<a>`) with bullet-style layout. Relay sends and slash-command responses now use the same HTML parse mode as normal assistant replies.
+
 ## v2.2.16
 - New `/compactwindow` slash command (alias `/autocompact`) lets each user override the auto-compact token threshold from chat instead of editing `AUTO_COMPACT_TOKENS` in `.env` and restarting. Quick-pick buttons for 200k / 300k / 380k / 500k / Off / Default, or free-form `/compactwindow 250k` / `/compactwindow 0.5m` / `/compactwindow off` / `/compactwindow default`. Stored per-user as `settings.compactWindow` (persists across restarts via `state.json`); `null` falls back to the env default, `0` disables auto-compact entirely (manual `/compact` still works). `/status` now reports the effective window, and `/usage`'s "context is large" tip reflects the user's override.
 

package/bot-agent.js

@@ -6,6 +6,7 @@ const https = require("https");
 const cron = require("node-cron");
 const Vault = require("./vault");
 const CONFIG_DIR = require("./config-dir");
+const { telegramHtml } = require("./channels/telegram/format");
 
 // ── Graceful shutdown & error handling ─────────────────────────────
 process.on("SIGINT", () => process.exit(0));
@@ -653,14 +654,17 @@ function projectKeyboard() {
 }
 
 async function send(text, opts = {}) {
+  const parseMode = opts.parseMode || "HTML";
+  const body = parseMode === "HTML" ? telegramHtml(text) : text;
+  const fallbackBody = String(text ?? "");
   const o = {};
-  if (opts.parseMode) o.parse_mode = opts.parseMode;
+  if (parseMode) o.parse_mode = parseMode;
   if (opts.keyboard) o.reply_markup = opts.keyboard;
   if (opts.replyTo) o.reply_to_message_id = opts.replyTo;
 
   for (let attempt = 0; attempt < 3; attempt++) {
     try {
-      const msg = await bot.sendMessage(CHAT_ID, text, o);
+      const msg = await bot.sendMessage(CHAT_ID, body, o);
       return msg.message_id;
     } catch (e) {
       const errMsg = e.message || "";
@@ -680,10 +684,17 @@ async function send(text, opts = {}) {
         continue;
       }
 
-      // Parse mode failed — retry without it
-      if (opts.parseMode && o.parse_mode) {
+      // Parse mode failed — retry once as plain text, but do not leak raw HTML tags.
+      if (parseMode && o.parse_mode) {
+        console.error("Send parse-mode failed, retrying plain text:", errMsg);
         delete o.parse_mode;
-        continue;
+        try {
+          const msg = await bot.sendMessage(CHAT_ID, fallbackBody, o);
+          return msg.message_id;
+        } catch (plainErr) {
+          console.error("Send plain-text fallback error:", plainErr.message || plainErr);
+          return null;
+        }
       }
 
       console.error("Send error:", errMsg);
@@ -695,16 +706,28 @@ async function send(text, opts = {}) {
 }
 
 async function editMessage(messageId, text, opts = {}) {
+  const parseMode = opts.parseMode || "HTML";
+  const body = parseMode === "HTML" ? telegramHtml(text) : text;
+  const fallbackBody = String(text ?? "");
   try {
     const o = { chat_id: CHAT_ID, message_id: messageId };
+    if (parseMode) o.parse_mode = parseMode;
     if (opts.keyboard) o.reply_markup = opts.keyboard;
-    await bot.editMessageText(text, o);
+    await bot.editMessageText(body, o);
   } catch (e) {
     const errMsg = e.message || "";
     // Rate limited — skip this update (next interval will catch up)
     if (errMsg.includes("retry after")) return;
     // Message unchanged — ignore
     if (errMsg.includes("message is not modified")) return;
+    if (parseMode) {
+      try {
+        const fallback = { chat_id: CHAT_ID, message_id: messageId };
+        if (opts.keyboard) fallback.reply_markup = opts.keyboard;
+        await bot.editMessageText(fallbackBody, fallback);
+        return;
+      } catch (e2) {}
+    }
     // Log anything unexpected
     if (!errMsg.includes("message to edit not found")) {
       console.error("Edit error:", errMsg);

package/channels/telegram/adapter.js

@@ -10,6 +10,7 @@ const TelegramBot = require("node-telegram-bot-api");
 const { TEMP_DIR, FILES_DIR, CONFIG_DIR } = require("../../core/config");
 const { canonicalForChannel } = require("../../core/identity");
 const { portableToInlineKeyboard } = require("../types");
+const { telegramHtml } = require("./format");
 
 class TelegramAdapter {
   constructor({ id = "telegram", token, ownerChatId, chatIds }) {
@@ -204,6 +205,7 @@ class TelegramAdapter {
 
   async send(channelId, text, opts = {}) {
     const o = {};
+    const body = opts.parseMode === "HTML" ? telegramHtml(text) : text;
     if (opts.parseMode) o.parse_mode = opts.parseMode;
     const kb = this._normalizeKeyboard(opts.keyboard);
     if (kb) o.reply_markup = kb;
@@ -211,7 +213,7 @@ class TelegramAdapter {
 
     for (let attempt = 0; attempt < 3; attempt++) {
       try {
-        const msg = await this.bot.sendMessage(channelId, text, o);
+        const msg = await this.bot.sendMessage(channelId, body, o);
         return msg.message_id;
       } catch (e) {
         const errMsg = e.message || "";
@@ -239,13 +241,14 @@ class TelegramAdapter {
   }
 
   async edit(channelId, messageId, text, opts = {}) {
+    const body = opts.parseMode === "HTML" ? telegramHtml(text) : text;
     const o = { chat_id: channelId, message_id: messageId };
     if (opts.parseMode) o.parse_mode = opts.parseMode;
     const kb = this._normalizeKeyboard(opts.keyboard);
     if (kb) o.reply_markup = kb;
 
     try {
-      await this.bot.editMessageText(text, o);
+      await this.bot.editMessageText(body, o);
     } catch (e) {
       const errMsg = e.message || "";
       if (errMsg.includes("retry after")) return;

package/channels/telegram/format.js

@@ -1,7 +1,18 @@
-// Telegram MarkdownV1 quirks: single-asterisk bold, single-underscore
-// italic, backticks for code. Most callers send `parseMode: "Markdown"`
-// strings already authored for Telegram, so this module is mostly a
-// pass-through with a couple of helpers.
+// Telegram formatting helpers.
+//
+// Telegram's legacy Markdown parser is too fragile for LLM output:
+// CommonMark `**bold**`, underscores in identifiers, unescaped dots in
+// MarkdownV2, and angle brackets in logs all commonly make Telegram reject
+// the message or render markup literally. The bot now sends Telegram HTML and
+// normalizes both model-authored Telegram HTML and ordinary Markdown into the
+// safe subset Telegram accepts.
+
+function escapeHtml(text) {
+  return String(text || "")
+    .replace(/&/g, "&")
+    .replace(/</g, "&lt;")
+    .replace(/>/g, "&gt;");
+}
 
 function stripMarkdown(text) {
   return String(text || "")
@@ -9,4 +20,94 @@ function stripMarkdown(text) {
     .replace(/\[([^\]]+)\]\([^)]+\)/g, "$1");
 }
 
-module.exports = { stripMarkdown };
+function stashCode(text) {
+  const blocks = [];
+  const stash = (html) => {
+    const token = `\u0000OCTGCODE${blocks.length}\u0000`;
+    blocks.push(html);
+    return token;
+  };
+
+  let out = String(text || "").replace(/```(?:[^\n`]*)\n?([\s\S]*?)```/g, (_, code) => {
+    return stash(`<pre>${escapeHtml(code.trimEnd())}</pre>`);
+  });
+
+  out = out.replace(/`([^`\n]+)`/g, (_, code) => {
+    return stash(`<code>${escapeHtml(code)}</code>`);
+  });
+
+  return { text: out, blocks };
+}
+
+function stashAllowedHtmlTags(text) {
+  const tags = [];
+  const stash = (html) => {
+    const token = `\u0000OCTGHTML${tags.length}\u0000`;
+    tags.push(html);
+    return token;
+  };
+  let out = text;
+
+  // Hide model-authored Telegram HTML tags from Markdown conversion. This keeps
+  // underscores in hrefs such as wan2_2_video from becoming bogus <i> tags.
+  for (const tag of ["b", "strong", "i", "em", "u", "s", "strike", "del", "code", "pre", "blockquote"]) {
+    const open = new RegExp(`&lt;${tag}&gt;`, "gi");
+    const close = new RegExp(`&lt;/${tag}&gt;`, "gi");
+    out = out.replace(open, () => stash(`<${tag}>`)).replace(close, () => stash(`</${tag}>`));
+  }
+
+  out = out
+    .replace(/&lt;span class="tg-spoiler"&gt;/gi, () => stash('<span class="tg-spoiler">'))
+    .replace(/&lt;\/span&gt;/gi, () => stash("</span>"));
+
+  out = out.replace(/&lt;a href="([^"<>]+)"&gt;/gi, (_, href) => {
+    if (!/^(https?:|mailto:|tg:)/i.test(href)) return "";
+    return stash(`<a href="${href}">`);
+  }).replace(/&lt;\/a&gt;/gi, () => stash("</a>"));
+
+  return { text: out, tags };
+}
+
+function convertMarkdownToHtml(text) {
+  let out = text;
+
+  // Markdown links: [label](https://example.com)
+  out = out.replace(/\[([^\]\n]+)\]\((https?:\/\/[^\s)]+)\)/g, (_, label, url) => {
+    return `<a href="${url}">${label}</a>`;
+  });
+
+  // Headings become compact bold labels instead of literal # noise.
+  out = out.replace(/^\s{0,3}#{1,6}\s+(.+)$/gm, (_, title) => `<b>${title}</b>`);
+
+  // Bold. Handle CommonMark first, then Telegram Markdown v1 style.
+  out = out.replace(/\*\*([^*\n][\s\S]*?[^*\n])\*\*/g, "<b>$1</b>");
+  out = out.replace(/(?<!\*)\*([^*\n]+)\*(?!\*)/g, "<b>$1</b>");
+
+  // Italic. Keep conservative to avoid mangling snake_case identifiers.
+  out = out.replace(/(?<!_)_([^_\n]+)_(?!_)/g, "<i>$1</i>");
+
+  // Strikethrough and Telegram spoiler syntax.
+  out = out.replace(/~~([^~\n]+)~~/g, "<s>$1</s>");
+  out = out.replace(/\|\|([^|\n]+)\|\|/g, '<span class="tg-spoiler">$1</span>');
+
+  return out;
+}
+
+function telegramHtml(text) {
+  const { text: withoutCode, blocks } = stashCode(text);
+  let out = escapeHtml(withoutCode);
+  const { text: withoutHtmlTags, tags } = stashAllowedHtmlTags(out);
+  out = convertMarkdownToHtml(withoutHtmlTags);
+
+  tags.forEach((html, i) => {
+    out = out.replace(`\u0000OCTGHTML${i}\u0000`, html);
+  });
+
+  blocks.forEach((html, i) => {
+    out = out.replace(`\u0000OCTGCODE${i}\u0000`, html);
+  });
+
+  return out;
+}
+
+module.exports = { escapeHtml, stripMarkdown, telegramHtml };

package/core/handlers.js

@@ -795,7 +795,7 @@ register({
   handler: async (env) => {
     if (!authorized(env)) return;
     await send("Bot mode: *direct* (default)\n\nSwitch to agent mode for non-blocking execution.\nIn agent mode, heavy tasks run in the background and you can keep chatting.", {
-      parseMode: "Markdown",
+      parseMode: "HTML",
       keyboard: { inline_keyboard: [[{ text: "Switch to Agent Mode", callback_data: "mode:agent" }]] },
     });
   },
@@ -886,7 +886,7 @@ register({
         lines.push(`\nTip: context is large. The bot auto-compacts after the next reply at ${fmt(threshold)} tokens (/compactwindow); /compact does it now.`);
       }
     }
-    send(lines.join("\n"), { parseMode: "Markdown" });
+    send(lines.join("\n"), { parseMode: "HTML" });
   },
 });
 

package/core/relay.js

@@ -35,7 +35,7 @@ async function send({ text, target, from = null, kind = "relay" }) {
   let messageId = null;
   let errorMsg = null;
   try {
-    const sendOpts = adapter.type === "telegram" ? { parseMode: "Markdown" } : {};
+    const sendOpts = adapter.type === "telegram" ? { parseMode: "HTML" } : {};
     const result = await adapter.send(resolved.channelId, String(text), sendOpts);
     if (typeof result === "object" && result && "messageId" in result) { messageId = result.messageId; ok = !!messageId; }
     else { messageId = result; ok = !!result; }

package/core/runner.js

@@ -22,9 +22,9 @@ const {
 const { getClaudeOAuthToken, claudeAuthRecoveryMessage, isClaudeAuthErrorText, claudeUsageLimitMessage, isClaudeUsageLimitText, runClaudeAuthStatusDiagnostic, claudeSubprocessEnv } = require("./auth-flow");
 const loopback = require("./loopback");
 
-function telegramMarkdownOpts(extra = {}) {
+function telegramHtmlOpts(extra = {}) {
   const adapter = currentAdapter();
-  return adapter?.type === "telegram" ? { ...extra, parseMode: "Markdown" } : extra;
+  return adapter?.type === "telegram" ? { ...extra, parseMode: "HTML" } : extra;
 }
 
 function chatEnvOverlay() {
@@ -476,9 +476,9 @@ async function runClaude(prompt, cwd, replyToMsgId, opts = {}) {
       const display = formatProgress(assistantText, toolUses, currentTool, elapsed, currentToolDetail);
       if (display && display !== lastUpdate) {
         if (!state.statusMessageId && assistantText) {
-          state.statusMessageId = await send(display.length > 4000 ? display.slice(-4000) : display, telegramMarkdownOpts({ replyTo: replyToMsgId }));
+          state.statusMessageId = await send(display.length > 4000 ? display.slice(-4000) : display, telegramHtmlOpts({ replyTo: replyToMsgId }));
         } else if (state.statusMessageId) {
-          await editMessage(state.statusMessageId, display.length > 4000 ? display.slice(-4000) : display, telegramMarkdownOpts());
+          await editMessage(state.statusMessageId, display.length > 4000 ? display.slice(-4000) : display, telegramHtmlOpts());
         }
         lastUpdate = display;
       }
@@ -665,12 +665,12 @@ async function runClaude(prompt, cwd, replyToMsgId, opts = {}) {
       const firstChunk = chunks[0];
 
       if (state.statusMessageId && chunks.length === 1) {
-        await editMessage(state.statusMessageId, firstChunk, telegramMarkdownOpts());
+        await editMessage(state.statusMessageId, firstChunk, telegramHtmlOpts());
       } else {
-        const sent = await send(firstChunk, telegramMarkdownOpts({ replyTo: replyToMsgId }));
+        const sent = await send(firstChunk, telegramHtmlOpts({ replyTo: replyToMsgId }));
         if (!sent) await send(firstChunk);
         for (let i = 1; i < chunks.length; i++) {
-          await send(chunks[i], telegramMarkdownOpts());
+          await send(chunks[i], telegramHtmlOpts());
         }
       }
       if (code !== 0 && code !== null) await send(`Exit code: ${code}`);

package/core/system-prompt.js

@@ -78,28 +78,28 @@ function buildSystemPrompt() {
 ## Telegram formatting
 Telegram is mobile-first and narrow. Optimize for readability in a small chat bubble.
 
-Use Telegram Markdown v1 only:
-- Bold labels with single asterisks: *Status:* / *Done:* / *Blocked:* / *Next:*
-- Italic with single underscores only when genuinely useful.
-- Inline code with backticks only for commands, file paths, IDs, short field names, and exact errors.
-- Fenced code blocks only for short commands or snippets. Do not paste long logs; save/send a file instead.
+Use Telegram HTML, not raw Markdown:
+- Bold labels with <b>Status:</b> / <b>Done:</b> / <b>Blocked:</b> / <b>Next:</b>
+- Italic with <i>...</i> only when genuinely useful.
+- Inline code with <code>...</code> only for commands, file paths, IDs, short field names, and exact errors.
+- Code blocks with <pre>...</pre> only for short commands or snippets. Do not paste long logs; save/send a file instead.
+- Links may use <a href="https://example.com">label</a>, or just paste the URL.
 
 Avoid formatting that renders badly or noisily in Telegram:
 - No Markdown tables.
 - No Markdown headings like #, ##, ###.
-- No CommonMark bold like **bold**; use *bold*.
-- No Markdown links like [text](url); use plain URLs when needed.
-- Do not wrap ordinary business words in backticks or quote marks. For example, write Payments completed, not \`Payments\` completed or 'Payments' completed.
+- No raw **bold** / *bold* as your preferred output, even though the bot has a fallback converter.
+- Do not wrap ordinary business words in backticks, <code>, or quote marks. For example, write Payments completed, not <code>Payments</code> completed or 'Payments' completed.
 - Avoid large paragraphs. Use short sections, blank lines, and 3-7 concise bullets.
 
 Good Telegram pattern:
-*Status:* CRM sync is still running cleanly.
+<b>Status:</b> CRM sync is still running cleanly.
 
-- Bills and Calls completed.
-- Leads completed with 20 rows.
-- Payments advanced to 2026-05-17 10:50.
+• Bills and Calls completed.
+• Leads completed with 20 rows.
+• Payments advanced to <code>2026-05-17 10:50</code>.
 
-*Issue:* JSON parse error after Retention. I’m checking that stream next.
+<b>Issue:</b> JSON parse error after Retention. I’m checking that stream next.
 `
     : adapter?.type === "kazee"
       ? `

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inetafrica/open-claudia",
-  "version": "2.2.16",
+  "version": "2.2.18",
   "description": "Your always-on AI coding assistant — Claude Code, Cursor Agent, and OpenAI Codex via Telegram or Kazee Chat",
   "main": "bot.js",
   "bin": {