omnius 1.0.170 → 1.0.172

package/dist/index.js

@@ -546736,14 +546736,30 @@ function estimateTokens2(text) {
 function normalizeSignalContent(content) {
   return content.replace(/\r\n/g, "\n").split("\n").map((line) => line.trimEnd()).join("\n").trim();
 }
+function urlSpanAt(text, index) {
+  URL_RE.lastIndex = 0;
+  for (const match of text.matchAll(URL_RE)) {
+    const start2 = match.index ?? 0;
+    const end = start2 + match[0].length;
+    if (start2 < index && index < end)
+      return { start: start2, end };
+  }
+  return null;
+}
 function truncateText2(text, maxChars) {
   if (text.length <= maxChars)
     return { text, truncated: false };
   if (maxChars <= 40)
     return { text: text.slice(0, maxChars), truncated: true };
+  const suffix = CONTEXT_FABRIC_TRUNCATION_SUFFIX;
+  let cutIndex = maxChars - suffix.length;
+  const urlSpan = urlSpanAt(text, cutIndex);
+  if (urlSpan) {
+    cutIndex = urlSpan.start;
+  }
+  const prefix = text.slice(0, Math.max(0, cutIndex)).trimEnd();
   return {
-    text: `${text.slice(0, maxChars - 36).trimEnd()}
-... [truncated by context fabric]`,
+    text: `${prefix}${suffix}`,
     truncated: true
   };
 }
@@ -546812,7 +546828,7 @@ function signalFromBlock(kind, source, content, options2 = {}) {
     metadata: options2.metadata
   };
 }
-var KIND_ORDER, KIND_LABELS, DEFAULT_KIND_CHAR_BUDGET, ContextLedger, ContextFrameBuilder;
+var KIND_ORDER, KIND_LABELS, DEFAULT_KIND_CHAR_BUDGET, URL_RE, CONTEXT_FABRIC_TRUNCATION_SUFFIX, ContextLedger, ContextFrameBuilder;
 var init_context_fabric = __esm({
   "packages/orchestrator/dist/context-fabric.js"() {
     "use strict";
@@ -546864,6 +546880,8 @@ var init_context_fabric = __esm({
       environment: 900,
       compaction_summary: 1200
     };
+    URL_RE = /\bhttps?:\/\/[^\s<>"'()[\]{}]+/gi;
+    CONTEXT_FABRIC_TRUNCATION_SUFFIX = "\n... [truncated by context fabric]";
     ContextLedger = class {
       signals = /* @__PURE__ */ new Map();
       sequence = 0;
@@ -558648,7 +558666,7 @@ Actions: (1) list_directory on the parent directory to see what's there, (2) Che
         const lines = output.split("\n");
         const { foldLineThreshold, foldHeadLines, foldTailLines } = this.contextLimits();
         if (lines.length <= foldLineThreshold) {
-          return output.slice(0, maxChars) + "\n...(truncated)";
+          return this.truncateTextWithoutCuttingUrl(output, maxChars, "\n...(truncated)");
         }
         const headLines = foldHeadLines;
         const tailLines = foldTailLines;
@@ -558661,10 +558679,27 @@ Actions: (1) list_directory on the parent directory to see what's there, (2) Che
 
 ${tail}`;
         if (folded.length > maxChars) {
-          return folded.slice(0, maxChars) + "\n...(truncated)";
+          return this.truncateTextWithoutCuttingUrl(folded, maxChars, "\n...(truncated)");
         }
         return folded;
       }
+      truncateTextWithoutCuttingUrl(text, maxChars, suffix = "...") {
+        if (text.length <= maxChars)
+          return text;
+        if (maxChars <= suffix.length)
+          return text.slice(0, maxChars);
+        let cut = maxChars - suffix.length;
+        const urlRe = /\bhttps?:\/\/[^\s<>"'()[\]{}]+/gi;
+        for (const match of text.matchAll(urlRe)) {
+          const start2 = match.index ?? 0;
+          const end = start2 + match[0].length;
+          if (start2 < cut && cut < end) {
+            cut = start2;
+            break;
+          }
+        }
+        return `${text.slice(0, Math.max(0, cut)).trimEnd()}${suffix}`;
+      }
       async appendInjectedUserMessage(userMsg, messages2, turn) {
         const imagePattern = /\[IMAGE_BASE64:([^:]+):([^\]]+)\]/;
         const imgMatch = userMsg.match(imagePattern);
@@ -592291,7 +592326,7 @@ function extractMediaReferences(text) {
     const offset = match[0].indexOf("MEDIA:");
     addCandidate(value2, match[0].slice(offset), match.index + offset, match.index + match[0].length);
   }
-  for (const match of matchAll(URL_RE, text)) {
+  for (const match of matchAll(URL_RE2, text)) {
     const original = trimTrailingPunctuation(match[0]);
     if (original.length !== match[0].length) {
       addCandidate(original, original, match.index, match.index + original.length);
@@ -592415,7 +592450,7 @@ function decodeUri(value2) {
 function trimTrailingPunctuation(value2) {
   return value2.replace(/[),.;:!?]+$/, "");
 }
-var IMAGE_EXT, AUDIO_EXT, VIDEO_EXT, DOC_EXT, MEDIA_DIRECTIVE_RE, AUDIO_AS_VOICE_RE, MARKDOWN_IMAGE_RE, HTML_IMG_RE, URL_RE, LOCAL_PATH_RE;
+var IMAGE_EXT, AUDIO_EXT, VIDEO_EXT, DOC_EXT, MEDIA_DIRECTIVE_RE, AUDIO_AS_VOICE_RE, MARKDOWN_IMAGE_RE, HTML_IMG_RE, URL_RE2, LOCAL_PATH_RE;
 var init_media_routing = __esm({
   "packages/cli/src/tui/media-routing.ts"() {
     "use strict";
@@ -592447,7 +592482,7 @@ var init_media_routing = __esm({
     AUDIO_AS_VOICE_RE = /\[\[audio_as_voice\]\]/gi;
     MARKDOWN_IMAGE_RE = /!\[[^\]]*]\(([^)\s]+)(?:\s+"[^"]*")?\)/g;
     HTML_IMG_RE = /<img\b[^>]*\bsrc\s*=\s*["']([^"']+)["'][^>]*>/gi;
-    URL_RE = /\bhttps?:\/\/[^\s<>"')]+/gi;
+    URL_RE2 = /\bhttps?:\/\/[^\s<>"')]+/gi;
     LOCAL_PATH_RE = /(?:^|[\s([])((?:~|\/)[^\s<>"')\]]+\.(?:png|jpe?g|webp|gif|bmp|tiff?|svg|wav|mp3|ogg|oga|opus|m4a|flac|aac|mp4|mov|mkv|webm|avi|m4v|pdf|txt|md|markdown|csv|tsv|jsonl?|xlsx?|docx?|pptx?|html?|xml|zip|tar|gz))(?:$|[\s),.\]])/gim;
   }
 });
@@ -615360,6 +615395,23 @@ import { existsSync as existsSync109, readFileSync as readFileSync87, readdirSyn
 import { join as join122, basename as basename24 } from "node:path";
 import { execSync as execSync54 } from "node:child_process";
 import { homedir as homedir42 } from "node:os";
+function projectContextUrlSpanAt(text, index) {
+  PROJECT_CONTEXT_URL_RE.lastIndex = 0;
+  for (const match of text.matchAll(PROJECT_CONTEXT_URL_RE)) {
+    const start2 = match.index ?? 0;
+    const end = start2 + match[0].length;
+    if (start2 < index && index < end) return { start: start2, end };
+  }
+  return null;
+}
+function truncateProjectContextText(text, maxChars, suffix = "...") {
+  if (text.length <= maxChars) return text;
+  if (maxChars <= suffix.length) return text.slice(0, maxChars);
+  let cut = maxChars - suffix.length;
+  const span = projectContextUrlSpanAt(text, cut);
+  if (span) cut = span.start;
+  return `${text.slice(0, Math.max(0, cut)).trimEnd()}${suffix}`;
+}
 function getModelTier(modelName) {
   const m2 = modelName.toLowerCase();
   const sizeMatch = m2.match(/\b(\d+)b\b/);
@@ -615478,7 +615530,7 @@ function loadMemoryContext(repoRoot) {
     if (sorted.length === 0) continue;
     lines.push(`[${bucketKey}]`);
     for (const e2 of sorted) {
-      lines.push(`  ${e2.key}: ${e2.value.slice(0, 200)}`);
+      lines.push(`  ${e2.key}: ${truncateProjectContextText(e2.value, 200, "")}`);
     }
   }
   return lines.join("\n");
@@ -615491,10 +615543,10 @@ function loadSessionHistory2(repoRoot) {
     const status = s2.completed ? "completed" : "incomplete";
     const date = s2.startedAt.split("T")[0];
     const cleanTask = cleanForStorage(s2.task) || s2.task;
-    lines.push(`- [${date}] ${cleanTask.slice(0, 80)} (${status}, ${s2.turns ?? 0} turns)`);
+    lines.push(`- [${date}] ${truncateProjectContextText(cleanTask, 80, "")} (${status}, ${s2.turns ?? 0} turns)`);
     if (s2.summary) {
       const cleanSummary = cleanForStorage(s2.summary) || s2.summary;
-      lines.push(`  Summary: ${cleanSummary.slice(0, 120)}`);
+      lines.push(`  Summary: ${truncateProjectContextText(cleanSummary, 120, "")}`);
     }
   }
   const sessionCtx = loadSessionContext(repoRoot);
@@ -615506,8 +615558,8 @@ function loadSessionHistory2(repoRoot) {
       const user = cleanForStorage(entry.task) || entry.task;
       const assistant = cleanForStorage(entry.assistantResponse || entry.summary) || entry.assistantResponse || entry.summary;
       if (!assistant) continue;
-      lines.push(`- User: ${user.slice(0, 120)}`);
-      lines.push(`  Assistant: ${assistant.slice(0, 160)}`);
+      lines.push(`- User: ${truncateProjectContextText(user, 120, "")}`);
+      lines.push(`  Assistant: ${truncateProjectContextText(assistant, 160, "")}`);
     }
   }
   return lines.length > 1 ? lines.join("\n") : "";
@@ -615631,7 +615683,7 @@ function loadCustomToolsContext(repoRoot) {
       const tested = tool.qualityGate?.lastTest?.testedAt?.split("T")[0] ?? "passed";
       const schema = tool.qualityGate?.lastTest?.schemaValidation?.status;
       const bits = [
-        `- ${tool.name} v${tool.version ?? 1}: ${String(tool.description ?? "").slice(0, 140)}`,
+        `- ${tool.name} v${tool.version ?? 1}: ${truncateProjectContextText(String(tool.description ?? ""), 140, "")}`,
         `docs=${tool.docsPath ?? "missing"}`,
         existsSync109(indexPath) ? `index=${indexPath}` : "",
         `test=${tested}${schema ? `, schema=${schema}` : ""}`,
@@ -615715,7 +615767,7 @@ ${ctx3.gitInfo}`);
     } else if (modelTier === "medium" && ctx3.projectMap.length > 2e3) {
       sections.push(`## Project Map (truncated)
 
-${ctx3.projectMap.slice(0, 2e3)}
+${truncateProjectContextText(ctx3.projectMap, 2e3, "")}
 ...(use find_files/list_directory for full listing)`);
     } else {
       sections.push(`## Project Map
@@ -615772,12 +615824,14 @@ These patterns have been repeated 3+ times. Consider using create_tool to automa
   }
   return sections.join("\n\n");
 }
+var PROJECT_CONTEXT_URL_RE;
 var init_project_context = __esm({
   "packages/cli/src/tui/project-context.ts"() {
     "use strict";
     init_dist8();
     init_omnius_directory();
     init_dist5();
+    PROJECT_CONTEXT_URL_RE = /\bhttps?:\/\/[^\s<>"'()[\]{}]+/gi;
   }
 });
 
@@ -627420,7 +627474,7 @@ function parseTelegramReflectionFollowupDecision(text) {
   }
 }
 function convertMarkdownToTelegramHTML(md) {
-  let html = md;
+  let html = normalizeTelegramOutboundLinks(md);
   html = html.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
   html = html.replace(
     /```[\w]*\n([\s\S]*?)```/g,
@@ -627440,6 +627494,31 @@ function convertMarkdownToTelegramHTML(md) {
 function escapeTelegramHTML(text) {
   return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
+function normalizeTelegramOutboundLinks(text) {
+  if (!text) return text;
+  return text.replace(
+    TELEGRAM_SPACED_URL_RE,
+    (match) => match.replace(/^(https?:\/\/)\s*/i, "$1").replace(/\s*\.\s*/g, ".").replace(/\s*:\s*(\d+)/g, ":$1")
+  );
+}
+function telegramUrlSpanAt(text, index) {
+  TELEGRAM_HTTP_URL_RE.lastIndex = 0;
+  for (const match of text.matchAll(TELEGRAM_HTTP_URL_RE)) {
+    const start2 = match.index ?? 0;
+    const end = start2 + match[0].length;
+    if (start2 < index && index < end) return { start: start2, end };
+  }
+  return null;
+}
+function truncateTelegramUrlSafe(text, maxLength, suffix = "...") {
+  const normalized = normalizeTelegramOutboundLinks(text);
+  if (normalized.length <= maxLength) return normalized;
+  if (maxLength <= suffix.length) return normalized.slice(0, maxLength);
+  let cut = maxLength - suffix.length;
+  const span = telegramUrlSpanAt(normalized, cut);
+  if (span) cut = span.start;
+  return `${normalized.slice(0, Math.max(0, cut)).trimEnd()}${suffix}`;
+}
 function splitTelegramMessageText(text, maxLength = 3900) {
   const trimmed = text.trim();
   if (!trimmed) return [];
@@ -627545,7 +627624,7 @@ function stripTelegramStuckSelfTalk(text) {
   return kept.join("\n\n");
 }
 function cleanTelegramVisibleReply(text, options2 = {}) {
-  const clean5 = stripTelegramHiddenThinking(text).trim();
+  const clean5 = normalizeTelegramOutboundLinks(stripTelegramHiddenThinking(text)).trim();
   if (!clean5) return "";
   if (options2.suppressPotentialNoReplyPrefix && isTelegramPotentialNoReplyPrefix(clean5)) return "";
   if (isTelegramInternalStatusText(clean5)) return "";
@@ -627586,16 +627665,14 @@ function dedupeTelegramVisibleReply(text) {
   return out.join(" ").trim();
 }
 function truncateTelegramContext(text, maxLength) {
-  const trimmed = text.trim();
+  const trimmed = normalizeTelegramOutboundLinks(text).trim();
   if (trimmed.length <= maxLength) return trimmed;
-  return `${trimmed.slice(0, Math.max(0, maxLength - 80)).trimEnd()}
-
-[Telegram context truncated; use tools for full detail.]`;
+  return truncateTelegramUrlSafe(trimmed, maxLength, "\n\n[Telegram context truncated; use tools for full detail.]");
 }
 function truncateTelegramContextLine(text, maxLength = TELEGRAM_CONTEXT_LINE_LIMIT) {
-  const compact3 = stripTelegramHiddenThinking(text).replace(/\s+/g, " ").trim();
+  const compact3 = normalizeTelegramOutboundLinks(stripTelegramHiddenThinking(text)).replace(/\s+/g, " ").trim();
   if (compact3.length <= maxLength) return compact3;
-  return `${compact3.slice(0, Math.max(0, maxLength - 3)).trimEnd()}...`;
+  return truncateTelegramUrlSafe(compact3, maxLength);
 }
 function telegramRegexEscape(text) {
   return text.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
@@ -628622,7 +628699,7 @@ function renderTelegramSubAgentError(username, error) {
   process.stdout.write(`    ${c3.dim("│")} ${c3.magenta("✘")} @${username}: ${c3.dim(preview)}
 `);
 }
-var TELEGRAM_TOOL_ACTION_GROUPS, TELEGRAM_TOOL_ACTION_GROUP, TELEGRAM_TOOL_MUTATING_GROUPS, DEFAULT_TELEGRAM_TOOL_GROUP_POLICY, TELEGRAM_TOOL_BUTTON_LABELS, TELEGRAM_SAFETY_PROMPT, ADMIN_DM_PROMPT, ADMIN_GROUP_PROMPT, TELEGRAM_PUBLIC_SOUL_PROFILE, TELEGRAM_PUBLIC_ORCHESTRATOR_CONTRACT, TELEGRAM_PUBLIC_MEMORY_SCOPE_CONTRACT, TELEGRAM_PUBLIC_VISION_STACK_CONTRACT, GROUP_REPLY_DISCRETION_PROMPT, TELEGRAM_CHAT_MODE_PROMPT, ADMIN_CHAT_PROFILE_PROMPT, TELEGRAM_ACTION_RESPONSE_CONTRACT, TELEGRAM_EXTERNAL_ACQUISITION_CONTRACT, TELEGRAM_INTERACTION_DECISION_RESPONSE_FORMAT, TELEGRAM_INTERACTION_DECISION_MINIMAL_SCHEMA, TELEGRAM_INTERACTION_DECISION_REPAIR_SCHEMA, TELEGRAM_CHAT_REPLY_RESPONSE_FORMAT, TELEGRAM_STUCK_SELF_TALK_PREFIXES, TELEGRAM_CHAT_HISTORY_LIMIT, TELEGRAM_CONTEXT_RECENT_DEFAULT, TELEGRAM_CONTEXT_LINE_LIMIT, TELEGRAM_CONTEXT_SAMPLE_LIMIT, TELEGRAM_MEMORY_CARD_LIMIT, TELEGRAM_MEMORY_NOTE_LIMIT, TELEGRAM_ASSOCIATIVE_FACT_LIMIT, TELEGRAM_ASSOCIATIVE_USER_FACT_LIMIT, TELEGRAM_ASSOCIATIVE_ACTION_LIMIT, TELEGRAM_ASSOCIATIVE_RELATION_LIMIT, TELEGRAM_MEMORY_STOPWORDS, TELEGRAM_MEMORY_GENERIC_QUERY_TOKENS, TELEGRAM_SUB_AGENT_BOUNDED_OPTIONS, TELEGRAM_SUB_AGENT_DEFAULT_LIMIT, TELEGRAM_SUB_AGENT_MAX_LIMIT, TELEGRAM_SUB_AGENT_BURST_CONTEXT_LIMIT, TELEGRAM_PUBLIC_HELP_COMMANDS2, TELEGRAM_REMINDER_SLASH_COMMANDS, TELEGRAM_REFLECTION_SLASH_COMMANDS, TELEGRAM_PUBLIC_BOT_COMMAND_NAMES, TELEGRAM_IMAGE_EXTENSIONS, MEDIA_CACHE_TTL_MS, TELEGRAM_CHANNEL_DMN_SWEEP_MS, TELEGRAM_CHANNEL_DMN_IDLE_AFTER_MS, TELEGRAM_CHANNEL_DMN_MIN_INTERVAL_MS, TELEGRAM_CHANNEL_DMN_MIN_MESSAGES, TELEGRAM_ALLOWED_UPDATES, TELEGRAM_PUBLIC_TOOL_QUOTAS, TelegramBridge;
+var TELEGRAM_TOOL_ACTION_GROUPS, TELEGRAM_TOOL_ACTION_GROUP, TELEGRAM_TOOL_MUTATING_GROUPS, DEFAULT_TELEGRAM_TOOL_GROUP_POLICY, TELEGRAM_TOOL_BUTTON_LABELS, TELEGRAM_SAFETY_PROMPT, ADMIN_DM_PROMPT, ADMIN_GROUP_PROMPT, TELEGRAM_PUBLIC_SOUL_PROFILE, TELEGRAM_PUBLIC_ORCHESTRATOR_CONTRACT, TELEGRAM_PUBLIC_MEMORY_SCOPE_CONTRACT, TELEGRAM_PUBLIC_VISION_STACK_CONTRACT, GROUP_REPLY_DISCRETION_PROMPT, TELEGRAM_CHAT_MODE_PROMPT, ADMIN_CHAT_PROFILE_PROMPT, TELEGRAM_ACTION_RESPONSE_CONTRACT, TELEGRAM_EXTERNAL_ACQUISITION_CONTRACT, TELEGRAM_LINK_INTEGRITY_CONTRACT, TELEGRAM_INTERACTION_DECISION_RESPONSE_FORMAT, TELEGRAM_INTERACTION_DECISION_MINIMAL_SCHEMA, TELEGRAM_INTERACTION_DECISION_REPAIR_SCHEMA, TELEGRAM_CHAT_REPLY_RESPONSE_FORMAT, TELEGRAM_SPACED_URL_RE, TELEGRAM_HTTP_URL_RE, TELEGRAM_STUCK_SELF_TALK_PREFIXES, TELEGRAM_CHAT_HISTORY_LIMIT, TELEGRAM_CONTEXT_RECENT_DEFAULT, TELEGRAM_CONTEXT_LINE_LIMIT, TELEGRAM_CONTEXT_SAMPLE_LIMIT, TELEGRAM_MEMORY_CARD_LIMIT, TELEGRAM_MEMORY_NOTE_LIMIT, TELEGRAM_ASSOCIATIVE_FACT_LIMIT, TELEGRAM_ASSOCIATIVE_USER_FACT_LIMIT, TELEGRAM_ASSOCIATIVE_ACTION_LIMIT, TELEGRAM_ASSOCIATIVE_RELATION_LIMIT, TELEGRAM_MEMORY_STOPWORDS, TELEGRAM_MEMORY_GENERIC_QUERY_TOKENS, TELEGRAM_SUB_AGENT_BOUNDED_OPTIONS, TELEGRAM_SUB_AGENT_DEFAULT_LIMIT, TELEGRAM_SUB_AGENT_MAX_LIMIT, TELEGRAM_SUB_AGENT_BURST_CONTEXT_LIMIT, TELEGRAM_PUBLIC_HELP_COMMANDS2, TELEGRAM_REMINDER_SLASH_COMMANDS, TELEGRAM_REFLECTION_SLASH_COMMANDS, TELEGRAM_PUBLIC_BOT_COMMAND_NAMES, TELEGRAM_IMAGE_EXTENSIONS, MEDIA_CACHE_TTL_MS, TELEGRAM_CHANNEL_DMN_SWEEP_MS, TELEGRAM_CHANNEL_DMN_IDLE_AFTER_MS, TELEGRAM_CHANNEL_DMN_MIN_INTERVAL_MS, TELEGRAM_CHANNEL_DMN_MIN_MESSAGES, TELEGRAM_ALLOWED_UPDATES, TELEGRAM_PUBLIC_TOOL_QUOTAS, TelegramBridge;
 var init_telegram_bridge = __esm({
   "packages/cli/src/tui/telegram-bridge.ts"() {
     "use strict";
@@ -628890,6 +628967,13 @@ External acquisition contract:
 - Treat repeated invalid downloads (saved HTML/JSON/login pages instead of the expected file type) as the same blocker; do not retry past a small bounded number of attempts.
 - The browser tool is for interactive web work; it does not save arbitrary rendered files to disk. For file acquisition, use the download/file tool and verify content-type + size before reporting success.
 - Report the exact blocker concisely and offer lawful alternatives (library hold, official store, summary/discussion if the user supplies an authorized copy).
+`.trim();
+    TELEGRAM_LINK_INTEGRITY_CONTRACT = `
+Telegram link integrity contract:
+- When sending public http(s) URLs, copy the URL exactly from source/tool output.
+- Never defang, space out, redact, or rewrite dots, slashes, host labels, or TLDs in normal public URLs.
+- Prefer Markdown links when helpful, but keep the href URL contiguous and parseable.
+- If you are uncertain a URL is real, say so or omit it instead of reconstructing a broken URL.
 `.trim();
     TELEGRAM_INTERACTION_DECISION_RESPONSE_FORMAT = {
       type: "json_object"
@@ -628914,6 +628998,8 @@ External acquisition contract:
         }
       }
     };
+    TELEGRAM_SPACED_URL_RE = /\bhttps?:\/\/\s*[A-Za-z0-9-]+(?:\s*\.\s*[A-Za-z0-9-]+)+(?:\s*:\s*\d+)?(?:[/?#][^\s<>"'()[\]{}]*)?/gi;
+    TELEGRAM_HTTP_URL_RE = /\bhttps?:\/\/[^\s<>"'()[\]{}]+/gi;
     TELEGRAM_STUCK_SELF_TALK_PREFIXES = [
       /^i'?ve been stuck for\b/i,
       /^i am (still |currently )?stuck\b/i,
@@ -630197,9 +630283,8 @@ ${message2}`)
         return reply;
       }
       quoteTelegramContextBlock(text, maxLength = 1800) {
-        const clean5 = stripTelegramHiddenThinking(text).trim();
-        const clipped = clean5.length > maxLength ? `${clean5.slice(0, Math.max(0, maxLength - 60)).trimEnd()}
-[reply context truncated]` : clean5;
+        const clean5 = normalizeTelegramOutboundLinks(stripTelegramHiddenThinking(text)).trim();
+        const clipped = clean5.length > maxLength ? truncateTelegramUrlSafe(clean5, maxLength, "\n[reply context truncated]") : clean5;
         return clipped.split(/\r?\n/).map((line) => `> ${line}`).join("\n");
       }
       buildTelegramCurrentReplyContext(sessionKey, msg) {
@@ -631587,7 +631672,7 @@ ${mediaContext}` : ""
       recordTelegramUserMessage(msg, mode, textOverride) {
         const sessionKey = this.sessionKeyForMessage(msg);
         const mediaSummary = summarizeTelegramMessageAttachments(msg);
-        const text = (textOverride ?? msg.text ?? "").trim() || mediaSummary || "[non-text Telegram message]";
+        const text = normalizeTelegramOutboundLinks((textOverride ?? msg.text ?? "").trim()) || mediaSummary || "[non-text Telegram message]";
         this.ensureTelegramConversationLoaded(sessionKey);
         const history = this.chatHistory.get(sessionKey) ?? [];
         const existing = Number.isFinite(msg.messageId) ? history.find(
@@ -631676,7 +631761,7 @@ ${mediaContext}` : ""
         this.saveTelegramConversationState(sessionKey);
       }
       recordTelegramAssistantMessage(msg, text, mode, options2 = {}) {
-        const clean5 = stripTelegramHiddenThinking(text).trim();
+        const clean5 = normalizeTelegramOutboundLinks(stripTelegramHiddenThinking(text)).trim();
         if (!clean5) return;
         const sessionKey = this.sessionKeyForMessage(msg);
         const entry = {
@@ -634269,7 +634354,8 @@ Todo/session id: ${sessionId}
 Profile: ${profile}
 Tool context: ${toolContext}
 ${chatLabel}`,
-          TELEGRAM_ACTION_RESPONSE_CONTRACT
+          TELEGRAM_ACTION_RESPONSE_CONTRACT,
+          TELEGRAM_LINK_INTEGRITY_CONTRACT
         ];
         sections.push(conversationStream);
         const sendTargetContext = this.buildTelegramSendTargetContext(msg, isAdminDM);
@@ -634638,10 +634724,11 @@ ${TELEGRAM_PUBLIC_ORCHESTRATOR_CONTRACT}`);
        * streamed content. Returns the message_id for subsequent edits.
        */
       async sendLiveMessage(chatId, initialText, replyToMessageId) {
+        const normalizedInitialText = normalizeTelegramOutboundLinks(initialText);
         try {
           const body = {
             chat_id: chatId,
-            text: initialText,
+            text: normalizedInitialText,
             parse_mode: "HTML"
           };
           const replyParameters = telegramReplyParameters(replyToMessageId);
@@ -634658,7 +634745,7 @@ ${TELEGRAM_PUBLIC_ORCHESTRATOR_CONTRACT}`);
           try {
             const body = {
               chat_id: chatId,
-              text: initialText
+              text: normalizedInitialText
             };
             const replyParameters = telegramReplyParameters(replyToMessageId);
             if (replyParameters) body["reply_parameters"] = replyParameters;
@@ -634693,7 +634780,8 @@ ${TELEGRAM_PUBLIC_ORCHESTRATOR_CONTRACT}`);
        * Handles rate limits and Telegram's "message is not modified" error silently.
        */
       async editLiveMessage(chatId, messageId, html) {
-        const truncated = html.length > 4e3 ? html.slice(0, 3950) + "\n\n<i>... (streaming)</i>" : html;
+        const normalizedHtml = normalizeTelegramOutboundLinks(html);
+        const truncated = normalizedHtml.length > 4e3 ? normalizedHtml.slice(0, 3950) + "\n\n<i>... (streaming)</i>" : normalizedHtml;
         try {
           const result = await this.apiCall("editMessageText", {
             chat_id: chatId,
@@ -634706,7 +634794,7 @@ ${TELEGRAM_PUBLIC_ORCHESTRATOR_CONTRACT}`);
           return true;
         } catch {
           try {
-            const plain = html.replace(/<[^>]+>/g, "");
+            const plain = normalizedHtml.replace(/<[^>]+>/g, "");
             const truncPlain = plain.length > 4e3 ? plain.slice(0, 3950) + "\n\n... (streaming)" : plain;
             const result = await this.apiCall("editMessageText", {
               chat_id: chatId,
@@ -635405,6 +635493,8 @@ ${TELEGRAM_PUBLIC_VISION_STACK_CONTRACT}`;
             role: "system",
             content: `${TELEGRAM_CHAT_MODE_PROMPT}
 
+${TELEGRAM_LINK_INTEGRITY_CONTRACT}
+
 ## Runtime Context
 
 ${runtime}
@@ -635730,6 +635820,8 @@ ${GROUP_REPLY_DISCRETION_PROMPT}` : "";
 
 ${TELEGRAM_ACTION_RESPONSE_CONTRACT}
 
+${TELEGRAM_LINK_INTEGRITY_CONTRACT}
+
 ${TELEGRAM_EXTERNAL_ACQUISITION_CONTRACT}
 
 ${reminderToolContract}
@@ -635742,6 +635834,7 @@ ${currentTelegramPrompt}`;
             "You have access to isolated per-chat memory (memory_write, memory_read, memory_search) scoped to this conversation.",
             "memory_search may use scope=group/current_chat for this group or scope=user with user_id/username for a participant in this same group. Other groups, admin chats, and private DMs are not accessible here.",
             "You can remember facts about users and retrieve them later. Durable associative memory in the prompt includes participant profiles, relationships, scoped facts, and prior actions retained across days, sessions, and Omnius updates. You also have web_search and web_fetch to look up information.",
+            TELEGRAM_LINK_INTEGRITY_CONTRACT,
             "If a user explicitly states a durable preference for reply cadence/order, call telegram_preference_set. Do not infer or classify reply-mode preferences from keywords, style, tone, or task type.",
             "You have the full scoped Telegram media-analysis stack by default: telegram_media_recent, image_read, ocr, ocr_image_advanced, vision, pdf_to_text, ocr_pdf, transcribe_file, video_understand, audio_analyze, and identity_memory. For complex textual imagery, screenshots, forms, scans, or dense labels, prefer ocr_image_advanced after resolving media with path='reply' or path='latest'.",
             formatIdentityMemoryContext(chatLabel || "Telegram private chat"),
@@ -638322,9 +638415,10 @@ ${text}`.trim());
         return result.messageId ?? null;
       }
       async sendMessageHTMLDetailed(chatId, html, replyToMessageId, options2 = {}) {
-        const extracted = extractMediaReferences(html);
+        const normalizedHtml = normalizeTelegramOutboundLinks(html);
+        const extracted = extractMediaReferences(normalizedHtml);
         const mediaRefs = this.filterTelegramMediaReferences(extracted.media, options2);
-        const sendHtml = extracted.text || (extracted.media.length > 0 ? "" : html);
+        const sendHtml = extracted.text || (extracted.media.length > 0 ? "" : normalizedHtml);
         let sentId = null;
         if (!sendHtml.trim()) {
           for (let idx = 0; idx < mediaRefs.length; idx++) {
@@ -638791,7 +638885,8 @@ Content-Type: ${mimeForPath(pathOrFileId, field === "photo" ? "image" : "video")
        * article carrying the message text Telegram should send to the guest chat.
        */
       async answerGuestQuery(guestQueryId, text, options2 = {}) {
-        const truncated = text.length > 4e3 ? text.slice(0, 3950) + "\n\n... (truncated)" : text;
+        const normalizedText = normalizeTelegramOutboundLinks(text);
+        const truncated = normalizedText.length > 4e3 ? normalizedText.slice(0, 3950) + "\n\n... (truncated)" : normalizedText;
         const inputMessageContent = {
           message_text: truncated
         };

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "omnius",
-  "version": "1.0.170",
+  "version": "1.0.172",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "omnius",
-      "version": "1.0.170",
+      "version": "1.0.172",
       "bundleDependencies": [
         "image-to-ascii"
       ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omnius",
-  "version": "1.0.170",
+  "version": "1.0.172",
   "description": "AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop",
   "type": "module",
   "main": "./dist/index.js",