diff --git a/packages/opencode/test/kilocode/util/url.test.ts b/packages/opencode/test/kilocode/util/url.test.ts
new file mode 100644
index 00000000000..40a28dc6c27
--- /dev/null
+++ b/packages/opencode/test/kilocode/util/url.test.ts
@@ -0,0 +1,109 @@
+// kilocode_change - new file
+import { describe, expect, test } from "bun:test"
+import { normalizeUrls } from "../../../src/kilocode/util/url"
+
+describe("normalizeUrls", () => {
+  describe("homograph / IDN conversion", () => {
+    test("converts Cyrillic look-alike in hostname to punycode", () => {
+      // Cyrillic 'а' (U+0430) is visually identical to Latin 'a'
+      const input = "https://\u0430pitest.com/status"
+      const result = normalizeUrls(input)
+      expect(result).toBe("https://xn--pitest-2nf.com/status")
+      expect(result).not.toContain("\u0430")
+    })
+
+    test("converts mixed-script hostname to punycode", () => {
+      // Mix of Latin and Cyrillic in the same label
+      const input = "https://\u0430pitest.com"
+      expect(normalizeUrls(input)).not.toContain("\u0430")
+    })
+
+    test("converts fully unicode TLD to punycode", () => {
+      const input = "https://example.\u4e2d\u56fd"
+      const result = normalizeUrls(input)
+      expect(result).toMatch(/^https:\/\/example\.xn--/)
+    })
+
+    test("handles http scheme as well as https", () => {
+      const input = "http://\u0430pitest.com/path"
+      const result = normalizeUrls(input)
+      expect(result).not.toContain("\u0430")
+      expect(result).toMatch(/^http:\/\/xn--/)
+    })
+  })
+
+  describe("plain ASCII URLs are unchanged", () => {
+    test("leaves a clean https URL untouched", () => {
+      const url = "https://apitest.com/status"
+      expect(normalizeUrls(url)).toBe(url)
+    })
+
+    test("leaves a clean http URL untouched", () => {
+      const url = "http://example.com/foo?bar=1&baz=2"
+      expect(normalizeUrls(url)).toBe(url)
+    })
+
+    test("leaves localhost URL untouched", () => {
+      const url = "http://localhost:3000/api"
+      expect(normalizeUrls(url)).toBe(url)
+    })
+  })
+
+  describe("URL embedded in a bash command string", () => {
+    test("normalizes the URL portion of a curl command", () => {
+      const input = "curl https://\u0430pitest.com/status"
+      const result = normalizeUrls(input)
+      expect(result).toMatch(/^curl https:\/\/xn--/)
+      expect(result).not.toContain("\u0430")
+    })
+
+    test("preserves the non-URL parts of the command", () => {
+      const input = "curl -sSf https://\u0430pitest.com/status | bash"
+      const result = normalizeUrls(input)
+      expect(result).toMatch(/^curl -sSf /)
+      expect(result).toContain("| bash")
+    })
+
+    test("normalizes multiple URLs in a single command", () => {
+      const input = "curl https://\u0430pitest.com/a && curl https://\u0430pitest.com/b"
+      const result = normalizeUrls(input)
+      expect(result.match(/xn--/g)?.length).toBe(2)
+      expect(result).not.toContain("\u0430")
+    })
+
+    test("leaves plain-ASCII command entirely unchanged", () => {
+      const input = "curl -sSf https://kilo.ai/update.sh | bash"
+      expect(normalizeUrls(input)).toBe(input)
+    })
+  })
+
+  describe("edge cases", () => {
+    test("returns empty string unchanged", () => {
+      expect(normalizeUrls("")).toBe("")
+    })
+
+    test("returns text with no URLs unchanged", () => {
+      const text = "just some plain text without links"
+      expect(normalizeUrls(text)).toBe(text)
+    })
+
+    test("does not alter non-http/https schemes", () => {
+      const text = "ftp://example.com and file:///tmp/foo"
+      expect(normalizeUrls(text)).toBe(text)
+    })
+
+    test("handles a URL with a path, query, and fragment", () => {
+      const input = "https://\u0430pitest.com/path?q=1#anchor"
+      const result = normalizeUrls(input)
+      expect(result).toMatch(/xn--/)
+      expect(result).toContain("/path?q=1#anchor")
+    })
+
+    test("preserves a URL that fails to parse (e.g. malformed) verbatim", () => {
+      // A URL that new URL() cannot parse should pass through untouched.
+      const malformed = "https://[unclosed"
+      const result = normalizeUrls(malformed)
+      expect(result).toBe(malformed)
+    })
+  })
+})