copillm 0.3.0 → 0.4.0

package/README.md

@@ -89,6 +89,10 @@ The **default account** is what every agent and the model endpoints use unless
 told otherwise. `copillm auth status` lists each account with its plan type and
 whether a credential is stored; tokens are never printed.
 
+If the daemon is already running when you `auth switch`, copillm reminds you to
+run `copillm restart` so the new default takes effect for the next agent launch.
+(`auth logout` stops the daemon for you, so it needs no restart.)
+
 Different accounts can be entitled to different models, so each account keeps
 its own model list.
 

package/dist/agentconfig/apply.js

@@ -1,4 +1,4 @@
-import { writeFileSecureAtomic } from "../config/fsSecurity.js";
+import { writeFilesSecureAtomic } from "../config/fsSecurity.js";
 import { loadAgentConfig } from "./load.js";
 import { planRender } from "./render.js";
 import { backupIfMismatch } from "./markerBlock.js";
@@ -22,13 +22,15 @@ export function applyAgentConfig(opts) {
         return { active: null, writes: [], envOverlay: {}, cliArgs: [], notes: [], sources: [], yolo: null };
     }
     const rendered = planRender(opts, load);
-    // Phase 2: write. By this point all validation passed and the renderer
-    // produced complete file bodies — failures here are IO errors, not user
-    // input problems.
+    // Phase 2: write. All validation passed and the renderer produced complete
+    // file bodies, so failures here are IO errors. Back up any user-edited
+    // targets first, then commit every file as one two-phase atomic batch: each
+    // file is staged to a temp path before any is renamed into place, so an IO
+    // failure mid-fan-out leaves nothing committed rather than a half-updated set.
     for (const write of rendered.writes) {
         backupIfMismatch(write.path, write.content);
-        writeFileSecureAtomic(write.path, write.content, write.mode);
     }
+    writeFilesSecureAtomic(rendered.writes);
     return {
         active: load.active,
         writes: rendered.writes,

package/dist/cli/auth/runAuth.js

@@ -227,10 +227,16 @@ export async function runAuthSwitch(opts, accountId) {
     try {
         assertValidAccountId(accountId);
         const index = switchDefaultAccount(accountId);
-        writeCommandOutput(opts, `Default account is now "${index.defaultAccount}".`, {
+        // A running daemon snapshots the default account at startup, so a switch
+        // only affects new agent launches after the daemon is restarted. (`auth
+        // logout` doesn't need this hint — it already stops the daemon.)
+        const daemonRunning = inspectLock().state === "running";
+        const hint = daemonRunning ? " Restart the daemon for this to take effect: copillm restart." : "";
+        writeCommandOutput(opts, `Default account is now "${index.defaultAccount}".${hint}`, {
             status: "ok",
             action: "switch",
-            default_account: index.defaultAccount
+            default_account: index.defaultAccount,
+            restart_required: daemonRunning
         });
     }
     catch (error) {

package/dist/cli/commands/daemon.js

@@ -1,4 +1,3 @@
-import { spawn } from "node:child_process";
 import { inspectStoredCredential } from "../../auth/credentials.js";
 import { loadConfig } from "../../config/config.js";
 import { getCopillmHome } from "../../config/home.js";
@@ -8,9 +7,8 @@ import { inspectLock, releaseLock } from "../../server/lock.js";
 import { buildCodexEnvBundle } from "../agentEnv.js";
 import { ensureAuthenticatedInteractive } from "../auth/ensure.js";
 import { computeUptimeSeconds, formatUptime, stopByPid } from "../daemon/lifecycle.js";
-import { probeHealth, readLiveLock, waitForDaemonReady, warnIfDebugRequestedButInactive } from "../daemon/probes.js";
+import { probeDebugEndpoint, probeHealth, readLiveLock, warnIfDebugRequestedButInactive } from "../daemon/probes.js";
 import { runDaemon } from "../daemon/runDaemon.js";
-import { daemonSpawnEnv } from "../daemon/spawnEnv.js";
 import { buildClaudeExportCommand } from "../integrations/claudeExport.js";
 import { formatStartBanner, formatStopHumanLine, displayHomePath } from "../integrations/banner.js";
 import { refreshCodexHome } from "../integrations/refreshCodex.js";
@@ -19,7 +17,8 @@ import { writeAuthStatusLine } from "../shared/backends.js";
 import { currentDebugLogPath, enableRuntimeDebug, getRootLogger, resolveCopillmDebug } from "../shared/debug.js";
 import { isDevModeActive } from "../shared/devMode.js";
 import { writeCommandOutput, writeHealthOutput } from "../shared/output.js";
-import { buildSelfSpawnCommand } from "../daemon/selfSpawn.js";
+import { spawnDetachedDaemon } from "../daemon/spawnDetached.js";
+import { resolveRestartDecision } from "../daemon/restart.js";
 export function register(program) {
     program
         .command("start")
@@ -79,55 +78,8 @@ export function register(program) {
                 });
                 return;
             }
-            const daemonCommand = buildSelfSpawnCommand("daemon");
-            if (debug) {
-                daemonCommand.args.push("--debug");
-            }
-            const child = spawn(daemonCommand.command, daemonCommand.args, {
-                detached: true,
-                stdio: "ignore",
-                env: daemonSpawnEnv(debug)
-            });
-            child.unref();
-            const started = await waitForDaemonReady(child.pid ?? null, 8_000);
-            if (!started) {
-                throw new Error("Detached daemon start timed out.");
-            }
-            const sharedDetached = await loadSharedStartContextIfNeeded(opts);
-            const codex = opts.codex === false ? null : await refreshCodexHome(started.port, opts.codexModel ?? null, sharedDetached);
-            const pi = opts.pi === false ? null : await refreshPiHome(started.port, sharedDetached);
-            const claude = buildClaudeExportCommand(started.port, null);
-            const banner = formatStartBanner({
-                port: started.port,
-                pid: started.pid,
-                mode: "detached",
-                debug,
-                debugLogPath: currentDebugLogPath(debug),
-                codex,
-                pi
-            });
-            writeCommandOutput(opts, banner, {
-                status: "ok",
-                mode: "detached",
-                pid: started.pid,
-                port: started.port,
-                debug,
-                debug_log_path: currentDebugLogPath(debug),
-                url: `http://127.0.0.1:${started.port}`,
-                codex_home: codex?.outDir ?? null,
-                codex_export_command: codex?.exportCommand ?? null,
-                codex_env: codex ? buildCodexEnvBundle(codex.outDir).env : null,
-                codex_default_model: codex?.defaultModel ?? null,
-                codex_model_count: codex?.modelCount ?? null,
-                pi_home: pi?.outDir ?? null,
-                pi_config_path: pi?.configPath ?? null,
-                pi_mirror_path: pi?.mirrorPath ?? null,
-                pi_backup_path: pi?.backupPath ?? null,
-                pi_model_count: pi?.modelCount ?? null,
-                claude_export_command: claude.command,
-                claude_env: claude.bundle.env,
-                claude_defaults: claude.defaults
-            });
+            const started = await spawnDetachedDaemon({ debug });
+            await emitDetachedStartOutput(opts, started, debug, "detached");
             return;
         }
         // Foreground path: interactively prompt for login if needed.
@@ -205,6 +157,46 @@ export function register(program) {
             claude_defaults: claude.defaults
         });
     });
+    program
+        .command("restart")
+        .description("Restart the daemon, preserving its current port and debug mode")
+        .option("--debug", "Force debug endpoints on for the restarted daemon")
+        .option("--no-codex", "Skip generating ~/.copillm/codex/ for Codex CLI")
+        .option("--codex-model <id>", "Default Codex model slug")
+        .option("--no-pi", "Skip generating the copillm-owned pi models.json for pi coding agent")
+        .option("--json", "JSON output")
+        .action(async (opts) => {
+        const forceDebug = resolveCopillmDebug(opts.debug);
+        if (isDevModeActive()) {
+            process.stderr.write(`dev mode: isolated COPILLM_HOME ${displayHomePath(getCopillmHome())}\n`);
+        }
+        // Restart always brings the daemon back up detached, so fail fast on
+        // missing credentials rather than letting the detached child die silently.
+        const authState = await inspectStoredCredential();
+        if (!authState.stored) {
+            throw new Error("Not authenticated. Run `copillm auth login` first.");
+        }
+        // Detect the running daemon's debug mode *before* stopping it — `/_debug`
+        // is only reachable while the daemon is up.
+        const lockSnapshot = toDaemonLockState(inspectLock());
+        const detectedDebug = lockSnapshot.state === "running" ? await probeDebugEndpoint(lockSnapshot.port) : false;
+        const decision = resolveRestartDecision({ lock: lockSnapshot, detectedDebug, forceDebug });
+        enableRuntimeDebug(decision.debug);
+        if (decision.action === "restart" && decision.previousPid !== null) {
+            await stopByPid(decision.previousPid);
+        }
+        else if (decision.clearStaleLock) {
+            releaseLock();
+        }
+        // Mirror `stop`: clearing the Claude gateway cache on the way down keeps
+        // Claude Code from pinning a stale model picker across the restart.
+        const cache = clearClaudeGatewayCache();
+        const started = await spawnDetachedDaemon({ debug: decision.debug, forcePort: decision.forcePort });
+        await emitDetachedStartOutput(opts, started, decision.debug, "restarted", {
+            previousPid: decision.previousPid,
+            claudeCache: cache
+        });
+    });
     program
         .command("daemon")
         .description("Internal background command")
@@ -384,6 +376,67 @@ export function register(program) {
         }
     });
 }
+/**
+ * Emit the human banner + JSON payload for a daemon that was just brought up in
+ * the background. Shared by `copillm start --detach` (`mode: "detached"`) and
+ * `copillm restart` (`mode: "restarted"`), so both surface the same codex/pi/
+ * claude wiring. `extra` carries restart-only fields (`previous_pid`, the
+ * Claude cache-clear result).
+ */
+async function emitDetachedStartOutput(opts, started, debug, mode, extra) {
+    const shared = await loadSharedStartContextIfNeeded(opts);
+    const codex = opts.codex === false ? null : await refreshCodexHome(started.port, opts.codexModel ?? null, shared);
+    const pi = opts.pi === false ? null : await refreshPiHome(started.port, shared);
+    const claude = buildClaudeExportCommand(started.port, null);
+    const banner = formatStartBanner({
+        port: started.port,
+        pid: started.pid,
+        mode,
+        debug,
+        debugLogPath: currentDebugLogPath(debug),
+        codex,
+        pi
+    });
+    const payload = {
+        status: "ok",
+        mode,
+        pid: started.pid,
+        port: started.port,
+        debug,
+        debug_log_path: currentDebugLogPath(debug),
+        url: `http://127.0.0.1:${started.port}`,
+        codex_home: codex?.outDir ?? null,
+        codex_export_command: codex?.exportCommand ?? null,
+        codex_env: codex ? buildCodexEnvBundle(codex.outDir).env : null,
+        codex_default_model: codex?.defaultModel ?? null,
+        codex_model_count: codex?.modelCount ?? null,
+        pi_home: pi?.outDir ?? null,
+        pi_config_path: pi?.configPath ?? null,
+        pi_mirror_path: pi?.mirrorPath ?? null,
+        pi_backup_path: pi?.backupPath ?? null,
+        pi_model_count: pi?.modelCount ?? null,
+        claude_export_command: claude.command,
+        claude_env: claude.bundle.env,
+        claude_defaults: claude.defaults
+    };
+    if (extra?.previousPid !== undefined) {
+        payload.previous_pid = extra.previousPid;
+    }
+    if (extra?.claudeCache !== undefined) {
+        payload.claude_cache = extra.claudeCache;
+    }
+    writeCommandOutput(opts, banner, payload);
+}
+/** Narrow the lock inspection down to the shape `resolveRestartDecision` needs. */
+function toDaemonLockState(lockState) {
+    if (lockState.state === "running") {
+        return { state: "running", pid: lockState.lock.pid, port: lockState.lock.port };
+    }
+    if (lockState.state === "stale") {
+        return { state: "stale" };
+    }
+    return { state: "missing" };
+}
 /**
  * Load the shared credential/config/discovery context for `copillm start`'s
  * codex + pi init steps, ONLY when at least one of them is going to run.

package/dist/cli/daemon/restart.js

@@ -0,0 +1,35 @@
+/**
+ * Pure decision logic for `copillm restart`.
+ *
+ * `restart` brings the daemon back up on the settings it is *actually* running
+ * on — its port and its debug mode — without persisting anything to disk. Port
+ * comes straight from the live lock; debug mode is detected at runtime by
+ * probing `/_debug` (only mounted when debug is on). The home/dev scope is
+ * inherent: the lock is per-`COPILLM_HOME`, so `copillm --dev restart` only
+ * ever touches the dev daemon.
+ *
+ * Keeping the decision pure (no I/O) makes every branch — running, stale,
+ * missing, debug-detected, debug-forced — trivially unit-testable.
+ */
+export function resolveRestartDecision(input) {
+    const { lock, detectedDebug, forceDebug } = input;
+    if (lock.state === "running") {
+        return {
+            action: "restart",
+            previousPid: lock.pid,
+            forcePort: lock.port,
+            clearStaleLock: false,
+            // `--debug` forces it on; otherwise preserve whatever the running daemon had.
+            debug: forceDebug || detectedDebug
+        };
+    }
+    return {
+        action: "start_fresh",
+        previousPid: null,
+        forcePort: null,
+        clearStaleLock: lock.state === "stale",
+        // Nothing was running, so there is no debug state to preserve — only the
+        // explicit `--debug` request can turn it on.
+        debug: forceDebug
+    };
+}

package/dist/cli/daemon/spawnDetached.js

@@ -0,0 +1,27 @@
+import { spawn } from "node:child_process";
+import { waitForDaemonReady } from "./probes.js";
+import { buildSelfSpawnCommand } from "./selfSpawn.js";
+import { daemonSpawnEnv } from "./spawnEnv.js";
+/**
+ * Spawn the daemon as a detached background process and wait until it is
+ * reachable. Shared by `copillm start --detach` and `copillm restart` so the
+ * two paths can never drift in how they launch the background daemon.
+ *
+ * `forcePort` pins the daemon back onto a specific port (used by `restart` to
+ * rebind the port the previous daemon was running on); when null the daemon
+ * falls back to the normal configured-port scan.
+ */
+export async function spawnDetachedDaemon(input) {
+    const daemonCommand = buildSelfSpawnCommand("daemon", input.debug ? ["--debug"] : []);
+    const child = spawn(daemonCommand.command, daemonCommand.args, {
+        detached: true,
+        stdio: "ignore",
+        env: daemonSpawnEnv(input.debug, { port: input.forcePort ?? null })
+    });
+    child.unref();
+    const started = await waitForDaemonReady(child.pid ?? null, 8_000);
+    if (!started) {
+        throw new Error("Detached daemon start timed out.");
+    }
+    return started;
+}

package/dist/cli/daemon/spawnEnv.js

@@ -1,12 +1,18 @@
 import { debugLogPath } from "../../config/home.js";
 import { currentDebugLogPath } from "../shared/debug.js";
-export function daemonSpawnEnv(debug) {
-    if (!debug) {
-        return process.env;
+export function daemonSpawnEnv(debug, options) {
+    // Always return a fresh object so callers that inject a port (e.g. `restart`
+    // pinning the daemon back onto its previous port) never mutate the live
+    // `process.env`.
+    const env = debug
+        ? {
+            ...process.env,
+            COPILLM_LOG_LEVEL: "debug",
+            COPILLM_LOG_FILE: currentDebugLogPath(true) ?? debugLogPath()
+        }
+        : { ...process.env };
+    if (options?.port != null) {
+        env.COPILLM_PORT = String(options.port);
     }
-    return {
-        ...process.env,
-        COPILLM_LOG_LEVEL: "debug",
-        COPILLM_LOG_FILE: currentDebugLogPath(true) ?? debugLogPath()
-    };
+    return env;
 }

package/dist/cli/integrations/banner.js

@@ -6,7 +6,7 @@ export function displayHomePath(p) {
     return p;
 }
 export function formatStartBanner(input) {
-    const verb = input.mode === "foreground" ? "listening on" : "running on";
+    const verb = input.mode === "foreground" ? "listening on" : input.mode === "restarted" ? "restarted on" : "running on";
     const lines = [];
     const debugSuffix = input.debug ? " [debug]" : "";
     const modeSuffix = input.mode === "already_running" ? " (already running)" : "";

package/dist/cli/packageInfo.js

@@ -1,7 +1,7 @@
 import { createRequire } from "node:module";
 const FALLBACK_PACKAGE_INFO = {
     name: "copillm",
-    version: "0.3.0"
+    version: "0.4.0"
 };
 export function getPackageInfo() {
     const envName = cleanPackageValue(process.env.COPILLM_PACKAGE_NAME);

package/dist/config/fsSecurity.js

@@ -14,6 +14,42 @@ export function writeFileSecureAtomic(filePath, content, mode) {
     replaceFile(tempPath, filePath);
     applyModeIfSupported(filePath, mode);
 }
+/**
+ * Atomically write a batch of files with two-phase commit semantics. Phase 1
+ * stages every file to a temp path; if any staging write throws, all temps
+ * written so far are removed and the error is rethrown, so nothing is
+ * committed. Phase 2 renames each staged temp into place — by then all content
+ * is safely on disk, so a partial commit is far less likely than a mid-write
+ * failure (the failure mode this replaces). Use this when several files must
+ * land together (e.g. an agent config fan-out).
+ */
+export function writeFilesSecureAtomic(writes) {
+    const staged = [];
+    try {
+        for (const write of writes) {
+            ensureSecureDirectory(path.dirname(write.path));
+            const tempPath = `${write.path}.tmp-${process.pid}-${Date.now()}-${staged.length}`;
+            fs.writeFileSync(tempPath, write.content, { mode: write.mode });
+            applyModeIfSupported(tempPath, write.mode);
+            staged.push({ tempPath, finalPath: write.path, mode: write.mode });
+        }
+    }
+    catch (error) {
+        for (const item of staged) {
+            try {
+                fs.unlinkSync(item.tempPath);
+            }
+            catch {
+                // best effort — nothing was committed, leftover temps are harmless
+            }
+        }
+        throw error;
+    }
+    for (const item of staged) {
+        replaceFile(item.tempPath, item.finalPath);
+        applyModeIfSupported(item.finalPath, item.mode);
+    }
+}
 export function applyModeIfSupported(targetPath, mode) {
     if (process.platform === "win32") {
         return;

package/dist/server/errors.js

@@ -12,6 +12,14 @@ export class InvalidRequestShapeError extends Error {
         this.name = "InvalidRequestShapeError";
     }
 }
+export class RequestBodyTooLargeError extends Error {
+    maxBytes;
+    constructor(maxBytes) {
+        super(`Request body exceeds the maximum allowed size of ${maxBytes} bytes.`);
+        this.maxBytes = maxBytes;
+        this.name = "RequestBodyTooLargeError";
+    }
+}
 export async function readUpstreamError(response) {
     const contentType = response.headers.get("content-type");
     let text;

package/dist/server/proxy.js

@@ -2,7 +2,7 @@ import { createServer } from "node:http";
 import { randomUUID } from "node:crypto";
 import { singleAccountResolver } from "./accountResolver.js";
 import { attachRequestLifecycle, isBenignSocketError, safeEnd, safeSendJson } from "./requestLifecycle.js";
-import { InvalidRequestShapeError, JsonRequestParseError } from "./errors.js";
+import { InvalidRequestShapeError, JsonRequestParseError, RequestBodyTooLargeError } from "./errors.js";
 import { ProtocolTranslationError } from "../translation/openaiAnthropic.js";
 import { handleHealthz, handleLivez } from "./routes/health.js";
 import { handleModels } from "./routes/models.js";
@@ -119,6 +119,10 @@ export async function startProxyServer(input) {
                 safeSendJson(res, 400, { error: "invalid_request_json", detail: error.message });
                 return;
             }
+            if (error instanceof RequestBodyTooLargeError) {
+                safeSendJson(res, 413, { error: "payload_too_large", detail: error.message });
+                return;
+            }
             if (error instanceof InvalidRequestShapeError) {
                 safeSendJson(res, 400, { error: "invalid_request_shape", detail: error.message });
                 return;

package/dist/server/routes/shared.js

@@ -1,10 +1,37 @@
 import { stripOneMillionAlias } from "../../translation/openaiAnthropic.js";
 import { isValidAccountId } from "../../config/accountId.js";
-import { JsonRequestParseError } from "../errors.js";
-export async function readJson(req) {
+import { JsonRequestParseError, RequestBodyTooLargeError } from "../errors.js";
+/**
+ * Default cap on a single request body. The daemon buffers the whole body in
+ * memory before forwarding, so an unbounded read is an OOM vector even on a
+ * loopback-only socket (a runaway agent or a pathological context). 32 MiB is
+ * far above any real chat/completions payload while still bounding memory.
+ * Override with `COPILLM_MAX_REQUEST_BYTES` (a positive integer count of bytes).
+ */
+export const DEFAULT_MAX_REQUEST_BYTES = 32 * 1024 * 1024;
+export function maxRequestBytes() {
+    const raw = process.env.COPILLM_MAX_REQUEST_BYTES;
+    if (raw === undefined || raw.trim().length === 0) {
+        return DEFAULT_MAX_REQUEST_BYTES;
+    }
+    const parsed = Number(raw.trim());
+    if (!Number.isInteger(parsed) || parsed <= 0) {
+        return DEFAULT_MAX_REQUEST_BYTES;
+    }
+    return parsed;
+}
+export async function readJson(req, maxBytes = maxRequestBytes()) {
     const chunks = [];
+    let total = 0;
     for await (const chunk of req) {
-        chunks.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
+        const buffer = typeof chunk === "string" ? Buffer.from(chunk) : chunk;
+        total += buffer.length;
+        if (total > maxBytes) {
+            // Stop accumulating immediately so an oversized body can't be buffered
+            // into memory; throwing ends the async iteration and tears down the read.
+            throw new RequestBodyTooLargeError(maxBytes);
+        }
+        chunks.push(buffer);
     }
     if (chunks.length === 0) {
         return {};

package/dist/translation/openaiAnthropic.js

@@ -25,6 +25,14 @@ export function anthropicToOpenAI(body) {
     if (request.temperature !== undefined) {
         translated.temperature = request.temperature;
     }
+    if (request.top_p !== undefined) {
+        translated.top_p = request.top_p;
+    }
+    if (request.stop_sequences !== undefined) {
+        // Anthropic `stop_sequences` (array of strings) maps 1:1 onto OpenAI's
+        // `stop` field, which Copilot's chat/completions endpoint accepts.
+        translated.stop = request.stop_sequences;
+    }
     if (request.stream !== undefined) {
         translated.stream = request.stream;
     }
@@ -102,6 +110,12 @@ function parseAnthropicRequest(body) {
     if (body.temperature !== undefined) {
         parsed.temperature = body.temperature;
     }
+    if (body.top_p !== undefined) {
+        parsed.top_p = body.top_p;
+    }
+    if (body.stop_sequences !== undefined) {
+        parsed.stop_sequences = body.stop_sequences;
+    }
     if (body.stream !== undefined) {
         parsed.stream = body.stream;
     }
@@ -195,11 +209,11 @@ function translateAssistantMessageBlocks(blocks) {
 }
 function translateUserMessageBlocks(blocks) {
     const translated = [];
-    const textSegments = [];
-    const flushText = () => {
-        if (textSegments.length > 0) {
-            translated.push({ role: "user", content: textSegments.join("\n") });
-            textSegments.length = 0;
+    let parts = [];
+    const flushParts = () => {
+        if (parts.length > 0) {
+            translated.push({ role: "user", content: collapseUserParts(parts) });
+            parts = [];
         }
     };
     for (const block of blocks) {
@@ -210,14 +224,18 @@ function translateUserMessageBlocks(blocks) {
             if (typeof block.text !== "string") {
                 throw new ProtocolTranslationError("invalid_text_block", "Anthropic text block must include string text.");
             }
-            textSegments.push(block.text);
+            parts.push({ type: "text", text: block.text });
+            continue;
+        }
+        if (block.type === "image") {
+            parts.push({ type: "image_url", image_url: { url: translateImageSource(block.source) } });
             continue;
         }
         if (block.type === "tool_result") {
             if (typeof block.tool_use_id !== "string" || block.tool_use_id.length === 0) {
                 throw new ProtocolTranslationError("invalid_tool_result", "Anthropic tool_result requires non-empty tool_use_id.");
             }
-            flushText();
+            flushParts();
             const rawContent = translateToolResultContent(block.content);
             const content = block.is_error ? `[tool_error] ${rawContent}` : rawContent;
             translated.push({
@@ -232,12 +250,53 @@ function translateUserMessageBlocks(blocks) {
         }
         throw new ProtocolTranslationError("unsupported_block", `Unsupported Anthropic user block type: ${block.type}.`);
     }
-    flushText();
+    flushParts();
     if (translated.length === 0) {
         translated.push({ role: "user", content: "" });
     }
     return translated;
 }
+/**
+ * Collapse the accumulated content parts into an OpenAI message `content`.
+ * Text-only messages stay a plain newline-joined string (the historical shape
+ * every text request produced); once an image is present we must emit the
+ * OpenAI multi-part content array so the `image_url` parts survive to upstream.
+ */
+function collapseUserParts(parts) {
+    const hasImage = parts.some((part) => part.type === "image_url");
+    if (!hasImage) {
+        return parts.map((part) => (part.type === "text" ? part.text : "")).join("\n");
+    }
+    return parts;
+}
+/**
+ * Translate an Anthropic image `source` into an OpenAI `image_url.url`. A
+ * base64 source becomes a `data:` URL; a url source passes its URL through.
+ * Copilot's chat/completions endpoint accepts both for vision-capable models;
+ * sending an image to a non-vision model surfaces as an upstream error, which
+ * is the correct place for that signal — translation stays capability-agnostic.
+ */
+function translateImageSource(source) {
+    if (!isObject(source) || typeof source.type !== "string") {
+        throw new ProtocolTranslationError("invalid_image_source", "Anthropic image block requires a source object with a type.");
+    }
+    if (source.type === "base64") {
+        if (typeof source.media_type !== "string" || source.media_type.length === 0) {
+            throw new ProtocolTranslationError("invalid_image_source", "Anthropic base64 image source requires a media_type.");
+        }
+        if (typeof source.data !== "string" || source.data.length === 0) {
+            throw new ProtocolTranslationError("invalid_image_source", "Anthropic base64 image source requires data.");
+        }
+        return `data:${source.media_type};base64,${source.data}`;
+    }
+    if (source.type === "url") {
+        if (typeof source.url !== "string" || source.url.length === 0) {
+            throw new ProtocolTranslationError("invalid_image_source", "Anthropic url image source requires a non-empty url.");
+        }
+        return source.url;
+    }
+    throw new ProtocolTranslationError("unsupported_image_source", `Unsupported Anthropic image source type: ${String(source.type)}.`);
+}
 function translateToolResultContent(content) {
     if (typeof content === "string") {
         return content;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "copillm",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Local Copilot proxy CLI (OpenAI/Anthropic-compatible)",
   "license": "MIT",
   "type": "module",