@combycode/llm-sdk 1.1.0 → 1.2.0

package/CHANGELOG.md

@@ -6,6 +6,35 @@ All notable changes to `@combycode/llm-sdk` are documented here. The format foll
 
 ## [Unreleased]
 
+## [1.2.0] - 2026-07-05
+
+### Fixed
+- Anthropic hosted code-execution **file outputs** now surface on `response.files` (verified
+  live). Three fixes, found by real-key testing: (1) the producer parsed the outdated
+  `code_execution_tool_result` shape, but the current `code_execution_20260521` tool emits
+  `bash_code_execution_tool_result` → `bash_code_execution_output.file_id` (now both are
+  handled); (2) code execution needs the beta endpoint — requests using `code_interpreter` now
+  hit `/v1/messages?beta=true`, without which no file outputs are returned; (3) `AgentLoop`'s
+  final response dropped `files` (and `moderation`) — both are now propagated from the final
+  LLM response in `complete()` and `stream()`.
+
+### Added
+- `AgentLoopConfig.toolInputGuardrails` (`ToolInputGuardrail[]`) — per-tool-call input
+  guardrails that validate a call's arguments before the permission/approval check. A trip
+  denies just that call (error result to the model) without halting the run or invoking the
+  HITL approver; a pass runs the normal permission/approval/execution path.
+- `AgentTool.customDataExtractor` — optional hook to derive out-of-band metadata from a
+  successful tool result, attached to that call's `ToolCallReport.customData`. The model never
+  sees it (for your own telemetry/routing/audit); a throwing extractor is swallowed.
+- Code-execution **file outputs** now surface on `response.files` across **all** providers
+  (completes the channel shipped in 1.1, which had only the Anthropic producer):
+  - OpenAI Responses: code-interpreter image outputs (by URL) and downloadable container
+    files (`container_file_citation` → file id + name).
+  - Google: hosted code-execution `inlineData` artifacts (base64), routed to `files`
+    instead of `media` when the turn used code execution.
+  - xAI: inherited from the OpenAI Responses adapter.
+  - `FileOutput` gains a `url` field (for providers that return a fetchable URL).
+
 ## [1.1.0] - 2026-06-30
 
 ### Added
@@ -53,5 +82,6 @@ First public release.
 - Service tiers end to end (request → bill → cost).
 - Cross-environment: runs on Node, Bun, and the browser. ESM, zero runtime deps.
 
+[1.2.0]: https://github.com/combycode/llm-sdk-ts/releases/tag/v1.2.0
 [1.1.0]: https://github.com/combycode/llm-sdk-ts/releases/tag/v1.1.0
 [1.0.0]: https://github.com/combycode/llm-sdk-ts/releases/tag/v1.0.0

package/dist/agent/guardrail-types.d.ts

@@ -46,6 +46,31 @@ export interface Guardrail {
     /** Return a decision; throw only for unexpected infrastructure errors. */
     check(ctx: GuardrailCheckContext): Promise<GuardrailDecision>;
 }
+/** Context for a tool-input guardrail: the specific tool call about to run. */
+export interface ToolInputGuardrailContext {
+    toolName: string;
+    arguments: Record<string, unknown>;
+    callId: string;
+    step: number;
+    trace: TraceContext;
+}
+/** A tool-input guardrail decision. Unlike message-level guardrails it does NOT
+ *  halt the run — a trip denies just this one tool call. */
+export type ToolInputGuardrailDecision = {
+    pass: true;
+} | {
+    pass: false;
+    reason: string;
+};
+/** Validates a tool call's arguments BEFORE it executes (and before any HITL
+ *  approval interruption). On a trip the call is denied — the model receives the
+ *  denial reason as an error tool result; the run continues and the approver is
+ *  never consulted. Arguments are immutable once the model emits them, so a single
+ *  pre-execution check is sufficient. */
+export interface ToolInputGuardrail {
+    name: string;
+    check(ctx: ToolInputGuardrailContext): Promise<ToolInputGuardrailDecision> | ToolInputGuardrailDecision;
+}
 export interface GuardrailTriggeredContext {
     runId: string;
     agentId: string;

package/dist/agent/loop-config.d.ts

@@ -5,7 +5,7 @@ import type { CacheConfig, ThinkingConfig } from '../llm/types/request';
 import type { ConversationHistory } from './history';
 import type { HistorySnapshot } from './history-types';
 import type { AgentTool } from './types';
-import type { Guardrail } from './guardrail-types';
+import type { Guardrail, ToolInputGuardrail } from './guardrail-types';
 import type { PermissionPolicy } from '../plugins/permissions/policy';
 import type { ApprovalRequest, ApprovalDecision } from './approval-types';
 import type { Persistence } from '../plugins/persistence/types';
@@ -48,6 +48,10 @@ export interface AgentLoopConfig {
      *  output guardrails run after each step's response is produced.
      *  A tripwire decision halts the run with finishReason 'guardrail'. */
     guardrails?: Guardrail[];
+    /** Per-tool-call input guardrails. Each runs against a tool call's arguments
+     *  BEFORE the permission/approval check and execution. A trip denies just that
+     *  call (error result to the model) without halting the run or invoking `approve`. */
+    toolInputGuardrails?: ToolInputGuardrail[];
     /** Permission policy wired into the tool-execution path.
      *  Called after lookup, before execution.
      *  'allow' -> proceed; 'deny' -> tool is blocked (error result to model);

package/dist/agent/loop.d.ts

@@ -39,6 +39,7 @@ export declare class AgentLoop {
     private _toolTimeout;
     private _maxSteps;
     private _guardrails;
+    private _toolInputGuardrails;
     private _policy;
     private _approve;
     private _checkpoint;

package/dist/agent/types.d.ts

@@ -39,6 +39,11 @@ export interface AgentTool {
     definition: Tool;
     /** Execute the tool. Return string or structured content. */
     execute: (args: Record<string, unknown>, context: ToolExecutionContext) => Promise<string | ContentPart[]>;
+    /** Optional: derive out-of-band metadata from a successful tool result, attached
+     *  to this call's `ToolCallReport.customData`. The MODEL NEVER SEES IT — it is for
+     *  your own telemetry/routing/audit. Runs after `execute`; may be async. Errors are
+     *  swallowed (opt-in convenience must never break the tool result). */
+    customDataExtractor?: (result: string | ContentPart[], args: Record<string, unknown>, context: Omit<ToolExecutionContext, 'signal'>) => unknown | Promise<unknown>;
 }
 export interface ToolExecutionContext {
     step: number;
@@ -65,6 +70,9 @@ export interface ToolCallReport {
         value: number | string | boolean;
         type: string;
     }>;
+    /** Out-of-band metadata from the tool's `customDataExtractor`, if any. Never sent
+     *  to the model; present only when an extractor returned a value. */
+    customData?: unknown;
 }
 export interface StepReport {
     index: number;

package/dist/index.browser.js

@@ -23305,7 +23305,10 @@ var AnthropicAdapter = class {
     });
     const headers = {};
     if (hasFileRef) headers["anthropic-beta"] = "files-api-2025-04-14";
-    return { body, headers };
+    const usesCodeExec = req.tools?.some(
+      (t) => !isFunctionTool(t) && t.type === "code_interpreter"
+    );
+    return { body, headers, ...usesCodeExec ? { path: "/v1/messages?beta=true" } : {} };
   }
   enableStreaming(providerReq, _req) {
     providerReq.body.stream = true;
@@ -23387,11 +23390,11 @@ var AnthropicAdapter = class {
         };
         content.push(tc);
         toolCalls.push(tc);
-      } else if (block.type === "code_execution_tool_result") {
+      } else if (block.type === "bash_code_execution_tool_result" || block.type === "code_execution_tool_result") {
         const result = block.content;
-        if (result?.type === "code_execution_result" && Array.isArray(result.content)) {
+        if (result && (result.type === "bash_code_execution_result" || result.type === "code_execution_result") && Array.isArray(result.content)) {
           for (const out of result.content) {
-            if (out.type === "code_execution_output" && typeof out.file_id === "string") {
+            if ((out.type === "bash_code_execution_output" || out.type === "code_execution_output") && typeof out.file_id === "string") {
               files.push({ id: out.file_id, source: "code_execution" });
             }
           }
@@ -23899,7 +23902,9 @@ var GoogleAdapter = class {
     const content = [];
     const toolCalls = [];
     const media = [];
+    const files = [];
     let thinking = null;
+    const hasCodeExec = parts.some((p) => p.executableCode || p.codeExecutionResult);
     for (const part of parts) {
       if (part.text !== void 0 && !part.thought) {
         content.push({ type: "text", text: part.text });
@@ -23910,7 +23915,9 @@ var GoogleAdapter = class {
       if (part.inlineData) {
         const inline = part.inlineData;
         const mime = inline.mimeType;
-        if (mime.startsWith("image/")) {
+        if (hasCodeExec) {
+          files.push({ data: inline.data, mimeType: mime, source: "code_execution" });
+        } else if (mime.startsWith("image/")) {
           const p = {
             type: "image_output",
             mediaId: "",
@@ -23971,6 +23978,7 @@ var GoogleAdapter = class {
       toolCalls,
       thinking,
       media,
+      ...files.length ? { files } : {},
       latencyMs,
       raw
     };
@@ -25949,6 +25957,7 @@ var OpenAIResponsesAdapter = class {
     const content = [];
     const toolCalls = [];
     const media = [];
+    const files = [];
     let thinking = null;
     let text = "";
     for (const item of output) {
@@ -25960,6 +25969,22 @@ var OpenAIResponsesAdapter = class {
             const t = c.text;
             text += t;
             content.push({ type: "text", text: t });
+            for (const a of c.annotations ?? []) {
+              if (a.type === "container_file_citation" && typeof a.file_id === "string") {
+                files.push({
+                  id: a.file_id,
+                  ...typeof a.filename === "string" ? { name: a.filename } : {},
+                  source: "code_execution"
+                });
+              }
+            }
+          }
+        }
+      }
+      if (type === "code_interpreter_call") {
+        for (const out of item.outputs ?? []) {
+          if (out.type === "image" && typeof out.url === "string") {
+            files.push({ url: out.url, source: "code_execution" });
           }
         }
       }
@@ -26012,6 +26037,7 @@ var OpenAIResponsesAdapter = class {
       toolCalls,
       thinking,
       media,
+      ...files.length ? { files } : {},
       ...moderation ? { moderation } : {},
       latencyMs,
       raw
@@ -27738,6 +27764,7 @@ var AgentLoop = class _AgentLoop {
   _toolTimeout;
   _maxSteps;
   _guardrails;
+  _toolInputGuardrails;
   _policy;
   _approve;
   _checkpoint;
@@ -27765,6 +27792,7 @@ var AgentLoop = class _AgentLoop {
     this._toolTimeout = config.toolTimeout ?? DEFAULT_TOOL_TIMEOUT_MS;
     this._maxSteps = config.maxSteps !== void 0 && config.maxSteps > 0 ? config.maxSteps : DEFAULT_MAX_STEPS;
     this._guardrails = config.guardrails ?? [];
+    this._toolInputGuardrails = config.toolInputGuardrails ?? [];
     this._policy = config.policy ?? null;
     this._approve = config.approve ?? null;
     this._checkpoint = config.checkpoint ?? null;
@@ -27983,6 +28011,10 @@ var AgentLoop = class _AgentLoop {
       toolCalls: lastResponse?.toolCalls ?? [],
       thinking: lastResponse?.thinking ?? null,
       media: lastResponse?.media ?? [],
+      // Propagate hosted-tool file outputs + inline-moderation result from the final
+      // LLM response (e.g. code-execution files produced during the run).
+      ...lastResponse?.files ? { files: lastResponse.files } : {},
+      ...lastResponse?.moderation ? { moderation: lastResponse.moderation } : {},
       latencyMs: performance.now() - startPerf,
       raw: lastResponse?.raw ?? null
     };
@@ -28177,6 +28209,8 @@ var AgentLoop = class _AgentLoop {
       toolCalls: lastResponse?.toolCalls ?? [],
       thinking: lastResponse?.thinking ?? null,
       media: [],
+      ...lastResponse?.files ? { files: lastResponse.files } : {},
+      ...lastResponse?.moderation ? { moderation: lastResponse.moderation } : {},
       latencyMs: performance.now() - startPerf,
       raw: null
     };
@@ -28263,6 +28297,18 @@ var AgentLoop = class _AgentLoop {
       runTrace
     );
     if (!lookup.found) return lookup.errorResult;
+    for (const g of this._toolInputGuardrails) {
+      const decision = await g.check({
+        toolName: tc.name,
+        arguments: tc.arguments,
+        callId: tc.id,
+        step,
+        trace: { sessionId: runTrace.sessionId, requestId: runTrace.requestId, callId: tc.id }
+      });
+      if (!decision.pass) {
+        return this.buildDeniedResult(tc, decision.reason, reports);
+      }
+    }
     if (this._policy !== null) {
       const target = {
         kind: "tool",
@@ -28279,7 +28325,7 @@ var AgentLoop = class _AgentLoop {
     try {
       const baseCtx = { step, callId: tc.id, metrics, trace: { sessionId: runTrace.sessionId, requestId: runTrace.requestId, callId: tc.id } };
       const result = await executeWithTimeout(lookup.tool, tc, baseCtx, this._toolTimeout);
-      return await this.buildSuccessResult(tc, result, runId, step, metrics, reports, toolStart, runTrace);
+      return await this.buildSuccessResult(tc, result, runId, step, metrics, reports, toolStart, runTrace, lookup.tool, baseCtx);
     } catch (e) {
       return handleToolError(e, tc, this.hooks, runId, this.id, step, metrics, reports, toolStart, runTrace);
     }
@@ -28370,7 +28416,7 @@ var AgentLoop = class _AgentLoop {
       try {
         const baseCtx = { step, callId: tc.id, metrics, trace: { sessionId: runTrace.sessionId, requestId: runTrace.requestId, callId: tc.id } };
         const result = await executeWithTimeout(tool, tc, baseCtx, this._toolTimeout);
-        return await this.buildSuccessResult(tc, result, runId, step, metrics, reports, toolStart, runTrace);
+        return await this.buildSuccessResult(tc, result, runId, step, metrics, reports, toolStart, runTrace, tool, baseCtx);
       } catch (e) {
         return handleToolError(e, tc, this.hooks, runId, this.id, step, metrics, reports, toolStart, runTrace);
       }
@@ -28382,9 +28428,16 @@ var AgentLoop = class _AgentLoop {
     return this.buildDeniedResult(tc, denyMsg, reports);
   }
   /** Emit onToolCallComplete, push report, and return success content part. */
-  async buildSuccessResult(tc, result, runId, step, metrics, reports, toolStart, runTrace) {
+  async buildSuccessResult(tc, result, runId, step, metrics, reports, toolStart, runTrace, tool, context) {
     const latencyMs = performance.now() - toolStart;
     const resultStr = typeof result === "string" ? result : JSON.stringify(result);
+    let customData;
+    if (tool?.customDataExtractor && context) {
+      try {
+        customData = await tool.customDataExtractor(result, tc.arguments, context);
+      } catch {
+      }
+    }
     await this.hooks.emit("onToolCallComplete", {
       runId,
       agentId: this.id,
@@ -28406,7 +28459,8 @@ var AgentLoop = class _AgentLoop {
       latencyMs,
       skipped: false,
       error: null,
-      metrics: Object.fromEntries(metrics)
+      metrics: Object.fromEntries(metrics),
+      ...customData !== void 0 ? { customData } : {}
     });
     return { type: "tool_result", id: tc.id, content: resultStr };
   }

package/dist/index.d.ts

@@ -98,7 +98,7 @@ export type { ConversationHistoryConfig, HistoryEntry, HistorySnapshot } from '.
 export { AgentLoop } from './agent/loop';
 export type { AgentLoopConfig } from './agent/loop-config';
 export type { AgentLoopSnapshot, AgentRunReport, AgentStreamEvent, AgentTool, ContentClass, LearnInput, StepReport, TokenCountContext, TokenCounter, ToolCallReport, ToolExecutionContext } from './agent/types';
-export type { Guardrail, GuardrailDecision, GuardrailPass, GuardrailTrip, GuardrailCheckContext, InputGuardrailContext, OutputGuardrailContext, GuardrailTriggeredContext } from './agent/guardrail-types';
+export type { Guardrail, GuardrailDecision, GuardrailPass, GuardrailTrip, GuardrailCheckContext, InputGuardrailContext, OutputGuardrailContext, GuardrailTriggeredContext, ToolInputGuardrail, ToolInputGuardrailContext, ToolInputGuardrailDecision } from './agent/guardrail-types';
 export { BearerKeyAuth } from './server/auth';
 export type { AuthPlugin, AuthVerifyResult } from './server/auth';
 export { dispatch } from './server/dispatch';

package/dist/index.js

@@ -23232,7 +23232,10 @@ var AnthropicAdapter = class {
     });
     const headers = {};
     if (hasFileRef) headers["anthropic-beta"] = "files-api-2025-04-14";
-    return { body, headers };
+    const usesCodeExec = req.tools?.some(
+      (t) => !isFunctionTool(t) && t.type === "code_interpreter"
+    );
+    return { body, headers, ...usesCodeExec ? { path: "/v1/messages?beta=true" } : {} };
   }
   enableStreaming(providerReq, _req) {
     providerReq.body.stream = true;
@@ -23314,11 +23317,11 @@ var AnthropicAdapter = class {
         };
         content.push(tc);
         toolCalls.push(tc);
-      } else if (block.type === "code_execution_tool_result") {
+      } else if (block.type === "bash_code_execution_tool_result" || block.type === "code_execution_tool_result") {
         const result = block.content;
-        if (result?.type === "code_execution_result" && Array.isArray(result.content)) {
+        if (result && (result.type === "bash_code_execution_result" || result.type === "code_execution_result") && Array.isArray(result.content)) {
           for (const out of result.content) {
-            if (out.type === "code_execution_output" && typeof out.file_id === "string") {
+            if ((out.type === "bash_code_execution_output" || out.type === "code_execution_output") && typeof out.file_id === "string") {
               files.push({ id: out.file_id, source: "code_execution" });
             }
           }
@@ -23826,7 +23829,9 @@ var GoogleAdapter = class {
     const content = [];
     const toolCalls = [];
     const media = [];
+    const files = [];
     let thinking = null;
+    const hasCodeExec = parts.some((p) => p.executableCode || p.codeExecutionResult);
     for (const part of parts) {
       if (part.text !== void 0 && !part.thought) {
         content.push({ type: "text", text: part.text });
@@ -23837,7 +23842,9 @@ var GoogleAdapter = class {
       if (part.inlineData) {
         const inline = part.inlineData;
         const mime = inline.mimeType;
-        if (mime.startsWith("image/")) {
+        if (hasCodeExec) {
+          files.push({ data: inline.data, mimeType: mime, source: "code_execution" });
+        } else if (mime.startsWith("image/")) {
           const p = {
             type: "image_output",
             mediaId: "",
@@ -23898,6 +23905,7 @@ var GoogleAdapter = class {
       toolCalls,
       thinking,
       media,
+      ...files.length ? { files } : {},
       latencyMs,
       raw
     };
@@ -25876,6 +25884,7 @@ var OpenAIResponsesAdapter = class {
     const content = [];
     const toolCalls = [];
     const media = [];
+    const files = [];
     let thinking = null;
     let text = "";
     for (const item of output) {
@@ -25887,6 +25896,22 @@ var OpenAIResponsesAdapter = class {
             const t = c.text;
             text += t;
             content.push({ type: "text", text: t });
+            for (const a of c.annotations ?? []) {
+              if (a.type === "container_file_citation" && typeof a.file_id === "string") {
+                files.push({
+                  id: a.file_id,
+                  ...typeof a.filename === "string" ? { name: a.filename } : {},
+                  source: "code_execution"
+                });
+              }
+            }
+          }
+        }
+      }
+      if (type === "code_interpreter_call") {
+        for (const out of item.outputs ?? []) {
+          if (out.type === "image" && typeof out.url === "string") {
+            files.push({ url: out.url, source: "code_execution" });
           }
         }
       }
@@ -25939,6 +25964,7 @@ var OpenAIResponsesAdapter = class {
       toolCalls,
       thinking,
       media,
+      ...files.length ? { files } : {},
       ...moderation ? { moderation } : {},
       latencyMs,
       raw
@@ -27665,6 +27691,7 @@ var AgentLoop = class _AgentLoop {
   _toolTimeout;
   _maxSteps;
   _guardrails;
+  _toolInputGuardrails;
   _policy;
   _approve;
   _checkpoint;
@@ -27692,6 +27719,7 @@ var AgentLoop = class _AgentLoop {
     this._toolTimeout = config.toolTimeout ?? DEFAULT_TOOL_TIMEOUT_MS;
     this._maxSteps = config.maxSteps !== void 0 && config.maxSteps > 0 ? config.maxSteps : DEFAULT_MAX_STEPS;
     this._guardrails = config.guardrails ?? [];
+    this._toolInputGuardrails = config.toolInputGuardrails ?? [];
     this._policy = config.policy ?? null;
     this._approve = config.approve ?? null;
     this._checkpoint = config.checkpoint ?? null;
@@ -27910,6 +27938,10 @@ var AgentLoop = class _AgentLoop {
       toolCalls: lastResponse?.toolCalls ?? [],
       thinking: lastResponse?.thinking ?? null,
       media: lastResponse?.media ?? [],
+      // Propagate hosted-tool file outputs + inline-moderation result from the final
+      // LLM response (e.g. code-execution files produced during the run).
+      ...lastResponse?.files ? { files: lastResponse.files } : {},
+      ...lastResponse?.moderation ? { moderation: lastResponse.moderation } : {},
       latencyMs: performance.now() - startPerf,
       raw: lastResponse?.raw ?? null
     };
@@ -28104,6 +28136,8 @@ var AgentLoop = class _AgentLoop {
       toolCalls: lastResponse?.toolCalls ?? [],
       thinking: lastResponse?.thinking ?? null,
       media: [],
+      ...lastResponse?.files ? { files: lastResponse.files } : {},
+      ...lastResponse?.moderation ? { moderation: lastResponse.moderation } : {},
       latencyMs: performance.now() - startPerf,
       raw: null
     };
@@ -28190,6 +28224,18 @@ var AgentLoop = class _AgentLoop {
       runTrace
     );
     if (!lookup.found) return lookup.errorResult;
+    for (const g of this._toolInputGuardrails) {
+      const decision = await g.check({
+        toolName: tc.name,
+        arguments: tc.arguments,
+        callId: tc.id,
+        step,
+        trace: { sessionId: runTrace.sessionId, requestId: runTrace.requestId, callId: tc.id }
+      });
+      if (!decision.pass) {
+        return this.buildDeniedResult(tc, decision.reason, reports);
+      }
+    }
     if (this._policy !== null) {
       const target = {
         kind: "tool",
@@ -28206,7 +28252,7 @@ var AgentLoop = class _AgentLoop {
     try {
       const baseCtx = { step, callId: tc.id, metrics, trace: { sessionId: runTrace.sessionId, requestId: runTrace.requestId, callId: tc.id } };
       const result = await executeWithTimeout(lookup.tool, tc, baseCtx, this._toolTimeout);
-      return await this.buildSuccessResult(tc, result, runId, step, metrics, reports, toolStart, runTrace);
+      return await this.buildSuccessResult(tc, result, runId, step, metrics, reports, toolStart, runTrace, lookup.tool, baseCtx);
     } catch (e) {
       return handleToolError(e, tc, this.hooks, runId, this.id, step, metrics, reports, toolStart, runTrace);
     }
@@ -28297,7 +28343,7 @@ var AgentLoop = class _AgentLoop {
       try {
         const baseCtx = { step, callId: tc.id, metrics, trace: { sessionId: runTrace.sessionId, requestId: runTrace.requestId, callId: tc.id } };
         const result = await executeWithTimeout(tool, tc, baseCtx, this._toolTimeout);
-        return await this.buildSuccessResult(tc, result, runId, step, metrics, reports, toolStart, runTrace);
+        return await this.buildSuccessResult(tc, result, runId, step, metrics, reports, toolStart, runTrace, tool, baseCtx);
       } catch (e) {
         return handleToolError(e, tc, this.hooks, runId, this.id, step, metrics, reports, toolStart, runTrace);
       }
@@ -28309,9 +28355,16 @@ var AgentLoop = class _AgentLoop {
     return this.buildDeniedResult(tc, denyMsg, reports);
   }
   /** Emit onToolCallComplete, push report, and return success content part. */
-  async buildSuccessResult(tc, result, runId, step, metrics, reports, toolStart, runTrace) {
+  async buildSuccessResult(tc, result, runId, step, metrics, reports, toolStart, runTrace, tool, context) {
     const latencyMs = performance.now() - toolStart;
     const resultStr = typeof result === "string" ? result : JSON.stringify(result);
+    let customData;
+    if (tool?.customDataExtractor && context) {
+      try {
+        customData = await tool.customDataExtractor(result, tc.arguments, context);
+      } catch {
+      }
+    }
     await this.hooks.emit("onToolCallComplete", {
       runId,
       agentId: this.id,
@@ -28333,7 +28386,8 @@ var AgentLoop = class _AgentLoop {
       latencyMs,
       skipped: false,
       error: null,
-      metrics: Object.fromEntries(metrics)
+      metrics: Object.fromEntries(metrics),
+      ...customData !== void 0 ? { customData } : {}
     });
     return { type: "tool_result", id: tc.id, content: resultStr };
   }

package/dist/llm/types/response.d.ts

@@ -34,6 +34,9 @@ export interface FileOutput {
     mimeType?: string;
     /** Inline bytes (base64) when the provider returns the file inline; else absent. */
     data?: string;
+    /** URL to fetch the file when the provider returns one (e.g. OpenAI code-interpreter
+     *  image outputs); else absent. */
+    url?: string;
     /** What produced it (e.g. 'code_execution'). */
     source?: string;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@combycode/llm-sdk",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "Unified, pluggable AI SDK for accessing the LLMs of every major provider (Anthropic, OpenAI, Google, xAI, OpenRouter) through one API. Cross-environment: Node, Bun, and the browser.",
   "type": "module",
   "main": "./dist/index.js",