@axlsdk/axl 0.19.0 → 0.19.1

package/dist/index.d.cts

@@ -3066,6 +3066,10 @@ type ToolHooks<TInput = unknown, TOutput = unknown> = {
     /** Transform output after the handler runs. Receives handler result and workflow context. */
     after?(output: TOutput, ctx: WorkflowContext): TOutput | Promise<TOutput>;
 };
+/** JSON-compatible content that a tool may explicitly expose to the model. */
+type ToolModelOutput = string | number | boolean | null | readonly ToolModelOutput[] | {
+    readonly [key: string]: ToolModelOutput | undefined;
+};
 /** Tool configuration */
 type ToolConfig<TInput extends z.ZodType, TOutput = unknown> = {
     name: string;
@@ -3080,6 +3084,8 @@ type ToolConfig<TInput extends z.ZodType, TOutput = unknown> = {
     requireApproval?: boolean;
     /** Lifecycle hooks: before/after the handler. */
     hooks?: ToolHooks<z.infer<TInput>, TOutput>;
+    /** Select the subset of a successful result that is sent back to the model. */
+    toModelOutput?(this: void, output: Readonly<TOutput>): ToolModelOutput;
 };
 /** A defined tool instance */
 type Tool<TInput extends z.ZodType = z.ZodType, TOutput = unknown> = {
@@ -3090,6 +3096,8 @@ type Tool<TInput extends z.ZodType = z.ZodType, TOutput = unknown> = {
     readonly retry: RetryPolicy;
     readonly requireApproval: boolean;
     readonly hooks?: ToolHooks<z.infer<TInput>, TOutput>;
+    /** Select the subset of a successful result that is sent back to the model. */
+    toModelOutput?(this: void, output: Readonly<TOutput>): ToolModelOutput;
     /** Run the tool directly from workflow code */
     run(ctx: WorkflowContext, input: z.infer<TInput>): Promise<TOutput>;
     /** Execute the handler (internal use — includes retry logic) */
@@ -4356,6 +4364,12 @@ declare class AxlError extends Error {
     readonly code: string;
     constructor(code: string, message: string);
 }
+/** Thrown when a tool's model-facing output cannot be projected safely. */
+declare class ToolModelOutputError extends AxlError {
+    readonly toolName: string;
+    readonly cause: unknown;
+    constructor(toolName: string, cause: unknown);
+}
 /** Thrown when schema validation fails after all retries exhausted */
 declare class VerifyError extends AxlError {
     readonly lastOutput: unknown;
@@ -5244,4 +5258,4 @@ declare class NoopSpanManager implements SpanManager {
  */
 declare function createSpanManager(config?: TelemetryConfig): Promise<SpanManager>;
 
-export { AXL_EVENT_TYPES, AZURE_PROFILE, type Agent, type AgentCallEndData, type AgentCallInfo, type AgentCallParams, type AgentCallStartData, type AgentConfig, AnthropicProvider, type AnyWorkflow, type ApiKeySource, type AskOptions, type AskScoped, type AuthHeader, type AwaitHumanData, type AwaitHumanOptions, type AwaitHumanResolvedData, type AxlConfig, AxlError, type AxlEvent, type AxlEventBase, AxlEventBus, type AxlEventOf, type AxlEventType, AxlRuntime, AxlStream, BEDROCK_PROFILE, BUILTIN_PROFILES, BudgetExceededError, type BudgetOptions, type BudgetResult, CONFIG_CANDIDATES, COST_BEARING_LEAF_TYPES, type CallbackMeta, type CapabilityFlags, type ChatMessage, type ChatOptions, type CheckpointEventData, type CoalescedPartialObject, type CreateContextOptions, DEEPSEEK_PROFILE, type DelegateData, type DelegateOptions, type Effort, type EmbedResult, type EmbedUsage, type Embedder, type EvalExecuteWorkflow, type EvalHistoryEntry, type EventStreamOptions, EventStreamOverflowError, type ExecuteOptions, type ExecutionInfo, type ExecutionState, GROQ_PROFILE, GeminiProvider, type GuardrailBlockHandler, type GuardrailData, GuardrailError, type GuardrailResult, type GuardrailsConfig, type HandoffDescriptor, type HandoffRecord, type HandoffReturnData, type HandoffStartData, type HumanDecision, InMemoryVectorStore, type InputGuardrail, LLAMACPP_PROFILE, LMSTUDIO_PROFILE, MISTRAL_PROFILE, type MapOptions, MaxTurnsError, McpManager, type McpServer, type McpServerConfig, type McpToolDefinition, type McpToolResult, type MemoryConfig, type MemoryEventData, MemoryManager, MemoryStore, NoConsensus, NoopSpanManager, OLLAMA_PROFILE, OPENAI_PRICING, OPENAI_PROFILE, OPENROUTER_PROFILE, type OpenAICompatibleOptions, OpenAICompatibleProvider, OpenAIEmbedder, OpenAIProvider, OpenAIResponsesProvider, type OutputGuardrail, type OutputValidator, type PendingDecision, type PerModel, type PricingSource, type PricingTable, type Provider, type ProviderAdapter, ProviderError, type ProviderProfile, ProviderRegistry, type ProviderResponse, QuorumNotMet, REDACTED, REDACTION_RULES, type RaceOptions, type RateLimitConfig, RateLimiter, type ReasoningCapture, type ReasoningEmit, type ReasoningProfile, type ReasoningRoundTrip, type RecallOptions, type RecallResult, RedisStore, type RememberOptions, type RememberResult, type ResolvedThinkingOptions, type Result, type RetryPolicy, SGLANG_PROFILE, SQLiteStore, type SchemaCheckData, type SchemaDiagnosticData, type SchemaPromptOption, Session, type SessionOptions, type SpanHandle, type SpanManager, type SpawnOptions, SqliteVectorStore, type StateStore, type StreamChunk, type StringDeltaData, type StringStreamEvent, type StringStreamFilter, type TelemetryConfig, ThinkTagScanner, TimeoutError, type Tool, type ToolApprovalData, type ToolCallData, type ToolCallMessage, type ToolCallStartData, type ToolChoice, type ToolConfig, ToolDenied, type ToolDeniedData, type ToolHooks, VLLM_PROFILE, type ValidateData, type ValidateResult, ValidationError, type VectorEntry, type VectorResult, type VectorStore, type VerifyData, VerifyError, type VerifyOptions, type VerifyRetry, type VoteOptions, type Workflow, type WorkflowConfig, WorkflowContext, type WorkflowContextInit, type WorkflowEndData, type WorkflowStartData, XAI_PROFILE, agent, createSpanManager, defineConfig, estimateOpenAICost, eventCostContribution, expandGlob, extractJson, extractThinkTags, findConfig, hasPositiveTokens, importModule, isCostBearingLeaf, isRetryableStatus, isRootLevel, isUnpricedLeaf, isUsableCost, needsTsxLoader, openaiReasoningEmit, parsePartialJson, pickDefault, pickExport, priceFromTable, reasoningEffortEmit, reasoningObjectEmit, redactEvent, registerConditions, resolveApiKey, resolvePerModel, resolveRuntime, resolveThinkingOptions, stringStreamFromEvents, tool, workflow, zodToJsonSchema };
+export { AXL_EVENT_TYPES, AZURE_PROFILE, type Agent, type AgentCallEndData, type AgentCallInfo, type AgentCallParams, type AgentCallStartData, type AgentConfig, AnthropicProvider, type AnyWorkflow, type ApiKeySource, type AskOptions, type AskScoped, type AuthHeader, type AwaitHumanData, type AwaitHumanOptions, type AwaitHumanResolvedData, type AxlConfig, AxlError, type AxlEvent, type AxlEventBase, AxlEventBus, type AxlEventOf, type AxlEventType, AxlRuntime, AxlStream, BEDROCK_PROFILE, BUILTIN_PROFILES, BudgetExceededError, type BudgetOptions, type BudgetResult, CONFIG_CANDIDATES, COST_BEARING_LEAF_TYPES, type CallbackMeta, type CapabilityFlags, type ChatMessage, type ChatOptions, type CheckpointEventData, type CoalescedPartialObject, type CreateContextOptions, DEEPSEEK_PROFILE, type DelegateData, type DelegateOptions, type Effort, type EmbedResult, type EmbedUsage, type Embedder, type EvalExecuteWorkflow, type EvalHistoryEntry, type EventStreamOptions, EventStreamOverflowError, type ExecuteOptions, type ExecutionInfo, type ExecutionState, GROQ_PROFILE, GeminiProvider, type GuardrailBlockHandler, type GuardrailData, GuardrailError, type GuardrailResult, type GuardrailsConfig, type HandoffDescriptor, type HandoffRecord, type HandoffReturnData, type HandoffStartData, type HumanDecision, InMemoryVectorStore, type InputGuardrail, LLAMACPP_PROFILE, LMSTUDIO_PROFILE, MISTRAL_PROFILE, type MapOptions, MaxTurnsError, McpManager, type McpServer, type McpServerConfig, type McpToolDefinition, type McpToolResult, type MemoryConfig, type MemoryEventData, MemoryManager, MemoryStore, NoConsensus, NoopSpanManager, OLLAMA_PROFILE, OPENAI_PRICING, OPENAI_PROFILE, OPENROUTER_PROFILE, type OpenAICompatibleOptions, OpenAICompatibleProvider, OpenAIEmbedder, OpenAIProvider, OpenAIResponsesProvider, type OutputGuardrail, type OutputValidator, type PendingDecision, type PerModel, type PricingSource, type PricingTable, type Provider, type ProviderAdapter, ProviderError, type ProviderProfile, ProviderRegistry, type ProviderResponse, QuorumNotMet, REDACTED, REDACTION_RULES, type RaceOptions, type RateLimitConfig, RateLimiter, type ReasoningCapture, type ReasoningEmit, type ReasoningProfile, type ReasoningRoundTrip, type RecallOptions, type RecallResult, RedisStore, type RememberOptions, type RememberResult, type ResolvedThinkingOptions, type Result, type RetryPolicy, SGLANG_PROFILE, SQLiteStore, type SchemaCheckData, type SchemaDiagnosticData, type SchemaPromptOption, Session, type SessionOptions, type SpanHandle, type SpanManager, type SpawnOptions, SqliteVectorStore, type StateStore, type StreamChunk, type StringDeltaData, type StringStreamEvent, type StringStreamFilter, type TelemetryConfig, ThinkTagScanner, TimeoutError, type Tool, type ToolApprovalData, type ToolCallData, type ToolCallMessage, type ToolCallStartData, type ToolChoice, type ToolConfig, ToolDenied, type ToolDeniedData, type ToolHooks, type ToolModelOutput, ToolModelOutputError, VLLM_PROFILE, type ValidateData, type ValidateResult, ValidationError, type VectorEntry, type VectorResult, type VectorStore, type VerifyData, VerifyError, type VerifyOptions, type VerifyRetry, type VoteOptions, type Workflow, type WorkflowConfig, WorkflowContext, type WorkflowContextInit, type WorkflowEndData, type WorkflowStartData, XAI_PROFILE, agent, createSpanManager, defineConfig, estimateOpenAICost, eventCostContribution, expandGlob, extractJson, extractThinkTags, findConfig, hasPositiveTokens, importModule, isCostBearingLeaf, isRetryableStatus, isRootLevel, isUnpricedLeaf, isUsableCost, needsTsxLoader, openaiReasoningEmit, parsePartialJson, pickDefault, pickExport, priceFromTable, reasoningEffortEmit, reasoningObjectEmit, redactEvent, registerConditions, resolveApiKey, resolvePerModel, resolveRuntime, resolveThinkingOptions, stringStreamFromEvents, tool, workflow, zodToJsonSchema };

package/dist/index.d.ts

@@ -3066,6 +3066,10 @@ type ToolHooks<TInput = unknown, TOutput = unknown> = {
     /** Transform output after the handler runs. Receives handler result and workflow context. */
     after?(output: TOutput, ctx: WorkflowContext): TOutput | Promise<TOutput>;
 };
+/** JSON-compatible content that a tool may explicitly expose to the model. */
+type ToolModelOutput = string | number | boolean | null | readonly ToolModelOutput[] | {
+    readonly [key: string]: ToolModelOutput | undefined;
+};
 /** Tool configuration */
 type ToolConfig<TInput extends z.ZodType, TOutput = unknown> = {
     name: string;
@@ -3080,6 +3084,8 @@ type ToolConfig<TInput extends z.ZodType, TOutput = unknown> = {
     requireApproval?: boolean;
     /** Lifecycle hooks: before/after the handler. */
     hooks?: ToolHooks<z.infer<TInput>, TOutput>;
+    /** Select the subset of a successful result that is sent back to the model. */
+    toModelOutput?(this: void, output: Readonly<TOutput>): ToolModelOutput;
 };
 /** A defined tool instance */
 type Tool<TInput extends z.ZodType = z.ZodType, TOutput = unknown> = {
@@ -3090,6 +3096,8 @@ type Tool<TInput extends z.ZodType = z.ZodType, TOutput = unknown> = {
     readonly retry: RetryPolicy;
     readonly requireApproval: boolean;
     readonly hooks?: ToolHooks<z.infer<TInput>, TOutput>;
+    /** Select the subset of a successful result that is sent back to the model. */
+    toModelOutput?(this: void, output: Readonly<TOutput>): ToolModelOutput;
     /** Run the tool directly from workflow code */
     run(ctx: WorkflowContext, input: z.infer<TInput>): Promise<TOutput>;
     /** Execute the handler (internal use — includes retry logic) */
@@ -4356,6 +4364,12 @@ declare class AxlError extends Error {
     readonly code: string;
     constructor(code: string, message: string);
 }
+/** Thrown when a tool's model-facing output cannot be projected safely. */
+declare class ToolModelOutputError extends AxlError {
+    readonly toolName: string;
+    readonly cause: unknown;
+    constructor(toolName: string, cause: unknown);
+}
 /** Thrown when schema validation fails after all retries exhausted */
 declare class VerifyError extends AxlError {
     readonly lastOutput: unknown;
@@ -5244,4 +5258,4 @@ declare class NoopSpanManager implements SpanManager {
  */
 declare function createSpanManager(config?: TelemetryConfig): Promise<SpanManager>;
 
-export { AXL_EVENT_TYPES, AZURE_PROFILE, type Agent, type AgentCallEndData, type AgentCallInfo, type AgentCallParams, type AgentCallStartData, type AgentConfig, AnthropicProvider, type AnyWorkflow, type ApiKeySource, type AskOptions, type AskScoped, type AuthHeader, type AwaitHumanData, type AwaitHumanOptions, type AwaitHumanResolvedData, type AxlConfig, AxlError, type AxlEvent, type AxlEventBase, AxlEventBus, type AxlEventOf, type AxlEventType, AxlRuntime, AxlStream, BEDROCK_PROFILE, BUILTIN_PROFILES, BudgetExceededError, type BudgetOptions, type BudgetResult, CONFIG_CANDIDATES, COST_BEARING_LEAF_TYPES, type CallbackMeta, type CapabilityFlags, type ChatMessage, type ChatOptions, type CheckpointEventData, type CoalescedPartialObject, type CreateContextOptions, DEEPSEEK_PROFILE, type DelegateData, type DelegateOptions, type Effort, type EmbedResult, type EmbedUsage, type Embedder, type EvalExecuteWorkflow, type EvalHistoryEntry, type EventStreamOptions, EventStreamOverflowError, type ExecuteOptions, type ExecutionInfo, type ExecutionState, GROQ_PROFILE, GeminiProvider, type GuardrailBlockHandler, type GuardrailData, GuardrailError, type GuardrailResult, type GuardrailsConfig, type HandoffDescriptor, type HandoffRecord, type HandoffReturnData, type HandoffStartData, type HumanDecision, InMemoryVectorStore, type InputGuardrail, LLAMACPP_PROFILE, LMSTUDIO_PROFILE, MISTRAL_PROFILE, type MapOptions, MaxTurnsError, McpManager, type McpServer, type McpServerConfig, type McpToolDefinition, type McpToolResult, type MemoryConfig, type MemoryEventData, MemoryManager, MemoryStore, NoConsensus, NoopSpanManager, OLLAMA_PROFILE, OPENAI_PRICING, OPENAI_PROFILE, OPENROUTER_PROFILE, type OpenAICompatibleOptions, OpenAICompatibleProvider, OpenAIEmbedder, OpenAIProvider, OpenAIResponsesProvider, type OutputGuardrail, type OutputValidator, type PendingDecision, type PerModel, type PricingSource, type PricingTable, type Provider, type ProviderAdapter, ProviderError, type ProviderProfile, ProviderRegistry, type ProviderResponse, QuorumNotMet, REDACTED, REDACTION_RULES, type RaceOptions, type RateLimitConfig, RateLimiter, type ReasoningCapture, type ReasoningEmit, type ReasoningProfile, type ReasoningRoundTrip, type RecallOptions, type RecallResult, RedisStore, type RememberOptions, type RememberResult, type ResolvedThinkingOptions, type Result, type RetryPolicy, SGLANG_PROFILE, SQLiteStore, type SchemaCheckData, type SchemaDiagnosticData, type SchemaPromptOption, Session, type SessionOptions, type SpanHandle, type SpanManager, type SpawnOptions, SqliteVectorStore, type StateStore, type StreamChunk, type StringDeltaData, type StringStreamEvent, type StringStreamFilter, type TelemetryConfig, ThinkTagScanner, TimeoutError, type Tool, type ToolApprovalData, type ToolCallData, type ToolCallMessage, type ToolCallStartData, type ToolChoice, type ToolConfig, ToolDenied, type ToolDeniedData, type ToolHooks, VLLM_PROFILE, type ValidateData, type ValidateResult, ValidationError, type VectorEntry, type VectorResult, type VectorStore, type VerifyData, VerifyError, type VerifyOptions, type VerifyRetry, type VoteOptions, type Workflow, type WorkflowConfig, WorkflowContext, type WorkflowContextInit, type WorkflowEndData, type WorkflowStartData, XAI_PROFILE, agent, createSpanManager, defineConfig, estimateOpenAICost, eventCostContribution, expandGlob, extractJson, extractThinkTags, findConfig, hasPositiveTokens, importModule, isCostBearingLeaf, isRetryableStatus, isRootLevel, isUnpricedLeaf, isUsableCost, needsTsxLoader, openaiReasoningEmit, parsePartialJson, pickDefault, pickExport, priceFromTable, reasoningEffortEmit, reasoningObjectEmit, redactEvent, registerConditions, resolveApiKey, resolvePerModel, resolveRuntime, resolveThinkingOptions, stringStreamFromEvents, tool, workflow, zodToJsonSchema };
+export { AXL_EVENT_TYPES, AZURE_PROFILE, type Agent, type AgentCallEndData, type AgentCallInfo, type AgentCallParams, type AgentCallStartData, type AgentConfig, AnthropicProvider, type AnyWorkflow, type ApiKeySource, type AskOptions, type AskScoped, type AuthHeader, type AwaitHumanData, type AwaitHumanOptions, type AwaitHumanResolvedData, type AxlConfig, AxlError, type AxlEvent, type AxlEventBase, AxlEventBus, type AxlEventOf, type AxlEventType, AxlRuntime, AxlStream, BEDROCK_PROFILE, BUILTIN_PROFILES, BudgetExceededError, type BudgetOptions, type BudgetResult, CONFIG_CANDIDATES, COST_BEARING_LEAF_TYPES, type CallbackMeta, type CapabilityFlags, type ChatMessage, type ChatOptions, type CheckpointEventData, type CoalescedPartialObject, type CreateContextOptions, DEEPSEEK_PROFILE, type DelegateData, type DelegateOptions, type Effort, type EmbedResult, type EmbedUsage, type Embedder, type EvalExecuteWorkflow, type EvalHistoryEntry, type EventStreamOptions, EventStreamOverflowError, type ExecuteOptions, type ExecutionInfo, type ExecutionState, GROQ_PROFILE, GeminiProvider, type GuardrailBlockHandler, type GuardrailData, GuardrailError, type GuardrailResult, type GuardrailsConfig, type HandoffDescriptor, type HandoffRecord, type HandoffReturnData, type HandoffStartData, type HumanDecision, InMemoryVectorStore, type InputGuardrail, LLAMACPP_PROFILE, LMSTUDIO_PROFILE, MISTRAL_PROFILE, type MapOptions, MaxTurnsError, McpManager, type McpServer, type McpServerConfig, type McpToolDefinition, type McpToolResult, type MemoryConfig, type MemoryEventData, MemoryManager, MemoryStore, NoConsensus, NoopSpanManager, OLLAMA_PROFILE, OPENAI_PRICING, OPENAI_PROFILE, OPENROUTER_PROFILE, type OpenAICompatibleOptions, OpenAICompatibleProvider, OpenAIEmbedder, OpenAIProvider, OpenAIResponsesProvider, type OutputGuardrail, type OutputValidator, type PendingDecision, type PerModel, type PricingSource, type PricingTable, type Provider, type ProviderAdapter, ProviderError, type ProviderProfile, ProviderRegistry, type ProviderResponse, QuorumNotMet, REDACTED, REDACTION_RULES, type RaceOptions, type RateLimitConfig, RateLimiter, type ReasoningCapture, type ReasoningEmit, type ReasoningProfile, type ReasoningRoundTrip, type RecallOptions, type RecallResult, RedisStore, type RememberOptions, type RememberResult, type ResolvedThinkingOptions, type Result, type RetryPolicy, SGLANG_PROFILE, SQLiteStore, type SchemaCheckData, type SchemaDiagnosticData, type SchemaPromptOption, Session, type SessionOptions, type SpanHandle, type SpanManager, type SpawnOptions, SqliteVectorStore, type StateStore, type StreamChunk, type StringDeltaData, type StringStreamEvent, type StringStreamFilter, type TelemetryConfig, ThinkTagScanner, TimeoutError, type Tool, type ToolApprovalData, type ToolCallData, type ToolCallMessage, type ToolCallStartData, type ToolChoice, type ToolConfig, ToolDenied, type ToolDeniedData, type ToolHooks, type ToolModelOutput, ToolModelOutputError, VLLM_PROFILE, type ValidateData, type ValidateResult, ValidationError, type VectorEntry, type VectorResult, type VectorStore, type VerifyData, VerifyError, type VerifyOptions, type VerifyRetry, type VoteOptions, type Workflow, type WorkflowConfig, WorkflowContext, type WorkflowContextInit, type WorkflowEndData, type WorkflowStartData, XAI_PROFILE, agent, createSpanManager, defineConfig, estimateOpenAICost, eventCostContribution, expandGlob, extractJson, extractThinkTags, findConfig, hasPositiveTokens, importModule, isCostBearingLeaf, isRetryableStatus, isRootLevel, isUnpricedLeaf, isUsableCost, needsTsxLoader, openaiReasoningEmit, parsePartialJson, pickDefault, pickExport, priceFromTable, reasoningEffortEmit, reasoningObjectEmit, redactEvent, registerConditions, resolveApiKey, resolvePerModel, resolveRuntime, resolveThinkingOptions, stringStreamFromEvents, tool, workflow, zodToJsonSchema };

package/dist/index.js

@@ -73,6 +73,7 @@ function tool(config) {
     retry: retryPolicy,
     requireApproval: config.requireApproval ?? false,
     hooks: config.hooks,
+    ...config.toModelOutput !== void 0 ? { toModelOutput: config.toModelOutput } : {},
     async run(ctx, input) {
       const startTime = Date.now();
       try {
@@ -134,6 +135,17 @@ var AxlError = class extends Error {
     this.code = code;
   }
 };
+var ToolModelOutputError = class extends AxlError {
+  toolName;
+  cause;
+  constructor(toolName, cause) {
+    super("TOOL_MODEL_OUTPUT_ERROR", `Failed to prepare model output for tool "${toolName}"`);
+    this.name = "ToolModelOutputError";
+    this.toolName = toolName;
+    this.cause = cause;
+    Object.defineProperty(this, "cause", { enumerable: false });
+  }
+};
 var VerifyError = class extends AxlError {
   lastOutput;
   zodError;
@@ -2154,6 +2166,15 @@ function sanitizeSchemaForGemini(schema) {
   }
   return out;
 }
+function parseGeminiFunctionResponse(content) {
+  let parsed;
+  try {
+    parsed = JSON.parse(content);
+  } catch {
+    return { result: content };
+  }
+  return parsed !== null && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : { result: parsed };
+}
 var GEMINI_PRICING = {
   "gemini-2.5-pro": [125e-8, 1e-5],
   "gemini-2.5-flash": [3e-7, 25e-7],
@@ -2489,15 +2510,9 @@ var GeminiProvider = class {
         }
       } else if (msg.role === "tool") {
         const functionName = toolCallIdToName.get(msg.tool_call_id) ?? "unknown";
-        let responseData;
-        try {
-          responseData = JSON.parse(msg.content);
-        } catch {
-          responseData = { result: msg.content };
-        }
         const functionResponse = {
           name: functionName,
-          response: responseData
+          response: parseGeminiFunctionResponse(msg.content)
         };
         if (msg.tool_call_id && geminiNativeIds.has(msg.tool_call_id)) {
           functionResponse.id = msg.tool_call_id;
@@ -4727,8 +4742,191 @@ function resolveConfig(config) {
   return resolved;
 }
 
+// src/tool-model-output.ts
+import { types as nodeTypes } from "util";
+function invalid(path, reason) {
+  return new Error(`Invalid tool model output at ${path}: ${reason}`);
+}
+function propertyPath(parent, key) {
+  if (/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(key)) return `${parent}.${key}`;
+  let escaped = "";
+  for (const character of key) {
+    const code = character.charCodeAt(0);
+    if (character === "\\" || character === '"') escaped += `\\${character}`;
+    else if (code <= 31 || code === 8232 || code === 8233) {
+      escaped += `\\u${code.toString(16).padStart(4, "0")}`;
+    } else escaped += character;
+  }
+  return `${parent}["${escaped}"]`;
+}
+function normalize(value, path, stack) {
+  if (value === null || typeof value === "string" || typeof value === "boolean") return value;
+  if (typeof value === "number") {
+    if (!Number.isFinite(value)) throw invalid(path, "number must be finite");
+    return value;
+  }
+  if (value === void 0) throw invalid(path, "undefined is only allowed on object properties");
+  if (typeof value === "bigint" || typeof value === "function" || typeof value === "symbol") {
+    throw invalid(path, `unsupported ${typeof value}`);
+  }
+  if (typeof value !== "object") throw invalid(path, `unsupported ${typeof value}`);
+  let prototype;
+  let descriptors;
+  try {
+    prototype = Object.getPrototypeOf(value);
+    descriptors = Object.getOwnPropertyDescriptors(value);
+    Object.setPrototypeOf(descriptors, null);
+  } catch (cause) {
+    throw invalid(
+      path,
+      `object inspection failed (${cause instanceof Error ? cause.name : "error"})`
+    );
+  }
+  if (stack.has(value)) throw invalid(path, "cyclic reference");
+  for (const key of Reflect.ownKeys(descriptors)) {
+    const descriptor = descriptors[key];
+    if (descriptor && !("value" in descriptor)) {
+      throw invalid(
+        typeof key === "string" ? propertyPath(path, key) : `${path}[symbol]`,
+        "accessor properties are not supported"
+      );
+    }
+    if (typeof key === "symbol" && descriptor?.enumerable) {
+      throw invalid(`${path}[symbol]`, "enumerable symbol keys are not supported");
+    }
+  }
+  if (typeof descriptors.toJSON?.value === "function") {
+    throw invalid(propertyPath(path, "toJSON"), "custom toJSON is not supported");
+  }
+  const array = Array.isArray(value);
+  if (array && prototype !== Array.prototype && prototype !== null) {
+    throw invalid(path, "array subclasses are not supported");
+  }
+  const inheritedToJSON = prototype === Array.prototype || prototype === Object.prototype ? Object.getOwnPropertyDescriptor(prototype, "toJSON") : void 0;
+  if (typeof inheritedToJSON?.value === "function") {
+    throw invalid(propertyPath(path, "toJSON"), "inherited custom toJSON is not supported");
+  }
+  const inheritedThen = prototype === Array.prototype || prototype === Object.prototype ? Object.getOwnPropertyDescriptor(prototype, "then") : void 0;
+  if (typeof descriptors.then?.value === "function" || inheritedThen !== void 0 && (!("value" in inheritedThen) || typeof inheritedThen.value === "function")) {
+    throw invalid(path, "thenable output is not supported");
+  }
+  stack.add(value);
+  try {
+    if (array) {
+      const normalized2 = [];
+      const length = descriptors.length?.value;
+      if (!Number.isSafeInteger(length) || length < 0) {
+        throw invalid(propertyPath(path, "length"), "array length is invalid");
+      }
+      for (let index = 0; index < length; index++) {
+        const descriptor = descriptors[String(index)];
+        if (!descriptor || !("value" in descriptor)) {
+          throw invalid(`${path}[${index}]`, "arrays must be dense data properties");
+        }
+        if (descriptor.value === void 0) {
+          throw invalid(`${path}[${index}]`, "array values cannot be undefined");
+        }
+        normalized2.push(normalize(descriptor.value, `${path}[${index}]`, stack));
+      }
+      for (const key of Object.keys(descriptors)) {
+        const descriptor = descriptors[key];
+        if (!descriptor?.enumerable) continue;
+        const index = Number(key);
+        if (!Number.isInteger(index) || index < 0 || index >= length || String(index) !== key) {
+          throw invalid(propertyPath(path, key), "non-index array properties are not supported");
+        }
+      }
+      Object.setPrototypeOf(normalized2, null);
+      return normalized2;
+    }
+    if (prototype !== Object.prototype && prototype !== null) {
+      throw invalid(path, "only plain objects and null-prototype records are supported");
+    }
+    const normalized = /* @__PURE__ */ Object.create(null);
+    for (const key of Object.keys(descriptors)) {
+      const descriptor = descriptors[key];
+      if (!descriptor?.enumerable) continue;
+      if (!("value" in descriptor)) {
+        throw invalid(propertyPath(path, key), "accessor properties are not supported");
+      }
+      if (descriptor.value === void 0) continue;
+      normalized[key] = normalize(descriptor.value, propertyPath(path, key), stack);
+    }
+    return normalized;
+  } finally {
+    stack.delete(value);
+  }
+}
+function serializeToolModelOutput(toolName, output) {
+  try {
+    if (nodeTypes.isPromise(output)) {
+      void Promise.prototype.then.call(output, void 0, () => void 0);
+    }
+    if (typeof output === "string") return output;
+    return JSON.stringify(normalize(output, "$", /* @__PURE__ */ new WeakSet()));
+  } catch (cause) {
+    throw new ToolModelOutputError(toolName, cause);
+  }
+}
+
 // src/context.ts
 var signalStorage = new AsyncLocalStorage();
+function isErrorShaped(value) {
+  return value !== null && typeof value === "object" && "error" in value;
+}
+function isErrorShapedSafely(value) {
+  try {
+    return isErrorShaped(value);
+  } catch {
+    return false;
+  }
+}
+function recordToolSpanResult(span, value, suppressInspectionErrors) {
+  let isError = false;
+  let errorMessage;
+  const inspect = () => {
+    if (isErrorShaped(value)) {
+      isError = true;
+      errorMessage = value.error;
+    } else {
+      isError = false;
+    }
+  };
+  if (suppressInspectionErrors) {
+    try {
+      inspect();
+    } catch {
+      isError = false;
+      errorMessage = void 0;
+    }
+  } else {
+    inspect();
+  }
+  span.setAttribute("axl.tool.success", !isError);
+  if (isError) span.setStatus("error", errorMessage);
+}
+function prepareToolModelOutput(toolName, project) {
+  let output;
+  try {
+    output = project();
+  } catch (cause) {
+    throw new ToolModelOutputError(toolName, cause);
+  }
+  return serializeToolModelOutput(toolName, output);
+}
+function finalizeToolResult(options) {
+  const { toolName, configuredTool, outcome, legacyContent, emitEnd, beforeProjection } = options;
+  const projectionEligible = configuredTool !== void 0 && !configuredTool.sensitive && outcome.kind === "returned" && configuredTool.toModelOutput !== void 0;
+  if (projectionEligible) {
+    emitEnd();
+    beforeProjection();
+    const project = configuredTool.toModelOutput;
+    return prepareToolModelOutput(toolName, () => project(outcome.value));
+  }
+  const content = legacyContent();
+  emitEnd();
+  return content;
+}
 var askStorage = new AsyncLocalStorage();
 var inlineSchemaCache = /* @__PURE__ */ new WeakMap();
 function zodToJsonSchema(schema) {
@@ -5423,6 +5621,7 @@ ${appendedSchemaText}`;
     let lastStartAttempt = 1;
     let lastStartMaxAttempts = 1;
     while (turns < maxTurns) {
+      this.currentSignal?.throwIfAborted();
       if (Date.now() - startTime > timeoutMs) {
         throw new TimeoutError("ctx.ask()", timeoutMs);
       }
@@ -5524,6 +5723,7 @@ ${appendedSchemaText}`;
       this.onAgentStart?.({ agent: agent2._name, model: modelUri }, callbackMeta);
       let response;
       try {
+        this.currentSignal?.throwIfAborted();
         if (this._streamingEnabled) {
           let content2 = "";
           const toolCalls = [];
@@ -5825,6 +6025,8 @@ ${appendedSchemaText}`;
               return await handoffFn();
             }
           }
+          const tool2 = agent2._config.tools?.find((candidate) => candidate.name === toolName);
+          const isMcpTool = !tool2 && this.mcpManager?.isMcpTool(toolName);
           const toolOverride = this.toolOverrides?.get(toolName);
           if (toolOverride) {
             let toolArgs2;
@@ -5849,38 +6051,47 @@ ${appendedSchemaText}`;
               callbackMeta
             );
             const toolStart2 = Date.now();
+            const suppressErrorShapeInspection2 = tool2?.sensitive === true || tool2?.toModelOutput !== void 0;
             const executeOverride = async () => {
-              let toolResult3;
               try {
-                toolResult3 = await toolOverride(toolArgs2);
+                return { kind: "returned", value: await toolOverride(toolArgs2) };
               } catch (err) {
-                toolResult3 = { error: err instanceof Error ? err.message : String(err) };
+                return {
+                  kind: "thrown",
+                  value: { error: err instanceof Error ? err.message : String(err) }
+                };
               }
-              return toolResult3;
             };
-            const toolResult2 = this.spanManager ? await this.spanManager.withSpanAsync(
+            const outcome = this.spanManager ? await this.spanManager.withSpanAsync(
               "axl.tool.call",
               {
                 "axl.tool.name": toolName,
                 "axl.agent.name": agent2._name
               },
               async (span) => {
-                const r = await executeOverride();
+                const result = await executeOverride();
                 span.setAttribute("axl.tool.duration", Date.now() - toolStart2);
-                const isError = r && typeof r === "object" && "error" in r;
-                span.setAttribute("axl.tool.success", !isError);
-                if (isError)
-                  span.setStatus("error", r.error);
-                return r;
+                recordToolSpanResult(span, result.value, suppressErrorShapeInspection2);
+                return result;
               }
             ) : await executeOverride();
-            const resultContent2 = JSON.stringify(toolResult2);
-            this.emitEvent({
-              type: "tool_call_end",
-              agent: agent2._name,
-              tool: toolName,
-              duration: Date.now() - toolStart2,
-              data: { args: toolArgs2, result: toolResult2, callId: toolCall.id }
+            const toolResult2 = outcome.value;
+            const resultContent2 = finalizeToolResult({
+              toolName,
+              configuredTool: tool2,
+              outcome,
+              legacyContent: () => tool2?.sensitive ? "[REDACTED - sensitive tool output]" : JSON.stringify(toolResult2),
+              emitEnd: () => {
+                const toolDuration2 = Date.now() - toolStart2;
+                this.emitEvent({
+                  type: "tool_call_end",
+                  agent: agent2._name,
+                  tool: toolName,
+                  duration: toolDuration2,
+                  data: { args: toolArgs2, result: toolResult2, callId: toolCall.id }
+                });
+              },
+              beforeProjection: () => this.currentSignal?.throwIfAborted()
             });
             currentMessages.push({
               role: "tool",
@@ -5889,8 +6100,6 @@ ${appendedSchemaText}`;
             });
             continue;
           }
-          const tool2 = agent2._config.tools?.find((t) => t.name === toolName);
-          const isMcpTool = !tool2 && this.mcpManager?.isMcpTool(toolName);
           if (!tool2 && !isMcpTool) {
             this.emitEvent({ type: "tool_denied", agent: agent2._name, tool: toolName });
             currentMessages.push({
@@ -5919,6 +6128,7 @@ ${appendedSchemaText}`;
           });
           this.onToolCall?.({ name: toolName, args: toolArgs, callId: toolCall.id }, callbackMeta);
           const toolStart = Date.now();
+          const suppressErrorShapeInspection = tool2?.sensitive === true || tool2?.toModelOutput !== void 0;
           if (tool2 && tool2.requireApproval) {
             const approvalFn = async () => {
               const decision = await this.awaitHuman({
@@ -5980,12 +6190,12 @@ ${appendedSchemaText}`;
             }
           }
           const executeTool = async () => {
-            let toolResult2;
+            let outcome;
             let resultContent2;
             if (isMcpTool && this.mcpManager) {
               try {
                 const mcpResult = await this.mcpManager.callTool(toolName, toolArgs);
-                toolResult2 = mcpResult;
+                outcome = { kind: "returned", value: mcpResult };
                 resultContent2 = mcpResult.content.map(
                   (c) => c.type === "text" ? c.text : `[${c.type}]`
                 ).join("\n");
@@ -5993,34 +6203,50 @@ ${appendedSchemaText}`;
                   resultContent2 = `Error: ${resultContent2}`;
                 }
               } catch (err) {
-                toolResult2 = { error: err instanceof Error ? err.message : String(err) };
-                resultContent2 = JSON.stringify(toolResult2);
+                outcome = {
+                  kind: "thrown",
+                  value: { error: err instanceof Error ? err.message : String(err) }
+                };
+                resultContent2 = JSON.stringify(outcome.value);
               }
             } else if (tool2) {
               const childCtx = this.createChildContext();
               try {
-                toolResult2 = await tool2._execute(toolArgs, childCtx);
+                outcome = { kind: "returned", value: await tool2._execute(toolArgs, childCtx) };
               } catch (err) {
-                toolResult2 = { error: err instanceof Error ? err.message : String(err) };
+                outcome = {
+                  kind: "thrown",
+                  value: { error: err instanceof Error ? err.message : String(err) }
+                };
               }
-              if (tool2.hooks?.after && !(toolResult2 && typeof toolResult2 === "object" && "error" in toolResult2)) {
+              if (outcome.kind === "returned" && tool2.hooks?.after && !(suppressErrorShapeInspection ? isErrorShapedSafely(outcome.value) : isErrorShaped(outcome.value))) {
                 try {
-                  toolResult2 = await tool2.hooks.after(toolResult2, this);
+                  outcome = {
+                    kind: "returned",
+                    value: await tool2.hooks.after(outcome.value, this)
+                  };
                 } catch (err) {
-                  toolResult2 = {
-                    error: `After hook error: ${err instanceof Error ? err.message : String(err)}`
+                  outcome = {
+                    kind: "thrown",
+                    value: {
+                      error: `After hook error: ${err instanceof Error ? err.message : String(err)}`
+                    }
                   };
                 }
               }
-              resultContent2 = tool2.sensitive ? "[REDACTED - sensitive tool output]" : JSON.stringify(toolResult2);
+              if (tool2.sensitive) {
+                resultContent2 = "[REDACTED - sensitive tool output]";
+              } else if (outcome.kind === "thrown" || tool2.toModelOutput === void 0) {
+                resultContent2 = JSON.stringify(outcome.value);
+              }
             } else {
-              toolResult2 = void 0;
+              outcome = { kind: "returned", value: void 0 };
               resultContent2 = "Tool execution error";
             }
-            return { toolResult: toolResult2, resultContent: resultContent2 };
+            return { outcome, resultContent: resultContent2 };
           };
           const traceName = isMcpTool && this.mcpManager ? this.mcpManager.getQualifiedName(toolName) ?? toolName : toolName;
-          const { toolResult, resultContent } = this.spanManager ? await this.spanManager.withSpanAsync(
+          const execution = this.spanManager ? await this.spanManager.withSpanAsync(
             "axl.tool.call",
             {
               "axl.tool.name": traceName,
@@ -6029,22 +6255,27 @@ ${appendedSchemaText}`;
             async (span) => {
               const r = await executeTool();
               span.setAttribute("axl.tool.duration", Date.now() - toolStart);
-              const isError = r.toolResult && typeof r.toolResult === "object" && "error" in r.toolResult;
-              span.setAttribute("axl.tool.success", !isError);
-              if (isError)
-                span.setStatus(
-                  "error",
-                  r.toolResult.error
-                );
+              recordToolSpanResult(span, r.outcome.value, suppressErrorShapeInspection);
               return r;
             }
           ) : await executeTool();
-          this.emitEvent({
-            type: "tool_call_end",
-            agent: agent2._name,
-            tool: traceName,
-            duration: Date.now() - toolStart,
-            data: { args: toolArgs, result: toolResult, callId: toolCall.id }
+          const toolResult = execution.outcome.value;
+          const toolDuration = Date.now() - toolStart;
+          const resultContent = finalizeToolResult({
+            toolName,
+            configuredTool: tool2,
+            outcome: execution.outcome,
+            legacyContent: () => execution.resultContent,
+            emitEnd: () => {
+              this.emitEvent({
+                type: "tool_call_end",
+                agent: agent2._name,
+                tool: traceName,
+                duration: toolDuration,
+                data: { args: toolArgs, result: toolResult, callId: toolCall.id }
+              });
+            },
+            beforeProjection: () => this.currentSignal?.throwIfAborted()
           });
           currentMessages.push({
             role: "tool",
@@ -11908,6 +12139,7 @@ export {
   ThinkTagScanner,
   TimeoutError,
   ToolDenied,
+  ToolModelOutputError,
   VLLM_PROFILE,
   ValidationError,
   VerifyError,