tool-calls

Idempotent tool calls for agent loops

Use stable operation IDs, stored results and reconciliation to handle retries without assuming external actions are atomic.