* fix(agent): reject malformed tool call arguments * test(agent): expect malformed tool arguments to fail closed