fix: ensure that tool attachments arent sent as user messages