The calls, already name-checked against the allow-list and repaired against their schemas.
final List<ToolCall> calls;