Issue with token counts for tool messages

check out if you can get paid by this bug here, sounds like something that might get you paid for, but yeah, seems like a bug, might even be a sec bug too if exploitable