Summary

• preserve provider tool call IDs when extracting function calls from wp-ai-client results
• pass filtered runtime context through to the tool executor so product-owned confirmation overrides reach the gate
• allow one-shot decision overrides to be bound to exact tool parameters

Tests

• composer test
• composer lint:php
• verified on menta with fake potrero IDs: Anthropic replay keeps toolu_* IDs, no 400, delete tool executes as admin and returns not_found