fix: remove false allowedTools/disallowedTools warning and correct tool permission docs (#212) [v6] - #214

Refs #212

What changed

• Warning removed: validateSettings no longer warns "Both allowedTools and disallowedTools are specified. Only allowedTools will be used." That was never true. The provider forwards both lists unchanged, and the CLI applies both, with matching deny rules taking precedence. Runtime forwarding is unchanged.

• Tests: src/validation.test.ts pins that both lists are accepted with no warning, whether set as top-level settings, through sdkOptions, or mixed. src/claude-code-language-model.test.ts pins that both lists are forwarded unchanged to the SDK in each of those three configurations.

• Docs: src/types.ts JSDoc and example, a new short README section, docs/ai-sdk-v5/GUIDE.md and the historical docs/ai-sdk-v4/GUIDE.md (Tool Management sections and tables), and examples/README.md now say:

  • the two lists can be combined, and matching deny rules take precedence;
  • allowedTools only pre-approves tools (no prompt); it is not an allowlist;
  • tools restricts which built-in tools exist (tools: [] = none), and MCP tools are controlled separately.

  The guide tables also no longer say an empty list sends an empty flag; empty lists aren't passed at all. The rewritten Tool Management examples now use defaultSettings. The v5 guide notes that a scoped Bash deny rule matches the command as written.

• Example: examples/tool-management.ts uses tools: [] for the "no tools" case, and adds a combined case (allowedTools: ['Bash','Read'] + disallowedTools: ['Read']) that shows deny wins.

• CHANGELOG entry under Unreleased → Fixed. No version bump.

Commands run

npm run lint, npm run typecheck, npm test (1156 tests passed), npm run format:check, npm run build, git diff --check. All passed (lint has 2 pre-existing warnings in claude-code-language-model.ts).

I ran examples/tool-management.ts live from a scratch cwd outside the repo, with CLAUDE_CODE_DISABLE_AUTO_MEMORY=1 set through the provider env setting:

• With tools: [], Claude made no tool calls and reported having no tools.
• With the combined lists, Read was unavailable and only Bash was called. The file contents came back.

Independent review (Codex gpt-6-astra, xhigh)

• Round 1: CHANGES REQUESTED. Three findings, all fixed:
  • the guide examples didn't wrap settings in defaultSettings;
  • a README comment said Bash was pre-approved when only Bash(git log:*) was;
  • comments overstated what the scoped rule Bash(rm:*) protects.
• Round 2: SIGN-OFF on both lines. No blocking findings and no nits.