Today, TensorZero assumes all dynamic tools are allowed. I agree we might want to change that; but that'll be a breaking change.

Proposal

For 1-2 releases, we should log INFO announcing the breaking change if the client provides allowed_tools and dynamic_tools but the latter includes tools that aren't explicitly allowed; and start accepting dynamic tools in the allowed list. #3548

After that:

• TensorZero accepts allowed_tools as a subset of static tools U dynamic tools.
• If the model provider supports allowed_tools, we send along every tool (static tools U dynamic tools) and allowed_tools.
• If the model provider does not support allowed_tools, the gateway filters the tools.

The same behavior should be replicared for required. So might as well tackle both.