@mono-agent/agent-app 0.15.1 → 0.15.3

package/README.md

@@ -309,16 +309,17 @@ stale auth locks are repaired only when the recorded process is securely proven
 gone. The
 wizard keeps **Allow all tools** as its default. Pi/Claude flows disclose
 shell/file/web/channel effects and reconfirm an unsandboxed choice. Direct Codex
-fixes policy to exact allow-all, uses its native network-off workspace sandbox,
+fixes policy to effective allow-all (an omitted or wildcard-containing
+allowlist with no denied tools), uses its native network-off workspace sandbox,
 denies unattended escalations, and fails unexpected server requests promptly.
 Mixed chains are unrestricted only under explicit `runtime.routeSafety:
 "per-route-native"`, which isolates provider runtimes and applies a documented
 route-local contract. The default `uniform` mode keeps one common monotonic
 contract and rejects/skips routes that cannot represent it. Pi keeps mono-agent
 tool policy and optional SRT; Claude uses representable provider-native controls;
-direct Codex/OpenCode use provider-native safety plus exact allow-all. No route
+direct Codex/OpenCode use provider-native safety plus effective allow-all. No route
 silently drops a required capability. Pi `pi:opencode-go:*` remains a Pi route.
-Direct OpenCode also requires exact allow-all; restrictive static policies fail
+Direct OpenCode has the same omitted-or-wildcard/empty-deny requirement; restrictive static policies fail
 validation/runtime and an incompatible dynamic override is warned and ignored.
 
 ### Run history

package/dist/broadcast-recorder.d.ts

@@ -0,0 +1,27 @@
+import type { RunEventSink } from "@mono-agent/agent-contracts";
+import type { RunRecorder } from "@mono-agent/observability";
+/** Stable run context stamped onto every broadcast frame. */
+export interface BroadcastRunContext {
+    readonly runId: string;
+    readonly conversationId: string;
+    /** Producing instance's trace-source id (empty when the host has none). */
+    readonly sourceId: string;
+    readonly sourceLabel?: string;
+    /** Trigger channel, e.g. "cron" | "webhook" | "chat" | "memory". */
+    readonly source?: string;
+    /** Trigger detail (cron job id / webhook endpoint name). */
+    readonly sourceDetail?: string;
+}
+/**
+ * Wrap a {@link RunRecorder} so every run start/event/finish is ALSO published to
+ * a {@link RunEventSink} (the in-process live bus), giving operator surfaces
+ * sub-run visibility the on-disk recorder can't (it flushes only at start/finish).
+ *
+ * Broadcast is best-effort and additive, exactly like the Phoenix exporter path:
+ * the inner recorder is the source of truth for the returned summary, and a
+ * publish failure never changes the run outcome (publish is wrapped and the bus's
+ * own `publish` is contracted never to throw). `seq` is left 0 here — the bus
+ * stamps a process-wide monotonic value on publish.
+ */
+export declare function createBroadcastRunRecorder(inner: RunRecorder, sink: RunEventSink, ctx: BroadcastRunContext): RunRecorder;
+//# sourceMappingURL=broadcast-recorder.d.ts.map

package/dist/broadcast-recorder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"broadcast-recorder.d.ts","sourceRoot":"","sources":["../src/broadcast-recorder.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAiB,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAE/E,OAAO,KAAK,EAAE,WAAW,EAAmD,MAAM,2BAA2B,CAAC;AAE9G,6DAA6D;AAC7D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,oEAAoE;IACpE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,4DAA4D;IAC5D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,YAAY,EAClB,GAAG,EAAE,mBAAmB,GACvB,WAAW,CAyFb"}

package/dist/broadcast-recorder.js

@@ -0,0 +1,104 @@
+import { LIVE_EVENT_SCHEMA } from "@mono-agent/agent-contracts";
+import { redactJsonValue } from "@mono-agent/observability";
+/**
+ * Wrap a {@link RunRecorder} so every run start/event/finish is ALSO published to
+ * a {@link RunEventSink} (the in-process live bus), giving operator surfaces
+ * sub-run visibility the on-disk recorder can't (it flushes only at start/finish).
+ *
+ * Broadcast is best-effort and additive, exactly like the Phoenix exporter path:
+ * the inner recorder is the source of truth for the returned summary, and a
+ * publish failure never changes the run outcome (publish is wrapped and the bus's
+ * own `publish` is contracted never to throw). `seq` is left 0 here — the bus
+ * stamps a process-wide monotonic value on publish.
+ */
+export function createBroadcastRunRecorder(inner, sink, ctx) {
+    let eventIndex = 0;
+    let terminalStarted = false;
+    let terminalPromise;
+    const publish = (frame) => {
+        try {
+            sink.publish(frame);
+        }
+        catch {
+            // Broadcast is best-effort; a sink failure must never break the run.
+        }
+    };
+    const finished = async (summary) => {
+        const redactedSummary = redactJsonValue(summary);
+        publish({
+            t: "run_finished",
+            schema: LIVE_EVENT_SCHEMA,
+            sourceId: ctx.sourceId,
+            runId: ctx.runId,
+            status: redactedSummary.status,
+            summary: redactedSummary,
+            seq: 0,
+        });
+        return summary;
+    };
+    const recorder = {
+        onEvent(event) {
+            // Terminal is a hard boundary in the live protocol. Events accepted after
+            // commit starts could otherwise appear after `run_finished` or be absent
+            // from the authoritative summary/export.
+            if (terminalStarted)
+                return;
+            inner.onEvent(event);
+            const redactedEvent = redactJsonValue(event);
+            publish({
+                t: "event",
+                schema: LIVE_EVENT_SCHEMA,
+                sourceId: ctx.sourceId,
+                runId: ctx.runId,
+                eventIndex: eventIndex++,
+                event: redactedEvent,
+                seq: 0,
+            });
+        },
+        async prepareFinish(result) {
+            await inner.prepareFinish?.(result);
+        },
+        async commitFinish(result) {
+            if (terminalPromise === undefined) {
+                terminalStarted = true;
+                terminalPromise = (async () => await finished(inner.commitFinish === undefined ? await inner.finish(result) : await inner.commitFinish(result)))();
+            }
+            return await terminalPromise;
+        },
+        async finish(result) {
+            await recorder.prepareFinish?.(result);
+            return await recorder.commitFinish(result);
+        },
+        async fail(error) {
+            if (terminalPromise === undefined) {
+                terminalStarted = true;
+                terminalPromise = (async () => await finished(await inner.fail(error)))();
+            }
+            return await terminalPromise;
+        },
+    };
+    // `start` is optional on RunRecorder — only expose (and emit run_started) when
+    // the inner recorder has one, so callers that probe `recorder.start?.()` behave
+    // identically to the unwrapped recorder.
+    if (inner.start !== undefined) {
+        const innerStart = inner.start.bind(inner);
+        recorder.start = async () => {
+            const summary = await innerStart();
+            publish({
+                t: "run_started",
+                schema: LIVE_EVENT_SCHEMA,
+                sourceId: ctx.sourceId,
+                ...(ctx.sourceLabel === undefined ? {} : { sourceLabel: ctx.sourceLabel }),
+                runId: ctx.runId,
+                conversationId: ctx.conversationId,
+                ...(ctx.source === undefined ? {} : { source: ctx.source }),
+                ...(ctx.sourceDetail === undefined ? {} : { sourceDetail: ctx.sourceDetail }),
+                startedAt: summary.startedAt ?? new Date().toISOString(),
+                seq: 0,
+            });
+            return summary;
+        };
+    }
+    return recorder;
+}
+//# sourceMappingURL=broadcast-recorder.js.map

package/dist/broadcast-recorder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"broadcast-recorder.js","sourceRoot":"","sources":["../src/broadcast-recorder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAEhE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAgB5D;;;;;;;;;;GAUG;AACH,MAAM,UAAU,0BAA0B,CACxC,KAAkB,EAClB,IAAkB,EAClB,GAAwB;IAExB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,eAAgD,CAAC;IACrD,MAAM,OAAO,GAAG,CAAC,KAAoB,EAAQ,EAAE;QAC7C,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,EAAE,OAAmB,EAAuB,EAAE;QAClE,MAAM,eAAe,GAAG,eAAe,CAAC,OAAO,CAAe,CAAC;QAC/D,OAAO,CAAC;YACN,CAAC,EAAE,cAAc;YACjB,MAAM,EAAE,iBAAiB;YACzB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,MAAM,EAAE,eAAe,CAAC,MAAM;YAC9B,OAAO,EAAE,eAAe;YACxB,GAAG,EAAE,CAAC;SACP,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IACF,MAAM,QAAQ,GAAgB;QAC5B,OAAO,CAAC,KAAuB;YAC7B,0EAA0E;YAC1E,yEAAyE;YACzE,yCAAyC;YACzC,IAAI,eAAe;gBAAE,OAAO;YAC5B,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACrB,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,CAAqB,CAAC;YACjE,OAAO,CAAC;gBACN,CAAC,EAAE,OAAO;gBACV,MAAM,EAAE,iBAAiB;gBACzB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,UAAU,EAAE,UAAU,EAAE;gBACxB,KAAK,EAAE,aAAa;gBACpB,GAAG,EAAE,CAAC;aACP,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,MAAyB;YAC3C,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,MAAyB;YAC1C,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;gBAClC,eAAe,GAAG,IAAI,CAAC;gBACvB,eAAe,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,QAAQ,CAC3C,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CACjG,CAAC,EAAE,CAAC;YACP,CAAC;YACD,OAAO,MAAM,eAAe,CAAC;QAC/B,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,MAAyB;YACpC,MAAM,QAAQ,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC;YACvC,OAAO,MAAM,QAAQ,CAAC,YAAa,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAc;YACvB,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;gBAClC,eAAe,GAAG,IAAI,CAAC;gBACvB,eAAe,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,CAAC;YACD,OAAO,MAAM,eAAe,CAAC;QAC/B,CAAC;KACF,CAAC;IACF,+EAA+E;IAC/E,gFAAgF;IAChF,yCAAyC;IACzC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,QAAQ,CAAC,KAAK,GAAG,KAAK,IAAyB,EAAE;YAC/C,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;YACnC,OAAO,CAAC;gBACN,CAAC,EAAE,aAAa;gBAChB,MAAM,EAAE,iBAAiB;gBACzB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC1E,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,cAAc,EAAE,GAAG,CAAC,cAAc;gBAClC,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC;gBAC7E,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACxD,GAAG,EAAE,CAAC;aACP,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/channel-drivers/live.d.ts

@@ -0,0 +1,12 @@
+import type { LiveAdapterConfig, LiveAdapterHandle, LiveAdapterOptions } from "@mono-agent/operator-adapter";
+import type { ChannelDriver } from "../channels.js";
+export interface LiveChannelOverrides {
+    readonly adapterFactory?: (options: LiveAdapterOptions) => Promise<LiveAdapterHandle>;
+}
+/**
+ * The live event relay is enabled by default on loopback so read-only operator
+ * surfaces (the `@mono-agent/session-web` PWA) can observe a running agent
+ * without a per-agent config edit.
+ */
+export declare function createLiveChannelDriver(overrides?: LiveChannelOverrides): ChannelDriver<LiveAdapterConfig>;
+//# sourceMappingURL=live.d.ts.map

package/dist/channel-drivers/live.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live.d.ts","sourceRoot":"","sources":["../../src/channel-drivers/live.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EACnB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAQpD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE,kBAAkB,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACvF;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,GAAE,oBAAyB,GACnC,aAAa,CAAC,iBAAiB,CAAC,CAsClC"}

package/dist/channel-drivers/live.js

@@ -0,0 +1,48 @@
+import { buildChannelConfigView } from "../channel-config-view.js";
+let liveModule;
+const loadLiveModule = async () => (liveModule ??= await import("@mono-agent/operator-adapter"));
+/**
+ * The live event relay is enabled by default on loopback so read-only operator
+ * surfaces (the `@mono-agent/session-web` PWA) can observe a running agent
+ * without a per-agent config edit.
+ */
+export function createLiveChannelDriver(overrides = {}) {
+    return {
+        id: "live",
+        label: "Live",
+        async configView(input) {
+            const adapter = await loadLiveModule();
+            return await buildChannelConfigView(this, adapter.LIVE_CONFIG_FIELDS, input, { jsonKey: "live" });
+        },
+        async loadConfig(input) {
+            const adapter = await loadLiveModule();
+            return await adapter.loadLiveAdapterConfig({ env: input.env, jsonPath: input.configPath });
+        },
+        isConfigError(error) {
+            return liveModule !== undefined && error instanceof liveModule.LiveAdapterError;
+        },
+        disabledReason(config) {
+            return config.enabled ? undefined : "Live event relay is disabled.";
+        },
+        async start(input) {
+            const adapterModule = await loadLiveModule();
+            const adapterFactory = overrides.adapterFactory ?? adapterModule.startLiveAdapter;
+            const bus = input.liveEventBus ?? adapterModule.createLiveEventBus();
+            const adapter = await adapterFactory({
+                bus,
+                host: input.config.host,
+                port: input.config.port,
+                basePath: input.config.basePath,
+                allowNonLoopback: input.config.allowNonLoopback,
+                ...(input.config.apiKey === undefined ? {} : { apiKey: input.config.apiKey }),
+                onServerError: (reason) => input.onFailure(reason),
+                ...(input.logger === undefined ? {} : { logger: input.logger }),
+            });
+            return {
+                summary: { baseUrl: adapter.baseUrl },
+                stop: () => adapter.stop(),
+            };
+        },
+    };
+}
+//# sourceMappingURL=live.js.map

package/dist/channel-drivers/live.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live.js","sourceRoot":"","sources":["../../src/channel-drivers/live.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAKnE,IAAI,UAAyC,CAAC;AAC9C,MAAM,cAAc,GAAG,KAAK,IAAgC,EAAE,CAC5D,CAAC,UAAU,KAAK,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC,CAAC;AAMhE;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,YAAkC,EAAE;IAEpC,OAAO;QACL,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,MAAM;QACb,KAAK,CAAC,UAAU,CAAC,KAAK;YACpB,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC;YACvC,OAAO,MAAM,sBAAsB,CAAC,IAAI,EAAE,OAAO,CAAC,kBAAkB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACpG,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,KAAK;YACpB,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAC;YACvC,OAAO,MAAM,OAAO,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,aAAa,CAAC,KAAK;YACjB,OAAO,UAAU,KAAK,SAAS,IAAI,KAAK,YAAY,UAAU,CAAC,gBAAgB,CAAC;QAClF,CAAC;QACD,cAAc,CAAC,MAAM;YACnB,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,+BAA+B,CAAC;QACtE,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,KAAK;YACf,MAAM,aAAa,GAAG,MAAM,cAAc,EAAE,CAAC;YAC7C,MAAM,cAAc,GAAG,SAAS,CAAC,cAAc,IAAI,aAAa,CAAC,gBAAgB,CAAC;YAClF,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,IAAI,aAAa,CAAC,kBAAkB,EAAE,CAAC;YACrE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC;gBACnC,GAAG;gBACH,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;gBACvB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;gBACvB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;gBAC/B,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,gBAAgB;gBAC/C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC7E,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;gBAClD,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;aAChE,CAAC,CAAC;YACH,OAAO;gBACL,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;gBACrC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE;aAC3B,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/doctor.js

@@ -234,7 +234,7 @@ async function applyRequestModelOverrideCompatibilityChecks(sections, config, dr
     const skillBypasses = [];
     const piModelResolutionFailures = [];
     const monoSandboxActive = config.sandbox !== undefined && config.sandbox.mode !== "off";
-    const restrictiveToolPolicy = !hasExactAllowAllToolPolicy(config.tools);
+    const restrictiveToolPolicy = !hasAllowAllOnlyToolPolicy(config.tools);
     let configuredMcpServerNames = [];
     if (config.tools.mcpConfigPath !== undefined) {
         try {
@@ -354,7 +354,7 @@ async function applyRequestModelOverrideCompatibilityChecks(sections, config, dr
             ...(toolPolicyBypasses.length === 0
                 ? []
                 : [
-                    "Per-trigger direct OpenCode model overrides require exact allow-all because OpenCode's provider-owned tool loop does not consume mono-agent allowedTools/disallowedTools.",
+                    "Per-trigger direct OpenCode model overrides require an effective allow-all policy because OpenCode's provider-owned tool loop does not consume mono-agent allowedTools/disallowedTools.",
                     ...toolPolicyBypasses,
                 ]),
             ...(effortBypasses.length === 0
@@ -393,10 +393,8 @@ async function applyRequestModelOverrideCompatibilityChecks(sections, config, dr
 function isUnknownRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function hasExactAllowAllToolPolicy(tools) {
-    return tools.allowedTools.length === 1
-        && tools.allowedTools[0] === "*"
-        && tools.disallowedTools.length === 0;
+function hasAllowAllOnlyToolPolicy(tools) {
+    return isAllowAllTools(tools.allowedTools) && tools.disallowedTools.length === 0;
 }
 /** Adapter send tools each channel owns; an allowed entry needs BOTH the tool AND the enabled channel. */
 const CHANNEL_OWNED_SEND_TOOLS = {
@@ -1660,22 +1658,22 @@ async function toolsSection(config, input) {
     ]
         .filter(({ model, executionMode }) => model.sdk === "claude" && executionMode === "cli")
         .map(({ model }) => referenceOf(model));
-    const exactAllowAll = hasExactAllowAllToolPolicy(config.tools);
+    const allowAllOnly = hasAllowAllOnlyToolPolicy(config.tools);
     const dedicatedNoToolsProbe = input.codexNoToolsProbe === true
         && allowedTools.length === 0
         && config.tools.disallowedTools.length === 0;
     if (directCodexModels.length > 0
         && !dedicatedNoToolsProbe
-        && !exactAllowAll) {
+        && !allowAllOnly) {
         status = "error";
         details.push(`Direct Codex model${directCodexModels.length === 1 ? "" : "s"} ${directCodexModels.join(", ")} cannot enforce ` +
-            "tools.allowedTools/tools.disallowedTools. Use exact allow-all (allowedTools: [\"*\"] with no disallowedTools), " +
+            "tools.allowedTools/tools.disallowedTools. Use allow-all-only (allowedTools omitted or containing \"*\", with no disallowedTools), " +
             "or select a runtime that supports restrictive tool policies.");
     }
-    if (directOpenCodeModels.length > 0 && !exactAllowAll) {
+    if (directOpenCodeModels.length > 0 && !allowAllOnly) {
         status = "error";
         details.push(`Direct OpenCode model${directOpenCodeModels.length === 1 ? "" : "s"} ${directOpenCodeModels.join(", ")} cannot enforce ` +
-            "tools.allowedTools/tools.disallowedTools. Use exact allow-all (allowedTools: [\"*\"] with no disallowedTools), " +
+            "tools.allowedTools/tools.disallowedTools. Use allow-all-only (allowedTools omitted or containing \"*\", with no disallowedTools), " +
             "or use a Pi runtime (including pi:opencode-go:*).");
     }
     if (claudeCliModels.length > 0 && allowedTools.length === 0) {
@@ -2836,7 +2834,7 @@ function routeNativeSafetyDetail(model, index, config) {
     if (model.sdk === "codex") {
         return `${label} ${ref}: ${directCodexSandboxPosture(config.runtime.permissionMode).detail}`;
     }
-    return `${label} ${ref}: OpenCode provider-owned execution with exact allow-all tool policy applies; mono-agent SRT rules are not projected.`;
+    return `${label} ${ref}: OpenCode provider-owned execution with an effective allow-all tool policy applies; mono-agent SRT rules are not projected.`;
 }
 function directCodexSandboxPosture(permissionMode) {
     if (permissionMode === "bypassPermissions") {