What
The room_send action, which broadcasts a live, non-persisted event to everyone currently viewing a published artifact, cannot be auto-approved under any configuration. It is refused in plan mode, refused in a Cowork session with no way to show an approval card, and otherwise raised as an ask prompt that no always-allow rule can satisfy.
Details
- Plan mode refusal reads "Live room events cannot be sent from plan mode".
- Without a consent surface the Cowork refusal points you at the approval card.
- The ask permission sets suppression of always-allow rules, and the automatic permission classifier is explicitly barred from approving it.
- Inputs are validated: a lowercase topic name, and a JSON object payload under a size cap. Delivery and peer counts come back to the model as the tool result.
Evidence
Live room events cannot be sent from plan mode
Strings lifted out of the shipped bundle, so the claim above can be checked against them.