question permission deny blocks same-named custom tool in headless mode

Description

A custom tool named question (.opencode/tools/question.ts) never runs in headless mode. It gets blocked by the built-in question permission, which headless mode denies unconditionally: packages/opencode/src/cli/cmd/run.ts injects { permission: "question", action: "deny", pattern: "*" } when not interactive. A user-defined tool that shares the built-in name inherits that deny, so it's silently killed. Naming the tool ask works around it.

Plugins

None

OpenCode version

1.18.16

Steps to reproduce

1. Add .opencode/tools/question.ts exporting a tool named question (Zod args).
2. Run: opencode run --format json --pure -- "call the question tool"
3. The tool is denied and never invoked (no output from the tool).

Screenshot and/or share link

No response

Operating System

Ubuntu 24.04 (aarch64)

Terminal

non-interactive (openshell sandbox exec -- sh -c, --no-tty)