diff --git a/src/agent/tools/policy.ts b/src/agent/tools/policy.ts
index 91a1ec08d..765cdd075 100644
--- a/src/agent/tools/policy.ts
+++ b/src/agent/tools/policy.ts
@@ -60,7 +60,7 @@ function compilePattern(pattern: string): CompiledPattern {
   const escaped = normalized.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
   return {
     kind: "regex",
-    value: new RegExp(`^${escaped.replaceAll("\\*", ".*")}$`),
+    value: new RegExp(`^${escaped.replace(/\\\*/g, ".*")}$`),
   };
 }