Sub Agents Do Not Obey Plan / Build mode. #23533

Activity

1. Czargasm

   added

   bugSomething isn't workingSomething isn't working

   on Apr 20, 2026
2. github-actions

   assigned

   rekram1-node

   on Apr 20, 2026
3. github-actions

   added

   coreAnything pertaining to core functionality of the application (opencode server stuff)Anything pertaining to core functionality of the application (opencode server stuff)

   on Apr 20, 2026
4. github-actions commented on Apr 20, 2026

   

   github-actionsBot

   on Apr 20, 2026 – with GitHub Actions

   Contributor

   More actions

   This issue might be a duplicate of existing issues. Please check:

   • Sub-agent in plan mode bypasses restrictions after compaction #18213: Sub-agent in plan mode bypasses restrictions after compaction
   • [CRITICAL Security Issue/Bug] Plan mode restrictions bypassed when spawning sub-agents #6527: Plan mode restrictions bypassed when spawning sub-agents (critical security/bug report)
   • Plan mode: agent executes file-creation commands via bash tool directly (no sub-agent bypass) #19094: Plan mode: agent executes file-creation commands via bash tool directly
   • plan mode: agent write files using bash #16805: Plan mode: agent writes files using bash
   • Plan mode does not prevent write operations via Bash tool #22641: Plan mode does not prevent write operations via Bash tool
   • 'Plan' agent does not adhere to the plan rule. #11441: Plan agent does not adhere to the plan rule
   • Plan mode is editing my files (gemini 3 pro) #7292: Plan mode is editing files (similar symptom with different model)

   If your issue is distinct (e.g., specific to sub-agents spawned via the Task tool rather than the primary agent), please clarify how it differs from the above.
5. Czargasm commented on Apr 20, 2026

   

   Czargasm

   on Apr 20, 2026

   Author

   More actions

   I didn't compact.. this was a fresh session. I don't think it was using bash but it might have been I just immediately panicked and tried to stop it but you can't double esc a sub agent so I went to main agent and stopped it. It even denied that it edited files until I made it check and then it had a lot of repairing to do.
6. MartinEmrich commented on Apr 21, 2026

   

   MartinEmrich

   on Apr 21, 2026

   More actions

   Same here, experienced this across various models (Qwen3.5, Qwen3.5, Anthropic Claude Haiku and Sonnet), projects and sessions. The core issue is that OpenCode does not enforce write tool call restrictions in Plan mode, it only "hopes" the model adheres to the instructions. If the model does a writing tool call (even hidden in a bash or python command line execution), there's nothing stopping it.
7. iceman1010 commented on Apr 26, 2026

   

   iceman1010

   on Apr 26, 2026

   More actions

   Some models are really terrible. They kind of don't care at all if you're in plan mode. And this is not only about sub-agents. Something needs to be done to restrict it in plan mode.
8. neuhaus commented on May 1, 2026

   

   neuhaus

   on May 1, 2026

   More actions

   This critical issue is a duplicate of issue #7292 and hasn't been fixed since it was introduced on Jan 1st.
9. thdxr

   removed

   bugSomething isn't workingSomething isn't working

   coreAnything pertaining to core functionality of the application (opencode server stuff)Anything pertaining to core functionality of the application (opencode server stuff)

   on May 3, 2026
10. Czargasm commented on May 6, 2026

    

    Czargasm

    on May 6, 2026

    Author

    More actions

    Damn that's a long time for this issue to be unfixed. I've mitigated the problems with 3 different kinds of backups but it would be nice to just be able to trust plan mode. Might as well close this one since its a dupe.
11. Czargasm

    closed this as completedon May 6, 2026