Repository navigation
Plan mode (read-only) allows write operations after answering the question tool #41133
Closed as not planned
Description
Description
While a session is in plan mode (read-only), answering the question tool
to approve a plan does not keep writes blocked. The agent then ran Edit/Write
operations on 4 files successfully, with no rejection from the harness or
permission system, even though the plan-mode system reminder was still active.
If approving via the question tool is meant to lift read-only, the plan mode
exit must be explicit; otherwise write tools must stay blocked while plan mode
is active.
Plugins
None (no plugins installed; only the default @opencode-ai/plugin SDK dependency present in user config, no plugin entries).
OpenCode version
1.18.15
Steps to reproduce
- Start a session in plan mode (read-only).
- Ask the user a question via the question tool (e.g., "apply the plan?").
- User selects an "approve" option in the question tool.
- Ask the agent to apply the changes.
- Observe that Edit/Write tools execute without being blocked.
Screenshot and/or share link
No response
Operating System
ubuntu 24.04.04
Terminal
Ghostty
Metadata
Metadata
Assignees
Labels
No labels
Activity
github-actions commentedon Aug 7, 2026
This issue might be a duplicate of existing issues. Please check:
Your specific angle — that answering the question tool's approval option silently lifts the read-only restriction — is a useful refinement worth noting in those threads if it hasn't been captured yet.
github-actions commentedon Oct 7, 2026
To stay organized issues are automatically closed after 60 days of no activity. If the issue is still relevant please open a new one.