[Bug] Commands auto-executed in plan mode without approval

[nuigurumikono]

Description

[BUG] AI agent executes commands automatically in Plan Mode without approval.

Description

There is a critical security/logic flaw where the AI agent completely ignores the Plan mode constraint and directly executes bash/system commands (such as starting/stopping local processes) without waiting for user approval.

Steps to Reproduce

1. Enter Plan mode.
2. The user inputs a prompt that implies a system action (e.g., "Open Discord").
3. The AI suggests a plan, but simultaneously issues and runs the PowerShell/Bash commands underneath to kill and restart the application.
4. The application actually opens/closes on the local machine, meaning the tool bypassed the confirmation barrier entirely.

Actual Behavior

Even though the UI/Session shows it is in Plan mode, the backend executes the generated code/commands automatically.

Expected Behavior

In Plan mode, the agent MUST ONLY generate the plan and stop. It should never execute any code or commands until the user explicitly toggles to an execution mode or approves the action.

Environment Context

• Repository: anomalyco/opencode
• OS: Windows / macOS
• Mode: Plan Mode
  　　

windwos11 pro opencode install from npm

Plugins

No response

OpenCode version

1.15.12

Steps to reproduce

No response

Screenshot and/or share link

No response

Operating System

windwos11 26200.8457

Terminal

windos terminal

[github-actions]

This issue might be a duplicate of existing issues. Please check:

• Subagent able to execute arbitrary code/commands in plan mode #28305: Subagent able to execute arbitrary code/commands in plan mode
• Issue: AI violated Plan Mode constraint by making system changes during planning phase #23374: AI violated Plan Mode constraint by making system changes during planning phase
• [Bug] Model (Qwen 3.6 plus) ignores Plan Mode and executes modifying commands #20381: Model ignores Plan Mode and executes modifying commands
• Plan mode does not prevent write operations via Bash tool #22641: Plan mode does not prevent write operations via Bash tool
• Plan mode: agent executes file-creation commands via bash tool directly (no sub-agent bypass) #19094: Plan mode agent executes file-creation commands via bash tool directly (no sub-agent bypass)
• Bug Report: File Write Executed in Plan Mode #25263: File Write Executed in Plan Mode

If your issue is the same as one of these, please add a comment there rather than opening a new report.