Subagent able to execute arbitrary code/commands in plan mode

[aybr1]

Description

In plan mode, subagent can still execute arbitrary code/commands without permission

Plugins

None

OpenCode version

windows desktop 1.14.50

Steps to reproduce

1. launch Opencode desktop 1.14.50 in windows
2. switch to plan mode
3. ask the agent to spawn a subagent to kill a process

Screenshot and/or share link

Operating System

Windows 11

Terminal

No response

[github-actions]

This issue might be a duplicate of existing issues. Please check:

• Plan mode doesn't restrict sub-agents spawned via task tool #26407: Plan mode doesn't restrict sub-agents spawned via task tool
• Plan Mode Agent Spawned General Subagent to edit code #24741: Plan Mode Agent Spawned General Subagent to edit code
• Subagent can call plan_exit to escape plan mode #27886: Subagent can call plan_exit to escape plan mode
• Sub-agent in plan mode bypasses restrictions after compaction #18213: Sub-agent in plan mode bypasses restrictions after compaction

If your issue is distinct from these, please clarify what makes it different.

[aybr1]

previos issue #6527 and #23290 appears to have similar problem(file writing) fixed but not code execution

[github-actions]

To stay organized issues are automatically closed after 60 days of no activity. If the issue is still relevant please open a new one.