[eloisius]

I can’t say for sure, but I think Claude’s mode is nothing more than part of the system prompt. I don’t think it actually takes away web request or file write tools. I say this because I could swear I’ve seen Claude go ahead and make some changes even while we’re in plan mode. Web requests certainly, because it can fetch docs and so forth.

[hacker161]

You’re not alone, I’ve absolutely seen the same behavior occasionally with Opus in OpenCode where it takes actions it shouldn’t be able to in plan mode.

[8note]

that sounds like opencode has a privilege bug too?

[hacker161]

Considering it happens across both opencode and other apps like Claude and Codex as well as across models it seems like something inherent to the models themselves and not necessarily a bug in the apps wrapping them. But maybe there’s more opencode et. al could be doing to prevent it.

[eloisius]

The harnesses are the part of the stack responsible for tools, so it would be a bug there, not the model. The model itself isn’t doing anything but generating tokens. The harness gives it a blob of text telling it which tools exist, and the model may choose to tell the harness to call one.