plan agents ought not have access to the apply_patch tool.

[ariane-emory]

Description

Models operating under the plan agent ought not have access to tools that would let them modify files, such as the apply_patch tool.

Plugins

No response

OpenCode version

1.2.25

Steps to reproduce

No response

Screenshot and/or share link

No response

Operating System

No response

Terminal

No response

[github-actions]

This issue might be a duplicate of existing issues. Please check:

• MCP wildcard tool restrictions in agent frontmatter not enforced (gemini_*: false ignored) #17919: MCP wildcard tool restrictions in agent frontmatter not enforced — same underlying problem (agent tool restrictions not being enforced), though in a different context (MCP wildcard rules vs. plan agent / apply_patch tool)