Claude Code makes edits during plan mode before user approves the plan

[matt-dresden-caylent]

Description

When plan mode is active, Claude Code is supposed to be read-only (except the plan file). However, Claude proceeded to edit .github/workflows/main-validation.yml using the Edit tool while plan mode was still active — before the user approved the plan and before ExitPlanMode was called.

Steps to Reproduce

1. Enter plan mode and create a plan for Task A
2. User approves the plan, ExitPlanMode is called, Task A is implemented
3. Enter plan mode again for a new Task B
4. Claude begins editing files for Task B before the user approves the new plan and before ExitPlanMode is called

Expected Behavior

Claude should remain read-only (except the plan file) until the user approves the plan and ExitPlanMode is called.

Actual Behavior

Claude carried over the "approved" mental state from the prior plan (Task A) and began implementing the new (unapproved) plan (Task B) immediately, making file edits while plan mode was still active.

Environment

• Claude Code CLI
• Model: Claude Opus 4.6 (1M context)
• macOS Darwin 25.3.0

[github-actions]

Found 3 possible duplicate issues:

1. Plan mode: model made file edits despite plan mode being active #38255
2. [BUG] Edits made in plan mode #41672
3. Plan Mode: Claude frequently makes edits without leaving plan mode #21292

This issue will be automatically closed as a duplicate in 3 days.

• If your issue is a duplicate, please close it and 👍 the existing issue instead
• To prevent auto-closure, add a comment or 👎 this comment

🤖 Generated with Claude Code

[biovolt]

This is super annoying

[vjsrinath]

The plan mode was great, but it sopped working. It constantly jumps into editing as opposed to presenting a plan on what changes it was going to make. Even worse sometimes, claude code tells me that it going to redo the whole plan even after completing when I asked a follow-up change in the same thread at the end of plan completion.

[adust09]

Reproducing this on Claude Code 2.1.119 as of 2026-04-23.

Environment

• Claude Code: 2.1.119
• OS: Ubuntu 24.04.4 LTS (Linux 6.17.0-20-generic)
• Shell: zsh
• ~/.claude/settings.json has custom PreToolUse, SessionStart, SessionEnd, Stop hooks (no plan-mode-specific overrides)

Symptom
After entering plan mode (Shift+Tab) and asking the agent to implement a change, the agent calls Edit / Write / Bash (writing) tools directly without first calling ExitPlanMode and waiting for user approval. The plan is effectively skipped — files get modified in the same turn the request is made.

Expected
While plan mode is active, write-class tools (Edit, Write, NotebookEdit, mutating Bash) should be blocked at the harness level until ExitPlanMode is approved by the user — regardless of what the model decides to do.

Notes

• Started observing the regression around 2026-04-23.
• Reproduced across multiple sessions and projects.
• Happy to share a minimal repro / settings.json (with secrets redacted) on request.

[claude]

This is a duplicate of #47331, which was fixed as of version 2.1.132.

[github-actions]

This issue has been automatically locked since it was closed and has not had any activity for 7 days. If you're experiencing a similar issue, please file a new issue and reference this one if it's relevant.