Files are being edited while in plan mode & displaying plan mode state

[jfietz]

What happened?

My chat.json contains a few too many details, but here a redacted version of rg plan\|tool chat.json.

chat.txt

I was in planning mode and noticed the model was modifying files. When challenged, it said it was no longer in planning mode:

What did you expect to happen?

Not modify files when in read-only

Client information

• CLI Version: 0.34.0
• Git Commit: N/A
• Session ID: 7ba69486-0838-4672-8d97-d996640a048c
• Operating System: linux v22.22.1
• Sandbox Environment: no sandbox
• Model Version: auto-gemini-3
• Auth Type: oauth-personal
• Memory Usage: 542.0 MB
• Terminal Name: kitty(0.46.0)
• Terminal Background: #1e1e2e
• Kitty Keyboard Protocol: Supported

Login information

No response

Anything else we need to know?

No response

[Adib234]

Hmm I'm confused by the chat history, it seems that the exit plan mode tool call was successful so the agent went into execution mode

"output": "Plan approved. Switching to Auto-Edit mode (edits will be applied automatically).\n\nThe approved

But then there seems to be some policy errors

"error": "Tool execution denied by policy. You are in Plan Mode with access to read-only tools. Execution of scripts (including those from skills) is blocked."

Just to clarify did you approve a plan? And after approving did the UI not show an execution mode (default, auto-edit)?

[Adib234]

Also, can you show me your policies by running /policies list?

[jerop]

@jfietz following up on this, would be helpful to share policies list as @Adib234 mentioned above - it is likely that you have a global policy that allows for modifying files - https://geminicli.com/docs/cli/plan-mode/#global-vs-mode-specific-rules