Subagent identity swapping after first tool call #18404

Description

I have a subagent setup to run a particular MCP/tool which as a lot of context instruction. Quite reliably in the latest version of opencode, after the first tool call, it reverts to the default primary agent mid-conversation and then loses access to that tool. It then delegates out to yet another subagent (which should be impossible, is explicitly banned in my config) to do further tool calls.

So a relatively complex interaction taking a few dozen tool calls will often spawn nearly two dozen subagents as each one swaps identities to the primary agent after the first tool call, loses access to the tool, gets confused, realizes it can delegate, makes new instructions, and tasks a new subagent.

Not ideal!

Plugins

superpowers

OpenCode version

1.2.27

Steps to reproduce

1. setup a subagent with access to a specialized MCP and "task":{"*": "deny"} permissions.
2. setup a primary agent instructed to task tool calls to that subagent and permissions denying use of that tool
3. ask primary to perform this task

With that setup, then I'm observing the following behavior from opencode:

4. it delegates to subagent
5. first tool call succeeds
6. subagent identity swaps, next tool calls fail
7. new agent identity performs task tool call to subagent that should've been impossible

Screenshot and/or share link

This is a screenshot of the subagent session

Operating System

MacOS 14.8

Terminal

Kitty