Hey, thanks for the report. This is a known issue with Composer 1 in Ask mode. The model sometimes doesn’t realize it’s in read-only mode and tries to edit files.
I can see you already found a workaround by switching to Sonnet 4.5 Thinking. That’s exactly what we recommend in cases like this.
Related reports:
The team is aware of the issue. For now, the best option is to use a different model (Sonnet 4.5 works well) or explicitly remind it in your prompt that the Agent is in Ask mode and shouldn’t edit files.