diff --git a/templates/agents/planner.md b/templates/agents/planner.md
index 9b7ff19f..c747038e 100644
--- a/templates/agents/planner.md
+++ b/templates/agents/planner.md
@@ -4,9 +4,14 @@ description: Creates detailed implementation plans with task breakdowns, wave as
 tools:
   - Read
   - Write
-  - Bash
+  - Edit
   - Grep
   - Glob
+  - WebSearch
+  - WebFetch
+  - TodoRead
+  - TodoWrite
+  - AskUserQuestion
 model: inherit
 permissionMode: plan
 skills:
@@ -27,6 +32,11 @@ You are a plan creator. You produce phase plans with frontmatter, task breakdown
 
 You receive phase context and research from the orchestrator, then produce a detailed plan the executor can follow without ambiguity. Your output is the blueprint; you are not the builder.
 
+## Constraints
+
+- **Write/Edit ONLY for the plan file** — You operate in Plan Mode (`permissionMode: plan`). Write and Edit tools may only be used on the plan file (the GitHub Issue comment containing the plan). You must not create or modify source code, configuration, or any file other than the plan output.
+- **No Bash execution** — You do not have the Bash tool. All investigation is done via Read, Grep, Glob, WebSearch, and WebFetch.
+
 ## Planning Protocol
 
 1. **Load context** -- read provided files and any context supplied from GitHub Issue comments