[Bug] Auto-accept mode fails without fallback when safety classifier model unavailable

Bug Description
Title: Auto-accept mode hard-fails when the safety-classifier model is unavailable — should fall back to a manual permission prompt

What happens: In auto-accept mode, a non-allowlisted action (Bash, WebSearch) is gated by a safety classifier running on the session model. When that model is "temporarily unavailable," the action errors out completely, with no fallback to a manual approval prompt.

Expected: Degrade to a manual approve/deny prompt — the same one shown when auto mode is off. Transient classifier unavailability should never leave the user more restricted than not using auto mode at all.

Actual: Hard error; blocked until the model recovers; no approval path offered.

Error: claude-opus-4-8[1m] is temporarily unavailable, so auto mode cannot determine the safety of WebSearch right now. Wait briefly and then try this action again. If it keeps failing, continue with other tasks that don't require this action and come back to it later. Note: reading files, searching code, and other read-only operations do not require the classifier and can still be used.

Environment Info

• Platform: linux
• Terminal: ghostty
• Version: 2.1.215
• Feedback ID: 29ee450d-6708-4600-978f-f929942538da

Errors

[]