[Bug] Auto mode classifier gives no verdict for Bash; approving via /permissions doesn't unblock it

Status Open
Reported on v2.1.284
Maintainer reply None cached
Activity 0 comments · opened Sep 29, 2026

What happened

In auto mode, every Bash command failed with:

The server-side auto mode classifier gave no verdict (error), so auto mode cannot determine the safety of Bash. This is a transient failure of the check, not a judgment about the action [...]

This happened on 4 attempts over several turns, including plain read-only commands like which <tool> and ls.

  • Approving the command through /permissions did not help. The next retry failed with the same error.
  • Shift+Tab did not offer a way out of auto mode in this session, so there was no fallback to asking for approval per command.
  • The Read tool kept working the whole time. Only Bash was blocked.
  • Later in the same session, Bash started working again without any change on my side.

Expected

If the classifier can't give a verdict, fall back to asking me for permission, or respect a command I've explicitly approved, instead of blocking the tool completely.

Related

Same error for other tools: #97877 (WebSearch), #97869 (Write). This report is for Bash, and for the fact that an explicit approval doesn't get around it.

Environment

  • Claude Code 2.1.284
  • Linux (Arch-based, Omarchy)

🤖 Generated with Claude Code

View original on GitHub ↗