Under the hood
Auto mode's safety classifier now enforces separate hard limits on a tool schema's size and nesting depth
What
When Claude Code's auto mode decides whether a tool call needs your approval, it feeds the tool's output schema to a safety classifier. That schema is now checked against two separate hard limits, one on how many nodes it can expand into and one on its total byte size, each raising its own error when exceeded, instead of a single overall length check.
Why
This makes the safety classifier used in auto mode harder to overwhelm with an unusually large or deeply nested tool schema, since either limit alone can now stop an oversized schema before it reaches the classifier.