Auto mode now explicitly blocks large tool outputs when its safety classifier can't run
When Claude Code runs in auto mode (which can act on tool results without asking first), it uses a classifier to help decide whether output is safe to proceed with. That decision logic now has a new "blocked" outcome, separate from the existing "unavailable," "refused," and "allowed" outcomes. It triggers when the classifier is unavailable or the conversation transcript is too long to classify, but only when the tool's output schema is large. The reason given is either "classifier context exceeded; output schema too large to pass unreviewed" or "classifier unavailable; output schema too large to pass unreviewed," and the result now also includes an unreviewed true/false flag.
This closes a gap where a large, unreviewable tool output could otherwise slip through auto mode simply because the safety classifier couldn't run; now it's explicitly blocked instead.