You'll notice
Auto mode now auto-allows tool calls that a plugin itself originated, skipping the safety classifier
What
When Claude Code is running in auto mode (making permission decisions without asking) and a tool call is identified as originating from a plugin, the request is now automatically allowed without running it through the safety classifier. This fast path only applies when there's no browser navigation involved, no matching ask rule, and no active deny policy; the decision is recorded with the reason plugin-origin: <caller>.
Why
This speeds up auto mode for tool calls that plugins trigger themselves, treating them as already vetted rather than re-evaluating each one through the full permission classifier.