Follow Discord
Sweep 03 Nov 2026 · 22:27Z Build v2.1.318 536 read Stable v2.1.311 Latest v2.1.318 Next v2.1.318 Feeds RSS JSON llms.txt llms-full.txt Unofficial

Claude Code v2.1.318 ·

Auto mode can approve some person-only asks via classifierMayAllow

A new classifierMayAllow flag lets auto mode's classifier settle some permission asks, such as uploads, that used to always need a person

Group of 2 You'll notice Improvements
JSON All of v2.1.318
You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
4Signal: worth watching, 1 to 5
Auto ModeArea: what it touches
ImprovementsKind: in v2.1.318,
What probably matters to youSection of the release

Unclear It is not clear what decides when the safety check may approve asks meant for a person.

What

A permission ask is when Claude stops to check whether it may use a tool. Some asks were marked person-only, meaning a person always had to answer. A new flag, classifierMayAllow, loosens that.

  • When a person-only ask has classifierMayAllow set, the forced prompt is skipped. The classifier is the automatic checker auto mode uses to decide whether an action is safe, and it can now settle that ask.
  • The permission ask for uploading files through MCP tools can set classifierMayAllow. MCP is the standard Claude Code uses to talk to add-on tools.
  • When an ask rule matches, the decision already made is kept and tagged with matchedAskRule, unless its reason is itself a rule.
  • Rejected file inputs to MCP tools are now recorded.
  • File uploads in Chrome use a different permission check that can fail with its own error.
  • A header check for Toolbox MCP is skipped in one other mode.

Why

In auto mode you may see fewer upload prompts, because the classifier can now approve some asks that always waited for you before. If you count on being asked before uploads, expect this to change.

How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtIt is not clear what decides when the safety check may approve asks meant for a person.

See this entry in the whole of v2.1.318 →

Feedback