{"version":"2.1.321","anchor":"plugin-calls-skip-the-auto-mode-classifier-unconditionally","canonical_anchor":"plugin-calls-skip-the-auto-mode-classifier-unconditionally","heading":"Plugin tool calls skip the auto-mode classifier and are refused if they need a person's approval","tier":"notice","area":"Auto Mode","scope":"individual","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/plugin-calls-skip-the-auto-mode-classifier-unconditionally","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321","markdown":"### Plugin tool calls skip the auto-mode classifier and are refused if they need a person's approval\n\nTool calls a plugin makes now skip auto mode's classifier when plugin policy allows them, and are refused when they would need a person's approval\n\n**Unclear.** Whether plugin tool calls now end up allowed or asked more often than before is not shown.\n\n**What**\n\nA plugin is an add-on that extends Claude Code, and it can make tool calls of its own. A tool call is one action, such as running a command or editing a file. Auto mode is a setting where a safety classifier, a check run by a model, decides whether to allow actions instead of asking you. How plugin-made calls are handled has been reworked:\n\n- A plugin call is allowed only if nothing requires asking for approval. Allowed calls carry the reason `plugin-origin: ${h}`.\n\n- If the call would need approval, it is refused with the message \"wasn't run: this call needs a person's approval, and a mod's own call can't ask for it.\"\n\n- In auto mode, when plugin policy allows a plugin call, the classifier is skipped. Claude Code logs `Skipping auto mode classifier for ${e.name}: called by plugin ${xe}`. This replaces the old `pluginOrigin` allow branch.\n\n- Ask rules served by hooks or set by your organization are still honored.\n\n- A separate `harnessSynthesized` fast path handles calls that Claude Code itself generated through its observer check, with the reason `harness-synthesized: ${H.synthesizedBy}`.\n\nBefore, the old helper either gave a `pluginOrigin` allow decision with the reason `plugin-origin: ${pl}`, or returned the ask decision when an internal flag was set.\n\n**Why**\n\nA plugin's own call has no person behind it to answer an approval prompt. So instead of waiting on a question nobody will see, such a call is now refused outright when it needs approval. When it is allowed, it no longer goes through the auto-mode classifier. If a plugin action you expected does not run, this message tells you it needed approval that a plugin cannot ask for.\n\n- Area: Auto Mode\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 3\/5\n- Scope: individual\n- Heads-up: yes"}