anthropics / anthropics/claude-code

[BUG] Auto Mode safety classifier times out with claude-opus-5[1m], blocking Bash

Open
#95,118 0 comments 0 reactions 0 assignees View on GitHub
area:model area:permissions bug platform:macos
Dominant language
Python
Stars
145k
Forks
23.1k
PR merge metrics
PR metrics pending

Description

### Preflight Checklist

- [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet
- [x] This is a single bug report (please file separate reports for different bugs)
- [x] I am using the latest version of Claude Code

### What's Wrong?

## [BUG] Auto Mode safety classifier times out with `claude-opus-5[1m]`, blocking Bash

### Preflight Checklist

* [x] I searched existing issues for similar reports
* [x] This is a single bug report
* [x] I am using a recent version of Claude Code

### What's Wrong?

When using Claude Code with Auto permission mode, Bash commands are sometimes blocked because the safety classifier using `claude-opus-5[1m]` times out.

Claude Code shows:

```text
claude-opus-5[1m] is temporarily unavailable (timed out), so auto mode cannot determine the safety of Bash right now. Wait a moment and then try this action again. If it keeps failing, continue with other tasks that don't require this action and come back to it later. Note: reading files, searching code, and other read-only operations do not require the classifier and can still be used.
```

The main Claude Code session remains responsive, and read-only operations continue to work, but Bash commands requiring the Auto Mode safety classifier cannot run.

Retrying does not always resolve the issue.

### Expected Behavior

Auto Mode should be able to classify Bash commands without repeatedly failing due to the classifier model being unavailable.

If the classifier times out, Claude Code should ideally:

* retry automatically,
* fall back to another available classifier model, or
* allow manual approval of the Bash command.

### Steps to Reproduce

1. Start Claude Code.
2. Use Auto permission mode.
3. Use `claude-opus-5[1m]`.
4. Ask Claude to perform an action requiring Bash.
5. Bash is blocked with a `temporarily unavailable (timed out)` error.
6. Read-only operations such as reading files and searching code still work.

### Claude Code Version

```text
2.1.274 (Claude Code)
```

### Claude Model

```text
claude-opus-5[1m]
```

### Permission Mode

```text
Auto Mode
```

### Operating System

```text
Darwin MacBook-Pro.local 27.0.0 Darwin Kernel Version 27.0.0: Tue Aug 11 21:06:40 PDT 2026; root:xnu-13432.1.9~1/RELEASE_ARM64_T6050 arm64
```

### Architecture

```text
Apple Silicon / arm64
```

### Is this a regression?

Unknown.

### Additional Information

This appears to affect the Auto Mode safety classifier rather than Bash itself, since read-only operations remain available while Bash actions requiring safety classification are blocked.

### What Should Happen?

Auto Mode should successfully evaluate the safety of Bash commands without failing because the safety classifier model is temporarily unavailable.

If the configured classifier (`claude-opus-5[1m]`) times out or is unavailable, Claude Code should gracefully handle the failure—for example, by retrying the classification, falling back to another available classifier, or allowing the user to manually approve the Bash command.

A temporary classifier outage should not prevent Bash operations for the entire session while the main Claude model and other tools remain operational.

### Error Messages/Logs

```shell

```

### Steps to Reproduce

1. Launch Claude Code version `2.1.274`.
2. Start a session using `claude-opus-5[1m]`.
3. Use Auto permission mode.
4. Ask Claude to perform a task that requires running a Bash command.
5. Claude Code attempts to classify the Bash command for safety.
6. The classifier times out and displays:

```text
claude-opus-5[1m] is temporarily unavailable (timed out), so auto mode cannot determine the safety of Bash right now.
```

7. Retry the Bash action.
8. The same error may continue to occur, while read-only operations such as reading files and searching code still work.

### Claude Model

None

### Is this a regression?

Yes, this worked in a previous version

### Last Working Version

_No response_

### Claude Code Version

2.1.274

### Platform

Anthropic API

### Operating System

macOS

### Terminal/Shell

Terminal.app (macOS)

### Additional Information

_No response_

Contributor guide

No contributing guide indexed for this repository

Research direction

No source files or tests are named. Start by reproducing the timeout through the Auto permission mode Bash approval path, then trace the safety-classifier entry point and its timeout handling. Done means the behavior is covered by a reliable test and Bash actions have a defined response when the classifier times out.

Written by the indexing model from the issue text.

Assessment

Tech stack
bash, python
Domain
cli, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.