Claude Code 2.1.319 drops auto mode fallback behind gateways

With telemetry or feature flags off, gateways included, auto mode in Claude Code 2.1.319 asks about or denies calls the server can’t check, with no built-in classifier fallback. To keep the classifier, set CLAUDE_CODE_AUTO_MODE_SERVER=0. Bedrock, Vertex and Foundry are unchanged.

• When an MCP server runs a tool call as a task, Claude Code moves it to the background and tells Claude the result when it finishes. • A new permissions.denyInsteadOfPrompting setting denies a tool call that would wait on a permission prompt, and the turn continues. • In auto mode, claude -p exits 1 instead of 0 when actions were refused because no safety check was available. • The release fixes a sandbox escape when creating a worktree and a Bash permission bypass through a crafted environment prefix.