Hey, thanks for the report.
Try:
- Cursor Settings > Agent > Auto-Run Mode
- Switch to “Run Everything” (automatically applies all file changes)
- Or check protection settings: Cursor Settings > Agents > Auto-Run > External-File Protection / Dotfile Protection - try turning them off
This looks like a worktrees bug where the Agent doesn’t recognize project files as part of the workspace and keeps asking for permission: Cursor 2.0 Agent in Git Worktree asks to write to every file inside the worktree
Could you share:
- What’s your current Auto-Run Mode?
- Are file protections enabled (External-File Protection, etc.)?
- Does this happen with all files or only specific ones?
- Are you using symlinks, worktrees, or mounted drives?
Let me know if that helps.