Running an agent from a plan now treats edits as external files and require conformation for each edit

[Archimagus]

Where does the bug appear (feature/product)?

Cursor IDE

Describe the Bug

Starting yesterday when trying to use plan mode, I get through planning and then click the yellow “Build” button at the top of the plan and then it asks permission for every edit that it wants to make to the local code. If I do the plan and build in a worktree it’s fine and I can then merge.
Under the Agent settings disabling “External-File Protection” lets it edit as before, but that is too dangerous for my liking.

Steps to Reproduce

• Create a new project bun create vite my-app
• Open the app in cursor
• Initialize a git repo and do an initial commit
• Open a new agent, in plan mode
• Ask it to do some change, I did “Lets add create a new component that is a button with a counter, and add that new component to the main page.”
• Once the plan is ready, Click the “Build” button at the top of the plan markdown.
• The agent attempts to build its plan. Depending on what it decides to do, it may fail to create a new file, or have to ask for permission to edit an existing one or just hang thinking it’s implemented the feature but it hasn’t.

Expected Behavior

It should be able to create/edit files autonomously within the current folder without asking for permission for every edit.

Screenshots / Screen Recordings

Operating System

Windows 10/11
Linux

Current Cursor Version (Menu → About Cursor → Copy)

Version: 2.1.50 (system setup)
VSCode Version: 1.105.1
Commit: 56f0a83df8e9eb48585fcc4858a9440db4cc7770
Date: 2025-12-06T23:39:52.834Z
Electron: 37.7.0
Chromium: 138.0.7204.251
Node.js: 22.20.0
V8: 13.8.258.32-electron.0
OS: Windows_NT x64 10.0.26200

For AI issues: add Request ID with privacy disabled

7aa4e02f-892c-46b0-807c-9d8460cea33d

Additional Information

I am running cursor from windows connecting to a project in wsl.
It has been working great up until sometime December 6, 2025 or there about.

Does this stop you from using Cursor

Sometimes - I can sometimes use Cursor

[deanrie]

Hey, thanks for the report. This matches a known bug we’re already tracking:

• Discussion: AI Agent keeps prompting me to accept every code edit in agent mode
• Details/logs: Accept Editing File Bug (since 2.0v)

We need a bit more data:

• Help → Toggle Developer Tools → Console, a screenshot/copy of errors at the moment it’s stuck on “Awaiting approval”
• Your settings: Settings → Agents → Auto-Run Mode, and the states of External-File Protection and Dotfile Protection

Temporary options:

• Since your git worktree passes, use the worktree as a workaround until the fix
• After a restart on 2.1.50, check whether the behavior changes

Send the console logs and paths, and I’ll add them to the ticket.