Same failure on 0.44.0 (Stable, “You’re up to date”), macOS 26.6, Mac mini — but the leftover-process workaround in this thread does not apply here, because the helper is healthy and connected and the assistant still cannot reach the machine.
What the app reports. The helper restarts in a loop, each instance killed immediately after start:
[sand-local-exec-daemon] started (pid 11047); serving local exec over the gateway
[sand-local-exec-daemon] received SIGTERM, shutting down {"error":"cli_unknown_command"}
[sand-local-exec-daemon] started (pid 11222); serving local exec over the gateway
[sand-local-exec-daemon] received SIGTERM, shutting down {"error":"cli_unknown_command"}
... repeats for pids 11305, 11318, 11419 ...
A 401 against the gateway was also reported before a reboot.
The cli_unknown_command seems worth attention: the app bundle ships no cursor or sand CLI binary (only cursor_proclist.node), and there is no cursor/sand/grok executable anywhere on PATH. So nothing local can be shadowing or answering that command.
**Ruled out on this machine.** Each checked directly rather than assumed:
* Full Disk Access — granted (kTCCServiceSystemPolicyAllFiles, auth 2, in the system TCC database)
* Code signature — valid and unmodified, Developer ID Anysphere (DCNK4UB866)
* App location — /Applications, not translocated or quarantined
* Settings > Computer > Execution — Always allow
* Settings > Computer > Current computer — matches hostname exactly
* Conflicting CLI on PATH — none
* macOS firewall — disabled
* Proxy / PAC — none configured
* VPN interception — a VPN client is installed but not routing; default route is the ordinary LAN
* MTU — 1472-byte payloads pass, so no fragmentation black hole
* DNS — clean, no interception
* Endpoints — api2.cursor.sh 200, cursor.com 200, api.cursor.com 200
**Current state.** After a reboot the helper stopped flapping: one process, stable for 17+ minutes, holding an established TLS connection to the gateway, with crashSeen false in sand-session-marker.json. It is healthy and connected, and the assistant still reports it cannot see the machine — so this looks like a registration or authorisation failure at the gateway rather than local process cleanup.
Separately, attaching a 12 kB .md file and sending it fails with a network error, while ordinary chat messages send fine over the same connection.
Three questions that would help:
1. What does cli_unknown_command correspond to server-side on 0.44.0?
2. Does the 401 mean the daemon's registration token is rejected independently of the app session, which is signed in and working?
3. Is the attachment upload failure the same authorisation path?
Happy to supply more detail if useful.