daemon.cjs · part 211

60 text occurrences from desktop/Cursor.app/Contents/Resources/app/extensions/cursor-agent-host/dist/agent-host-daemon/dist/bin/daemon.cjs, part 211. Every entry preserves the shipped literal and its saved verdict or selection reason.

File contents and all parts · All files

Write blocked: unknown resolution status for `${path53}`.

use strict

use strict

${action} blocked: cannot verify ${targetDescription} `${path53}` while resolving symlinks. This can happen when access is denied or the path contains a symlink loop.

${name17} ${args.join(" ")}

${name17} ${subcommandTokens.join(" ")}

use strict

Object expected.

Symbol.asyncDispose is not defined.

Symbol.dispose is not defined.

Object not disposable.

An error was suppressed during disposal.

Result of MCP allowlist checks at user and team levels per tool call.

This reads a file outside your workspace and requires approval under your team's read policy.

This reads a file outside your workspace.

Team repo blocklist

Team repo blocklist

${line[0]} ${line.slice(1)}

${(0, import_node_os18.homedir)()}${import_node_path59.sep}.cursor${import_node_path59.sep}

Out of workspace

Protected config file: ${pathComponents[pathComponents.length - 1] ?? ""}

Protected config file: ${lastPathSegment}

Workspace write

working directory

Team repo blocklist

Shell permissions: evaluating shell command

Shell permissions: prompting for empty allowlist

Smart allowlist: classifier result received

Command blocklist: commands require approval

In blocklist: ${commandBlocklistedCommands.join(", ")}

Smart allowlist: checking commands against lists

Not in allowlist: ${notInAllowlistReasonText}

Smart allowlist: all commands in allowlist, will check security

Shell permissions: prompting after parser miss

Parser failed to parse command (possible bypass)

Parser found no commands (possible bypass)

Shell permissions: blocked by readonly mode

Shell permissions: all commands allowed by sandbox policy

Shell permissions: auto-approved shell command

Hook requested approval: ${hookPromptReason}

Hook requested approval

Not in allowlist: ${notInAllowlistReasonText}

Delete protection is enabled

In team blocklist: ${approvalDecisionFacts.teamBlocklistedCommands.map((cmd) => cmd.command.name).join(", ")}

Shell permissions: commands not in team allowlist

Not in team allowlist: ${notInTeamAllowlistText}

Shell permissions: requesting shell approval

Shell allowlist is empty

Admin command denylist hard-blocked shell at execution time

${parsed.fullPattern} 

${cmd.name} ${cmd.args[0].value}

[permissions-service] shouldBlockMcp: toolName="${toolName}", providerIdentifier="${providerIdentifier}"

[permissions-service] shouldBlockMcp: BLOCKED (explicitly denied) toolName="${toolName}", providerIdentifier="${providerIdentifier}"

[permissions-service] shouldBlockMcp: BLOCKED (readonly mode, Smart Mode forced approval) toolName="${toolName}", providerIdentifier="${providerIdentifier}"

[permissions-service] shouldBlockMcp: needsApproval (Smart Mode) toolName="${toolName}", providerIdentifier="${providerIdentifier}"

[permissions-service] shouldBlockMcp: ALLOWED (in admin MCP allowlist) toolName="${toolName}", providerIdentifier="${providerIdentifier}"

[permissions-service] shouldBlockMcp: ALLOWED (explicitly in allowlist) toolName="${toolName}", providerIdentifier="${providerIdentifier}"

[permissions-service] shouldBlockMcp: BLOCKED (readonly mode) toolName="${toolName}", providerIdentifier="${providerIdentifier}"

[permissions-service] shouldBlockMcp: needsApproval (auto-run but team blocks MCP) toolName="${toolName}", providerIdentifier="${providerIdentifier}"

[permissions-service] shouldBlockMcp: ALLOWED (auto-run, no team block) toolName="${toolName}", providerIdentifier="${providerIdentifier}"