[Bug]: Cursor integration triggers an infinite loop of permissions alerts #2823

Before submitting

• I searched existing issues and did not find a duplicate.
• I included enough detail to reproduce or investigate the problem.

Area

apps/desktop

Steps to reproduce

1. Connect Cursor with Xcode MCP
   1.1 Toggle the "Allow agents to use Xcode tools" in the Intelligence tab of Xcode settings

1.2 Connect Cursor with Xcode MCP by adding this to ~/.cursor/mcp.json:

{
  "mcpServers": {
    "xcode-tools": {
      "command": "xcrun",
      "args": ["mcpbridge"]
    }
  }
}

2. Connect T3 Code with Cursor
3. Open Xcode
4. Start a thread with a Cursor model selected

Expected behavior

Xcode should show a permissions alert like this (when using original Cursor, it's shown twice) and user has to click Allow:

Actual behavior

When doing it via T3 Code, this is shown indefinitely. Every single time I click allow, there's a new alert with a different PID value.

Impact

Blocks work completely

Version or commit

0.0.24

Environment

macOS 26.4, Xcode 26.4, Cursor agent cli 2026.05.24-dda726e

Logs or stack traces

Screenshots, recordings, or supporting files

Screenshot 2026-05-27 at 13.10.21.png
Screen recording 1080.mov

Workaround

No response