fix(cursor): honor auto and full access modes

[maria-rcks]

Note

Written by gpt-5.6-sol on behalf of Maria

Cursor's Full access and Auto runtime modes were launched like restrictive modes, leaving approval behavior dependent on reactive permission replies.
Full access now starts Cursor with --force, while Auto starts it with native Smart Auto review through --auto-review; supervised modes stay unchanged.
Verified with 26 targeted tests, server typecheck and lint, plus a real T3 Code Auto/Auto thread against an authenticated Cursor CLI that ran git status --short without an approval prompt and spawned cursor-agent --auto-review acp.
Fixes #6533; built by gpt-5.6-sol in the Codex harness.

---

Note

Medium Risk
Changes how Cursor CLI is spawned for permission-sensitive modes; incorrect mapping could over-approve or under-approve tool actions at session start.

Overview
Cursor ACP sessions now map the thread runtime mode to cursor-agent startup flags instead of always launching plain acp.

Full access adds --force so approvals are relaxed at process start (not only via reactive permission replies). Auto adds --auto-review; supervised-style modes keep unchanged args. CursorAdapter forwards input.runtimeMode into makeCursorAcpRuntime / buildCursorAcpSpawnInput, with unit and adapter tests asserting the argv log. User docs note that Auto on Cursor uses Smart Auto review.

^{Reviewed by Cursor Bugbot for commit 84baae0. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Fix CursorAdapter to honor auto and full-access permission modes

• Adds cursorAcpPermissionArgs in CursorAcpSupport.ts to map runtime modes to Cursor ACP launch arguments: auto selects Cursor automatic review, full-access selects forced approval, other modes get no extra argument
• Threads the runtime mode from CursorAdapter.startSession through makeCursorAcpRuntime into buildCursorAcpSpawnInput, which inserts the selected permission args before the ACP subcommand
• Updates permission-modes.md to list Cursor Smart Auto review under Auto-mode providers

^{Macroscope summarized 84baae0.}

[macroscopeapp]

Approvability

Verdict: Not approved

Macroscope's review found this PR not approvable — The PR changes Cursor's production permission behavior by adding startup flags for Auto and the product-default Full access mode. Because this affects approval and unattended execution semantics on an existing path, human review is warranted despite the focused diff and added tests.

^{You can add or adjust custom eligibility rules. Learn more.}