Live-tested every edit_exists entry with a trivial prompt. Three had
missing flags that caused the CLI to prompt interactively or refuse to
run — reproducible across fresh dispatches, which explained the
"CLI wrappers all fail" reports.

Fixed:
- cursor-agent: add `--trust` so the workspace-trust prompt doesn't
  block. Without it: "⚠ Workspace Trust Required" interactive dialog,
  child never exits.
- codex, codex-pro: add `--skip-git-repo-check`. Without it: "Not
  inside a trusted directory and --skip-git-repo-check was not specified"
  and the process refuses to run outside a git repo.
- claude-opus, claude-sonnet: prefix with `env -u ANTHROPIC_BASE_URL
  -u ANTHROPIC_API_KEY` so inherited parent env (e.g. from within an
  outer Claude Code session, or a custom base URL) doesn't hijack auth.
  The standalone `claude` CLI needs to find its own subscription OAuth
  in ~/.claude and this only works with those vars unset.

Remaining after fixes are user-account issues, not code bugs:
- cursor-agent → "usage limit" if Cursor free tier used up (needs Pro)
- claude → "OAuth access token revoked" needs `claude login`
- kiro-cli → "Monthly request limit reached" until 08/01 (free tier reset)

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>