Windsurf Editor module

[bpmct]

A discussion dedicated to the Windsurf Editor module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	IDE Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
12 / 17	19 / 19	12 / 20	2 / 2 (N/A: 18)	7 / 10	76 / 100

Drilldown

Presentation & Onboarding — 12 / 17

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README shows default launch, folder-targeted launch, and an MCP-config example with coder_external_auth, covering the module's major configuration modes (folder, MCP, auth) with sensible defaults.
Visual preview	5	0	No image, GIF, or video embedded in the README — only an icon reference in frontmatter.

Credential Hygiene — 12 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	8	var.mcp is a plain string (no sensitive = true) even though the documented example embeds a dynamically-generated bearer token (data.coder_external_auth.github.access_token) inside it. No hardcoded secret literals appear, but the variable that can carry secret material is not marked sensitive.
Non-hardcoded auth path	4	4	GitHub MCP example uses data.coder_external_auth.github (OAuth) instead of a pasted API key — a documented non-hardcoded auth path.

Restricted-Environment Readiness — 2 / 2 (18 pts N/A)

Criterion	Max	Score	Notes
Mirrorable artifact source	5	N/A	Module installs no binary itself; Windsurf is a pre-existing desktop app launched via protocol handler. No download URL variable exists.
Bring-your-own binary	10	N/A	Nothing is downloaded/installed by this module (only a URI is generated and a local config file is written), so disable-install logic doesn't apply.
Egress transparency	3	N/A	No install/runtime network calls originate from this module; the coder_script only writes a local file.
Runs without sudo	2	2	The windsurf_mcp coder_script (mkdir, echo, chmod) runs entirely as the current user with no sudo invocation — verified from script body.

Engineering Quality — 7 / 10

Criterion	Max	Score	Notes
Input quality	6	3	All variables (folder, open_recent, order, group, slug, display_name, mcp) have clear descriptions and sensible defaults, but no validation blocks exist anywhere (e.g., to sanity-check mcp is valid JSON).
Test coverage	4	4	main.test.ts covers default output, folder, open_recent combinations, and actually executes the generated coder_script inside a container to verify the MCP config file is written correctly — solid business-logic coverage.

IDE Integration — 19 / 19 (6 pts N/A)

Criterion	Max	Score	Notes
Dashboard entry point	7	7	Delegates to vscode-desktop-core submodule to create a coder_app/ide_uri output (windsurf_url), confirmed by tests checking the generated windsurf:// URI.
Managed configuration	6	6	mcp variable documented to write ~/.codeium/windsurf/mcp_config.json via coder_script, with a full worked example for GitHub MCP server config.
Configurable folder or workdir	6	6	folder variable documented with a dedicated "Open in a specific directory" example.
Pre-installed extensions (web IDEs only)	6	N/A	Windsurf is a desktop IDE launched via protocol handler, not a web IDE — extension pre-install criterion does not apply.

Overall — 76 / 100

Raw 50 / 66 → round(50 / 66 × 100) = 76

---

Scored against SCORECARD.md on 2026-10-05 with solstice-1.

[matifali]

BTW, Windsurf Editor is now called Devin Desktop. May we also check for any upstream changes or deprecations?
https://devin.ai/blog/windsurf-is-now-devin-desktop/
cc: @bpmct