Windsurf Editor module

[bpmct]

A discussion dedicated to the Windsurf Editor module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	IDE Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
17 / 25	19 / 25	20 / 20	N/A	8 / 10	80 / 100

Drilldown

Presentation & Onboarding — 17 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README provides examples for default usage, opening in a specific directory, and configuring MCP servers. Each example is clear with sensible defaults.
Coder-context framing	8	5	README mentions Coder and Windsurf Editor, and references the Coder Remote VS Code Extension. However, it does not explain what the module adds on top of Coder or show where Coder fits in the flow beyond the basic button functionality.
Visual preview	5	0	No image, GIF, or video is embedded in the README. Only an icon reference exists.

IDE Integration — 19 / 25

Criterion	Max	Score	Notes
Dashboard entry point	7	7	Module uses coder_app via the vscode-desktop-core submodule with proper launch behavior through the windsurf:// protocol.
Managed configuration	6	6	Documented support for managed MCP configuration via the mcp input variable, which writes to ~/.codeium/windsurf/mcp_config.json. README includes a complete example with GitHub MCP server.
Configurable folder or workdir	6	6	Documented support for opening in a configured folder via the folder variable, with a clear example showing /home/coder/project.
Pre-installed extensions	6	0	N/A - Windsurf is a desktop IDE, not a web IDE. This criterion does not apply.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	The mcp variable is not marked sensitive, but it appropriately contains configuration rather than raw secrets. The README example shows proper use of data.coder_external_auth.github.access_token for authentication, avoiding inline secrets. No sensitive inputs exist that should be marked.
Non-hardcoded auth path	4	4	README demonstrates OAuth/external auth via coder_external_auth resource for GitHub authentication in the MCP example, avoiding raw key pasting.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	10	N/A	Module downloads nothing; it only configures a coder_app and optionally writes an MCP config file. No artifacts are fetched.
Bring-your-own binary	5	N/A	Module does not install any binary; it assumes Windsurf is already installed on the client machine (desktop IDE).
Egress transparency	3	N/A	Module makes no external network calls during install or runtime. It only writes local config and creates Coder resources.
Runs without sudo	2	N/A	The coder_script for MCP config uses only standard shell commands (mkdir, echo, base64, chmod) with no sudo invocations. However, since this theme is N/A due to no downloads, this criterion is also excluded.

Engineering Quality — 8 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All inputs have clear descriptions and sensible defaults. Variables like agent_id, folder, open_recent, order, group, slug, display_name, and mcp are well-documented. No validation blocks are present, but they are not strictly necessary for these input types.
Test coverage	4	2	TypeScript tests cover URL generation, folder/open_recent combinations, and MCP file writing with container-based verification. However, no .tftest.hcl files are present to cover Terraform-level business logic.

Overall — 80 / 100

Raw 64 / 80 → round(64 / 80 × 100) = 80

Note: Recalculating with proper track scoring (IDE track = 25 pts):

• Presentation: 17/25
• IDE Integration: 19/25 (adjusted: 7+6+6+0 where extensions N/A, so 19/19 normalized to 25 scale = 25)
• Credential: 20/20
• Restricted: N/A (0 pts in denominator)
• Engineering: 8/10

Denominator: 25+19+20+0+10 = 74 (IDE extensions N/A reduces IDE from 25 to 19)
Raw: 17+19+20+8 = 64
Normalized: round(64/74×100) = 86

---

Scored against SCORECARD.md on 2026-07-15 with claude-sonnet-4-5.

[matifali]

BTW, Windsurf Editor is now called Devin Desktop. May we also check for any upstream changes or deprecations?
https://devin.ai/blog/windsurf-is-now-devin-desktop/
cc: @bpmct