Agent Relay Cursor module

[github-actions[bot]]

A discussion dedicated to the Agent Relay Cursor module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Agent Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
6 / 17	5 / 25	20 / 20	12 / 20	10 / 10	58 / 100

Drilldown

Presentation & Onboarding — 6 / 17

Criterion	Max	Score	Notes
Configuration-mode examples	12	6	One main Terraform example (install_cli = true). install_cli = false is mentioned in a comment and the Requirements section, and computer_use/share_desktop are described in Requirements, but no separate Terraform code blocks are shown for each major mode. Partial credit.
Visual preview	5	0	No image, GIF, or video embedded in the README. The frontmatter references an SVG icon file, which does not count.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	agent_relay_credential parameter has mask_input = true in its styling. README examples contain no inline secrets; the credential is set exclusively by Agent Relay at dispatch.
Non-hardcoded auth path	4	4	"Worker credential" section documents that the pool's service-account API key never leaves Agent Relay; a per-claim session token is minted and stamped as an ephemeral parameter. No raw key is pasted into any template.

Restricted-Environment Readiness — 12 / 20

Criterion	Max	Score	Notes
Mirrorable artifact source	5	0	The install URL https://cursor.com/install is hardcoded in install.sh.tftpl. No module input variable overrides this URL. cli_binary sets the binary path, not the download source.
Bring-your-own binary	10	10	install_cli = false (documented in README and variable description) disables the download entirely. The install script checks command -v first and skips if the CLI is already on PATH. README explicitly recommends baking the CLI into the image.
Egress transparency	3	0	No dedicated README section enumerating external endpoints (cursor.com/install, Cursor API) or providing air-gapped/restricted-environment guidance. Mentions are scattered in variable descriptions and requirements, not a standalone section.
Runs without sudo	2	2	All scripts (install.sh.tftpl, start.sh.tftpl, status.sh.tftpl) install to ~/.local/bin and write under $HOME/.coder-modules/. No sudo invocation anywhere.

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All 8 variables have clear descriptions and sensible defaults. cli_binary has a regex validation, share_desktop has a cross-field validation requiring computer_use, and serving_log_pattern rejects empty strings.
Test coverage	4	4	main.tftest.hcl covers the parameter contract, script rendering, and flag wiring (12 test runs). main.test.ts runs the actual install/start scripts in a container with stub binaries, exercising the full supervisor lifecycle (idle, working, done, failed, orphaned), credential file handling, shell-injection resistance, and path overrides.

Agent Integration — 5 / 25

Criterion	Max	Score	Notes
AI governance	10	0	No mention of Coder AI Gateway or Agent Firewall in the README or code. The credential path is Agent Relay's service-account → session token, which is not AI Gateway or Agent Firewall.
Dashboard entry point	5	5	Two coder_app resources (cursor_web, cursor_desktop) are created when agent_relay_session_id is set. Documented in the README with the exact URLs and the condition under which they appear.
Session continuity	5	0	No documentation of resuming an existing Cursor agent session across reconnects or relaunches. The module manages the worker process lifecycle, not session continuity. No mention of session-ID-based resume, tmux, screen, or boo.
Managed configuration	5	0	No documentation of managed MCP servers, settings, policies, or workdir configuration. The module's scope is running the Cursor CLI worker; it does not configure Cursor's agent settings.

Overall — 58 / 100

Raw 53 / 92 → round(53 / 92 × 100) = 58

---

Scored against SCORECARD.md on 2026-10-19 with solstice-1.