Agent Relay Cursor module

[github-actions[bot]]

A discussion dedicated to the Agent Relay Cursor module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Agent Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
6 / 17	5 / 25	20 / 20	13.5 / 20	10 / 10	59 / 100

Drilldown

Presentation & Onboarding — 6 / 17

Criterion	Max	Score	Notes
Configuration-mode examples	12	6	README gives a main usage example, a full additional_args example, and a management_addr override example with defaults explained. However computer_use/share_desktop (a major mode requiring image prerequisites) is only described in prose in the Requirements section, with no code example showing the toggle.
Visual preview	5	0	No image, GIF, or video anywhere in the README.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	No module variable ever carries a raw secret — the token is delivered as an ephemeral workspace secret (AGENT_RELAY_CURSOR_TOKEN) injected by the agent, never a Terraform input, parameter, or state value, and the README's "Worker credential" section explains this explicitly with no inline secrets anywhere in examples.
Non-hardcoded auth path	4	4	"Worker credential" section documents the ServiceAccount/relay-minted session-token flow (--auth-token-file) in detail as the only path, with no raw key ever pasted into the template.

Restricted-Environment Readiness — 13.5 / 20

Criterion	Max	Score	Notes
Mirrorable artifact source	5	0	install.sh.tftpl always curls the hardcoded https://cursor.com/install; the only related variable, cli_binary, overrides the binary name/path, not the download URL. No variable exists to point at an internal mirror.
Bring-your-own binary	10	10	install_cli = false is documented in both the variable description and README Requirements section as the way to skip download entirely when the CLI is baked into the image; the install script correctly no-ops in that case.
Egress transparency	3	1.5	cursor.com/install and cursor.com/agents / cursor:// deep links are mentioned, but only scattered across the Requirements, Worker credential, and Session attachment sections — there is no dedicated network/egress/air-gapped section enumerating endpoints.
Runs without sudo	2	2	cleanup.sh.tftpl, install.sh.tftpl, and start.sh.tftpl contain no sudo invocations; CLI install goes to ~/.local/bin and all scripts operate purely as the workspace user.

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	Every variable has a clear description and sensible default; several carry validation blocks (cli_binary command-word regex, share_desktop requires computer_use, management_addr host:port and port-range checks, serving_log_pattern non-empty, additional_args non-empty/no-newline/no-reserved-flag).
Test coverage	4	4	main.tftest.hcl thoroughly covers parameter contract, script wiring, flag rendering, and validation logic; main.test.ts runs real containerized end-to-end tests of the supervisor/worker lifecycle (idle, working, orphaned, done, SIGKILL escalation, stale generations).

Agent Integration — 5 / 25

Criterion	Max	Score	Notes
AI governance	10	0	No mention of Coder AI Gateway or Agent Firewall anywhere in the README; the module only integrates with Agent Relay, a different mechanism not described in governance terms (auth/routing/policy for the agent's AI calls).
Dashboard entry point	5	5	coder_app resources cursor_web and cursor_desktop are created and documented in the README ("Open in Cursor Web" / "Open in Cursor Desktop").
Session continuity	5	0	No documented tmux/screen/boo persistent session manager, and no user-facing "resume this coding session" flow; the worker lifecycle and session-id plumbing are infrastructure for Agent Relay's reaping/dedupe, not documented as end-user session continuity.
Managed configuration	5	0	No mention of managed MCP, settings, policies, or workdir configuration anywhere in the README.

Overall — 59 / 100

Raw 54.5 / 92 → round(54.5 / 92 × 100) = 59

---

Scored against SCORECARD.md on 2026-11-09 with solstice-1.