Agent Relay Cursor module

[github-actions[bot]]

A discussion dedicated to the Agent Relay Cursor module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Agent Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
6 / 17	10 / 25	12 / 20	13.5 / 20	10 / 10	56 / 100

Drilldown

Track: Agent (Cursor cloud agent worker dispatched by Agent Relay)

Presentation & Onboarding — 6 / 17

Criterion	Max	Score	Notes
Configuration-mode examples	12	6	One primary code example (agent_id, install_cli) is shown with sensible defaults, and the baked-in-vs-download mode is explained in prose. However, other real configuration axes — computer_use, cli_binary override, state_file/log_file — have no accompanying example, and the credential-kind modes (worker_token vs api_key) are described only in a prose table, not a template-configuration example.
Visual preview	5	0	No image, GIF, or video anywhere in the README.

Credential Hygiene — 12 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	8	agent_relay_credential is ephemeral = true with mask_input = true in its styling JSON, but the coder_parameter block never sets sensitive = true. No inline literal/placeholder secrets appear in the README example, but the literal rubric requirement (sensitive = true) is not met, only approximated via UI styling.
Non-hardcoded auth path	4	4	The "Worker credential" section documents in detail how the service-account API key never leaves Agent Relay; only a short-lived, per-user sub-token is stamped into the workspace, avoiding pasted raw keys in the template.

Restricted-Environment Readiness — 13.5 / 20

Criterion	Max	Score	Notes
Mirrorable artifact source	5	0	install.sh.tftpl hardcodes curl https://cursor.com/install -fsSL | bash. No module variable overrides this URL (only cli_binary, an install-location/path override, and install_cli, a skip-download toggle, exist).
Bring-your-own binary	10	10	install_cli = false documented in the example and Requirements section to fully skip the download when the CLI is baked into the image; start script and installer both look for the binary on PATH/~/.local/bin first (verified in tests too).
Egress transparency	3	1.5	No dedicated network/egress/air-gapped section. Endpoints (cursor.com/agents/<id>, cursor://…deeplink) appear only scattered inside the "Open in Cursor Web/Desktop" prose; the install domain (cursor.com/install) is never named in the README itself (only in main.tf/script comments). Scattered mentions cap this at half.
Runs without sudo	2	2	install.sh.tftpl, start.sh.tftpl, and status.sh.tftpl never invoke sudo; all operations (curl install, supervisor spawn, state file writes) run as the workspace user.

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	Every variable has a thorough description; cli_binary and serving_log_pattern have validation blocks guarding against shell-injection and empty-pattern footguns; defaults are sensible (install_cli = true, paths under the coder-utils module directory).
Test coverage	4	4	main.tftest.hcl extensively covers the parameter contract, credential-kind branching, computer_use flag, validation failures, and injection safety; main.test.ts runs true end-to-end container tests covering install/start/status lifecycle, restart semantics, and credential handling.

Agent Integration — 10 / 25

Criterion	Max	Score	Notes
AI governance	10	0	No mention of Coder AI Gateway or Agent Firewall anywhere in the README; the credential-exchange design is Agent-Relay-specific, not the Coder AI Gateway/Firewall referenced by this criterion.
Dashboard entry point	5	5	Documents two coder_app resources (cursor_web, cursor_desktop) that appear when a session id is stamped, explained clearly in the README.
Session continuity	5	5	"Worker lifecycle" section documents that the detached supervisor persists across an agent restart within the same build — a live worker is left alone rather than relaunched, functioning as a persistent session manager for the underlying Cursor worker connection.
Managed configuration	5	0	No documented support for managed MCP, settings, policies, or workdir configuration.

Overall — 56 / 100

Raw 51.5 / 92 → round(51.5 / 92 × 100) = 56

---

Scored against SCORECARD.md on 2026-09-25 with solstice-1.