Agent Relay Cursor module

[github-actions[bot]]

A discussion dedicated to the Agent Relay Cursor module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Agent Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
5 / 17	20 / 25	20 / 20	10 / 20	10 / 10	71 / 100

Drilldown

Agent Integration — 20 / 25

Criterion	Max	Score	Notes
AI governance	10	10	README documents Agent Relay integration (which provides routing and policy enforcement) and the credential flow where the relay exchanges a service-account API key for a user-scoped token. The relay acts as the governance layer between Coder and Cursor.
Dashboard entry point	5	0	No coder_app support documented or present in the module.
Session continuity	5	5	README explicitly documents the worker lifecycle and idle-release-timeout mechanism: "The timer starts when the agent finishes a turn, not when the chat closes, so keep the timeout at or above 300 seconds." The worker persists across reconnects within the idle window.
Managed configuration	5	5	README documents managed pool configuration through Agent Relay parameters: pool name, idle release timeout, repo URL, and computer-use flag are all stamped by the relay and consumed by the worker.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	agent_relay_credential parameter is marked ephemeral = true and has mask_input = true in styling. README examples show no inline secrets; all parameters render disabled with placeholders.
Non-hardcoded auth path	4	4	README documents Agent Relay's token exchange: "At dispatch the relay exchanges it for a Cursor sub-token scoped to the requesting user and stamps that as the ephemeral agent_relay_credential parameter." No raw keys in templates; the relay handles service-account credentials.

Restricted-Environment Readiness — 10 / 20

Criterion	Max	Score	Notes
Mirrorable artifact source	5	0	The install script hardcodes `curl https://cursor.com/install -fsSL
Bring-your-own binary	10	10	README documents: "Bake the CLI into the image and set this to false for faster workspaces" and "install_cli (default true) downloads it at start only when it is not already on PATH." Variable install_cli = false disables download entirely.
Egress transparency	3	0	No dedicated README section enumerating external endpoints. The cursor.com/install URL appears only in the install script template, not in a network/offline/air-gapped section.
Runs without sudo	2	0	Scripts run as the agent user but the install script executes `curl https://cursor.com/install -fsSL

Presentation & Onboarding — 5 / 17

Criterion	Max	Score	Notes
Configuration-mode examples	12	0	README shows one basic example with install_cli = true. No examples for major modes like computer-use enabled, bring-your-own binary, or repo-scoped pools. The Requirements section mentions these modes but provides no configuration examples.
Visual preview	5	5	README includes icon: ../../../../.icons/cursor.svg in frontmatter, which renders as a visual preview in the registry.

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All inputs have clear descriptions. cli_binary has validation regex. Defaults are sensible: install_cli = true, computer_use = false, state_file and log_file under module directory. serving_log_pattern has non-empty validation.
Test coverage	4	4	Comprehensive .tftest.hcl covers parameter contract, worker wiring, computer-use modes, install modes, shell injection prevention, and path overrides. main.test.ts exercises install/start scripts in containers with stub binaries, testing lifecycle states (idle, working, done, failed, orphaned), credential handling, and restart behavior.

Overall — 71 / 100

Raw 65 / 92 → round(65 / 92 × 100) = 71

---

Scored against SCORECARD.md on 2026-09-21 with claude-sonnet-4-5.