Smithery is now a part of Arcade.dev! Read more in our announcement here
Execute Windsurf production deployment checklist and rollback procedures. Use when deploying Windsurf integrations to production, preparing for launch, or implementing go-live procedures. Trigger...
Complete checklist for rolling out Windsurf to production teams. Covers workspace configuration, security hardening, team onboarding, and monitoring.
Read to inspect only the repository files and configuration needed for the request.Grep to locate relevant settings, rules, logs, or code without broad collection.Workspace Config (per repository):
.devin/rules/project.md created with project stack, patterns, and constraints.codeiumignore excludes secrets, build artifacts, and large binaries.devin/rules/ contains glob-triggered rules for file-type-specific patterns.windsurf/settings.jsonSecurity:
.codeiumignore covers all secret file patternsTeam Policy:
[cascade] prefix)Per-Developer Setup:
#!/bin/bash
# scripts/setup-windsurf.sh — run on each developer machine
echo "Setting up Windsurf for this project..."
# Verify Windsurf is installed
windsurf --version || { echo "Install Windsurf first: https://windsurf.com/download"; exit 1; }
# Verify config files exist
[ -f .devin/rules/project.md ] || echo "WARNING: .devin/rules/project.md missing"
[ -f .codeiumignore ] || echo "WARNING: .codeiumignore missing"
# Install recommended extensions
windsurf --install-extension esbenp.prettier-vscode
windsurf --install-extension dbaeumer.vscode-eslint
# Disable conflicting extensions
windsurf --disable-extension github.copilot 2>/dev/null || true
echo "Setup complete. Open project folder (not monorepo root) for best AI context."
Training Checklist:
.devin/rules/project.md explainedAdmin Dashboard Monitoring:
# Metrics to track weekly (Admin Dashboard > Analytics)
metrics:
adoption:
- active_users_vs_total_seats # compare with organization-defined target
- daily_active_users # trend: increasing
quality:
- completion_acceptance_rate # baseline before setting a target
- cascade_success_rate # baseline before setting a target
efficiency:
- included_vs_on_demand_usage # review with authorized billing owner
- tasks_completed_per_day # proxy for productivity
Quarterly Review:
.devin/rules/project.md -- update with new patternsIf Windsurf causes issues:
1. Disable Cascade for team: Admin Dashboard > Features > Cascade > Off
2. Developers can still use Supercomplete (non-agentic)
3. Switch to manual coding while investigating
4. Review recent Cascade-generated commits for issues
5. File support ticket with debug bundle (see windsurf-debug-bundle)
Return a signed readiness checklist with evidence for identity, repository access, data boundaries, policy controls, pilot results, support ownership, usage monitoring, incident response, and rollback. List every incomplete item with an owner and due date.
| Issue | Severity | Mitigation |
|---|---|---|
| Cascade generates broken code | Medium | Enforce tests-pass-before-merge policy |
| AI exposes secrets in suggestions | High | Audit .codeiumignore, rotate exposed secrets |
| Team not adopting | Low | Training session, share productivity data |
| Quota exhausted mid-sprint | Medium | Check reset timing and use approved extra usage or lower-cost models |
// .vscode/extensions.json (also works in Windsurf)
{
"recommendations": [
"esbenp.prettier-vscode",
"dbaeumer.vscode-eslint",
"biomejs.biome"
],
"unwantedRecommendations": [
"github.copilot",
"tabnine.tabnine-vscode"
]
}
set -euo pipefail
echo "Config: $([ -f .devin/rules/project.md ] && echo 'OK' || echo 'MISSING')"
echo "Ignore: $([ -f .codeiumignore ] && echo 'OK' || echo 'MISSING')"
echo "Rules: $([ -d .devin/rules ] && echo 'OK' || echo 'MISSING')"
Continue with windsurf-upgrade-migration to preserve these production controls through editor, extension, configuration, and policy changes.
