Skip to main content Execute Windsurf production deployment checklist and rollback procedures.
Use when deploying Windsurf integrations to production, preparing for launch,
or implementing go-live procedures.
Trigger with phrases like "windsurf production", "deploy windsurf",
"windsurf go-live", "windsurf launch checklist".
npx skills add jeremylongshore/claude-code-plugins-plus-skills --skill windsurf-prod-checklist ai automation claude-code devops mcp ai-agents
Windsurf Production Checklist
Overview
Complete checklist for rolling out Windsurf to production teams. Covers workspace configuration, security hardening, team onboarding, and monitoring.
Prerequisites
Windsurf plan selected (Pro, Teams, or Enterprise)
Admin access to Windsurf dashboard
Git repositories identified for rollout
Team agreement on AI usage policy
Instructions
Phase 1: Pre-Deployment Configuration
Workspace Config (per repository):
Security:
Telemetry configured per company policy
.codeiumignore covers all secret file patterns
Autocomplete disabled for secret-containing file types (.env, .key)
Enterprise: SSO/SAML configured and enforced
Enterprise: zero-data-retention verified with Codeium
Phase 2: Team Onboarding #!/bin/bash
# scripts/setup-windsurf.sh — run on each developer machine
echo "Setting up Windsurf for this project..."
# Verify Windsurf is installed
windsurf --version || { echo "Install Windsurf first: https://windsurf.com/download"; exit 1; }
# Verify config files exist
[ -f .windsurfrules ] || echo "WARNING: .windsurfrules missing"
[ -f .codeiumignore ] || echo "WARNING: .codeiumignore missing"
# Install recommended extensions
windsurf --install-extension esbenp.prettier-vscode
windsurf --install-extension dbaeumer.vscode-eslint
# Disable conflicting extensions
windsurf --disable-extension github.copilot 2>/dev/null || true
echo "Setup complete. Open project folder (not monorepo root) for best AI context."
Phase 3: Monitoring and Optimization Admin Dashboard Monitoring:
# Metrics to track weekly (Admin Dashboard > Analytics)
metrics:
adoption:
- active_users_vs_total_seats # target: >80%
- daily_active_users # trend: increasing
quality:
- completion_acceptance_rate # target: >25%
- cascade_success_rate # target: >70%
efficiency:
- credits_consumed_per_user # watch for outliers
- tasks_completed_per_day # proxy for productivity
Phase 4: Rollback Procedure If Windsurf causes issues:
1. Disable Cascade for team: Admin Dashboard > Features > Cascade > Off
2. Developers can still use Supercomplete (non-agentic)
3. Switch to manual coding while investigating
4. Review recent Cascade-generated commits for issues
5. File support ticket with debug bundle (see windsurf-debug-bundle)
Error Handling Issue Severity Mitigation Cascade generates broken code Medium Enforce tests-pass-before-merge policy AI exposes secrets in suggestions High Audit .codeiumignore, rotate exposed secrets Team not adopting Low Training session, share productivity data Credits exhausted mid-sprint Medium Monitor usage, buy additional credits proactively
Examples
Recommended Extension Set // .vscode/extensions.json (also works in Windsurf)
{
"recommendations": [
"esbenp.prettier-vscode",
"dbaeumer.vscode-eslint",
"biomejs.biome"
],
"unwantedRecommendations": [
"github.copilot",
"tabnine.tabnine-vscode"
]
}
Quick Compliance Check set -euo pipefail
echo "Config: $([ -f .windsurfrules ] && echo 'OK' || echo 'MISSING')"
echo "Ignore: $([ -f .codeiumignore ] && echo 'OK' || echo 'MISSING')"
echo "Rules: $([ -d .windsurf/rules ] && echo 'OK' || echo 'MISSING')"
Resources
Next Steps For version upgrades, see windsurf-upgrade-migration.
Create or update AgentSkills. Use when designing, structuring, or packaging skills with scripts, references, and assets.
Create or update AgentSkills. Use when designing, structuring, or packaging skills with scripts, references, and assets.
Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.
CLI to manage emails via IMAP/SMTP. Use `himalaya` to list, read, write, reply, forward, search, and organize emails from the terminal. Supports multiple accounts and message composition with MML (MIME Meta Language).
Create or update AgentSkills. Use when designing, structuring, or packaging skills with scripts, references, and assets.
Create or update AgentSkills. Use when designing, structuring, or packaging skills with scripts, references, and assets.
Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.
CLI to manage emails via IMAP/SMTP. Use `himalaya` to list, read, write, reply, forward, search, and organize emails from the terminal. Supports multiple accounts and message composition with MML (MIME Meta Language).