Docs

Devin Desktop (Windsurf)

Cognition's AI editor, formerly Windsurf, with its Cascade agent. Covered for Block on commands, file reads, file writes, MCP calls and prompts.

Windsurf became Devin Desktop in June 2026. It's the same editor and the same Cascade agent, and ZYBE treats the two names as one product, so nothing changes for you when a laptop takes the update.

What ZYBE can do

Block, on every rule, for commands, file reads, file writes, MCP calls and prompts. Devin Desktop has no "ask the developer" in its built-in check, so Ask records the attempt and Cascade's own confirmation takes over.

Prompt injection is caught two ways. The answers from MCP servers are read the moment they arrive, and the next call is refused if one carried instructions for the agent. Command output and files are read from the conversation transcript at the end of each turn.

What you do

Install the sensor. Restart Devin Desktop if it was open.

Check it's working

1. In Devin Desktop, ask Cascade to run a command.
2. In the console, open the laptop from Inventory, Endpoints, click Sensor. Devin Desktop shows Blocking.

What the developer sees when blocked

Cascade shows ZYBE's reason and stops.

For IT

On a whole-machine install ZYBE registers itself in /Library/Application Support/Devin/hooks.json, which covers every user on the machine. A just-me install uses ~/.codeium/windsurf/hooks.json.