Borrowing it
Nothing to install: this file belongs to Sitecore/xmcloud-starter-js. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/Sitecore/xmcloud-starter-js/main/.windsurfrulesgit clone --depth 1 https://github.com/Sitecore/xmcloud-starter-jsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/rules/sitecore/xmcloud-starter-js/windsurfrules)<a href="https://agentmods.dev/rules/sitecore/xmcloud-starter-js/windsurfrules"><img src="https://agentmods.dev/badge/rules/sitecore/xmcloud-starter-js/windsurfrules/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/rules/sitecore/xmcloud-starter-js/windsurfrules"><img src="https://agentmods.dev/badge/rules/sitecore/xmcloud-starter-js/windsurfrules.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.08734 | $0.08734 |
| Opus 5 | $0.04367 | $0.04367 |
| Sonnet 5 | $0.01747 | $0.01747 |
| Haiku 4.5 | $0.00873 | $0.00873 |
Grade A, and why
windsurfrules scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 1,174 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Windsurf IDE Rules - XM Cloud Front End Starter Kits
Project Overview
Repository Structure
This is the XM Cloud Front End Application Starter Kits repository containing multiple Next.js starter applications and SPA examples for Sitecore XM Cloud development.
Key Directories:
/examples/- Starter front-end applications (Next.js and SPA)basic-nextjs- Simple Next.js starter with basic XM Cloud integrationkit-nextjs-article-starter- Solterra & Co. - Editorial-style template for lifestyle brandskit-nextjs-location-finder- Alaris - Car brand template with location finder functionalitykit-nextjs-product-listing- SYNC - Product-focused template for audio gear companieskit-nextjs-skate-park- Demo site showcasing component examplesbasic-spa- SPA starter kit with Angular and Node proxy
/authoring/- Sitecore content items, templates, and deployment configurations/local-containers/- Docker setup for local development environmentsxmcloud.build.json- Primary configuration for XM Cloud deployment
Technology Stack
Core Technologies:
- Next.js 14+ - React framework with App Router and Pages Router support
- TypeScript - Strict type safety throughout all components
- Sitecore XM Cloud - Headless content management and delivery
- Sitecore Content SDK (
@sitecore-content-sdk/nextjs) - Modern SDK for XM Cloud integration - Tailwind CSS - Utility-first CSS with container queries (@container)
- Shadcn/ui - Modern component library with accessibility features
Additional Libraries:
- Framer Motion - Animation library for interactive components
- Lucide React - Icon library for consistent iconography
- next-localization - Internationalization with dictionary support
- change-case - String case transformation utilities
Development Tools:
- Docker - Containerized local development with Sitecore CM
- Node.js LTS - JavaScript runtime environment
- npm - Package management across all starter applications
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today First seen · 1,174 lines · 8,734 tokens per session scan A 47b104af2c0a
windsurfrules is a cursor rule published in the GitHub repository Sitecore/xmcloud-starter-js (29 stars, last pushed today), licensed Apache-2.0. It adds 8,734 tokens to every session, about $0.0437 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-09.
Other cursor rules, from other repositories
pages
Source: docs/agents/pages.md Regenerate: npm run agents:sync -w packages/openbridge-webcomponents -->.
shadcn-tailwind-guide
A guide to building new components with shadcn/ui and Tailwind CSS, a utility-based system for styling interfaces.
css-render-blocking-diagnosis
Cursor rule "css-render-blocking-diagnosis" from adobecom/da-express-milo, covering css render-blocking diagnosis & resolution, critical learning from 98 pagespeed achievement, primary diagnostic protocol, step 1: css blocking symptom recognition and step 2: css loading sequence audit.
frontend-architecture
Vite + React SPA architecture - directory layout, providers, bundle splitting. Tailwind styling in tailwind.mdc.
web-pages-e2e-test-maintenance
Keep web pages end-to-end coverage current.
tanstack-react-router_routing
TanStack Router: Routing.