Windsurf / Devin DesktopWindsurf / Devin Desktop
已改称 Devin Desktop(被 Cognition 收购后)——有自研模型 SWE-2、支持 ACP preview、有过 Restricted Mode 的 CVE 修复记录。
Now renamed Devin Desktop (after the Cognition acquisition) — it has its own SWE-2 model, supports ACP preview, and has a CVE fix history involving Restricted Mode.
适合与不适合When to use it, when not to
需要多模型供应商可选(不想被单一模型绑定)的人。 需要 ACP 以接入自定义 agent 的人(注意是 preview)。 需要远程主机(SSH / WSL)支持的人。
不适合单纯为一个编辑功能付费的人—— Free 档已含无限 inline edits 与无限 Tab 补全。
People who want a choice of model providers rather than being locked to one. People who need ACP to attach a custom agent (note it is preview). People who need remote host support (SSH / WSL).
Not a fit for paying for one editing feature alone — the Free tier already includes unlimited inline edits and unlimited Tab completion.
中文生态China availability 国产 / 国内可直接用 / 备案状态 · 快照domestic / direct access / CAC filing · snapshot 2026-10-20
- 出品属地Origin
- 国外出品foreign-made 国外主体(网信办公示名单未见对应备案主体)。foreign entity (no matching filing entity in the CAC registry).
- 国内使用Direct access
- 大陆可直连direct OK 官网 devin.ai 直连实测 200。devin.ai measured 200 direct.
- 备案状态CAC filing
- 未见于备案名单not in filing list:未见于网信办公示名单(2026-10-20 检索 13 批附件,https://www.cac.gov.cn/2024-04/02/c_1713729983803145.htm);该产品未面向大陆公众提供服务,备案不适用。not in the CAC public registry (13 batch attachments searched 2026-10-20, https://www.cac.gov.cn/2024-04/02/c_1713729983803145.htm); the product does not serve the mainland public, so filing does not apply.
备案信息以网信办《生成式人工智能服务已备案信息》公示名单为准(按批次滚动更新,本站只抄编号不解读);「大陆可直连」是本站从大陆网络直连实测的结果,不是厂商承诺。GitHub 类站点当日实测有波动,口径写在依据里。Filing status is quoted from the CAC public registry (updated batch by batch; this site copies the number and does not interpret it). "Direct access" is this site's own reachability measurement from a mainland network, not a vendor promise. GitHub-hosted sites fluctuated on the measurement day — the note says so.
固定坐标系Fixed coordinate system
8 个维度dimensions, 与同分区其他对象逐项可比each comparable item by item against others in the same section.
- 模型与开放条件Model & openness
Pro 档明确列出供应商:OpenAI、Claude、Gemini、SpaceXAI 以及领先开源模型。
自有模型 SWE-2 官方标注「Free use of SWE-2」, 定价页顶部另标注「SWE-2, our latest model, is now available」。
Free 档标注「有限模型可用性」(Limited model availability)。
The Pro tier lists providers explicitly: OpenAI, Claude, Gemini, SpaceXAI and leading open-source models.
The in-house model SWE-2 is officially labeled "Free use of SWE-2", and the pricing page header additionally states "SWE-2, our latest model, is now available".
The Free tier is labeled "Limited model availability".
- 运行位置Where it runs
重要变更:Windsurf 已改称 Devin Desktop——
官方文档标题为「agent-native editor」的稳定版本发布说明, 下载页同时提供 macOS(Apple Silicon / Intel)、 Windows(arm64 / x64)与 Linux x64 for Debian。
支持 SSH 或 WSL 主机上的文件夹选择。
Important change: Windsurf has been renamed Devin Desktop —
the official docs title the stable-release notes "agent-native editor"; the download page offers macOS (Apple Silicon / Intel), Windows (arm64 / x64) and Linux x64 for Debian.
Folder selection on SSH or WSL hosts is supported.
- 本地文件Local files
本地编辑器,直接读写工作区。官方 context-awareness 页原文: "The entire local codebase is then indexed (including files that are not open)"——整个本地代码库会被 RAG 上下文引擎索引,检索时按需取片段。
Pro 档有更大索引上限与上下文长度;Teams / Enterprise 可索引远端仓库。
.gitignore内文件默认不对 Cascade 开放(Cascade Gitignore Access 默认关闭);.codeiumignore可排除路径。Fast Context 是专门检索子代理 (SWE-grep / SWE-grep-mini 模型,仅用 grep / read / glob, 最多 4 轮、每轮至多 8 个并行工具调用)。亦可拖文件到面板或把选区发到聊天。
A local editor that reads and writes the workspace directly. Official context-awareness page wording: "The entire local codebase is then indexed (including files that are not open)" — the whole local codebase is indexed by the RAG context engine, with snippets fetched on demand at retrieval time.
The Pro tier has larger index caps and context length; Teams / Enterprise can index remote repositories.
Files in
.gitignoreare not exposed to Cascade by default (Cascade Gitignore Access is off by default);.codeiumignorecan exclude paths.Fast Context is a dedicated retrieval subagent (SWE-grep / SWE-grep-mini models, using only grep / read / glob, up to 4 rounds, at most 8 parallel tool calls per round). You can also drag files into the panel or send a selection to chat.
- 关机后的任务Tasks after shutdown
真后台来自 Devin Cloud:官方
windsurf/devin页原文 "Each Devin session runs on its own VM with a desktop, browser, and computer use, so it can keep working after you close your laptop"——每个 Devin 会话跑在自己的云端 VM,关掉笔记本仍继续。 可在本地用 Cascade 制定计划后一键交给 Devin 云端实现, 会话出现在 Agent Command Center。
本地 Cascade 与 Devin Local 则在你机器上运行(Devin Local "operates on your machine"),需客户端常驻。
注意 Devin Cloud 访问在逐步放开(rolling out),Enterprise 需管理员开启。
True background comes from Devin Cloud: official
windsurf/devinpage wording "Each Devin session runs on its own VM with a desktop, browser, and computer use, so it can keep working after you close your laptop" —each Devin session runs on its own cloud VM, keeping working after you close the laptop. You can plan locally with Cascade and hand it to Devin cloud for implementation in one click, with sessions appearing in the Agent Command Center.
Local Cascade and Devin Local run on your machine (Devin Local "operates on your machine") and need the client resident.
Note Devin Cloud access is rolling out, and Enterprise requires an admin to enable it.
- 工具与扩展Tools & extensions
支持 Agent Client Protocol(ACP)—— 文档站有「Agent Client Protocol (preview)」与 「Building a custom ACP agent」两个专页,说明 ACP 处于 preview 阶段。
MCP 支持有一个重要细节:
changelog 记录 ACP 客户端传入的 MCP server 现在可被智能体使用并列出, 包括 HTTP 与 SSE 类型的 MCP server。
Supports the Agent Client Protocol (ACP) — the docs site has "Agent Client Protocol (preview)" and "Building a custom ACP agent" as dedicated pages, indicating ACP is in preview.
MCP support has one important detail:
the changelog records that MCP servers passed in by ACP clients can now be used and listed by the agent, including HTTP and SSE type MCP servers.
- 上下文与记忆Context & memory
Memories 机制已核到(官方
cascade/memories页):Cascade 在对话中自动生成并存储 memory,也可让它「create a memory」;memory 与工作区绑定、存本地
~/.codeium/windsurf/memories/、 不提交仓库、不消耗 credits,Cascade 认为相关时自动检索。跨会话持久化官方推荐用 Rules(global / workspace / system 三级,
.windsurf/rules/*.md)或AGENTS.md。另有会话历史:changelog 记录切回最近查看过的 10 个会话之一时,会立即显示其 transcript。
底层上下文引擎为 RAG(官方 M-Query 检索)。
The Memories mechanism is verified (official
cascade/memoriespage): Cascade automatically generates and stores memories during conversations, and you can ask it to "create a memory";memories bind to the workspace, stored locally at
~/.codeium/windsurf/memories/, not committed to the repo, consuming no credits, auto-retrieved when Cascade deems them relevant.For cross-session persistence the official recommendation is Rules (global / workspace / system three levels,
.windsurf/rules/*.md) orAGENTS.md. There is also session history:the changelog records that switching back to one of the 10 most recently viewed sessions shows its transcript immediately.
The underlying context engine is RAG (official M-Query retrieval).
- 权限与限制Permissions & limits
有明确的安全机制与 CVE 修复记录: changelog 记录修复了 Restricted Mode 的一个绕过 (CVE-2026-81376)—— 原本只检查点号形式的受限工作区设置, 现在也检查嵌套对象形式。
这条值得注意:受限模式曾可被嵌套对象绕过。
There are explicit security mechanisms and CVE fix records: the changelog records a fix for a Restricted Mode bypass (CVE-2026-81376) — previously only dotted-form restricted workspace settings were checked, now nested-object form is checked too.
This one is worth noting: Restricted Mode could once be bypassed via nested objects.
- 适合什么任务Best for
需要多模型供应商可选(不想被单一模型绑定)的人; 需要 ACP 以接入自定义 agent 的人(注意是 preview); 需要远程主机(SSH / WSL)支持的人。 Free 档适合只需要无限 inline edits 与无限 Tab 补全的人。
People who need multiple model providers to choose from (not locked to a single model); people who need ACP to plug in custom agents (note it is preview); people who need remote-host (SSH / WSL) support. The Free tier fits people who only need unlimited inline edits and unlimited Tab completion.
头号误解Top misconception
- 不知道产品已改称 Devin Desktop,搜 Windsurf 可能找不到对应文档Not knowing the product is now Devin Desktop — searching for Windsurf may not find the matching docs
- 以为 Teams 是单一按席位计费,实际是「方案月费 + 席位费」两层Assuming Teams is a single per-seat price — it is two layers: plan fee plus $40 per full-time seat
- 以为加购用量有折扣,官方说明按 API 价格计Assuming add-on usage is discounted — the official docs say it is billed at API pricing
未知项清单Known unknowns
以下各项本次未核验,confidence 因此是 partial 而非 verified:
- SWE-2 与第三方模型的优先级关系
- ACP preview 到稳定的时间表
- 索引算法的官方说明(官方只给行为边界,未公开实现)
- The priority relationship between SWE-2 and third-party models
- The timeline from ACP preview to stable
- The official description of the indexing algorithm (the official docs give behavioral boundaries only, implementation not disclosed)
证据来源Evidence sources
判断可回到以下一手源复核。本站核验日Every judgement can be rechecked against the primary sources below. Verified on 2026-10-23,内容更新日content updated on 2026-10-08。
| 类型Type | 名称Name | 链接Link |
|---|---|---|
| pricing | Windsurf · 官方定价页(Free / Pro / Teams 结构与能力)Windsurf · official pricing page (Free / Pro / Teams structure and capabilities) | https://windsurf.com/pricing |
| changelog | Windsurf · 官方 Changelog(Devin Desktop 发布说明 + CVE 修复)Windsurf · official Changelog (Devin Desktop release notes + CVE fix) | https://windsurf.com/changelog |
| docs | Windsurf · 官方文档Windsurf · official docs | https://docs.windsurf.com |
| docs | Windsurf · ACP 文档(preview)Windsurf · ACP docs (preview) | https://docs.windsurf.com |
| docs | Windsurf · 官方文档 · Context Awareness(RAG 索引、Fast Context、远端仓库索引)Windsurf · official docs · Context Awareness (RAG indexing, Fast Context, remote-repo indexing) | https://docs.windsurf.com/context-awareness/overview |
| docs | Windsurf · 官方文档 · Memories & Rules(memory 自动生成、本地存储、Rules 三级)Windsurf · official docs · Memories & Rules (auto-generated memories, local storage, three-level Rules) | https://docs.windsurf.com/windsurf/cascade/memories |
| docs | Windsurf · 官方文档 · Devin(云端 agent 独立 VM、关笔记本仍跑、委托流程)Windsurf · official docs · Devin (cloud agent on its own VM, keeps running after laptop closes, delegation flow) | https://docs.windsurf.com/windsurf/devin |
| docs | Windsurf · 官方文档 · Devin Local Agent(本地 harness、子代理、沙箱、权限)Windsurf · official docs · Devin Local Agent (local harness, subagents, sandbox, permissions) | https://docs.windsurf.com/windsurf/devin-local |
实测记录Measured runs
本档未跑端到端编码任务;能力结论来自官方文档,编码向测量协议见 protocols/coding/_protocol.md。
实测建议:重点测两处 (1)Restricted Mode 的实际约束力——鉴于它有过 CVE 修复; (2)ACP 传进来的 HTTP/SSE 类型 MCP server 是否真的可用。
This site has not completed measured runs.
The test protocol is at protocols/coding/_protocol.md.
Suggested measurement: focus on two things (1) the real constraining power of Restricted Mode — given it had a CVE fix; (2) whether HTTP/SSE type MCP servers passed in via ACP actually work.
最重要的一件事:产品已改名The single most important thing: the product has been renamed
官方文档站的发布说明标题现在是「Devin Desktop」, 描述为「agent-native editor」。
这意味着:
- 找 Windsurf 的最新文档可能找不到
- 品牌、版本号、定价体系都跟着 Cognition 走
- Cognition 同时有 Devin(云端)与 Devin Desktop(编辑器)两条产品线
这一条对本站的方法论有验证意义: Methodology 规则 3「不跨层级混排」 说的正是这类问题—— 改名后的产品如果还按旧名收录,会直接导致误导。
The release-notes title on the official docs site is now "Devin Desktop", described as an "agent-native editor".
This means:
- you may not find Windsurf's latest docs by searching the old name
- brand, version numbers and pricing structure all follow Cognition
- Cognition runs two product lines at once: Devin (cloud) and Devin Desktop (the editor)
This item has confirmatory significance for this site's methodology: Methodology rule 3 "don't mix layers" is exactly about this kind of problem — a renamed product kept under its old name would directly mislead.
档位结构:两层计费要特别注意Tier structure: two-layer billing deserves attention
(报价数字按本站的报价记录约定不存,见官方定价页。)
| 档位 | 关键内容 |
|---|---|
| Free | Light quota、有限模型可用性、无限 inline edits、无限 Tab 补全 |
| Pro | 更高额度含 OpenAI / Claude / Gemini / SpaceXAI 前沿模型 + 领先开源模型、完整模型可用性、SWE-2 免费使用、Devin Desktop 与 CLI 有官方标注的限时免费期(2026-10-10 前)、可访问 Devin Cloud、加购用量按 API 价格计 |
| Teams | 两层计费:方案月费 + 按全职开发者席位计价,最多 200 用户,协作与集中计费 |
三个容易踩的点:
| 误解 | 实际 |
|---|---|
| Teams 只是按席位计费 | 两层:方案月费 + 席位费 |
| 加购用量有折扣 | 按 API 价格计,即无折扣 |
| 免费期是长期的 | 2026-10-10 结束(Devin Desktop 与 CLI) |
(Quote numbers are not stored per the price-recording policy; see the official pricing page.)
| Tier | Key contents |
|---|---|
| Free | Light quota, limited model availability, unlimited inline edits, unlimited Tab completion |
| Pro | Higher quota covering OpenAI / Claude / Gemini / SpaceXAI frontier models + leading open-source models, full model availability, free use of SWE-2, an officially labeled limited-time free period for Devin Desktop and CLI (until 2026-10-10), Devin Cloud access, add-on usage billed at API prices |
| Teams | Two-layer billing: a plan monthly fee + per-full-time-developer seats, up to 200 users, collaboration and centralized billing |
Three easy pitfalls:
| Misconception | Reality |
|---|---|
| Teams bills by seats only | two layers: plan monthly fee + seat fee |
| Add-on usage gets a discount | billed at API prices, i.e. no discount |
| The free period is long-term | ends 2026-10-10 (Devin Desktop and CLI) |
模型供应:多供应商 + 自研模型Model supply: multi-provider + in-house model
Pro 档明确列出四家供应商: OpenAI、Claude、Gemini、SpaceXAI(xAI)。
自有模型 SWE-2:
- 定价页顶部标注「SWE-2, our latest model, is now available」
- Pro 档标注「Free use of SWE-2」
Free 档是「Limited model availability」—— 这是 Free 与 Pro 的核心差异,比额度更值得注意。
The Pro tier lists four providers explicitly: OpenAI, Claude, Gemini, SpaceXAI (xAI).
The in-house model SWE-2:
- the pricing page header states "SWE-2, our latest model, is now available"
- the Pro tier states "Free use of SWE-2"
The Free tier is "Limited model availability" — this is the core Free-vs-Pro difference, more notable than quota.
ACP 支持(preview 阶段)ACP support (preview stage)
文档站有两个 ACP 专页:
- Agent Client Protocol (preview)
- Building a custom ACP agent
这说明 ACP 处于 preview,不是稳定功能。
但 changelog 里有一个值得注意的进展:
MCP servers passed by an ACP client ... are now usable by the agent
and listed in ..., including for HTTP and SSE MCP servers
通过 ACP 客户端传入的 MCP server 现在可用了, 包括 HTTP 与 SSE 类型。
这比官方 reference server 的能力更强 —— 本仓库工具分区里,官方 server 多数只支持 stdio。
The docs site has two ACP dedicated pages:
- Agent Client Protocol (preview)
- Building a custom ACP agent
This shows ACP is in preview, not a stable feature.
But the changelog has one notable advance:
MCP servers passed by an ACP client ... are now usable by the agent
and listed in ..., including for HTTP and SSE MCP servers
MCP servers passed in via ACP clients are now usable, including HTTP and SSE types.
This is stronger than what the official reference servers can do — in this repository's tools section, most official servers only support stdio.
安全:有过 Restricted Mode 的 CVESecurity: a Restricted Mode CVE happened
changelog 记录了一处修复:
Restricted Mode blocks restricted workspace settings written in
nested object form, not just the dotted form (CVE-2026-81376).
翻译:受限模式原本只拦截点号形式(a.b.c)写入的受限工作区设置, 现在也拦截嵌套对象形式。
这条值得单独记录,因为它揭示了一个真实的权限绕过: 受限模式曾可被嵌套对象形式绕过。
对于一个 AI 编程工具,Restricted Mode 是重要的安全边界, 这类修复的存在提醒我们:这个边界曾经比看起来脆弱。
The changelog records one fix:
Restricted Mode blocks restricted workspace settings written in
nested object form, not just the dotted form (CVE-2026-81376).
What it means: Restricted Mode used to block only restricted workspace settings written in dotted form (a.b.c); now it also blocks nested-object form.
This deserves a standalone record, because it reveals a real permission bypass: Restricted Mode could once be bypassed via nested-object form.
For an AI coding tool, Restricted Mode is an important security boundary, and the existence of such a fix reminds us: this boundary was once more fragile than it looked.
平台支持Platform support
从下载页可见的覆盖面很广:
| 平台 | 架构 |
|---|---|
| macOS | Apple Silicon / Intel |
| Windows | arm64 / x64 |
| Linux | x64 for Debian |
并支持 SSH 或 WSL 主机上的文件夹选择—— 说明它能操作远程主机上的目录。
The coverage visible from the download page is broad:
| Platform | Architecture |
|---|---|
| macOS | Apple Silicon / Intel |
| Windows | arm64 / x64 |
| Linux | x64 for Debian |
And folder selection on SSH or WSL hosts is supported — meaning it can operate on directories on remote hosts.
采集限制Collection limits
| 页面 | 状态 |
|---|---|
| 定价页 | ✅ 三档结构与能力差异已核实(报价数字按本站的报价记录约定不存) |
| 文档站 | ✅ 取到 9772 字符文本 |
| Changelog | ✅ 取到 116K 字符,含多版本发布说明 |
| Page | Status |
|---|---|
| Pricing page | ✅ three-tier structure and capability differences verified (quote numbers not stored per the price-recording policy) |
| Docs site | ✅ 9,772 characters of text captured |
| Changelog | ✅ 116K characters captured, covering multiple release notes |
相关条目Related entries
- CursorCursor同分区同为「混合 + 云端」形态same track, same "hybrid + cloud" form
- ClineClineACP 另一个实现方another ACP implementer
- Playwright MCP ServerPlaywright MCP Server另一层 · MCP 工具Other layer · MCP tools
本页由This page is generated from the ai-handbook 数据层生成(CC BY 4.0)。data layer (CC BY 4.0).
方法论与坐标系定义见仓库内For the methodology and coordinate definitions, see METHODOLOGY.md.