JetBrains Gateway module

[bpmct]

A discussion dedicated to the JetBrains Gateway module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	IDE Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
12 / 17	13 / 19	16 / 20	5 / 18	5 / 10	61 / 100

Drilldown

Presentation & Onboarding — 12 / 17

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README shows six distinct configuration examples (default set, latest-version mode, fixed versions, EAP channel, custom base link) each with sensible defaults — strong coverage of major modes.
Visual preview	5	0	README embeds , but file verification confirms the image is missing/broken, so no actual preview is rendered.

Credential Hygiene — 16 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	Module has no secret input variables; the session token is injected automatically via $SESSION_TOKEN placeholder in the generated URL, not supplied by the user. No inline secrets appear in any README example.
Non-hardcoded auth path	4	0	The automatic $SESSION_TOKEN substitution exists in code but is never explicitly documented in the README as an alternative to pasting raw keys.

Restricted-Environment Readiness — 5 / 18 (sudo N/A — module has no scripts)

Criterion	Max	Score	Notes
Mirrorable artifact source	5	5	download_base_link and releases_base_link variables override the exact URLs used to construct the IDE download/release-check links, documented in the "Custom base link" example.
Bring-your-own binary	10	0	No variable or documented toggle to skip IDE download entirely when already baked into the remote host.
Egress transparency	3	0	No dedicated README section enumerating external endpoints (JetBrains download/release servers) for restricted/air-gapped environments.
Runs without sudo	2	N/A	Module contains no install/runtime scripts (pure Terraform generating a coder_app link) — criterion inapplicable.

Engineering Quality — 5 / 10

Criterion	Max	Score	Notes
Input quality	6	3	Most variables have clear descriptions and strong validation blocks (arch, folder regex, channel regex, jetbrains_ide_versions/jetbrains_ides dedup checks), but releases_base_link and download_base_link both have empty ("") descriptions.
Test coverage	4	2	main.test.ts covers default IDE selection, agent name injection, and blank-agent edge case, but there is no .tftest.hcl covering input-validation business logic (duplicate IDEs, invalid channel, etc.).

IDE Integration — 13 / 19 (pre-installed extensions N/A — not a web IDE)

Criterion	Max	Score	Notes
Dashboard entry point	7	7	coder_app resource (gateway) with external = true is the core module output, fully documented in the primary usage example.
Managed configuration	6	0	No documented support for managed IDE settings/config distribution.
Configurable folder or workdir	6	6	folder variable is required and used consistently in every example (e.g., /home/coder/example).
Pre-installed extensions	6	N/A	JetBrains Gateway launches a desktop IDE via protocol handler, not a web IDE — criterion inapplicable by construction.

Overall — 61 / 100

Raw 51 / 84 → round(51 / 84 × 100) = 61

---

Scored against SCORECARD.md on 2026-11-09 with solstice-1.