JetBrains Gateway module

[bpmct]

A discussion dedicated to the JetBrains Gateway module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	IDE Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
25 / 25	18 / 25	20 / 20	8 / 20	8 / 10	79 / 100

Drilldown

Presentation & Onboarding — 25 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	Multiple documented examples cover major modes: default usage, specific IDE selection, latest vs fixed versions, EAP channel, custom base links. Each has sensible defaults.
Coder-context framing	8	8	README clearly names both Coder and JetBrains Gateway, explains the module adds a one-click button to the dashboard, and shows where Coder fits (workspace access via Gateway). Includes recommendation for Toolbox alternative.
Visual preview	5	5	README includes  showing the module in action.

IDE Integration — 18 / 25

Criterion	Max	Score	Notes
Dashboard entry point	7	7	coder_app resource with proper external launch behavior via jetbrains-gateway:// URL scheme.
Managed configuration	6	6	Documented support for managed IDE selection via coder_parameter, version pinning via jetbrains_ide_versions, channel selection, and custom download/release links.
Configurable folder or workdir	6	5	folder variable with validation documented in examples. However, validation error message references ~ but regex doesn't explicitly check for it, slightly awkward.
Pre-installed extensions	6	0	Not applicable to Gateway (client-side IDE launcher, not a web IDE). However, rubric states N/A only for "if applicable" criteria; this is a track criterion, so scores 0.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	No sensitive inputs in this module. Uses $SESSION_TOKEN placeholder in URL which is handled by Coder runtime. No inline secrets in README examples.
Non-hardcoded auth path	4	4	Uses Coder's native $SESSION_TOKEN mechanism, avoiding raw key management entirely.

Restricted-Environment Readiness — 8 / 20

Criterion	Max	Score	Notes
Mirrorable artifact source	10	5	releases_base_link and download_base_link variables allow overriding JetBrains download URLs. However, these only affect the URL passed to Gateway client, not a download performed by the module itself. The module doesn't install anything; it constructs a URL. Partial credit for enabling offline/mirror scenarios via URL construction.
Bring-your-own binary	5	0	No documented way to disable or skip functionality when IDEs are pre-configured. Module always constructs Gateway URLs.
Egress transparency	3	1.5	Custom base link example mentions offline mode and shows URL override, but no dedicated section enumerating endpoints. Endpoints are inferable from code (data.services.jetbrains.com, download.jetbrains.com) but not explicitly documented in a network/air-gap section. Half credit.
Runs without sudo	2	1.5	No install scripts in this module; it only creates coder_app resources. However, the criterion applies "whenever the module executes any script" and goes N/A "only for modules with no scripts at all." This module has no scripts, so technically N/A, but rubric says to be strict about N/A application. Re-reading: module has no scripts at all, so N/A is appropriate. Adjusting score: this should be N/A, removing 2 points from denominator.

Restricted-Environment Readiness recalculation: Denominator is 18 (20 - 2 for N/A). Score is 6.5 / 18.

Engineering Quality — 8 / 10

Criterion	Max	Score	Notes
Input quality	6	4	Most inputs have descriptions and validation (arch, folder, channel, jetbrains_ides with multiple validations). However, releases_base_link and download_base_link have empty descriptions (description = ""). Defaults are sensible. Half credit lost for missing descriptions.
Test coverage	4	4	Clear testing story: .test.ts file covers business logic including default values, IDE selection, agent name handling, URL construction. Tests are comprehensive.

Overall — 79 / 100

---

Scored against SCORECARD.md on 2026-08-03 with claude-sonnet-4-5.