JetBrains Gateway module

[bpmct]

A discussion dedicated to the JetBrains Gateway module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	IDE Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
12 / 17	13 / 19	20 / 20	N/A	10 / 10	83 / 100

Drilldown

Presentation & Onboarding — 12 / 17

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	Six distinct examples covering default, latest, fixed versions, EAP channel, and custom base links. Each has sensible defaults and clear variable usage.
Visual preview	5	0	README references ../.images/jetbrains-gateway.png but the file is NOT FOUND per verification. No actual image, GIF, or video is available.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	No sensitive inputs exist in this module. The only token ($SESSION_TOKEN) is a Coder runtime variable, not a user-supplied secret. README examples contain no inline secrets.
Non-hardcoded auth path	4	4	Auth is handled entirely by Coder's native $SESSION_TOKEN mechanism. No raw API keys, passwords, or tokens are required in templates.

Restricted-Environment Readiness — N/A

The module downloads and installs nothing into the workspace. It creates a jetbrains-gateway:// URL that the user's local JetBrains Gateway client uses to fetch the IDE. No tools are baked into or installed in the workspace image. All four sub-criteria (Mirrorable artifact source, Bring-your-own binary, Egress transparency, Runs without sudo) are excluded by construction.

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	15 variables with descriptions, sensible defaults, and validation blocks on arch, folder, channel, jetbrains_ide_versions, jetbrains_ides, releases_base_link, and download_base_link. Two variables (releases_base_link, download_base_link) have empty description strings but still carry validation and defaults.
Test coverage	4	4	main.test.ts (bun:test) covers: required-variable enforcement, URL generation with defaults, default IDE selection, agent-name inclusion, blank-agent edge case, and coder_app resource creation. Clear end-to-end story.

IDE Integration — 13 / 19

Criterion	Max	Score	Notes
Dashboard entry point	7	7	coder_app.gateway resource with external = true creates a one-click dashboard button. Test verifies the app resource and its URL. Documented in README.
Managed configuration	6	0	No support for managed IDE settings, keymaps, policies, or configuration files. The module only constructs a launch URL; no mechanism to inject or manage IDE config.
Configurable folder or workdir	6	6	folder variable (with regex validation) sets the directory opened in the IDE. Documented in README examples and variable description.
Pre-installed extensions	6	N/A	JetBrains Gateway is a desktop IDE connector, not a web IDE. Criterion does not apply.

Overall — 83 / 100

Raw 55 / 66 → round(55 / 66 × 100) = 83

---

Scored against SCORECARD.md on 2026-10-26 with solstice-1.