JetBrains Gateway module

[bpmct]

A discussion dedicated to the JetBrains Gateway module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	IDE Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
25 / 25	24 / 25	20 / 20	8 / 20	8 / 10	85 / 100

Drilldown

Presentation & Onboarding — 25 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	Multiple documented examples cover major modes: default usage, specific IDE selection, latest vs fixed versions, EAP channel, custom base links. Each has sensible defaults.
Coder-context framing	8	8	README clearly names both Coder and JetBrains Gateway, explains it adds a one-click button to the dashboard, and shows where Coder fits (workspace access via Gateway protocol). Includes recommendation for Toolbox module alternative.
Visual preview	5	5	README includes  showing the module in action.

IDE Integration — 24 / 25

Criterion	Max	Score	Notes
Dashboard entry point	7	7	coder_app resource with proper external launch behavior via jetbrains-gateway:// protocol URL.
Managed configuration	6	6	Documented support for managed IDE selection via coder_parameter, version pinning via jetbrains_ide_versions, channel selection, and custom download/release links.
Configurable folder or workdir	6	6	folder variable with validation, documented in all examples, opens specified directory in IDE.
Pre-installed extensions	6	5	Not applicable for Gateway (desktop IDE launcher, not web IDE). Deducting 1 point as this is a desktop IDE solution that doesn't pre-install extensions in the traditional sense, though it does manage IDE versions.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	No sensitive inputs required. Module uses $SESSION_TOKEN placeholder in URL which is substituted by Coder at runtime. No inline secrets in examples.
Non-hardcoded auth path	4	4	Uses Coder's native session token mechanism ($SESSION_TOKEN) avoiding raw credential handling.

Restricted-Environment Readiness — 8 / 20

Criterion	Max	Score	Notes
Mirrorable artifact source	10	5	releases_base_link and download_base_link variables allow overriding JetBrains download URLs. However, documentation is minimal (only one example under "Custom base link") and doesn't fully explain the mirroring use case. Half credit for partial documentation.
Bring-your-own binary	5	0	No documented way to disable download or skip IDE installation when already present. Module always constructs download links.
Egress transparency	3	1.5	External endpoints are inferable from code (data.services.jetbrains.com, download.jetbrains.com) and mentioned in custom base link example, but no dedicated README section enumerating endpoints for restricted environments. Half credit.
Runs without sudo	2	1.5	No install scripts present in module (Gateway protocol handles IDE installation client-side). However, the module doesn't document this no-sudo characteristic explicitly. Half credit for implicit no-sudo operation.

Engineering Quality — 8 / 10

Criterion	Max	Score	Notes
Input quality	6	4	Most inputs have descriptions and validation (arch, folder, channel, jetbrains_ides with multiple validations). However, releases_base_link and download_base_link have empty descriptions. Defaults are sensible. Half credit lost for incomplete descriptions.
Test coverage	4	4	Clear TypeScript test coverage in main.test.ts covering required variables, default values, IDE selection, agent name handling. Tests cover business logic appropriately.

Overall — 85 / 100

---

Scored against SCORECARD.md on 2026-07-15 with claude-sonnet-4-5.