VS Code Desktop module

[bpmct]

A discussion dedicated to the VS Code Desktop module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	IDE Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
13 / 25	24 / 25	20 / 20	N/A	8 / 10	81 / 100

Drilldown

Presentation & Onboarding — 13 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README provides examples for default usage and opening in a specific directory, covering the major configuration modes (default vs. folder-specific).
Coder-context framing	8	1	README mentions "Add a button to open any workspace" and references the Coder Remote VS Code Extension, but does not explain what the module adds on top of Coder or show where Coder fits in the flow. Minimal context provided.
Visual preview	5	0	No image, GIF, or video in the README. Only an icon reference which does not count.

IDE Integration — 24 / 25

Criterion	Max	Score	Notes
Dashboard entry point	7	7	Module creates a coder_app via the vscode-desktop-core submodule with proper launch behavior using the vscode:// protocol.
Managed configuration	6	6	The open_recent variable is documented and controls whether to open the most recent workspace/folder, providing managed IDE behavior configuration.
Configurable folder or workdir	6	6	The folder variable is documented with an example showing how to open VS Code in a specific directory ("/home/coder/project").
Pre-installed extensions	6	5	N/A - VS Code Desktop is not a web IDE, so this criterion does not apply. Score adjusted accordingly.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	No sensitive inputs are present in this module. The module uses agent_id and configuration parameters only. No secrets are exposed in README examples.
Non-hardcoded auth path	4	4	Authentication is handled via the Coder Remote VS Code Extension using $SESSION_TOKEN in the generated URL, avoiding raw key pasting.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	10	N/A	Module downloads nothing; it only generates a coder_app resource with a vscode:// URL. No artifacts are fetched.
Bring-your-own binary	5	N/A	Module downloads nothing; it relies on VS Code Desktop already being installed on the user's machine.
Egress transparency	3	N/A	Module makes no network calls itself; it generates a URL that the client-side VS Code application uses.
Runs without sudo	2	N/A	Module contains no scripts to execute.

Engineering Quality — 8 / 10

Criterion	Max	Score	Notes
Input quality	6	4	Variables have clear descriptions and sensible defaults (folder defaults to "", open_recent to false, order and group to null). However, no validation blocks are present for any inputs where they might be appropriate (e.g., folder path format).
Test coverage	4	4	Comprehensive TypeScript tests in main.test.ts cover business logic including default output, folder parameter, open_recent parameter, and combinations. Tests verify URL generation and coder_app resource creation.

Overall — 81 / 100

Raw 65 / 80 → round(65 / 80 × 100) = 81

---

Scored against SCORECARD.md on 2026-07-27 with claude-sonnet-4-5.