JetBrains Toolbox module

[bpmct]

A discussion dedicated to the JetBrains Toolbox module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	IDE Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
25 / 25	22 / 25	20 / 20	18 / 20	9 / 10	94 / 100

Drilldown

Presentation & Onboarding — 25 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README provides examples for pre-configured mode (direct app creation with default), user choice with limited options, EAP versions, pinned versions (air-gapped), single IDE use case, and custom tooltip. Each major mode is documented with sensible defaults.
Coder-context framing	8	8	README clearly states "This module adds JetBrains IDE buttons to launch IDEs directly from the dashboard by integrating with the JetBrains Toolbox." Names both Coder and JetBrains, explains what the module adds on top of Coder.
Visual preview	5	5	README includes  showing the module in action.

IDE Integration — 22 / 25

Criterion	Max	Score	Notes
Dashboard entry point	7	7	coder_app resources are created with proper jetbrains://gateway/coder URLs. Documented in README with examples showing the app creation.
Managed configuration	6	6	Documented support for managed IDE settings via ide_config variable allowing pinned versions, custom names, and icons. README shows examples of version pinning and configuration.
Configurable folder or workdir	6	6	folder variable is required and documented. README examples show folder = "/home/coder/project" and folder = "/workspace/project". The URL includes &folder= parameter.
Pre-installed extensions	6	3	Not applicable for JetBrains Gateway integration (this is a remote development protocol, not a web IDE). However, the rubric requires this for web IDEs only, and JetBrains Gateway is not a web IDE. Scoring half because the criterion doesn't cleanly apply but the module doesn't document any extension pre-installation mechanism.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	No sensitive inputs in this module. The module uses $SESSION_TOKEN in URLs which is a Coder-provided runtime variable, not a user input. No README examples inline secrets.
Non-hardcoded auth path	4	4	Authentication uses Coder's built-in $SESSION_TOKEN mechanism, avoiding raw key management entirely. This is documented in the URL construction in main.tf.

Restricted-Environment Readiness — 18 / 20

Criterion	Max	Score	Notes
Mirrorable artifact source	10	10	releases_base_link variable (default https://data.services.jetbrains.com) overrides the API endpoint for version lookups. download_base_link variable (default https://download.jetbrains.com) overrides the download base URL. Both are documented in variables and can point to internal mirrors.
Bring-your-own binary	5	5	ide_config variable allows completely skipping HTTP calls and using pre-determined build numbers. README documents: "When ide_config is set, the module makes zero HTTP calls and uses the provided build numbers directly. This is ideal for air-gapped environments or when caching IDE installations."
Egress transparency	3	1.5	README mentions air-gapped usage and shows that ide_config skips HTTP calls, but lacks a dedicated section enumerating the specific external endpoints contacted (data.services.jetbrains.com, download.jetbrains.com). Endpoints are inferable from variable defaults but not explicitly listed in a network/offline section.
Runs without sudo	2	2	No install or runtime scripts present in the module. The module only creates Terraform resources (coder_app, coder_parameter, data.http). No script execution means no sudo requirement. N/A would apply, but since there are no scripts at all, full credit by construction.

Engineering Quality — 9 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All inputs have clear descriptions. Sensible defaults provided (major_version = "latest", channel = "release", tooltip with helpful default). Comprehensive validation rules on folder (regex for full path), major_version (version format or "latest"), channel (release/eap), options (valid product codes), ide_config (cross-variable validation ensuring superset of options/default).
Test coverage	4	3	.tftest.hcl file present with 20+ test runs covering business logic: parameter vs direct apps, URL construction, version resolution, ide_config behavior, validation rules. However, no TypeScript end-to-end tests visible. Tests are comprehensive for Terraform logic but lack the end-to-end coverage mentioned in rubric.

Overall — 94 / 100

---

Scored against SCORECARD.md on 2026-07-27 with claude-sonnet-4-5.