Personalize module

[bpmct]

A discussion dedicated to the Personalize module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
13 / 25	20 / 20	N/A	10 / 10	78 / 100

Drilldown

Presentation & Onboarding — 13 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README shows default configuration and custom paths example with sensible defaults. Both major modes (default and custom paths) are documented.
Coder-context framing	8	1	Names Coder and mentions workspace start, but does not explain what the module adds on top of Coder or show where Coder fits in the flow. The description "Allow developers to customize their workspace on start" is minimal and lacks context about the personalization pattern.
Visual preview	5	0	No image, GIF, or video in README. Only an icon reference.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	Module has no sensitive inputs. No secrets are used or shown in examples.
Non-hardcoded auth path	4	4	No authentication required; module operates on user-provided scripts within the workspace.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	10	N/A	Module downloads nothing; it only executes a user-provided script already in the workspace.
Bring-your-own binary	5	N/A	Module downloads nothing; it only executes a user-provided script already in the workspace.
Egress transparency	3	N/A	Module downloads nothing; it only executes a user-provided script already in the workspace.
Runs without sudo	2	2	The run.sh script never invokes sudo and operates entirely as the workspace user. README explicitly states "The module does not download software or require sudo".

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All three inputs (agent_id, path, log_path) have clear descriptions and sensible defaults. No validation needed for these string inputs.
Test coverage	4	4	Comprehensive testing: main.tftest.hcl covers defaults and custom paths with proper assertions; main.test.ts provides end-to-end tests for missing script, non-executable script, executable script, custom paths with special characters, and exit code preservation.

Overall — 78 / 100

Raw 43 / 55 → round(43 / 55 × 100) = 78

---

Scored against SCORECARD.md on 2026-08-17 with claude-sonnet-4-5.