Personalize module

[bpmct]

A discussion dedicated to the Personalize module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
12 / 17	N/A	N/A	10 / 10	81 / 100

Drilldown

Presentation & Onboarding — 12 / 17

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README provides clear default configuration example and a custom paths example showing the two major configuration modes (default vs custom paths). Both include sensible defaults.
Visual preview	5	0	No image, GIF, or video in the README. The icon reference does not count as a visual preview.

Credential Hygiene — N/A

Criterion	Max	Score	Notes
Secrets marked sensitive	16	N/A	Module has no credential inputs; it runs user-provided scripts without handling secrets.
Non-hardcoded auth path	4	N/A	No authentication mechanism involved.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	5	N/A	Module downloads nothing; it only executes a user-provided script already in the workspace.
Bring-your-own binary	10	N/A	Module installs nothing; the personalize script is created by the developer inside the workspace.
Egress transparency	3	N/A	Module makes no external network calls of its own. Any network access comes from commands the developer places in their script, which is outside module scope.
Runs without sudo	2	N/A	Module executes no scripts of its own; it only invokes the user's personalize script as the workspace user. The coder_script resource is a Terraform resource declaration, not an executable script.

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All three inputs (agent_id, path, log_path) have clear descriptions and sensible defaults. The path and log_path defaults are appropriate for the use case.
Test coverage	4	4	Comprehensive testing story: main.tftest.hcl covers business logic (default values, custom paths, encoding safety), and main.test.ts provides end-to-end tests covering missing script, non-executable script, successful execution, custom paths with special characters, and exit code preservation.

Overall — 81 / 100

Raw 22 / 27 → round(22 / 27 × 100) = 81

---

Scored against SCORECARD.md on 2026-08-26 with claude-sonnet-4-5.