Personalize module

[bpmct]

A discussion dedicated to the Personalize module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
8 / 25	N/A	N/A	7 / 10	43 / 100

Drilldown

Presentation & Onboarding — 8 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	6	Single basic example provided showing minimal usage with count, source, version, and agent_id. No examples of different configuration modes or customization of path or log_path variables. Earns half credit.
Coder-context framing	8	2	README states "Run a script on workspace start that allows developers to run custom commands to personalize their workspace" but does not explain what this adds on top of Coder's base functionality or how Coder fits in the flow. Minimal context. Earns quarter credit (rounded to 2).
Visual preview	5	0	No image, GIF, or video in README. Icon reference does not count.

Credential Hygiene — N/A

Criterion	Max	Score	Notes
Secrets marked sensitive	16	N/A	Module has no credential or secret inputs.
Non-hardcoded auth path	4	N/A	Module has no authentication requirements.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	10	N/A	Module downloads nothing; it only executes a user-provided script from the workspace filesystem.
Bring-your-own binary	5	N/A	Module downloads nothing; no binary installation occurs.
Egress transparency	3	N/A	Module makes no external network calls of its own; it only runs user scripts.
Runs without sudo	2	N/A	Module executes run.sh which never invokes sudo and only runs user-provided scripts; no privileged operations in module code.

Engineering Quality — 7 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All three inputs (agent_id, path, log_path) have clear descriptions and sensible defaults. agent_id is required as appropriate. No validation blocks present, but none are strictly necessary for these string inputs. Full credit.
Test coverage	4	1	Single TypeScript test verifies the warning message when personalize script doesn't exist. No .tftest.hcl files present. Does not cover business logic variations (executable script, non-executable script, successful execution). Minimal coverage earns quarter credit (rounded to 1).

Overall — 43 / 100

Raw 15 / 35 → round(15 / 35 × 100) = 43

---

Scored against SCORECARD.md on 2026-07-15 with claude-sonnet-4-5.