Kiro IDE module

[bpmct]

A discussion dedicated to the Kiro IDE module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	IDE Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
12 / 17	19 / 19	4 / 20	2 / 2	7 / 10	65 / 100

Drilldown

Presentation & Onboarding — 12 / 17

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README documents three major modes: default (no folder), folder for a specific directory, and mcp for MCP server configuration. Each example uses sensible defaults and the count = data.coder_workspace.me.start_count pattern. open_recent, order, and group are minor modifiers not warranting separate examples.
Visual preview	5	0	No image, GIF, or video is embedded in the README. The icon frontmatter field references a static SVG icon, which does not count as a visual preview of the module in action.

Credential Hygiene — 4 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	0	The mcp variable (a JSON string that can contain Bearer tokens, API keys, and other credentials in headers) is not marked sensitive = true in main.tf. No variable in the module carries the sensitive flag.
Non-hardcoded auth path	4	4	The README's MCP example uses data.coder_external_auth.github.access_token to inject the GitHub OAuth token, demonstrating a path that avoids pasting raw keys into templates.

Restricted-Environment Readiness — 2 / 2

Criterion	Max	Score	Notes
Mirrorable artifact source	5	N/A	The module downloads and installs no tool. It generates a coder_app URL and optionally writes an MCP config file. No download URL exists to override.
Bring-your-own binary	10	N/A	No tool is installed by the module. Kiro IDE runs on the user's local machine; the module only produces a connection URL.
Egress transparency	3	N/A	The module performs no downloads or installations. Its only runtime action is writing a local file via coder_script.
Runs without sudo	2	2	The coder_script (kiro_mcp) executes mkdir -p "$HOME/.kiro/settings", a base64 -d redirect, and chmod 600—all within $HOME. No sudo invocation is present.

Engineering Quality — 7 / 10

Criterion	Max	Score	Notes
Input quality	6	3	All six variables have clear description strings and sensible default values. However, no validation block is present on any variable (e.g., mcp accepts any string with no JSON validation; folder has no path validation; order has no range check).
Test coverage	4	4	kiro.tftest.hcl covers URL construction (default, folder, folder+open_recent) and MCP base64 encoding at the plan level. main.test.ts adds end-to-end coverage: verifies coder_app resource existence, URL outputs, and executes the MCP script in a real Alpine container to confirm the file is written correctly.

IDE Integration — 19 / 19

Criterion	Max	Score	Notes
Dashboard entry point	7	7	The module creates a coder_app (via vscode-desktop-core) with configurable order and group variables. The TypeScript test asserts the coder_app resource exists with the expected name and null order.
Managed configuration	6	6	The mcp input writes ~/.kiro/settings/mcp.json on workspace start. The README has a dedicated "Configure MCP servers for Kiro" section with a complete example using coder_external_auth.
Configurable folder or workdir	6	6	The folder variable is documented with a "Open in a specific directory" example. The open_recent variable provides an alternative to open the most recent workspace. Both are tested in both .tftest.hcl and main.test.ts.
Pre-installed extensions	6	N/A	Kiro IDE is a desktop application, not a web IDE. This criterion applies only to web IDEs.

Overall — 65 / 100

Raw 44 / 68 → round(44 / 68 × 100) = 65

Excluded (N/A): Mirrorable artifact source (5), Bring-your-own binary (10), Egress transparency (3), Pre-installed extensions (6) = 24 pts removed from the 92-pt maximum.

---

Scored against SCORECARD.md on 2026-10-19 with solstice-1.