Kiro IDE module

[bpmct]

A discussion dedicated to the Kiro IDE module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	IDE Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
20 / 25	18 / 25	20 / 20	N/A	10 / 10	85 / 100

Drilldown

Presentation & Onboarding — 20 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	Multiple documented examples: default usage, opening in specific directory, and MCP server configuration with external auth. Each shows sensible defaults and clear use cases.
Coder-context framing	8	8	README clearly states "Add a button to open any workspace with a single click in Kiro IDE" and explains Kiro is "an AI-powered IDE from AWS." Mentions Coder Remote VS Code Extension and shows Coder fits as the workspace connection layer.
Visual preview	5	0	No image, GIF, or video in README. Only references an icon file.

IDE Integration — 18 / 25

Criterion	Max	Score	Notes
Dashboard entry point	7	7	Uses coder_app via the vscode-desktop-core module with proper configuration (slug, display_name, icon, order, group).
Managed configuration	6	6	Documented MCP configuration via the mcp input variable. README shows complete example with GitHub MCP server setup. The module writes to ~/.kiro/settings/mcp.json using coder_script.
Configurable folder or workdir	6	5	The folder variable is documented and tested. However, the README example shows usage but doesn't explicitly explain the behavior or use case for the folder parameter beyond the code itself. Slightly under-documented.
Pre-installed extensions	6	0	N/A - not a web IDE, uses protocol handler.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	The mcp variable accepts tokens but the README example uses data.coder_external_auth.github.access_token, avoiding inline secrets. No sensitive variables are defined in the module itself (it passes through to IDE).
Non-hardcoded auth path	4	4	README demonstrates OAuth via coder_external_auth resource for GitHub authentication, avoiding raw API keys.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	10	N/A	Module downloads nothing; it only configures a protocol handler URL and writes user-provided JSON config.
Bring-your-own binary	5	N/A	Module downloads nothing; Kiro IDE is assumed to be installed on the client machine.
Egress transparency	3	N/A	Module makes no network calls itself; only writes local config files.
Runs without sudo	2	N/A	The coder_script for MCP writes to $HOME/.kiro/settings/mcp.json and uses chmod 600, both of which work without sudo as an unprivileged user. However, since this is the only script and it verifiably requires no sudo, this would score 2/2 if applicable. Marking N/A per rubric since module performs no downloads/installs.

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All inputs have clear descriptions. Defaults are sensible (empty string for folder/mcp, false for open_recent, null for order/group). The agent_id is properly required.
Test coverage	4	4	Comprehensive testing: .tftest.hcl covers required vars, default output, folder parameter, open_recent flag, and MCP JSON writing. TypeScript tests in main.test.ts verify the same scenarios end-to-end, including container-based validation of the MCP file write.

Overall — 85 / 100

Raw 68 / 80 → round(68 / 80 × 100) = 85

---

Scored against SCORECARD.md on 2026-08-17 with claude-sonnet-4-5.