Agent Relay Claude Code module

[github-actions[bot]]

A discussion dedicated to the Agent Relay Claude Code module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Agent Integration	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
6 / 17	0 / 25	20 / 20	12 / 20	10 / 10	52 / 100

Drilldown

Presentation & Onboarding — 6 / 17

Criterion	Max	Score	Notes
Configuration-mode examples	12	6	One example shown (install_cli = true default). The install_cli = false (baked-CLI) mode is described in the variable description and a code comment but has no dedicated example block. For a module with two operational modes, only one is fully illustrated.
Visual preview	5	0	No image, GIF, or video embedded in the README. The frontmatter icon field is a registry listing icon, not a visual preview of the module in action.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	agent_relay_credential carries mask_input = true in its coder_parameter styling. README states "the credential is masked." No inline secrets appear in any README example; the only JWT-like value (test-work-order-jwt) is in the TypeScript test fixture, not user-facing docs.
Non-hardcoded auth path	4	4	The credential is a single-use work-order JWT stamped by Agent Relay at dispatch; the README explicitly states "a human never fills it in." No raw key is ever pasted into a template.

Restricted-Environment Readiness — 12 / 20

Criterion	Max	Score	Notes
Mirrorable artifact source	5	0	The install URL https://claude.ai/install.sh is hardcoded in install.sh.tftpl. No module input variable overrides this download URL. cli_binary sets the binary path, not the source URL; install_cli is a boolean toggle. No variable names a mirrorable artifact endpoint.
Bring-your-own binary	10	10	install_cli = false (documented in README and variable description) disables the download entirely. The install script short-circuits when the binary is already on PATH; the start script adds ~/.local/bin to PATH unconditionally so a baked CLI is found. Fully documented.
Egress transparency	3	0	No dedicated network, offline, or air-gapped section in the README. The install endpoint (claude.ai/install.sh → downloads.claude.ai) and the Anthropic runner API are inferable from context but never enumerated in a standalone section.
Runs without sudo	2	2	All three scripts (install.sh.tftpl, start.sh.tftpl, status.sh.tftpl) operate exclusively under $HOME and never invoke sudo. The installer writes to ~/.local/bin; the runner and supervisor write to $HOME/.coder-modules/.... No root required.

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All eight variables carry clear descriptions and sensible defaults. cli_binary has a regex validation rejecting shell metacharacters; exit_if_unused_min validates whole-number ≥ 0. The serving_log_pattern is base64-encoded before rendering to prevent injection.
Test coverage	4	4	main.tftest.hcl (7 run blocks) covers the parameter contract, ephemeral/persistent flags, styling, env-var names, script ordering, state-file path agreement, install-CLI guard, and shell-injection rejection. main.test.ts (10 test cases) exercises the actual rendered scripts in a container with stub binaries, verifying lifecycle states, runner arguments, wrapper behavior, exit-code recording, and the serving_log_pattern as fixed-string data.

Agent Integration — 0 / 25

Criterion	Max	Score	Notes
AI governance	10	0	No mention of Coder AI Gateway or Agent Firewall in the README or source. The module's auth is a work-order JWT from Agent Relay; no gateway routing or firewall policy enforcement is documented.
Dashboard entry point	5	0	No coder_app resource declared or referenced. The module is a headless runner dispatched by Agent Relay; there is no user-facing dashboard or app.
Session continuity	5	0	No documentation of session resumption, session-ID reconnection, or a persistent session manager (tmux, screen, boo). The runner is single-use: when it exits, Agent Relay deletes the workspace.
Managed configuration	5	0	No documented support for managed MCP servers, settings files, policies, or workdir configuration beyond the base_dir checkout path.

Overall — 52 / 100

Raw 48 / 92 → round(48 / 92 × 100) = 52

---

Scored against SCORECARD.md on 2026-10-19 with solstice-1.