Add toggle for JetBrains Toolbox backend updates

Author: chapterjason

README.md

@@ -30,7 +30,7 @@ the workspace in Coder.
 | `rtk` | [rtk](https://github.com/rtk-ai/rtk), token-reducing Claude proxy | Auto-patches Claude Code via a post-create hook at workspace start |
 | `nvm` | [nvm](https://github.com/nvm-sh/nvm) at `/usr/local/share/nvm` | Default Node = LTS, `node`/`npm`/`npx` in `/usr/local/bin` |
 | `web-shell` | [web-shell](https://github.com/SoureCode/web-shell), persistent browser terminal | systemd unit, registered as a Coder app |
-| `jetbrains` | JetBrains Toolbox workspace integration | Uses Coder's JetBrains Toolbox module (`registry.coder.com/coder/jetbrains/coder`). Persists `~/.config/JetBrains/`, `~/.local/share/JetBrains/`, and `~/.java/.userPrefs/jetbrains/` for settings/plugins and JetProfile/license state. On startup, writes Toolbox `environment.json` (`allowUpdate=false`) and pins backend install location to `/mnt/home-persist/.jetbrains-dist` to avoid per-restart re-downloads, enforces `idea.properties` path split (`config/plugins` persisted, `system/log` in `/tmp`), prunes persisted `Daemon`, Toolbox `download/backup`, and per-IDE `caches/logs`, and does not persist `~/.cache/JetBrains/`. |
+| `jetbrains` | JetBrains Toolbox workspace integration | Uses Coder's JetBrains Toolbox module (`registry.coder.com/coder/jetbrains/coder`). Persists `~/.config/JetBrains/`, `~/.local/share/JetBrains/`, and `~/.java/.userPrefs/jetbrains/` for settings/plugins and JetProfile/license state. On startup, writes Toolbox `environment.json` with `allowUpdate` controlled by template parameter `jetbrains_allow_updates` (default `false`), pins backend install location to `/mnt/home-persist/.jetbrains-dist` to avoid per-restart re-downloads, enforces `idea.properties` path split (`config/plugins` persisted, `system/log` in `/tmp`), prunes persisted `Daemon`, Toolbox `download/backup`, and per-IDE `caches/logs`, and does not persist `~/.cache/JetBrains/`. |
 | `home-persist` | Manifest-driven `$HOME` persistence | Reads `/etc/home-persist.d/*.json`, symlinks declared paths under `/mnt/home-persist` (per-owner volume). Add extra per-workspace paths via the `home_persist_paths` Coder parameter. See [`docs/persistence.md`](docs/persistence.md). |
 | `llvm` (cpp) | Clang toolchain via [apt.llvm.org](https://apt.llvm.org/) | `CC=clang`, `CXX=clang++` via `/etc/profile.d/llvm-env.sh` |
 | `cmake` (cpp) | CMake from [Kitware's GitHub releases](https://cmake.org/) | latest by default |

docs/persistence.md

@@ -264,14 +264,22 @@ prunes subpaths that should remain ephemeral:
 `~/.local/share/JetBrains/*/{caches,logs}/`
 
 `main.tf` startup also writes `~/.local/share/JetBrains/Toolbox/environment.json`
-with `tools.allowUpdate=false` and a pinned tool location, and writes `idea.properties` in each
+with `tools.allowUpdate` driven by template parameter `jetbrains_allow_updates`
+(default `false`) and a pinned tool location, and writes `idea.properties` in each
 `~/.config/JetBrains/<IDE>/` directory with:
 
 `idea.config.path=~/.config/JetBrains/<IDE>`
 `idea.plugins.path=~/.local/share/JetBrains/<IDE>/plugins`
 `idea.system.path=/tmp/jetbrains/system/<IDE>`
 `idea.log.path=/tmp/jetbrains/log/<IDE>`
 
+Recommended update workflow:
+
+1. Set `jetbrains_allow_updates=true`.
+2. Start one workspace and let Toolbox update/install backend artifacts.
+3. Set `jetbrains_allow_updates=false`.
+4. Restart workspace(s) to return to pinned/no-auto-update mode.
+
 The sweep runs once per owner volume (the sentinel
 `/mnt/home-persist/.workspaces/.migrated/<sentinel-name>` blocks reruns) and
 is a no-op if the orphan is already gone. Delete the line from `main.tf`

main.tf

@@ -129,6 +129,15 @@ data "coder_parameter" "home_persist_paths" {
   mutable      = true
 }
 
+data "coder_parameter" "jetbrains_allow_updates" {
+  type         = "bool"
+  name         = "jetbrains_allow_updates"
+  display_name = "JetBrains auto-updates"
+  description  = "Allow JetBrains Toolbox to update IDE backends in the workspace. Keep false by default; temporarily set true only when you intentionally refresh backend versions."
+  default      = false
+  mutable      = true
+}
+
 provider "coder" {}
 provider "docker" {
   host = var.docker_socket != "" ? var.docker_socket : null
@@ -387,7 +396,7 @@ resource "coder_script" "lifecycle_init" {
     printf '%s\n' \
       '{' \
       '  "tools": {' \
-      '    "allowUpdate": false,' \
+      '    "allowUpdate": ${data.coder_parameter.jetbrains_allow_updates.value},' \
       '    "location": [' \
       '      {' \
       '        "path": "/mnt/home-persist/.jetbrains-dist",' \