RDP Web module

[bpmct]

A discussion dedicated to the RDP Web module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Network Readiness	Engineering Quality	Overall
20 / 25	10 / 20	0 / 20	6 / 10	48 / 100

Drilldown

Presentation & Onboarding — 20 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README provides examples for AWS and Google Cloud configurations, plus a custom version example. Each shows sensible defaults with minimal required inputs.
Coder-context framing	8	8	README clearly states "Enable Remote Desktop + a web based client on Windows workspaces" and names both Coder (via coder_agent) and the target tool (devolutions-gateway). Shows Coder fits as the workspace platform.
Visual preview	5	0	README links to a video ([]...) but does not embed an actual image, GIF, or video inline. The thumbnail image is referenced but the actual media is external. Per rubric, links do not count.

Credential Hygiene — 10 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	8	The admin_password variable is marked sensitive = true in main.tf. However, README examples do not show any credential handling—no examples demonstrate avoiding inline secrets or using data sources. The default value "coderRDP!" is hardcoded in the module itself. Partial credit for marking sensitive but no README guidance.
Non-hardcoded auth path	4	2	The module uses local Windows authentication (admin username/password). No documented path for external auth, IAM, or OAuth. The credentials are template variables but still require manual input. Minimal credit for parameterization.

Restricted-Network Readiness — 0 / 20

Criterion	Max	Score	Notes
Mirrorable artifact source	10	0	No module input variable overrides the download URL for Devolutions Gateway. The PowerShell script uses Install-Module -Name DevolutionsGateway from PSGallery with no URL override capability. The devolutions_gateway_version variable only controls version selection, not source location.
Bring-your-own binary	6	0	No documented way to skip installation when Devolutions Gateway is pre-installed. The script always runs Install-Module and Install-DGatewayPackage.
Egress transparency	4	0	No dedicated README section enumerating external endpoints. The PSGallery download and potential NuGet provider endpoints are visible only in source code. No air-gapped or restricted network guidance documented.

Engineering Quality — 6 / 10

Criterion	Max	Score	Notes
Input quality	6	4	Most inputs have descriptions. The share variable has validation. However, devolutions_gateway_version lacks validation (could accept invalid version strings), and several display/UI variables lack validation. Defaults are sensible.
Test coverage	4	2	TypeScript tests in main.test.ts cover username/password injection and script installation logic. No .tftest.hcl files present. Tests verify business logic but coverage is limited to core functionality. Partial credit for existing TypeScript tests.

Overall — 48 / 100

Raw 36 / 75 → round(36 / 75 × 100) = 48

Note: This is a Utility module (RDP server setup tool, not an Agent or IDE). Normalized score from Universal criteria only: 36 / 75 = 48%.

Correction: Re-calculating with proper track assignment. This module provides a desktop/RDP interface, which could be considered IDE-like, but it's fundamentally a remote desktop utility. Treating as Utility per rubric guidance.

---

Scored against SCORECARD.md on 2026-07-14 with claude-sonnet-4-5.