RDP Desktop module

[bpmct]

A discussion dedicated to the RDP Desktop module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
17 / 25	18 / 20	N/A	10 / 10	82 / 100

Drilldown

Presentation & Onboarding — 17 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README provides two clear examples: basic usage with defaults and custom display name configuration. Both are complete and sensible.
Coder-context framing	8	5	README explains what the module does (enables RDP on Windows workspaces, adds one-click button through Coder Desktop) and mentions Coder Desktop requirement. However, it doesn't clearly explain where Coder fits in the broader RDP flow or what value Coder adds beyond standard RDP.
Visual preview	5	0	No image, GIF, or video in README. Only an icon reference in frontmatter.

Credential Hygiene — 18 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	The password variable is marked sensitive = true in main.tf. README examples use default values without inlining literal secrets in examples.
Non-hardcoded auth path	4	2	Module requires credentials to be passed as variables. No alternative auth mechanism (like Windows integrated auth, certificate-based auth, or external credential provider) is documented. Credentials must be provided directly.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	10	N/A	Module downloads nothing; it only configures Windows RDP services that are already present in the OS.
Bring-your-own binary	5	N/A	Module downloads nothing; it configures existing Windows RDP functionality.
Egress transparency	3	N/A	Module makes no external network calls during install or runtime; it only configures local Windows services.
Runs without sudo	2	N/A	Module has no scripts to inspect (configure-rdp.ps1 is referenced but not provided in the module files). Cannot verify sudo/elevation requirements.

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All variables have clear descriptions and sensible defaults. password is properly marked sensitive. username defaults to "Administrator", display_name to "RDP Desktop", order and group are nullable with appropriate defaults.
Test coverage	4	4	Comprehensive TypeScript test suite in main.test.ts covers default values, custom values, credential handling, URI format, and sensitive variable handling. Tests verify both coder_app and coder_script resources.

Overall — 82 / 100

Raw 45 / 55 → round(45 / 55 × 100) = 82

Track: Utility (RDP configuration module, not an IDE or AI agent)

Note on Restricted-Environment: All four criteria marked N/A because the module downloads nothing and configures only built-in Windows services. The configure-rdp.ps1 script file is referenced but not included in the provided module files, preventing verification of sudo requirements; however, since the module performs no downloads or installs, the first three criteria are appropriately N/A. The fourth criterion (Runs without sudo) would apply if the script were present, but cannot be scored from the provided files.

---

Scored against SCORECARD.md on 2026-07-15 with claude-sonnet-4-5.