RDP Desktop module

[bpmct]

A discussion dedicated to the RDP Desktop module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
13 / 25	8 / 20	N/A	10 / 10	56 / 100

Drilldown

Presentation & Onboarding — 13 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README provides two clear examples: basic usage with defaults and custom display name configuration. Both are complete and sensible.
Coder-context framing	8	1	README mentions Coder Desktop and shows Coder fits in the flow, but does not explain what the module adds on top of Coder beyond "enables RDP." The target tool (Windows RDP) is named but the value-add framing is minimal.
Visual preview	5	0	No image, GIF, or video in README. Only an icon reference in frontmatter.

Credential Hygiene — 8 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	8	The password variable is marked sensitive = true in main.tf. However, README examples show inline default credentials (coderRDP!) and the basic example documents using defaults without external secret management, which counts as inline secrets in examples. Half credit.
Non-hardcoded auth path	4	0	No documentation of external auth mechanisms, secret managers, or alternative credential paths. Module requires direct password input.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	10	N/A	Module downloads nothing; it only configures Windows RDP via PowerShell script and creates a coder_app. No artifacts to mirror.
Bring-your-own binary	5	N/A	Module installs nothing; RDP is a Windows built-in feature being configured.
Egress transparency	3	N/A	Module makes no external network calls beyond Coder API (data.coder_workspace).
Runs without sudo	2	N/A	Module has no scripts that run on Linux/Unix; configure-rdp.ps1 is PowerShell for Windows and does not use sudo.

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All inputs have clear descriptions and sensible defaults. Variables include agent_id, agent_name, username, password (with sensitive=true), display_name, order, and group. No validation blocks present but types are appropriate.
Test coverage	4	4	Comprehensive TypeScript test suite in main.test.ts covers default values, custom values, credential handling, URI format, and script generation. Tests verify both coder_app and coder_script resources. Clear testing story.

Overall — 56 / 100

Raw 31 / 55 → round(31 / 55 × 100) = 56

(Utility track: denominator 55 after N/A exclusions for all Restricted-Environment criteria)

---

Scored against SCORECARD.md on 2026-07-20 with claude-sonnet-4-5.