RDP Desktop module

[bpmct]

A discussion dedicated to the RDP Desktop module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
17 / 25	18 / 20	N/A	10 / 10	82 / 100

Drilldown

Presentation & Onboarding — 17 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README provides two clear examples: basic usage with defaults and custom display name configuration. Both are complete and sensible.
Coder-context framing	8	5	README explains what the module does (enables RDP on Windows workspaces, adds one-click button through Coder Desktop), names both Coder and RDP, and mentions Coder Desktop requirement. However, it doesn't clearly show where Coder fits in the overall flow or architecture.
Visual preview	5	0	No image, GIF, or video in README. Only an icon reference in frontmatter.

Credential Hygiene — 18 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	The password variable is marked sensitive = true in main.tf. README examples avoid inline secrets, using module defaults or variable references.
Non-hardcoded auth path	4	2	README shows credentials passed as variables, but still requires hardcoding them somewhere (either in module call or variable definitions). No external auth mechanism, ServiceAccount, or API key helper documented. Partial credit for variable-based approach.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	10	N/A	Module downloads nothing; it only configures Windows RDP via PowerShell script.
Bring-your-own binary	5	N/A	Module downloads nothing; RDP is a Windows built-in feature.
Egress transparency	3	N/A	Module makes no external network calls beyond Coder API.
Runs without sudo	2	N/A	Module has no scripts (coder_script resource runs on Windows agent, not during Terraform apply).

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All variables have clear descriptions and sensible defaults. The password variable is properly marked sensitive. Defaults are appropriate (Administrator, coderRDP!, RDP Desktop).
Test coverage	4	4	Comprehensive TypeScript test suite in main.test.ts covers default values, custom values, credential handling, URI format, and sensitive password handling. Tests verify both coder_app and coder_script resources.

Overall — 82 / 100

Raw 45 / 55 → round(45 / 55 × 100) = 82

Track: Utility (RDP configuration helper, not an IDE or AI agent)

---

Scored against SCORECARD.md on 2026-08-03 with claude-sonnet-4-5.