RDP Desktop module

[bpmct]

A discussion dedicated to the RDP Desktop module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
17 / 25	18 / 20	N/A	10 / 10	82 / 100

Drilldown

Presentation & Onboarding — 17 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README provides two clear examples: basic usage with defaults and custom display name configuration. Both are complete and sensible.
Coder-context framing	8	5	README names Coder and RDP, explains the module enables RDP and adds a one-click button through Coder Desktop. However, it doesn't clearly show where Coder fits in the overall flow (e.g., user clicks button → Coder Desktop handles URI → RDP session opens). The "What This Module Does" section lists steps but doesn't frame the Coder-specific value proposition as clearly as it could.
Visual preview	5	0	No image, GIF, or video in README. Only an icon reference in frontmatter.

Credential Hygiene — 18 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	The password variable is marked sensitive = true in main.tf. README examples use default values (coderRDP!) rather than placeholder patterns like "xxxx-xxxxx-xxxx", which is acceptable as they're documented defaults, not inline secrets being set.
Non-hardcoded auth path	4	2	The module requires credentials to be passed as variables. While this avoids hardcoding in the template itself, there's no documentation of alternative auth paths (like Windows Hello, certificate-based auth, or integration with external identity providers). The approach is better than inline secrets but still requires pasting credentials into Terraform variables.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	10	N/A	Module downloads nothing; it only configures Windows RDP services already present in the OS.
Bring-your-own binary	5	N/A	Module downloads nothing; it configures existing Windows components.
Egress transparency	3	N/A	Module makes no external network calls during install or runtime; it only configures local Windows services.
Runs without sudo	2	N/A	Module has no scripts that execute on the Coder server or in a Unix context. The PowerShell script runs on Windows and uses administrative commands appropriate to that OS.

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All variables have clear descriptions. Defaults are sensible (Administrator/coderRDP!, "RDP Desktop", null for optional order/group). The password variable is properly marked sensitive. No validation blocks are present, but the inputs are simple enough (strings, number, no complex constraints needed).
Test coverage	4	4	Comprehensive TypeScript test suite in main.test.ts covers: required variables, default values, custom values, credential handling, URI format construction, and script generation. Tests verify both the coder_app and coder_script resources are created correctly with expected attributes.

Overall — 82 / 100

Raw 45 / 55 → round(45 / 55 × 100) = 82

Track: Utility (RDP configuration module; not an AI agent or IDE)

---

Scored against SCORECARD.md on 2026-07-27 with claude-sonnet-4-5.