RDP Desktop module

[bpmct]

A discussion dedicated to the RDP Desktop module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
17 / 25	18 / 20	N/A	10 / 10	82 / 100

Drilldown

Presentation & Onboarding — 17 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README provides two clear examples: basic usage with defaults and custom display name configuration. Both are complete and sensible.
Coder-context framing	8	5	README names Coder and RDP, explains the module enables RDP and adds a one-click button through Coder Desktop. However, it doesn't clearly show where Coder fits in the overall flow (e.g., user clicks button → Coder Desktop handles URI → RDP session opens). The "What This Module Does" section lists steps but doesn't frame the Coder-specific value proposition as clearly as it could.
Visual preview	5	0	No image, GIF, or video in README. Only an icon reference in frontmatter.

Credential Hygiene — 18 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	The password variable is marked sensitive = true in main.tf. README examples use default values (coderRDP!) rather than placeholder patterns like "xxxx-xxxxx-xxxx", which is acceptable as they're documented defaults, not inline secrets being encouraged.
Non-hardcoded auth path	4	2	The module requires credentials to be passed as variables, which is better than nothing, but there's no documented path to avoid pasting credentials into templates. No mention of Windows credential managers, SSO, or other auth helpers. Half credit for basic variable-based approach.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	10	N/A	Module downloads nothing; it only configures Windows RDP services already present in the OS.
Bring-your-own binary	5	N/A	Module downloads nothing; it configures existing Windows RDP functionality.
Egress transparency	3	N/A	Module makes no external network calls for downloads or installs.
Runs without sudo	2	N/A	Module has no scripts to inspect (configure-rdp.ps1 is referenced but not provided in the module files). Cannot verify sudo/privilege requirements.

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All variables have clear descriptions. Defaults are sensible (Administrator/coderRDP!, "RDP Desktop", null for optional order/group). The password variable is properly marked sensitive. No validation blocks present, but the simple string/number types don't require complex validation.
Test coverage	4	4	Comprehensive TypeScript test suite in main.test.ts covers: required variables, default values, custom values, credential handling, URI format construction, and sensitive variable handling. Tests verify both the coder_app and coder_script resources. Clear testing story with good business logic coverage.

Overall — 82 / 100

Raw 45 / 55 → round(45 / 55 × 100) = 82

Track: Utility (This is a Windows RDP configuration module, not an AI agent or IDE)

Note on Restricted-Environment Readiness: All four criteria marked N/A because the module configures existing Windows RDP services without downloading or installing any external tools. The configure-rdp.ps1 script referenced in main.tf is not included in the provided module files, so "Runs without sudo" cannot be evaluated, but since the module performs no downloads/installs, the entire theme is excluded per the "if applicable" rule. Final score normalized from 45/75 to 60/100.

---

Scored against SCORECARD.md on 2026-08-10 with claude-sonnet-4-5.