RDP Desktop module

[bpmct]

A discussion dedicated to the RDP Desktop module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
13 / 25	8 / 20	N/A	10 / 10	56 / 100

Drilldown

Presentation & Onboarding — 13 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README provides two clear examples: basic usage with defaults and custom display name configuration. Both are complete and sensible.
Coder-context framing	8	1	README mentions Coder Desktop and shows Coder fits in the flow, but does not explain what the module adds on top of Coder beyond "enables RDP." The target tool (Windows RDP) is named but the value-add framing is minimal.
Visual preview	5	0	No image, GIF, or video in README. Only an icon reference in frontmatter.

Credential Hygiene — 8 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	8	The password variable is marked sensitive = true in main.tf. However, README examples show inline default credentials (coderRDP!) and the basic example explicitly states "Uses default credentials (Username: Administrator, Password: coderRDP!)". Inline secrets in examples cap this at half.
Non-hardcoded auth path	4	0	Module requires username/password to be passed as variables. No alternative auth mechanism (ServiceAccount, IAM, OAuth, etc.) is documented or supported.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	10	N/A	Module downloads nothing; it only configures Windows RDP via PowerShell script and creates a coder_app.
Bring-your-own binary	5	N/A	Module downloads nothing; RDP is a Windows built-in feature.
Egress transparency	3	N/A	Module makes no external network calls of its own; it configures local Windows services.
Runs without sudo	2	N/A	Module has no scripts that run on Linux/Unix; configure-rdp.ps1 is PowerShell for Windows and uses Windows admin commands, not sudo.

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All inputs have clear descriptions and sensible defaults. The password variable is properly marked sensitive. Variables include agent_id, agent_name, username, password, display_name, order, and group with appropriate types and defaults.
Test coverage	4	4	Comprehensive TypeScript tests in main.test.ts cover default values, custom values, credential handling, URI format, and sensitive password handling. Tests verify both coder_app and coder_script resources.

Overall — 56 / 100

Raw 31 / 55 → round(31 / 55 × 100) = 56

Track: Utility (RDP configuration helper; not an agent or IDE)

---

Scored against SCORECARD.md on 2026-07-15 with claude-sonnet-4-5.