RDP Desktop module

[bpmct]

A discussion dedicated to the RDP Desktop module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
12 / 17	18 / 20	N/A	10 / 10	85 / 100

Drilldown

Presentation & Onboarding — 12 / 17

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README provides three clear examples: basic usage with defaults, custom display name, and generated credentials. Each demonstrates a distinct configuration mode with sensible defaults.
Visual preview	5	0	No image, GIF, or video present in README. The icon reference does not count as a visual preview.

Credential Hygiene — 18 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	The password variable is marked sensitive = true. README examples avoid inline secrets: basic example uses the default (not a literal secret in user code), and the recommended pattern uses random_password resource with no hardcoded value.
Non-hardcoded auth path	4	2	README shows random_password resource pattern to avoid pasting keys into templates, but this is a workaround rather than external auth, IAM, or API key helper. Earns half credit for documented credential generation pattern.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	5	N/A	Module downloads nothing; it only configures Windows RDP via PowerShell script and creates a Coder app. No artifacts to mirror.
Bring-your-own binary	10	N/A	Module does not install any binaries; it configures built-in Windows RDP functionality.
Egress transparency	3	N/A	Module makes no external network calls beyond Coder API (implicit in coder_app/coder_script resources). The RDP connection itself is local through Coder Desktop.
Runs without sudo	2	N/A	Module has no scripts that execute on the Coder server or require privilege escalation. The PowerShell script runs in the Windows workspace context where Administrator password setting is the intended functionality.

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All inputs have clear descriptions. Sensible defaults provided (username = "Administrator", display_name = "RDP Desktop"). The password variable has a default but is marked sensitive. No validation rules needed for these string/number inputs.
Test coverage	4	4	Comprehensive testing: .tftest.hcl covers password escaping and URL encoding logic. TypeScript tests in main.test.ts provide end-to-end coverage including default values, custom values, special characters, URI format, and sensitive handling. Tests verify both business logic and integration behavior.

Overall — 85 / 100

Raw 40 / 47 → round(40 / 47 × 100) = 85

Wait, re-evaluating track assignment: This is a desktop access module (RDP), not an AI agent, not an IDE, so it's Utility track.

Utility scoring: Universal criteria only (75 max before N/A), then normalize.

• Presentation: 12 / 17
• Credential Hygiene: 18 / 20
• Restricted-Environment: All N/A (20 points excluded)
• Engineering Quality: 10 / 10

Denominator: 75 - 20 = 55
Raw score: 12 + 18 + 10 = 40
Normalized: round(40 / 55 × 100) = round(72.727) = 73

---

Scored against SCORECARD.md on 2026-09-14 with claude-sonnet-4-5.