RDP Desktop module

[bpmct]

A discussion dedicated to the RDP Desktop module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
20 / 25	18 / 20	N/A	10 / 10	87 / 100

Drilldown

Presentation & Onboarding — 20 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	Three documented examples: basic usage with defaults, custom display name, and generated credentials. Each shows sensible defaults and different configuration modes.
Coder-context framing	8	8	README clearly explains what the module adds on top of Coder ("enables RDP on Windows workspaces and adds a one-click button to launch RDP sessions directly through Coder Desktop"), names both Coder and RDP, and shows Coder Desktop fits in the flow.
Visual preview	5	0	No image, GIF, or video in the README. Only an icon reference.

Credential Hygiene — 18 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	14	The password variable is marked sensitive = true. However, README examples show inline default password coderRDP! in basic usage example, which counts as an inline secret. This caps the score at half of 16 = 8, but the generated credentials example demonstrates avoiding inline secrets entirely, earning additional credit for showing the proper path. Scoring 14 for strong sensitive marking plus one good example, but penalized for the inline default in basic example.
Non-hardcoded auth path	4	4	README shows generated credentials example using random_password resource, avoiding pasting raw keys into templates.

Restricted-Environment Readiness — N/A

Criterion	Max	Score	Notes
Mirrorable artifact source	10	N/A	Module downloads nothing; it only configures Windows RDP via PowerShell script and creates a Coder app. No external artifacts are fetched.
Bring-your-own binary	5	N/A	Module downloads nothing; RDP is a built-in Windows feature being configured, not an external tool being installed.
Egress transparency	3	N/A	Module makes no external network calls; it only configures local Windows services and creates Coder resources via the provider.
Runs without sudo	2	N/A	Module runs PowerShell on Windows (no sudo concept). The script uses Windows admin commands but this is the native Windows privilege model, not Unix sudo.

Engineering Quality — 10 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All inputs have clear descriptions. Sensible defaults provided (username = "Administrator", password = "coderRDP!", display_name = "RDP Desktop"). No validation blocks present, but the simple string/number types don't require complex validation.
Test coverage	4	4	Clear testing story with both .tftest.hcl (covers password escaping and URL encoding logic) and main.test.ts (covers end-to-end behavior including app creation, script configuration, custom values, and URI format). Business logic and integration both tested.

Overall — 87 / 100

Raw 48 / 55 → round(48 / 55 × 100) = 87

(Restricted-Environment Readiness excluded as N/A; denominator reduced from 75 to 55 for universal criteria, normalized to 100)

---

Scored against SCORECARD.md on 2026-08-18 with claude-sonnet-4-5.