RDP Desktop module

[bpmct]

A discussion dedicated to the RDP Desktop module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
12 / 17	12 / 20	0 / 2	7 / 10	63 / 100

Drilldown

Presentation & Onboarding — 12 / 17

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	Three documented examples: Basic Usage (defaults), Custom display name + order, and Generated credentials via random_password. Covers the major configuration modes (default, custom UI, non-hardcoded auth).
Visual preview	5	0	No image, GIF, or video embedded in the README. Only an SVG icon reference (rdp.svg), which does not count.

Credential Hygiene — 12 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	8	password variable is marked sensitive = true in main.tf. However, the README explicitly states the literal default password coderRDP! in the "Basic Usage" section ("Uses default credentials … Password: coderRDP!"), which counts as an inline literal key per the calibration anchor, capping this at half.
Non-hardcoded auth path	4	4	The "Generated credentials" README section shows a random_password resource whose result is passed to the module, avoiding any raw key in the template.

Restricted-Environment Readiness — 0 / 2 (18 pts N/A)

Criterion	Max	Score	Notes
Mirrorable artifact source	5	N/A	Module downloads and installs nothing; it only invokes PowerShell commands already present on Windows. No download URL exists to override.
Bring-your-own binary	10	N/A	No tool is downloaded or installed by the module.
Egress transparency	3	N/A	No external artifacts are fetched; the module's only network interaction is the Coder agent protocol.
Runs without sudo	2	0	The configure-rdp.ps1 script performs Set-AdminPassword, Enable-RDP, Configure-Firewall, and Start-RDPService—all of which require elevated (admin) privileges on Windows. There is no non-admin fallback; admin is required for core functionality.

Engineering Quality — 7 / 10

Criterion	Max	Score	Notes
Input quality	6	3	All seven variables have clear descriptions and sensible defaults (username = "Administrator", password = "coderRDP!", display_name = "RDP Desktop"). However, no validation blocks are present on any variable (e.g., order could validate positive integer, username could enforce non-empty).
Test coverage	4	4	.tftest.hcl covers business logic (default password encoding, special-character preservation in PowerShell single-quoted strings, URL encoding). main.test.ts provides end-to-end tests: default app/script creation, custom values, credential pass-through to PowerShell, sensitive variable handling, and full URI format validation. Clear, layered testing story.

Overall — 63 / 100

Raw 31 / 49 → round(31 / 49 × 100) = 63

Track: Utility (desktop-access helper; not an AI agent or IDE)

---

Scored against SCORECARD.md on 2026-10-05 with solstice-1.