RDP Web module

[bpmct]

A discussion dedicated to the RDP Web module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
21 / 25	10 / 20	0 / 20	7 / 10	51 / 100

Drilldown

Presentation & Onboarding — 21 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	README provides examples for AWS and Google Cloud, plus a custom version example. Each shows sensible defaults for the major configuration mode (version selection).
Coder-context framing	8	4	README mentions "Enable Remote Desktop + a web based client on Windows workspaces" and names the underlying tool (devolutions-gateway), but does not explain what the module adds on top of Coder or show where Coder fits in the flow. Partial framing only.
Visual preview	5	5	README includes a video thumbnail image with a link to a video demonstration.

Credential Hygiene — 10 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	8	The admin_password variable is marked sensitive = true in main.tf. However, README examples do not show any credential handling—no examples demonstrate avoiding inline secrets or using data sources. Half credit for marking sensitive but not documenting credential hygiene in examples.
Non-hardcoded auth path	4	2	The module accepts admin_username and admin_password as variables, which is better than hardcoding, but README does not document any path that avoids pasting credentials (no mention of external auth, secrets managers, or alternative authentication methods). Partial credit for variable-based approach.

Restricted-Environment Readiness — 0 / 20

Criterion	Max	Score	Notes
Mirrorable artifact source	10	0	The module installs DevolutionsGateway from PSGallery via Install-Module. There is no variable to override the PSGallery URL or point to an internal mirror. The devolutions_gateway_version variable only controls version selection, not the source repository.
Bring-your-own binary	5	0	No documented way to skip the installation when DevolutionsGateway is already present. The script always runs Install-Module and Install-DGatewayPackage.
Egress transparency	3	0	No dedicated README section enumerating external endpoints. The PSGallery endpoint and any Devolutions download URLs are not documented. Endpoints are only inferable from reading the PowerShell script.
Runs without sudo	2	0	The PowerShell script performs system-wide installation (Install-Module for all users), modifies registry keys under HKLM, configures Windows services, and writes to Program Files. These operations require administrator privileges. No documented non-admin path exists.

Engineering Quality — 7 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All inputs have clear descriptions. Defaults are sensible (display_name, slug, icon, admin credentials, version "latest"). The share variable includes validation for allowed values.
Test coverage	4	1	TypeScript tests in main.test.ts cover basic functionality (script presence, username/password injection). However, no .tftest.hcl files exist for Terraform-level testing. Tests are minimal and don't cover end-to-end behavior like actual RDP connectivity or Devolutions Gateway operation. Partial credit for having some test coverage.

Overall — 51 / 100

Raw 38 / 75 → round(38 / 75 × 100) = 51

Note: This is a Utility module (provides RDP access tooling, not an IDE or AI agent). Scored on Universal criteria only (75 pts denominator), then normalized. Final score: 51 / 100.

Correction to Overall calculation: 21 + 10 + 0 + 7 = 38 raw points out of 75 possible. Normalized: round(38/75 × 100) = round(50.67) = 51.

Let me recalculate the header:

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
21 / 25	10 / 20	0 / 20	7 / 10	51 / 100

---

Scored against SCORECARD.md on 2026-08-03 with claude-sonnet-4-5.