---
phase: 02-generators
plan: 04
subsystem: generators
tags: [powershell, rmm, rclone, typescript]

# Dependency graph
requires:
  - phase: 02-generators/02-03
    provides: ps-helpers.ts with CONFIG_DIR and buildRcloneInstallBlock
  - phase: 01-foundation
    provides: WizardState type with deployment.configPath and deployment.includeInstall
provides:
  - buildRmmScript pure function — generates self-contained PowerShell RMM deployment script
  - DEPL-03: RMM script idempotent, runs as SYSTEM in generic RMM context
  - DEPL-04: includeInstall toggle adds/removes rclone download block
  - DEPL-05: configPath maps correctly to machine-wide or user-profile directories
affects: [03-ui, phase-04]

# Tech tracking
tech-stack:
  added: []
  patterns:
    - buildRmmScript mirrors buildIntuneInstall structure but with $ErrorActionPreference = 'Stop'
    - buildRcloneConfContent inlined per-file for self-containment (no cross-generator imports)
    - [System.IO.File]::WriteAllText with UTF8Encoding($false) for BOM-free writes

key-files:
  created:
    - src/generators/rmm-script.ts
  modified: []

key-decisions:
  - "buildRcloneConfContent duplicated inline in rmm-script.ts — keeps generators self-contained, avoids circular dep risk"
  - "RMM scripts use $ErrorActionPreference = 'Stop' — RMM platforms surface exit codes; not STDERR-based like Intune detection"

patterns-established:
  - "RMM generator pattern: $ErrorActionPreference = 'Stop' at top, idempotent dir creation, UTF-8 no-BOM write, conditional install block"

requirements-completed: [DEPL-03, DEPL-04, DEPL-05]

# Metrics
duration: 5min
completed: 2026-03-26
---

# Phase 2 Plan 4: RMM Script Generator Summary

**buildRmmScript generating idempotent PowerShell for NinjaRMM/Datto/ConnectWise — UTF-8 no-BOM config write, conditional rclone install, machine-wide and user-profile paths**

## Performance

- **Duration:** 5 min
- **Started:** 2026-03-26T14:00:00Z
- **Completed:** 2026-03-26T14:06:38Z
- **Tasks:** 1
- **Files modified:** 1

## Accomplishments

- Implemented `buildRmmScript()` pure function producing a self-contained PowerShell deployment script
- All 6 `rmm-script.test.ts` assertions pass GREEN (61/61 total tests across full suite)
- Function uses `$ErrorActionPreference = 'Stop'` for proper RMM platform exit code surfacing
- Config directory creation is idempotent via `if (-not (Test-Path $configDir))` guard
- Credentials written using `[System.IO.File]::WriteAllText` with `UTF8Encoding($false)` to avoid PS 5.1 BOM issue
- `includeInstall` flag conditionally includes/excludes rclone download block from ps-helpers

## Task Commits

Each task was committed atomically:

1. **Task 1: Implement buildRmmScript** - `1e1ac25` (feat)

**Plan metadata:** (docs commit — see below)

## Files Created/Modified

- `src/generators/rmm-script.ts` — Pure function `buildRmmScript(state: WizardState): string` using CONFIG_DIR and buildRcloneInstallBlock from ps-helpers

## Decisions Made

- `buildRcloneConfContent` is inlined rather than imported from `rclone-conf.ts` to keep each generator file self-contained and eliminate any risk of circular dependencies between generator modules
- RMM scripts use `$ErrorActionPreference = 'Stop'` (unlike Intune detection scripts which must avoid STDERR contamination) because RMM platforms natively surface PowerShell exit codes

## Deviations from Plan

None - plan executed exactly as written. File existed from prior interrupted run and was complete and correct; committed as-is after test verification.

## Issues Encountered

Previous run was interrupted by rate limit after creating `rmm-script.ts` but before committing or creating SUMMARY.md. On resumption: verified file was complete and correct against test contract, confirmed all 6 tests pass GREEN, then committed and continued.

## User Setup Required

None - no external service configuration required.

## Next Phase Readiness

- Phase 2 complete: all 6 requirements satisfied (CONF-01, DEPL-01, DEPL-02, DEPL-03, DEPL-04, DEPL-05) with 61 green tests
- `src/generators/index.ts` barrel exports all four generators: `buildRcloneConf`, `buildIntuneInstall`, `buildIntuneDetection`, `buildRmmScript`
- Phase 3 (UI) can consume all generators via barrel import

---
*Phase: 02-generators*
*Completed: 2026-03-26*