dsh-password-prompt

Usage

Tell the agent something like:

连 192.168.1.10 需要密码，用 password_prompt 问我要。 连 192.168.1.10 的账号密码都问我。

The agent calls password_prompt, the masked panel pops up, you type, and the agent continues. The password never enters the model context: the tool writes it to the private 0600 file the agent named (outFile, e.g. /.dsh-secrets/ssh-pass) and returns only that path. The agent feeds the command from the file — an askpass script that cats it for SSH, sudo -S < file for sudo — then deletes the file. If the agent needs an account/username too, it calls password_prompt with account: true; the panel asks for both, the account is returned to the agent in the clear, and the password still stays file-only. The model cannot echo a secret it never possessed.