Desktop askpass

Version: 1.0.0 | Date: 2026-10-29

Tested 2026-10-29 on macOS 15.8.2 (osascript backend): a typed secret matched its expected value (compared in the shell, never printed), Cancel (exit 1), timeout (exit 5), a malformed ASKPASS_TIMEOUT (exit 2, no dialog), an AppleScript-injection prompt left no side effect, sudo -A -v authenticated through the dialog, and every sudo message in the failure table below was observed. Not tested here: the ssh and git invocations, the stdin consumers, and the Linux zenity path (carried over from a colleague's Ubuntu use).

The agent's shell has no controlling tty, so anything that prompts for a password hangs or fails. The fix is the askpass protocol: the program execs a helper, the helper prints the secret on stdout, the program reads one line. scripts/askpass.sh in this skill's folder is that helper — it pops a hidden-text entry dialog on the user's desktop and the typed secret goes straight to the consuming program, never into the transcript. The dialog title ends in requested by <program>, the helper's parent process, so the user can check it against the command you announced.