15 Interactive Execution

15 Interactive Execution

Source: docs/design/15-interactive-execution.md

Principles (D50–D53)

Prefer non-interactive commands. Interactive bash uses a controlled stdin channel: only the user may write stdin; the model requests the mode.

Visibility tiers

Ordinary stdin echoes into tool results (model-visible). User-marked sensitive input acknowledges without echoing. Passwords/tokens via approval card inject into stdin — values never enter model context or durable storage; optional remember until end of conversation (keychain).

Platforms

Degrade when PTY/sandbox cannot support interaction. Unattended: cached credentials may auto-inject; missing cache auto-deny; interactive idle timeout ends the command. Opening unattended warns about this.