Sign up
View stargazersSign up

[Bug]: Claude skips private secret input when sudo needs a password#27710

opened9d agobyVvoltcrash

Before submitting

  • I searched existing issues and did not find a duplicate.
  • I included enough detail to reproduce or investigate the problem.

Area

apps/server — agent instructions / MCP tool discovery

Steps to reproduce

  1. Open a Claude thread in T3 Code on Linux, with the T3 MCP tools available and sudo requiring a password.
  2. Ask: run sudo dnf update for me.
  3. Observe whether Claude opens the private secret-entry card without being told the tool name.
  4. Compare the same request in a Codex thread.

This is a model-behavior failure, so individual runs may vary.

Expected behavior

When the authorized command needs a password, the agent calls request_secret with delivery: "file", then uses the returned private file as input to the command without exposing its contents. The user should not need to name the tool or grant passwordless sudo.

Actual behavior

The reported Claude Opus 5.5 Medium run stopped because sudo required a password and claimed the session could not provide interactive input. It suggested running the command manually or configuring a NOPASSWD sudoers rule instead. It never called request_secret unless explicitly directed to. The reporter says Codex opened secure input automatically for the same task.

Impact

Blocks work requiring sudo authentication and sends users toward an unnecessary passwordless-sudo workaround despite an existing private-input capability.

Version or commit

Reported installed build not supplied. Investigating against main at 8d012a688.

Environment

Linux; Claude Opus 5.5 Medium. Codex comparison model not supplied.

Investigation scope

The existing shared instruction says to call request_secret for secrets, and file delivery already supports shell commands. Investigate the missing connection between sudo authentication and that workflow, including Claude's deferred MCP-tool discovery. Keep any fix within that established capability; no new credential storage or sudo permissions.

Workaround

Explicitly tell Claude to use T3 Code's request_secret tool.