dsh-credential-handoff

Overview

Conversation-local credential handoff that writes through the DSH credential service without returning the secret to model context.

README / EN

Package documentation

Registry summary

Conversation-local credential handoff that writes through the DSH credential service without returning the secret to model context.

dsh.pub verifies the pinned bundle contract, runtime facts, and distribution semantics. The complete README remains in the source repository.

Read the full README on GitHub

LIMITATIONS

Known limitations

DSH already provides `resolve`, `describe`, `set`, and `unset` credential services. This plugin adds only a conversation-local handoff UI and model tool. It does not read credential values back into the browser or model. The rc.6 generic question UI always offers an `Other` text answer. If the client takeover bundle fails to load, the fallback question warns the user not to paste a secret and to cancel, but the host cannot remove that generic field. Direct clients can also call DSH's own credential API outside this plugin; transport and authentication for the wider Web control plane remain upstream responsibilities.

dsh-credential-handoff