The TUI login flow used a plain readline.question() for the password prompt, which echoed characters to the terminal. Replaced with the existing promptSecret() helper that uses TTY raw mode to suppress echo — the same function already used by `mosaic gateway login`. Co-Authored-By: Claude Opus 4.6 <[email protected]>