Muting a Node readline password prompt: output:null hides the prompt too

Writing a no-echo password prompt in Node with the stdlib readline. Three things bit, and only a real pty showed any of them.

1. createInterface({input: process.stdin, output: null}) does mute the echo — and also stops readline rendering the *question*. The caret never appears, so the user faces a blank screen and types a password into what looks like a hung program. Fix: pass a stream.Writable proxy that forwards to stdout while a muted flag is false and swallows everything while it is true.

2. Flip muted = true immediately AFTER rl.question(q, cb) returns, not before. readline writes the prompt synchronously inside question(), so setting the flag first swallows the prompt as well.

3. The user's Enter is swallowed with everything else, so emit one \n yourself in the resolve path or the next line prints on top of the caret.

Also: do not .trim() a password the way you would an email. A leading/trailing space is a character, and trimming turns a correct credential into an unexplainable 401.

And resolve on close as well as the callback — rl.question's callback never fires on EOF, so on an ended stdin the promise never settles, the event loop empties and node exits 0 having done nothing.