A Hermes Agent plugin that drives interactive CLI/TUI tools — primarily Claude Code interactive mode, with adapters for Codex and OpenCode — using Hermes' existing terminal and process primitives.

The plugin gives Hermes one tool (interactive_cli) and one slash command (/icli) for starting, watching, and steering interactive sessions from chat. Unlike claude -p, the session stays open so the agent can have a back-and-forth conversation with the inner CLI.

• One tool, seven actions: start, send, poll, log, stop, list, status.
• Adapters for claude / codex / opencode, plus custom for arbitrary PTY-friendly commands.
• Persistent session registry under $HERMES_HOME/interactive-cli/sessions.json (atomic writes) so sessions survive plugin reloads.
• Stable session keys derived from explicit input → Hermes session env vars (HERMES_SESSION_PLATFORM, HERMES_SESSION_CHAT_ID, HERMES_SESSION_THREAD_ID) → default:<cli>:<workdir> fallback.
• ANSI sanitation on snippets, raw log still reachable via log.
• Adapter-specific exit strategies: /exit for Claude, Ctrl-C for Codex / OpenCode, close for custom. Always followed by a kill so processes don't leak.
• auto_trust defaults to false. When enabled, it will press Enter once if Claude shows its "Do you trust this folder?" prompt — and nothing else. No other prompt is auto-confirmed.

hermes plugins install pingchesu/hermes-interactive-cli-plugin --enable

Manual install is also supported:

git clone https://github.com/pingchesu/hermes-interactive-cli-plugin.git \
    ~/.hermes/plugins/interactive-cli
hermes plugins enable interactive-cli

The plugin only depends on the Hermes plugin context API (register_tool, register_command, dispatch_tool) — no Hermes internals are imported.

{
  "name": "interactive_cli",
  "arguments": {
    "action": "start",
    "cli": "claude",
    "workdir": "/home/me/projects/foo",
    "session_key": "slack:C123:T456",
    "auto_trust": false,
    "prompt": "Hi Claude, let's pair on the auth module."
  }
}

Subsequent actions only need session_key (or session_id):

{"name": "interactive_cli", "arguments": {"action": "send", "session_key": "slack:C123:T456", "prompt": "Show me the diff"}}
{"name": "interactive_cli", "arguments": {"action": "poll", "session_key": "slack:C123:T456", "lines": 50}}
{"name": "interactive_cli", "arguments": {"action": "stop", "session_key": "slack:C123:T456"}}

In Slack / Hermes chat:

/icli start claude /home/me/projects/foo
/icli send Help me refactor api/users.py
/icli poll
/icli log 200
/icli status
/icli stop
/icli list

The session key is derived from the chat context, so you don't need to pass it manually inside one chat thread.

• Prompts always go through process.submit / process.write. They are never interpolated into the shell command line, so user content can't inject arguments.
• auto_trust is the only prompt the plugin will auto-confirm, and it is off by default. Permission / approval prompts inside Claude Code are not auto-confirmed.
• Workdirs are validated to exist and be directories before start.
• env_overrides keys are validated (must match [A-Za-z_][A-Za-z0-9_]*). Secret-looking keys (TOKEN, SECRET, PASSWORD, API_KEY, etc.) are refused because Hermes terminal launches currently do not provide a separate environment channel. Accepted non-secret values are shell-quoted for launch; all leading launch environment values (including auto-injected HOME/PATH) are redacted from plugin state/tool responses.
• The plugin warns (but does not refuse) if TERMINAL_ENV != local, since PTY behaviour outside the local backend isn't guaranteed.

python -m pytest -q          # unit tests, no real CLIs invoked
python scripts/smoke_plugin.py

Both run fully offline against a fake dispatch_tool.

hermes-interactive-cli-plugin/
├── plugin.yaml
├── __init__.py                 # directory-plugin shim
├── hermes_interactive_cli/
│   ├── __init__.py             # register(ctx)
│   ├── schemas.py              # interactive_cli tool schema
│   ├── adapters.py             # claude / codex / opencode / custom
│   ├── session_manager.py      # SessionManager + handler glue
│   ├── slash.py                # /icli parser
│   ├── sanitize.py             # ANSI strip + tail helpers
│   └── paths.py                # HERMES_HOME resolution, atomic writes
├── scripts/
│   └── smoke_plugin.py
├── tests/
│   ├── test_adapters.py
│   ├── test_schemas.py
│   ├── test_session_manager.py
│   ├── test_slash.py
│   └── test_register.py
├── pyproject.toml
├── LICENSE
└── README.md

MIT — see LICENSE.