Open a raw interactive terminal session and keep it open.

Describe the target inline: protocol and port describe the final target, credentials are references (a pass entry, an explicit SSH key file) for ssh/telnet/console. The optional single-hop route is socks (local SOCKS5 proxy) or proxyjump (SSH jump host); use proxyjump to reach a bastion quickly and run further ssh or telnet hops yourself with terminal_write inside the same session. For local console cables use protocol="serial" with an absolute /dev/tty* path in host, serial parameters and allow_serial=true. Every call goes through the client's permission approval gate.

Write exact input to the session's terminal stream.

Use this for commands, interactive keystrokes and nested hops such as ssh user@host. enter appends the transport line terminator (newline, or carriage return on serial). The full data string is recorded in the audit; never type passwords, passphrases or other secrets here — use terminal_write_secret.

Read terminal output until the stream is quiet or timeout expires.

Returns everything received, including pager screens, password prompts, banners and shell output; no prompt shape is required. Use session_status and read_output for offsets and buffered history.

Send a pass entry value at a live password or passphrase prompt.

Use this for every secret typed interactively (device logins, ssh, enable, TACACS). The value is resolved inside the server and never appears in tool arguments, results or audit; only the entry name and byte count are logged.

Read a bounded slice of accumulated session output by offset.

Return state and prompt metadata for an active session.

Close a session and disconnect from the device.