PayPal's Mark Lummus and Navinkumar Patil demoed the intentionally broken Bris Barista 9000 at AI Engineer to show how interactive CLIs fail silently in agent harnesses that shell out to Bash, requiring only local execution and no remote exploit.
The agent sees a redraw loop instead of the arrow-key prompt a human would see, so the harness loses UI state with no error and no retry signal.
Lummus said flags work for simple single-pass flows but multiply and break when the next question depends on live API data, while Patil walked from tmux capture-pane scraping to IPC side channels and context injection as the fix.
For platform teams, that means treating the CLI like accessibility work and shipping a machine-readable channel alongside the human interface, with structured JSON, read-state and send-input verbs, and guard rails in the flow.
The same shift is spreading, as seen with Kiro CLI which lets developers invoke AI agents directly from the terminal for writing, reviewing and automating code.