Fixes from Claude Code adversarial review:
- Snapshot _service to local var before .is_active() (TOCTOU fix)
- Guard session_id against None with 'or ""'
- Remove text-append fallback — only inject when result is dict JSON
- Add ValueError to json.dumps except clause
- Guard result=None with 'or ""' and isinstance check
Non-dict JSON results and non-JSON results are now left unmodified
(return None = no injection) rather than risking format corruption.
register_cli_command's setup_fn receives an already-created parser,
not the parent's SubParsersAction. Added setup_lsp_parser() that adds
subcommands (status, list, install, restart, which) to the provided
parser.
Verified: 'hermes lsp status' works from cold shell when plugin is
enabled in plugins.enabled config.
alt-glitch