ceo-pack

CEO Pack

A CEO orchestration layer for Hermes — not a chat wrapper. Install it, name your CEO, tell it about your business on first run, and it briefs, routes, assigns, calls tools one at a time, verifies, and logs decisions — with Hermes as COO.

Orchestration first

Brief -> Route -> Plan -> Assign -> Call -> Verify -> Log

ceo_orchestrate — ordered plan for a goal, with seat, tool, arguments, and approval flag per step. 6 steps normally, 7 with the Q4 checklist for Q4 / year-end / tax goals.
ceo_tool_call — validate a tool-call envelope before dispatch: exact tool name, JSON arguments, no credential keys or values (nested included), required fields, approval flag. Unknown tools and credential content are refused, and secret values are never echoed — only their path is named.
ceo_verify — new in v0.3.0. Verify a tool result before reporting the step as done: status, expected fields, and next action (verify, retry once, stop and wait for the owner, or escalate). Unknown is never success, and a validated envelope is not a completed call. The post_tool_call hook also runs verification on every ceo_* result.
ceo_brief — one-page brief: goal, decision needed, owners per workstream.
ceo_route — route a task to the right seat by domain. Returns COO (Hermes) for Hermes; the orchestration layer canonicalizes that to COO.
ceo_assign — one task, one owner, one ISO due date, one known seat. Missing fields, bad dates, and unknown seats are errors, not silent defaults. A past due date warns.
ceo_decision_log — options, chosen option, reason, approval flag.
q4_closeout_checklist — generic year-end checklist: books, tax items, annual filings, entity cleanup, annual reporting. Checklist only, not tax or legal advice.
ceo_choose_model — pick a model by job and budget, with fallbacks and limits.

Tool-call rules: one tool at a time, check the JSON result before the next step, retry once with corrected arguments then escalate, never retry a write/send/payment blindly. Type 1 decisions (irreversible, priced, external, legal/financial, security, people, regulatory, reputation, outside authority) stop for the owner; Type 2 (reversible, low-cost, bounded) proceeds — step 4 is no longer blanket-gated. See docs/ORCHESTRATION.md and CHANGELOG.md.

Slash commands: /ceo, /q4, and /orchestrate.

Model choice — free default, top-ranked options

Default is free, and the user can choose from the list in models.py / docs/MODELS.md:

| Choice | Use for |
|---|---|
| Nemotron 3 Ultra free (nvidia/nemotron-3-ultra-550b-a55b:free) | CEO default — 550B, 1M context, orchestration |
| GLM Flash free (Zen) | Fast daily CEO fallback |
| Nemotron 3.5 Lightning free / Ling 3.1 Flash (zero-priced) | Fast, narrow worker jobs — never the CEO seat. Ling 3.0 Flash is paid, not free — do not use that slug. |
| openrouter/free | Random free fallback, tool-calling filtered |
| Claude Sonnet 5.5 / GPT-6.1 Sol | Paid value, everyday frontier |
| Claude Opus 5.5 | Paid flagship, high stakes only — override, not default |

Free caveat, up front: OpenRouter free is 20 req/min, 50 req/day until $10 of credits, then 1,000/day, and a CEO task uses many requests. Free lineups turn over fast — verify the live provider list before a demo. The plugin returns the choice and IDs; it does not call a model itself, so it stays stdlib-only and catalog-safe.

Seats: CEO, CFO, COO (Hermes), CTO, CMO, CLO, Chief of Staff, CRO.

Approval gate

Nothing external, priced, or shipped without owner approval for that item. A decision log entry is not approval. Tools flag approval; the owner approves in chat.

Install (local test)

cp -r ceo-pack ~/.hermes/plugins/ceo-pack
hermes plugins enable ceo-pack
hermes plugins doctor ~/.hermes/plugins/ceo-pack --ci
hermes plugins validate ~/.hermes/plugins/ceo-pack --install-deps

Demo path (for the hackathon video)

Install by name.
Ask for a Q4 closeout brief.
Route and assign: CFO for books/tax prep, CLO for entity/filings, COO/Hermes for coordination.
Record the decision, show the approval gate stopping an external step until the owner approves.

Privacy — what is NOT in this plugin

See PRIVACY.md. In short: no business data, no client data, no prices, no locations, no personal names, no credentials, no local portraits/animations, and no logs from any private machine. The user configures their own business on install. The engines/ prompts use placeholders like {{AGENT_NAME}}, {{BUSINESS_CONTEXT}}, and {{PRINCIPAL_NAME}}.

Sources

Engines and docs adapted from tradersurfer/ceo-agent (public repo): task router, department prompts/behavior/contracts, architecture, behavior, memory layer, organization structure, and security docs — sanitized to placeholders in this build.
Role sheets adapted from the local Dynasty Pack, with one correction: Hermes is the COO, not Maverick, and not a reserved messenger-only role in this pack.
Hermes plugin structure follows the Hermes plugin guide: plugin.yaml + register(ctx) + bundled skills.

License

MIT

README from the reviewed commit 806e71a; it updates when the author re-pins.

About