菜单
Run headless Claude Code turns over the iii bus — file edits, shell, and web against any host directory — with verbatim message streaming, session resume, and full Agent SDK option pass-through.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Run Unix commands and structured filesystem ops from the iii engine: exec, background jobs, and a structured fs (ls/stat/mkdir/rm/chmod/mv/grep/sed/ read/write, jailed only if fs.host_roots is configured), all forwardable into a sandbox microVM.
Shared, adapter-backed key/value store addressed by scope and key, with a reactive `state` trigger so other functions can run on every create, update, or delete without polling.
Durable topic queues for iii: subscribe functions to topics, publish work asynchronously, retry failed deliveries with backoff, and inspect/redrive dead-lettered messages.
Mint isolated git worktrees for parallel agent work, track ownership in a cross-agent registry, and land finished branches back onto a target with a queued rebase, test gate, and atomic fast-forward merge.
Connect this engine to another iii engine over a long-lived WebSocket so functions call across the boundary. Wire stable ids with `forward:`/`expose:`; `bridge.invoke` is the ad-hoc escape hatch.
Drive Devin over the iii bus. Run the local Devin CLI agent (SWE-1.6) with the iii runtime context so it discovers and operates your mesh, or start and steer autonomous Devin cloud sessions through the REST API, with a passthrough to any Devin v1/v3 endpoint.
| name | claude-code |
| description | Run headless Claude Code turns over the iii bus — file edits, shell, and web against any host directory — with verbatim message streaming, session resume, and full Agent SDK option pass-through. |
The claude-code worker exposes the Claude Code API as iii functions. One
claude::run call executes one headless Claude Code turn — the same agent
the user runs in their terminal, with the same login, filesystem, and
permission model — in a chosen working directory, and returns the final
result, token usage, and cost. The worker is a pure pass-through: named
payload fields cover the common path, the options field forwards any Agent
SDK option verbatim, and every message Claude Code emits mirrors untouched
onto the claude::events stream. A translated AgentEvent view lands on
agent::events, which is what the iii console and the acp worker render.
Requires the claude CLI on the host with an existing login or
ANTHROPIC_API_KEY in the worker environment. When a turn needs a
capability beyond Claude Code itself, add another iii worker to the bus
instead of bolting anything onto this one.
coder::* / shell::* calls
yourself: claude::run with prompt and cwd.session_id again and
the worker resumes the underlying Claude Code session with full context.claude::start returns
{session_id, started} immediately; follow claude::events (group_id =
session_id) for raw progress or agent::events for the rendered view;
interrupt with claude::stop.iii trigger <fn> --help) with the
matching Bash allow rule pre-set; disable per turn with
iii_context: false.permission_mode: "plan" runs Claude
Code's native plan mode (read-only, returns the plan as the result);
then send "implement the plan" on the same session_id with
permission_mode: "acceptEdits".options unchanged — {"options": {"forkSession": true, "includePartialMessages": true}} — and includePartialMessages puts
token-level stream_event frames on claude::events.claude CLI per turn — needs Claude Code installed and
authenticated; not available inside a bare container without it.permission_mode, allowed_tools, disallowed_tools), not the
engine's; set approval_gate: true to route every call through
policy::check_permissions (fail-closed, needs the harness worker).claude::status (live: true)
before sending another claude::run for the same session_id; parallel
runs against one session race on the underlying Claude Code resume.agent::events carries whole-message frames (message_complete,
function_execution_start/end, turn_end, agent_end); token deltas
exist only on claude::events and only when includePartialMessages is
set.claude::run — run one Claude Code turn and wait; accepts prompt (or a
messages array whose last user entry becomes the prompt), plus model,
cwd, permission_mode, allowed_tools, disallowed_tools,
max_turns, system_prompt, append_system_prompt, and raw options;
returns {session_id, claude_session_id, result, stop_reason, usage, total_cost_usd}.claude::start — same payload, returns {session_id, started}
immediately; progress arrives on the streams.claude::stop — interrupt the live run for a session.claude::status — point-in-time session view: live flag, status, turns,
usage, cost.claude::sessions::list — every session this worker has run.run::start_and_wait — alias for claude::run under the entrypoint the
console and acp worker drive, so both run Claude Code with no changes.