iii-sandbox
v0.25.0Spawn ephemeral microVMs and expose 16 sandbox::* functions (lifecycle, filesystem, run and catalog) for isolated command execution and file ops.
Units that join your compose graph: functions, triggers and skills, added to a project with one compose::add.
Spawn ephemeral microVMs and expose 16 sandbox::* functions (lifecycle, filesystem, run and catalog) for isolated command execution and file ops.
Distributed key-value state management with reactive change triggers — registers the `state` trigger type, the observable `state::on-changed` function (iii 0.25) and the `state::*` functions.
Expose functions as HTTP endpoints — registers the `http` trigger type and the observable `http::on-request` function, and serves matched routes.
Durable function queues - registers the `durable:subscriber` trigger type, the `queue::on-message` observable function and the queue/DLQ service functions.
Schedule functions with cron expressions - registers the `cron` trigger type and the observable function `cron::on-tick` (iii 0.25).
OpenTelemetry-based traces, metrics, logs, alerts, and sampling.
One front door + provider protocol in front of every LLM provider.
Engine introspection, workers registry proxy, filesystem-backed skills, system prompts, and agent profiles, kit install and update with reviewed plans, plus function search ranked by the judge worker (falling back to local hybrid/lexical) with a conditional pre-generate hint.
Talk to PostgreSQL, MySQL, and SQLite from iii — query, execute, transactions, prepared statements, and change feeds.
Durable, reactive, branching store of typed conversation entries with six emitted trigger types.
Turns a raw conversation history plus a target model into a model-ready context — token counting, function-result pruning, and history compaction.
Unix shell + filesystem worker — exec with denylist/timeout/output caps and background jobs; fs::ls|stat|mkdir|rm|chmod|mv|grep|sed|read|write with host jail, denylist, size caps, and sandbox-target forwarding
OpenAI Responses provider worker with Chat Completions compatibility; implements provider::openai::stream and provider::openai::refresh_models behind llm-router.
Measure Harness capability, retain reproducible evidence, and expose the E2E dashboard.
Anthropic Messages API provider worker; implements provider::anthropic::stream and provider::anthropic::refresh_models behind llm-router.
Register, store, and watch typed configuration values for the engine.
DeepSeek Chat Completions provider worker; implements provider::deepseek::stream and provider::deepseek::refresh_models behind llm-router.
A browser on the iii bus - shared Chromium with persistent, restorable tabs and incognito tabs. Navigate, act, read the page console, pick elements. Also parses HTML natively without a browser (browser::* - css/xpath/regex, element search, markdown).
Object storage across AWS S3, GCS, Cloudflare R2, and a native local filesystem backend. Streamed uploads, signed URLs, and object change triggers.
Web console for iii — bundles the React UI and proxies the engine WebSocket on a single port.
Find workers, kits and executables, or jump to a page.