Claude Code as an iii worker — claude::* runs headless turns and claude::terminal::* runs the same CLI in a shell::pty session on its own console page. Both publish raw messages on the claude::raw-event trigger type and AgentEvent frames on claude::agent-event.
iiiverifiedexact versions are immutable; binary and bundle artifacts are digest-pinned.
Check who pays for a Claude terminal session on this host. Reports a Claude subscription, an API key (which overrides the login), or nothing yet; read from `claude auth status` on the host.
Internal: reload claude-code configuration when it changes.
Run one Claude Code turn and wait for the result. Accepts `prompt` or a `messages` array plus a raw SDK `options` pass-through; publishes raw Claude Code messages on the claude::raw-event trigger type and AgentEvent frames on claude::agent-event (bind with { session_id }), and returns {session_id, result, usage, total_cost_usd}.
Allow rules, e.g. "Bash(git *)"
Append to the default system prompt
Working directory the turn runs in
Deny rules
Append the iii runtime discovery prompt (engine catalog via the iii CLI)
Cap on agentic turns
Alternative to prompt: role/content messages; the last user entry becomes the prompt
Model id or alias; empty = Claude Code default
Raw Agent SDK options forwarded verbatim (camelCase), e.g. forkSession, includePartialMessages
The session delegating this run. Written to the child session metadata, which is what nests it under its parent in the console — the same link a harness sub-agent carries.
Claude Code permission mode for this turn
The user prompt for this turn
iii session id; reuse to resume the same Claude Code conversation
Replace the Claude Code system prompt
Reserved for callers; not forwarded
List every Claude Code session this worker has run.
Start a Claude Code turn and return immediately; bind claude::agent-event with { session_id } for progress and turn_end.
Allow rules, e.g. "Bash(git *)"
Append to the default system prompt
Working directory the turn runs in
Deny rules
Append the iii runtime discovery prompt (engine catalog via the iii CLI)
Cap on agentic turns
Alternative to prompt: role/content messages; the last user entry becomes the prompt
Model id or alias; empty = Claude Code default
Raw Agent SDK options forwarded verbatim (camelCase), e.g. forkSession, includePartialMessages
The session delegating this run. Written to the child session metadata, which is what nests it under its parent in the console — the same link a harness sub-agent carries.
Claude Code permission mode for this turn
The user prompt for this turn
iii session id; reuse to resume the same Claude Code conversation
Replace the Claude Code system prompt
Reserved for callers; not forwarded
Check the status of a Claude Code session.
iii session id returned by claude::run / claude::start
Stop a live Claude Code run for a session.
iii session id returned by claude::run / claude::start
Delegate one task to Claude Code and return its session id immediately — the sub-agent shape: it never parks the caller. The outcome is written to state under scope `agent_tasks`, key the child session id, so bind a `state` trigger on that BEFORE calling and be woken by it; progress arrives on claude::agent-event (bind with { session_id }). Pass `parent_session_id` to nest the child under the session that delegated it.
Allow rules, e.g. "Bash(git *)"
Append to the default system prompt
Working directory the turn runs in
Deny rules
Append the iii runtime discovery prompt (engine catalog via the iii CLI)
Cap on agentic turns
Model id or alias; empty = Claude Code default
Raw Agent SDK options forwarded verbatim (camelCase), e.g. forkSession, includePartialMessages
The session delegating this run. Written to the child session metadata, which is what nests it under its parent in the console — the same link a harness sub-agent carries.
Claude Code permission mode for this turn
iii session id; reuse to resume the same Claude Code conversation
Replace the Claude Code system prompt
The child's self-contained goal. It cannot see the caller's context, so name every resource it needs.
Reserved for callers; not forwarded
A Claude Code lifecycle event from a terminal session (SessionStart, UserPromptSubmit, PreToolUse, PostToolUse, Stop, SessionEnd), posted by the workspace hooks. Translated into AgentEvent frames on the claude::agent-event feed.
What a Claude terminal session runs: the claude binary, its argv, the workspace directory, and the session environment. The console page passes this straight to shell::pty::open.
The `iii` CLI on the terminal host that carries this session's activity to the bus. Empty means nothing will reach the claude::agent-event feed.
Anything wrong that does not stop a session from opening.
Console UI asset content (console plumbing).
Alias for claude::run under the shared agent entrypoint: run a turn for {session_id, messages} and return when it ends.
Allow rules, e.g. "Bash(git *)"
Append to the default system prompt
Working directory the turn runs in
Deny rules
Append the iii runtime discovery prompt (engine catalog via the iii CLI)
Cap on agentic turns
Alternative to prompt: role/content messages; the last user entry becomes the prompt
Model id or alias; empty = Claude Code default
Raw Agent SDK options forwarded verbatim (camelCase), e.g. forkSession, includePartialMessages
The session delegating this run. Written to the child session metadata, which is what nests it under its parent in the console — the same link a harness sub-agent carries.
Claude Code permission mode for this turn
The user prompt for this turn
iii session id; reuse to resume the same Claude Code conversation
Replace the Claude Code system prompt
Reserved for callers; not forwarded
Translated AgentEvent frames of one Claude Code session (claude::run, claude::start, claude::task, run::start_and_wait and the console terminal). Config: { session_id, metadata? }. Payload: { session_id, event_id, seq, epoch, source, event }. Ephemeral: not stored or replayed.
Raw Claude Code messages (system/init, assistant, user, result, stream_event) of one session, verbatim. Config: { session_id, metadata? }. Payload: { session_id, event_id, seq, epoch, source, event }. Ephemeral: not stored or replayed.