agent-surfaceA compiler-authorized capability surface for frontend agents

Declare semantic capabilities in code, bind them to live UI state, and expose only what the production contract authorizes.

Get started

Architecture

Core API

View on GitHub

One source of truth

The resolved production graph generates the immutable contract used by the compiler, runtime registry, adapters, CLI, and review snapshot.

Capabilities, not DOM

Agents receive typed observations, actions, and domain procedure references—never selectors, coordinates, or synthetic interaction.

Runtime governance

Availability, policy, input validation, confirmation, concurrency, staleness, and audit are enforced on every invocation.

Deterministic verification

Contract drift and runtime behavior are testable in CI without a model or browser automation.

Choose a path

Goal	Read
Expose the first React capability	Getting started
Understand the model	Concepts → Architecture
Integrate React or oRPC	React API → oRPC integration
Review the security boundary	Policies and security → Limits and non-goals
Build an adapter	Adapters → Errors
Add CI and tests	Testing → CLI
Run the repository example	Example application

Architectural contract

A capability becomes executable only through this path:

text

compiled declaration
  → immutable authority
  → privately authorized runtime binding
  → registry validation
  → registry-owned invocation

Runtime data can narrow the compiled surface but cannot add identities, effects, schemas, confirmation posture, or policy attachments. Unsupported registrations and tool exposure fail closed. See Architecture for the full guarantee and its boundary.

Project

Source, issues, and releases live on GitHub: Wiseair-srl/agent-surface. Packages are published to npm under @agent-surface/*, starting with @agent-surface/core. Contributions start with CONTRIBUTING.md; security reports go through SECURITY.md.