OwlLayer AI: Letting AI Agents Act on Your UI Instead of Replacing It A developer has released OwlLayer AI, an open-source protocol and toolkit that lets AI agents act on an application's existing UI rather than replacing it, with components declaring typed, schema-validated actions tied to their lifecycle. The system, built on the AITP (Agent-to-Interface Transfer Protocol), routes both text and voice commands through the same tool-calling pipeline and enforces risk levels with Shadow DOM-isolated human-in-the-loop approval prompts. It ships as 12 MIT-licensed packages under @owllayer on npm, with bindings for React, Vue, Svelte, Angular, vanilla JS/HTML, and PHP. Most AI-in-product integrations fall into two camps, and both have a ceiling. A chatbot bolted onto the side of your app can talk, but it can't act - it has no real connection to your components, your state, or your business logic. Generative UI goes the other way: the LLM regenerates the interface on the fly, and the first time it hallucinates a layout, your design system and your carefully built business rules are gone. I wanted a third option. That's what OwlLayer AI is. Instead of scraping the DOM or handing a model raw control over your page, your components declare their own actions - named, typed, schema-validated, with an explicit risk level. useAgentTool { name: 'add to cart', description: 'Add the current product to the shopping cart', schema: z.object { quantity: z.number .int .min 1 } , risk: 'low', }, async { quantity } = { await cart.add product, quantity ; return { productId: product.id, quantity }; }, ; The tool's lifecycle is tied to the component's. Mount it, the tool appears in the agent's capability registry. Unmount it, it's gone. Security isn't a wrapper, it's in the protocol Every tool carries a risk level. High and critical risk pause and render a Human-in-the-Loop approval prompt, isolated via Shadow DOM. Nothing critical runs without an explicit human "yes." Voice is first-class, not bolted on. A voice command routes through the exact same tool-calling and approval pipeline as text. Built on OpenAI Realtime, Gemini Live, and LiveKit. One protocol, native bindings everywhere AITP Agent-to-Interface Transfer Protocol connects your LLM to your UI. One TypeScript server orchestrates everything; framework-idiomatic bindings sit on top for React, Vue, Svelte, Angular, vanilla JS/HTML, and PHP. Where it stands, actively developed. 12 packages under @owllayer on npm, MIT licensed, code and docs public now. Official site and demo video landing soon. Built from Abidjan, Côte d'Ivoire 🇨🇮.