CopilotKit

Open Generative UI

Let agents generate fully interactive HTML/CSS/JS UIs that stream live into the chat.


"""MS Agent Framework agent for the Open-Ended Generative UI demo (minimal).The simplest possible Open Generative UI agent. All the heavy liftinghappens outside the agent:- The CopilotKit runtime is configured with `openGenerativeUI: true` for  this agent (see `src/app/api/copilotkit-ogui/route.ts`). The provider  auto-registers the `generateSandboxedUi` frontend tool, which the  runtime forwards to the MS agent via the AG-UI protocol on each turn.- When the LLM calls `generateSandboxedUi`, the runtime's  `OpenGenerativeUIMiddleware` converts that streaming tool call into  `open-generative-ui` activity events that the built-in renderer mounts  inside a sandboxed iframe.This is the minimal variant: no sandbox functions, no app-side tools.The agent simply asks the LLM to design and emit a single-shotsandboxed UI. The "advanced" sibling (`open_gen_ui_advanced_agent.py`)builds on this with sandbox-to-host function calling via`openGenerativeUI.sandboxFunctions`."""from __future__ import annotationsfrom textwrap import dedentfrom agent_framework import Agent, BaseChatClientfrom agent_framework_ag_ui import AgentFrameworkAgentSYSTEM_PROMPT = dedent(    """    You are a UI-generating assistant for an Open Generative UI demo    focused on intricate, educational visualisations (3D axes / rotations,    neural-network activations, sorting-algorithm walkthroughs, Fourier    series, wave interference, planetary orbits, etc.).    On every user turn you MUST call the `generateSandboxedUi` frontend    tool exactly once. Design a visually polished, self-contained    HTML + CSS + SVG widget that *teaches* the requested concept.    The frontend injects a detailed "design skill" as agent context    describing the palette, typography, labelling, and motion conventions    expected -- follow it closely. Key invariants:    - Use inline SVG (or <canvas>) for geometric content, not stacks of <div>s.    - Every axis is labelled; every colour-coded series has a legend.    - Prefer CSS @keyframes / transitions over setInterval; loop cyclical      concepts with animation-iteration-count: infinite.    - Motion must teach -- animate the actual step of the concept, not decoration.    - No fetch / XHR / localStorage -- the sandbox has no same-origin access.    Output order:    - `initialHeight` (typically 480-560 for visualisations) first.    - A short `placeholderMessages` array (2-3 lines describing the build).    - `css` (complete).    - `html` (streams live -- keep it tidy). CDN <script> tags for Chart.js /      D3 / etc. go inside the html.    Keep your own chat message brief (1 sentence) -- the real output is the    rendered visualisation.    """).strip()def create_open_gen_ui_agent(chat_client: BaseChatClient) -> AgentFrameworkAgent:    """Instantiate the minimal Open Generative UI agent."""    base_agent = Agent(        client=chat_client,        name="open_gen_ui_agent",        instructions=SYSTEM_PROMPT,        tools=[],    )    return AgentFrameworkAgent(        agent=base_agent,        name="OpenGenUiAgent",        description=(            "Generates self-contained, educational sandboxed UI "            "(HTML + CSS + SVG) via the `generateSandboxedUi` frontend tool."        ),        require_confirmation=False,    )

What is this?#

Open Generative UI lets the agent generate complete, sandboxed UI on the fly (HTML, CSS, and JavaScript) and stream it live into the chat. The user sees the interface build in real time: styles apply first, then HTML streams in progressively, and finally JavaScript expressions execute one by one.

Free course: See this pattern built end-to-end in Build Interactive Agents with Generative UI — a free DeepLearning.AI short course taught by CopilotKit's CEO covering the full Generative UI spectrum (Controlled, Declarative, and Open-Ended).

Key benefits:

  • No predefined components — the agent creates any UI it needs, on demand
  • Live streaming — HTML streams into a preview as it's generated
  • CDN libraries — the generated UI can load Chart.js, D3, Three.js, etc. via <script> tags
  • Secure sandboxing — content runs in an isolated iframe without same-origin access
  • Sandbox functions — optionally expose host functions to the generated UI for two-way communication

Minimal setup#

Turning on Open Generative UI takes one flag in the runtime plus a plain <CopilotChat /> on the frontend; the built-in activity renderer is auto-registered by CopilotKit, so no extra wiring is needed.

Enable it in the runtime#

Add OpenGenerativeUIMiddleware to your runtime configuration:

route.ts
      runtime: new CopilotRuntime({        // @ts-ignore -- see main route.ts for type-comment rationale        agents,        openGenerativeUI: {          agents: ["open-gen-ui", "open-gen-ui-advanced"],        },      }),

The OpenGenerativeUIMiddleware then converts the agent's streamed generateSandboxedUi tool call into open-generative-ui activity events, which the built-in OpenGenerativeUIActivityRenderer mounts inside a sandboxed iframe.

Drop <CopilotChat /> into the page#

Wrap your app in CopilotKit and render <CopilotChat> — no extra props needed:

page.tsx
  // Minimal Open Generative UI frontend: the built-in activity renderer is  // registered by CopilotKitProvider, so a plain <CopilotChat /> is enough —  // no custom tool renderers, no activity-renderer registration.  // We DO pass `openGenerativeUI.designSkill` to swap in visualisation-tuned  // guidance in place of the default shadcn design skill.  return (    <CopilotKit      runtimeUrl="/api/copilotkit-ogui"      agent="open-gen-ui"      openGenerativeUI={{ designSkill: VISUALIZATION_DESIGN_SKILL }}    >      <div className="flex justify-center items-center h-screen w-full">        <div className="h-full w-full max-w-4xl flex flex-col p-3">          <Chat />        </div>      </div>    </CopilotKit>  );

That's it. Ask the agent "build me a simple greeting card" to see HTML stream into a sandboxed preview live.

Advanced: With app tool calling#

Sandbox functions let the generated UI call back into your host application — a generated settings panel can toggle your app's theme, a product card can push items into your cart, or a data view can ask the host to fetch data the iframe can't reach directly.

"""MS Agent Framework agent for the Open-Ended Generative UI (Advanced) demo.The "advanced" variant of the Open Generative UI demo. The keydistinguishing feature: the agent-authored, sandboxed UI can invokefrontend-registered **sandbox functions** -- functions the app defines onthe host page (see `src/app/demos/open-gen-ui-advanced/sandbox-functions.ts`)and makes callable from inside the iframe via`await Websandbox.connection.remote.<name>(args)`.How it works end-to-end:- The frontend passes `openGenerativeUI={ sandboxFunctions }` to the  `CopilotKit` provider. The provider injects a JSON descriptor of those  functions into the agent context.- The CopilotKit runtime forwards both the auto-registered  `generateSandboxedUi` frontend tool AND the sandbox-function descriptors  (via AG-UI context) to the MS agent on each turn.- The LLM then generates HTML + JS that calls  `Websandbox.connection.remote.<name>(...)` in response to user  interactions.- The runtime's `OpenGenerativeUIMiddleware` converts the streaming  `generateSandboxedUi` tool call into `open-generative-ui` activity  events that the built-in renderer mounts inside a sandboxed iframe.- The renderer wires each `sandboxFunctions` entry as a `localApi`  method on the websandbox connection so in-iframe code can call it.The "minimal" sibling (`open_gen_ui_agent.py`) uses the same OGUIpipeline without sandbox functions."""from __future__ import annotationsfrom textwrap import dedentfrom agent_framework import Agent, BaseChatClientfrom agent_framework_ag_ui import AgentFrameworkAgentSYSTEM_PROMPT = dedent(    """    You are a UI-generating assistant for the Open Generative UI (Advanced) demo.    On every user turn you MUST call the `generateSandboxedUi` frontend    tool exactly once. The generated UI must be INTERACTIVE and must    invoke the available host-side sandbox functions described in your    agent context (delivered via `copilotkit.context`) in response to    user interactions.    Sandbox-function calling contract (inside the generated iframe):    - Call a host function with:          await Websandbox.connection.remote.<functionName>(args)      The call returns a Promise; await it.    - Each handler returns a plain object. Read the return shape from      the function's description in your context and use the EXACT      field names it returns (e.g. if the description says the handler      returns `{ ok, value }`, read `res.value` -- not `res.result`).    - Descriptions, names, and JSON-schema parameter shapes for every      available sandbox function are listed in your context. Read them      carefully and wire at least one interactive UI element to call one.    Sandbox iframe restrictions (CRITICAL):    - The iframe runs with `sandbox="allow-scripts"` ONLY. Forms are NOT      allowed. You MUST NOT use `<form>` elements or      `<button type="submit">`. Clicking a submit button inside a      sandboxed form is blocked by the browser BEFORE any onsubmit handler      runs, so the sandbox-function call never fires.    - Use plain `<button type="button">` elements and wire them with      `addEventListener('click', ...)` or an inline click handler. Do the      same for "Enter" keypresses on inputs: attach a `keydown` listener      that checks `e.key === 'Enter'` and calls your handler directly --      do NOT wrap inputs in a `<form>`.    Generation guidance:    - Emit `initialHeight` and `placeholderMessages` first, then CSS,      then HTML, then `jsFunctions` / `jsExpressions` if helpful.    - Always include a visible result element (e.g. an output div) that      you UPDATE after the sandbox function resolves, so the user can      *see* the round-trip: "Button clicked -> remote call -> visible      result".    - Use CDN scripts (Chart.js, D3, etc.) via <script> tags in the HTML      head when you need libraries.    - Do NOT use fetch/XHR, localStorage, or document.cookie -- the      sandbox has no same-origin access. ONLY use      `Websandbox.connection.remote.*` for host-page interactions.    - Keep your own chat message brief (1 sentence max); the rendered UI      is the real output.    """).strip()def create_open_gen_ui_advanced_agent(    chat_client: BaseChatClient,) -> AgentFrameworkAgent:    """Instantiate the advanced Open Generative UI agent."""    base_agent = Agent(        client=chat_client,        name="open_gen_ui_advanced_agent",        instructions=SYSTEM_PROMPT,        tools=[],    )    return AgentFrameworkAgent(        agent=base_agent,        name="OpenGenUiAdvancedAgent",        description=(            "Generates interactive sandboxed UI that calls host-side "            "sandbox functions via `Websandbox.connection.remote.*`."        ),        require_confirmation=False,    )

Runtime is unchanged#

The server-side flag is identical to the minimal cell; the advanced behaviour is a pure frontend addition.

route.ts
      runtime: new CopilotRuntime({        // @ts-ignore -- see main route.ts for type-comment rationale        agents,        openGenerativeUI: {          agents: ["open-gen-ui", "open-gen-ui-advanced"],        },      }),

Register sandbox functions on the provider#

Each sandbox function is a Zod-validated, host-side bridge the agent can invoke from inside the generated iframe via Websandbox.connection.remote.<name>(args). The handler runs in the host page and its description is appended to the agent's context, so the agent knows which bridges are available when generating HTML/JS.

page.tsx
import React from "react";import {  CopilotKit,  CopilotChat,  useConfigureSuggestions,} from "@copilotkit/react-core/v2";import { openGenUiSandboxFunctions } from "./sandbox-functions";import { openGenUiSuggestions } from "./suggestions";export default function OpenGenUiAdvancedDemo() {  return (    // Pass the sandbox-function array on the `openGenerativeUI` provider prop.    // The built-in `OpenGenerativeUIActivityRenderer` wires these as callable    // remotes inside the agent-authored iframe.    <CopilotKit      runtimeUrl="/api/copilotkit-ogui"      agent="open-gen-ui-advanced"      openGenerativeUI={{ sandboxFunctions: openGenUiSandboxFunctions }}    >      <div className="flex justify-center items-center h-screen w-full">        <div className="h-full w-full max-w-4xl">          <Chat />        </div>      </div>    </CopilotKit>import { z } from "zod";/** * Host-side functions that agent-authored, sandboxed UIs can invoke from * inside the iframe via `Websandbox.connection.remote.<name>(args)`. * * The names, descriptions, and Zod-derived JSON schemas below are injected * into the agent's context so the LLM knows which bridges exist when it * generates HTML/JS. Each handler runs on the HOST page and its return * value is awaited by the in-iframe caller. * * Keep the surface small and obvious — these are the demo's "app-side * tools" that the sandbox-generated UI can call. */export const openGenUiSandboxFunctions = [  {    name: "evaluateExpression",    description:      "Safely evaluate a basic arithmetic expression on the host page and return the numeric result. " +      "Supports +, -, *, /, parentheses, and decimal numbers. " +      "Use this from inside a calculator or spreadsheet UI.",    parameters: z.object({      expression: z        .string()        .describe("An arithmetic expression, e.g. '12 * (3 + 4.5)'"),    }),    handler: async ({ expression }: { expression: string }) => {      // Evaluate only arithmetic-safe expressions. Reject anything with      // identifiers or suspicious characters so we never exec arbitrary JS.      if (!/^[\d+\-*/().\s]+$/.test(expression)) {        return { ok: false, error: "Unsupported characters in expression." };      }      try {        // eslint-disable-next-line no-new-func        const value = Function(`"use strict"; return (${expression});`)();        if (typeof value !== "number" || !Number.isFinite(value)) {          return { ok: false, error: "Not a finite number." };        }        // eslint-disable-next-line no-console        console.log(          "[open-gen-ui/advanced] evaluateExpression",          expression,          "=",          value,        );        return { ok: true, value };      } catch (err) {        return {          ok: false,          error: err instanceof Error ? err.message : String(err),        };      }    },  },  {    name: "notifyHost",    description:      "Send a short notification message from the sandboxed UI to the host page. " +      "The host logs the message and returns a confirmation object.",    parameters: z.object({      message: z.string().describe("A short status message."),    }),    handler: async ({ message }: { message: string }) => {      // eslint-disable-next-line no-console      console.log("[open-gen-ui/advanced] notifyHost:", message);      return { ok: true, receivedAt: new Date().toISOString(), message };    },  },];

How the sandbox calls you back

Inside the generated UI, the agent writes JS that calls await Websandbox.connection.remote.notifyHost({ message: "hi" }). The call is proxied back to the host page, where your handler runs with the validated args.

Common use cases#

  • Theme toggling — generated UI controls your app's appearance
  • Cart / state management — product cards push items into host state
  • Navigation — generated UI triggers route changes in the host app
  • Data fetching — sandbox asks the host to fetch data the iframe can't reach directly

How streaming works#

The agent generates the tool call's parameters in an order optimized for the user experience:

  1. placeholderMessages — shown immediately while generating
  2. css — all styles first; the preview starts once CSS is complete
  3. html — streams live into the preview as it's generated
  4. jsFunctions — reusable helpers injected before expressions
  5. jsExpressions — executed one by one; the user sees each take effect

The middleware parses the tool-call arguments incrementally and emits activity events as each parameter completes, so the preview updates progressively.

Using CDN libraries#

The sandboxed iframe can load external libraries from CDNs; just include <script> or <link> tags in the generated HTML <head>. Chart.js, D3, Three.js, and any other CDN-hosted library work out of the box.

<head>
  <script src="https://cdn.jsdelivr.net/npm/chart.js"></script>
</head>
<body>
  <canvas id="myChart"></canvas>
</body>