ArrowJS

Agent-enablingOpen Source

Agent-era UI framework with WASM sandboxes for safe generated interfaces

Overview

About ArrowJS

This summary uses submitted and public product material. Only source-mapped claims are documentation reviewed.

ArrowJS is a tiny UI framework built for coding agents and agent-generated interfaces. The current project emphasizes direct DOM rendering, no-build-step core usage, and WebAssembly sandboxes that isolate generated component logic without forcing the UI into iframes or pre-defined component sets.

Features

Tiny reactive UI runtime built around JavaScript modules, template literals, and the DOM
No-build-step core usage plus a larger framework stack for SSR, hydration, and async components
QuickJS and WebAssembly sandbox runtime for executing Arrow code outside the host window realm
Type-safe component model designed to stay legible to coding agents
Tooling for playground use, API docs, framework packages, and agent setup flows

So agents can…

Generate inline interfaces that render directly into an app without inventing a full frontend stack
Run agent-produced UI logic inside sandboxes while keeping the host environment safer
Ship lightweight interactive surfaces quickly, then scale up to SSR and hydration when needed

Listing decision

Why ArrowJS is listed

ArrowJS provides UI primitives, rendering packages, sandboxing, and an agent skill that help a separate coding agent generate application interfaces; it enables agent-authored UI rather than operating as an autonomous agent.

Before you choose

Fit and limitations

Best for

Teams that want a small reactive DOM framework legible to coding agents, with an upgrade path from no-build browser use to SSR, hydration, and isolated execution of generated Arrow components.

Known limitations

A sandbox source bundle must contain exactly one main.ts or main.js entry file. Host bridge modules deliberately expose selected host functions to sandboxed code, so integrators still need to keep that bridge narrow and trusted.

Not yet verified

The first-party security model explains the isolation boundary, but this review did not find or validate an independent security audit or benchmark of generated-code containment.

Sources

Sources and verification

First-party unless marked otherwise. Each link supports only its adjacent claim.

ArrowJS repository — framework packages and agent tooling
The maintained repository documents the reactive core, framework, SSR, hydration, QuickJS/WASM sandbox, Vite integration, project scaffolder, and agent skill.
official repository · accessed Sep 3, 2026
ArrowJS API reference — SSR, hydration, and sandbox security model
The API reference defines server rendering and hydration flows and says sandboxed code runs in QuickJS/WASM while the host mounts trusted DOM and forwards sanitized events.
official documentation · accessed Sep 3, 2026
ArrowJS license — MIT
The ArrowJS repository is published under the MIT License.
official license · accessed Sep 3, 2026