Vendo
Vendo is an embedded AI agent that B2B products add so their own customers can ask for new views or automations, which the agent builds live from the product's existing API and renders inside a sandboxed, brand-matching surface without touching the product's source code.
Vendo acts through a host product's own API as the signed-in user, then renders the interface it generates inside a sandboxed, brand-native surface, so customers can compose views, automations and small features without a developer changing the underlying application. It extracts a product's API into tools the agent can call, then generates views from a format-tagged UI document; generated components run inside an iframe with a strict content-security policy, escalating to a sandboxed server only when a task needs it.
A guard layer sits at one execution point for policy, approvals, grants and circuit breakers, so app-generated code only reaches host tools through a controlled proxy, and every automation is gated by approval. It runs any AI SDK-compatible language model, and stores its zero-config data in PGlite, with the same schema on Postgres in production.
It is written in TypeScript and installs as an npm package with a companion CLI.