
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@taskmapr/ui-overlay
Advanced tools
A React overlay component with built-in chat, UI highlighting, and guided walkthroughs - similar to Cursor for websites
Bring Cursor-style AI assistance to your React applications
A beautiful, fully-featured overlay component that adds AI chat, UI highlighting, and interactive walkthroughs to any React app. Think "Cursor for websites."
npm install @taskmapr/ui-overlay
Important: This repository contains both:
Library code (/src/*) - Exported after npm install ✅
createTaskMaprClient - Client factoryHttpAgentOrchestrator - HTTP-based orchestrator with SSE streamingHighlightProvider, useHighlight - Context and hooksDemo code (/src/demo/*) - Example usage, NOT exported ⚠️
useTaskMapr hook is demo-specific configurationimport { createTaskMaprClient, HighlightProvider } from '@taskmapr/ui-overlay';
// Initialize client once with your configuration
const taskmapr = createTaskMaprClient(
import.meta.env.VITE_AGENT_ENDPOINT,
{
apiKey: import.meta.env.VITE_OPENAI_API_KEY,
framework: 'openai-agents',
model: 'gpt-4o',
overlay: {
title: 'AI Assistant',
showTimestamps: true,
},
initialMessages: [{
id: '1',
role: 'assistant',
content: 'Hello! How can I help you today?',
timestamp: new Date(),
}],
}
);
function App() {
return (
<HighlightProvider>
<h1 id="hero" data-highlight-keywords="title, header">My App</h1>
<section id="features">...</section>
{/* One line - fully self-contained! */}
<taskmapr.Overlay />
</HighlightProvider>
);
}
For most use cases, use the built-in HttpAgentOrchestrator to connect to a TaskMapr backend server with SSE streaming support:
import { createTaskMaprClient, HttpAgentOrchestrator } from '@taskmapr/ui-overlay';
const agentEndpoint = 'http://localhost:8000/api/taskmapr/orchestrate';
const taskmapr = createTaskMaprClient(agentEndpoint, {
orchestrator: {
orchestrator: new HttpAgentOrchestrator(agentEndpoint, {
getAccessToken: () => yourSupabaseToken, // Optional: for auth
timeout: 60000, // Optional: request timeout
}),
includeDomSnapshots: true,
},
overlay: {
title: 'AI Assistant',
placeholder: 'Ask me anything...',
},
});
Features:
text_delta eventsUse this when you want full control over agent orchestration with tools that have knowledge of your repo and workflows.
import { createTaskMaprClient, AgentOrchestrator } from '@taskmapr/ui-overlay';
class MyAgentOrchestrator implements AgentOrchestrator {
async orchestrate(context) {
// context includes: prompt, history, domElements, pageContext
const response = await myAgentSDK.run({
prompt: context.prompt,
history: context.history,
domElements: context.domElements,
tools: [repoKnowledgeTool, workflowTool],
});
return { message: response };
}
}
const taskmapr = createTaskMaprClient('', {
orchestrator: {
orchestrator: new MyAgentOrchestrator(),
includeDomSnapshots: true,
},
});
What your agent receives:
Any element with an id is auto-discoverable:
<h1 id="hero">Title</h1>
<section id="features" data-highlight-keywords="capabilities, list">...</section>
Users can type "show me features" or "hero" in chat to highlight elements.
import { useHighlight } from '@taskmapr/ui-overlay';
function App() {
const { startWalkthrough } = useHighlight();
const tour = () => {
startWalkthrough([
{ query: 'hero', message: 'This is the title', waitForClick: true },
{ query: 'features', message: 'Check out features', waitForClick: true },
], {
onComplete: () => console.log('Done!')
});
};
return <button onClick={tour}>Start Tour</button>;
}
TaskMapr provides several hooks for advanced use cases:
useVisibleHtmlIds - Track visible DOM elements with rich metadatauseVisibleComponents - Track TaskMapr's highlightable componentsuseHighlight - Access highlighting context and walkthrough functionsContributions are welcome! Please feel free to submit a Pull Request.
Full API documentation coming soon. For now, check the TypeScript types in the package for complete API details.
Found a bug? Have a feature request? Open an issue on GitHub.
MIT License - see LICENSE for details.
Built with ❤️ by TaskMapr • Add AI superpowers to your React apps
FAQs
A React overlay component with built-in chat, UI highlighting, and guided walkthroughs - similar to Cursor for websites
The npm package @taskmapr/ui-overlay receives a total of 452 weekly downloads. As such, @taskmapr/ui-overlay popularity was classified as not popular.
We found that @taskmapr/ui-overlay demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.