ColimaUI

A native desktop GUI & local CLI control plane for Colima — manage Docker containers, Kubernetes clusters, Linux VMs, security audits, and AI workflows from a fast dark-themed interface.

📥 Download

Grab the latest release from GitHub Releases:

Platform	File	Architecture
macOS (Apple Silicon)	`ColimaUI_*_aarch64.dmg`	M1 / M2 / M3 / M4
macOS (Intel)	`ColimaUI_*_x64.dmg`	x86_64
Linux (Debian/Ubuntu)	`ColimaUI_*_amd64.deb`	x86_64
Linux (Universal)	`ColimaUI_*_amd64.AppImage`	x86_64
Standalone Unified CLI, A2A & MCP (`cui`)	`cui-{aarch64-apple-darwin,x86_64-apple-darwin,x86_64-unknown-linux-gnu}.tar.gz`	macOS ARM64 / Intel, Linux x86_64
Backward-Compatible CLI Alias (`colimaui`)	`colimaui-{aarch64-apple-darwin,x86_64-apple-darwin,x86_64-unknown-linux-gnu}.tar.gz`	macOS ARM64 / Intel, Linux x86_64

macOS Gatekeeper: Pre-built DMGs are currently unsigned. If macOS shows "ColimaUI.app is damaged and can't be opened", open System Settings → Privacy & Security and click Open Anyway, or run xattr -cr /Applications/ColimaUI.app after dragging the app to Applications. This removes the download quarantine flag and is only needed for downloaded builds, not locally compiled apps.

Local API & Dev Browser Mode: Port 11420 (fallback 11420–11429) hosts the Bearer-authenticated REST & SSE API used by the cui CLI and local AI agents via ~/.colima-ui/api_token (0600 permissions; paired with ~/.colima-ui/api_port). Release builds serve no static web frontend on :11420. Browser UI mode is a development surface at http://localhost:1420/#token=<token> printed to stdout by npm run tauri dev.

✨ Features

Pillar	Capabilities
Command Center AI (Inside App)	Multi-provider agent (6 built-in provider modes: `anthropic`, `openai`, `gemini`, `ollama-local`, `ollama-cloud`, and `openai-compatible` covering OpenRouter, Groq, DeepSeek, Mistral, Together AI, LiteLLM, 9router, vLLM, or LM Studio) with 130 symmetric bracket-tag App Event Bus actions (`62 SAFE` + `68` mutating, shared 1-for-1 between `src/lib/aiEventBus.ts` and `src-tauri/src/commands/agent_loop.rs`) across 17 navigable UI pages + `ai-chat` drawer, Internal Skills (`system_prompt.md`, `router.md`, `src-tauri/resources/skills/`), Knowledge Bank RAG + FTS5 Memories, Live UI Bridge (`ui-navigate` & `agent-external-chat-turn`), `<think>` reasoning blocks, 3-tier guided UX*, safe Terminal handoff, and multi-conversation SQLite history
CLI-First `cui` (`v0.3.3`), A2A & 22-Tool MCP (Outside App)	Unified `cui` control plane (with `colimaui` preserved as a backward-compatible alias): 22 subcommands (`< 5ms` over `:11420..11429` when Desktop is open, automatic standalone Rust fallback when Desktop is closed, global `--json` returning `{"ok": true, "data": ...}`), 130-event symmetric A2A/chat execution (`colima-a2a-default-session` + opt-in `--mirror-ui`), Native HTTP A2A (`/.well-known/agent.json`, `/a2a`), and a 22-tool JSON-RPC 2.0 MCP stdio server (`cui mcp` / `colimaui mcp`)
Security & Runtime Auditing	Local Trivy vulnerability scanning with provenance-backed scores, CycloneDX/SPDX SBOM export, configuration rule pack (`L1`–`L3`), local base-image alternatives catalog, Falco runtime event stream, and isolated container Detonation sandbox
Topology, Live Activity & Self-Healing	Interactive Docker & Kubernetes topology graphs, low-overhead Bollard live metrics, alert rules with historical backtesting, self-healing rules with kill switch, Compose Diagnose & AI Autofix (preview/apply/undo), and background TAR/file transfers
100% Free & Open Source (MIT)	All features unlocked out of the box with zero account or sign-in required and strict BYOK local-first privacy

🐳 Docker & Compose

Containers, Images, Volumes & Networks — Full lifecycle CRUD, batch prune, real-time logs, stats, inspect, interactive PTY container shell (docker exec -it), and background image TAR export/import + container file copy (cp)
Compose Diagnose & Autofix — Project start/stop/restart/logs plus YAML schema diagnosis and previewable, undoable autofix patches
Colima Instance & YAML Config — Fast <1ms Colima 0.10.x XDG config reader ($COLIMA_HOME → ~/.colima → ~/.config/colima), diff preview & mtime-guarded colima.yaml apply, resource presets, and idle Resource Saver daemon

☸️ Kubernetes & Linux VMs

Multi-resource K8s browser & CRDs — Pods, Deployments, Services, ConfigMaps, Secrets, StatefulSets, DaemonSets, Jobs, CronJobs, Ingresses, PVCs, Namespaces, Nodes, Events, and dynamic CRD discovery
Operations & Cluster Health — Live SSE pod log streaming, kubectl apply/scale/restart, port forwarding, real PTY pod exec, HTTP service benchmarking (p50/p95/p99), X-Ray diagnostics, and Kind cluster lifecycle
Lima Linux VMs — Template-based VM creation with custom CPU/memory/disk, lifecycle controls, and integrated PTY SSH tabs

📊 Desktop Experience

Real pseudo-terminal (portable-pty + xterm.js) over Tauri IPC for Colima SSH, Lima VMs, running Docker containers (docker exec -it), and Kubernetes pods (kubectl exec)
Environment Provenance & Duality — Read-only diagnostic view comparing launchd vs user shell environment variables alongside resolved Colima, Lima, Docker socket, and Kubeconfig paths
Offline full-text searchable Help Center (articles_fts) and full UI localization across 4 languages (en, ja, vi, zh)

🤖 Dual-Surface CLI-First (`cui` `v0.3.3`), Native A2A & 22-Tool MCP Server

ColimaUI v0.3.3 pairs its in-app Command Center AI (AiChatPanel + agentCore.ts + Internal Skills) with an external CLI-First control plane (cui, with colimaui preserved as a backward-compatible alias), sharing 130 symmetric App Event Bus actions (62 SAFE + 68 mutating) 1-for-1 between src/lib/aiEventBus.ts and src-tauri/src/commands/agent_loop.rs. Every direct cui subcommand executes in < 5ms over localhost HTTP (127.0.0.1:11420..11429) when ColimaUI Desktop is open, and automatically falls back to standalone native Rust execution when Desktop is closed. Passing --json in any position emits {"ok": true, "data": ...} or {"ok": false, "error": "..."}:

# 20 deterministic < 5ms subcommand domains (+ `chat` and `mcp` = 22 subcommands):
# vm | config | presets | container | image | volume | network | compose | k8s | kind |
# lima | security | models | alerts | self-heal | memories (kb) | sessions | ui | events | doctor
cui vm list --json
cui container list --all --json
cui k8s pods -n default --json
cui compose diagnose ./docker-compose.yml --json
cui security scan nginx:latest --json
cui ui navigate kubernetes --section pods --toast "Inspecting failing pods" --json
cui doctor --json

# Multi-turn AI agent chat (isolated to `colima-a2a-default-session` by default; --mirror-ui mirrors into AiChatPanel)
cui chat "Check Colima status and summarize exited containers" --session colima-a2a-default-session --json
cui chat "Restart the exited redis container" --session colima-a2a-default-session --yes --mirror-ui --json
cui "Inspect K8s pod health" --provider openai-compatible --model deepseek-chat --json
# Provider IDs: anthropic | openai | gemini | openai-compatible | ollama-local | ollama-cloud

Native HTTP A2A Protocol (/.well-known/agent.json & /a2a) — Exposes a Bearer-authenticated (~/.colima-ui/api_token, 0600) A2A Agent Card at GET /.well-known/agent.json and JSON-RPC 2.0 endpoint at POST /a2a (message/send, tasks/send, tasks/get, tasks/cancel), keeping GET /api/health as the only public unauthenticated route and isolating automated sessions to colima-a2a-default-session.

Native MCP Stdio Server (cui mcp or colimaui mcp) — Exposes 22 typed JSON-RPC 2.0 MCP tools (colima_list_instances, colima_instance_action, docker_list_containers, docker_container_action, docker_container_logs, docker_list_images, docker_pull_image, docker_list_volumes, docker_list_networks, compose_list_projects, k8s_list_pods, k8s_cluster_status, environment_resolutions, system_diagnostics, colima_ai_ask, security_scan_image, compose_diagnose_autofix, lima_manage, colima_config, kb_memories, chat_sessions, ui_navigate). Automatically proxies via 127.0.0.1:<api_port> when ColimaUI Desktop is open, or executes directly via native fallback when Desktop is closed:

Claude Desktop (claude_desktop_config.json), Cursor (~/.cursor/mcp.json), Antigravity (~/.gemini/antigravity/mcp_config.json), Windsurf (~/.codeium/windsurf/mcp_config.json):
```
{"mcpServers": {"colima-ui": {"command": "cui", "args": ["mcp"]}}}
```

Zed (~/.config/zed/settings.json):

{"context_servers": {"colima-ui": {"command": {"path": "cui", "args": ["mcp"]}}}}

Claude Code:
```
claude mcp add colima-ui -- cui mcp
```

🚀 Getting Started

Prerequisites

Node.js ≥ 22.22.2 (npm) — Frontend build and test suite (.nvmrc pins the line required by jsdom/undici)
Rust (stable) — Tauri backend and CLI binaries
Colima & Docker CLI — Container runtime & client
Optional: kubectl, Kind, Trivy (image scanning), Ollama (local AI models)

Development

git clone https://github.com/vnknowledge2014/colima-ui.git
cd colima-ui
npm install          # Installs dependencies and configures .githooks

# Desktop app (Tauri native window + Vite dev server + Browser mode URL)
npm run tauri dev

# Frontend-only Vite dev server (http://localhost:1420)
npm run dev

Lint & Quality Gates

The repository enforces strict dead-code, token, and i18n checks on every push (.githooks/pre-push, mirrored by .github/workflows/ci.yml):

npm run lint          # ESLint: dead code, unused vars/imports, error-prone patterns
npm run typecheck     # TypeScript (tsc --noEmit)
npm run check         # Svelte type & template check (svelte-check)
npm run check:tokens  # Verify every CSS var() references a defined token
npm run check:i18n    # Verify all 4 locales (en, ja, vi, zh) carry identical keys
npm test              # Unit & component tests (Vitest)
npm run lint:rust     # cargo clippy --all-targets --all-features -- -D warnings

CI additionally runs cargo test --manifest-path src-tauri/Cargo.toml --lib. Rust integration tests requiring a live Docker daemon or Trivy are marked #[ignore]; run them explicitly with cargo test --manifest-path src-tauri/Cargo.toml -- --ignored.

Production Build

# Local macOS .app bundle without an updater signing private key
npx tauri build --bundles app --config '{"bundle":{"createUpdaterArtifacts":false}}'

# Signed release bundle (when TAURI_SIGNING_PRIVATE_KEY is set)
npm run tauri build

# Frontend static bundle → dist/
npm run build

See docs/setup.md for Linux system packages, standalone CLI builds (cui / colimaui), and release signing variables.

🛠️ Tech Stack

Layer	Technology	Version
Frontend	Svelte 5 (Runes)	5.57
Language	TypeScript	6.0
Bundler	Vite	8.x
Desktop	Tauri	2.x
Backend	Rust (Edition 2021)	—
HTTP Server	Axum	0.8
Docker Client	Bollard	0.21
Terminal	xterm.js + portable-pty	6.0 / 0.9
Database	SQLite (rusqlite + FTS5)	0.40
Styling	Vanilla CSS (token design system)	—

📁 Project Structure

colima-ui/
├── src/                          # Frontend (Svelte 5 + TypeScript)
│   ├── App.svelte                # Main shell, sidebar, event listeners
│   ├── main.ts                   # Entry point
│   ├── pages/                    # 20 .svelte page views
│   ├── components/               # Shared & domain UI components (ai/, security/, activity/, compose/, topology/, ...)
│   ├── store/                    # Svelte 5 rune-based state stores
│   ├── lib/                      # Dual-mode API client, Command Center AI core, Event Bus, i18n, utilities
│   ├── styles/                   # Modular CSS token design system
│   └── locales/                  # 4 languages (en, ja, vi, zh)
├── src-tauri/                    # Backend (Rust + Tauri v2)
│   ├── src/
│   │   ├── lib.rs                # App setup, state & Tauri IPC command registration
│   │   ├── api_server.rs         # Axum router & localhost HTTP/SSE server (11420–11429)
│   │   ├── auth.rs               # CSPRNG Bearer token, IPC & 0600 ~/.colima-ui/api_token handoff
│   │   ├── mcp.rs                # Native JSON-RPC 2.0 MCP stdio server (22 typed tools)
│   │   ├── crash.rs              # Redacted panic hook & ~/.colima-ui/crashes report store
│   │   ├── commands/             # Command modules (Docker, K8s, Colima, Security, Metrics, AI, KB, Env, ...)
│   │   ├── routes/               # HTTP & A2A route modules (thin delegation to commands/)
│   │   ├── adapters/             # Unified DevOps CLI adapter traits
│   │   ├── services/             # High-level orchestration layer
│   │   ├── telemetry/            # Opt-in closed-vocabulary telemetry & redaction
│   │   ├── pro/                  # MIT-side Pro sidecar boundary (free by default)
│   │   ├── subscription/         # Local offline entitlement state cache
│   │   ├── bin/                  # Standalone CLI-First, A2A & MCP binaries (cui v0.3.3 + colimaui alias)
│   │   ├── sse.rs                # SSE broadcast & topic subscriber tracking
│   │   ├── error.rs              # Structured ColimaError classification & remediation hints
│   │   ├── redact.rs             # Credential & secret redaction
│   │   ├── validation.rs         # Input & path-containment security checks
│   │   ├── shell_env.rs          # Pre-adoption launchd env capture & non-login user shell adoption
│   │   ├── docker_state.rs       # Bollard debounced UI container state watcher
│   │   ├── docker_events.rs      # Unaggregated Bollard container event stream (Self-Heal)
│   │   ├── instance_reader.rs    # Fast Colima 0.10.x XDG YAML config reader ($COLIMA_HOME / ~/.colima / ~/.config/colima)
│   │   └── terminal_session.rs   # Real PTY session manager (Colima, Lima, docker exec, kubectl exec)
│   └── tauri.conf.json           # Tauri bundle & capability configuration
├── scripts/                      # Git hook installer, token/i18n gates, release script
├── docs/                         # Technical documentation & setup runbook
└── external_skill/               # AI orchestration skill for external host agents

See docs/ for architecture, API, Command Center AI, security, and telemetry documentation.

🔄 CI/CD & Releases

CI (.github/workflows/ci.yml) — ESLint, TypeScript, svelte-check, CSS token & i18n gates, Vitest unit suite, cargo check + cargo clippy (macOS ARM64/x86, Linux), cargo test --lib, and frontend build verification
Release (.github/workflows/release.yml) — Automatically tags main with the next SemVer patch, builds macOS (.dmg), Linux (.deb / .AppImage), and standalone CLI archives (cui-*.tar.gz, colimaui-*.tar.gz), and publishes a GitHub Release whenever a push to main passes CI (gracefully building unsigned installers when TAURI_SIGNING_PRIVATE_KEY is not configured, and automatically enabling signed updater artifacts once configured)

# Optional: prepare a minor/major bump on a feature branch before opening a PR
./scripts/release.sh minor          # 0.3.x → 0.4.0
./scripts/release.sh major          # 0.x.y → 1.0.0

# Optional: cut an explicit pre-release tag on main
./scripts/release.sh 0.3.3-rc.1 --tag

🤝 Contributing

Fork the repository
Create a feature branch (git checkout -b feature/amazing-feature)
Run the quality gates (npm run lint && npm run typecheck && npm run check && npm test && npm run lint:rust)
Commit your changes following Conventional Commits and open a Pull Request

📄 License

MIT License — 100% free and open source. Part of the Colima ecosystem.

Built with Tauri, Svelte, and Rust

Name		Name	Last commit message	Last commit date
.agents/skills/colima-manager		.agents/skills/colima-manager
.githooks		.githooks
.github		.github
.vscode		.vscode
docs		docs
external_skill		external_skill
public		public
scripts		scripts
src-tauri		src-tauri
src		src
tests		tests
.gitignore		.gitignore
.nvmrc		.nvmrc
LICENSE		LICENSE
NOTICE		NOTICE
README.md		README.md
announcements.json		announcements.json
eslint.config.js		eslint.config.js
index.html		index.html
package-lock.json		package-lock.json
package.json		package.json
svelte.config.js		svelte.config.js
tsconfig.json		tsconfig.json
tsconfig.node.json		tsconfig.node.json
vite.config.ts		vite.config.ts
vitest.config.ts		vitest.config.ts

Navigation Menu

Repository navigation

About

Repository files navigation

ColimaUI

📥 Download

✨ Features

🐳 Docker & Compose

☸️ Kubernetes & Linux VMs

📊 Desktop Experience

🤖 Dual-Surface CLI-First (`cui` `v0.3.3`), Native A2A & 22-Tool MCP Server

🚀 Getting Started

Prerequisites

Development

Lint & Quality Gates

Production Build

🛠️ Tech Stack

📁 Project Structure

🔄 CI/CD & Releases

🤝 Contributing

📄 License

About

Releases

Packages

Contributors

Languages

Latest commit

History

Folders and files

Repository files navigation

ColimaUI

📥 Download

✨ Features

🐳 Docker & Compose

☸️ Kubernetes & Linux VMs

📊 Desktop Experience

🤖 Dual-Surface CLI-First (cui v0.3.3), Native A2A & 22-Tool MCP Server

🚀 Getting Started

Prerequisites

Development

Lint & Quality Gates

Production Build

🛠️ Tech Stack

📁 Project Structure

🔄 CI/CD & Releases

🤝 Contributing

📄 License

About

Topics

Resources

Stars

Watchers

Forks

Releases

Packages

Contributors

Languages

🤖 Dual-Surface CLI-First (`cui` `v0.3.3`), Native A2A & 22-Tool MCP Server