[architectureman]

Summary

Upgrades ColimaUI to v0.3.0 with a complete Dual-Surface Agent Architecture unifying in-app AI Chat and external CLI/MCP/A2A automation:

1. CLI-First Unified cui (v0.3.0) & colimaui Alias

• 22 first-class subcommands: 20 deterministic < 5ms direct domains (vm, config, presets, container, image, volume, network, compose, k8s, kind, lima, security, models, alerts, self-heal, memories, sessions, ui, events, doctor) + chat + mcp (preserving system, status, and free-form cui "<prompt>" shorthand).
• Dual-Transport Engine: Proxies over authenticated localhost HTTP (127.0.0.1:11420..11429 via 0600 ~/.colima-ui/api_token) when ColimaUI Desktop is open, and automatically falls back to standalone native Rust execution (colima_ui_lib) when ColimaUI Desktop is closed.
• Global --json Envelope: Accepted in any flag position and always emits clean {"ok": true, "data": ...} / {"ok": false, "error": "..."} JSON.

2. Full Headless Agent Parity & Compile-Time Embedded Skills

• Embeds all 74 Markdown internal skills, router, references, and localized KB articles in embedded_resources.rs via include_str! so standalone cui binaries carry 100% of internal domain skills without needing .app bundle files.
• Upgrades run_headless_agent_detailed with 10-turn conversation memory, Knowledge Bank RAG + FTS5 persistent memories, full App Event Bus parity (62 safe queries + 64 allow_actions-gated mutations), [READ_REFERENCE], [QUERY_STATE], [DIAGNOSE], [RUN]/[RUN_APPROVE] shell sandbox, [LEARN], and [NAVIGATE].

3. A2A Session Isolation & Live UI Remote Control Bridge

• Isolates automated CLI/MCP/A2A sessions on colima-a2a-default-session (filtered out of personal UI threads by default) with opt-in --mirror-ui / "mirror_ui": true live Desktop mirroring via agent-external-chat-turn.
• Adds POST /api/ui/navigate, GET /api/ui/state, and uiBridge.ts Tauri/SSE listeners for instant remote page/tab navigation and toast notifications.

4. Native HTTP A2A v0.2.1 Protocol & 22-Tool MCP Server

• Exposes GET /.well-known/agent.json and POST /a2a JSON-RPC 2.0 (message/send, tasks/send, tasks/get, tasks/cancel) strictly behind localhost Bearer auth (GET /api/health remains the sole unauthenticated endpoint).
• Expands cui mcp from 15 to 22 strongly-typed MCP tools (+ security_scan_image, compose_diagnose_autofix, lima_manage, colima_config, kb_memories, chat_sessions, ui_navigate).

Verification

• Frontend: eslint (0 warnings), tsc, svelte-check (0 warnings/0 errors), check:tokens, check:i18n, vitest (68/68 files, 939/939 tests), vite build
• Rust: cargo clippy --locked --all-targets --all-features -- -D warnings (0 warnings), cargo test --locked --lib --bins --features cli (632 unit tests), cargo test --locked --tests -- --test-threads=1

[ecc-tools]

ECC Tools / Security Evidence

Commit: 489e4297cd4353c9a0f35c0e4edb2090a9456a6e

Security scanner evidence required (action_required)

Detected 1 security-sensitive predictive risk signal(s) without scanner evidence.

Mode: enforce

Findings:

• Security-sensitive changes may ship without scanner evidence: The PR touches billing, secrets, auth, webhooks, agent, or CI-sensitive surfaces without adding obvious security scanner, code scanning, or security-focused validation evidence. (1 security-sensitive paths changed; 0 security scanner or security-focused validation artifacts changed)

Touched security-sensitive paths:

• src-tauri/src/mcp.rs

Expected evidence:

• Security scanner, code scanning, secret scanning, dependency/security review, or focused security regression output.
• SARIF/code-scanning upload or equivalent pass/fail gate for the changed surface.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / PR Risk Taxonomy

Commit: 489e4297cd4353c9a0f35c0e4edb2090a9456a6e

PR taxonomy review recommended (neutral)

Detected 6 PR taxonomy bucket(s): Security Evidence, Harness Drift, Install Manifest Integrity, CI/CD Recommendation, Reference Set Validation, Agent Config Review.

Scanned 44 changed file(s).

Roadmap taxonomy buckets:

Security Evidence

Security-sensitive changes should carry explicit scanner, code-scanning, or focused regression evidence.

Signals:

• Security-sensitive changes may ship without scanner evidence
• 1 security-sensitive path(s) changed

Paths:

• .github/workflows/release.yml

Harness Drift

Harness-facing changes can drift across Claude Code, Codex, OpenCode, and shared adapter surfaces.

Signals:

• Harness config changes may ship without compatibility evidence
• 1 harness-facing path(s) changed

Paths:

• .agents/skills/colima-manager/SKILL.md

Install Manifest Integrity

Install manifests, plugin metadata, and shipped skills should stay synchronized with user-facing setup guidance.

Signals:

• 2 install or manifest path(s) changed

Paths:

• package-lock.json
• package.json

CI/CD Recommendation

CI, dependency, coverage, and contract signals should be routed into follow-up checks or verification work.

Signals:

• API contract changes may ship without integration coverage
• API implementation changes may ship without contract artifact updates
• Runtime config changes may ship without example or template updates
• User-facing UI changes may ship without browser coverage
• CLI changes may ship without shell or end-to-end coverage
• CI workflow changes may ship without failure-mode evidence
• 4 CI or workflow path(s) changed

Paths:

• .github/workflows/release.yml
• package-lock.json
• package.json
• src/lib/uiBridge.test.ts
• src-tauri/Cargo.toml
• src-tauri/src/a2a.rs
• src-tauri/src/api_server.rs
• src-tauri/src/bin/cli.rs

Reference Set Validation

AI, analyzer, skill, agent, command, and harness guidance changes should be compared against a maintained eval, golden trace, benchmark, or reference set.

Signals:

• AI or harness analysis changes may ship without reference-set validation
• 1 reference-sensitive path(s) changed

Paths:

• .agents/skills/colima-manager/SKILL.md

Agent Config Review

Agent, command, skill, MCP, and local instruction changes should be reviewed as executable agent configuration.

Signals:

• 1 agent-config path(s) changed

Paths:

• .agents/skills/colima-manager/SKILL.md

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / Reference Set Readiness

Commit: 489e4297cd4353c9a0f35c0e4edb2090a9456a6e

Reference set readiness gaps detected (neutral)

Reference evidence present for 1/7 areas (14%) across 44 changed file(s).

This check is based on files changed in this PR. Repository-level readiness is still reported by /ecc-tools analyze comments and generated manifests.

Area	Status	Evidence / Next Step
Deep analyzer corpus	Missing	Add analyzer fixture, golden, benchmark, or reference-set files that can catch analyzer regressions.
RAG/evaluator comparison	Missing	Add retrieval or evaluator reference-set comparison fixtures with expected ranking behavior.
PR salvage/review corpus	Missing	Add stale-PR, review-thread, reopen-flow, or salvage reference cases for queue cleanup automation.
Discussion triage corpus	Missing	Add public discussion triage fixtures, golden cases, or reference sets for informational, answered, and no-response classifications.
Harness compatibility	Present	.agents/skills/colima-manager/SKILL.md
Security evidence	Missing	Attach security evidence such as SBOMs, SARIF, audit reports, or AgentShield evidence packs.
CI failure-mode evidence	Missing	Add captured CI failure logs, dry-run fixtures, or troubleshooting docs for common workflow failure modes.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / Hosted Promotion Readiness

Commit: 489e4297cd4353c9a0f35c0e4edb2090a9456a6e

Hosted promotion readiness passed (success)

No hosted promotion evidence gaps detected across 44 changed file(s); 0 corpus scenarios had matching evidence.

This check compares PR file changes against the evaluator/RAG promotion corpus in src/analyzers/fixtures/evaluator-rag-corpus.ts.
Hosted output scoring inspected 0 completed cached hosted job results.

No evaluator corpus scenarios matched this PR.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / PR Config Audit

Commit: 489e4297cd4353c9a0f35c0e4edb2090a9456a6e

Changed-config issues require attention (action_required)

Scanned 2 config file(s) present at this commit across 2 changed config path(s) and found 4 issue(s).

Changed config files:

• .agents/skills/colima-manager/SKILL.md
• .github/workflows/release.yml

Top findings:

• [high] Environment variable with secret exposed (.github/workflows/release.yml)
• [high] Environment variable with secret exposed (.github/workflows/release.yml)
• [high] Environment variable with secret exposed (.github/workflows/release.yml)
• [high] Environment variable with secret exposed (.github/workflows/release.yml)

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

[ecc-tools]

ECC Tools / PR Harness Audit

Commit: 489e4297cd4353c9a0f35c0e4edb2090a9456a6e

Harness warnings detected (neutral)

Scanned 2 changed config file(s) and found 1 harness issue(s).

• [medium] ECC manifest missing (.agents/skills/colima-manager/SKILL.md)

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.