feat(v0.3.3): unify 130-event bus parity across UI & headless agent, sync internal/external skills by architectureman · Pull Request #98 · vnknowledge2014/colima-ui

architectureman · 2026-11-08T18:07:25Z

Summary

Strict 1-for-1 130-Event App Event Bus Symmetry (62 SAFE + 68 NORMAL/DANGEROUS):
- Frontend (src/lib/aiEventBus.ts + src/lib/aiEvents/{observability,security,colima,compose,config,docker,k8s}.ts): Added all 30 missing backend events (topology-get, activity-feed, alerts-*, self-heal-*, security-*, falco-*, detonation-*, colima-config-*, compose-diagnose, compose-autofix-*, compose-ps/start/stop, k8s-pods, diagnostic-logs), upgraded navigate to applyUiNavigatePayload (17 pages + ai-chat + section + toast), and removed all 4 [SIMULATED] browser fallbacks in favor of runSandboxed.
- Rust Headless / A2A (src-tauri/src/commands/agent_loop.rs): Added build-image, compose-build, compose-pull, and k8s-benchmark (EventSafety::Mutating, allow_actions gated, - flag-injection hardened, 300s bounded timeouts, activity::record).
Internal Skills, External Skills & Documentation (v0.3.3):
- Updated compile-time embedded Internal Skills (src-tauri/resources/system_prompt.md, router.md, skills/{colima_ui,colima,docker,docker_compose,security}/SKILL.md) to 130 symmetric events and 17 pages + ai-chat.
- Synced External Skills (external_skill/SKILL.md, external_skill/references/{capabilities,api_reference}.md, .agents/skills/colima-manager/SKILL.md), README.md, and docs/{ai,api,architecture,backend,frontend,setup}.md to v0.3.3.
macOS Release & Test Hardening:
- Cleared inherited BSD/macOS O_NONBLOCK on accepted UnixStream sockets in adversarial_m1_challenge.rs so 50-thread barrier concurrency stress runs deterministically (10/10 consecutive runs passing).
- Defaulted APPLE_SIGNING_IDENTITY=- on macOS release builds when APPLE_CERTIFICATE is not configured so .app bundles carry sealed ad-hoc signatures on Apple Silicon & Intel.

Verification

Frontend: npm run lint, npm run typecheck, npm run check, npm run check:tokens, npm run check:i18n, npm test (68/68 files, 941/941 tests), npm run build
Rust: cargo clippy --locked --all-targets --all-features -- -D warnings (0 warnings), cargo test --locked --lib --bins --features cli (630 passed), cargo test --locked --tests -- --test-threads=1
Live Desktop ColimaUI.app v0.3.3 + cui 0.3.3 + 22-tool cui mcp + SSE + Native A2A /a2a E2E verified on macOS

…sync internal/external skills - Achieve strict 1-for-1 130-event App Event Bus parity (62 SAFE + 68 NORMAL/DANGEROUS) between Frontend Webview/Browser (src/lib/aiEventBus.ts) and Rust Headless/A2A agent loop (src-tauri/src/commands/agent_loop.rs) - Add observability (topology-get, activity-feed, alerts-*, self-heal-*) and container security (Trivy scan/SBOM/audit/triage, Falco, detonation) event handlers to frontend bus and remove [SIMULATED] browser fallbacks - Add build-image, compose-build, compose-pull, and k8s-benchmark handlers with flag-injection guards, 300s timeouts, and activity recording to Rust agent loop - Sync all Internal Skills (src-tauri/resources/**), External Skills (external_skill/**, .agents/skills/colima-manager/SKILL.md), README.md, and docs/*.md to v0.3.3 and 130 symmetric operations - Fix BSD/macOS inherited O_NONBLOCK socket race in adversarial_m1_challenge concurrency test and enable ad-hoc signing fallback (-) on macOS release builds

ecc-tools · 2026-11-08T18:07:31Z

ECC Tools / Security Evidence

Commit: 9eb90af4facf44109cd4f09717b393d43b823cdf

Security evidence gate passed (success)

No security-sensitive scanner-evidence gap detected.

Mode: enforce

Scanned 35 changed file(s). No missing scanner-evidence signal was detected.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-11-08T18:07:32Z

ECC Tools / PR Risk Taxonomy

Commit: 9eb90af4facf44109cd4f09717b393d43b823cdf

PR taxonomy review recommended (neutral)

Detected 6 PR taxonomy bucket(s): Security Evidence, Harness Drift, Install Manifest Integrity, CI/CD Recommendation, Reference Set Validation, Agent Config Review.

Scanned 35 changed file(s).

Roadmap taxonomy buckets:

Security Evidence

Security-sensitive changes should carry explicit scanner, code-scanning, or focused regression evidence.

Signals:

1 security-sensitive path(s) changed

Paths:

.github/workflows/release.yml

Harness Drift

Harness-facing changes can drift across Claude Code, Codex, OpenCode, and shared adapter surfaces.

Signals:

Harness config changes may ship without compatibility evidence
1 harness-facing path(s) changed

Paths:

.agents/skills/colima-manager/SKILL.md

Install Manifest Integrity

Install manifests, plugin metadata, and shipped skills should stay synchronized with user-facing setup guidance.

Signals:

2 install or manifest path(s) changed

Paths:

package-lock.json
package.json

CI/CD Recommendation

CI, dependency, coverage, and contract signals should be routed into follow-up checks or verification work.

Signals:

Runtime config changes may ship without example or template updates
CLI changes may ship without shell or end-to-end coverage
CI workflow changes may ship without failure-mode evidence
4 CI or workflow path(s) changed

Paths:

.github/workflows/release.yml
package-lock.json
package.json
src/lib/aiEvents/config.test.ts
src-tauri/Cargo.toml
src-tauri/src/commands/agent_loop.rs
src-tauri/tauri.conf.json
src-tauri/tests/adversarial_m1_challenge.rs

Reference Set Validation

AI, analyzer, skill, agent, command, and harness guidance changes should be compared against a maintained eval, golden trace, benchmark, or reference set.

Signals:

AI or harness analysis changes may ship without reference-set validation
1 reference-sensitive path(s) changed

Paths:

.agents/skills/colima-manager/SKILL.md

Agent Config Review

Agent, command, skill, MCP, and local instruction changes should be reviewed as executable agent configuration.

Signals:

1 agent-config path(s) changed

Paths:

.agents/skills/colima-manager/SKILL.md

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-11-08T18:07:33Z

ECC Tools / Reference Set Readiness

Commit: 9eb90af4facf44109cd4f09717b393d43b823cdf

Reference set readiness gaps detected (neutral)

Reference evidence present for 2/7 areas (29%) across 35 changed file(s).

This check is based on files changed in this PR. Repository-level readiness is still reported by /ecc-tools analyze comments and generated manifests.

Area	Status	Evidence / Next Step
Deep analyzer corpus	Missing	Add analyzer fixture, golden, benchmark, or reference-set files that can catch analyzer regressions.
RAG/evaluator comparison	Missing	Add retrieval or evaluator reference-set comparison fixtures with expected ranking behavior.
PR salvage/review corpus	Missing	Add stale-PR, review-thread, reopen-flow, or salvage reference cases for queue cleanup automation.
Discussion triage corpus	Missing	Add public discussion triage fixtures, golden cases, or reference sets for informational, answered, and no-response classifications.
Harness compatibility	Present	`.agents/skills/colima-manager/SKILL.md`
Security evidence	Present	`src-tauri/resources/skills/security/SKILL.md`, `src/lib/aiEvents/security.ts`
CI failure-mode evidence	Missing	Add captured CI failure logs, dry-run fixtures, or troubleshooting docs for common workflow failure modes.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-11-08T18:07:35Z

ECC Tools / Hosted Promotion Readiness

Commit: 9eb90af4facf44109cd4f09717b393d43b823cdf

Hosted promotion readiness passed (success)

No hosted promotion evidence gaps detected across 35 changed file(s); 0 corpus scenarios had matching evidence.

This check compares PR file changes against the evaluator/RAG promotion corpus in src/analyzers/fixtures/evaluator-rag-corpus.ts.
Hosted output scoring inspected 0 completed cached hosted job results.

No evaluator corpus scenarios matched this PR.

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-11-08T18:07:37Z

ECC Tools / PR Config Audit

Commit: 9eb90af4facf44109cd4f09717b393d43b823cdf

Changed-config issues require attention (action_required)

Scanned 2 config file(s) present at this commit across 2 changed config path(s) and found 4 issue(s).

Changed config files:

.agents/skills/colima-manager/SKILL.md
.github/workflows/release.yml

Top findings:

[high] Environment variable with secret exposed (.github/workflows/release.yml)
[high] Environment variable with secret exposed (.github/workflows/release.yml)
[high] Environment variable with secret exposed (.github/workflows/release.yml)
[high] Environment variable with secret exposed (.github/workflows/release.yml)

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

ecc-tools · 2026-11-08T18:07:39Z

ECC Tools / PR Harness Audit

Commit: 9eb90af4facf44109cd4f09717b393d43b823cdf

Harness warnings detected (neutral)

Scanned 2 changed config file(s) and found 1 harness issue(s).

[medium] ECC manifest missing (.agents/skills/colima-manager/SKILL.md)

Check publication was denied or unavailable. An app owner must enable Checks: read and write, and the installation owner must approve the updated permission.

architectureman merged commit 85214f8 into main Nov 8, 2026
6 checks passed

architectureman deleted the feat/v0.3.3-full-parity-and-skills branch November 8, 2026 18:18

Navigation Menu

Repository navigation

feat(v0.3.3): unify 130-event bus parity across UI & headless agent, sync internal/external skills - #98

feat(v0.3.3): unify 130-event bus parity across UI & headless agent, sync internal/external skills#98
architectureman merged 1 commit into
mainfrom
feat/v0.3.3-full-parity-and-skills

architectureman commented Nov 8, 2026

Uh oh!

ecc-tools Bot commented Nov 8, 2026

Uh oh!

ecc-tools Bot commented Nov 8, 2026

Uh oh!

ecc-tools Bot commented Nov 8, 2026

Uh oh!

ecc-tools Bot commented Nov 8, 2026

Uh oh!

ecc-tools Bot commented Nov 8, 2026

Uh oh!

ecc-tools Bot commented Nov 8, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

architectureman commented Nov 8, 2026

Summary

Verification

Uh oh!

ecc-tools Bot commented Nov 8, 2026

ECC Tools / Security Evidence

Uh oh!

ecc-tools Bot commented Nov 8, 2026

ECC Tools / PR Risk Taxonomy

Security Evidence

Harness Drift

Install Manifest Integrity

CI/CD Recommendation

Reference Set Validation

Agent Config Review

Uh oh!

ecc-tools Bot commented Nov 8, 2026

ECC Tools / Reference Set Readiness

Uh oh!

ecc-tools Bot commented Nov 8, 2026

ECC Tools / Hosted Promotion Readiness

Uh oh!

ecc-tools Bot commented Nov 8, 2026

ECC Tools / PR Config Audit

Uh oh!

ecc-tools Bot commented Nov 8, 2026

ECC Tools / PR Harness Audit

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant