mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-09-10 10:35:51 +00:00
rcourtman
a1ba51630d
OrchestratorChatService is replaced, not extended: it exposes only ExecuteInvestigationStream (returning a structured OrchestratorInvestigationResult) and ListInvestigationTools. The generic ExecuteStream, SetAutonomousMode, ListAvailableTools, and the AutonomousMode request field are gone, along with OrchestratorCommandExecutor, OrchestratorApprovalStore, and the autonomy/fix-verifier/license dependency interfaces. OrchestratorDeps now carries a REQUIRED ActionBroker and no command/autonomy deps. The pulse investigation adapter is rewritten to drive ExecuteInvestigationStream, injecting proposal/finding/investigation identity from trusted context and feeding a per-org proposal catalog resolved from the tenant-bound action lifecycle (so acceptance and planning validate identically). The retired command-execution, autonomy, and command-shaped approval adapters are deleted; the router wires the broker and catalog factories onto the AI settings handler. The sixth side door is removed: PatrolService.generateRemediation- PlanFromInvestigation and its call, which copied Fix.Commands into an executable enterprise remediation plan, are deleted, pinned closed by a source-audit test. ActionCapabilityParamInfo gains Pattern (mapped by the broker), so the canonical planner's pattern validation survives the cross-repo boundary. L20 readiness assertion RA35 asserts every Patrol-initiated infrastructure mutation originates as a typed proposal and reaches execution only through the canonical action lifecycle, with unsupported proposals failing closed. Contract prose updated across ai-runtime, api-contracts, agent-lifecycle, performance-and-scalability, security-privacy, and storage-recovery. Lands together with the pulse-enterprise orchestrator migration (the replace directive means both heads move as one window).