feat: P0 live window — hot intents, honest index status, aicx continuity

[div0-space]

Co to jest

P0 z operatorskiego specu "Live window": intents/search w oknie ≤48h nie mogą zależeć od wczorajszego indeksu. Pusty wynik przy stale index to bug, nie „brak intencji".

Cuty w tym PR

Cut 1 — live window w intents (P0.1–2)

• catalog::live_delta(home, user_home, cutoff): sesje na dysku, których cenzus (sessions.jsonl) jeszcze nie zna, + najświeższy live mtime. Cache 30 s (5 lane'ów packa i MCP współdzielą jeden skan).
• collect_intent_files: w trybie live stęchła data z rebuildu nie wycina wiersza, którego żywy mtime jest w oknie (decyduje jeden stat); sesje unadmitted parsowane ad-hoc tym samym readerem katalogowym.
• ClaimHonesty::live_open() (open_session/live_unverified): rekordy live renderują się w osobnej sekcji ## Live Session Intent (unverified, open) — nigdy nie mieszają się z closed timeline.
• CLI: --live / --no-live (okna ≤48h skanują automatycznie); nagłówek raportu:

  live_sessions: 12
  index_lag_hours: 37.5
  mode: hybrid_live
  

• JSON/MCP: completeness.live_sessions + warning.

Cut 2 — uczciwość statusu + fail-closed (P0.4-status, P2.8)

• index status liczy newest_session_updated_at / sessions_newer_than_chunks / chunking_lag_secs z fingerprintów cenzusu (zero-walk). <none>/0 przy widocznej aktywności agentów — koniec z tym kłamstwem.
• Sesje nowsze niż build CURRENT → readiness StaleChunks.
• Pusty intents przy cenzusie starszym niż window/2 i zerze sesji live → stale_context_engine error z hintem, nie cisza.

Cut 3 — continuity pack (P1.5–7)

• aicx continuity show|write: deterministyczny pack NOW / PEERS / DECISIONS (closed) / TASKS / SOURCES / INDEX HEALTH per projekt+okno; --for-inject tnie do budżetu ~6k tokenów; embedder nigdy nie jest na tej ścieżce.
• SessionCatalog::scan_hot_window(cutoff): walk+stat wszystkich kandydatów, bounded-header probe tylko dla plików w oknie. Pełny probe na realnych rootach = 5 min 14 s; hot scan = ~8 s cold, powtórki z cache.
• Enrichment (czytanie treści wszystkich sesji dla cwd/title) poza gorącą ścieżką — atrybucja projektu ze ścieżki, wzbogacona prawda zostaje w cenzusie.

Akceptacja (na żywym domu)

Test	Wynik
aicx intents -p Loctree/aicx -H 12 przy cenzusie 37,5 h starym	niepusty, live_sessions: 12, mode: hybrid_live
aicx continuity show -p Loctree/aicx -H 12	widzi sesje 2 agentów (claude + grok) na żywo, 8,5 s
index status	realny newest_session_updated, pending: 546, staleindex
-p vibecrafted (bare)	error + kandydaci (fail-closed, istniało)
kill embedder	cała ścieżka live/continuity lexical-only, embedder nieużywany

Świadomie poza tym PR (backlog)

• P0.4 watch/daemon (aicx index watch, SLA lexical ≤60 s) + P3 vibecrafted wrapper.
• P0.1-search: live merge w aicx search (intents ma live window; search dalej index-only).
• P2.9: canonical store C6.
• Alias map cwd git remote → bucket.
• Jakość claimów (linie diffów jako „decisions") — osobna oś: ekstraktor, nie mechanika live-window.

🤖 Generated with Claude Code

[gemini-code-assist]

Caution

The consumer version of Gemini Code Assist on GitHub has been sunset. All code review activity has officially ceased.

[Copilot]

Pull request overview

This PR implements the “Live window” P0 behavior for intents (and supporting status surfaces) so hot-window queries (≤48h) don’t silently depend on a stale catalog/index, and adds a new embedder-free “continuity pack” CLI surface for multi-agent session resume.

Changes:

• Add hot-window (“live”) intents mode: admit in-window sessions by live mtime (including unadmitted sessions), stamp them with an open/live honesty frame, and surface live_sessions/index lag in text + JSON/MCP stats.
• Improve index status honesty by deriving newest-session timestamps and staleness signals from catalog fingerprints (zero-walk), including “StaleChunks” readiness.
• Introduce aicx continuity show|write to render a deterministic markdown continuity pack (NOW/PEERS/DECISIONS/TASKS/SOURCES/INDEX HEALTH) built from live-window + census.

Reviewed changes

Copilot reviewed 20 out of 20 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
tests/session_catalog.rs	Adds coverage for hot-window scan probing behavior.
tests/project_filter_strict_surface.rs	Updates test config to include the new live field.
src/wizard/screens/intents.rs	Enables auto-live mode for wizard intents based on hours.
src/session_catalog.rs	Introduces scan_hot_window and HotWindowScan to cheaply walk+stat and selectively probe fresh candidates.
src/overlay.rs	Forces overlay joins to remain census-only (live: false).
src/oracle.rs	Adds live/open-session honesty frame helpers (live_open, is_live_open).
src/mcp.rs	Enables auto-live in MCP intents and updates stats struct init.
src/main/tests.rs	Updates intents stats test fixtures for new live_sessions field and config live.
src/main.rs	Adds --live/--no-live, live-window report header, fail-closed stale-engine error, and continuity subcommand wiring.
src/lib.rs	Exposes new continuity module behind app feature and updates config fixtures.
src/intents/types.rs	Adds live config flag, auto_live rule, and live_sessions in stats/completeness.
src/intents/tests.rs	Adds tests for markdown separation of live vs closed and live-window admission behavior.
src/intents/display.rs	Splits live/open claims into a separate markdown section.
src/intents.rs	Implements live-window collection: mtime-based admission + unadmitted live-delta ingestion + live_sessions counting.
src/continuity.rs	Adds continuity pack collection + deterministic rendering + inject budget truncation.
src/catalog.rs	Adds cached live_delta discovery (unadmitted sessions + newest mtime) and associated tests.
src/api.rs	Updates index status to use catalog fingerprints for newest session mtime, sessions-newer-than-chunks, lag, and readiness.
examples/loctree_consumer.rs	Updates example config to include live: false.
crates/aicx-parser/src/sanitize.rs	Registers continuity as a known CLI subcommand for sanitization.
crates/aicx-parser/src/chunker.rs	Adds constants for the open/live honesty contract.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 41 out of 41 changed files in this pull request and generated no new comments.

Comments suppressed due to low confidence (3)

src/intents/display.rs:505

• When live records exist, the markdown header still prints the canonical honesty line (“every record below is a historical claim …”), which becomes false for the live/open section. Also, in the live case the “Closed Session Intent” section is missing its canonical honesty line, so readers can’t distinguish the contracts at a glance.

    let mut out = String::from("# Intent Timeline\n\n");
    // Honesty frame for the whole surface: every record below is a historical
    // claim bound to its session close, never runtime-verified by aicx.
    out.push_str(&format!(
        "_{}_\n\n",
        ClaimHonesty::canonical().display_line()
    ));

src/main.rs:2728

• aicx wizard now hard-fails when run outside a git checkout with a readable origin (because current_checkout_project()? errors). This makes the TUI unusable in non-git directories unless the user always passes -p, which is a behavior change not implied by the command itself.

                run_catalog_refresh(168, false)?;
                if project.is_none() {
                    project = Some(current_checkout_project()?);
                }

src/wizard/app.rs:24

• The wizard help text labels screen 1 as “sessions”, but the top bar title still renders it as “Corpus”. This inconsistency is user-visible and makes navigation/keymap harder to follow.

    pub fn title(self) -> &'static str {
        match self {
            Self::Corpus => "Corpus",
            Self::Doctor => "Doctor",
            Self::Intents => "Intents",
            Self::Rebuild => "Refresh",
            Self::Search => "Search",