Cli

cli/Cargo.toml

@@ -14,7 +14,13 @@ categories = ["command-line-utilities", "development-tools"]
 
 [dependencies]
 anyhow = "1"
+hmac = "0.12"
 inquire = "0.7"
 lexopt = "0.3"
+serde_json = "1"
+sha2 = "0.10"
 tokio = { version = "1", default-features = false, features = ["rt"] }
 turso = "0"
+
+[dev-dependencies]
+jsonschema = "0.33"

cli/README.md

@@ -1,19 +1,23 @@
-# sce CLI (placeholder foundation)
+# sce CLI (foundation)
 
 This crate provides the early command-surface scaffold for the Shared Context
 Engineering CLI (`sce`).
 
-Current scope is intentionally narrow: deterministic command dispatch, an
-implemented repository `setup` flow, and explicit placeholders for commands
-that are still deferred.
+Current scope is intentionally narrow: deterministic command dispatch,
+implemented repository `setup` flows (including hook installation),
+implemented local rollout health checks via `doctor`, production local
+`hooks` runtime execution, and explicit placeholders for commands that are
+still deferred.
 
 ## Quick start
 
 ```bash
 cargo run --manifest-path cli/Cargo.toml -- --help
 cargo run --manifest-path cli/Cargo.toml -- setup
+cargo run --manifest-path cli/Cargo.toml -- doctor
 cargo run --manifest-path cli/Cargo.toml -- mcp
-cargo run --manifest-path cli/Cargo.toml -- hooks
+cargo run --manifest-path cli/Cargo.toml -- hooks pre-commit
+cargo run --manifest-path cli/Cargo.toml -- hooks commit-msg .git/COMMIT_EDITMSG
 cargo run --manifest-path cli/Cargo.toml -- sync
 ```
 
@@ -56,26 +60,43 @@ Crates.io is prepared but intentionally disabled in this phase.
     `config/.claude/**`
   - installation writes to repository-root `.opencode/` and/or `.claude/`
     using backup-and-replace safety with rollback on swap failures
+  - required local hooks can be installed with `sce setup --hooks` (optionally
+    `--repo <path>`) with deterministic per-hook
+    `installed`/`updated`/`skipped` outcomes
+- `doctor` is implemented and validates hook rollout readiness:
+  - detects effective hooks directory for default, per-repo `core.hooksPath`,
+    and global `core.hooksPath` installs
+  - validates required hooks (`pre-commit`, `commit-msg`, `post-commit`) for
+    presence and executable permissions
+  - reports actionable diagnostics for missing or misconfigured hooks
 - `mcp` is a placeholder for future file-cache tooling contracts
   (`cache-put`/`cache-get`).
-- `hooks` is a placeholder for future git hook event and generated-region
-  tracking integration.
+- `hooks` is implemented for local Git hook execution:
+  - `sce hooks pre-commit` captures staged-only checkpoint attribution
+  - `sce hooks commit-msg <message-file>` enforces canonical co-author trailer
+    policy when runtime gates pass
+  - `sce hooks post-commit` finalizes Agent Trace records and performs
+    notes+DB persistence with retry fallback
+  - `sce hooks post-rewrite <amend|rebase|other>` ingests rewrite pairs from
+    STDIN, applies rewrite remap + rewritten-trace finalization, and runs
+    bounded retry replay
 - `sync` is a placeholder that runs a local Turso smoke check, then reports a
   deferred cloud-sync plan.
 
 ## Safety and limitations
 
-- `mcp`, `hooks`, and `sync` remain placeholders and do not perform MCP
-  transport, hook installation, or cloud sync.
+- `mcp` and `sync` remain placeholders and do not perform MCP transport or
+  cloud sync.
 - `sync` only validates local adapter wiring and does not require remote auth.
-- This crate is scaffolding for incremental delivery and should not be treated
-  as production-ready workflow automation.
+- Hosted reconciliation intake/mapping paths are not wired to public CLI
+  commands yet.
 
 ## Near-term roadmap mapping
 
 - Repository setup automation seam: `cli/src/services/setup.rs`
+- Hook install health validation seam: `cli/src/services/doctor.rs`
 - MCP file-cache seam: `cli/src/services/mcp.rs`
-- Hook event and generated-region seam: `cli/src/services/hooks.rs`
+- Local hook runtime + persistence seam: `cli/src/services/hooks.rs`
 - Cloud sync seam + local Turso gate: `cli/src/services/sync.rs`
 - Command catalog and placeholder status: `cli/src/command_surface.rs`
 

cli/assets/hooks/commit-msg

@@ -0,0 +1,4 @@
+#!/bin/sh
+set -eu
+
+exec sce hooks commit-msg "$@"

cli/assets/hooks/post-commit

@@ -0,0 +1,4 @@
+#!/bin/sh
+set -eu
+
+exec sce hooks post-commit "$@"

cli/assets/hooks/pre-commit

@@ -0,0 +1,4 @@
+#!/bin/sh
+set -eu
+
+exec sce hooks pre-commit "$@"

cli/build.rs

@@ -15,6 +15,11 @@ const TARGETS: &[TargetSpec] = &[
         relative_root: "config/.claude",
         include_prefix: "/../config/.claude/",
     },
+    TargetSpec {
+        const_name: "HOOK_EMBEDDED_ASSETS",
+        relative_root: "cli/assets/hooks",
+        include_prefix: "/assets/hooks/",
+    },
 ];
 
 struct TargetSpec {

cli/flake.nix

@@ -29,7 +29,10 @@
         };
 
         rustToolchain = pkgs.rust-bin.stable.latest.default.override {
-          extensions = [ "rustfmt" ];
+          extensions = [
+            "rustfmt"
+            "clippy"
+          ];
         };
 
         rustPlatform = pkgs.makeRustPlatform {
@@ -65,6 +68,18 @@
           };
         };
 
+        apps.clippy = {
+          type = "app";
+          program = toString (
+            pkgs.writeShellScript "sce-clippy" ''
+              exec ${rustToolchain}/bin/cargo clippy --manifest-path cli/Cargo.toml --all-targets --all-features "$@"
+            ''
+          );
+          meta = {
+            description = "Run clippy for the sce CLI crate";
+          };
+        };
+
         checks.cli-setup-command-surface = rustPlatform.buildRustPackage {
           pname = "sce-cli-setup-command-surface-check";
           version = "0.1.0";
@@ -99,6 +114,38 @@
             runHook postInstall
           '';
         };
+
+        checks.cli-clippy = rustPlatform.buildRustPackage {
+          pname = "sce-cli-clippy-check";
+          version = "0.1.0";
+          inherit src;
+          sourceRoot = "source/cli";
+
+          cargoLock = {
+            lockFile = ../cli/Cargo.lock;
+          };
+
+          nativeBuildInputs = [ rustToolchain ];
+
+          buildPhase = ''
+            runHook preBuild
+            runHook postBuild
+          '';
+
+          checkPhase = ''
+            runHook preCheck
+
+            cargo clippy --all-targets --all-features
+
+            runHook postCheck
+          '';
+
+          installPhase = ''
+            runHook preInstall
+            mkdir -p "$out"
+            runHook postInstall
+          '';
+        };
       }
     );
 }