hooks: Implement rebase-only post-rewrite JSON evidence capture

Add post-rewrite hook runtime that captures Git post-rewrite rebase STDIN as a structured JSON artifact under context/tmp/post-rewrite/. Non-rebase methods (amend, other) remain deterministic no-ops.

Include the new post-rewrite hook asset in the canonical SCE-managed required-hook set (setup --hooks, doctor install/repair), and update context documentation to reflect the active rebase capture posture without remap/AgentTraceDb/rebuild behavior.

Touches: cli/src/services/hooks/mod.rs (parser, payload, persistence), cli/assets/hooks/post-rewrite (hook template), cli/src/services/setup/mod.rs (hook asset inventory), cli/src/services/doctor/mod.rs (required hook count), cli/src/services/default_paths.rs (hook path constant), and 13 context/ files.

Co-authored-by: SCE <sce@crocoder.dev>

Author: ivke995

cli/assets/hooks/post-rewrite

@@ -0,0 +1,4 @@
+#!/bin/sh
+set -eu
+
+exec sce hooks post-rewrite "$@"

cli/src/services/default_paths.rs

@@ -337,6 +337,7 @@ pub(crate) mod hook_dir {
     pub const PRE_COMMIT: &str = "pre-commit";
     pub const COMMIT_MSG: &str = "commit-msg";
     pub const POST_COMMIT: &str = "post-commit";
+    pub const POST_REWRITE: &str = "post-rewrite";
 }
 
 #[allow(dead_code)]

cli/src/services/doctor/mod.rs

@@ -30,7 +30,8 @@ use types::{
 
 pub const NAME: &str = "doctor";
 
-pub(super) const REQUIRED_HOOKS: [&str; 3] = ["pre-commit", "commit-msg", "post-commit"];
+pub(super) const REQUIRED_HOOKS: [&str; 4] =
+    ["pre-commit", "commit-msg", "post-commit", "post-rewrite"];
 
 pub type DoctorFormat = OutputFormat;
 

cli/src/services/hooks/mod.rs

@@ -61,6 +61,25 @@ struct DiffTracePayload {
     tool_version: Option<String>,
 }
 
+#[derive(Clone, Debug, Eq, PartialEq, Serialize)]
+struct RewrittenCommitPair {
+    old_oid: String,
+    new_oid: String,
+}
+
+#[derive(Clone, Debug, Eq, PartialEq, Serialize)]
+struct PostRewriteRebasePayload {
+    method: String,
+    capture_timestamp: String,
+    repository_root: String,
+    git_environment: BTreeMap<String, String>,
+    raw_stdin: String,
+    parsed_pairs: Vec<RewrittenCommitPair>,
+    parse_diagnostics: Vec<String>,
+    head_oid: Option<String>,
+    head_patch: Option<String>,
+}
+
 /// Required `sce hooks diff-trace` STDIN payload shape:
 /// `{ sessionID, diff, time, model_id, tool_name, tool_version }`.
 ///
@@ -746,8 +765,112 @@ fn run_post_rewrite_subcommand_with_trace(
     _: &HookSubcommand,
     rewrite_method: &str,
 ) -> Result<String> {
-    let stdin_payload = read_hook_stdin();
-    stdin_payload.and_then(|_| run_post_rewrite_subcommand(repository_root, rewrite_method))
+    let method = rewrite_method.trim();
+
+    if method == "rebase" {
+        let runtime = resolve_runtime_state(repository_root)?;
+        if !runtime.sce_disabled {
+            let stdin_payload = read_hook_stdin()?;
+            return run_post_rewrite_rebase_subcommand(repository_root, method, &stdin_payload);
+        }
+    }
+
+    run_post_rewrite_subcommand(repository_root, method)
+}
+
+fn parse_post_rewrite_stdin(input: &str) -> (Vec<RewrittenCommitPair>, Vec<String>) {
+    let mut pairs = Vec::new();
+    let mut diagnostics = Vec::new();
+
+    for (line_index, line) in input.lines().enumerate() {
+        let trimmed = line.trim();
+        if trimmed.is_empty() {
+            continue;
+        }
+
+        let parts: Vec<&str> = trimmed.split_whitespace().collect();
+        if parts.len() >= 2 {
+            pairs.push(RewrittenCommitPair {
+                old_oid: parts[0].to_string(),
+                new_oid: parts[1].to_string(),
+            });
+            if parts.len() > 2 {
+                diagnostics.push(format!(
+                    "Line {}: unexpected content after commit pair: '{}'",
+                    line_index + 1,
+                    parts[2..].join(" ")
+                ));
+            }
+        } else {
+            diagnostics.push(format!(
+                "Line {}: expected '<old-oid> <new-oid>', got: '{}'",
+                line_index + 1,
+                trimmed
+            ));
+        }
+    }
+
+    (pairs, diagnostics)
+}
+
+fn run_post_rewrite_rebase_subcommand(
+    repository_root: &Path,
+    method: &str,
+    stdin_payload: &str,
+) -> Result<String> {
+    let (parsed_pairs, parse_diagnostics) = parse_post_rewrite_stdin(stdin_payload);
+    let capture_timestamp = Utc::now().to_rfc3339();
+    let git_environment = collect_git_environment();
+
+    let head_oid = run_git_command_capture_stdout(
+        repository_root,
+        &["rev-parse", "HEAD"],
+        "Failed to capture HEAD revision from git for post-rewrite rebase evidence.",
+    )
+    .ok();
+
+    let head_patch = run_git_command_capture_stdout(
+        repository_root,
+        &["show", "--format=", "--patch", "--no-ext-diff", "HEAD"],
+        "Failed to capture HEAD patch from git for post-rewrite rebase evidence.",
+    )
+    .ok();
+
+    let payload = PostRewriteRebasePayload {
+        method: method.to_string(),
+        capture_timestamp,
+        repository_root: repository_root.to_string_lossy().to_string(),
+        git_environment,
+        raw_stdin: stdin_payload.to_string(),
+        parsed_pairs,
+        parse_diagnostics,
+        head_oid,
+        head_patch,
+    };
+
+    let serialized = format!(
+        "{}\n",
+        serde_json::to_string_pretty(&payload)
+            .context("Failed to serialize post-rewrite rebase payload for persistence.")?
+    );
+
+    let artifact_directory = repository_root
+        .join("context")
+        .join("tmp")
+        .join("post-rewrite");
+
+    persist_serialized_trace_payload(
+        &artifact_directory,
+        "post-rewrite-rebase",
+        &serialized,
+        "post-rewrite rebase evidence",
+    )?;
+
+    Ok(format!(
+        "post-rewrite hook captured rebase evidence: {} pairs, {} diagnostic(s), artifact in context/tmp/post-rewrite/.",
+        payload.parsed_pairs.len(),
+        payload.parse_diagnostics.len()
+    ))
 }
 
 fn hook_runtime_invocation_name(subcommand: &HookSubcommand) -> &'static str {
@@ -1172,4 +1295,132 @@ mod tests {
         assert_eq!(output.tool_name, Some(String::from("opencode")));
         assert_eq!(output.tool_version, Some(String::from("1.2.3")));
     }
+
+    // --- post-rewrite rebase capture tests ---
+
+    #[test]
+    fn parse_post_rewrite_stdin_valid_lines() {
+        let input = "abc123 def456\n\n789abc def012\n";
+        let (pairs, diagnostics) = parse_post_rewrite_stdin(input);
+
+        assert_eq!(pairs.len(), 2);
+        assert_eq!(
+            pairs[0],
+            RewrittenCommitPair {
+                old_oid: "abc123".to_string(),
+                new_oid: "def456".to_string(),
+            }
+        );
+        assert_eq!(
+            pairs[1],
+            RewrittenCommitPair {
+                old_oid: "789abc".to_string(),
+                new_oid: "def012".to_string(),
+            }
+        );
+        assert!(
+            diagnostics.is_empty(),
+            "expected no diagnostics for valid input"
+        );
+    }
+
+    #[test]
+    fn parse_post_rewrite_stdin_malformed_lines() {
+        let input = "abc123 def456\nnot-a-pair\n789abc def012\n";
+        let (pairs, diagnostics) = parse_post_rewrite_stdin(input);
+
+        assert_eq!(
+            pairs.len(),
+            2,
+            "valid lines should be parsed despite malformed line"
+        );
+        assert_eq!(
+            diagnostics.len(),
+            1,
+            "malformed line should produce one diagnostic"
+        );
+        assert!(
+            diagnostics[0].contains("not-a-pair"),
+            "diagnostic should reference the malformed content"
+        );
+        assert!(
+            diagnostics[0].contains("Line 2"),
+            "diagnostic should reference the correct line number"
+        );
+    }
+
+    #[test]
+    fn parse_post_rewrite_stdin_empty_input() {
+        let input = "";
+        let (pairs, diagnostics) = parse_post_rewrite_stdin(input);
+
+        assert!(pairs.is_empty(), "empty input should produce no pairs");
+        assert!(
+            diagnostics.is_empty(),
+            "empty input should produce no diagnostics"
+        );
+    }
+
+    #[test]
+    fn parse_post_rewrite_stdin_extra_content() {
+        let input = "abc123 def456 extra trailing content\n";
+        let (pairs, diagnostics) = parse_post_rewrite_stdin(input);
+
+        assert_eq!(
+            pairs.len(),
+            1,
+            "pair should be parsed from line with extra content"
+        );
+        assert_eq!(
+            diagnostics.len(),
+            1,
+            "extra content should produce one diagnostic"
+        );
+        assert!(
+            diagnostics[0].contains("trailing content"),
+            "diagnostic should reference the extra content"
+        );
+    }
+
+    #[test]
+    fn parse_post_rewrite_stdin_blank_lines_skipped() {
+        let input = "abc123 def456\n\n\n789abc def012\n";
+        let (pairs, diagnostics) = parse_post_rewrite_stdin(input);
+
+        assert_eq!(pairs.len(), 2, "blank lines should be skipped");
+        assert!(
+            diagnostics.is_empty(),
+            "blank lines should not produce diagnostics"
+        );
+    }
+
+    #[test]
+    fn post_rewrite_amend_method_returns_no_op() {
+        let result = run_post_rewrite_subcommand(Path::new("/fake/repo"), "amend");
+        assert!(result.is_ok(), "post-rewrite amend should succeed");
+        let output = result.expect("already checked is_ok");
+        assert!(
+            output.contains("no-op runtime state"),
+            "amend method should report no-op: got '{output}'"
+        );
+        assert!(
+            output.contains("rewrite_method='amend'"),
+            "amend method should be included in output: got '{output}'"
+        );
+    }
+
+    #[test]
+    fn post_rewrite_other_method_returns_no_op() {
+        let result = run_post_rewrite_subcommand(Path::new("/fake/repo"), "other");
+        assert!(result.is_ok(), "post-rewrite other should succeed");
+        let output = result.expect("already checked is_ok");
+        assert!(
+            output.contains("no-op runtime state"),
+            "other method should report no-op: got '{output}'"
+        );
+        assert!(
+            output.contains("rewrite_method='other'"),
+            "other method should be included in output: got '{output}'"
+        );
+    }
 }

cli/src/services/setup/mod.rs

@@ -36,6 +36,7 @@ pub enum RequiredHookAsset {
     PreCommit,
     CommitMsg,
     PostCommit,
+    PostRewrite,
 }
 
 include!(concat!(env!("OUT_DIR"), "/setup_embedded_assets.rs"));
@@ -50,6 +51,7 @@ pub fn get_required_hook_asset(hook: RequiredHookAsset) -> Option<&'static Embed
         RequiredHookAsset::PreCommit => default_paths::hook_dir::PRE_COMMIT,
         RequiredHookAsset::CommitMsg => default_paths::hook_dir::COMMIT_MSG,
         RequiredHookAsset::PostCommit => default_paths::hook_dir::POST_COMMIT,
+        RequiredHookAsset::PostRewrite => default_paths::hook_dir::POST_REWRITE,
     };
 
     HOOK_EMBEDDED_ASSETS
@@ -1098,3 +1100,31 @@ where
 pub fn setup_cancelled_text() -> String {
     value("Setup cancelled. No files were changed.")
 }
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn required_hook_assets_contains_four_entries() {
+        let assets: Vec<_> = iter_required_hook_assets().collect();
+        let filenames: Vec<&str> = assets.iter().map(|a| a.relative_path).collect();
+        assert_eq!(assets.len(), 4, "expected exactly 4 required hooks");
+        assert!(
+            filenames.contains(&"post-rewrite"),
+            "post-rewrite must be in the required hook set: {filenames:?}"
+        );
+        assert!(
+            filenames.contains(&"pre-commit"),
+            "pre-commit must be in the required hook set: {filenames:?}"
+        );
+        assert!(
+            filenames.contains(&"commit-msg"),
+            "commit-msg must be in the required hook set: {filenames:?}"
+        );
+        assert!(
+            filenames.contains(&"post-commit"),
+            "post-commit must be in the required hook set: {filenames:?}"
+        );
+    }
+}