fix: pin managed hooks to installed CLI

[404-Page-Found]

Summary

• make the captured cliPath authoritative in generated managed hooks
• fall back to PATH-based commit-echo resolution only when the captured CLI is unavailable
• add an end-to-end regression test covering PATH conflicts and the fallback

Fixes #308

[coderabbitai]

Warning

Review limit reached

Next included review available in 1 minute.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

This review ran on the open-source allowance, not this organization's plan, because the pull request author doesn't have an assigned seat. Waiting won't change this — ask an organization admin to assign them a seat, or add seats in Billing if every seat is already assigned, then retry.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: cd32e343-f741-4f16-9df7-659ae88866d7

📥 Commits

Reviewing files that changed from the base of the PR and between 65718e4 and edeabce.

📒 Files selected for processing (2)

• src/git/hook.ts
• tests/hook.test.mjs

---

_{Comment @coderabbitai help to get the list of available commands.}

[cubic-dev-ai]

All reported issues were addressed across 2 files

<sub>Shadow auto-approve: would not auto-approve because issues were found.

Re-trigger cubic</sub>

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[cubic-dev-ai]

0 issues found across 1 file (changes from recent commits).

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

<sub>Shadow auto-approve: would auto-approve. Bug fix making generated managed hooks prefer the captured CLI path over PATH-based commit-echo, adding an end-to-end regression test and an explicit fallback when that CLI is missing. Bounded behavior fix; no rollout, policy, schema, or contract expansion.

Re-trigger cubic</sub>