fix: bound prepare-commit-msg hook latency (#271)

[404-Page-Found]

Closes #271

What changed

• Adds a 5-second overall deadline to the prepare-commit-msg hook.
• Propagates cancellation into provider requests so timed-out LLM calls are aborted.
• Keeps provider request timeouts active through response-body consumption.
• Adds regressions for stalled hook generation and stalled response bodies.

The hook leaves the existing commit message unchanged on timeout and clears pending hook state.

[coderabbitai]

Warning

Review limit reached

Next included review available in 8 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

This review ran on the open-source allowance, not this organization's plan, because the pull request author doesn't have an assigned seat. Waiting won't change this — ask an organization admin to assign them a seat, or add seats in Billing if every seat is already assigned, then retry.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 5a6c83a5-536e-4e8a-9cf5-6ab5a086f64b

📥 Commits

Reviewing files that changed from the base of the PR and between 335fda8 and c8bf5c8.

📒 Files selected for processing (10)

• src/git/diff.ts
• src/git/hook.ts
• src/llm/client.ts
• src/providers/anthropic.ts
• src/providers/cohere.ts
• src/providers/openai-compatible.ts
• src/providers/request.ts
• src/types.ts
• tests/hook.test.mjs
• tests/provider-timeout.test.mjs

---

_{Comment @coderabbitai help to get the list of available commands.}

[cubic-dev-ai]

All reported issues were addressed across 9 files

<sub>Shadow auto-approve: would not auto-approve because issues were found.

Re-trigger cubic</sub>

[cubic-dev-ai]

All reported issues were addressed across 4 files (changes from recent commits).

<sub>Shadow auto-approve: would not auto-approve because issues were found.
Tip: Review your code locally with the cubic CLI to iterate faster.

Re-trigger cubic</sub>

[sonarqubecloud]

Quality Gate passed

Issues
2 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[cubic-dev-ai]

0 issues found across 5 files (changes from recent commits).

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

<sub>Shadow auto-approve: would require human review. Adds a 5s deadline to the prepare-commit-msg hook and keeps provider timeouts active through body consumption; the timeout values and fallback behavior are operational tradeoffs needing human sign-off.

Re-trigger cubic</sub>