fix: hide context exception details (#111)

tests/test_context_timeout.py

@@ -34,6 +34,27 @@ async def test_context_returns_fallback_when_gitea_exceeds_deadline(monkeypatch)
     assert cancelled.is_set()
 
 
+@pytest.mark.anyio
+async def test_context_hides_upstream_exception_details(monkeypatch):
+    async def failing_user():
+        raise RuntimeError("connection refused by secret.internal.example")
+
+    async def empty_collection():
+        return []
+
+    monkeypatch.setattr(main, "current_user", failing_user)
+    monkeypatch.setattr(main, "repos", empty_collection)
+    monkeypatch.setattr(main, "issues", empty_collection)
+    monkeypatch.setattr(main, "pull_requests", empty_collection)
+
+    response = await main.context()
+    body = bytes(response.body)
+    context = json.loads(body)
+
+    assert context["error"] == "Gitea context is temporarily unavailable"
+    assert b"secret.internal.example" not in body
+
+
 @pytest.mark.anyio
 async def test_context_normalizes_nullable_issue_collections(monkeypatch):
     async def user():