fix: bound context fallback latency (#30)

frontend/index.html

@@ -52,6 +52,8 @@ textarea { resize: vertical; min-height: 120px; }
 .dot { width: 8px; height: 8px; border-radius: 50%; background: #22c55e; box-shadow: 0 0 8px #22c55e; }
 .widget { border: 1px solid #1b2d45; border-radius: 12px; padding: 10px; background: linear-gradient(180deg,#0f1d33,#0b1526); }
 .widget h3 { margin: 4px 0 8px; font-size: 13px; color: #7aa1c9; }
+.event { padding: 8px 0; border-bottom: 1px solid #1b2d45; }
+.event:last-child { border-bottom: 0; }
 .obi { width:14px; height:14px; background: url('data:image/svg+xml;utf8,<svg xmlns=%22http://www.w3.org/2000/svg%22 viewBox=%220 0 24 24%22><rect width=%2224%22 height=%2224%22 rx=%226%22 fill=%22%230b1526%22/><circle cx=%2212%22 cy=%2212%22 r=%226%22 fill=%22%2360a5fa%22/></svg>') center/contain no-repeat; display:inline-block; }
 .footer { padding: 12px; text-align: center; color:#4e6b8a; font-size:12px; }
 @keyframes fadein { from { opacity: 0; transform: translateY(6px); } to { opacity: 1; transform: translateY(0); } }
@@ -97,6 +99,10 @@ textarea { resize: vertical; min-height: 120px; }
       <summary><h2>Pull Requests</h2></summary>
       <div id="prs-content" class="muted">Loading…</div>
     </details>
+    <details class="panel" data-panel-key="gitea-events" open>
+      <summary><h2>Gitea event stream</h2></summary>
+      <div id="gitea-events" class="muted" aria-live="polite">Loading…</div>
+    </details>
     <details class="panel" data-panel-key="widgets" open>
       <summary><h2>Live Widgets</h2></summary>
       <div id="widgets" class="stack"></div>
@@ -229,6 +235,26 @@ textarea { resize: vertical; min-height: 120px; }
     el.innerHTML = deltas.length ? deltas.map(d => '<div class="suggestion ' + d.priority + '"><span class="pill">' + escapeHtml(d.priority) + '</span> <strong>' + escapeHtml(d.action) + '</strong> ' + escapeHtml(d.target || '') + '<div class="muted">' + escapeHtml(d.panel) + '</div></div>').join('') : '<div class="muted">No suggestions yet.</div>';
   }
 
+  function paintEventStream(events) {
+    const el = qs('#gitea-events');
+    el.innerHTML = events.length ? events.slice(0, 12).map(event =>
+      '<div class="event"><strong>' + escapeHtml(event.actor?.login || 'Gitea') + '</strong> ' +
+      escapeHtml(event.type || 'activity') +
+      '<div class="small">' + escapeHtml(event.repo?.full_name || '') +
+      (event.created_at ? ' · ' + escapeHtml(fmt(event.created_at)) : '') + '</div></div>'
+    ).join('') : '<div class="muted">No recent Gitea activity.</div>';
+  }
+
+  async function loadEventStream() {
+    try {
+      const res = await fetch('/api/v1/events', { headers: { Accept: 'application/json' } });
+      if (!res.ok) throw new Error('HTTP ' + res.status);
+      paintEventStream(await res.json());
+    } catch (e) {
+      qs('#gitea-events').innerHTML = '<div class="muted">Event stream unavailable.</div>';
+    }
+  }
+
   async function tickWidgets() {
     try {
       const res = await fetch('/api/v1/context', { headers: { Accept: 'application/json' } });
@@ -318,7 +344,9 @@ textarea { resize: vertical; min-height: 120px; }
 
   qs('#refresh').addEventListener('click', load);
   load();
+  loadEventStream();
   setInterval(load, 8000);
+  setInterval(loadEventStream, 5000);
   setInterval(tickWidgets, 2000);
   tickWidgets();
 

src/gitea_proxy.py

@@ -35,3 +35,17 @@ async def issues() -> list[dict]:
 
 async def pull_requests() -> list[dict]:
     return await fetch("user/pulls?limit=50")
+
+
+async def activity_events() -> list[dict]:
+    user = await current_user()
+    events = await fetch(f"users/{user['login']}/activities/feeds?limit=20")
+    return [
+        {
+            "type": event.get("op_type", "activity"),
+            "actor": event.get("act_user") or {},
+            "repo": event.get("repo") or {},
+            "created_at": event.get("created", ""),
+        }
+        for event in events
+    ]

src/main.py

@@ -1,14 +1,17 @@
+import asyncio
+
 from fastapi import FastAPI
 from fastapi.middleware.cors import CORSMiddleware
 from fastapi.responses import JSONResponse
 from fastapi.staticfiles import StaticFiles
 
-from src.gitea_proxy import current_user, repos, issues, pull_requests
+from src.gitea_proxy import activity_events, current_user, repos, issues, pull_requests
 from src.models import User, Repo, Issue, PullRequest
 from src.suggestion_engine import compute
 from src.views import router as frontend_router
 
 app = FastAPI(title="Stackchain Dashboard")
+CONTEXT_TIMEOUT_SECONDS = 5.0
 
 app.add_middleware(
     CORSMiddleware,
@@ -21,14 +24,25 @@ app.add_middleware(
 app.include_router(frontend_router)
 
 
+@app.get("/healthz")
+def health() -> dict[str, str]:
+    """Return process liveness without depending on Gitea."""
+    return {"status": "ok", "service": "stackchain-dashboard"}
+
+
 @app.get("/api/v1/context")
 async def context() -> JSONResponse:
     try:
-        user_data = await current_user()
-        repo_data = await repos()
-        issues_data = await issues()
-        prs_data = await pull_requests()
+        user_data, repo_data, issues_data, prs_data = await asyncio.wait_for(
+            asyncio.gather(current_user(), repos(), issues(), pull_requests()),
+            timeout=CONTEXT_TIMEOUT_SECONDS,
+        )
     except Exception as e:
+        error_message = (
+            f"Gitea context request timed out after {CONTEXT_TIMEOUT_SECONDS:g}s"
+            if isinstance(e, TimeoutError)
+            else str(e)
+        )
         return JSONResponse({
             "user": {"id": None, "login": "timmy", "full_name": "Timmy Jr", "email": ""},
             "repos": [],
@@ -39,7 +53,7 @@ async def context() -> JSONResponse:
                 {"panel": "auth", "action": "connect", "target": "stackchain-dashboard backend", "priority": "high"},
                 {"panel": "gitea", "action": "set GITEA_URL + GITEA_TOKEN", "target": "/root/stackchain-dashboard/.env or systemd env", "priority": "high"},
             ],
-            "error": str(e),
+            "error": error_message,
         })
     user_model = User(id=user_data["id"], login=user_data["login"], full_name=user_data.get("full_name", ""), email=user_data.get("email", ""))
     repo_models = [
@@ -66,3 +80,8 @@ async def context() -> JSONResponse:
         "view": ctx.view,
         "deltas": [d.dict() for d in ctx.deltas],
     })
+
+
+@app.get("/api/v1/events")
+async def event_stream() -> list[dict]:
+    return await activity_events()

tests/test_context_timeout.py

@@ -0,0 +1,32 @@
+import asyncio
+
+import pytest
+
+from src import main
+
+
+@pytest.mark.anyio
+async def test_context_returns_fallback_when_gitea_exceeds_deadline(monkeypatch):
+    cancelled = asyncio.Event()
+
+    async def hanging_current_user():
+        try:
+            await asyncio.Event().wait()
+        finally:
+            cancelled.set()
+
+    async def empty_collection():
+        return []
+
+    monkeypatch.setattr(main, "CONTEXT_TIMEOUT_SECONDS", 0.01)
+    monkeypatch.setattr(main, "current_user", hanging_current_user)
+    monkeypatch.setattr(main, "repos", empty_collection)
+    monkeypatch.setattr(main, "issues", empty_collection)
+    monkeypatch.setattr(main, "pull_requests", empty_collection)
+
+    response = await main.context()
+
+    assert response.status_code == 200
+    assert b'"repos":[]' in response.body
+    assert b'"error":"Gitea context request timed out after 0.01s"' in response.body
+    assert cancelled.is_set()

tests/test_event_stream.py

@@ -0,0 +1,64 @@
+from pathlib import Path
+
+import pytest
+
+from src import main
+from src import gitea_proxy
+
+
+DASHBOARD = Path("frontend/index.html")
+
+
+def test_dashboard_has_realtime_gitea_event_stream_widget():
+    html = DASHBOARD.read_text()
+
+    assert "Gitea event stream" in html
+    assert "id=\"gitea-events\"" in html
+    assert "function paintEventStream" in html
+    assert "setInterval(loadEventStream, 5000)" in html
+    assert "event.actor?.login" in html
+    assert "event.repo?.full_name" in html
+
+
+@pytest.mark.anyio
+async def test_event_stream_returns_recent_authenticated_gitea_activity(monkeypatch):
+    expected = [{"type": "create", "actor": {"login": "timmy"}}]
+
+    async def fake_activity_events():
+        return expected
+
+    monkeypatch.setattr(main, "activity_events", fake_activity_events)
+
+    response = await main.event_stream()
+
+    assert response == expected
+
+
+@pytest.mark.anyio
+async def test_activity_events_fetches_feed_for_authenticated_user(monkeypatch):
+    paths = []
+
+    async def fake_current_user():
+        return {"login": "timmy"}
+
+    async def fake_fetch(path):
+        paths.append(path)
+        return [{
+            "op_type": "push",
+            "act_user": {"login": "timmy"},
+            "repo": {"full_name": "stackchain/stackchain-dashboard"},
+            "created": "2026-08-05T03:00:00Z",
+        }]
+
+    monkeypatch.setattr(gitea_proxy, "current_user", fake_current_user)
+    monkeypatch.setattr(gitea_proxy, "fetch", fake_fetch)
+
+    result = await gitea_proxy.activity_events()
+
+    assert result == [{
+        "type": "push",
+        "actor": {"login": "timmy"},
+        "repo": {"full_name": "stackchain/stackchain-dashboard"},
+        "created_at": "2026-08-05T03:00:00Z",
+    }]
+    assert paths == ["users/timmy/activities/feeds?limit=20"]

tests/test_health.py

@@ -0,0 +1,6 @@
+from src.main import app, health
+
+
+def test_health_endpoint_reports_service_liveness_without_gitea_access():
+    assert any(getattr(route, "path", None) == "/healthz" for route in app.routes)
+    assert health() == {"status": "ok", "service": "stackchain-dashboard"}