refactor(core): 梳理模型配置与审计脱敏服务

tests/test_audit.py

@@ -75,6 +75,19 @@ def test_create_audit_log_masks_api_keys_from_error_message(db):
     assert "sk-***" in log.error_message
 
 
+def test_create_audit_log_masks_embedding_api_keys_from_error_message(db):
+    result = AgentResult(
+        answer="",
+        status="failed",
+        error="EMBEDDING_API_KEY=embed-secret 调用失败",
+    )
+
+    log = create_audit_log("knowledge_qa", "知识库问答助手", "问题", result)
+
+    assert "embed-secret" not in log.error_message
+    assert "EMBEDDING_API_KEY=***" in log.error_message
+
+
 def test_query_demo_records_reads_demo_business_record_table(db):
     DemoBusinessRecord.objects.create(
         scenario_id="quality_analysis",

tests/test_llm_provider.py

@@ -3,6 +3,7 @@ from agent_core.llm_provider import (
     LLMConfigurationError,
     create_embedding_provider,
     create_llm_provider,
+    get_runtime_llm_config,
 )
 
 
@@ -109,3 +110,17 @@ def test_embedding_provider_requires_api_key():
         assert "EMBEDDING_API_KEY" in str(exc)
     else:
         raise AssertionError("expected EmbeddingConfigurationError")
+
+
+def test_get_runtime_llm_config_uses_environment_and_overrides(monkeypatch):
+    monkeypatch.setenv("LLM_PROVIDER", "mock")
+    monkeypatch.setenv("LLM_API_KEY", "sk-env")
+    monkeypatch.setenv("LLM_BASE_URL", "https://env.example/v1")
+    monkeypatch.setenv("LLM_MODEL", "env-model")
+
+    config = get_runtime_llm_config({"LLM_MODEL": "override-model"})
+
+    assert config["LLM_PROVIDER"] == "mock"
+    assert config["LLM_API_KEY"] == "sk-env"
+    assert config["LLM_BASE_URL"] == "https://env.example/v1"
+    assert config["LLM_MODEL"] == "override-model"