From ebfae1f60c68b62266577fd555a9ba406e84cfe3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E5=88=98=E8=88=AA=E5=AE=87?= <3364451258@qq.com>
Date: Fri, 10 Jul 2026 15:27:38 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20EXPECTED=5FAPI=5FKEY=20=E6=94=B9?=
 =?UTF-8?q?=E4=B8=BA=E6=83=B0=E6=80=A7=E6=B1=82=E5=80=BC=E9=98=B2=E5=8A=A0?=
 =?UTF-8?q?=E8=BD=BD=E9=A1=BA=E5=BA=8F=E9=97=AE=E9=A2=98?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 pyproject.toml       | 13 ++++++++++++-
 src/core/embedder.py |  5 +++--
 src/server/auth.py   | 12 +++---------
 3 files changed, 18 insertions(+), 12 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index b1cb6fa..5e04651 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -18,7 +18,7 @@ dependencies = [
 md-vector-db = "src.cli.main:app"
 
 [project.optional-dependencies]
-dev = ["pytest>=8.0", "httpx>=0.27.0"]
+dev = ["pytest>=8.0", "httpx>=0.27.0", "pytest-cov>=5.0", "ruff>=0.8.0", "mypy>=1.13"]
 pdf = ["pymupdf>=1.24.0"]
 html = ["beautifulsoup4>=4.12.0"]
 epub = ["ebooklib>=0.18"]
@@ -35,6 +35,17 @@ packages = ["src/"]
 find-links = ["D:/settings/Language/Python/库"]
 index-strategy = "unsafe-best-match"
 
+[tool.ruff]
+line-length = 100
+target-version = "py313"
+
+[tool.ruff.lint]
+select = ["E", "F", "I", "N", "W"]
+
+[tool.mypy]
+python_version = "3.13"
+ignore_missing_imports = true
+
 [tool.pytest.ini_options]
 testpaths = ["tests"]
 pythonpath = ["src"]
diff --git a/src/core/embedder.py b/src/core/embedder.py
index f8271f0..573dd78 100644
--- a/src/core/embedder.py
+++ b/src/core/embedder.py
@@ -154,6 +154,7 @@ class DashscopeEmbedder(_BaseAPIEmbedder):
     def embed(self, texts: list[str]) -> list[list[float]]:
         if not texts:
             raise ValueError("文本列表不能为空")
+        import requests  # 惰性导入（仅 DashScope 使用）
         resp = requests.post(
             self._api_base,
             headers={
@@ -176,8 +177,8 @@ class DashscopeEmbedder(_BaseAPIEmbedder):
         if not isinstance(embeddings_raw, list):
             raise ValueError(f"DashScope embeddings 不是列表: {type(embeddings_raw)}")
         # 按 text_index 排序确保顺序
-        embeddings_raw.sort(key=lambda x: x.get("text_index", 0))
-        return [e["embedding"] for e in embeddings_raw]
+        embeddings_raw_sorted = sorted(embeddings_raw, key=lambda x: x.get("text_index", 0))
+        return [e["embedding"] for e in embeddings_raw_sorted]
 
 
 # -- 工厂函数 --
diff --git a/src/server/auth.py b/src/server/auth.py
index 2548332..cad205d 100644
--- a/src/server/auth.py
+++ b/src/server/auth.py
@@ -11,15 +11,9 @@ from fastapi import Header, HTTPException, Request
 logger = logging.getLogger("md-vector-db")
 
 # -- API Key 认证 --
-_EXPECTED_API_KEY = os.environ.get("MD_VECTOR_API_KEY", "")
-
-
-def _make_get_api_key():
-    """创建从环境变量读取预期 API Key 的函数 (便于测试替换)."""
-    return lambda: _EXPECTED_API_KEY
-
-
-_get_expected_api_key = _make_get_api_key()
+def _get_expected_api_key() -> str:
+    """惰性获取 API Key（每次调用重新从环境变量读取）."""
+    return os.environ.get("MD_VECTOR_API_KEY", "")
 
 
 def verify_api_key(x_api_key: str | None = Header(None)):