review(onmyoji_gacha): fix 2x timeout + Pydantic v2 model_validator + review report

danding_bot/plugins/onmyoji_gacha/config.py

@@ -1,5 +1,9 @@
 from pydantic_settings import BaseSettings, SettingsConfigDict
+from pydantic import model_validator
 import os
+import logging
+
+logger = logging.getLogger("onmyoji_gacha")
 
 class Config(BaseSettings):
     model_config = SettingsConfigDict(extra="ignore")
@@ -116,6 +120,12 @@ class Config(BaseSettings):
     BOT_TOKEN: str = os.getenv("ONMYOJI_BOT_TOKEN", os.getenv("BOT_TOKEN", ""))  # 必须设置
     BOT_USER_ID: str = "1424473282"
 
-
     # 时区
-    TIMEZONE: str = "Asia/Shanghai"
+    TIMEZONE: str = "Asia/Shanghai"
+
+    @model_validator(mode="after")
+    def _warn_default_token(self):
+        """运行时警告：如果使用默认admin token，在生产环境可能被猜解"""
+        if self.WEB_ADMIN_TOKEN == "onmyoji_admin_token_2024":
+            logger.warning("⚠️ WEB_ADMIN_TOKEN 使用默认值，生产环境请务必通过环境变量覆盖！")
+        return self