fix(review-feedback-1224): address latest review comments

Author: ZhuLinsen

docs/CHANGELOG.md

@@ -15,10 +15,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
 - [改进] 放宽 LiteLLM 依赖约束，保留 `>=1.80.10` 最低版本并显式排除 PyPI 事故版本 `1.82.7` / `1.82.8`，允许安装后续 1.x 修复版本。
 - [改进] 补齐通知渠道 P0 基线、Actions 映射与 `--check-notify` 只读诊断，完善 AstrBot 配置入口和通知回归快照。
 - [修复] 修正 LLM 渠道测试中 `Model disabled` 被误报为网络异常的问题，并在失败提示中展示本次实际测试模型。
-- [修复] 修正 LLM 渠道测试中 `Your request was blocked` 等上游拦截错误被误报为网络异常的问题。
-- [测试] 补充 LLM 渠道连接测试与模型发现失败分流的回归用例（含 `request_blocked/provider_blocked`、`model_access_denied`、`quota`、`network_error` 的边界），覆盖 `Your request was blocked` 与 `request has been blocked by policy` 等上游拦截信号。
 - [chore] 清理仓库根目录：移除误入库的 `.codex`、`review.md` 跟踪记录，将 smoke 测试入口迁移到 `scripts/`、环境检查脚本迁移为 `scripts/check_env.py`，并将 LiteLLM YAML 示例迁移到 `docs/examples/`。
 - [新功能] Web 设置页新增通知渠道一键测试，支持临时配置、耗时与脱敏 attempts 展示。
+- [修复] 修正 LLM 渠道测试中 `Your request was blocked` 等上游拦截错误被误报为网络异常的问题；新增阻断分类仅为诊断信号，不触发用户配置迁移或清理。
+- [测试] 补充 LLM 渠道连接测试与模型发现失败分流的回归用例（含 `request_blocked/provider_blocked`、`model_access_denied`、`quota`、`network_error` 的边界），覆盖 `Your request was blocked` 与 `request has been blocked by policy` 等上游拦截信号，兼容性验证覆盖 `litellm.completion` 与 `/models` 两条执行路径。
 
 ## [3.15.0] - 2026-05-05
 

src/services/system_config_service.py

@@ -87,6 +87,17 @@ class SystemConfigService:
 
     _LLM_CAPABILITY_ORDER: Tuple[str, ...] = ("json", "tools", "stream", "vision")
     _LLM_STREAM_CHUNK_LIMIT = 8
+    _LLM_PROVIDER_BLOCKED_TOKENS: Tuple[str, ...] = (
+        "your request was blocked",
+        "request was blocked",
+        "request has been blocked",
+        "request is blocked",
+        "request blocked",
+        "blocked by safety",
+        "blocked by policy",
+        "blocked by content",
+        "moderation_blocked",
+    )
     _LLM_CAPABILITY_PROBE_IMAGE = (
         "data:image/png;base64,"
         "iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8/x8AAwMCAO+/p9sAAAAASUVORK5CYII="
@@ -2665,19 +2676,13 @@ def _has_model_access_denied_signal(text: str) -> bool:
 
     @staticmethod
     def _has_provider_blocked_signal(text: str) -> bool:
+        """Match known upstream provider/gateway blocked signals for diagnostic classification.
+
+        These markers are only used to surface a dedicated `request_blocked` reason
+        in runtime checks and do not mutate or migrate persisted user config.
+        """
         lowered = text.lower()
-        blocked_tokens = (
-            "your request was blocked",
-            "request was blocked",
-            "request has been blocked",
-            "request is blocked",
-            "request blocked",
-            "blocked by safety",
-            "blocked by policy",
-            "blocked by content",
-            "moderation_blocked",
-        )
-        return any(token in lowered for token in blocked_tokens)
+        return any(token in lowered for token in SystemConfigService._LLM_PROVIDER_BLOCKED_TOKENS)
 
     @staticmethod
     def _has_provider_prefix_mismatch_signal(text: str) -> bool: