Susana Ferreira 7b903cad73 fix: track credential hint across key failover attempts in aibridge (#25735) ...

## Problem

Centralized requests recorded *the first available key from the pool at
`CreateInterceptor` time* as `credential_hint`, so the interception
could be persisted in the database with a hint that didn't match the key
that actually served the request. The fix consists in storing, at
end-of-interception, the hint of the key that succeeded, or the last
attempted key if all keys are unavailable.

## Changes

- Add `Key.Hint()` and update `credential_hint` on every failover
attempt so it reflects the actually-used key.
- Stop pre-populating `credential_hint` at `CreateInterceptor`.
Centralized starts empty and is updated by the key failover loop.
- Persist the final hint via `RecordInterceptionEnded`; SQL updates
`credential_hint` only when `credential_kind = 'centralized'` so BYOK
keeps its start-time value.
- Log the actually-used hint on interception end/failure; start log uses
a `<keypool-pending>` placeholder for centralized.

> [!NOTE]
> Initially generated by Claude Opus 4.7, modified and reviewed by
@ssncferreira

2026-05-29 12:01:37 +01:00

..

aibridgedserver_test.go

fix: track credential hint across key failover attempts in aibridge (#25735)

2026-05-29 12:01:37 +01:00

aibridgedserver.go

fix: track credential hint across key failover attempts in aibridge (#25735)

2026-05-29 12:01:37 +01:00