feat(admin/master): provider+master CRUD, token mgmt, logs APIs

internal/service/sync.go

@@ -36,6 +36,7 @@ func (s *SyncService) SyncKey(key *model.Key) error {
 	}
 
 	fields := map[string]interface{}{
+		"id":                key.ID,
 		"master_id":         key.MasterID,
 		"issued_at_epoch":   key.IssuedAtEpoch,
 		"status":            key.Status,
@@ -260,6 +261,7 @@ func (s *SyncService) SyncAll(db *gorm.DB) error {
 			return fmt.Errorf("token hash missing for key %d", k.ID)
 		}
 		pipe.HSet(ctx, fmt.Sprintf("auth:token:%s", tokenHash), map[string]interface{}{
+			"id":                k.ID,
 			"master_id":         k.MasterID,
 			"issued_at_epoch":   k.IssuedAtEpoch,
 			"status":            k.Status,

internal/service/sync_test.go

@@ -66,3 +66,29 @@ func TestSyncProvider_WritesSnapshotAndRouting(t *testing.T) {
 		t.Fatalf("expected provider id 42 in routing set %q", routeKey)
 	}
 }
+
+func TestSyncKey_WritesTokenID(t *testing.T) {
+	mr := miniredis.RunT(t)
+	rdb := redis.NewClient(&redis.Options{Addr: mr.Addr()})
+	svc := NewSyncService(rdb)
+
+	k := &model.Key{
+		TokenHash:        "hash",
+		MasterID:         1,
+		IssuedAtEpoch:    1,
+		Status:           "active",
+		Group:            "default",
+		Scopes:           "chat:write",
+		DefaultNamespace: "default",
+		Namespaces:       "default",
+	}
+	k.ID = 123
+
+	if err := svc.SyncKey(k); err != nil {
+		t.Fatalf("SyncKey: %v", err)
+	}
+
+	if got := mr.HGet("auth:token:hash", "id"); got != "123" {
+		t.Fatalf("expected auth:token:hash.id=123, got %q", got)
+	}
+}