chore(core): Log kas URI on key index requests

[dmihalcik-virtru]

Proposed Changes

• This is helpful for figuring out if the index is misconfigured

Checklist

• I have added or updated unit tests
• I have added or updated integration tests (if appropriate)
• I have added or updated documentation

Testing Instructions

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	177.980412ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	91.639384ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	344.237705ms
Throughput	290.50 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	37.870335371s
Average Latency	376.319991ms
Throughput	132.03 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	26.130237152s
Average Latency	259.453845ms
Throughput	191.35 requests/second

[strantalis]

/gemini review

[gemini-code-assist]

Code Review

This pull request improves the debuggability of key index requests by logging the KAS URI when a key cannot be found. This is achieved by implementing the fmt.Stringer interface for KeyIndexer and updating the error formatting in DelegatingKeyService. The changes are well-implemented and achieve the stated goal. I have one minor suggestion to improve the consistency of the new error messages.

[gemini-code-assist]

For consistency with the error message in DeriveKey on line 107, consider using in index instead of within index. This makes the error messages uniform, which is helpful for logging and monitoring.

Suggested change

	return nil, fmt.Errorf("unable to find key by ID '%s' within index %s: %w", keyID, d.index, err)
	return nil, fmt.Errorf("unable to find key by ID '%s' in index %s: %w", keyID, d.index, err)

[Copilot]

Pull Request Overview

This PR enhances error logging by including the KAS URI in key lookup error messages to aid in debugging index misconfigurations.

• Added a String() method to KeyIndexer to format index information for logging
• Updated error messages in Decrypt and DeriveKey methods to include index details

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
service/kas/key_indexer.go	Implements String() method returning formatted KAS URI for logging
service/trust/delegating_key_service.go	Updates error messages to include index information using %s formatter

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.