fix(ai-proxy): avoid reserved key column in setting query (#6759)

* fix(ai-proxy): avoid reserved key column in setting query

* refactor(ai-proxy): simplify setting key query

* test(ai-proxy): cover reserved key column query

* test(ai-proxy): relax reserved key query assertion

Author: sfwn

internal/apps/ai-proxy/models/setting/dbclient.go

@@ -36,7 +36,7 @@ func (dbClient *DBClient) CreateOrUpdate(ctx context.Context, item *Setting) err
 
 	var existing Setting
 	err := dbClient.DB.WithContext(ctx).
-		Where("namespace = ? AND key = ?", item.Namespace, item.Key).
+		Where(&Setting{Namespace: item.Namespace, Key: item.Key}).
 		First(&existing).Error
 	if err == nil {
 		existing.Value = item.Value
@@ -54,7 +54,7 @@ func (dbClient *DBClient) CreateOrUpdate(ctx context.Context, item *Setting) err
 func (dbClient *DBClient) GetByNamespaceKey(ctx context.Context, namespace, key string) (*Setting, error) {
 	var item Setting
 	err := dbClient.DB.WithContext(ctx).
-		Where("namespace = ? AND key = ?", namespace, key).
+		Where(&Setting{Namespace: namespace, Key: key}).
 		First(&item).Error
 	if err != nil {
 		return nil, err
@@ -69,7 +69,7 @@ func (dbClient *DBClient) GetByNamespaceKeys(ctx context.Context, namespace stri
 
 	var items []*Setting
 	if err := dbClient.DB.WithContext(ctx).
-		Where("namespace = ? AND key IN ?", namespace, keys).
+		Where("namespace = ? AND `key` IN (?)", namespace, keys).
 		Find(&items).Error; err != nil {
 		return nil, err
 	}

internal/apps/ai-proxy/models/setting/dbclient_test.go

@@ -19,8 +19,10 @@ import (
 	"fmt"
 	"testing"
 
+	"github.com/DATA-DOG/go-sqlmock"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+	"gorm.io/driver/mysql"
 	"gorm.io/driver/sqlite"
 	"gorm.io/gorm"
 
@@ -120,6 +122,30 @@ func TestDBClient_CreateConflict(t *testing.T) {
 	require.Equal(t, "claude;;;codex", got.Value)
 }
 
+func TestDBClient_GetByNamespaceKeys_QuotesReservedKeyColumn(t *testing.T) {
+	sqlDB, mock, err := sqlmock.New()
+	require.NoError(t, err)
+	defer func() {
+		_ = sqlDB.Close()
+	}()
+
+	db, err := gorm.Open(mysql.New(mysql.Config{
+		Conn:                      sqlDB,
+		SkipInitializeWithVersion: true,
+	}), &gorm.Config{})
+	require.NoError(t, err)
+
+	mock.ExpectQuery("`key` IN").
+		WithArgs("blacklist_user_agent", "general.headers", "general.prompts", sqlmock.AnyArg()).
+		WillReturnRows(sqlmock.NewRows([]string{"id", "created_at", "updated_at", "deleted_at", "namespace", "key", "value"}))
+
+	client := &DBClient{DB: db}
+	got, err := client.GetByNamespaceKeys(context.Background(), "blacklist_user_agent", "general.headers", "general.prompts")
+	require.NoError(t, err)
+	require.Empty(t, got)
+	require.NoError(t, mock.ExpectationsWereMet())
+}
+
 func prepareSQLiteSettingTable(db *gorm.DB) error {
 	return db.Exec(`
 CREATE TABLE ai_proxy_setting (