feat(auth): restore Google sign-in and AI admin test routes

Google OAuth was implemented locally but never deployed; the login button
only renders when AUTH_GOOGLE_ID and AUTH_GOOGLE_SECRET are set. Also
restores /api/ai/test-* endpoints removed by mistake and wires Google
credentials into deploy workflows.

Co-authored-by: Cursor <cursoragent@cursor.com>

memento-note/app/(admin)/admin/ai-test/ai-tester.tsx

@@ -51,10 +51,19 @@ export function AI_TESTER({ type }: { type: 'tags' | 'embeddings' | 'chat' }) {
     try {
       const response = await fetch(`/api/ai/test-${type}`, {
         method: 'POST',
-        headers: { 'Content-Type': 'application/json' }
+        headers: { 'Content-Type': 'application/json' },
       })
 
       const endTime = Date.now()
+      const contentType = response.headers.get('content-type') || ''
+      if (!contentType.includes('application/json')) {
+        const bodyPreview = (await response.text()).slice(0, 200)
+        throw new Error(
+          response.status === 404
+            ? `Route API introuvable (/api/ai/test-${type}). Redéployez l’application.`
+            : `Réponse non-JSON (HTTP ${response.status}): ${bodyPreview}`,
+        )
+      }
       const data = await response.json()
 
       setResult({

memento-note/app/(auth)/login/page.tsx

@@ -1,9 +1,15 @@
 import { LoginForm } from '@/components/login-form';
 import { getSystemConfig } from '@/lib/config';
+import { isGoogleAuthEnabled } from '@/lib/auth-providers';
 
 export default async function LoginPage() {
   const config = await getSystemConfig();
   const allowRegister = config.ALLOW_REGISTRATION !== 'false' && process.env.ALLOW_REGISTRATION !== 'false';
 
-  return <LoginForm allowRegister={allowRegister} />;
+  return (
+    <LoginForm
+      allowRegister={allowRegister}
+      googleAuthEnabled={isGoogleAuthEnabled()}
+    />
+  );
 }

memento-note/app/(auth)/register/page.tsx

@@ -1,5 +1,6 @@
 import { RegisterForm } from '@/components/register-form';
 import { getSystemConfig } from '@/lib/config';
+import { isGoogleAuthEnabled } from '@/lib/auth-providers';
 import { redirect } from 'next/navigation';
 
 export default async function RegisterPage() {
@@ -10,5 +11,5 @@ export default async function RegisterPage() {
     redirect('/login');
   }
 
-  return <RegisterForm />;
+  return <RegisterForm googleAuthEnabled={isGoogleAuthEnabled()} />;
 }

memento-note/app/api/ai/test-chat/route.ts

@@ -0,0 +1,59 @@
+import { NextResponse } from 'next/server'
+import { getChatProvider } from '@/lib/ai/factory'
+import { getSystemConfig } from '@/lib/config'
+import { auth } from '@/auth'
+
+export async function POST() {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+  if ((session.user as { role?: string }).role !== 'ADMIN') {
+    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })
+  }
+
+  try {
+    const config = await getSystemConfig()
+    const provider = getChatProvider(config)
+
+    const testMessage = 'Reply in exactly 3 words: what is your name?'
+
+    const startTime = Date.now()
+    const response = await provider.generateText(testMessage)
+    const endTime = Date.now()
+
+    if (!response || response.trim().length === 0) {
+      return NextResponse.json(
+        {
+          success: false,
+          error: 'No response from chat provider',
+          provider: config.AI_PROVIDER_CHAT || config.AI_PROVIDER_TAGS || 'ollama',
+          model: config.AI_MODEL_CHAT || 'granite4:latest',
+        },
+        { status: 500 },
+      )
+    }
+
+    return NextResponse.json({
+      success: true,
+      provider: config.AI_PROVIDER_CHAT || config.AI_PROVIDER_TAGS || 'ollama',
+      model: config.AI_MODEL_CHAT || 'granite4:latest',
+      chatResponse: response.trim(),
+      responseTime: endTime - startTime,
+    })
+  } catch (error: unknown) {
+    const config = await getSystemConfig()
+    const message = error instanceof Error ? error.message : 'Unknown error'
+
+    return NextResponse.json(
+      {
+        success: false,
+        error: message,
+        provider: config.AI_PROVIDER_CHAT || config.AI_PROVIDER_TAGS || 'ollama',
+        model: config.AI_MODEL_CHAT || 'granite4:latest',
+        stack: process.env.NODE_ENV === 'development' && error instanceof Error ? error.stack : undefined,
+      },
+      { status: 500 },
+    )
+  }
+}

memento-note/app/api/ai/test-embeddings/route.ts

@@ -0,0 +1,97 @@
+import { NextResponse } from 'next/server'
+import { getEmbeddingsProvider } from '@/lib/ai/factory'
+import { getSystemConfig } from '@/lib/config'
+import { auth } from '@/auth'
+
+function getProviderDetails(config: Record<string, string>, providerType: string) {
+  const provider = providerType.toLowerCase()
+
+  switch (provider) {
+    case 'ollama':
+      return {
+        provider: 'Ollama',
+        baseUrl: config.OLLAMA_BASE_URL || process.env.OLLAMA_BASE_URL || 'http://localhost:11434',
+        model: config.AI_MODEL_EMBEDDING || 'embeddinggemma:latest',
+      }
+    case 'openai':
+      return {
+        provider: 'OpenAI',
+        baseUrl: 'https://api.openai.com/v1',
+        model: config.AI_MODEL_EMBEDDING || 'text-embedding-3-small',
+      }
+    case 'custom':
+      return {
+        provider: 'Custom OpenAI',
+        baseUrl: config.CUSTOM_OPENAI_BASE_URL || process.env.CUSTOM_OPENAI_BASE_URL || 'Not configured',
+        model: config.AI_MODEL_EMBEDDING || 'text-embedding-3-small',
+      }
+    default:
+      return {
+        provider: providerType,
+        baseUrl: 'unknown',
+        model: config.AI_MODEL_EMBEDDING || 'unknown',
+      }
+  }
+}
+
+export async function POST() {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+  if ((session.user as { role?: string }).role !== 'ADMIN') {
+    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })
+  }
+
+  try {
+    const config = await getSystemConfig()
+    const provider = getEmbeddingsProvider(config)
+
+    const startTime = Date.now()
+    const embeddings = await provider.getEmbeddings('test')
+    const endTime = Date.now()
+
+    const providerType = config.AI_PROVIDER_EMBEDDING || 'ollama'
+    const details = getProviderDetails(config, providerType)
+
+    if (!embeddings || embeddings.length === 0) {
+      return NextResponse.json(
+        {
+          success: false,
+          error: 'No embeddings returned',
+          provider: providerType,
+          model: config.AI_MODEL_EMBEDDING || 'embeddinggemma:latest',
+          details,
+        },
+        { status: 500 },
+      )
+    }
+
+    return NextResponse.json({
+      success: true,
+      provider: providerType,
+      model: config.AI_MODEL_EMBEDDING || 'embeddinggemma:latest',
+      embeddingLength: embeddings.length,
+      firstValues: embeddings.slice(0, 5),
+      responseTime: endTime - startTime,
+      details,
+    })
+  } catch (error: unknown) {
+    const config = await getSystemConfig()
+    const providerType = config.AI_PROVIDER_EMBEDDING || 'ollama'
+    const details = getProviderDetails(config, providerType)
+    const message = error instanceof Error ? error.message : 'Unknown error'
+
+    return NextResponse.json(
+      {
+        success: false,
+        error: message,
+        provider: providerType,
+        model: config.AI_MODEL_EMBEDDING || 'embeddinggemma:latest',
+        details,
+        stack: process.env.NODE_ENV === 'development' && error instanceof Error ? error.stack : undefined,
+      },
+      { status: 500 },
+    )
+  }
+}

memento-note/app/api/ai/test-tags/route.ts

@@ -0,0 +1,60 @@
+import { NextResponse } from 'next/server'
+import { getTagsProvider } from '@/lib/ai/factory'
+import { getSystemConfig } from '@/lib/config'
+import { auth } from '@/auth'
+
+export async function POST() {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+  if ((session.user as { role?: string }).role !== 'ADMIN') {
+    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })
+  }
+
+  try {
+    const config = await getSystemConfig()
+    const provider = getTagsProvider(config)
+
+    const testContent =
+      'This is a test note about artificial intelligence and machine learning. It contains keywords like AI, ML, neural networks, and deep learning.'
+
+    const startTime = Date.now()
+    const tags = await provider.generateTags(testContent)
+    const endTime = Date.now()
+
+    if (!tags || tags.length === 0) {
+      return NextResponse.json(
+        {
+          success: false,
+          error: 'No tags generated',
+          provider: config.AI_PROVIDER_TAGS || 'ollama',
+          model: config.AI_MODEL_TAGS || 'granite4:latest',
+        },
+        { status: 500 },
+      )
+    }
+
+    return NextResponse.json({
+      success: true,
+      provider: config.AI_PROVIDER_TAGS || 'ollama',
+      model: config.AI_MODEL_TAGS || 'granite4:latest',
+      tags,
+      responseTime: endTime - startTime,
+    })
+  } catch (error: unknown) {
+    const config = await getSystemConfig()
+    const message = error instanceof Error ? error.message : 'Unknown error'
+
+    return NextResponse.json(
+      {
+        success: false,
+        error: message,
+        provider: config.AI_PROVIDER_TAGS || 'ollama',
+        model: config.AI_MODEL_TAGS || 'granite4:latest',
+        stack: process.env.NODE_ENV === 'development' && error instanceof Error ? error.stack : undefined,
+      },
+      { status: 500 },
+    )
+  }
+}