feat(auth): restore Google sign-in and AI admin test routes

Google OAuth was implemented locally but never deployed; the login button
only renders when AUTH_GOOGLE_ID and AUTH_GOOGLE_SECRET are set. Also
restores /api/ai/test-* endpoints removed by mistake and wires Google
credentials into deploy workflows.

Co-authored-by: Cursor <cursoragent@cursor.com>

memento-note/app/api/ai/test-chat/route.ts

@@ -0,0 +1,59 @@
+import { NextResponse } from 'next/server'
+import { getChatProvider } from '@/lib/ai/factory'
+import { getSystemConfig } from '@/lib/config'
+import { auth } from '@/auth'
+
+export async function POST() {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+  if ((session.user as { role?: string }).role !== 'ADMIN') {
+    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })
+  }
+
+  try {
+    const config = await getSystemConfig()
+    const provider = getChatProvider(config)
+
+    const testMessage = 'Reply in exactly 3 words: what is your name?'
+
+    const startTime = Date.now()
+    const response = await provider.generateText(testMessage)
+    const endTime = Date.now()
+
+    if (!response || response.trim().length === 0) {
+      return NextResponse.json(
+        {
+          success: false,
+          error: 'No response from chat provider',
+          provider: config.AI_PROVIDER_CHAT || config.AI_PROVIDER_TAGS || 'ollama',
+          model: config.AI_MODEL_CHAT || 'granite4:latest',
+        },
+        { status: 500 },
+      )
+    }
+
+    return NextResponse.json({
+      success: true,
+      provider: config.AI_PROVIDER_CHAT || config.AI_PROVIDER_TAGS || 'ollama',
+      model: config.AI_MODEL_CHAT || 'granite4:latest',
+      chatResponse: response.trim(),
+      responseTime: endTime - startTime,
+    })
+  } catch (error: unknown) {
+    const config = await getSystemConfig()
+    const message = error instanceof Error ? error.message : 'Unknown error'
+
+    return NextResponse.json(
+      {
+        success: false,
+        error: message,
+        provider: config.AI_PROVIDER_CHAT || config.AI_PROVIDER_TAGS || 'ollama',
+        model: config.AI_MODEL_CHAT || 'granite4:latest',
+        stack: process.env.NODE_ENV === 'development' && error instanceof Error ? error.stack : undefined,
+      },
+      { status: 500 },
+    )
+  }
+}

memento-note/app/api/ai/test-embeddings/route.ts

@@ -0,0 +1,97 @@
+import { NextResponse } from 'next/server'
+import { getEmbeddingsProvider } from '@/lib/ai/factory'
+import { getSystemConfig } from '@/lib/config'
+import { auth } from '@/auth'
+
+function getProviderDetails(config: Record<string, string>, providerType: string) {
+  const provider = providerType.toLowerCase()
+
+  switch (provider) {
+    case 'ollama':
+      return {
+        provider: 'Ollama',
+        baseUrl: config.OLLAMA_BASE_URL || process.env.OLLAMA_BASE_URL || 'http://localhost:11434',
+        model: config.AI_MODEL_EMBEDDING || 'embeddinggemma:latest',
+      }
+    case 'openai':
+      return {
+        provider: 'OpenAI',
+        baseUrl: 'https://api.openai.com/v1',
+        model: config.AI_MODEL_EMBEDDING || 'text-embedding-3-small',
+      }
+    case 'custom':
+      return {
+        provider: 'Custom OpenAI',
+        baseUrl: config.CUSTOM_OPENAI_BASE_URL || process.env.CUSTOM_OPENAI_BASE_URL || 'Not configured',
+        model: config.AI_MODEL_EMBEDDING || 'text-embedding-3-small',
+      }
+    default:
+      return {
+        provider: providerType,
+        baseUrl: 'unknown',
+        model: config.AI_MODEL_EMBEDDING || 'unknown',
+      }
+  }
+}
+
+export async function POST() {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+  if ((session.user as { role?: string }).role !== 'ADMIN') {
+    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })
+  }
+
+  try {
+    const config = await getSystemConfig()
+    const provider = getEmbeddingsProvider(config)
+
+    const startTime = Date.now()
+    const embeddings = await provider.getEmbeddings('test')
+    const endTime = Date.now()
+
+    const providerType = config.AI_PROVIDER_EMBEDDING || 'ollama'
+    const details = getProviderDetails(config, providerType)
+
+    if (!embeddings || embeddings.length === 0) {
+      return NextResponse.json(
+        {
+          success: false,
+          error: 'No embeddings returned',
+          provider: providerType,
+          model: config.AI_MODEL_EMBEDDING || 'embeddinggemma:latest',
+          details,
+        },
+        { status: 500 },
+      )
+    }
+
+    return NextResponse.json({
+      success: true,
+      provider: providerType,
+      model: config.AI_MODEL_EMBEDDING || 'embeddinggemma:latest',
+      embeddingLength: embeddings.length,
+      firstValues: embeddings.slice(0, 5),
+      responseTime: endTime - startTime,
+      details,
+    })
+  } catch (error: unknown) {
+    const config = await getSystemConfig()
+    const providerType = config.AI_PROVIDER_EMBEDDING || 'ollama'
+    const details = getProviderDetails(config, providerType)
+    const message = error instanceof Error ? error.message : 'Unknown error'
+
+    return NextResponse.json(
+      {
+        success: false,
+        error: message,
+        provider: providerType,
+        model: config.AI_MODEL_EMBEDDING || 'embeddinggemma:latest',
+        details,
+        stack: process.env.NODE_ENV === 'development' && error instanceof Error ? error.stack : undefined,
+      },
+      { status: 500 },
+    )
+  }
+}

memento-note/app/api/ai/test-tags/route.ts

@@ -0,0 +1,60 @@
+import { NextResponse } from 'next/server'
+import { getTagsProvider } from '@/lib/ai/factory'
+import { getSystemConfig } from '@/lib/config'
+import { auth } from '@/auth'
+
+export async function POST() {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+  if ((session.user as { role?: string }).role !== 'ADMIN') {
+    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })
+  }
+
+  try {
+    const config = await getSystemConfig()
+    const provider = getTagsProvider(config)
+
+    const testContent =
+      'This is a test note about artificial intelligence and machine learning. It contains keywords like AI, ML, neural networks, and deep learning.'
+
+    const startTime = Date.now()
+    const tags = await provider.generateTags(testContent)
+    const endTime = Date.now()
+
+    if (!tags || tags.length === 0) {
+      return NextResponse.json(
+        {
+          success: false,
+          error: 'No tags generated',
+          provider: config.AI_PROVIDER_TAGS || 'ollama',
+          model: config.AI_MODEL_TAGS || 'granite4:latest',
+        },
+        { status: 500 },
+      )
+    }
+
+    return NextResponse.json({
+      success: true,
+      provider: config.AI_PROVIDER_TAGS || 'ollama',
+      model: config.AI_MODEL_TAGS || 'granite4:latest',
+      tags,
+      responseTime: endTime - startTime,
+    })
+  } catch (error: unknown) {
+    const config = await getSystemConfig()
+    const message = error instanceof Error ? error.message : 'Unknown error'
+
+    return NextResponse.json(
+      {
+        success: false,
+        error: message,
+        provider: config.AI_PROVIDER_TAGS || 'ollama',
+        model: config.AI_MODEL_TAGS || 'granite4:latest',
+        stack: process.env.NODE_ENV === 'development' && error instanceof Error ? error.stack : undefined,
+      },
+      { status: 500 },
+    )
+  }
+}