feat(t52): 資料夾＝庫端到端——kbdb 加 /entries/libraries（資料面 distinct 庫）；portal 庫目錄合併「登記簿＋蓋章自動出現」(auto)；auto 庫改安全渲染（無 record_id 不放死按鈕，改給『登記到目錄』）＋daemon/libraries 自動登記端點。leo 07-26：地端 2 個資料夾雲端就要 2 個庫

kbdb/src/routes/entries.ts

@@ -31,6 +31,25 @@ entryRoutes.post('/', async (c) => {
   return c.json({ success: true, entry });
 });
 
+// GET /entries/libraries?owner_id=... — 這個租戶的資料裡實際出現過哪些庫（distinct）。
+// t52（leo 2026-07-26：地端幾個資料夾＝雲端幾個庫）：庫由 ingest 蓋章決定，這裡直接從
+// 資料反查，讓「蓋了章的庫」一定看得到，不必依賴任何登記動作。未蓋章的舊資料＝general。
+// 註冊在 '/' 之前——Hono 路由先到先比，放後面會被 '/:id' 之類的樣式吃掉。
+entryRoutes.get('/libraries', async (c) => {
+  const owner = c.req.query('owner_id') || '';
+  const rows = await c.env.DB.prepare(
+    `SELECT DISTINCT COALESCE(NULLIF(json_extract(metadata_json, '$.library'), ''), 'general') AS library
+       FROM entries
+      WHERE (?1 = '' OR owner_id = ?1)
+        AND COALESCE(json_extract(metadata_json, '$.status'), '') != 'deprecated'
+      ORDER BY library`,
+  )
+    .bind(owner)
+    .all<{ library: string }>();
+  const libraries = (rows.results ?? []).map((r) => r.library).filter(Boolean);
+  return c.json({ success: true, libraries, count: libraries.length });
+});
+
 // GET /entries — list with filters (entry_type, owner_id, parent_id, page_name, source, q/search)
 // e.g. list workflows under a project: ?parent_id=PROJECT&entry_type=workflow
 // e.g. get one by idempotency key: ?page_name=skill-rag_with_arcrun