feat(t122 🔴🔴): 萃取引擎雲端設定＋隨連線下發——封測者終於萃得出東西

真兇（總管查證）：daemon/config 寫死 extractor='claude' 且不下發金鑰 ⇒ 封測者 100% 萃取失敗（leo：「地端沒有 AI 根本不能萃，那它就不能玩」）。 - POST/GET /portal/admin/extractor（admin 閘；GET 只回 has_key 不回明文） - daemon/config 改讀設定：未設定→gemma 無金鑰；設定後→含 gemini_api_key - portal 設定頁加「萃取引擎」區（Gemini 推薦＋aistudio 連結，存後提示「小幫手點連上知識庫重連即可」）測試 3 條新綠（vitest 17 passed；1 紅＝console HTML 搬遷陳舊測試，非本案）。（實作＝子 CC；驗證+commit＝總管）
2026-07-29 13:21:26 +08:00
parent 429b2d965f
commit eb9f2db513
4 changed files with 255 additions and 12 deletions
@@ -395,7 +395,71 @@ describe('/portal/admin/libraries', () => {
  });
 });

-// ═══════════════ 6. /portal HTML 殼（P4 admin 頁後紅線不回退）═══════════════
+// ═══════════════ 6. t122 萃取引擎金鑰雲端下發 ═══════════════
+
+describe('/portal/admin/extractor + /portal/daemon/config 萃取引擎（t122）', () => {
+  const USER_EMAIL = 'daemon@example.com';
+  const USER_PW = 'unit-test-pw-1'; // 與 storedHash 配對（beforeAll 計算）
+  const USER_RECORD = 'rec_daemon_user';
+  const EXTRACTOR_KV_KEY = 'leo:portal:extractor_config'; // wrangler.test.toml CONSOLE_TENANT=leo
+
+  /** mock email head lookup（findUserRecordId 走這個路徑）*/
+  function mockEmailLookup(email: string, recordId: string | null) {
+    const needle = new URLSearchParams({ page_name: email }).toString();
+    fetchMock
+      .get(KBDB)
+      .intercept({
+        path: (p: string) => p.startsWith('/entries?') && p.includes(needle) && p.includes(encodeURIComponent(NS)),
+        method: 'GET',
+      })
+      .reply(200, { success: true, entries: recordId ? [{ content: recordId }] : [], count: recordId ? 1 : 0 });
+  }
+
+  it('未設定 → daemon/config 下發 extractor=gemma，無 gemini_api_key', async () => {
+    // 確保 KV 沒有 extractor config
+    await env.WEBHOOKS.delete(EXTRACTOR_KV_KEY);
+    mockEmailLookup(USER_EMAIL, USER_RECORD);
+    mockGetRecord(USER_RECORD, adminValues({ email: USER_EMAIL, password_hash: storedHash }));
+    const res = await json('POST', '/portal/daemon/config', { email: USER_EMAIL, password: USER_PW });
+    expect(res.status).toBe(200);
+    const data = (await res.json()) as { success: boolean; config: Record<string, string> };
+    expect(data.success).toBe(true);
+    expect(data.config.extractor).toBe('gemma');
+    expect('gemini_api_key' in data.config).toBe(false);
+  });
+
+  it('設定 gemma+金鑰後 → daemon/config 下發含 gemini_api_key', async () => {
+    await env.WEBHOOKS.put(EXTRACTOR_KV_KEY, JSON.stringify({ engine: 'gemma', gemini_api_key: 'AIza-test-key-999' }));
+    mockEmailLookup(USER_EMAIL, USER_RECORD);
+    mockGetRecord(USER_RECORD, adminValues({ email: USER_EMAIL, password_hash: storedHash }));
+    const res = await json('POST', '/portal/daemon/config', { email: USER_EMAIL, password: USER_PW });
+    expect(res.status).toBe(200);
+    const data = (await res.json()) as { success: boolean; config: Record<string, string> };
+    expect(data.config.extractor).toBe('gemma');
+    expect(data.config.gemini_api_key).toBe('AIza-test-key-999');
+    // cleanup
+    await env.WEBHOOKS.delete(EXTRACTOR_KV_KEY);
+  });
+
+  it('GET /portal/admin/extractor → has_key=true，回應不含金鑰明文', async () => {
+    await env.WEBHOOKS.put(EXTRACTOR_KV_KEY, JSON.stringify({ engine: 'gemma', gemini_api_key: 'AIza-secret-key' }));
+    await seedAdminSession();
+    mockGetRecord('rec_admin', adminValues());
+    const res = await json('GET', '/portal/admin/extractor', undefined, { Authorization: 'Bearer tok-admin' });
+    expect(res.status).toBe(200);
+    const data = (await res.json()) as { success: boolean; engine: string; has_key: boolean };
+    expect(data.engine).toBe('gemma');
+    expect(data.has_key).toBe(true);
+    // 回應主體不含金鑰明文
+    const raw = JSON.stringify(data);
+    expect(raw).not.toContain('AIza-secret-key');
+    expect(raw).not.toContain('gemini_api_key');
+    // cleanup
+    await env.WEBHOOKS.delete(EXTRACTOR_KV_KEY);
+  });
+});
+
+// ═══════════════ 7. /portal HTML 殼（P4 admin 頁後紅線不回退）═══════════════

 describe('GET /portal（P4 admin 頁 HTML 殼）', () => {
  it('admin view 存在；仍零租戶字串、零 /kbdb/、零 X-Arcrun-API-Key、零 Mira；無 kb 種子、無登記到目錄', async () => {