fix(ai): restore Groq/Gemini enhancement path and keep OpenAI-compatible config; cache non-openai keys in backend

- Enhance enhance_transcription to route groq/gemini via AIProviderFactory using cached API keys
- Keep OpenAI-compatible base_url + no_auth flow unchanged
- Frontend: saveApiKey caches keys for groq/gemini and validates only for openai
- Verified: cargo test (150/150) and TS typecheck pass

Author: moinulmoin

src-tauri/src/commands/ai.rs

@@ -584,6 +584,25 @@ pub async fn enhance_transcription(text: String, app: tauri::AppHandle) -> Resul
         opts.insert("base_url".into(), serde_json::Value::String(base_url));
         opts.insert("no_auth".into(), serde_json::Value::Bool(no_auth));
         (api_key, opts)
+    } else if provider == "groq" || provider == "gemini" {
+        // Require API key from in-memory cache
+        let cache = API_KEY_CACHE
+            .lock()
+            .map_err(|_| "Failed to access cache".to_string())?;
+        let key_name = format!("ai_api_key_{}", provider);
+        let api_key = cache
+            .get(&key_name)
+            .cloned()
+            .ok_or_else(|| {
+                log::error!(
+                    "API key not found in cache for provider: {}. Cache keys: {:?}",
+                    provider,
+                    cache.keys().collect::<Vec<_>>()
+                );
+                "API key not found in cache".to_string()
+            })?;
+
+        (api_key, std::collections::HashMap::new())
     } else {
         return Err("Unsupported provider".to_string());
     };

src/utils/keyring.ts

@@ -41,8 +41,14 @@ export const saveApiKey = async (provider: string, apiKey: string): Promise<void
   const key = `ai_api_key_${provider}`;
   await keyringSet(key, apiKey);
 
-  // Validate and cache in backend for fast access during transcription
-  await invoke('validate_and_cache_api_key', { provider, apiKey });
+  // Cache or validate depending on provider
+  if (provider === 'openai') {
+    // OpenAI-compatible requires validation (may include no-auth path via separate modal)
+    await invoke('validate_and_cache_api_key', { provider, apiKey });
+  } else {
+    // For Groq/Gemini, just cache the key; validation happens during usage
+    await invoke('cache_ai_api_key', { provider, apiKey });
+  }
 
   console.log(`[Keyring] API key saved and validated for ${provider}`);