feat(arcrun): implement arcrun MVP — open-source AI workflow engine

Phase 1-5 complete per .agents/specs/u6u-core-mvp/:

**Phase 1 — Cherry-pick & cleanup**
- Create arcrun/ from cypher-executor, credentials, builtins, registry
- Remove 9 InkStone Service Bindings (KBDB, REGISTRY, CLINIC_*, AICEO, MINI_ME)
- Rewrite component-loader: 3-layer (builtin → WASM_BUCKET R2 → error)
- Remove autoPublishMissing.ts, proxy.ts (AICEO), execution-logger.ts (KBDB)
- Clean all KV namespace IDs and InkStone internal URLs from config files

**Phase 2 — contract.yaml completeness**
- Add credentials_required to gmail, google_sheets, telegram, line_notify
- Add config_example to all 21 components with annotated field descriptions

**Phase 3 — Credential injection**
- Add credential-injector.ts: AES-GCM decrypt from CREDENTIALS_KV
- Integrate into GraphExecutor before WASM execution
- Structured errors with repair instructions when credential missing

**Phase 4 — CLI (acr)**
- cli/package.json: arcrun package, bin: acr, deps: commander/js-yaml/chalk/ora
- 8 commands: init, creds push, push, run, validate, parts, list, logs
- Standard mode: writes directly to user's CF KV via CF REST API
- acr init: interactive setup with arcrun.dev API Key registration

**Phase 5 — Open source release prep**
- README.md: 5-minute quickstart, component table, workflow YAML syntax
- CONTRIBUTING.md: TinyGo dev env, component scaffolding, submission flow
- Security audit: no InkStone internal URLs/IDs in committed files
- .gitignore: exclude credentials.yaml, .wrangler, *.wasm

https://claude.ai/code/session_01BnCdSLVH8tUed9VrrPavgT

cli/src/index.ts

@@ -0,0 +1,89 @@
+#!/usr/bin/env node
+/**
+ * arcrun CLI — acr
+ * AI Workflow CLI for Cloudflare Workers + WASM
+ *
+ * 安裝：npm i -g arcrun
+ * 使用：acr <指令>
+ */
+import { Command } from 'commander';
+import { cmdInit } from './commands/init.js';
+import { cmdCredsPush } from './commands/creds.js';
+import { cmdPush } from './commands/push.js';
+import { cmdRun } from './commands/run.js';
+import { cmdValidate } from './commands/validate.js';
+import { cmdParts, cmdPartsScaffold, cmdPartsPublish } from './commands/parts.js';
+import { cmdList } from './commands/list.js';
+import { cmdLogs } from './commands/logs.js';
+
+const program = new Command();
+
+program
+  .name('acr')
+  .description('arcrun — AI Workflow CLI for Cloudflare Workers + WASM')
+  .version('1.0.0');
+
+// acr init [--self-hosted]
+program
+  .command('init')
+  .description('互動式初始化設定（建立 ~/.arcrun/config.yaml）')
+  .option('--self-hosted', '使用 Self-hosted 模式（自行部署所有 Worker）')
+  .action((options: { selfHosted?: boolean }) => cmdInit(options));
+
+// acr creds push [credentials.yaml]
+const credsCmd = program.command('creds').description('Credential 管理');
+credsCmd
+  .command('push [file]')
+  .description('加密上傳 credentials.yaml 至你的 CF KV（不經過 arcrun.dev）')
+  .action((file: string) => cmdCredsPush(file ?? 'credentials.yaml'));
+
+// acr push <workflow.yaml>
+program
+  .command('push <file>')
+  .description('解析 workflow.yaml 並部署至你的 CF KV')
+  .action((file: string) => cmdPush(file));
+
+// acr run <workflow_name> [--input key=value...]
+program
+  .command('run <workflow>')
+  .description('執行指定 workflow')
+  .option('-i, --input <pairs...>', 'input 參數（格式：key=value）')
+  .action((workflow: string, options: { input?: string[] }) => cmdRun(workflow, options));
+
+// acr validate <workflow.yaml>
+program
+  .command('validate <file>')
+  .description('執行前驗證 workflow.yaml（格式、關係詞、零件存在性、credentials）')
+  .action((file: string) => cmdValidate(file));
+
+// acr parts
+// acr parts scaffold <component>
+// acr parts publish <component> [--status <submission_id>]
+const partsCmd = program.command('parts').description('零件庫管理');
+partsCmd
+  .action(() => cmdParts());
+
+partsCmd
+  .command('scaffold <component>')
+  .description('輸出零件的 config 範本（可直接貼入 workflow.yaml）')
+  .action((component: string) => cmdPartsScaffold(component));
+
+partsCmd
+  .command('publish <component-dir>')
+  .description('提交零件至 arcrun.dev 公眾 registry')
+  .option('--status <submission_id>', '查詢提交審核進度')
+  .action((dir: string, options: { status?: string }) => cmdPartsPublish(dir, options));
+
+// acr list
+program
+  .command('list')
+  .description('列出 CF KV 中所有已部署的 workflow')
+  .action(() => cmdList());
+
+// acr logs <workflow_name>
+program
+  .command('logs <workflow>')
+  .description('顯示 workflow 最近執行記錄')
+  .action((workflow: string) => cmdLogs(workflow));
+
+program.parse(process.argv);