feat(arcrun): implement arcrun MVP — open-source AI workflow engine

Phase 1-5 complete per .agents/specs/u6u-core-mvp/:

**Phase 1 — Cherry-pick & cleanup**
- Create arcrun/ from cypher-executor, credentials, builtins, registry
- Remove 9 InkStone Service Bindings (KBDB, REGISTRY, CLINIC_*, AICEO, MINI_ME)
- Rewrite component-loader: 3-layer (builtin → WASM_BUCKET R2 → error)
- Remove autoPublishMissing.ts, proxy.ts (AICEO), execution-logger.ts (KBDB)
- Clean all KV namespace IDs and InkStone internal URLs from config files

**Phase 2 — contract.yaml completeness**
- Add credentials_required to gmail, google_sheets, telegram, line_notify
- Add config_example to all 21 components with annotated field descriptions

**Phase 3 — Credential injection**
- Add credential-injector.ts: AES-GCM decrypt from CREDENTIALS_KV
- Integrate into GraphExecutor before WASM execution
- Structured errors with repair instructions when credential missing

**Phase 4 — CLI (acr)**
- cli/package.json: arcrun package, bin: acr, deps: commander/js-yaml/chalk/ora
- 8 commands: init, creds push, push, run, validate, parts, list, logs
- Standard mode: writes directly to user's CF KV via CF REST API
- acr init: interactive setup with arcrun.dev API Key registration

**Phase 5 — Open source release prep**
- README.md: 5-minute quickstart, component table, workflow YAML syntax
- CONTRIBUTING.md: TinyGo dev env, component scaffolding, submission flow
- Security audit: no InkStone internal URLs/IDs in committed files
- .gitignore: exclude credentials.yaml, .wrangler, *.wasm

https://claude.ai/code/session_01BnCdSLVH8tUed9VrrPavgT
This commit is contained in:
Claude
2026-04-16 04:06:25 +00:00
commit 2707fca32b
155 changed files with 17413 additions and 0 deletions
@@ -0,0 +1,65 @@
canonical_id: "google_sheets"
display_name: "Google 試算表"
category: "api"
version: "v1"
wasi_target: "preview1"
stability: "floating"
runtime_compat:
- "cf-workers"
- "workerd"
- "wazero"
constraints:
max_size_kb: 2048
max_cold_start_ms: 50
no_network_syscall: true
no_filesystem_syscall: true
io_model: "stdin_stdout_json"
input_schema:
type: object
required: [spreadsheet_id, range, access_token]
properties:
spreadsheet_id:
type: string
range:
type: string
description: 如 Sheet1!A1:B10
action:
type: string
enum: [read, write]
default: read
values:
type: array
description: write 時的資料(二維陣列)
access_token:
type: string
description: Google OAuth access token
output_schema:
type: object
properties:
success:
type: boolean
data:
type: object
properties:
values: {}
range:
type: string
gherkin_tests:
- scenario: "缺少 access_token"
given: '{"spreadsheet_id":"abc","range":"Sheet1!A1"}'
then_contains: '{"success":false'
- scenario: "缺少 spreadsheet_id"
given: '{"range":"Sheet1!A1","access_token":"token"}'
then_contains: '{"success":false'
tags: [integration, google, sheets, oauth]
description: "讀取或寫入 Google 試算表。透過 host function 呼叫 Google Sheets API,需要 OAuth access_token。"
credentials_required:
- key: google_oauth
type: google_oauth
description: "Google OAuth access tokenspreadsheets scope"
inject_as: access_token
config_example: |
read_sheet: # 節點名稱(可自訂)
spreadsheet_id: "" # 試算表 ID(必填)
range: "" # 範圍,如 Sheet1!A1:B10(必填)
# access_token 由 credentials.yaml 的 google_oauth 自動注入
+3
View File
@@ -0,0 +1,3 @@
module component
go 1.21
+135
View File
@@ -0,0 +1,135 @@
// google_sheets — 讀取或寫入 Google 試算表
// 透過 host function 呼叫 Google Sheets API
//
//go:build tinygo
package main
import (
"encoding/json"
"io"
"os"
"unsafe"
)
//go:wasmimport u6u http_request
func hostHttpRequest(
urlPtr uintptr, urlLen uint32,
methodPtr uintptr, methodLen uint32,
headersPtr uintptr, headersLen uint32,
bodyPtr uintptr, bodyLen uint32,
outPtr uintptr, outLenPtr uintptr,
) uint32
type Input struct {
SpreadsheetID string `json:"spreadsheet_id"`
Range string `json:"range"`
Action string `json:"action"`
Values [][]json.RawMessage `json:"values"`
AccessToken string `json:"access_token"`
}
func main() {
raw, err := io.ReadAll(os.Stdin)
if err != nil {
writeError("failed to read stdin: " + err.Error())
return
}
var input Input
if err := json.Unmarshal(raw, &input); err != nil {
writeError("invalid input JSON: " + err.Error())
return
}
if input.SpreadsheetID == "" {
writeError("spreadsheet_id 必填")
return
}
if input.Range == "" {
writeError("range 必填")
return
}
if input.AccessToken == "" {
writeError("access_token 必填")
return
}
action := input.Action
if action == "" {
action = "read"
}
headers := map[string]string{
"Authorization": "Bearer " + input.AccessToken,
"Content-Type": "application/json",
}
headersJSON, _ := json.Marshal(headers)
var apiURL, method, bodyStr string
switch action {
case "read":
apiURL = "https://sheets.googleapis.com/v4/spreadsheets/" + input.SpreadsheetID + "/values/" + input.Range
method = "GET"
bodyStr = ""
case "write":
apiURL = "https://sheets.googleapis.com/v4/spreadsheets/" + input.SpreadsheetID + "/values/" + input.Range + "?valueInputOption=RAW"
method = "PUT"
bodyData, _ := json.Marshal(map[string]interface{}{
"range": input.Range,
"majorDimension": "ROWS",
"values": input.Values,
})
bodyStr = string(bodyData)
default:
writeError("不支援的 action: " + action)
return
}
urlBytes := []byte(apiURL)
methodBytes := []byte(method)
bodyBytes := []byte(bodyStr)
if len(bodyBytes) == 0 {
bodyBytes = []byte{}
}
outBuf := make([]byte, 65536)
var outLen uint32
var bodyPtr uintptr
if len(bodyBytes) > 0 {
bodyPtr = uintptr(unsafe.Pointer(&bodyBytes[0]))
}
result := hostHttpRequest(
uintptr(unsafe.Pointer(&urlBytes[0])), uint32(len(urlBytes)),
uintptr(unsafe.Pointer(&methodBytes[0])), uint32(len(methodBytes)),
uintptr(unsafe.Pointer(&headersJSON[0])), uint32(len(headersJSON)),
bodyPtr, uint32(len(bodyBytes)),
uintptr(unsafe.Pointer(&outBuf[0])), uintptr(unsafe.Pointer(&outLen)),
)
if result != 0 {
writeError("Google Sheets API 呼叫失敗")
return
}
responseStr := string(outBuf[:outLen])
var responseData interface{}
if err := json.Unmarshal([]byte(responseStr), &responseData); err != nil {
responseData = responseStr
}
out, _ := json.Marshal(map[string]interface{}{
"success": true,
"data": map[string]interface{}{
"values": responseData,
"range": input.Range,
},
})
os.Stdout.Write(out)
}
func writeError(msg string) {
out, _ := json.Marshal(map[string]interface{}{"success": false, "error": msg})
os.Stdout.Write(out)
}