feat(arcrun): implement arcrun MVP — open-source AI workflow engine

Phase 1-5 complete per .agents/specs/u6u-core-mvp/: **Phase 1 — Cherry-pick & cleanup** - Create arcrun/ from cypher-executor, credentials, builtins, registry - Remove 9 InkStone Service Bindings (KBDB, REGISTRY, CLINIC_*, AICEO, MINI_ME) - Rewrite component-loader: 3-layer (builtin → WASM_BUCKET R2 → error) - Remove autoPublishMissing.ts, proxy.ts (AICEO), execution-logger.ts (KBDB) - Clean all KV namespace IDs and InkStone internal URLs from config files **Phase 2 — contract.yaml completeness** - Add credentials_required to gmail, google_sheets, telegram, line_notify - Add config_example to all 21 components with annotated field descriptions **Phase 3 — Credential injection** - Add credential-injector.ts: AES-GCM decrypt from CREDENTIALS_KV - Integrate into GraphExecutor before WASM execution - Structured errors with repair instructions when credential missing **Phase 4 — CLI (acr)** - cli/package.json: arcrun package, bin: acr, deps: commander/js-yaml/chalk/ora - 8 commands: init, creds push, push, run, validate, parts, list, logs - Standard mode: writes directly to user's CF KV via CF REST API - acr init: interactive setup with arcrun.dev API Key registration **Phase 5 — Open source release prep** - README.md: 5-minute quickstart, component table, workflow YAML syntax - CONTRIBUTING.md: TinyGo dev env, component scaffolding, submission flow - Security audit: no InkStone internal URLs/IDs in committed files - .gitignore: exclude credentials.yaml, .wrangler, *.wasm https://claude.ai/code/session_01BnCdSLVH8tUed9VrrPavgT
2026-04-16 04:06:25 +00:00
commit 2707fca32b
155 changed files with 17413 additions and 0 deletions
@@ -0,0 +1,90 @@
+// 零件提交：沙盒驗收 → 寫入 KBDB Block → 上傳 R2
+// Requirements: 2.1, 2.2, 2.3
+
+import { runSandboxAcceptance } from './sandboxAcceptance';
+import type { ComponentContract, SandboxResult, Bindings } from '../types';
+
+export async function submitComponent(
+  wasmBytes: Uint8Array,
+  contract: ComponentContract,
+  env: Bindings,
+): Promise<SandboxResult & { wasm_r2_key?: string }> {
+  // 1. 沙盒驗收
+  const sandboxResult = runSandboxAcceptance(wasmBytes, contract);
+  if (!sandboxResult.success) {
+    return sandboxResult;
+  }
+
+  const blockId = `comp-${contract.canonical_id}-${contract.version}`;
+  const r2Key = `components/${contract.canonical_id}/${contract.version}.wasm`;
+
+  // 2. 上傳 .wasm 至 R2
+  await env.WASM_BUCKET.put(r2Key, wasmBytes, {
+    httpMetadata: { contentType: 'application/wasm' },
+  });
+
+  // 3. 寫入 KBDB Block（冪等：先嘗試取得，存在則更新，不存在則建立）
+  const kbdbUrl = env.KBDB_URL || 'https://kbdb.finally.click';
+  const headers = {
+    'Content-Type': 'application/json',
+    'Authorization': `Bearer ${env.KBDB_INTERNAL_TOKEN}`,
+  };
+
+  const slots: Record<string, string> = {
+    canonical_id: contract.canonical_id,
+    display_name: contract.display_name,
+    category: contract.category,
+    version: contract.version,
+    wasi_target: contract.wasi_target,
+    stability: contract.stability,
+    runtime_compat: JSON.stringify(contract.runtime_compat),
+    component_type: contract.component_type ?? 'wasm',
+    max_size_kb: String(contract.constraints.max_size_kb),
+    max_cold_start_ms: String(contract.constraints.max_cold_start_ms),
+    no_network_syscall: String(contract.constraints.no_network_syscall),
+    input_schema: JSON.stringify(contract.input_schema),
+    output_schema: JSON.stringify(contract.output_schema),
+    gherkin_tests: JSON.stringify(contract.gherkin_tests),
+    wasm_r2_key: r2Key,
+    description: contract.description ?? '',
+    tags: JSON.stringify(contract.tags ?? []),
+    success_rate: '1',
+    avg_duration_ms: '0',
+    call_count: '0',
+    status: 'active',
+    deprecated_at: '',
+  };
+
+  if (contract.cypher_binding_url) slots.cypher_binding_url = contract.cypher_binding_url;
+  if (contract.service_binding_key) slots.service_binding_key = contract.service_binding_key;
+
+  // 冪等：先查是否存在
+  const existRes = await fetch(`${kbdbUrl}/records/${blockId}`, { headers });
+
+  if (existRes.ok) {
+    // 已存在：更新 slots
+    await fetch(`${kbdbUrl}/records/${blockId}`, {
+      method: 'PUT',
+      headers,
+      body: JSON.stringify({ values: slots }),
+    });
+  } else {
+    // 不存在：建立新 Block
+    await fetch(`${kbdbUrl}/records`, {
+      method: 'POST',
+      headers,
+      body: JSON.stringify({
+        record_id: blockId,
+        template_id: 'tpl-component',
+        values: slots,
+      }),
+    });
+  }
+
+  return {
+    success: true,
+    component_id: contract.canonical_id,
+    version: contract.version,
+    wasm_r2_key: r2Key,
+  };
+}