feat(components): move 6 API components to independent WASM Workers

Deploys gmail, telegram, line_notify, google_sheets, http_request, cron
as independent Cloudflare Workers at {name-kebab}.arcrun.dev. Each
wraps the TinyGo WASM from registry/components/{name}/main.go via
wasi-shim cross-import (Method A).

component-loader no longer carries BUILTIN_API_RECIPES — those
hardcoded gmail.googleapis.com / api.telegram.org / sheets / line-notify
endpoints all lived in TS, violating "all business logic in WASM".
Resolution chain now routes the 6 canonical IDs straight to their
{name}.arcrun.dev Worker URLs via WASM_HTTP_RUNNER_IDS.

Per .agents/specs/arcrun/credential-primitives-wasm Phase 3.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

.component-builds/gmail/src/index.ts

@@ -0,0 +1,95 @@
+/**
+ * arcrun API component Worker (gmail)
+ *
+ * POST / → JSON input → WASM (WASI preview1 stdin/stdout) → JSON output
+ *
+ * 方案 A:import cypher-executor/src/lib/wasi-shim.ts 的 `createWasiShim`
+ * 提供單一 `http_request` host function(fetch → 回 response body 原文)。
+ * 這個 Worker 不需要 crypto / kv_get(無 credential 解密職責)。
+ *
+ * Credential 注入路徑:cypher-executor auth-dispatcher 會先 POST 到對應 auth primitive Worker,
+ * 把 auth headers 合進本 Worker 的 input(例:`_auth_headers`)。
+ */
+
+import componentWasm from '../component.wasm' assert { type: 'webassembly' };
+import { Hono } from 'hono';
+import { cors } from 'hono/cors';
+import { createWasiShim, type WasiHostFunctions } from '../../../cypher-executor/src/lib/wasi-shim';
+
+const app = new Hono();
+app.use('*', cors());
+
+app.get('/', (c) => c.json({ ok: true, component: 'gmail' }));
+
+app.post('/', async (c) => {
+  let input: unknown;
+  try {
+    input = await c.req.json();
+  } catch {
+    return c.json({ success: false, error: 'request body must be JSON' }, 400);
+  }
+
+  try {
+    const result = await runWasm(input);
+    return c.json(result);
+  } catch (e) {
+    return c.json(
+      { success: false, error: e instanceof Error ? e.message : String(e) },
+      500,
+    );
+  }
+});
+
+export default app;
+
+// ── WASM runner ──────────────────────────────────────────────────────────────
+
+async function runWasm(input: unknown): Promise<unknown> {
+  const hostFunctions: WasiHostFunctions = {
+    http_request: async (url, method, headersJson, body) => {
+      const headers: Record<string, string> = {};
+      if (headersJson) {
+        try {
+          const parsed = JSON.parse(headersJson);
+          if (parsed && typeof parsed === 'object') {
+            for (const [k, v] of Object.entries(parsed as Record<string, unknown>)) {
+              if (typeof v === 'string') headers[k] = v;
+            }
+          }
+        } catch {
+          // 忽略 header parse 錯誤
+        }
+      }
+      const init: RequestInit = { method, headers };
+      if (body && method.toUpperCase() !== 'GET' && method.toUpperCase() !== 'HEAD') {
+        init.body = body;
+      }
+      const res = await fetch(url, init);
+      // WASM 端直接 json.Unmarshal 回傳內容,這裡回 response body 原文
+      return await res.text();
+    },
+  };
+
+  const shim = createWasiShim(JSON.stringify(input), hostFunctions);
+
+  const instance = await WebAssembly.instantiate(
+    componentWasm as WebAssembly.Module,
+    shim.imports,
+  );
+  shim.setMemory(instance.exports.memory as WebAssembly.Memory);
+
+  const start = (instance.exports._start ?? instance.exports.main) as () => void;
+  if (typeof start !== 'function') {
+    throw new Error('WASM missing _start or main export');
+  }
+
+  try {
+    start();
+  } catch (e) {
+    if (!(e instanceof Error && e.message === 'wasm exit: 0')) throw e;
+  }
+
+  const stdout = shim.getStdout().trim();
+  if (!stdout) throw new Error('WASM component produced no output');
+  return JSON.parse(stdout);
+}