feat(kbdb): recipe 公庫/私庫雙向機制 + UUID 身份 + KBDB Base + 市場數據

kbdb-base SDD §7.5（公庫/私庫雙向機制，richblack 2026-06-07 拍板）。

## KBDB Base worker（新）
- kbdb/：D1-only 核心三表（entries/templates/entry_values）+ CRUD + LIKE search
  + recipe-stats 端點（市場數據）+ 0001_base.sql migration（含 recipe_stat seed）

## Phase 2.3：init 建 D1 + 套 migration
- cli cf-api.ts 加 listD1Databases/ensureD1Database；init 建 arcrun-kbdb D1
- deploy.ts 部署後對 D1 套 0001_base.sql（CF /d1/query API，idempotent）+ 注入 database_id

## Phase 5.1：recipe 成功記錄（市場數據來源）
- GraphExecutor 收集本次用到的 recipe uuid（usedRecipeKeys）
- executeWebhookGraph 執行結束一次性記 per-uuid 成功/失敗到 KBDB（fire-and-forget）

## Phase 7.5：recipe UUID 身份 + app-store 模型
- recipe 領 uuid=唯一身份；canonical_id/author/公私=屬性（§7.5.5）
- recipe:{uuid} + idx:canonical/installed/hash；resolveRecipe 向後相容不破執行鏈
- POST /recipes/submit=領新 uuid 新增作者版本（非覆蓋，app-store）
- GET /public-recipes 搜尋（多作者+per-uuid 市場星數）/ :id pull（選市場最佳）
- 落空→found:false 創作引導（§7.5.6 閉環）
- POST /recipes/migrate-uuid 一次性轉舊 key（增量寫不刪舊、冪等）
- init-seed 用 UUID（author=system）

## 薄殼（rule 07 §5：CLI + MCP 覆蓋同組能力）
- CLI: acr recipe search/pull/submit-p（config 加 DEFAULT_PUBLIC_LIBRARY_URL）
- MCP: arcrun_recipe_search/pull/submit_p/push/list/delete（補齊漂移）

## 壓測修正
- api-recipe-seeds: google_sheets_append PUT→POST（:append 正確動詞，階段12）

四 worker tsc 全綠（cypher/cli/kbdb/mcp）。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

kbdb/src/actions/entry-crud.ts

@@ -0,0 +1,117 @@
+// Entry CRUD — atomic data + tree (project/workflow via parent_id). Base, D1 only.
+import type { Bindings, Entry } from '../types';
+
+function uid(prefix: string): string {
+  // deterministic-enough unique id without Math.random in hot path is fine here;
+  // crypto.randomUUID is available in Workers runtime.
+  return `${prefix}_${crypto.randomUUID()}`;
+}
+
+export interface CreateEntryInput {
+  content?: string | null;
+  entry_type: string;
+  owner_id?: string | null;
+  parent_id?: string | null;
+  page_name?: string | null;
+  refs_json?: string;
+  tags_json?: string;
+  task_status?: string | null;
+  confidence?: number | null;
+  metadata_json?: string | null;
+  id?: string;
+}
+
+export async function createEntry(db: D1Database, input: CreateEntryInput): Promise<Entry> {
+  const id = input.id ?? uid('e');
+  await db
+    .prepare(
+      `INSERT INTO entries (id, content, entry_type, owner_id, parent_id, page_name, refs_json, tags_json, task_status, confidence, metadata_json)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
+    )
+    .bind(
+      id,
+      input.content ?? null,
+      input.entry_type,
+      input.owner_id ?? null,
+      input.parent_id ?? null,
+      input.page_name ?? null,
+      input.refs_json ?? '[]',
+      input.tags_json ?? '[]',
+      input.task_status ?? null,
+      input.confidence ?? null,
+      input.metadata_json ?? null,
+    )
+    .run();
+  const row = await getEntry(db, id);
+  if (!row) throw new Error('createEntry: insert succeeded but row not found');
+  return row;
+}
+
+export async function getEntry(db: D1Database, id: string): Promise<Entry | null> {
+  const row = await db.prepare('SELECT * FROM entries WHERE id = ?').bind(id).first<Entry>();
+  return row ?? null;
+}
+
+export interface ListEntriesFilter {
+  entry_type?: string;
+  owner_id?: string;
+  parent_id?: string;
+  limit?: number;
+  offset?: number;
+}
+
+export async function listEntries(db: D1Database, f: ListEntriesFilter = {}): Promise<Entry[]> {
+  const conds: string[] = [];
+  const params: unknown[] = [];
+  if (f.entry_type) { conds.push('entry_type = ?'); params.push(f.entry_type); }
+  if (f.owner_id) { conds.push('owner_id = ?'); params.push(f.owner_id); }
+  if (f.parent_id) { conds.push('parent_id = ?'); params.push(f.parent_id); }
+  const where = conds.length ? `WHERE ${conds.join(' AND ')}` : '';
+  const limit = Math.min(f.limit ?? 100, 1000);
+  const offset = f.offset ?? 0;
+  const res = await db
+    .prepare(`SELECT * FROM entries ${where} ORDER BY created_at DESC LIMIT ? OFFSET ?`)
+    .bind(...params, limit, offset)
+    .all<Entry>();
+  return res.results ?? [];
+}
+
+export interface UpdateEntryInput {
+  content?: string | null;
+  parent_id?: string | null;
+  page_name?: string | null;
+  refs_json?: string;
+  tags_json?: string;
+  task_status?: string | null;
+  confidence?: number | null;
+  metadata_json?: string | null;
+}
+
+export async function updateEntry(db: D1Database, id: string, patch: UpdateEntryInput): Promise<Entry | null> {
+  const cols: string[] = [];
+  const params: unknown[] = [];
+  const map: Record<string, unknown> = patch as Record<string, unknown>;
+  for (const k of ['content', 'parent_id', 'page_name', 'refs_json', 'tags_json', 'task_status', 'confidence', 'metadata_json']) {
+    if (k in map && map[k] !== undefined) { cols.push(`${k} = ?`); params.push(map[k]); }
+  }
+  if (cols.length === 0) return getEntry(db, id);
+  cols.push('updated_at = unixepoch()');
+  await db.prepare(`UPDATE entries SET ${cols.join(', ')} WHERE id = ?`).bind(...params, id).run();
+  return getEntry(db, id);
+}
+
+export async function deleteEntry(db: D1Database, id: string): Promise<void> {
+  await db.prepare('DELETE FROM entries WHERE id = ?').bind(id).run();
+}
+
+// D1 LIKE keyword search (base; semantic search is the optional embed module).
+export async function searchEntries(db: D1Database, q: string, owner_id?: string, limit = 50): Promise<Entry[]> {
+  const conds = ['content LIKE ?'];
+  const params: unknown[] = [`%${q}%`];
+  if (owner_id) { conds.push('owner_id = ?'); params.push(owner_id); }
+  const res = await db
+    .prepare(`SELECT * FROM entries WHERE ${conds.join(' AND ')} ORDER BY updated_at DESC LIMIT ?`)
+    .bind(...params, Math.min(limit, 200))
+    .all<Entry>();
+  return res.results ?? [];
+}