feat(kbdb): recipe 公庫/私庫雙向機制 + UUID 身份 + KBDB Base + 市場數據

kbdb-base SDD §7.5（公庫/私庫雙向機制，richblack 2026-06-07 拍板）。

## KBDB Base worker（新）
- kbdb/：D1-only 核心三表（entries/templates/entry_values）+ CRUD + LIKE search
  + recipe-stats 端點（市場數據）+ 0001_base.sql migration（含 recipe_stat seed）

## Phase 2.3：init 建 D1 + 套 migration
- cli cf-api.ts 加 listD1Databases/ensureD1Database；init 建 arcrun-kbdb D1
- deploy.ts 部署後對 D1 套 0001_base.sql（CF /d1/query API，idempotent）+ 注入 database_id

## Phase 5.1：recipe 成功記錄（市場數據來源）
- GraphExecutor 收集本次用到的 recipe uuid（usedRecipeKeys）
- executeWebhookGraph 執行結束一次性記 per-uuid 成功/失敗到 KBDB（fire-and-forget）

## Phase 7.5：recipe UUID 身份 + app-store 模型
- recipe 領 uuid=唯一身份；canonical_id/author/公私=屬性（§7.5.5）
- recipe:{uuid} + idx:canonical/installed/hash；resolveRecipe 向後相容不破執行鏈
- POST /recipes/submit=領新 uuid 新增作者版本（非覆蓋，app-store）
- GET /public-recipes 搜尋（多作者+per-uuid 市場星數）/ :id pull（選市場最佳）
- 落空→found:false 創作引導（§7.5.6 閉環）
- POST /recipes/migrate-uuid 一次性轉舊 key（增量寫不刪舊、冪等）
- init-seed 用 UUID（author=system）

## 薄殼（rule 07 §5：CLI + MCP 覆蓋同組能力）
- CLI: acr recipe search/pull/submit-p（config 加 DEFAULT_PUBLIC_LIBRARY_URL）
- MCP: arcrun_recipe_search/pull/submit_p/push/list/delete（補齊漂移）

## 壓測修正
- api-recipe-seeds: google_sheets_append PUT→POST（:append 正確動詞，階段12）

四 worker tsc 全綠（cypher/cli/kbdb/mcp）。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

kbdb/src/actions/record-crud.ts

@@ -0,0 +1,120 @@
+// Template + Record CRUD. A "record" = multiple entries composed via a template's slots.
+// Base, D1 only. (Ported clean from KBDB; no vectorize/triplet imports.)
+import type { Template } from '../types';
+import { createEntry } from './entry-crud';
+
+function uid(prefix: string): string {
+  return `${prefix}_${crypto.randomUUID()}`;
+}
+
+// ---- Templates ----
+
+export interface CreateTemplateInput {
+  name: string;
+  description?: string | null;
+  slots: string[];
+  created_by?: string | null;
+  id?: string;
+}
+
+export async function createTemplate(db: D1Database, input: CreateTemplateInput): Promise<Template> {
+  const id = input.id ?? uid('tpl');
+  await db
+    .prepare(`INSERT INTO templates (id, name, description, slots_json, created_by) VALUES (?, ?, ?, ?, ?)`)
+    .bind(id, input.name, input.description ?? null, JSON.stringify(input.slots), input.created_by ?? null)
+    .run();
+  const row = await getTemplate(db, id);
+  if (!row) throw new Error('createTemplate: row not found after insert');
+  return row;
+}
+
+export async function getTemplate(db: D1Database, idOrName: string): Promise<Template | null> {
+  const row = await db
+    .prepare('SELECT * FROM templates WHERE id = ? OR name = ? LIMIT 1')
+    .bind(idOrName, idOrName)
+    .first<Template>();
+  return row ?? null;
+}
+
+export async function listTemplates(db: D1Database): Promise<Template[]> {
+  const res = await db.prepare('SELECT * FROM templates ORDER BY created_at DESC').all<Template>();
+  return res.results ?? [];
+}
+
+export async function updateTemplate(db: D1Database, id: string, patch: { description?: string | null; slots?: string[] }): Promise<Template | null> {
+  const cols: string[] = [];
+  const params: unknown[] = [];
+  if (patch.description !== undefined) { cols.push('description = ?'); params.push(patch.description); }
+  if (patch.slots !== undefined) { cols.push('slots_json = ?'); params.push(JSON.stringify(patch.slots)); }
+  if (cols.length === 0) return getTemplate(db, id);
+  cols.push('updated_at = unixepoch()');
+  await db.prepare(`UPDATE templates SET ${cols.join(', ')} WHERE id = ?`).bind(...params, id).run();
+  return getTemplate(db, id);
+}
+
+// ---- Records (entry_values composed by template) ----
+
+export interface CreateRecordInput {
+  template: string;          // template id or name
+  values: Record<string, string>; // slot_name -> content
+  owner_id?: string | null;
+  record_id?: string;
+}
+
+export interface RecordResult {
+  record_id: string;
+  template_id: string;
+  values: Record<string, string>;
+}
+
+export async function createRecord(db: D1Database, input: CreateRecordInput): Promise<RecordResult> {
+  const tpl = await getTemplate(db, input.template);
+  if (!tpl) throw new Error(`template not found: ${input.template}`);
+  const slots: string[] = JSON.parse(tpl.slots_json);
+  const recordId = input.record_id ?? uid('rec');
+
+  for (const slot of slots) {
+    if (!(slot in input.values)) continue;
+    const entry = await createEntry(db, {
+      content: input.values[slot],
+      entry_type: 'value',
+      owner_id: input.owner_id ?? null,
+    });
+    await db
+      .prepare(`INSERT INTO entry_values (id, record_id, template_id, slot_name, entry_id) VALUES (?, ?, ?, ?, ?)`)
+      .bind(uid('ev'), recordId, tpl.id, slot, entry.id)
+      .run();
+  }
+  return { record_id: recordId, template_id: tpl.id, values: input.values };
+}
+
+export async function getRecord(db: D1Database, recordId: string): Promise<RecordResult | null> {
+  const res = await db
+    .prepare(
+      `SELECT ev.slot_name as slot, e.content as content, ev.template_id as template_id
+       FROM entry_values ev JOIN entries e ON ev.entry_id = e.id
+       WHERE ev.record_id = ?`,
+    )
+    .bind(recordId)
+    .all<{ slot: string; content: string; template_id: string }>();
+  const rows = res.results ?? [];
+  if (rows.length === 0) return null;
+  const values: Record<string, string> = {};
+  for (const r of rows) values[r.slot] = r.content;
+  return { record_id: recordId, template_id: rows[0].template_id, values };
+}
+
+export async function searchByTemplate(db: D1Database, template: string, owner_id?: string, limit = 100): Promise<RecordResult[]> {
+  const tpl = await getTemplate(db, template);
+  if (!tpl) return [];
+  const res = await db
+    .prepare(`SELECT DISTINCT record_id FROM entry_values WHERE template_id = ? ORDER BY created_at DESC LIMIT ?`)
+    .bind(tpl.id, Math.min(limit, 500))
+    .all<{ record_id: string }>();
+  const out: RecordResult[] = [];
+  for (const { record_id } of res.results ?? []) {
+    const rec = await getRecord(db, record_id);
+    if (rec && (!owner_id || true)) out.push(rec);
+  }
+  return out;
+}