feat(kbdb): recipe 公庫/私庫雙向機制 + UUID 身份 + KBDB Base + 市場數據

kbdb-base SDD §7.5（公庫/私庫雙向機制，richblack 2026-06-07 拍板）。

## KBDB Base worker（新）
- kbdb/：D1-only 核心三表（entries/templates/entry_values）+ CRUD + LIKE search
  + recipe-stats 端點（市場數據）+ 0001_base.sql migration（含 recipe_stat seed）

## Phase 2.3：init 建 D1 + 套 migration
- cli cf-api.ts 加 listD1Databases/ensureD1Database；init 建 arcrun-kbdb D1
- deploy.ts 部署後對 D1 套 0001_base.sql（CF /d1/query API，idempotent）+ 注入 database_id

## Phase 5.1：recipe 成功記錄（市場數據來源）
- GraphExecutor 收集本次用到的 recipe uuid（usedRecipeKeys）
- executeWebhookGraph 執行結束一次性記 per-uuid 成功/失敗到 KBDB（fire-and-forget）

## Phase 7.5：recipe UUID 身份 + app-store 模型
- recipe 領 uuid=唯一身份；canonical_id/author/公私=屬性（§7.5.5）
- recipe:{uuid} + idx:canonical/installed/hash；resolveRecipe 向後相容不破執行鏈
- POST /recipes/submit=領新 uuid 新增作者版本（非覆蓋，app-store）
- GET /public-recipes 搜尋（多作者+per-uuid 市場星數）/ :id pull（選市場最佳）
- 落空→found:false 創作引導（§7.5.6 閉環）
- POST /recipes/migrate-uuid 一次性轉舊 key（增量寫不刪舊、冪等）
- init-seed 用 UUID（author=system）

## 薄殼（rule 07 §5：CLI + MCP 覆蓋同組能力）
- CLI: acr recipe search/pull/submit-p（config 加 DEFAULT_PUBLIC_LIBRARY_URL）
- MCP: arcrun_recipe_search/pull/submit_p/push/list/delete（補齊漂移）

## 壓測修正
- api-recipe-seeds: google_sheets_append PUT→POST（:append 正確動詞，階段12）

四 worker tsc 全綠（cypher/cli/kbdb/mcp）。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

kbdb/src/routes/entries.ts

@@ -0,0 +1,63 @@
+// Entries route — atomic data + tree (project/workflow). Base, no embed/triplet.
+import { Hono } from 'hono';
+import type { Bindings } from '../types';
+import {
+  createEntry,
+  getEntry,
+  listEntries,
+  updateEntry,
+  deleteEntry,
+  searchEntries,
+} from '../actions/entry-crud';
+
+export const entryRoutes = new Hono<{ Bindings: Bindings }>();
+
+// POST /entries — create (entry_type=block/value/project/workflow/...)
+entryRoutes.post('/', async (c) => {
+  const body = await c.req.json().catch(() => null);
+  if (!body || !body.entry_type) return c.json({ success: false, error: 'entry_type required' }, 400);
+  const entry = await createEntry(c.env.DB, body);
+  return c.json({ success: true, entry });
+});
+
+// GET /entries — list with filters (entry_type, owner_id, parent_id)
+// e.g. list workflows under a project: ?parent_id=PROJECT&entry_type=workflow
+entryRoutes.get('/', async (c) => {
+  const entries = await listEntries(c.env.DB, {
+    entry_type: c.req.query('entry_type') || undefined,
+    owner_id: c.req.query('owner_id') || undefined,
+    parent_id: c.req.query('parent_id') || undefined,
+    limit: c.req.query('limit') ? Number(c.req.query('limit')) : undefined,
+    offset: c.req.query('offset') ? Number(c.req.query('offset')) : undefined,
+  });
+  return c.json({ success: true, entries, count: entries.length });
+});
+
+// GET /entries/search?q=...&owner_id=... — D1 LIKE keyword search (base)
+entryRoutes.get('/search', async (c) => {
+  const q = c.req.query('q');
+  if (!q) return c.json({ success: false, error: 'q required' }, 400);
+  const entries = await searchEntries(c.env.DB, q, c.req.query('owner_id') || undefined);
+  return c.json({ success: true, entries, count: entries.length, mode: 'keyword' });
+});
+
+// GET /entries/:id
+entryRoutes.get('/:id', async (c) => {
+  const entry = await getEntry(c.env.DB, c.req.param('id'));
+  if (!entry) return c.json({ success: false, error: 'not found' }, 404);
+  return c.json({ success: true, entry });
+});
+
+// PATCH /entries/:id
+entryRoutes.patch('/:id', async (c) => {
+  const body = await c.req.json().catch(() => ({}));
+  const entry = await updateEntry(c.env.DB, c.req.param('id'), body);
+  if (!entry) return c.json({ success: false, error: 'not found' }, 404);
+  return c.json({ success: true, entry });
+});
+
+// DELETE /entries/:id
+entryRoutes.delete('/:id', async (c) => {
+  await deleteEntry(c.env.DB, c.req.param('id'));
+  return c.json({ success: true });
+});