arcrun — AI workflow execution engine (clean history)

Self-hosted 開源：WASM 零件 + recipe + cypher-executor，跑在你自己的 Cloudflare。

此為重建的乾淨歷史起點（移除曾誤 commit 的 GCP SA 金鑰，舊歷史保留在
richblack/arcrun 與本地 backup 分支）。含：
- acr init --self-hosted installer（建 KV/R2 + codeload 拉預編譯 wasm + wrangler deploy + seed recipe）
- recipe push 把關（資料外流提醒 + 打通檢查）
- 19 個正當零件預編譯 wasm（claude_api/km_writer/kbdb_upsert_block 排除：違反 DECISIONS §1）
- CLI / cypher-executor / registry / 完整 SDD

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

cli/src/index.ts

@@ -0,0 +1,130 @@
+#!/usr/bin/env node
+/**
+ * arcrun CLI — acr
+ * AI Workflow CLI for Cloudflare Workers + WASM
+ *
+ * 安裝：npm i -g arcrun
+ * 使用：acr <指令>
+ */
+import { Command } from 'commander';
+import { cmdInit } from './commands/init.js';
+import { cmdCredsPush } from './commands/creds.js';
+import { cmdPush } from './commands/push.js';
+import { cmdRun } from './commands/run.js';
+import { cmdValidate } from './commands/validate.js';
+import { cmdParts, cmdPartsScaffold, cmdPartsPublish } from './commands/parts.js';
+import { cmdRecipePush, cmdRecipeList, cmdRecipeDelete } from './commands/recipe.js';
+import { cmdList } from './commands/list.js';
+import { cmdLogs } from './commands/logs.js';
+import { cmdUpdate } from './commands/update.js';
+import { cmdAuthRecipeList, cmdAuthRecipeInfo, cmdAuthRecipeScaffold } from './commands/auth-recipe.js';
+
+const program = new Command();
+
+program
+  .name('acr')
+  .description('arcrun — AI Workflow CLI for Cloudflare Workers + WASM')
+  .version('1.1.0');
+
+// acr init [--self-hosted]
+program
+  .command('init')
+  .description('互動式初始化設定（建立 ~/.arcrun/config.yaml）')
+  .option('--local', '本機模式：不需要 Cloudflare 帳號，直接在本機測試 workflow')
+  .option('--self-hosted', '完全 Self-hosted 模式：自行部署所有 Cloudflare Worker')
+  .action((options: { local?: boolean; selfHosted?: boolean }) => cmdInit(options));
+
+// acr creds push [credentials.yaml]
+const credsCmd = program.command('creds').description('Credential 管理');
+credsCmd
+  .command('push [file]')
+  .description('加密上傳 credentials.yaml 至你的 CF KV（不經過 arcrun.dev）')
+  .action((file: string) => cmdCredsPush(file ?? 'credentials.yaml'));
+
+// acr push <workflow.yaml>
+program
+  .command('push <file>')
+  .description('解析 workflow.yaml 並部署至你的 CF KV')
+  .action((file: string) => cmdPush(file));
+
+// acr run <workflow_name> [--input key=value...]
+program
+  .command('run <workflow>')
+  .description('執行指定 workflow')
+  .option('-i, --input <pairs...>', 'input 參數（格式：key=value）')
+  .action((workflow: string, options: { input?: string[] }) => cmdRun(workflow, options));
+
+// acr validate <workflow.yaml>
+program
+  .command('validate <file>')
+  .description('執行前驗證 workflow.yaml（格式、關係詞、零件存在性、credentials）')
+  .option('--offline', '離線模式：跳過零件存在性與 credentials 的遠端檢查')
+  .action((file: string, options: { offline?: boolean }) => cmdValidate(file, options));
+
+// acr parts
+// acr parts scaffold <component>
+// acr parts publish <component> [--status <submission_id>]
+const partsCmd = program.command('parts').description('零件庫管理');
+partsCmd
+  .action(() => cmdParts());
+
+partsCmd
+  .command('scaffold <component>')
+  .description('輸出零件的 config 範本（可直接貼入 workflow.yaml）')
+  .action((component: string) => cmdPartsScaffold(component));
+
+partsCmd
+  .command('publish <component-dir>')
+  .description('提交零件至 arcrun.dev 公眾 registry')
+  .option('--status <submission_id>', '查詢提交審核進度')
+  .action((dir: string, options: { status?: string }) => cmdPartsPublish(dir, options));
+
+// acr recipe push / list / delete
+const recipeCmd = program.command('recipe').description('API Recipe 管理');
+recipeCmd
+  .command('push <file>')
+  .description('上傳 recipe YAML 到 arcrun.dev（不需要 deploy Worker）')
+  .action((file: string) => cmdRecipePush(file));
+recipeCmd
+  .command('list')
+  .description('列出已上傳的 recipe')
+  .action(() => cmdRecipeList());
+recipeCmd
+  .command('delete <id>')
+  .description('刪除 recipe（canonical_id 或 rec_hash）')
+  .action((id: string) => cmdRecipeDelete(id));
+
+// acr auth-recipe list / info / scaffold
+const authRecipeCmd = program.command('auth-recipe').description('第三方服務認證 Recipe（新增服務整合）');
+authRecipeCmd
+  .command('list')
+  .description('列出所有平台預建的服務整合（Notion、Slack、GitHub 等）')
+  .action(() => cmdAuthRecipeList());
+authRecipeCmd
+  .command('info <service>')
+  .description('顯示服務 recipe 詳情（需要哪些 credential）')
+  .action((service: string) => cmdAuthRecipeInfo(service));
+authRecipeCmd
+  .command('scaffold <service>')
+  .description('輸出 credentials.yaml 範本 + workflow.yaml 使用範例')
+  .action((service: string) => cmdAuthRecipeScaffold(service));
+
+// acr list
+program
+  .command('list')
+  .description('列出 CF KV 中所有已部署的 workflow')
+  .action(() => cmdList());
+
+// acr logs <workflow_name>
+program
+  .command('logs <workflow>')
+  .description('顯示 workflow 最近執行記錄')
+  .action((workflow: string) => cmdLogs(workflow));
+
+// acr update（self-hosted：拉新 release 重新部署零件/引擎）
+program
+  .command('update')
+  .description('self-hosted：拉新 release 並重新部署到你的 Cloudflare')
+  .action(() => cmdUpdate());
+
+program.parse(process.argv);