Arcrun

Leo/Arcrun

Fork 0

Commit Graph

Author	SHA1	Message	Date
Leo	fb2d0b0c2d	feat(self-hosted): acr init --self-hosted installer + recipe push 把關 + commit 部署 wasm 讓任何 CC 用自己的 CF 帳號一鍵 self-host arcrun（戰法轉 self-hosted 開源）。 Task 1 — acr init --self-hosted installer（用戶只給 CF Account ID + token，其餘自動）： - cli/src/lib/cf-api.ts: CfAccountClient（驗 token / 建 KV 冪等 / 建 R2 / 查 workers.dev subdomain） - cli/src/lib/deploy.ts: 從 GitHub codeload tarball 拉部署物 → 注入用戶 KV id → wrangler deploy （tier1 component-builds 先、tier2 cypher-executor/registry 後；部分失敗誠實回報不假綠） - cli/src/lib/api-recipe-seeds.ts: 10 個現役 API recipe 種子（KBDB 採 Supabase 模式） - cli/src/commands/init.ts: initSelfHosted() 改寫成 installer 流程 - cli/src/commands/update.ts: acr update（拉新 ref 重部署） - cypher-executor/scripts/seed-api-recipes.ts: prod 補灌腳本 Task 2 — recipe 入庫把關（封鎖自製零件後，CC 唯一能擴充的是 recipe）： - cli/src/commands/recipe.ts: 新增 probeRecipeEndpoint 打通檢查（提醒級不硬擋，含模板誠實說明待 run 才知，401/403 標多半缺 credential 非 bug） - 資料外流提醒沿用既有 obtainExposureConsent（非 TTY 拒絕）部署物產製：commit 預編譯 wasm 進 repo（推翻 rule 05「wasm 不 commit」）： - .gitignore: 放行 .component-builds/**/component.wasm（registry 中間產物仍排除） - 只 commit 19 個正當零件 wasm；claude_api / km_writer / kbdb_upsert_block 排除（非薄殼、是把工作流硬塞進零件，違反 DECISIONS §1，待降級） - rule 05 同步記錄此慣例變更 + 膨脹 trade-off SDD: sdk-and-website/self-hosted-init.md（installer 定案）、 component-gatekeeping/recipe-push-gatekeeping.md（recipe 把關） README 重寫成單一 self-hosted 路徑。CLI typecheck exit 0。未完（待 richblack）：push 此 commit 到 GitHub 後 codeload 才拿得到 wasm；用第二 CF 帳號端對端驗收 acr init --self-hosted。 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-06-02 18:44:41 +08:00
Leo	cadcaef3b0	ci: generic scan-based deploy workflow for all Workers Rewrites deploy.yml to auto-discover every wrangler.toml in the repo (excluding node_modules and Pages projects) rather than hardcoding each Worker. Adding a new Worker only requires the new directory — no workflow changes. - Two-tier fanout: tier1 = .component-builds/* (WASM rebuild + deploy in parallel), tier2 = orchestration Workers (cypher-executor, registry, builtins) that depend on tier1 via service bindings. - Diff-aware on push: only changed Worker dirs deploy; changes under registry/components/{name}/ cascade to .component-builds/{name}/. - workflow_dispatch inputs: force_all (deploy everything) and only (comma-separated allow-list). - TinyGo 0.40.1 rebuilds WASM from registry/components/{name}/main.go so deployed binaries always match source. - max-parallel: 5 to stay under Workers API rate limit. Adds .claude/rules/05-deploy-convention.md documenting the "new Worker = new dir + wrangler.toml" invariant. Per .agents/specs/arcrun/credential-primitives-wasm Phase 6. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-04-20 17:42:14 +08:00

Author

SHA1

Message

Date

Leo

fb2d0b0c2d

feat(self-hosted): acr init --self-hosted installer + recipe push 把關 + commit 部署 wasm

讓任何 CC 用自己的 CF 帳號一鍵 self-host arcrun（戰法轉 self-hosted 開源）。

Task 1 — acr init --self-hosted installer（用戶只給 CF Account ID + token，其餘自動）：
- cli/src/lib/cf-api.ts: CfAccountClient（驗 token / 建 KV 冪等 / 建 R2 / 查 workers.dev subdomain）
- cli/src/lib/deploy.ts: 從 GitHub codeload tarball 拉部署物 → 注入用戶 KV id → wrangler deploy
  （tier1 component-builds 先、tier2 cypher-executor/registry 後；部分失敗誠實回報不假綠）
- cli/src/lib/api-recipe-seeds.ts: 10 個現役 API recipe 種子（KBDB 採 Supabase 模式）
- cli/src/commands/init.ts: initSelfHosted() 改寫成 installer 流程
- cli/src/commands/update.ts: acr update（拉新 ref 重部署）
- cypher-executor/scripts/seed-api-recipes.ts: prod 補灌腳本

Task 2 — recipe 入庫把關（封鎖自製零件後，CC 唯一能擴充的是 recipe）：
- cli/src/commands/recipe.ts: 新增 probeRecipeEndpoint 打通檢查（提醒級不硬擋，
  含模板誠實說明待 run 才知，401/403 標多半缺 credential 非 bug）
- 資料外流提醒沿用既有 obtainExposureConsent（非 TTY 拒絕）

部署物產製：commit 預編譯 wasm 進 repo（推翻 rule 05「wasm 不 commit」）：
- .gitignore: 放行 .component-builds/**/component.wasm（registry 中間產物仍排除）
- 只 commit 19 個正當零件 wasm；claude_api / km_writer / kbdb_upsert_block 排除
  （非薄殼、是把工作流硬塞進零件，違反 DECISIONS §1，待降級）
- rule 05 同步記錄此慣例變更 + 膨脹 trade-off

SDD: sdk-and-website/self-hosted-init.md（installer 定案）、
     component-gatekeeping/recipe-push-gatekeeping.md（recipe 把關）
README 重寫成單一 self-hosted 路徑。CLI typecheck exit 0。

未完（待 richblack）：push 此 commit 到 GitHub 後 codeload 才拿得到 wasm；
用第二 CF 帳號端對端驗收 acr init --self-hosted。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-02 18:44:41 +08:00

Leo

cadcaef3b0

ci: generic scan-based deploy workflow for all Workers

Rewrites deploy.yml to auto-discover every wrangler.toml in the repo
(excluding node_modules and Pages projects) rather than hardcoding
each Worker. Adding a new Worker only requires the new directory —
no workflow changes.

- Two-tier fanout: tier1 = .component-builds/* (WASM rebuild +
  deploy in parallel), tier2 = orchestration Workers (cypher-executor,
  registry, builtins) that depend on tier1 via service bindings.
- Diff-aware on push: only changed Worker dirs deploy; changes under
  registry/components/{name}/ cascade to .component-builds/{name}/.
- workflow_dispatch inputs: force_all (deploy everything) and only
  (comma-separated allow-list).
- TinyGo 0.40.1 rebuilds WASM from registry/components/{name}/main.go
  so deployed binaries always match source.
- max-parallel: 5 to stay under Workers API rate limit.

Adds .claude/rules/05-deploy-convention.md documenting the
"new Worker = new dir + wrangler.toml" invariant.

Per .agents/specs/arcrun/credential-primitives-wasm Phase 6.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-04-20 17:42:14 +08:00

2 Commits