Claude
2707fca32b
Phase 1-5 complete per .agents/specs/u6u-core-mvp/: **Phase 1 — Cherry-pick & cleanup** - Create arcrun/ from cypher-executor, credentials, builtins, registry - Remove 9 InkStone Service Bindings (KBDB, REGISTRY, CLINIC_*, AICEO, MINI_ME) - Rewrite component-loader: 3-layer (builtin → WASM_BUCKET R2 → error) - Remove autoPublishMissing.ts, proxy.ts (AICEO), execution-logger.ts (KBDB) - Clean all KV namespace IDs and InkStone internal URLs from config files **Phase 2 — contract.yaml completeness** - Add credentials_required to gmail, google_sheets, telegram, line_notify - Add config_example to all 21 components with annotated field descriptions **Phase 3 — Credential injection** - Add credential-injector.ts: AES-GCM decrypt from CREDENTIALS_KV - Integrate into GraphExecutor before WASM execution - Structured errors with repair instructions when credential missing **Phase 4 — CLI (acr)** - cli/package.json: arcrun package, bin: acr, deps: commander/js-yaml/chalk/ora - 8 commands: init, creds push, push, run, validate, parts, list, logs - Standard mode: writes directly to user's CF KV via CF REST API - acr init: interactive setup with arcrun.dev API Key registration **Phase 5 — Open source release prep** - README.md: 5-minute quickstart, component table, workflow YAML syntax - CONTRIBUTING.md: TinyGo dev env, component scaffolding, submission flow - Security audit: no InkStone internal URLs/IDs in committed files - .gitignore: exclude credentials.yaml, .wrangler, *.wasm https://claude.ai/code/session_01BnCdSLVH8tUed9VrrPavgT
25 lines
703 B
TypeScript
25 lines
703 B
TypeScript
// u6u-credentials Worker 型別定義
|
||
|
||
export type Bindings = {
|
||
CREDENTIALS_KV: KVNamespace;
|
||
ENCRYPTION_KEY: string; // hex-encoded 256-bit AES key（wrangler secret）
|
||
ENVIRONMENT: string;
|
||
};
|
||
|
||
export interface CredentialRecord {
|
||
id: string; // 用 name slugify 生成
|
||
name: string; // 用戶命名（human-readable）
|
||
type: string; // api_key / bearer_token / google_oauth / telegram_bot_token / ...
|
||
encrypted_secret: string; // AES-GCM base64 encrypted
|
||
iv: string; // base64 IV
|
||
created_at: number;
|
||
}
|
||
|
||
// 對外回傳（不含 secret）
|
||
export interface CredentialSummary {
|
||
id: string;
|
||
name: string;
|
||
type: string;
|
||
created_at: number;
|
||
}
|