@noob-stupid/dsh-plugin-console 0.3.67 → 0.4.1

package/lib/server/infra/semver.js

@@ -0,0 +1,168 @@
+// 由 Step 1 搬运工具从 lib/index.js 原样切出（只移动、未改逻辑）
+// 分组见 D:\dsh\dsh-plugin-hub-plan\architecture.zh.md §三 L0 · infra
+
+
+/** 最小 semver：解析（含 prerelease/build）。 */
+
+/** 单段范围匹配（^ ~ >= <= > < = 精确；返回 true = 满足）。 */
+
+/** 范围匹配：支持多个段以逗号/空白分隔（AND）与 `||`（OR）。 */
+
+/**
+ * 宽松声明匹配（仅用于插件「显式声明兼容范围」）：prerelease 版本按同线发布版判定——
+ * 作者声明 `>=0.1.2` 即代表支持 0.1.2 线，框架运行在 0.1.2-rc.1 应判定兼容。
+ */
+
+/** 解析 DSH 框架版本号为可比较对象；正式版（无预发布段）视为 rc.∞。 */
+
+/** 判断 candidate 是否比 current 更新（候选与当前必须是合法版本号，否则视为不可比）。 */
+
+function parseSemverText(v) {
+  const m = String(v ?? '').trim().replace(/^v/u, '').match(/^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/u)
+  if (!m) return null
+  return { major: Number(m[1]), minor: Number(m[2]), patch: Number(m[3]), pre: m[4] ?? null }
+}
+function compareSemverText(a, b) {
+  if (a.major !== b.major) return a.major - b.major
+  if (a.minor !== b.minor) return a.minor - b.minor
+  if (a.patch !== b.patch) return a.patch - b.patch
+  if (a.pre === null && b.pre === null) return 0
+  if (a.pre === null) return 1
+  if (b.pre === null) return -1
+  const pa = a.pre.split('.')
+  const pb = b.pre.split('.')
+  const len = Math.max(pa.length, pb.length)
+  for (let i = 0; i < len; i += 1) {
+    const xa = pa[i]
+    const xb = pb[i]
+    if (xa === undefined) return -1
+    if (xb === undefined) return 1
+    const na = /^\d+$/u.test(xa)
+    const nb = /^\d+$/u.test(xb)
+    if (na && nb) { const d = Number(xa) - Number(xb); if (d !== 0) return d; continue }
+    if (na) return -1
+    if (nb) return 1
+    const d = xa < xb ? -1 : xa > xb ? 1 : 0
+    if (d !== 0) return d
+  }
+  return 0
+}
+function semverCompareOne(v, raw) {
+  const rText = String(raw).trim()
+  const m = rText.match(/^(\^|~|>=|<=|>|<|=)?\s*v?(\d+)(?:\.(\d+))?(?:\.(\d+))?(?:-([0-9A-Za-z.-]+))?/u)
+  if (!m) return true
+  const op = m[1] ?? ''
+  const base = { major: Number(m[2]), minor: m[3] === undefined ? 0 : Number(m[3]), patch: m[4] === undefined ? 0 : Number(m[4]), pre: m[5] ?? null }
+  const hasMinor = m[3] !== undefined
+  const hasPatch = m[4] !== undefined
+  // npm 语义：prerelease 版本只与同 [major,minor,patch] 且范围带 prerelease 的声明匹配
+  const preAllowed = v.pre === null || (v.major === base.major && v.minor === base.minor && v.patch === base.patch && base.pre !== null)
+  switch (op) {
+    case '':
+    case '=':
+      return preAllowed && compareSemverText(v, base) === 0
+    case '<':
+      return preAllowed && compareSemverText(v, base) < 0
+    case '<=':
+      return preAllowed && compareSemverText(v, base) <= 0
+    case '>':
+      return preAllowed && compareSemverText(v, base) > 0
+    case '>=':
+      return preAllowed && compareSemverText(v, base) >= 0
+    case '~': {
+      if (!preAllowed) return false
+      if (!hasMinor) return v.major === base.major
+      if (!hasPatch) return v.major === base.major && v.minor === base.minor
+      return compareSemverText(v, base) >= 0 && !(v.major === base.major && v.minor > base.minor) && v.major === base.major
+    }
+    case '^': {
+      if (!preAllowed) return false
+      const upper = base.major === 0
+        ? (base.minor === 0 ? { major: 0, minor: 0, patch: base.patch + 1, pre: null } : { major: 0, minor: base.minor + 1, patch: 0, pre: null })
+        : { major: base.major + 1, minor: 0, patch: 0, pre: null }
+      return compareSemverText(v, base) >= 0 && compareSemverText(v, upper) < 0
+    }
+    default:
+      return true
+  }
+}
+function semverRangeMatch(versionText, rangeText) {
+  const v = parseSemverText(versionText)
+  if (!v) return false
+  const alternatives = String(rangeText ?? '').split(/\s*\|\|\s*/u).filter(Boolean)
+  if (alternatives.length === 0) return false
+  return alternatives.some((alt) => {
+    const parts = alt.split(/\s*[,\s]\s*/u).filter(Boolean)
+    return parts.length > 0 && parts.every((part) => semverCompareOne(v, part))
+  })
+}
+function semverRangeMatchLoose(versionText, rangeText) {
+  if (semverRangeMatch(versionText, rangeText)) return true
+  const v = parseSemverText(versionText)
+  if (v === null || v.pre === null) return false
+  return semverRangeMatch(`${v.major}.${v.minor}.${v.patch}`, rangeText)
+}
+function parseFrameworkVersion(value) {
+  const m = String(value ?? '').match(/^(\d+)\.(\d+)\.(\d+)(?:-(?:[a-z]+\.)?(\d+))?$/iu)
+  if (!m) return -1
+  const [, maj, min, pat, rc] = m
+  return {
+    maj: Number.parseInt(maj, 10),
+    min: Number.parseInt(min, 10),
+    pat: Number.parseInt(pat, 10),
+    rc: rc === undefined ? Number.POSITIVE_INFINITY : Number.parseInt(rc, 10),
+  }
+}
+function isFrameworkVersionNewer(candidate, current) {
+  const a = parseFrameworkVersion(candidate)
+  const b = parseFrameworkVersion(current)
+  if (a === -1 || b === -1) return false
+  if (a.maj !== b.maj) return a.maj > b.maj
+  if (a.min !== b.min) return a.min > b.min
+  if (a.pat !== b.pat) return a.pat > b.pat
+  return a.rc > b.rc
+}
+/**
+ * 框架升级候选列表（2026-09-23 用户要求：「有的版本都加上，测试版也可以有列表」）。
+ *
+ * 为什么需要它：升级面板原先只有**一个**目标（`latest` 优先、否则 `next`），用户看到
+ * 「可升级到 0.1.5-rc.3（latest 0.1.5-rc.3 · next 0.1.7-rc.1）」却**没法自己选**——
+ * 想上 0.1.7-rc.1 或某个 alpha 只能手敲 pnpm 命令。
+ *
+ * 规则（安全边界，都在这里钉死）：
+ *   · 只收 **严格比 current 新** 的版本（用 `compareSemverText`，保留完整 prerelease 语义：
+ *     0.1.5-rc.3 < 0.1.6-alpha.1 < 0.1.7-alpha.1 < 0.1.7-rc.1 < 0.1.7 正式版）；
+ *     等于或低于当前的**一律不进列表**——降级另有「回滚到上一版」那条路，不从这里走。
+ *   · 注册表顺序（按发布时间）不可信，这里按语义版本**降序**排（最新在最前）；
+ *   · `latest` / `next` / `beta` / `alpha` 等 dist-tag 命中的版本带 `channel` 标注，
+ *     供前端打「稳定版 / 预发布」标签；`latest` 同时作为 `tagDefault`（默认选中项，保持原行为）。
+ *
+ * @param {object|null|undefined} meta registry 元数据（{ 'dist-tags', versions }）
+ * @param {string|null} current 当前已装框架版本
+ * @returns {{ versions: Array<{version: string, channel: string|null, isLatest: boolean}>, tagDefault: string|null }}
+ */
+function frameworkUpgradeCandidates(meta, current) {
+  const tags = meta !== null && typeof meta === 'object' && meta['dist-tags'] !== null && typeof meta['dist-tags'] === 'object'
+    ? meta['dist-tags']
+    : {}
+  const cur = parseSemverText(current)
+  const all = meta !== null && typeof meta === 'object' && meta.versions !== null && typeof meta.versions === 'object'
+    ? Object.keys(meta.versions)
+    : []
+  const newer = []
+  for (const v of all) {
+    const parsed = parseSemverText(v)
+    if (parsed === null) continue
+    if (cur !== null && compareSemverText(parsed, cur) <= 0) continue
+    newer.push(v)
+  }
+  newer.sort((a, b) => compareSemverText(parseSemverText(b), parseSemverText(a)))
+  const tagDefault = typeof tags.latest === 'string' && newer.includes(tags.latest) ? tags.latest : null
+  const versions = newer.map((v) => {
+    const channel = Object.keys(tags).find((name) => tags[name] === v) ?? null
+    return { version: v, channel, isLatest: channel === 'latest' }
+  })
+  return { versions, tagDefault }
+}
+
+export { parseSemverText, compareSemverText, semverCompareOne, semverRangeMatch, semverRangeMatchLoose, parseFrameworkVersion, isFrameworkVersionNewer, frameworkUpgradeCandidates }

package/lib/server/routes/ai.js

@@ -0,0 +1,172 @@
+// L2 · routes —— AI 赋能（/ai-consent · /ai-empower/*）
+// 分层 Step 8b：从 lib/index.js 的 handle() 原样搬出（只搬移未改逻辑；缩进保持原样）
+
+import { dirname } from 'node:path'
+import { aiEmpowerExecute, aiEmpowerPlan } from '../domain/ai-run.js'
+import { aiJobView, aiJobs, builtinPlanFor, saveAiJobs } from '../domain/ai.js'
+import { frameworkCompatReportFor } from '../domain/compat.js'
+import { sendError, sendJson } from '../infra/httpd.js'
+import { findPatchPath } from '../infra/paths.js'
+import { installJobs, nextAiJobSeq } from '../state.js'
+
+async function routeAiConsent(req, res, rc) {
+  const ctx = rc.ctx
+  const url = rc.url
+  const pathname = rc.pathname
+  const method = rc.method
+  const body = rc.body
+    const jobId = typeof body.jobId === 'string' ? body.jobId : ''
+    const approved = body.approved === true
+    const job = installJobs.get(jobId)
+    if (!job) {
+      sendError(res, 404, '没有这个安装任务')
+      return
+    }
+    if (job.stage !== 'ai-consent' || typeof job.aiWait?.then !== 'function') {
+      sendError(res, 400, '该任务不在等待 AI 授权状态')
+      return
+    }
+    const resolver = job.aiPending?.resolver
+    job.aiWait = null
+    job.aiPending = null
+    if (typeof resolver === 'function') resolver({ approved })
+    sendJson(res, 200, { ok: true, jobId, approved })
+    return
+}
+
+async function routeAiEmpowerPlan(req, res, rc) {
+  const frameworkCompatReportFor = rc.deps.frameworkCompatReportFor
+  const aiEmpowerPlan = rc.deps.aiEmpowerPlan
+  const ctx = rc.ctx
+  const url = rc.url
+  const pathname = rc.pathname
+  const method = rc.method
+  const body = rc.body
+    const source = typeof body.source === 'string' ? body.source.trim() : ''
+    if (source === '' || source.length > 200) {
+      sendError(res, 400, '请提供要部署的组件来源（npm 包名或 GitHub 仓库）')
+      return
+    }
+    const patchPath = findPatchPath(ctx)
+    const profileDir = dirname(patchPath)
+    const jobId = `ai-${Date.now()}-${nextAiJobSeq()}`
+    const job = { id: jobId, source, status: 'running', stage: 'planning', createdAt: Date.now(), logText: '', stepStates: [] }
+    // 框架适配预检（兼容门 + registry 声明）：规划期即给出权威说明，供子代理引用与用户查看
+    try { job.frameworkCheck = await frameworkCompatReportFor(source, ctx, profileDir) } catch { job.frameworkCheck = null }
+    aiJobs.set(jobId, job)
+    const builtin = builtinPlanFor(source)
+    if (builtin !== null) {
+      job.plan = builtin
+      job.status = 'plan-ready'
+      job.stage = 'builtin'
+      job.finishedAt = Date.now()
+      saveAiJobs()
+      sendJson(res, 200, { ok: true, jobId, frameworkCheck: job.frameworkCheck })
+      return
+    }
+    aiEmpowerPlan(job, ctx, profileDir).catch((error) => {
+      job.status = 'failed'
+      job.error = `规划任务异常：${error instanceof Error ? error.message : String(error)}`
+      job.finishedAt = Date.now()
+    })
+    sendJson(res, 200, { ok: true, jobId, frameworkCheck: job.frameworkCheck })
+    return
+}
+
+async function routeAiEmpowerStatus(req, res, rc) {
+  const ctx = rc.ctx
+  const url = rc.url
+  const pathname = rc.pathname
+  const method = rc.method
+  const body = rc.body
+    const jobId = typeof body.jobId === 'string' ? body.jobId : ''
+    const job = aiJobs.get(jobId)
+    if (!job) {
+      sendError(res, 404, '没有这个 AI 赋能任务')
+      return
+    }
+    sendJson(res, 200, { ok: true, ...aiJobView(job) })
+    return
+}
+
+async function routeAiEmpowerList(req, res, rc) {
+  const ctx = rc.ctx
+  const url = rc.url
+  const pathname = rc.pathname
+  const method = rc.method
+  const body = rc.body
+    // 并发任务列表（轻量视图，不含日志全文）：面板展示/切换多个并发 AI 赋能任务
+    const list = [...aiJobs.values()].slice(-10).reverse().map((job) => ({
+      jobId: job.id,
+      source: job.source,
+      status: job.status,
+      stage: job.stage,
+      type: job.plan?.type ?? null,
+      displayName: job.plan?.displayName ?? null,
+      progress: job.progress ?? { done: 0, total: (job.plan?.steps ?? []).length },
+      error: job.error ?? null,
+      createdAt: job.createdAt,
+    }))
+    sendJson(res, 200, { ok: true, tasks: list })
+    return
+}
+
+async function routeAiEmpowerRun(req, res, rc) {
+  const aiEmpowerExecute = rc.deps.aiEmpowerExecute
+  const ctx = rc.ctx
+  const url = rc.url
+  const pathname = rc.pathname
+  const method = rc.method
+  const body = rc.body
+    const jobId = typeof body.jobId === 'string' ? body.jobId : ''
+    const selected = Array.isArray(body.steps) ? body.steps : null
+    // 纵深防御：必须显式确认（前端「同意并部署」按钮携带 confirmed:true），防止任何绕过同意直接执行
+    if (body.confirmed !== true) {
+      sendError(res, 400, '未确认部署：请先在面板勾选步骤并点击「同意并部署」')
+      return
+    }
+    const job = aiJobs.get(jobId)
+    if (!job) {
+      sendError(res, 404, '没有这个 AI 赋能任务')
+      return
+    }
+    if (job.status !== 'plan-ready') {
+      sendError(res, 400, '任务状态不是 plan-ready，无法执行')
+      return
+    }
+    const patchPath = findPatchPath(ctx)
+    const profileDir = dirname(patchPath)
+    aiEmpowerExecute(job, ctx, profileDir, selected).catch((error) => {
+      job.status = 'failed'
+      job.error = `执行任务异常：${error instanceof Error ? error.message : String(error)}`
+      job.finishedAt = Date.now()
+      saveAiJobs()
+    })
+    sendJson(res, 200, { ok: true, jobId })
+    return
+}
+
+async function routeAiEmpowerCancel(req, res, rc) {
+  const ctx = rc.ctx
+  const url = rc.url
+  const pathname = rc.pathname
+  const method = rc.method
+  const body = rc.body
+    const jobId = typeof body.jobId === 'string' ? body.jobId : ''
+    const job = aiJobs.get(jobId)
+    if (!job) {
+      sendError(res, 404, '没有这个 AI 赋能任务')
+      return
+    }
+    try { job.abort?.abort() } catch {}
+    if (job.status === 'running' && job.stage === 'executing') {
+      job.status = 'failed'
+      job.error = '已取消执行（用户中断）'
+      job.finishedAt = Date.now()
+      saveAiJobs()
+    }
+    sendJson(res, 200, { ok: true, jobId })
+    return
+}
+
+export { routeAiConsent, routeAiEmpowerPlan, routeAiEmpowerStatus, routeAiEmpowerList, routeAiEmpowerRun, routeAiEmpowerCancel }

package/lib/server/routes/components.js

@@ -0,0 +1,254 @@
+// L2 · routes —— 组件与仓库落地（/components · /component/* · /repo-*）
+// 分层 Step 8b：从 lib/index.js 的 handle() 原样搬出（只搬移未改逻辑；缩进保持原样）
+
+import { existsSync, mkdirSync } from 'node:fs'
+import { execFile } from 'node:child_process'
+import { join } from 'node:path'
+import { compFind, compStart, compStatus, compStop, compUiUrl, compUpsert, findComponents } from '../domain/components.js'
+import { getReposDir, listLandedRepos, setReposDir } from '../domain/repoland.js'
+import { gitCloneUrls } from '../domain/sources.js'
+import { execFileAsync, gitBin, gitEnv } from '../infra/exec.js'
+import { removeDirVerified } from '../infra/fsx.js'
+import { sendError, sendJson } from '../infra/httpd.js'
+
+async function routeComponents(req, res, rc) {
+  const ctx = rc.ctx
+  const url = rc.url
+  const pathname = rc.pathname
+  const method = rc.method
+  const body = rc.body
+    const list = findComponents()
+    const enriched = []
+    for (const c of list) {
+      try {
+        enriched.push(await compStatus(c.id))
+      } catch {
+        enriched.push({ id: c.id, name: c.name, running: false, healthy: null, pid: null, port: c.port ?? null, autoStart: c.autoStart === true })
+      }
+    }
+    sendJson(res, 200, { ok: true, components: enriched.map((x) => ({ ...x, uiUrl: compUiUrl(compFind(x.id) ?? {}) })) })
+    return
+}
+
+async function routeRepoClone(req, res, rc) {
+  const ctx = rc.ctx
+  const pathname = rc.pathname
+  const method = rc.method
+  const body = rc.body
+    // 仓库落地：克隆任意项目到 <配置路径>/<owner>/<name>（地址由「软件源 → Git 源」决定，
+    // 因此这里接受任意平台的仓库链接：GitHub / Gitee / GitLab / 自建 Gitea / 镜像代理前缀）
+    const raw = typeof body.repo === 'string' ? body.repo.trim() : ''
+    // 循环剥离协议/域名前缀：镜像代理链接可能叠两层（ghproxy.net/https://github.com/...）
+    let repo = raw
+    for (let guard = 0; guard < 4; guard += 1) {
+      const next = repo
+        .replace(/^https?:\/\/[^/]+\//u, '')
+        .replace(/^git@[^:]+:/u, '')
+      if (next === repo) break
+      repo = next
+    }
+    repo = repo.replace(/\.git$/u, '').replace(/\/+$/u, '')
+    const m = /^([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)$/u.exec(repo)
+    if (!m) {
+      sendError(res, 400, '仓库格式不正确：请提供 owner/repo 或仓库链接（如 https://gitee.com/owner/repo）')
+      return
+    }
+    const [, owner, name] = m
+    const root = getReposDir()
+    const target = join(root, owner, name)
+    if (existsSync(target)) {
+      sendError(res, 400, `已存在：${target}（如需更新请先手动处理该目录）`)
+      return
+    }
+    try {
+      mkdirSync(root, { recursive: true })
+      const urls = gitCloneUrls(`${owner}/${name}`)
+      let lastError = null
+      let cloned = false
+      let usedUrl = ''
+      for (const url of urls) {
+        try {
+          await execFileAsync(gitBin(), ['clone', '--depth', '1', url, target], { cwd: root, timeout: 600000, windowsHide: true, maxBuffer: 4 * 1024 * 1024, env: gitEnv() })
+          cloned = true
+          usedUrl = url
+          break
+        } catch (error) {
+          lastError = error
+          // 失败可能留下半成品目录，清理后再试下一个源，否则会因目标已存在而连环失败
+          removeDirVerified(target)
+        }
+      }
+      if (!cloned) throw lastError ?? new Error('未知错误')
+      sendJson(res, 200, { ok: true, owner, name, path: target, url: usedUrl })
+    } catch (error) {
+      sendError(res, 500, `克隆失败：${error instanceof Error ? error.message : String(error)}`)
+    }
+    return
+}
+
+async function routeRepoList(req, res, rc) {
+  const ctx = rc.ctx
+  const url = rc.url
+  const pathname = rc.pathname
+  const method = rc.method
+  const body = rc.body
+    try {
+      sendJson(res, 200, { ok: true, dir: getReposDir(), repos: listLandedRepos() })
+    } catch (error) {
+      sendError(res, 500, error instanceof Error ? error.message : String(error))
+    }
+    return
+}
+
+async function routeRepoLandConfig(req, res, rc) {
+  const ctx = rc.ctx
+  const url = rc.url
+  const pathname = rc.pathname
+  const method = rc.method
+  const body = rc.body
+    const dir = typeof body.dir === 'string' ? body.dir.trim() : ''
+    if (dir === '' || !/^[A-Za-z]:[\\/]/.test(dir) && !/^\\\\/.test(dir)) {
+      sendError(res, 400, '保存路径不合法：请提供绝对路径（如 D:\\dsh\\repos）')
+      return
+    }
+    try {
+      setReposDir(dir)
+      sendJson(res, 200, { ok: true, dir: getReposDir() })
+    } catch (error) {
+      sendError(res, 500, error instanceof Error ? error.message : String(error))
+    }
+    return
+}
+
+async function routeRepoRemove(req, res, rc) {
+  const ctx = rc.ctx
+  const url = rc.url
+  const pathname = rc.pathname
+  const method = rc.method
+  const body = rc.body
+    const target = typeof body.path === 'string' ? body.path : ''
+    const rootNorm = getReposDir().replace(/[\\/]+$/u, '')
+    const tNorm = target.replace(/[\\/]+$/u, '')
+    if (!tNorm.startsWith(rootNorm) || tNorm === rootNorm || !existsSync(target)) {
+      sendError(res, 400, '路径不在仓库落地目录内或不存在')
+      return
+    }
+    // 核实删除结果：本机环境可能让 rmSync 静默落空（见 removeDirVerified 注释），
+    // 删不掉却回 {ok:true} 会让用户以为仓库已清理。
+    const result = removeDirVerified(target)
+    if (!result.ok) {
+      sendError(res, 500, `删除失败：目录仍存在（${target}）${result.error ? `，原因：${result.error}` : ''}——当前环境可能禁止删除该目录，请手动删除`)
+      return
+    }
+    sendJson(res, 200, { ok: true })
+    return
+}
+
+async function routeRepoOpen(req, res, rc) {
+  const ctx = rc.ctx
+  const url = rc.url
+  const pathname = rc.pathname
+  const method = rc.method
+  const body = rc.body
+    const target = typeof body.path === 'string' ? body.path : ''
+    const rootNorm = getReposDir().replace(/[\\/]+$/u, '')
+    const tNorm = target.replace(/[\\/]+$/u, '')
+    if (!tNorm.startsWith(rootNorm) || tNorm === rootNorm) {
+      sendError(res, 400, '路径不在仓库落地目录内')
+      return
+    }
+    if (!existsSync(target)) {
+      sendError(res, 404, `目录不存在：${target}`)
+      return
+    }
+    try {
+      execFile('explorer.exe', [target], { windowsHide: true, detached: true }).unref()
+      sendJson(res, 200, { ok: true })
+    } catch (error) {
+      sendError(res, 500, `打开失败：${error instanceof Error ? error.message : String(error)}`)
+    }
+    return
+}
+
+async function routeComponentAutostart(req, res, rc) {
+  const ctx = rc.ctx
+  const url = rc.url
+  const pathname = rc.pathname
+  const method = rc.method
+  const body = rc.body
+    const id = typeof body.id === 'string' ? body.id : ''
+    const enabled = body.enabled === true
+    if (id === '') {
+      sendError(res, 400, '缺少组件 id')
+      return
+    }
+    if (!compFind(id)) {
+      sendError(res, 404, '组件不存在')
+      return
+    }
+    compUpsert({ id, autoStart: enabled })
+    if (enabled) {
+      compStart(id).catch(() => {})
+    }
+    sendJson(res, 200, { ok: true, id, autoStart: enabled })
+    return
+}
+
+async function routeComponentStart(req, res, rc) {
+  const ctx = rc.ctx
+  const url = rc.url
+  const pathname = rc.pathname
+  const method = rc.method
+  const body = rc.body
+    const id = typeof body.id === 'string' ? body.id : ''
+    if (id === '') {
+      sendError(res, 400, '缺少组件 id')
+      return
+    }
+    try {
+      sendJson(res, 200, { ok: true, ...(await compStart(id)) })
+    } catch (error) {
+      sendError(res, 500, error instanceof Error ? error.message : String(error))
+    }
+    return
+}
+
+async function routeComponentStop(req, res, rc) {
+  const ctx = rc.ctx
+  const url = rc.url
+  const pathname = rc.pathname
+  const method = rc.method
+  const body = rc.body
+    const id = typeof body.id === 'string' ? body.id : ''
+    if (id === '') {
+      sendError(res, 400, '缺少组件 id')
+      return
+    }
+    try {
+      sendJson(res, 200, { ok: true, ...(await compStop(id)) })
+    } catch (error) {
+      sendError(res, 500, error instanceof Error ? error.message : String(error))
+    }
+    return
+}
+
+async function routeComponentStatus(req, res, rc) {
+  const ctx = rc.ctx
+  const url = rc.url
+  const pathname = rc.pathname
+  const method = rc.method
+  const body = rc.body
+    const id = typeof body.id === 'string' ? body.id : ''
+    if (id === '') {
+      sendError(res, 400, '缺少组件 id')
+      return
+    }
+    try {
+      sendJson(res, 200, { ok: true, ...(await compStatus(id)) })
+    } catch (error) {
+      sendError(res, 500, error instanceof Error ? error.message : String(error))
+    }
+    return
+}
+
+export { routeComponents, routeRepoClone, routeRepoList, routeRepoLandConfig, routeRepoRemove, routeRepoOpen, routeComponentAutostart, routeComponentStart, routeComponentStop, routeComponentStatus }