@_tc/template-core 0.0.1-bate.57 → 0.0.1-bate.59

package/.skills/tc-component-usage-skills/SKILL.md

@@ -31,8 +31,13 @@ Every input-like component supports both modes. Check for `value !== undefined`
 
 // Uncontrolled
 <Input defaultValue="hello" />
+
+// Password fields get a built-in show/hide toggle
+<Input type="password" value={password} onChange={setPassword} />
 ```
 
+For `type="password"`, do not add a separate eye icon or clear button. The built-in password toggle is automatic; `allowClear` is hidden on password inputs.
+
 ### Form Integration (rc-field-form)
 
 `Form` / `FormItem` / `SchemaForm` wrap `rc-field-form`. `FormItem` auto-clones children to inject `value`/`onChange`. Prefer `SchemaForm` for data-driven forms:

package/.skills/tc-component-usage-skills/reference/component-api.md

@@ -45,12 +45,15 @@ interface InputProps extends Omit<React.InputHTMLAttributes<HTMLInputElement>, '
   onChange?: (value: string, event: ChangeEvent<HTMLInputElement>) => void
   allowClear?: boolean | { clearIcon: ReactNode }
   addonAfter?: ReactNode
+  inputClassName?: string
   className?: string
 }
 ```
 
 Note: `onChange` callback receives `(stringValue, event)` — two arguments, not one.
 
+Use `type="password"` for password fields. The component shows a built-in visibility toggle, supports controlled and uncontrolled values, and removes the native DOM `value` attribute while preserving the input value property. `allowClear` is intentionally hidden for password inputs. `addonAfter` shares the right-side accessory area with the password toggle.
+
 ---
 
 ## InputNumber

package/.skills/tc-generator/reference/example.md

@@ -48,6 +48,10 @@ main().catch((error) => {
 ```js
 module.exports = {
   port: 9000,
+  auth: {
+    ATKey: "Authorization",
+    RTKey: "RT",
+  },
 };
 ```
 

package/.skills/tc-generator/reference/project-template/config/config.default.js

@@ -1,5 +1,9 @@
 module.exports = {
   port: 9000,
+  auth: {
+    ATKey: "Authorization",
+    RTKey: "RT",
+  },
   // Optional: override the default `.template-core/template-core.sqlite` path.
   // db: {
   //   path: "data/app.sqlite",

package/AGENT_README.md

@@ -74,9 +74,15 @@ main().catch((error) => {
 // config/config.default.ts
 export default {
   port: 9000,
+  auth: {
+    ATKey: 'Authorization',
+    RTKey: 'RT',
+  },
 }
 ```
 
+`auth.ATKey` / `auth.RTKey` 是业务鉴权中间件读取短 token 和刷新 token header 的默认约定；默认分别是 `Authorization` / `RT`。
+
 访问内置后台：
 
 ```text
@@ -93,6 +99,7 @@ http://localhost:9000/dash?projk=demo
 app/controller/**/*.(js|ts)      -> app.controller
 app/service/**/*.(js|ts)         -> app.service
 app/middleware/**/*.(js|ts)      -> app.middlewares
+app/middleware.(js|ts)           -> 全局中间件编排，按 frame -> business 顺序执行
 app/router/**/*.(js|ts)          -> Koa router
 app/router-guard.(js|ts)         -> 兜底路由守卫
 app/router-schema/**/*.(js|ts)   -> app.routerSchema
@@ -102,6 +109,24 @@ config/config.{env}.(js|ts)      -> app.config
 model/**/*.(js|ts)               -> 内置 project service 读取的项目模型配置
 ```
 
+常用后端类型：
+
+| 类型 | 使用场景 |
+| --- | --- |
+| `Ctx` | Controller、middleware、router handler 的请求上下文，包含 `ctx.params` 和可选 `ctx.reqData`。 |
+| `ControllerFN` | 约束 `app/controller/*.ts` 默认导出的 controller 工厂。 |
+| `ServiceFN` | 约束 `app/service/*.ts` 默认导出的 service 工厂。 |
+| `MiddlewareFN` | 约束 `app/middleware/*.ts` 默认导出的 middleware 工厂。 |
+| `RouterFN` | 约束 `app/router/*.ts` 默认导出的路由注册函数。 |
+
+`ctx.reqData` 是 API 请求的统一参数入口：
+
+- `ctx.reqData.query` 来自 `ctx.query`。
+- `ctx.reqData.body` 来自 `ctx.request.body`。
+- `ctx.reqData.headers` 来自 `ctx.headers`。
+- `ctx.reqData.data` 按 `query -> body` 合并；字段冲突时 body 覆盖 query。
+- router params 不在 `reqData` 里，继续用 `ctx.params`。
+
 Controller 示例：
 
 ```ts
@@ -118,15 +143,15 @@ const getProductController = ((app) => {
     list = async (ctx: Ctx) => {
       this.success(ctx, {
         data: products,
-        page: Number(ctx.request.query.page || 1),
-        pageSize: Number(ctx.request.query.pageSize || 10),
+        page: Number(ctx.reqData?.data.page || 1),
+        pageSize: Number(ctx.reqData?.data.pageSize || 10),
         total: products.length,
       })
     }
 
     detail = async (ctx: Ctx) => {
       const item = products.find((product) => {
-        return product.product_id === ctx.request.query.product_id
+        return product.product_id === ctx.reqData?.data.product_id
       })
 
       this.success(ctx, item ?? null)
@@ -140,12 +165,12 @@ export default getProductController
 Router 示例：
 
 ```ts
-import type { KoaApp, Router } from '@_tc/template-core'
+import type { RouterFN } from '@_tc/template-core'
 
-export default (app: KoaApp, router: Router) => {
+export default ((app, router) => {
   router.get('/api/product/list', app.controller.product.list)
   router.get('/api/product', app.controller.product.detail)
-}
+}) satisfies RouterFN
 ```
 
 路由挂载顺序：
@@ -156,12 +181,12 @@ export default (app: KoaApp, router: Router) => {
 - 通配、兜底、重定向类路由建议设置较大的 `level`，避免抢先匹配业务 API。
 
 ```ts
-import type { KoaApp, Router } from '@_tc/template-core'
+import type { RouterFN } from '@_tc/template-core'
 
-export default (app: KoaApp, router: Router) => {
+export default ((app, router) => {
   router.level = 10
   router.get('/api/fallback/:id', app.controller.fallback.detail)
-}
+}) satisfies RouterFN
 ```
 
 内置响应约定：`BaseController.success(ctx, data)` 返回 `{ data, code: 0, message: 'ok' }`。
@@ -360,10 +385,14 @@ import { Button, DataTable, Form, Input, Modal, Select } from '@_tc/template-cor
 常用前端能力：
 
 - 请求方法：`request`、`get`、`post`、`put`、`patch`、`del`。
+- 请求 header：自动添加 `s_t`、`s_sign`、`projk`；存在短 token 时添加 `Authorization: Bearer ${token}`。
+- 本地 key：短 token 是 `localStorage.auth_token`，项目 key 是 `localStorage.p_J_k`；刷新 token header 默认名是 `RT`。
+- `getAuthToken()` 是同步函数，读取前无需 `await`。
 - Schema 通信：`schemaEventBus`、`eventsInfo`、`merge`。
 - 共享状态：`modeStore`、`schemaStore`、`apiFreezerStore` 及对应 hooks。
 - 多语言：`i18nStore.getState().addResources()`，配置文案可写 `$i18n::...`。
 - 主题：`ThemeSwitch` 会同步根节点 `dark` class 和 `localStorage`。
+- `Input type="password"` 会自动显示密码显隐按钮；`allowClear` 不作用于密码输入。
 
 不要直接依赖 `frontend/src/...`、`packages/react/ui/...` 这类包内部路径。
 

package/README.md

@@ -101,7 +101,22 @@ main().catch((error) => {
 | `homePage` | `string` | 否 | - | 应用首页路径 |
 | `additionalPublicPaths` | `string | string[]` | 否 | - | 追加静态资源目录和 Nunjucks 模板查找目录，必须传绝对路径 |
 
-框架会自动读取 `config/config.default.ts` 中的配置（如 `port`、`env` 等）。
+框架会自动读取 `config/config.default.ts` 中的配置（如 `port`、`env`、`auth` 等）。
+
+常用默认配置示例：
+
+```ts
+// config/config.default.ts
+export default {
+  port: 9000,
+  auth: {
+    ATKey: 'Authorization',
+    RTKey: 'RT',
+  },
+}
+```
+
+`auth.ATKey` / `auth.RTKey` 用于约定业务鉴权中间件读取短 token 和刷新 token 的 header 名；默认分别为 `Authorization` 和 `RT`。
 
 静态资源挂载和 Nunjucks 模板查找顺序均为：框架 `app/public`、项目 `app/public`、`additionalPublicPaths`。当 `buildFE` 输出到自定义目录时，可以用 `additionalPublicPaths` 把该目录交给 Koa 提供静态资源访问和模板渲染。
 
@@ -165,6 +180,49 @@ http://localhost:9000/dash?projk=demo
 | `@_tc/template-core/fe/tailwind_ui.css` | 前端全局样式入口，源码对应 `frontend/src/main.css` |
 | `@_tc/template-core/model` | model 配置类型 |
 
+### 后端类型
+
+`@_tc/template-core` 会导出常用 Node 侧类型，业务项目写 `app/*` 文件时建议优先复用这些类型。
+
+| 类型 | 使用场景 |
+| --- | --- |
+| `Ctx` | Controller、middleware、router handler 的 Koa 请求上下文类型，包含框架补充的 `ctx.params` 和可选 `ctx.reqData`。 |
+| `ControllerFN` | `app/controller/*.ts` 默认导出工厂函数的约束类型，适合配合 `satisfies ControllerFN` 保留 controller 实例方法类型。 |
+| `ServiceFN` | `app/service/*.ts` 默认导出工厂函数的约束类型，适合配合 `satisfies ServiceFN` 约束 service class 工厂。 |
+| `MiddlewareFN` | `app/middleware/*.ts` 默认导出工厂函数的约束类型，返回标准 Koa middleware。 |
+| `RouterFN` | `app/router/*.ts` 默认导出函数的约束类型，用于接收 `app` 和 `router` 并注册路由。 |
+
+示例：
+
+```ts
+import { baseFn, type ControllerFN, type Ctx, type MiddlewareFN, type RouterFN, type ServiceFN } from '@_tc/template-core'
+
+export const getDemoController = ((app) => {
+  const BaseController = baseFn.baseControllerFn(app)
+
+  return class DemoController extends BaseController {
+    list = async (ctx: Ctx) => {
+      this.success(ctx, ctx.reqData?.data ?? {})
+    }
+  }
+}) satisfies ControllerFN
+
+export const getDemoService = ((app) => {
+  return class DemoService {
+    readonly app = app
+  }
+}) satisfies ServiceFN
+
+export const demoMiddleware = ((app) => async (ctx, next) => {
+  app.extends.logger?.info(ctx.path)
+  await next()
+}) satisfies MiddlewareFN
+
+export const demoRouter = ((app, router) => {
+  router.get(`${app.options.apiPrefix}/demo/list`, app.controller.demo.list)
+}) satisfies RouterFN
+```
+
 ## 样式与 Tailwind V4
 
 使用内置前端或 UI 组件时，需要引入包内样式。默认 `@_tc/template-core/fe` 的 `initApp` 会经过源码入口 `frontend/src/main.tsx` 引入 `frontend/src/main.css`；如果项目侧自定义入口、只使用 `fe/rc` 组件，或希望样式入口更明确，建议显式引入：
@@ -463,6 +521,8 @@ export function Toolbar() {
 }
 ```
 
+`Authorization` 默认对应服务端配置 `config.auth.ATKey`。前端本地 token 存在 `localStorage.auth_token`，项目 key 存在 `localStorage.p_J_k`；刷新 token header 名预留为 `config.auth.RTKey`，默认是 `RT`。
+
 **签名机制**：
 - 签名密钥：服务端从 `app.config.signKey` 读取，并在页面渲染时注入为 `window._signKey`
 - 签名算法：`md5(签名密钥_${时间戳})`
@@ -540,7 +600,7 @@ try {
 | 组件 | 用途 | 导入路径 |
 | --- | --- | --- |
 | `Button` | 按钮组件，支持多种样式和尺寸 | `@_tc/template-core/fe/rc` |
-| `Input` | 输入框组件 | `@_tc/template-core/fe/rc` |
+| `Input` | 输入框组件，支持清空、右侧附加内容和密码显隐 | `@_tc/template-core/fe/rc` |
 | `InputNumber` | 数字输入框组件 | `@_tc/template-core/fe/rc` |
 | `Textarea` | 多行文本输入框组件 | `@_tc/template-core/fe/rc` |
 | `Select` | 下拉选择组件，支持单选和多选 | `@_tc/template-core/fe/rc` |
@@ -623,6 +683,7 @@ function MyComponent() {
       </Button>
 
       <Input placeholder="请输入内容" />
+      <Input type="password" placeholder="请输入密码" />
 
       <Select
         options={[
@@ -648,6 +709,7 @@ function MyComponent() {
 app/controller/**/*.(js|ts)      -> app.controller
 app/service/**/*.(js|ts)         -> app.service
 app/middleware/**/*.(js|ts)      -> app.middlewares
+app/middleware.(js|ts)           -> 全局中间件编排，按框架 -> 项目顺序执行
 app/router/**/*.(js|ts)          -> Koa router
 app/router-schema/**/*.(js|ts)   -> app.routerSchema
 app/extend/*.(js|ts)             -> app.extends
@@ -662,6 +724,24 @@ model/**/*.(js|ts)               -> 项目模型配置
 - `app.extends.crypto`：Node 侧加密辅助方法，支持 base64url 编解码、HMAC 签名、签名 payload 和常量时间比较。
 - `app.extends.db`：默认 SQLite 框架数据库，提供 `getDBData/setDBData` 等通用数据方法。
 
+API controller 可以通过 `ctx.reqData` 读取统一请求参数：
+
+```ts
+const { query, body, headers, data } = ctx.reqData ?? {
+  query: {},
+  body: undefined,
+  headers: {},
+  data: {},
+}
+```
+
+- `query` 来自 `ctx.query`。
+- `body` 来自 `ctx.request.body`。
+- `headers` 来自 `ctx.headers`。
+- `data` 是便捷合并层，当前按 `query -> body` 顺序合并；字段冲突时 body 覆盖 query。
+
+`ctx.reqData` 只在 API 请求中由内置中间件注入，类型上是可选字段。router params 不在 `reqData` 里，仍然从 `ctx.params` 获取。
+
 ### 数据库扩展
 
 默认 `app.extends.db` 使用 SQLite 保存数据，数据库文件位于项目根目录 `.template-core/template-core.sqlite`。可以在配置中调整路径：

package/cjs/config/config.default.js

@@ -1 +1 @@
-var e={frameName:`TemplateCore`,signKey:`sakjdfnkjwjfnfkjkjldljksndf`,apiSignVerify:{whiteList:[]},notFoundRedirectCount:5};module.exports=e;
+var e={frameName:`TemplateCore`,signKey:`sakjdfnkjwjfnfkjkjldljksndf`,apiSignVerify:{whiteList:[]},auth:{ATKey:`Authorization`,RTKey:`RT`},notFoundRedirectCount:5};module.exports=e;

package/cjs/packages/core/index.js

@@ -1 +1 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require(`../../_virtual/_rolldown/runtime.js`),t=require(`./env.js`),n=require(`../utils/path.js`),r=require(`../utils/runFileFn.js`);require(`../utils/index.js`);const i=require(`./loader/config.js`),a=require(`./loader/controller.js`),o=require(`./loader/extend.js`),s=require(`./loader/middleware.js`),c=require(`./loader/model.js`),l=require(`./loader/router.js`),u=require(`./loader/router-schema.js`),d=require(`./loader/service.js`);let f=require(`koa`);f=e.__toESM(f,1);var p=c,m=async(e={})=>{let r=new f.default;r.hooks={},r.hooks.initing?.();let{frameBaseDir:c,baseDir:p,...m}=e;r.options=m,r.options.pageBasePage=r.options.pageBasePage??`/`,r.options.apiPrefix=r.options.apiPrefix||`/api`;let g=r.baseDir=p??process.cwd(),_=r.frameBaseDir=c??n.resolve(__dirname,`..`);r.businessAppPath=n.resolve(g,`app`),r.frameAppPath=n.resolve(_,`app`),r.paths=[{type:`frame`,path:r.frameAppPath},{type:`business`,path:r.businessAppPath}],r.envs=t(),console.log(`-- [init] env: ${r.envs.get()} --`),i(r),console.log(`-- [init] loader config done --`),await o(r),console.log(`-- [init] loader extend done --`),u(r),console.log(`-- [init] loader routerSchema done --`),d(r),console.log(`-- [init] loader service done --`),a(r),console.log(`-- [init] loader controller done --`),s(r),console.log(`-- [init] loader middleware done --`),h(r),l(r),console.log(`-- [init] loader router done --`);try{let e=r.config.port||process.env.PORT||`8080`,n=parseInt(e+``,10),i=process.env.IP||`0.0.0.0`;r.listen(n,i),console.log(`Server port: http://localhost:${n}`),console.log(`run env is ${t().get()}`)}catch(e){console.error(e)}return r.hooks.inited?.(),r},h=e=>{e.paths.forEach(t=>{for(let i of[`ts`,`js`]){let a=`middleware.${i}`,o=n.resolve(t.path,a);try{r.runFileFn(o)?.(e),console.log(`-- [init] loader ${t.type} appMiddleware ${a} done -- (${t.path})`);break}catch(e){let n=e;if(!(n?.code===`MODULE_NOT_FOUND`&&typeof n?.message==`string`&&(n.message.includes(`Cannot find module '${o}'`)||n.message.includes(`Cannot find module "${o}"`))))throw console.log(`-- [error] loader ${t.type} appMiddleware ${a} error -- (${o})`),e}}})};exports.loaderModel=p,exports.start=m;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require(`../../_virtual/_rolldown/runtime.js`),t=require(`./paths.js`),n=require(`./env.js`),r=require(`../utils/path.js`),i=require(`../utils/runFileFn.js`);require(`../utils/index.js`);const a=require(`./loader/config.js`),o=require(`./loader/controller.js`),s=require(`./loader/extend.js`),c=require(`./loader/middleware.js`),l=require(`./loader/model.js`),u=require(`./loader/router.js`),d=require(`./loader/router-schema.js`),f=require(`./loader/service.js`);let p=require(`koa`);p=e.__toESM(p,1);var m=l,h=async(e={})=>{let t=new p.default;t.hooks={},t.hooks.initing?.();let{frameBaseDir:i,baseDir:l,...m}=e;t.options=m,t.options.pageBasePage=t.options.pageBasePage??`/`,t.options.apiPrefix=t.options.apiPrefix||`/api`;let h=t.baseDir=l??process.cwd(),_=t.frameBaseDir=i??r.resolve(__dirname,`..`);t.businessAppPath=r.resolve(h,`app`),t.frameAppPath=r.resolve(_,`app`),t.paths=[{type:`frame`,path:t.frameAppPath},{type:`business`,path:t.businessAppPath}],t.envs=n(),console.log(`-- [init] env: ${t.envs.get()} --`),a(t),console.log(`-- [init] loader config done --`),await s(t),console.log(`-- [init] loader extend done --`),d(t),console.log(`-- [init] loader routerSchema done --`),f(t),console.log(`-- [init] loader service done --`),o(t),console.log(`-- [init] loader controller done --`),c(t),console.log(`-- [init] loader middleware done --`),g(t),u(t),console.log(`-- [init] loader router done --`);try{let e=t.config.port||process.env.PORT||`8080`,r=parseInt(e+``,10),i=process.env.IP||`0.0.0.0`;t.listen(r,i),console.log(`Server port: http://localhost:${r}`),console.log(`run env is ${n().get()}`)}catch(e){console.error(e)}return t.hooks.inited?.(),t},g=e=>{[`frame`,`business`].map(n=>({type:n,path:t.getAppPath(e,n)})).forEach(t=>{for(let n of[`ts`,`js`]){let a=`middleware.${n}`,o=r.resolve(t.path,a);try{i.runFileFn(o)?.(e),console.log(`-- [init] loader ${t.type} appMiddleware ${a} done -- (${t.path})`);break}catch(e){let n=e;if(!(n?.code===`MODULE_NOT_FOUND`&&typeof n?.message==`string`&&(n.message.includes(`Cannot find module '${o}'`)||n.message.includes(`Cannot find module "${o}"`))))throw console.log(`-- [error] loader ${t.type} appMiddleware ${a} error -- (${o})`),e}}})};exports.loaderModel=m,exports.start=h;

package/cjs/packages/core/loader/middleware.js

@@ -1 +1 @@
-const e=require(`../paths.js`),t=require(`../../utils/loadFile.js`),n=require(`../../utils/runFileFn.js`);require(`../../utils/index.js`);var r=r=>{r.middlewares=e.getAppPaths(r).reduce((e,i)=>{let a=t.loadFileFn(i,`middleware`,{loadFileCallback:e=>n.runFileFn(e)(r)});return{...e,...a}},{})};module.exports=r;
+const e=require(`../paths.js`),t=require(`../../utils/loadFile.js`),n=require(`../../utils/runFileFn.js`);require(`../../utils/index.js`);var r=r=>{r.middlewares=e.getAppPaths(r).reduce((e,i)=>{let a=t.loadFileFn(i,`middlewares`,{loadFileCallback:e=>n.runFileFn(e)(r)});return{...e,...a}},{})};module.exports=r;

package/esm/app/{middleware → middlewares}/api-params-verify.js

@@ -1,5 +1,5 @@
 import e from "ajv";
-//#region app/middleware/api-params-verify.ts
+//#region app/middlewares/api-params-verify.ts
 var t = new e(), n = "http://json-schema.org/draft-07/schema#", r = (e, r, i) => {
 	if (r[e] && i[e]) {
 		i[e].$schema = n;

package/esm/app/{middleware → middlewares}/api-sign-verify.js

@@ -1,5 +1,5 @@
 import e from "md5";
-//#region app/middleware/api-sign-verify.ts
+//#region app/middlewares/api-sign-verify.ts
 var t = 1e3 * 60 * 10, n = (n) => async (r, i) => {
 	let { path: a, method: o } = r;
 	if (a.includes(n.options.apiPrefix) && !n.config?.apiSignVerify?.whiteList?.includes(a)) {

package/esm/app/{middleware → middlewares}/error-handle.js

@@ -1,4 +1,4 @@
-//#region app/middleware/error-handle.ts
+//#region app/middlewares/error-handle.ts
 var e = {}, t = (t) => async (n, r) => {
 	try {
 		await r();

package/esm/app/{middleware → middlewares}/project-handler.js

@@ -1,4 +1,4 @@
-//#region app/middleware/project-handler.ts
+//#region app/middlewares/project-handler.ts
 var e = (e) => async (t, n) => {
 	let r = t.headers.projk, { path: i } = t;
 	if (i.indexOf(`${e.options.apiPrefix}/proj/`) !== -1 && (!r || ["undefined", "null"].includes(r))) {

package/esm/app/{middleware → middlewares}/request-parameter-parsing.js

@@ -1,4 +1,4 @@
-//#region app/middleware/request-parameter-parsing.ts
+//#region app/middlewares/request-parameter-parsing.ts
 var e = (e) => typeof e == "object" && !!e && !Array.isArray(e), t = ((t) => async (n, r) => {
 	if (n.path.includes(`${t.options.apiPrefix}/`)) {
 		let { query: t, headers: r } = n, i = n.request.body;

package/esm/config/config.default.js

@@ -3,6 +3,10 @@ var e = {
 	frameName: "TemplateCore",
 	signKey: "sakjdfnkjwjfnfkjkjldljksndf",
 	apiSignVerify: { whiteList: [] },
+	auth: {
+		ATKey: "Authorization",
+		RTKey: "RT"
+	},
 	notFoundRedirectCount: 5
 };
 //#endregion

package/esm/packages/core/index.js

@@ -1,50 +1,54 @@
-import e from "./env.js";
-import { resolve as t } from "../utils/path.js";
-import { runFileFn as n } from "../utils/runFileFn.js";
+import { getAppPath as e } from "./paths.js";
+import t from "./env.js";
+import { resolve as n } from "../utils/path.js";
+import { runFileFn as r } from "../utils/runFileFn.js";
 import "../utils/index.js";
-import r from "./loader/config.js";
-import i from "./loader/controller.js";
-import a from "./loader/extend.js";
-import o from "./loader/middleware.js";
-import s from "./loader/model.js";
-import c from "./loader/router.js";
-import l from "./loader/router-schema.js";
-import u from "./loader/service.js";
-import d from "koa";
+import i from "./loader/config.js";
+import a from "./loader/controller.js";
+import o from "./loader/extend.js";
+import s from "./loader/middleware.js";
+import c from "./loader/model.js";
+import l from "./loader/router.js";
+import u from "./loader/router-schema.js";
+import d from "./loader/service.js";
+import f from "koa";
 //#region packages/core/index.ts
-var f = s, p = async (n = {}) => {
-	let s = new d();
-	s.hooks = {}, s.hooks.initing?.();
-	let { frameBaseDir: f, baseDir: p, ...h } = n;
-	s.options = h, s.options.pageBasePage = s.options.pageBasePage ?? "/", s.options.apiPrefix = s.options.apiPrefix || "/api";
-	let g = s.baseDir = p ?? process.cwd(), _ = s.frameBaseDir = f ?? t(__dirname, "..");
-	s.businessAppPath = t(g, "app"), s.frameAppPath = t(_, "app"), s.paths = [{
+var p = c, m = async (e = {}) => {
+	let r = new f();
+	r.hooks = {}, r.hooks.initing?.();
+	let { frameBaseDir: c, baseDir: p, ...m } = e;
+	r.options = m, r.options.pageBasePage = r.options.pageBasePage ?? "/", r.options.apiPrefix = r.options.apiPrefix || "/api";
+	let g = r.baseDir = p ?? process.cwd(), _ = r.frameBaseDir = c ?? n(__dirname, "..");
+	r.businessAppPath = n(g, "app"), r.frameAppPath = n(_, "app"), r.paths = [{
 		type: "frame",
-		path: s.frameAppPath
+		path: r.frameAppPath
 	}, {
 		type: "business",
-		path: s.businessAppPath
-	}], s.envs = e(), console.log(`-- [init] env: ${s.envs.get()} --`), r(s), console.log("-- [init] loader config done --"), await a(s), console.log("-- [init] loader extend done --"), l(s), console.log("-- [init] loader routerSchema done --"), u(s), console.log("-- [init] loader service done --"), i(s), console.log("-- [init] loader controller done --"), o(s), console.log("-- [init] loader middleware done --"), m(s), c(s), console.log("-- [init] loader router done --");
+		path: r.businessAppPath
+	}], r.envs = t(), console.log(`-- [init] env: ${r.envs.get()} --`), i(r), console.log("-- [init] loader config done --"), await o(r), console.log("-- [init] loader extend done --"), u(r), console.log("-- [init] loader routerSchema done --"), d(r), console.log("-- [init] loader service done --"), a(r), console.log("-- [init] loader controller done --"), s(r), console.log("-- [init] loader middleware done --"), h(r), l(r), console.log("-- [init] loader router done --");
 	try {
-		let t = s.config.port || process.env.PORT || "8080", n = parseInt(t + "", 10), r = process.env.IP || "0.0.0.0";
-		s.listen(n, r), console.log(`Server port: http://localhost:${n}`), console.log(`run env is ${e().get()}`);
+		let e = r.config.port || process.env.PORT || "8080", n = parseInt(e + "", 10), i = process.env.IP || "0.0.0.0";
+		r.listen(n, i), console.log(`Server port: http://localhost:${n}`), console.log(`run env is ${t().get()}`);
 	} catch (e) {
 		console.error(e);
 	}
-	return s.hooks.inited?.(), s;
-}, m = (e) => {
-	e.paths.forEach((r) => {
+	return r.hooks.inited?.(), r;
+}, h = (t) => {
+	["frame", "business"].map((n) => ({
+		type: n,
+		path: e(t, n)
+	})).forEach((e) => {
 		for (let i of ["ts", "js"]) {
-			let a = `middleware.${i}`, o = t(r.path, a);
+			let a = `middleware.${i}`, o = n(e.path, a);
 			try {
-				n(o)?.(e), console.log(`-- [init] loader ${r.type} appMiddleware ${a} done -- (${r.path})`);
+				r(o)?.(t), console.log(`-- [init] loader ${e.type} appMiddleware ${a} done -- (${e.path})`);
 				break;
-			} catch (e) {
-				let t = e;
-				if (!(t?.code === "MODULE_NOT_FOUND" && typeof t?.message == "string" && (t.message.includes(`Cannot find module '${o}'`) || t.message.includes(`Cannot find module "${o}"`)))) throw console.log(`-- [error] loader ${r.type} appMiddleware ${a} error -- (${o})`), e;
+			} catch (t) {
+				let n = t;
+				if (!(n?.code === "MODULE_NOT_FOUND" && typeof n?.message == "string" && (n.message.includes(`Cannot find module '${o}'`) || n.message.includes(`Cannot find module "${o}"`)))) throw console.log(`-- [error] loader ${e.type} appMiddleware ${a} error -- (${o})`), t;
 			}
 		}
 	});
 };
 //#endregion
-export { f as loaderModel, p as start };
+export { p as loaderModel, m as start };

package/esm/packages/core/loader/middleware.js

@@ -5,7 +5,7 @@ import "../../utils/index.js";
 //#region packages/core/loader/middleware.ts
 var r = (r) => {
 	r.middlewares = e(r).reduce((e, i) => {
-		let a = t(i, "middleware", { loadFileCallback: (e) => n(e)(r) });
+		let a = t(i, "middlewares", { loadFileCallback: (e) => n(e)(r) });
 		return {
 			...e,
 			...a

package/fe/frontend/src/common/request.js

@@ -96,7 +96,7 @@ var removeBaseurlFromURL = (config) => {
 };
 api.interceptors.request.use(async (config) => {
 	removeBaseurlFromURL(config);
-	const token = await getAuthToken();
+	const token = getAuthToken();
 	const aauto = getApiAuth();
 	const time = (/* @__PURE__ */ new Date()).getTime();
 	config.headers = {

package/fe/packages/react/ui/components/Input/Input.js

@@ -1,24 +1,55 @@
 import { cn } from "../../lib/utils.js";
 import { useInputController } from "../hooks/useInputController.js";
-import { forwardRef, useCallback, useMemo } from "react";
+import { forwardRef, useCallback, useEffect, useMemo, useRef, useState } from "react";
 import { jsx, jsxs } from "react/jsx-runtime";
-import { X } from "lucide-react";
+import { Eye, EyeOff, X } from "lucide-react";
 //#region packages/react/ui/components/Input/Input.tsx
 var Input = forwardRef(({ className, inputClassName, type, value: controlledValue, onChange, defaultValue, allowClear, disabled, addonAfter, ...props }, ref) => {
+	const isFileInput = type === "file";
+	const isPasswordInput = type === "password";
 	const { setInternalValue, setIsFocused, setRefs, controllerRef, isControlledRef, isFocused, value, hasValue } = useInputController({
 		defaultValue,
 		controlledValue,
 		ref
 	});
-	const isFileInput = type === "file";
+	const [innerType, setInnerType] = useState(type);
+	const isMountedRef = useRef(false);
+	const currentType = isPasswordInput ? innerType ?? "password" : type;
+	const isPasswordVisible = currentType === "text";
+	const removePasswordValueAttribute = useCallback(() => {
+		if (!isPasswordInput) return;
+		Promise.resolve().then(() => {
+			if (!isMountedRef.current) return;
+			const input = controllerRef.current;
+			if (input?.getAttribute("type") === "password" && input.hasAttribute("value")) input.removeAttribute("value");
+		});
+	}, [controllerRef, isPasswordInput]);
+	useEffect(() => {
+		isMountedRef.current = true;
+		return () => {
+			isMountedRef.current = false;
+		};
+	}, []);
+	useEffect(() => {
+		setInnerType(type);
+	}, [type]);
+	useEffect(() => {
+		removePasswordValueAttribute();
+	}, [
+		currentType,
+		removePasswordValueAttribute,
+		value
+	]);
 	const handleChange = useCallback((e) => {
 		const newValue = e.target.value;
+		removePasswordValueAttribute();
 		if (!isFileInput && !isControlledRef.current) setInternalValue(newValue);
 		onChange?.(newValue, e);
 	}, [
 		isFileInput,
 		isControlledRef,
 		onChange,
+		removePasswordValueAttribute,
 		setInternalValue
 	]);
 	const handleClear = useCallback((e) => {
@@ -36,6 +67,12 @@ var Input = forwardRef(({ className, inputClassName, type, value: controlledValu
 		onChange,
 		setInternalValue
 	]);
+	const handleTogglePassword = useCallback((e) => {
+		e.preventDefault();
+		e.stopPropagation();
+		if (isPasswordVisible) removePasswordValueAttribute();
+		setInnerType((current) => current === "password" ? "text" : "password");
+	}, [isPasswordVisible, removePasswordValueAttribute]);
 	const clearIcon = useMemo(() => {
 		if (allowClear) if (typeof allowClear === "boolean") return /* @__PURE__ */ jsx("span", {
 			className: cn("w-5 h-5 rounded-full", "bg-muted hover:bg-muted/80", "text-foreground", "transition-colors", "flex items-center justify-center", "focus:outline-none"),
@@ -43,44 +80,61 @@ var Input = forwardRef(({ className, inputClassName, type, value: controlledValu
 		});
 		else return allowClear.clearIcon;
 	}, [allowClear]);
-	const showClearIcon = hasValue && clearIcon && !disabled;
+	const showClearIcon = !isPasswordInput && hasValue && clearIcon && !disabled;
+	const showPasswordToggle = isPasswordInput && !disabled;
+	const rightAccessoryCount = Number(Boolean(showClearIcon)) + Number(showPasswordToggle) + Number(Boolean(addonAfter));
+	const hasRightAccessories = rightAccessoryCount > 0;
 	return /* @__PURE__ */ jsxs("div", {
 		className: cn("tc-ui-input relative w-full", className),
-		children: [
-			/* @__PURE__ */ jsx("input", {
-				type,
-				ref: setRefs,
-				...!isFileInput && { value },
-				onChange: handleChange,
-				className: cn("flex h-10 w-full rounded-lg px-3 py-0 text-sm", "border transition-colors duration-200", "placeholder:text-muted-foreground", "focus:outline-none", showClearIcon && "pr-10", addonAfter && "pr-12", disabled ? "cursor-not-allowed bg-muted border-border text-muted-foreground" : "bg-background", !disabled && !isFocused && "border-border", !disabled && isFocused && "border-theme ring-2 ring-theme/25", inputClassName),
-				onFocus: (e) => {
-					if (!disabled) {
-						setIsFocused(true);
-						props.onFocus?.(e);
-					}
-				},
-				onBlur: (e) => {
-					if (!disabled) {
-						setIsFocused(false);
-						props.onBlur?.(e);
-					}
-				},
-				disabled,
-				...props
-			}),
-			showClearIcon && /* @__PURE__ */ jsx("button", {
-				type: "button",
-				onClick: handleClear,
-				"aria-label": "Clear input",
-				title: "Clear input",
-				className: cn("absolute right-3 top-1/2 -translate-y-1/2"),
-				children: clearIcon
-			}),
-			addonAfter && /* @__PURE__ */ jsx("div", {
-				className: "absolute right-2 top-1/2 -translate-y-1/2",
-				children: addonAfter
-			})
-		]
+		children: [/* @__PURE__ */ jsx("input", {
+			type: currentType,
+			ref: setRefs,
+			...!isFileInput && { value },
+			onChange: handleChange,
+			className: cn("flex h-10 w-full rounded-lg px-3 py-0 text-sm", "border transition-colors duration-200", "placeholder:text-muted-foreground", "focus:outline-none", rightAccessoryCount === 1 && "pr-10", rightAccessoryCount === 2 && "pr-20", rightAccessoryCount >= 3 && "pr-28", disabled ? "cursor-not-allowed bg-muted border-border text-muted-foreground" : "bg-background", !disabled && !isFocused && "border-border", !disabled && isFocused && "border-theme ring-2 ring-theme/25", inputClassName),
+			onFocus: (e) => {
+				if (!disabled) {
+					removePasswordValueAttribute();
+					setIsFocused(true);
+					props.onFocus?.(e);
+				}
+			},
+			onBlur: (e) => {
+				if (!disabled) {
+					removePasswordValueAttribute();
+					setIsFocused(false);
+					props.onBlur?.(e);
+				}
+			},
+			disabled,
+			...props
+		}), hasRightAccessories && /* @__PURE__ */ jsxs("div", {
+			className: "absolute right-1.5 top-1/2 flex -translate-y-1/2 items-center gap-1",
+			children: [
+				showClearIcon && /* @__PURE__ */ jsx("button", {
+					type: "button",
+					onMouseDown: (e) => e.preventDefault(),
+					onClick: handleClear,
+					"aria-label": "Clear input",
+					title: "Clear input",
+					className: "flex h-7 w-7 items-center justify-center rounded-md transition-colors hover:bg-foreground/8",
+					children: clearIcon
+				}),
+				showPasswordToggle && /* @__PURE__ */ jsx("button", {
+					type: "button",
+					onMouseDown: (e) => e.preventDefault(),
+					onClick: handleTogglePassword,
+					"aria-label": isPasswordVisible ? "Hide password" : "Show password",
+					title: isPasswordVisible ? "Hide password" : "Show password",
+					className: "flex h-7 w-7 items-center justify-center rounded-md text-muted-foreground transition-colors hover:bg-foreground/8 hover:text-foreground",
+					children: isPasswordVisible ? /* @__PURE__ */ jsx(EyeOff, { size: 16 }) : /* @__PURE__ */ jsx(Eye, { size: 16 })
+				}),
+				addonAfter && /* @__PURE__ */ jsx("div", {
+					className: "flex h-7 items-center text-muted-foreground",
+					children: addonAfter
+				})
+			]
+		})]
 	});
 });
 Input.displayName = "Input";

package/fe/packages/react/ui/components/testPage/index.js

@@ -209,14 +209,40 @@ function InputDemo() {
 	return /* @__PURE__ */ jsxs(Section, {
 		title: "Input",
 		children: [
-			/* @__PURE__ */ jsx(Input, { placeholder: "普通输入框" }),
+			/* @__PURE__ */ jsx(Input, {
+				placeholder: "普通输入框",
+				className: "w-48"
+			}),
+			/* @__PURE__ */ jsx(Input, {
+				allowClear: true,
+				defaultValue: "可清空内容",
+				placeholder: "清空按钮",
+				className: "w-48"
+			}),
+			/* @__PURE__ */ jsx(Input, {
+				type: "password",
+				placeholder: "密码输入框",
+				className: "w-48"
+			}),
+			/* @__PURE__ */ jsx(Input, {
+				type: "password",
+				defaultValue: "template-core",
+				placeholder: "密码默认值",
+				className: "w-48"
+			}),
 			/* @__PURE__ */ jsx(Input, {
 				type: "password",
-				placeholder: "密码输入框"
+				placeholder: "密码 + addon",
+				addonAfter: /* @__PURE__ */ jsx("span", {
+					className: "text-xs text-muted-foreground",
+					children: "PWD"
+				}),
+				className: "w-56"
 			}),
 			/* @__PURE__ */ jsx(Input, {
 				disabled: true,
-				placeholder: "禁用状态"
+				placeholder: "禁用状态",
+				className: "w-48"
 			})
 		]
 	});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@_tc/template-core",
-  "version": "0.0.1-bate.57",
+  "version": "0.0.1-bate.59",
   "description": "A full-stack TypeScript admin framework powered by Koa, React, and Vite - monorepo root",
   "types": "./types/index.d.ts",
   "exports": {
@@ -64,7 +64,12 @@
     "tailwindcss": "4.2.4"
   },
   "peerDependencies": {
-    "@types/node": ">=18.0.0",
+    "@types/json-schema": "7.0.15",
+    "@types/md5": "2.3.6",
+    "@types/node": "20.19.39",
+    "@types/nunjucks": "3.2.6",
+    "@types/koa-router": "7.4.9",
+    "@types/koa": "2.15.0",
     "@vitejs/plugin-react": "6.0.1",
     "clsx": "^2.1.0",
     "date-fns": "^3.6.0",

package/types/config/config.default.d.ts

@@ -40,6 +40,32 @@ export interface DefaultAppConfig {
     viewsPath?: string;
     nunjucks?: import('nunjucks').ConfigureOptions;
     notFoundRedirectCount?: number;
+    /**
+     * 登陆验证相关
+     */
+    auth?: {
+        /**
+         * 短token 获取的key
+         * @default 'Authorization'
+         */
+        ATKey?: string;
+        /**
+         * 长token 获取的key
+         * @default 'RT'
+         */
+        RTKey?: string;
+    };
 }
-declare const _default: DefaultAppConfig;
+declare const _default: {
+    frameName: string;
+    signKey: string;
+    apiSignVerify: {
+        whiteList: never[];
+    };
+    auth: {
+        ATKey: string;
+        RTKey: string;
+    };
+    notFoundRedirectCount: number;
+};
 export default _default;

package/types/packages/core/loader/config.d.ts

@@ -2,7 +2,7 @@ import type { KoaApp } from "../types";
 /**
  * config loader 只处理一级
  *
- * @param app 加载 xx/config/ 下的文件
+ * @param app 加载 xx/config/ 下的文件 也就是根目录下的
  *  config/config.default.(js|ts)
  */
 declare const _default: (app: KoaApp) => void;