@_tc/template-core 0.0.1-bate.58 → 0.0.1-bate.59

package/.skills/tc-component-usage-skills/SKILL.md

@@ -31,8 +31,13 @@ Every input-like component supports both modes. Check for `value !== undefined`
 
 // Uncontrolled
 <Input defaultValue="hello" />
+
+// Password fields get a built-in show/hide toggle
+<Input type="password" value={password} onChange={setPassword} />
 ```
 
+For `type="password"`, do not add a separate eye icon or clear button. The built-in password toggle is automatic; `allowClear` is hidden on password inputs.
+
 ### Form Integration (rc-field-form)
 
 `Form` / `FormItem` / `SchemaForm` wrap `rc-field-form`. `FormItem` auto-clones children to inject `value`/`onChange`. Prefer `SchemaForm` for data-driven forms:

package/.skills/tc-component-usage-skills/reference/component-api.md

@@ -45,12 +45,15 @@ interface InputProps extends Omit<React.InputHTMLAttributes<HTMLInputElement>, '
   onChange?: (value: string, event: ChangeEvent<HTMLInputElement>) => void
   allowClear?: boolean | { clearIcon: ReactNode }
   addonAfter?: ReactNode
+  inputClassName?: string
   className?: string
 }
 ```
 
 Note: `onChange` callback receives `(stringValue, event)` — two arguments, not one.
 
+Use `type="password"` for password fields. The component shows a built-in visibility toggle, supports controlled and uncontrolled values, and removes the native DOM `value` attribute while preserving the input value property. `allowClear` is intentionally hidden for password inputs. `addonAfter` shares the right-side accessory area with the password toggle.
+
 ---
 
 ## InputNumber

package/.skills/tc-generator/reference/example.md

@@ -48,6 +48,10 @@ main().catch((error) => {
 ```js
 module.exports = {
   port: 9000,
+  auth: {
+    ATKey: "Authorization",
+    RTKey: "RT",
+  },
 };
 ```
 

package/.skills/tc-generator/reference/project-template/config/config.default.js

@@ -1,5 +1,9 @@
 module.exports = {
   port: 9000,
+  auth: {
+    ATKey: "Authorization",
+    RTKey: "RT",
+  },
   // Optional: override the default `.template-core/template-core.sqlite` path.
   // db: {
   //   path: "data/app.sqlite",

package/AGENT_README.md

@@ -74,9 +74,15 @@ main().catch((error) => {
 // config/config.default.ts
 export default {
   port: 9000,
+  auth: {
+    ATKey: 'Authorization',
+    RTKey: 'RT',
+  },
 }
 ```
 
+`auth.ATKey` / `auth.RTKey` 是业务鉴权中间件读取短 token 和刷新 token header 的默认约定；默认分别是 `Authorization` / `RT`。
+
 访问内置后台：
 
 ```text
@@ -93,6 +99,7 @@ http://localhost:9000/dash?projk=demo
 app/controller/**/*.(js|ts)      -> app.controller
 app/service/**/*.(js|ts)         -> app.service
 app/middleware/**/*.(js|ts)      -> app.middlewares
+app/middleware.(js|ts)           -> 全局中间件编排，按 frame -> business 顺序执行
 app/router/**/*.(js|ts)          -> Koa router
 app/router-guard.(js|ts)         -> 兜底路由守卫
 app/router-schema/**/*.(js|ts)   -> app.routerSchema
@@ -378,10 +385,14 @@ import { Button, DataTable, Form, Input, Modal, Select } from '@_tc/template-cor
 常用前端能力：
 
 - 请求方法：`request`、`get`、`post`、`put`、`patch`、`del`。
+- 请求 header：自动添加 `s_t`、`s_sign`、`projk`；存在短 token 时添加 `Authorization: Bearer ${token}`。
+- 本地 key：短 token 是 `localStorage.auth_token`，项目 key 是 `localStorage.p_J_k`；刷新 token header 默认名是 `RT`。
+- `getAuthToken()` 是同步函数，读取前无需 `await`。
 - Schema 通信：`schemaEventBus`、`eventsInfo`、`merge`。
 - 共享状态：`modeStore`、`schemaStore`、`apiFreezerStore` 及对应 hooks。
 - 多语言：`i18nStore.getState().addResources()`，配置文案可写 `$i18n::...`。
 - 主题：`ThemeSwitch` 会同步根节点 `dark` class 和 `localStorage`。
+- `Input type="password"` 会自动显示密码显隐按钮；`allowClear` 不作用于密码输入。
 
 不要直接依赖 `frontend/src/...`、`packages/react/ui/...` 这类包内部路径。
 

package/README.md

@@ -101,7 +101,22 @@ main().catch((error) => {
 | `homePage` | `string` | 否 | - | 应用首页路径 |
 | `additionalPublicPaths` | `string | string[]` | 否 | - | 追加静态资源目录和 Nunjucks 模板查找目录，必须传绝对路径 |
 
-框架会自动读取 `config/config.default.ts` 中的配置（如 `port`、`env` 等）。
+框架会自动读取 `config/config.default.ts` 中的配置（如 `port`、`env`、`auth` 等）。
+
+常用默认配置示例：
+
+```ts
+// config/config.default.ts
+export default {
+  port: 9000,
+  auth: {
+    ATKey: 'Authorization',
+    RTKey: 'RT',
+  },
+}
+```
+
+`auth.ATKey` / `auth.RTKey` 用于约定业务鉴权中间件读取短 token 和刷新 token 的 header 名；默认分别为 `Authorization` 和 `RT`。
 
 静态资源挂载和 Nunjucks 模板查找顺序均为：框架 `app/public`、项目 `app/public`、`additionalPublicPaths`。当 `buildFE` 输出到自定义目录时，可以用 `additionalPublicPaths` 把该目录交给 Koa 提供静态资源访问和模板渲染。
 
@@ -506,6 +521,8 @@ export function Toolbar() {
 }
 ```
 
+`Authorization` 默认对应服务端配置 `config.auth.ATKey`。前端本地 token 存在 `localStorage.auth_token`，项目 key 存在 `localStorage.p_J_k`；刷新 token header 名预留为 `config.auth.RTKey`，默认是 `RT`。
+
 **签名机制**：
 - 签名密钥：服务端从 `app.config.signKey` 读取，并在页面渲染时注入为 `window._signKey`
 - 签名算法：`md5(签名密钥_${时间戳})`
@@ -583,7 +600,7 @@ try {
 | 组件 | 用途 | 导入路径 |
 | --- | --- | --- |
 | `Button` | 按钮组件，支持多种样式和尺寸 | `@_tc/template-core/fe/rc` |
-| `Input` | 输入框组件 | `@_tc/template-core/fe/rc` |
+| `Input` | 输入框组件，支持清空、右侧附加内容和密码显隐 | `@_tc/template-core/fe/rc` |
 | `InputNumber` | 数字输入框组件 | `@_tc/template-core/fe/rc` |
 | `Textarea` | 多行文本输入框组件 | `@_tc/template-core/fe/rc` |
 | `Select` | 下拉选择组件，支持单选和多选 | `@_tc/template-core/fe/rc` |
@@ -666,6 +683,7 @@ function MyComponent() {
       </Button>
 
       <Input placeholder="请输入内容" />
+      <Input type="password" placeholder="请输入密码" />
 
       <Select
         options={[
@@ -691,6 +709,7 @@ function MyComponent() {
 app/controller/**/*.(js|ts)      -> app.controller
 app/service/**/*.(js|ts)         -> app.service
 app/middleware/**/*.(js|ts)      -> app.middlewares
+app/middleware.(js|ts)           -> 全局中间件编排，按框架 -> 项目顺序执行
 app/router/**/*.(js|ts)          -> Koa router
 app/router-schema/**/*.(js|ts)   -> app.routerSchema
 app/extend/*.(js|ts)             -> app.extends

package/cjs/config/config.default.js

@@ -1 +1 @@
-var e={frameName:`TemplateCore`,signKey:`sakjdfnkjwjfnfkjkjldljksndf`,apiSignVerify:{whiteList:[]},notFoundRedirectCount:5};module.exports=e;
+var e={frameName:`TemplateCore`,signKey:`sakjdfnkjwjfnfkjkjldljksndf`,apiSignVerify:{whiteList:[]},auth:{ATKey:`Authorization`,RTKey:`RT`},notFoundRedirectCount:5};module.exports=e;

package/cjs/packages/core/index.js

@@ -1 +1 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require(`../../_virtual/_rolldown/runtime.js`),t=require(`./env.js`),n=require(`../utils/path.js`),r=require(`../utils/runFileFn.js`);require(`../utils/index.js`);const i=require(`./loader/config.js`),a=require(`./loader/controller.js`),o=require(`./loader/extend.js`),s=require(`./loader/middleware.js`),c=require(`./loader/model.js`),l=require(`./loader/router.js`),u=require(`./loader/router-schema.js`),d=require(`./loader/service.js`);let f=require(`koa`);f=e.__toESM(f,1);var p=c,m=async(e={})=>{let r=new f.default;r.hooks={},r.hooks.initing?.();let{frameBaseDir:c,baseDir:p,...m}=e;r.options=m,r.options.pageBasePage=r.options.pageBasePage??`/`,r.options.apiPrefix=r.options.apiPrefix||`/api`;let g=r.baseDir=p??process.cwd(),_=r.frameBaseDir=c??n.resolve(__dirname,`..`);r.businessAppPath=n.resolve(g,`app`),r.frameAppPath=n.resolve(_,`app`),r.paths=[{type:`frame`,path:r.frameAppPath},{type:`business`,path:r.businessAppPath}],r.envs=t(),console.log(`-- [init] env: ${r.envs.get()} --`),i(r),console.log(`-- [init] loader config done --`),await o(r),console.log(`-- [init] loader extend done --`),u(r),console.log(`-- [init] loader routerSchema done --`),d(r),console.log(`-- [init] loader service done --`),a(r),console.log(`-- [init] loader controller done --`),s(r),console.log(`-- [init] loader middleware done --`),h(r),l(r),console.log(`-- [init] loader router done --`);try{let e=r.config.port||process.env.PORT||`8080`,n=parseInt(e+``,10),i=process.env.IP||`0.0.0.0`;r.listen(n,i),console.log(`Server port: http://localhost:${n}`),console.log(`run env is ${t().get()}`)}catch(e){console.error(e)}return r.hooks.inited?.(),r},h=e=>{e.paths.forEach(t=>{for(let i of[`ts`,`js`]){let a=`middleware.${i}`,o=n.resolve(t.path,a);try{r.runFileFn(o)?.(e),console.log(`-- [init] loader ${t.type} appMiddleware ${a} done -- (${t.path})`);break}catch(e){let n=e;if(!(n?.code===`MODULE_NOT_FOUND`&&typeof n?.message==`string`&&(n.message.includes(`Cannot find module '${o}'`)||n.message.includes(`Cannot find module "${o}"`))))throw console.log(`-- [error] loader ${t.type} appMiddleware ${a} error -- (${o})`),e}}})};exports.loaderModel=p,exports.start=m;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require(`../../_virtual/_rolldown/runtime.js`),t=require(`./paths.js`),n=require(`./env.js`),r=require(`../utils/path.js`),i=require(`../utils/runFileFn.js`);require(`../utils/index.js`);const a=require(`./loader/config.js`),o=require(`./loader/controller.js`),s=require(`./loader/extend.js`),c=require(`./loader/middleware.js`),l=require(`./loader/model.js`),u=require(`./loader/router.js`),d=require(`./loader/router-schema.js`),f=require(`./loader/service.js`);let p=require(`koa`);p=e.__toESM(p,1);var m=l,h=async(e={})=>{let t=new p.default;t.hooks={},t.hooks.initing?.();let{frameBaseDir:i,baseDir:l,...m}=e;t.options=m,t.options.pageBasePage=t.options.pageBasePage??`/`,t.options.apiPrefix=t.options.apiPrefix||`/api`;let h=t.baseDir=l??process.cwd(),_=t.frameBaseDir=i??r.resolve(__dirname,`..`);t.businessAppPath=r.resolve(h,`app`),t.frameAppPath=r.resolve(_,`app`),t.paths=[{type:`frame`,path:t.frameAppPath},{type:`business`,path:t.businessAppPath}],t.envs=n(),console.log(`-- [init] env: ${t.envs.get()} --`),a(t),console.log(`-- [init] loader config done --`),await s(t),console.log(`-- [init] loader extend done --`),d(t),console.log(`-- [init] loader routerSchema done --`),f(t),console.log(`-- [init] loader service done --`),o(t),console.log(`-- [init] loader controller done --`),c(t),console.log(`-- [init] loader middleware done --`),g(t),u(t),console.log(`-- [init] loader router done --`);try{let e=t.config.port||process.env.PORT||`8080`,r=parseInt(e+``,10),i=process.env.IP||`0.0.0.0`;t.listen(r,i),console.log(`Server port: http://localhost:${r}`),console.log(`run env is ${n().get()}`)}catch(e){console.error(e)}return t.hooks.inited?.(),t},g=e=>{[`frame`,`business`].map(n=>({type:n,path:t.getAppPath(e,n)})).forEach(t=>{for(let n of[`ts`,`js`]){let a=`middleware.${n}`,o=r.resolve(t.path,a);try{i.runFileFn(o)?.(e),console.log(`-- [init] loader ${t.type} appMiddleware ${a} done -- (${t.path})`);break}catch(e){let n=e;if(!(n?.code===`MODULE_NOT_FOUND`&&typeof n?.message==`string`&&(n.message.includes(`Cannot find module '${o}'`)||n.message.includes(`Cannot find module "${o}"`))))throw console.log(`-- [error] loader ${t.type} appMiddleware ${a} error -- (${o})`),e}}})};exports.loaderModel=m,exports.start=h;

package/cjs/packages/core/loader/middleware.js

@@ -1 +1 @@
-const e=require(`../paths.js`),t=require(`../../utils/loadFile.js`),n=require(`../../utils/runFileFn.js`);require(`../../utils/index.js`);var r=r=>{r.middlewares=e.getAppPaths(r).reduce((e,i)=>{let a=t.loadFileFn(i,`middleware`,{loadFileCallback:e=>n.runFileFn(e)(r)});return{...e,...a}},{})};module.exports=r;
+const e=require(`../paths.js`),t=require(`../../utils/loadFile.js`),n=require(`../../utils/runFileFn.js`);require(`../../utils/index.js`);var r=r=>{r.middlewares=e.getAppPaths(r).reduce((e,i)=>{let a=t.loadFileFn(i,`middlewares`,{loadFileCallback:e=>n.runFileFn(e)(r)});return{...e,...a}},{})};module.exports=r;

package/esm/app/{middleware → middlewares}/api-params-verify.js

@@ -1,5 +1,5 @@
 import e from "ajv";
-//#region app/middleware/api-params-verify.ts
+//#region app/middlewares/api-params-verify.ts
 var t = new e(), n = "http://json-schema.org/draft-07/schema#", r = (e, r, i) => {
 	if (r[e] && i[e]) {
 		i[e].$schema = n;

package/esm/app/{middleware → middlewares}/api-sign-verify.js

@@ -1,5 +1,5 @@
 import e from "md5";
-//#region app/middleware/api-sign-verify.ts
+//#region app/middlewares/api-sign-verify.ts
 var t = 1e3 * 60 * 10, n = (n) => async (r, i) => {
 	let { path: a, method: o } = r;
 	if (a.includes(n.options.apiPrefix) && !n.config?.apiSignVerify?.whiteList?.includes(a)) {

package/esm/app/{middleware → middlewares}/error-handle.js

@@ -1,4 +1,4 @@
-//#region app/middleware/error-handle.ts
+//#region app/middlewares/error-handle.ts
 var e = {}, t = (t) => async (n, r) => {
 	try {
 		await r();

package/esm/app/{middleware → middlewares}/project-handler.js

@@ -1,4 +1,4 @@
-//#region app/middleware/project-handler.ts
+//#region app/middlewares/project-handler.ts
 var e = (e) => async (t, n) => {
 	let r = t.headers.projk, { path: i } = t;
 	if (i.indexOf(`${e.options.apiPrefix}/proj/`) !== -1 && (!r || ["undefined", "null"].includes(r))) {

package/esm/app/{middleware → middlewares}/request-parameter-parsing.js

@@ -1,4 +1,4 @@
-//#region app/middleware/request-parameter-parsing.ts
+//#region app/middlewares/request-parameter-parsing.ts
 var e = (e) => typeof e == "object" && !!e && !Array.isArray(e), t = ((t) => async (n, r) => {
 	if (n.path.includes(`${t.options.apiPrefix}/`)) {
 		let { query: t, headers: r } = n, i = n.request.body;

package/esm/config/config.default.js

@@ -3,6 +3,10 @@ var e = {
 	frameName: "TemplateCore",
 	signKey: "sakjdfnkjwjfnfkjkjldljksndf",
 	apiSignVerify: { whiteList: [] },
+	auth: {
+		ATKey: "Authorization",
+		RTKey: "RT"
+	},
 	notFoundRedirectCount: 5
 };
 //#endregion

package/esm/packages/core/index.js

@@ -1,50 +1,54 @@
-import e from "./env.js";
-import { resolve as t } from "../utils/path.js";
-import { runFileFn as n } from "../utils/runFileFn.js";
+import { getAppPath as e } from "./paths.js";
+import t from "./env.js";
+import { resolve as n } from "../utils/path.js";
+import { runFileFn as r } from "../utils/runFileFn.js";
 import "../utils/index.js";
-import r from "./loader/config.js";
-import i from "./loader/controller.js";
-import a from "./loader/extend.js";
-import o from "./loader/middleware.js";
-import s from "./loader/model.js";
-import c from "./loader/router.js";
-import l from "./loader/router-schema.js";
-import u from "./loader/service.js";
-import d from "koa";
+import i from "./loader/config.js";
+import a from "./loader/controller.js";
+import o from "./loader/extend.js";
+import s from "./loader/middleware.js";
+import c from "./loader/model.js";
+import l from "./loader/router.js";
+import u from "./loader/router-schema.js";
+import d from "./loader/service.js";
+import f from "koa";
 //#region packages/core/index.ts
-var f = s, p = async (n = {}) => {
-	let s = new d();
-	s.hooks = {}, s.hooks.initing?.();
-	let { frameBaseDir: f, baseDir: p, ...h } = n;
-	s.options = h, s.options.pageBasePage = s.options.pageBasePage ?? "/", s.options.apiPrefix = s.options.apiPrefix || "/api";
-	let g = s.baseDir = p ?? process.cwd(), _ = s.frameBaseDir = f ?? t(__dirname, "..");
-	s.businessAppPath = t(g, "app"), s.frameAppPath = t(_, "app"), s.paths = [{
+var p = c, m = async (e = {}) => {
+	let r = new f();
+	r.hooks = {}, r.hooks.initing?.();
+	let { frameBaseDir: c, baseDir: p, ...m } = e;
+	r.options = m, r.options.pageBasePage = r.options.pageBasePage ?? "/", r.options.apiPrefix = r.options.apiPrefix || "/api";
+	let g = r.baseDir = p ?? process.cwd(), _ = r.frameBaseDir = c ?? n(__dirname, "..");
+	r.businessAppPath = n(g, "app"), r.frameAppPath = n(_, "app"), r.paths = [{
 		type: "frame",
-		path: s.frameAppPath
+		path: r.frameAppPath
 	}, {
 		type: "business",
-		path: s.businessAppPath
-	}], s.envs = e(), console.log(`-- [init] env: ${s.envs.get()} --`), r(s), console.log("-- [init] loader config done --"), await a(s), console.log("-- [init] loader extend done --"), l(s), console.log("-- [init] loader routerSchema done --"), u(s), console.log("-- [init] loader service done --"), i(s), console.log("-- [init] loader controller done --"), o(s), console.log("-- [init] loader middleware done --"), m(s), c(s), console.log("-- [init] loader router done --");
+		path: r.businessAppPath
+	}], r.envs = t(), console.log(`-- [init] env: ${r.envs.get()} --`), i(r), console.log("-- [init] loader config done --"), await o(r), console.log("-- [init] loader extend done --"), u(r), console.log("-- [init] loader routerSchema done --"), d(r), console.log("-- [init] loader service done --"), a(r), console.log("-- [init] loader controller done --"), s(r), console.log("-- [init] loader middleware done --"), h(r), l(r), console.log("-- [init] loader router done --");
 	try {
-		let t = s.config.port || process.env.PORT || "8080", n = parseInt(t + "", 10), r = process.env.IP || "0.0.0.0";
-		s.listen(n, r), console.log(`Server port: http://localhost:${n}`), console.log(`run env is ${e().get()}`);
+		let e = r.config.port || process.env.PORT || "8080", n = parseInt(e + "", 10), i = process.env.IP || "0.0.0.0";
+		r.listen(n, i), console.log(`Server port: http://localhost:${n}`), console.log(`run env is ${t().get()}`);
 	} catch (e) {
 		console.error(e);
 	}
-	return s.hooks.inited?.(), s;
-}, m = (e) => {
-	e.paths.forEach((r) => {
+	return r.hooks.inited?.(), r;
+}, h = (t) => {
+	["frame", "business"].map((n) => ({
+		type: n,
+		path: e(t, n)
+	})).forEach((e) => {
 		for (let i of ["ts", "js"]) {
-			let a = `middleware.${i}`, o = t(r.path, a);
+			let a = `middleware.${i}`, o = n(e.path, a);
 			try {
-				n(o)?.(e), console.log(`-- [init] loader ${r.type} appMiddleware ${a} done -- (${r.path})`);
+				r(o)?.(t), console.log(`-- [init] loader ${e.type} appMiddleware ${a} done -- (${e.path})`);
 				break;
-			} catch (e) {
-				let t = e;
-				if (!(t?.code === "MODULE_NOT_FOUND" && typeof t?.message == "string" && (t.message.includes(`Cannot find module '${o}'`) || t.message.includes(`Cannot find module "${o}"`)))) throw console.log(`-- [error] loader ${r.type} appMiddleware ${a} error -- (${o})`), e;
+			} catch (t) {
+				let n = t;
+				if (!(n?.code === "MODULE_NOT_FOUND" && typeof n?.message == "string" && (n.message.includes(`Cannot find module '${o}'`) || n.message.includes(`Cannot find module "${o}"`)))) throw console.log(`-- [error] loader ${e.type} appMiddleware ${a} error -- (${o})`), t;
 			}
 		}
 	});
 };
 //#endregion
-export { f as loaderModel, p as start };
+export { p as loaderModel, m as start };

package/esm/packages/core/loader/middleware.js

@@ -5,7 +5,7 @@ import "../../utils/index.js";
 //#region packages/core/loader/middleware.ts
 var r = (r) => {
 	r.middlewares = e(r).reduce((e, i) => {
-		let a = t(i, "middleware", { loadFileCallback: (e) => n(e)(r) });
+		let a = t(i, "middlewares", { loadFileCallback: (e) => n(e)(r) });
 		return {
 			...e,
 			...a

package/fe/frontend/src/common/request.js

@@ -96,7 +96,7 @@ var removeBaseurlFromURL = (config) => {
 };
 api.interceptors.request.use(async (config) => {
 	removeBaseurlFromURL(config);
-	const token = await getAuthToken();
+	const token = getAuthToken();
 	const aauto = getApiAuth();
 	const time = (/* @__PURE__ */ new Date()).getTime();
 	config.headers = {

package/fe/packages/react/ui/components/Input/Input.js

@@ -1,24 +1,55 @@
 import { cn } from "../../lib/utils.js";
 import { useInputController } from "../hooks/useInputController.js";
-import { forwardRef, useCallback, useMemo } from "react";
+import { forwardRef, useCallback, useEffect, useMemo, useRef, useState } from "react";
 import { jsx, jsxs } from "react/jsx-runtime";
-import { X } from "lucide-react";
+import { Eye, EyeOff, X } from "lucide-react";
 //#region packages/react/ui/components/Input/Input.tsx
 var Input = forwardRef(({ className, inputClassName, type, value: controlledValue, onChange, defaultValue, allowClear, disabled, addonAfter, ...props }, ref) => {
+	const isFileInput = type === "file";
+	const isPasswordInput = type === "password";
 	const { setInternalValue, setIsFocused, setRefs, controllerRef, isControlledRef, isFocused, value, hasValue } = useInputController({
 		defaultValue,
 		controlledValue,
 		ref
 	});
-	const isFileInput = type === "file";
+	const [innerType, setInnerType] = useState(type);
+	const isMountedRef = useRef(false);
+	const currentType = isPasswordInput ? innerType ?? "password" : type;
+	const isPasswordVisible = currentType === "text";
+	const removePasswordValueAttribute = useCallback(() => {
+		if (!isPasswordInput) return;
+		Promise.resolve().then(() => {
+			if (!isMountedRef.current) return;
+			const input = controllerRef.current;
+			if (input?.getAttribute("type") === "password" && input.hasAttribute("value")) input.removeAttribute("value");
+		});
+	}, [controllerRef, isPasswordInput]);
+	useEffect(() => {
+		isMountedRef.current = true;
+		return () => {
+			isMountedRef.current = false;
+		};
+	}, []);
+	useEffect(() => {
+		setInnerType(type);
+	}, [type]);
+	useEffect(() => {
+		removePasswordValueAttribute();
+	}, [
+		currentType,
+		removePasswordValueAttribute,
+		value
+	]);
 	const handleChange = useCallback((e) => {
 		const newValue = e.target.value;
+		removePasswordValueAttribute();
 		if (!isFileInput && !isControlledRef.current) setInternalValue(newValue);
 		onChange?.(newValue, e);
 	}, [
 		isFileInput,
 		isControlledRef,
 		onChange,
+		removePasswordValueAttribute,
 		setInternalValue
 	]);
 	const handleClear = useCallback((e) => {
@@ -36,6 +67,12 @@ var Input = forwardRef(({ className, inputClassName, type, value: controlledValu
 		onChange,
 		setInternalValue
 	]);
+	const handleTogglePassword = useCallback((e) => {
+		e.preventDefault();
+		e.stopPropagation();
+		if (isPasswordVisible) removePasswordValueAttribute();
+		setInnerType((current) => current === "password" ? "text" : "password");
+	}, [isPasswordVisible, removePasswordValueAttribute]);
 	const clearIcon = useMemo(() => {
 		if (allowClear) if (typeof allowClear === "boolean") return /* @__PURE__ */ jsx("span", {
 			className: cn("w-5 h-5 rounded-full", "bg-muted hover:bg-muted/80", "text-foreground", "transition-colors", "flex items-center justify-center", "focus:outline-none"),
@@ -43,44 +80,61 @@ var Input = forwardRef(({ className, inputClassName, type, value: controlledValu
 		});
 		else return allowClear.clearIcon;
 	}, [allowClear]);
-	const showClearIcon = hasValue && clearIcon && !disabled;
+	const showClearIcon = !isPasswordInput && hasValue && clearIcon && !disabled;
+	const showPasswordToggle = isPasswordInput && !disabled;
+	const rightAccessoryCount = Number(Boolean(showClearIcon)) + Number(showPasswordToggle) + Number(Boolean(addonAfter));
+	const hasRightAccessories = rightAccessoryCount > 0;
 	return /* @__PURE__ */ jsxs("div", {
 		className: cn("tc-ui-input relative w-full", className),
-		children: [
-			/* @__PURE__ */ jsx("input", {
-				type,
-				ref: setRefs,
-				...!isFileInput && { value },
-				onChange: handleChange,
-				className: cn("flex h-10 w-full rounded-lg px-3 py-0 text-sm", "border transition-colors duration-200", "placeholder:text-muted-foreground", "focus:outline-none", showClearIcon && "pr-10", addonAfter && "pr-12", disabled ? "cursor-not-allowed bg-muted border-border text-muted-foreground" : "bg-background", !disabled && !isFocused && "border-border", !disabled && isFocused && "border-theme ring-2 ring-theme/25", inputClassName),
-				onFocus: (e) => {
-					if (!disabled) {
-						setIsFocused(true);
-						props.onFocus?.(e);
-					}
-				},
-				onBlur: (e) => {
-					if (!disabled) {
-						setIsFocused(false);
-						props.onBlur?.(e);
-					}
-				},
-				disabled,
-				...props
-			}),
-			showClearIcon && /* @__PURE__ */ jsx("button", {
-				type: "button",
-				onClick: handleClear,
-				"aria-label": "Clear input",
-				title: "Clear input",
-				className: cn("absolute right-3 top-1/2 -translate-y-1/2"),
-				children: clearIcon
-			}),
-			addonAfter && /* @__PURE__ */ jsx("div", {
-				className: "absolute right-2 top-1/2 -translate-y-1/2",
-				children: addonAfter
-			})
-		]
+		children: [/* @__PURE__ */ jsx("input", {
+			type: currentType,
+			ref: setRefs,
+			...!isFileInput && { value },
+			onChange: handleChange,
+			className: cn("flex h-10 w-full rounded-lg px-3 py-0 text-sm", "border transition-colors duration-200", "placeholder:text-muted-foreground", "focus:outline-none", rightAccessoryCount === 1 && "pr-10", rightAccessoryCount === 2 && "pr-20", rightAccessoryCount >= 3 && "pr-28", disabled ? "cursor-not-allowed bg-muted border-border text-muted-foreground" : "bg-background", !disabled && !isFocused && "border-border", !disabled && isFocused && "border-theme ring-2 ring-theme/25", inputClassName),
+			onFocus: (e) => {
+				if (!disabled) {
+					removePasswordValueAttribute();
+					setIsFocused(true);
+					props.onFocus?.(e);
+				}
+			},
+			onBlur: (e) => {
+				if (!disabled) {
+					removePasswordValueAttribute();
+					setIsFocused(false);
+					props.onBlur?.(e);
+				}
+			},
+			disabled,
+			...props
+		}), hasRightAccessories && /* @__PURE__ */ jsxs("div", {
+			className: "absolute right-1.5 top-1/2 flex -translate-y-1/2 items-center gap-1",
+			children: [
+				showClearIcon && /* @__PURE__ */ jsx("button", {
+					type: "button",
+					onMouseDown: (e) => e.preventDefault(),
+					onClick: handleClear,
+					"aria-label": "Clear input",
+					title: "Clear input",
+					className: "flex h-7 w-7 items-center justify-center rounded-md transition-colors hover:bg-foreground/8",
+					children: clearIcon
+				}),
+				showPasswordToggle && /* @__PURE__ */ jsx("button", {
+					type: "button",
+					onMouseDown: (e) => e.preventDefault(),
+					onClick: handleTogglePassword,
+					"aria-label": isPasswordVisible ? "Hide password" : "Show password",
+					title: isPasswordVisible ? "Hide password" : "Show password",
+					className: "flex h-7 w-7 items-center justify-center rounded-md text-muted-foreground transition-colors hover:bg-foreground/8 hover:text-foreground",
+					children: isPasswordVisible ? /* @__PURE__ */ jsx(EyeOff, { size: 16 }) : /* @__PURE__ */ jsx(Eye, { size: 16 })
+				}),
+				addonAfter && /* @__PURE__ */ jsx("div", {
+					className: "flex h-7 items-center text-muted-foreground",
+					children: addonAfter
+				})
+			]
+		})]
 	});
 });
 Input.displayName = "Input";

package/fe/packages/react/ui/components/testPage/index.js

@@ -209,14 +209,40 @@ function InputDemo() {
 	return /* @__PURE__ */ jsxs(Section, {
 		title: "Input",
 		children: [
-			/* @__PURE__ */ jsx(Input, { placeholder: "普通输入框" }),
+			/* @__PURE__ */ jsx(Input, {
+				placeholder: "普通输入框",
+				className: "w-48"
+			}),
+			/* @__PURE__ */ jsx(Input, {
+				allowClear: true,
+				defaultValue: "可清空内容",
+				placeholder: "清空按钮",
+				className: "w-48"
+			}),
+			/* @__PURE__ */ jsx(Input, {
+				type: "password",
+				placeholder: "密码输入框",
+				className: "w-48"
+			}),
+			/* @__PURE__ */ jsx(Input, {
+				type: "password",
+				defaultValue: "template-core",
+				placeholder: "密码默认值",
+				className: "w-48"
+			}),
 			/* @__PURE__ */ jsx(Input, {
 				type: "password",
-				placeholder: "密码输入框"
+				placeholder: "密码 + addon",
+				addonAfter: /* @__PURE__ */ jsx("span", {
+					className: "text-xs text-muted-foreground",
+					children: "PWD"
+				}),
+				className: "w-56"
 			}),
 			/* @__PURE__ */ jsx(Input, {
 				disabled: true,
-				placeholder: "禁用状态"
+				placeholder: "禁用状态",
+				className: "w-48"
 			})
 		]
 	});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@_tc/template-core",
-  "version": "0.0.1-bate.58",
+  "version": "0.0.1-bate.59",
   "description": "A full-stack TypeScript admin framework powered by Koa, React, and Vite - monorepo root",
   "types": "./types/index.d.ts",
   "exports": {

package/types/config/config.default.d.ts

@@ -40,6 +40,32 @@ export interface DefaultAppConfig {
     viewsPath?: string;
     nunjucks?: import('nunjucks').ConfigureOptions;
     notFoundRedirectCount?: number;
+    /**
+     * 登陆验证相关
+     */
+    auth?: {
+        /**
+         * 短token 获取的key
+         * @default 'Authorization'
+         */
+        ATKey?: string;
+        /**
+         * 长token 获取的key
+         * @default 'RT'
+         */
+        RTKey?: string;
+    };
 }
-declare const _default: DefaultAppConfig;
+declare const _default: {
+    frameName: string;
+    signKey: string;
+    apiSignVerify: {
+        whiteList: never[];
+    };
+    auth: {
+        ATKey: string;
+        RTKey: string;
+    };
+    notFoundRedirectCount: number;
+};
 export default _default;

package/types/packages/core/loader/config.d.ts

@@ -2,7 +2,7 @@ import type { KoaApp } from "../types";
 /**
  * config loader 只处理一级
  *
- * @param app 加载 xx/config/ 下的文件
+ * @param app 加载 xx/config/ 下的文件 也就是根目录下的
  *  config/config.default.(js|ts)
  */
 declare const _default: (app: KoaApp) => void;