release: v1.0.4

Add PasswordInput with show/hide toggle, align legacy setup/register
routing, merge duplicate i18n keys, and remove unused jose dependency.

.github/workflows/release.yml

@@ -23,6 +23,18 @@ jobs:
         with:
           ref: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref }}
 
+      - name: Setup Node
+        uses: actions/setup-node@v6
+        with:
+          node-version: 22
+          cache: npm
+
+      - name: Install npm 11
+        run: npm install -g npm@11.12.1
+
+      - name: Install dependencies
+        run: npm ci
+
       - name: Extract release notes from CHANGELOG
         id: notes
         run: |

.gitignore

@@ -36,3 +36,7 @@ data
 
 # 本地 Git hooks 模板（仅安装在 .git/hooks/，不进仓库）
 git-hooks/
+
+# 飞牛 fpk 工程与产物（仅本地维护，不进仓库）
+scripts/fpk/
+dist-fpk/

CHANGELOG.md

@@ -2,6 +2,21 @@
 
 本仓库自 **v1.0.0** 起作为正式版维护；此前历史提交已归档重置。
 
+## [1.0.4] - 2026-08-25
+
+### 新增
+
+- 密码输入框支持显示/隐藏切换（`PasswordInput` 组件，含无障碍文案）
+
+### 改进
+
+- 遗留 `ADMIN_SECRET` 部署：`/setup`、`/register` 路由与 `needsMigration` 检测对齐
+- 合并重复的密码不一致 i18n 文案；移除未使用的 `jose` 依赖
+
+### 修复
+
+- 修复 `PasswordInput` 导致 CI typecheck 失败
+
 ## [1.0.3] - 2026-08-23
 
 ### 修复

README.en.md

@@ -30,15 +30,15 @@
 ## Screenshots
 
 |                Login                 |                 Upload                 |
-|:---:|:---:|
+| :----------------------------------: | :------------------------------------: |
 | ![Login](docs/screenshots/login.png) | ![Upload](docs/screenshots/upload.png) |
 
 |                Upload preferences                |           Stats & gallery            |
-|:---:|:---:|
+| :----------------------------------------------: | :----------------------------------: |
 | ![Preferences](docs/screenshots/preferences.png) | ![Stats](docs/screenshots/stats.png) |
 
 |                  Settings                  |     |
-|:---:|:---:|
+| :----------------------------------------: | :-: |
 | ![Settings](docs/screenshots/settings.png) |     |
 
 ## Features
@@ -96,7 +96,7 @@ If you only had `ADMIN_SECRET` and no user table, log in with the secret once an
 ## Tech Stack
 
 | Layer    | Technology                                          |
-|-------|------------|
+| -------- | --------------------------------------------------- |
 | Frontend | Nuxt 4, Vue 3, Nuxt UI 4, Tailwind CSS 4            |
 | Backend  | Nitro (Node.js), SQLite                             |
 | Images   | sharp (WebP transcoding & compression)              |
@@ -108,7 +108,7 @@ If you only had `ADMIN_SECRET` and no user table, log in with the secret once an
 ## Environment variables
 
 | Variable                | Description                                                                 |
-|----------|-------------|
+| ----------------------- | --------------------------------------------------------------------------- |
 | `API_UPLOAD_TOKEN`      | Global upload token (`Auth-Token` header); can be generated in the API page |
 | `ALLOWED_REFERER_HOSTS` | Hotlink allowlist (comma-separated hostnames)                               |
 | `IMAGE_BASE_URL`        | Public base URL for image links                                             |
@@ -123,7 +123,7 @@ Environment variables override database settings. See [`.env.example`](.env.exam
 ## Users & permissions
 
 | Scenario                       | Auth                 | Ownership / visibility      |
-|----------|------|------------------------|
+| ------------------------------ | -------------------- | --------------------------- |
 | Web upload                     | Session              | Current user                |
 | API upload + **user token**    | `Auth-Token`         | Token owner                 |
 | API upload + **global token**  | `Auth-Token`         | Admin (`userId` null)       |
@@ -148,7 +148,7 @@ Pattern: `folder/YYYY/MM/randomId.webp` + `.meta.json`. Back up the entire `/dat
 ## API overview
 
 | Method | Path                 | Description            |
-|--------|------|-------------|
+| ------ | -------------------- | ---------------------- |
 | POST   | `/api/images/upload` | Upload image           |
 | GET    | `/api/images`        | Paginated list         |
 | DELETE | `/api/images`        | Delete one (`key`)     |
@@ -168,7 +168,7 @@ Full docs and copyable cURL snippets are on the **API** page after deployment.
 ## Twikoo
 
 | Setting           | Value                               |
-|---------|-------|
+| ----------------- | ----------------------------------- |
 | `IMAGE_CDN`       | `easyimage`                         |
 | `IMAGE_CDN_URL`   | `https://your-domain/api/index.php` |
 | `IMAGE_CDN_TOKEN` | Same as `API_UPLOAD_TOKEN`          |
@@ -193,7 +193,7 @@ npm test             # Unit tests
 ## Roadmap
 
 | Version    | Plan                                                           |
-|---------|------|
+| ---------- | -------------------------------------------------------------- |
 | **v1.0.3** | CI and Docker multi-arch build fixes (current)                 |
 | **v1.0.2** | i18n, mobile menus, stats/upload UI, Docker password reset     |
 | **v1.0.1** | Settings version display, mobile upload preferences layout fix |
@@ -203,3 +203,7 @@ npm test             # Unit tests
 ## License
 
 [MIT](LICENSE)
+
+## Friend links
+
+[LINUX DO](https://linux.do/)

README.md

@@ -30,15 +30,15 @@
 ## 界面预览
 
 |                登录                 |                 上传                 |
-|:---:|:---:|
+| :---------------------------------: | :----------------------------------: |
 | ![登录](docs/screenshots/login.png) | ![上传](docs/screenshots/upload.png) |
 
 |                   上传偏好                    |             统计与图库              |
-|:---:|:---:|
+| :-------------------------------------------: | :---------------------------------: |
 | ![上传偏好](docs/screenshots/preferences.png) | ![统计](docs/screenshots/stats.png) |
 
 |                系统设置                |     |
-|:---:|:---:|
+| :------------------------------------: | :-: |
 | ![设置](docs/screenshots/settings.png) |     |
 
 ## 特性
@@ -101,7 +101,7 @@ npm run dev
 ## 技术栈
 
 | 层级     | 技术                                       |
-|------|------|
+| -------- | ------------------------------------------ |
 | 前端     | Nuxt 4、Vue 3、Nuxt UI 4、Tailwind CSS 4   |
 | 后端     | Nitro（Node.js）、SQLite                   |
 | 图片处理 | sharp（WebP 转码与压缩）                   |
@@ -113,7 +113,7 @@ npm run dev
 ## 环境变量
 
 | 变量                    | 说明                                                         |
-|------|------|
+| ----------------------- | ------------------------------------------------------------ |
 | `API_UPLOAD_TOKEN`      | 全局上传 Token（`Auth-Token` 头）；未配置可在后台 API 页生成 |
 | `ALLOWED_REFERER_HOSTS` | 防盗链白名单（逗号分隔 hostname）                            |
 | `IMAGE_BASE_URL`        | 图片直链公网域名（反代时建议填写）                           |
@@ -128,7 +128,7 @@ npm run dev
 ## 用户与权限
 
 | 场景                       | 鉴权                 | 图片归属 / 可见范围        |
-|------|------|---------------------|
+| -------------------------- | -------------------- | -------------------------- |
 | 网页上传                   | Session              | 当前登录用户               |
 | API 上传 + **个人 Token**  | `Auth-Token`         | 该 Token 所属用户          |
 | API 上传 + **全局 Token**  | `Auth-Token`         | 管理员（`userId` 为空）    |
@@ -153,7 +153,7 @@ npm run dev
 ## API 概览
 
 | 方法   | 路径                 | 说明                   |
-|------|------|------|
+| ------ | -------------------- | ---------------------- |
 | POST   | `/api/images/upload` | 上传图片               |
 | GET    | `/api/images`        | 分页列表               |
 | DELETE | `/api/images`        | 删除单张（`key`）      |
@@ -173,7 +173,7 @@ curl -X POST "https://pic.example.com/api/images/upload" \
 ## Twikoo
 
 | 配置项            | 值                               |
-|--------|-----|
+| ----------------- | -------------------------------- |
 | `IMAGE_CDN`       | `easyimage`                      |
 | `IMAGE_CDN_URL`   | `https://你的域名/api/index.php` |
 | `IMAGE_CDN_TOKEN` | 与 `API_UPLOAD_TOKEN` 相同       |
@@ -198,7 +198,7 @@ npm test             # 单元测试
 ## 路线图
 
 | 版本       | 计划                                              |
-|------|------|
+| ---------- | ------------------------------------------------- |
 | **v1.0.3** | CI 与 Docker 多架构构建修复（当前）               |
 | **v1.0.2** | 中英文、移动端菜单、统计/上传 UI、Docker 重置密码 |
 | **v1.0.1** | 设置页版本展示、移动端上传偏好布局修复            |
@@ -208,3 +208,7 @@ npm test             # 单元测试
 ## License
 
 [MIT](LICENSE)
+
+## 友链
+
+[LINUX DO](https://linux.do/)

app/components/AdminLoginGate.vue

@@ -2,10 +2,6 @@
 import logoLight from '~/assets/image/logo-light.png'
 import logoDark from '~/assets/image/logo-dark.png'
 
-const emit = defineEmits<{
-  success: []
-}>()
-
 const router = useRouter()
 const { login, fetchStatus, authStatus } = useAuth()
 const toast = useToast()
@@ -47,7 +43,6 @@ async function submit() {
       username.value = ''
       password.value = ''
       secret.value = ''
-      emit('success')
       toast.add({ title: t('auth.loginSuccess'), color: 'success' })
     } else {
       toast.add({
@@ -108,15 +103,11 @@ async function submit() {
             >
               {{ t('auth.adminSecret') }}
             </label>
-            <UInput
+            <PasswordInput
               id="admin-secret"
               v-model="secret"
-              type="password"
               :placeholder="t('auth.adminSecretPlaceholder')"
               autocomplete="current-password"
-              size="lg"
-              class="w-full"
-              :ui="{ root: 'w-full' }"
               @keyup.enter="submit"
             />
             <p class="text-xs leading-relaxed text-muted">
@@ -151,15 +142,11 @@ async function submit() {
             >
               {{ t('auth.password') }}
             </label>
-            <UInput
+            <PasswordInput
               id="login-password"
               v-model="password"
-              type="password"
               :placeholder="t('auth.password')"
               autocomplete="current-password"
-              size="lg"
-              class="w-full"
-              :ui="{ root: 'w-full' }"
               @keyup.enter="submit"
             />
           </div>

app/components/PasswordInput.vue

@@ -0,0 +1,50 @@
+<script setup lang="ts">
+defineOptions({
+  inheritAttrs: false
+})
+
+const model = defineModel<string>({ default: '' })
+
+defineProps<{
+  id?: string
+  placeholder?: string
+  autocomplete?: string
+}>()
+
+const show = ref(false)
+const { t } = useI18n()
+</script>
+
+<template>
+  <UInput
+    :id="id"
+    v-model="model"
+    :type="show ? 'text' : 'password'"
+    :placeholder="placeholder"
+    :autocomplete="autocomplete"
+    size="lg"
+    class="w-full"
+    :ui="{ root: 'w-full', trailing: 'pe-1' }"
+    v-bind="$attrs"
+  >
+    <template #trailing>
+      <UButton
+        color="neutral"
+        variant="link"
+        size="sm"
+        :icon="show ? 'i-lucide-eye-off' : 'i-lucide-eye'"
+        :aria-label="show ? t('auth.hidePassword') : t('auth.showPassword')"
+        :aria-pressed="show"
+        :aria-controls="id"
+        type="button"
+        @click="() => { show = !show }"
+      />
+    </template>
+  </UInput>
+</template>
+
+<style scoped>
+:deep(::-ms-reveal) {
+  display: none;
+}
+</style>

app/pages/account/password.vue

@@ -38,7 +38,7 @@ async function submit() {
   if (!canSubmit.value || loading.value) return
 
   if (newPassword.value !== confirmPassword.value) {
-    toast.add({ title: t('password.mismatch'), color: 'error' })
+    toast.add({ title: t('auth.passwordMismatch'), color: 'error' })
     return
   }
 
@@ -101,14 +101,10 @@ async function submit() {
             >
               {{ t('password.current') }}
             </label>
-            <UInput
+            <PasswordInput
               id="current-password"
               v-model="currentPassword"
-              type="password"
               autocomplete="current-password"
-              size="lg"
-              class="w-full"
-              :ui="{ root: 'w-full' }"
             />
           </div>
 
@@ -119,15 +115,11 @@ async function submit() {
             >
               {{ t('password.new') }}
             </label>
-            <UInput
+            <PasswordInput
               id="new-password"
               v-model="newPassword"
-              type="password"
               :placeholder="t('password.newPlaceholder')"
               autocomplete="new-password"
-              size="lg"
-              class="w-full"
-              :ui="{ root: 'w-full' }"
             />
             <PasswordStrength :password="newPassword" />
           </div>
@@ -139,14 +131,10 @@ async function submit() {
             >
               {{ t('password.confirmNew') }}
             </label>
-            <UInput
+            <PasswordInput
               id="confirm-new-password"
               v-model="confirmPassword"
-              type="password"
               autocomplete="new-password"
-              size="lg"
-              class="w-full"
-              :ui="{ root: 'w-full' }"
             />
           </div>
 

app/pages/register.vue

@@ -22,7 +22,7 @@ const canSubmit = computed(() =>
 
 onMounted(async () => {
   const status = await fetchStatus()
-  if (!status.initialized) {
+  if (!status.initialized && !status.legacyMode) {
     await router.replace('/setup')
     return
   }
@@ -118,15 +118,11 @@ async function submit() {
           >
             {{ t('auth.password') }}
           </label>
-          <UInput
+          <PasswordInput
             id="register-password"
             v-model="password"
-            type="password"
             :placeholder="t('setup.passwordPlaceholder')"
             autocomplete="new-password"
-            size="lg"
-            class="w-full"
-            :ui="{ root: 'w-full' }"
           />
           <PasswordStrength :password="password" />
         </div>
@@ -138,15 +134,11 @@ async function submit() {
           >
             {{ t('auth.confirmPassword') }}
           </label>
-          <UInput
+          <PasswordInput
             id="register-confirm"
             v-model="confirmPassword"
-            type="password"
             :placeholder="t('setup.confirmPlaceholder')"
             autocomplete="new-password"
-            size="lg"
-            class="w-full"
-            :ui="{ root: 'w-full' }"
           />
         </div>
 

app/pages/setup.vue

@@ -9,7 +9,8 @@ const { setup, migrate, fetchStatus } = useAuth()
 const toast = useToast()
 const { t } = useI18n()
 
-const isMigrate = computed(() => route.query.migrate === '1')
+const needsMigration = ref(false)
+const isMigrate = computed(() => needsMigration.value || route.query.migrate === '1')
 
 const username = ref('')
 const password = ref('')
@@ -26,6 +27,11 @@ const canSubmit = computed(() =>
 
 onMounted(async () => {
   const status = await fetchStatus()
+  needsMigration.value = status.needsMigration
+  if (status.legacyMode && !status.needsMigration) {
+    await router.replace('/')
+    return
+  }
   if (status.initialized && !status.needsMigration) {
     await router.replace('/')
   }
@@ -129,15 +135,11 @@ async function submit() {
           >
             {{ t('auth.password') }}
           </label>
-          <UInput
+          <PasswordInput
             id="setup-password"
             v-model="password"
-            type="password"
             :placeholder="t('setup.passwordPlaceholder')"
             autocomplete="new-password"
-            size="lg"
-            class="w-full"
-            :ui="{ root: 'w-full' }"
           />
           <PasswordStrength :password="password" />
         </div>
@@ -149,15 +151,11 @@ async function submit() {
           >
             {{ t('auth.confirmPassword') }}
           </label>
-          <UInput
+          <PasswordInput
             id="setup-confirm"
             v-model="confirmPassword"
-            type="password"
             :placeholder="t('setup.confirmPlaceholder')"
             autocomplete="new-password"
-            size="lg"
-            class="w-full"
-            :ui="{ root: 'w-full' }"
           />
         </div>
 

i18n/locales/en.json

@@ -64,6 +64,8 @@
     "setupFailed": "Setup failed. Check your input",
     "migrateFailed": "Migration failed. Check your input",
     "passwordMismatch": "Passwords do not match",
+    "showPassword": "Show password",
+    "hidePassword": "Hide password",
     "registerSuccess": "Registered successfully",
     "errors": {
       "invalidUsername": "Username must be 3–32 letters, numbers, or underscores",
@@ -93,7 +95,6 @@
     "new": "New password",
     "confirmNew": "Confirm new password",
     "newPlaceholder": "Set new password",
-    "mismatch": "New passwords do not match",
     "changed": "Password updated",
     "tooShort": "New password must be at least 8 characters",
     "changeFailed": "Failed to change password",

i18n/locales/zh-CN.json

@@ -64,6 +64,8 @@
     "setupFailed": "初始化失败，请检查输入",
     "migrateFailed": "迁移失败，请检查输入",
     "passwordMismatch": "两次输入的密码不一致",
+    "showPassword": "显示密码",
+    "hidePassword": "隐藏密码",
     "registerSuccess": "注册成功",
     "errors": {
       "invalidUsername": "用户名需为 3–32 位字母、数字或下划线",
@@ -93,7 +95,6 @@
     "new": "新密码",
     "confirmNew": "确认新密码",
     "newPlaceholder": "设置新密码",
-    "mismatch": "两次输入的新密码不一致",
     "changed": "密码已修改",
     "tooShort": "新密码至少 8 位",
     "changeFailed": "修改密码失败",

package-lock.json

@@ -1,19 +1,18 @@
 {
   "name": "pichost",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pichost",
-      "version": "1.0.3",
+      "version": "1.0.4",
       "hasInstallScript": true,
       "license": "MIT",
       "dependencies": {
         "@iconify-json/lucide": "^1.2.114",
         "@nuxt/ui": "^4.9.0",
         "@nuxtjs/i18n": "^10.6.0",
-        "jose": "^6.0.11",
         "nuxt": "^4.4.8",
         "sharp": "^0.35.3",
         "tailwindcss": "^4.3.1"
@@ -12242,15 +12241,6 @@
         "jiti": "lib/jiti-cli.mjs"
       }
     },
-    "node_modules/jose": {
-      "version": "6.2.3",
-      "resolved": "https://registry.npmmirror.com/jose/-/jose-6.2.3.tgz",
-      "integrity": "sha512-YYVDInQKFJfR/xa3ojUTl8c2KoTwiL1R5Wg9YCydwH0x0B9grbzlg5HC7mMjCtUJjbQ/YnGEZIhI5tCgfTb4Hw==",
-      "license": "MIT",
-      "funding": {
-        "url": "https://github.com/sponsors/panva"
-      }
-    },
     "node_modules/js-tokens": {
       "version": "4.0.0",
       "resolved": "https://registry.npmmirror.com/js-tokens/-/js-tokens-4.0.0.tgz",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "pichost",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "Self-hosted image hosting for your NAS / home server — Nuxt admin UI, local disk storage, server-side WebP compression, referer protection, Twikoo/EasyImage compatible.",
   "homepage": "https://github.com/O96u/PicHost#readme",
   "repository": {
@@ -39,7 +39,6 @@
     "@iconify-json/lucide": "^1.2.114",
     "@nuxt/ui": "^4.9.0",
     "@nuxtjs/i18n": "^10.6.0",
-    "jose": "^6.0.11",
     "nuxt": "^4.4.8",
     "sharp": "^0.35.3",
     "tailwindcss": "^4.3.1"

vitest.config.ts

@@ -3,6 +3,6 @@ import { defineConfig } from 'vitest/config'
 export default defineConfig({
   test: {
     environment: 'node',
-    include: ['server/**/*.test.ts']
+    include: ['server/**/*.test.ts', 'scripts/**/*.test.ts']
   }
 })